Free CCST Networking Exam Flashcards

A seven-layer reference model for describing how data moves from an application to a network medium and back again. It helps technicians isolate whether an issue is physical, addressing-related, transport-related, or application-facing.

The layer concerned with bits on the medium: copper signals, fiber light, wireless radio, connectors, pinouts, and link presence. If a cable is unplugged or a radio signal is weak, start here.

The layer that packages bits into frames for a local network and uses MAC addresses for local delivery. Ethernet switching and wireless frame delivery are common technician-level examples.

The layer that uses logical addresses such as IPv4 or IPv6 to move packets between networks. Routing decisions and default gateway logic belong here.

The layer that supports application conversations between endpoints. TCP adds reliability and sequencing; UDP favors low overhead for traffic that can tolerate loss or handles recovery elsewhere.

A practical model used to describe Internet networking. It groups network access, Internet addressing and routing, transport services, and application protocols into a smaller stack than OSI.

Bandwidth is the capacity of a link or service. Throughput is the actual data rate achieved after congestion, interference, device limits, retransmissions, and protocol overhead.

Domain Name System translates names that people use into IP addresses that devices use. If an IP address works but a website name does not, DNS should be part of the investigation.

Dynamic Host Configuration Protocol provides clients with usable IP settings, commonly including address, subnet mask or prefix, default gateway, and DNS servers.

Address Resolution Protocol lets an IPv4 device discover the local MAC address associated with a known local IPv4 address. It is used before Ethernet can deliver the frame on the LAN.

A 32-bit logical address written in dotted-decimal form. A host needs an address plus a subnet mask to decide whether a destination is local or must be sent to a gateway.

A value that separates the network portion of an IPv4 address from the host portion. Matching network portions mean local delivery; different network portions require routing.

A slash notation that states how many address bits identify the network, such as /24. It is a compact way to express the same network boundary a subnet mask provides.

The router address a host sends traffic to when the destination is outside the local subnet. A wrong gateway can make local resources work while remote networks fail.

An address reserved for internal networks and not routed directly across the public Internet. Private hosts normally use NAT or another routed path to reach Internet services.

A self-assigned IPv4 address in the 169.254.0.0/16 range. It often means the host could not obtain DHCP settings and may only communicate with nearby link-local peers.

IPv6 uses hexadecimal groups separated by colons. Zero compression can shorten the written form, but the address still represents a much larger address space than IPv4.

The slash value in an IPv6 address tells how much of the address identifies the network prefix. Hosts use it to determine whether a destination is on-link or requires a router.

An IPv6 address used on the local link for neighbor discovery and local router communication. It is not meant to be routed across the wider network.

A MAC address identifies a network interface for local frame delivery. An IP address identifies an endpoint logically so traffic can be routed between networks.

A switch connects devices on the same local network and forwards frames based on learned MAC addresses. It reduces unnecessary traffic compared with repeating every frame everywhere.

A switch table that maps learned MAC addresses to switch ports. The switch builds it by reading the source MAC address of frames arriving on each port.

Traffic sent to every device in the local broadcast domain. ARP requests are a common example, which is why large flat networks can become noisy and harder to manage.

A virtual LAN separates devices into different logical Layer 2 networks on switching infrastructure. Devices in different VLANs need routing to communicate.

A switch port assigned to one VLAN for an endpoint such as a PC, printer, or access point connection. It is usually the expected port type for ordinary client devices.

A switch port that carries traffic for multiple VLANs between network devices. If a trunk is misconfigured, whole VLANs can appear unreachable beyond that link.

A router forwards packets between different networks using destination IP addresses and a routing table. It is the device a host normally uses as its default gateway.

A list of known network destinations and the next hop or exit interface used to reach them. Routers consult it when choosing where to send packets next.

A manually configured route. It can be simple and predictable, but it does not automatically adapt when the network path changes.

Routers exchange route information through a routing protocol so paths can update as the network changes. At support level, know that it reduces manual route maintenance.

Network Address Translation changes address information as traffic crosses a boundary, commonly allowing private inside addresses to share reachable outside connectivity.

A device that bridges wireless clients onto a wired or routed network. It provides radio coverage, enforces wireless settings, and connects clients to upstream infrastructure.

The wireless network name clients see and select. Similar SSID names can confuse users, so technicians should confirm the exact network before changing settings.

The 2.4 GHz band often reaches farther but is more crowded. The 5 GHz band usually offers more channel options and less congestion but may have shorter practical range.

Signal quality can be affected by distance, walls, neighboring networks, device placement, and non-Wi-Fi sources of radio noise. A strong password does not solve a weak signal.

A shorthand for Wi-Fi Protected Access security versions. For basic support, prefer current secure modes, avoid open networks for sensitive use, and document legacy compatibility needs before weakening security.

Unshielded twisted-pair copper cable used for common Ethernet links. Twisted pairs help reduce interference, and the cable normally terminates in an RJ-45 style connector.

A cable type that carries data as light through glass or plastic strands. It is useful where high capacity, longer distance, or resistance to electromagnetic interference is important.

A patch cable commonly connects an endpoint to a switch or wall jack. Uplink connections join network devices or upstream paths and should be documented carefully during troubleshooting.

Link and activity LEDs give quick physical-layer clues. No light may indicate no link, while activity changes can show that frames are moving, subject to the device model's documentation.

Use a repeatable process: identify the symptom, gather facts, form a likely cause, test carefully, apply a supported fix, verify service, and document the result.

Start with the device and nearby network: link state, Wi-Fi association, IP settings, gateway, and DNS. This prevents chasing remote causes when the local setup is broken.

A diagnostic tool used to test basic IP reachability. Successful replies suggest a path exists, while failures require context because firewalls, routing, DNS, or host status may be involved.

A path-discovery command that shows router hops toward a destination. It helps locate where forwarding may stop, but filtered responses can make interpretation incomplete.

A packet capture can show what traffic actually leaves or reaches an interface. Save the capture with clear notes so another technician can review evidence instead of guesses.

A security device or software control that permits or blocks traffic based on rules. Firewalls can protect networks, but overly broad or incorrect rules can also cause connectivity failures.

Give users and services only the access needed for their role. It reduces damage from mistakes, stolen credentials, and compromised accounts.

Initial device setup should replace default passwords, avoid unnecessary services, apply supported updates, and use appropriate encryption before the device is trusted on a network.

Read-only commands that display device state, such as interface status, configuration, or routing information. A support technician should capture relevant output without making unauthorized changes.

Before and after a device change, record what was requested, what was changed, who approved it, and how service was verified. Good notes make rollback and escalation possible.