🚧 Under construction — VoTechWorks is being built. A free tech program — complimentary, as our commitment to get America working.
voTechWorksGrade 13 · a vocational technology learning center, by urbanicity
newSchoolWorks.com › VoTechWorks › Technology & Design › IT Support / Networking › Certification Exam Preparation: CompTIA A+, Network+, Cisco CCST & CCNA › Lesson 3
TEC-ITS43-09 · Lesson 3 · 12 clock hours · practice

Cisco CCST Networking Exam Topic Review

Objective. Students will answer timed practice sets covering all Cisco CCST Networking exam topic areas — standards and concepts, addressing and subnetting, endpoints and media types, infrastructure, diagnosing problems, and security — and score at or above Cisco's published passing threshold on a full-length simulation.

⚠ Pending professional review

This lesson, its worked examples and its practice questions has not yet been verified by an industry-certified professional or by a certification or approval body. It is a study draft and may contain errors. Do not use it as instructions for work on a job site or on live equipment. Always follow your instructor, your supervising professional, and current official references and regulations.

VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.

Cisco CCST Networking Exam Overview

The Cisco Certified Support Technician (CCST) Networking exam is Cisco's entry-level networking credential. It targets candidates who can perform basic network support tasks, interpret documentation, and communicate clearly about network concepts. The exam blueprint organizes content into six topic areas: Standards and Concepts, Addressing and Subnetting, Endpoints and Media Types, Infrastructure, Diagnosing Problems, and Security. Mastering each area — and understanding how they connect — is your path to a passing score.

Standards and Concepts

The OSI model and the TCP/IP model are the two frameworks that explain how data moves across a network. The OSI model has seven layers: Physical, Data Link, Network, Transport, Session, Presentation, and Application. The TCP/IP model condenses these into four layers: Network Access, Internet, Transport, and Application. When you troubleshoot, you systematically work up or down these layers to isolate problems.

Key protocols to know include: IP (Network/Internet layer), TCP and UDP (Transport layer), HTTP/HTTPS, DNS, DHCP, and FTP (Application layer). TCP is connection-oriented and guarantees delivery; UDP is connectionless and trades reliability for speed. DNS resolves hostnames to IP addresses; DHCP automatically assigns IP configuration to hosts.

Ethernet standards define how data travels over wired media. Common standards include Fast Ethernet (100 Mbps), Gigabit Ethernet (1 Gbps), and 10-Gigabit Ethernet. Wi-Fi standards — 802.11a/b/g/n/ac/ax — govern wireless transmission. You should know the approximate speeds and frequency bands associated with each generation.

Addressing and Subnetting

Every device on an IP network needs a unique address. IPv4 addresses are 32-bit numbers written in dotted-decimal notation (for example, 192.168.1.10). IPv6 addresses are 128-bit numbers written in hexadecimal groups separated by colons.

Subnetting divides a larger network into smaller logical segments to control broadcast traffic and improve security. The subnet mask identifies which portion of an IP address is the network part and which is the host part. CIDR (Classless Inter-Domain Routing) notation expresses the subnet mask as a prefix length — for example, /24 means 24 network bits and 8 host bits, giving 256 addresses (254 usable hosts) per subnet.

For CCST, you must calculate subnets without a calculator. Start by memorizing the powers of 2 up to 2^8 = 256. To find the number of hosts per subnet, use the formula 2^h − 2, where h is the number of host bits. Subtract two because the network address and the broadcast address are not assignable to hosts.

Private IPv4 ranges reserved for internal use are: 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. Packets using these addresses are not routed across the public internet; NAT (Network Address Translation) is used at the gateway to map private addresses to public ones.

Endpoints and Media Types

Endpoints include computers, smartphones, printers, IP cameras, and IoT devices — anything that sends or receives data. Each endpoint connects to the network through a network interface card (NIC).

Wired media types commonly tested on CCST include:

Connector types include RJ-45 (twisted-pair Ethernet), LC and SC (fiber), and F-type (coaxial). Cisco Packet Tracer lets you select the correct cable type between devices — always match cable to interface (straight-through for unlike devices, crossover for like devices, though modern switches auto-negotiate).

Infrastructure

Core infrastructure devices you must know:

In Packet Tracer, use `show ip interface brief` on a router or switch to verify interface IP addresses and status. Use `show mac address-table` to see what MAC addresses a switch has learned.

Diagnosing Problems

A systematic troubleshooting process saves time. The general approach is: define the problem, gather information, identify the most probable cause, test a solution, verify the fix, and document the resolution.

Essential command-line tools:

Common problems include incorrect IP addressing, wrong default gateway, unplugged cables (check link lights), and DHCP failures. Always start with the physical layer — confirm cables are seated and LEDs are active before investigating software configuration.

Security

CCST security topics focus on foundational concepts. Threats you should recognize include: malware (viruses, ransomware, spyware), phishing, denial-of-service (DoS) attacks, and unauthorized access.

Defensive practices include: using strong, unique passwords; enabling WPA2 or WPA3 on wireless networks; keeping software and firmware updated; and applying the principle of least privilege — users receive only the access they need. On Cisco devices, always set a console password, enable password, and use `service password-encryption` to avoid storing passwords in plaintext in the running configuration.

Safety Reminder

When working with physical network equipment in a lab, keep cables organized to avoid trip hazards. When racking equipment, use proper lifting technique or ask for assistance with heavy units. Do not work inside powered equipment unless you are trained to do so — follow lockout/tagout procedures if maintenance requires accessing internal components. Electrostatic discharge (ESD) can damage NICs and other components; use an antistatic wrist strap when handling circuit boards or expansion cards.

Key terms10

OSI ModelA seven-layer conceptual framework (Physical, Data Link, Network, Transport, Session, Presentation, Application) used to describe how data travels across a network and to guide troubleshooting.
CIDR (Classless Inter-Domain Routing)A method of expressing subnet masks as a prefix length (e.g., /24) that indicates how many bits represent the network portion of an IP address.
Subnet MaskA 32-bit value that distinguishes the network portion of an IPv4 address from the host portion, enabling routers and hosts to determine whether a destination is local or remote.
Default GatewayThe IP address of the router interface that a host sends packets to when the destination is on a different network.
DHCP (Dynamic Host Configuration Protocol)A protocol that automatically assigns IP addresses, subnet masks, default gateway addresses, and DNS server addresses to hosts on a network.
NAT (Network Address Translation)A technique that maps private (internal) IP addresses to one or more public IP addresses, allowing internal hosts to communicate across the internet without exposing their private addresses.
PingA command-line utility that sends ICMP echo request messages to a target IP address to test Layer 3 connectivity and measure round-trip time.
WPA2/WPA3Wi-Fi Protected Access security protocols that encrypt wireless communications; WPA3 is the current standard and provides stronger protections than WPA2.
Traceroute (tracert)A command-line tool that records and displays the sequence of routers (hops) a packet passes through on the way to a destination, helping identify where a network failure or delay occurs.
ESD (Electrostatic Discharge)The sudden flow of electricity between objects with different electrical potentials; can silently damage or destroy electronic components such as NICs and RAM. Prevented by using an antistatic wrist strap.

Worked examples4

1. How many usable host addresses are available in the subnet 192.168.10.0/27?
  1. A /27 prefix means 27 bits are network bits. Subtract from 32 total bits: 32 − 27 = 5 host bits.
  2. Calculate the total number of addresses in the subnet: 2^5 = 32.
  3. Subtract 2 (network address and broadcast address) to get usable hosts: 32 − 2 = 30.
  4. The network address is 192.168.10.0 and the broadcast address is 192.168.10.31, so assignable host addresses run from 192.168.10.1 through 192.168.10.30.
Answer: 30 usable host addresses (192.168.10.1 – 192.168.10.30).
2. A network administrator needs to create 6 subnets from the 10.0.0.0/24 network, with each subnet supporting at least 25 hosts. What prefix length should be used?
  1. Determine the minimum host bits needed for 25 hosts. 2^4 = 16 (too few); 2^5 = 32, and 32 − 2 = 30 usable hosts. So 5 host bits are required.
  2. Calculate the prefix length: 32 − 5 = /27.
  3. Verify the number of subnets: borrowing 3 bits from the original /24 host portion gives 2^3 = 8 subnets, which satisfies the requirement of 6.
  4. Each /27 subnet provides 30 usable host addresses, which meets the requirement of at least 25 hosts per subnet.
Answer: /27 provides 8 subnets each with 30 usable hosts — satisfies both requirements.
3. A host has the IP address 172.16.5.100 with a subnet mask of 255.255.255.192 (/26). What is the network address, broadcast address, and valid host range for this subnet?
  1. Convert /26 to host bits: 32 − 26 = 6 host bits. Block size = 2^6 = 64.
  2. The interesting octet is the fourth. Identify which block of 64 the host address falls into: 0–63, 64–127, 128–191, 192–255. The host value is 100, which falls in the 64–127 block.
  3. Network address: 172.16.5.64 (first address of the block).
  4. Broadcast address: 172.16.5.127 (last address of the block, 64 + 64 − 1 = 127).
  5. Valid host range: 172.16.5.65 through 172.16.5.126 (126 − 65 + 1 = 62 usable hosts).
Answer: Network: 172.16.5.64 | Broadcast: 172.16.5.127 | Hosts: 172.16.5.65 – 172.16.5.126 (62 usable).
4. You run `ping 8.8.8.8` from a workstation and the ping fails. You then run `ping 192.168.1.1` (the default gateway) and it succeeds. Which layer of the OSI model is functioning correctly, and what is the most likely cause of the failure?
  1. A successful ping to the default gateway (192.168.1.1) confirms that the local network (Layer 1–3) between the workstation and the router is functioning correctly.
  2. A failed ping to 8.8.8.8 (a public internet address) indicates that packets are reaching the router but not successfully traveling beyond it.
  3. Most likely causes include: the router has no route to the internet (WAN link is down or misconfigured), the ISP connection is down, or a firewall beyond the router is blocking ICMP.
  4. Next step: check the router's WAN interface status and default route (`show ip route` in Packet Tracer or on a real Cisco device).
Answer: Layers 1–3 are functioning locally. The most likely cause is a failed or misconfigured WAN/uplink connection on the router, or a missing default route to the internet.

The math in this lesson1

Learners compute usable hosts for a /27 as 2^5 - 2 = 30 and identify network and broadcast addresses.
8.EE.1
In class: Complete topic-area question sets aligned to the published CCST Networking exam blueprint; for each topic, students use Cisco Packet Tracer to perform a matching configuration or verification task (e.g., identify cable types, verify IP addressing, describe the purpose of a network device) to anchor conceptual answers to hands-on reality. · Practice subnetting and IPv4/IPv6 addressing drills without a calculator, targeting the speed and accuracy needed for CCST-level questions; use a subnetting worksheet that progresses from classful review through CIDR notation, with peer checking of all answers. · Complete a full-length timed CCST Networking simulation exam; after the exam, use the result to populate the student's personal exam-readiness plan with specific CCST topic areas requiring further review and list at least two Cisco-published study resources (Cisco Networking Academy course, Cisco Press materials) for each weak area.
Materials: CCST Networking practice question bank (Cisco Networking Academy or approved third-party); Cisco CCST Networking exam topic list (published by Cisco); Cisco Packet Tracer; subnetting drill worksheets; student exam-readiness plan template.
Check: Student achieves a score at or above Cisco's published CCST passing threshold on the full-length simulation; instructor reviews the completed exam-readiness plan entry for CCST and confirms all topic areas are addressed with specific resources.

Practice check8

Answer each question, then check it. Nothing is recorded; this is your own practice.

Cisco CCST Networking – Infrastructure
1. A network technician wants to verify the IP address assigned to the FastEthernet 0/0 interface of a Cisco router. Which command should be used?
Cisco CCST Networking – Addressing and Subnetting
2. Which IPv4 address range is reserved for private use and is NOT routable on the public internet?
Cisco CCST Networking – Addressing and Subnetting
3. How many usable host addresses does a /29 subnet provide?
Cisco CCST Networking – Diagnosing Problems
4. A user reports they cannot reach any websites but can ping the default gateway. Which troubleshooting tool would BEST help determine whether the problem is DNS-related?
Cisco CCST Networking – Security
5. Which wireless security protocol is the current standard and provides the strongest encryption for Wi-Fi networks?
Cisco CCST Networking – Endpoints and Media Types
6. Which cable type is MOST appropriate for connecting two buildings that are 800 meters apart with no tolerance for electromagnetic interference?
Cisco CCST Networking – Standards and Concepts
7. At which OSI layer does a switch make forwarding decisions based on MAC addresses?
Cisco CCST Networking – Security
8. A Cisco router's running configuration shows passwords stored in plain text. Which command should be applied globally to encrypt all currently unencrypted passwords in the configuration?
Record this lesson on my transcript. Sign in with your key and enrollment email to record lessons (enroll free if you have no key). This page stays open to read and practise.
← Previous lessonProgram planNext lesson →