CCNA Network Fundamentals & Concepts Flashcards

A set of vocabulary flashcards based on CCNA practice exam questions covering routing, switching, wireless, security, and automation concepts.

DHCP Snooping

A Layer 2 security feature that validates address requests and filters out invalid or untrusted DHCP messages.

Trunk Port

A switch port configuration option that allows traffic from multiple VLANs to travel over the same physical link.

API Keys Rate Limiting

The practice of using API keys to uniquely identify client applications and monitor their usage patterns to prevent excessive requests.

Trivial File Transfer Protocol (TFTP)

A simple file transfer protocol that omits username and password requirements while acknowledging all transmitted data.

Hot Standby Router Protocol (HSRP)

A gateway redundancy protocol designed to ensure user traffic on a LAN rapidly recovers from the failure of an edge routing device using virtual MAC addressing.

QoS Traffic Shaping

A Quality of Service technique that levels out traffic bursts and limits bandwidth by delaying excess packets in a queue.

CNAME Record

A DNS record type used to associate an alias name with a canonical domain name.

Virtual Routing and Forwarding (VRF)

A technology that allows multiple instances of a routing table to co-exist on the same physical router simultaneously, providing logical Layer 3 separation.

Virtualization

A technology that enables multiple operating systems and virtual machines to run simultaneously on a single physical host server.

Multifactor Authentication (MFA)

A security process that confirms an end-user's identity by requiring two or more independent authentication factors before granting access.

Ansible

An agentless network automation tool that uses YAML-formatted playbooks to deploy and push configurations to client devices.

Syslog Logging Facility

A parameter in syslog messages that identifies the specific program, subsystem, or process on a device that generated the log event.

Bridge Mode (AP)

An Access Point operational mode used to wirelessly connect two separate network segments, typically located in different campus buildings.

Unknown Unicast Flooding

The switch behavior of forwarding an incoming Layer 2 frame out of all ports within the same VLAN, except the receiving port, when its destination MAC address is not present in the MAC address table.

Layer 3 EtherChannel Interface Configuration

In a Layer 3 EtherChannel bundle, the IP address is configured directly on the logical port-channel interface rather than on individual member physical interfaces.

WLC Download File Tab (SFTP)

A wireless controller management interface tab used to install new software code over TCP port 22 by setting Transfer Mode to SFTP and referencing the file server IP address.

Routing Table Components Matching

In a Cisco routing table entry like $O\ 192.168.20.96/28\ [110/30]$, $/28$ represents the Subnet Prefix, $110$ represents the Administrative Distance, and $30$ represents the Metric/Cost.

TCP vs UDP Characteristics

TCP uses a three-way handshake, provides a reliable connection, and is preferred for web browsing. UDP is a connectionless protocol, offers faster data transmission, and is preferred for streaming and VoIP.

Longest Prefix Match (Routing)

The router forwarding algorithm that selects the route entry with the most specific (longest) subnet mask matching the destination IP address.

DHCP Relay (ip helper-address)

A router interface configuration command (ip\ helper\-address\ ) applied on the client-facing interface to forward broadcast DHCP requests as unicast packets to a central DHCP server.

Port Security Protect Mode

A port security violation mode where packets from unknown source MAC addresses are dropped, but no syslog message is sent, the violation counter does not increment, and the interface remains operational.

WPA3-Personal

A Wi-Fi security standard that utilizes Simultaneous Authentication of Equals (SAE) for pre-shared keys and mandates Protected Management Frames (PMF) to prevent eavesdropping and management frame spoofing.