Read the evidence · explain the choice

AP Networking DHCP Leases and Relays Practice Test

Solve 75 DHCP questions on allocation stages, renewal and rebinding, relay subnet selection, effective options, pool capacity, identity matching, conflicts, and lifecycle verification.

Independent practice · Published and updated October 4, 2026 · Free for students and teachers

What this test measures

This test checks client allocation state, acknowledged validity, relay return delivery, pool ownership, and applied configuration. Each difficulty has 25 questions; complete all three for 75. Easy emphasizes direct application, Medium combines evidence, and Hard asks you to choose among plausible diagnoses or evaluate what a result actually proves.

These are independent instructional questions, not released College Board items or a replica of Bluebook. The difficulty labels are local teaching choices; a score here does not predict an AP score.

For explanation before testing, use the dhcp leases and relays guide. Return to AP Networking Practice Tests by Topic to compare results across topics instead of repeating only your strongest subject.

For the prerequisite decision, review the related earlier topic test. This test adds its own focused scenarios and explanations.

Take the 25-question test for your selected level

Choose one answer to receive immediate feedback. Your first selection is scored; read the explanation before moving on. Use keyboard Tab to reach controls and arrow keys within the answer group. You can use these as untimed diagnostic practice, pausing to write your reasoning.

Changing difficulty or restarting clears the current attempt. Download your log first if you want to keep it.

Read the boundary before naming the fault

Representative reasoning

An eight-hour lease with default timers begins at 09:00. T1 is four hours later at 13:00, T2 is seven hours later at 16:00, and expiration is 17:00. The client first seeks its original server, then broadens the attempt during rebinding. If no valid extension arrives by expiration, it must stop using the assignment.

Identify the client state before interpreting DHCPREQUEST. Follow client identity and transaction through the relevant request and response, then inspect the acknowledged address, mask, router and resolver settings at the endpoint. For a relay, show both request forwarding and reply delivery.

Separate lease boundaries

09:00  Eight-hour lease begins
13:00  Default T1: original-server renewal
16:00  Default T2: broadcast rebinding
17:00  Expiry without an accepted extension: stop use

A tempting shortcut to avoid

An OFFER is not a completed lease, a server-side ACK log is not proof of client receipt, and a configured option is not necessarily the option currently applied on an old lease. A full pool affects new allocation differently from an unreachable renewal server.

A worked decision

A .100–.149 range contains 50 addresses. Ten are excluded and 35 other addresses are leased, leaving five available under the stated conditions. Before resizing, check effective reservations, holds and client identity churn. After an approved repair, test new allocation and the relevant renewal path while preserving existing valid assignments.

For a second representation of the same skill, review the related topic explanation. Compare its evidence with your calculation or packet-path sketch rather than memorizing the answer letter.

How to read the explained question library

All 75 items are available below as ordinary HTML. Open a question to view its choices, answer, and explanation. For retrieval practice, read the prompt, write a decision without opening it, then compare your reasoning. This library also gives teachers a stable question ID for discussion.

The six groups contain two halves of each difficulty, with 12 and 13 questions respectively. The interactive version uses the same questions and answer keys.

Easy explained questions · 1–12

Start by identifying the function or applying one explicit rule. These 12 questions are 1–12 of the easy set.

dhcp-easy-1 · A new IPv4 client broadcasts DHCPDISCOVER. What is it initially trying to locate?
  1. Relinquish a previously leased address
  2. Renew an existing unexpired assignment
  3. Confirm a specific offer already selected
  4. A DHCP server willing to offer configuration

Correct answer: D. A DHCP server willing to offer configuration

Discovery begins the initial DHCP exchange. It asks for configuration rather than resolving a hostname or testing an application.

dhcp-easy-2 · Which initial DHCP message proposes an available address and associated settings?
  1. DHCPOFFER
  2. DHCPACK
  3. DHCPNAK
  4. DHCPREQUEST

Correct answer: A. DHCPOFFER

An offer proposes configuration. The client still requests its chosen offer and needs an acknowledgement before using the assignment normally.

dhcp-easy-3 · After selecting an offer during initial allocation, which message identifies the client's requested choice?
  1. DHCPINFORM
  2. DHCPREQUEST
  3. DHCPDECLINE
  4. DHCPDISCOVER

Correct answer: B. DHCPREQUEST

The selecting client broadcasts a request that identifies its chosen server and requested address, allowing other offering servers to withdraw their offers.

dhcp-easy-4 · Which reply normally confirms an accepted DHCP address assignment?
  1. DHCPACK
  2. DHCPNAK
  3. DHCPOFFER
  4. DHCPINFORM

Correct answer: A. DHCPACK

An acknowledgement confirms the assignment and its parameters. An offer alone is not the completed allocation.

dhcp-easy-5 · A DHCP lease specifies a duration. What does that duration limit?
  1. The time a TCP session must stay open
  2. The switch's MAC aging interval
  3. How long the client may use the assignment without extending it
  4. The resolver's positive cache lifetime

Correct answer: C. How long the client may use the assignment without extending it

A lease is a time-limited address assignment. The client must renew or stop using it when the valid lease expires.

dhcp-easy-6 · Which DHCP configuration item tells an IPv4 host where to send off-subnet traffic?
  1. The domain name server option
  2. The router option
  3. The subnet mask option alone
  4. The server identifier alone

Correct answer: B. The router option

The router option commonly supplies a default gateway. A leased address does not by itself establish the correct off-subnet next hop.

dhcp-easy-7 · A server gives a /24 mask to a client. Which client decision depends directly on that mask?
  1. Which server offered the longest lease
  2. Which recursive resolver to query
  3. Which transport listener is open
  4. Whether a destination is on its local IP subnet

Correct answer: D. Whether a destination is on its local IP subnet

The address and mask determine the local subnet comparison. The client then uses a local neighbor or an appropriate route.

dhcp-easy-8 · A DHCP server is on subnet B and new clients are on subnet A. The diagram shows a router between them but no relay. What prerequisite is missing from the initial allocation design?
  1. A supported way to relay the client broadcast exchange to that server
  2. A public hostname for the DHCP server before client discovery
  3. A longer lease on unconfigured clients
  4. A web listener on the router

Correct answer: A. A supported way to relay the client broadcast exchange to that server

Ordinary routers do not simply route the initial client broadcast to a remote server. An intended relay path or a suitable local server is needed.

dhcp-easy-9 · What does a DHCP scope ordinarily define?
  1. Only a list of active DNS aliases
  2. A pool and settings for a client subnet
  3. Only a table of switch MAC locations
  4. Only the server's management address

Correct answer: B. A pool and settings for a client subnet

A scope groups address allocation and associated settings for a network. Relay and server selection must match the intended client subnet.

dhcp-easy-10 · Why exclude a statically assigned printer address from a dynamic pool?
  1. To avoid leasing that same address to another endpoint
  2. To stop all DHCP clients using the printer's gateway
  3. To make the printer obtain a different address on every reboot
  4. To prevent the printer from sending ARP

Correct answer: A. To avoid leasing that same address to another endpoint

Exclusions prevent overlapping assignment. The printer's static configuration must still fit the subnet and gateway design.

dhcp-easy-11 · A laboratory device must keep its approved address while continuing to receive DHCP options. Which allocation approach fits?
  1. A static address with all DHCP configuration disabled
  2. A randomly selected address with a shorter lease
  3. A DNS alias without a server allocation rule
  4. A correctly matched reservation on the DHCP server

Correct answer: D. A correctly matched reservation on the DHCP server

A reservation retains DHCP configuration delivery while directing the identified client to the intended address. Verify the matching identity and nonconflicting ownership.

dhcp-easy-12 · A client reports 169.254.18.7 after failing to obtain a lease. What is the appropriate conclusion?
  1. The client necessarily has a working off-subnet default route
  2. The server's scope necessarily contains that link-local range
  3. It has selected an IPv4 link-local address; investigate the missing DHCP assignment
  4. The approved server necessarily acknowledged that address

Correct answer: C. It has selected an IPv4 link-local address; investigate the missing DHCP assignment

IPv4 link-local selection can follow failure to obtain usable configuration. It is evidence about local configuration, not proof of the specific DHCP failure cause.

Easy explained questions · 13–25

Start by identifying the function or applying one explicit rule. These 13 questions are 13–25 of the easy set.

dhcp-easy-13 · Which message can a client send to relinquish its leased address?
  1. DHCPINFORM
  2. DHCPRELEASE
  3. DHCPREQUEST
  4. DHCPDECLINE

Correct answer: B. DHCPRELEASE

A release tells the server the client is giving up the assignment. Servers still need lease expiration handling for clients that disappear without releasing.

dhcp-easy-14 · A client detects that the offered address is already in use. Which DHCP message reports this condition?
  1. DHCPNAK
  2. DHCPINFORM
  3. DHCPRELEASE
  4. DHCPDECLINE

Correct answer: D. DHCPDECLINE

A decline reports that the assigned address appears occupied. Investigate conflicting ownership rather than repeatedly handing out the same address.

dhcp-easy-15 · What does a DHCPNAK tell a client about its requested configuration?
  1. A statement that a DNS name is absent
  2. A successful extension of the requested lease
  3. A proposed offer that the client may select normally
  4. The request cannot be accepted as valid by the responding server

Correct answer: D. The request cannot be accepted as valid by the responding server

A negative acknowledgement rejects the requested configuration. The client must return to address acquisition rather than treat it as an ACK.

dhcp-easy-16 · Why record the leased address and the server identifier together?
  1. They guarantee the supplied options are approved
  2. They replace checking the client's effective mask
  3. They prove the required application completed
  4. They help attribute the configuration to the server that supplied it

Correct answer: D. They help attribute the configuration to the server that supplied it

Attribution distinguishes legitimate and unexpected server responses. It supports comparison with the approved address plan.

dhcp-easy-17 · A lease is successfully renewed. What normally changes?
  1. The client must always move to a different subnet
  2. The assignment becomes permanent static configuration
  3. The client's lease timing is extended according to the acknowledged assignment
  4. The server automatically clears every other lease

Correct answer: C. The client's lease timing is extended according to the acknowledged assignment

Renewal extends the assignment when accepted. It does not inherently replace hardware identity or control all network routes.

dhcp-easy-18 · What is the difference between an address reservation and a manually configured endpoint address?
  1. A reservation removes all address-acquisition messages
  2. A reservation guarantees unique ownership outside DHCP
  3. A reservation still obtains its assignment through DHCP
  4. A manually set address always uses the server's lease timer

Correct answer: C. A reservation still obtains its assignment through DHCP

A reserved client uses DHCP; a manually configured endpoint does not need a DHCP address lease. Both require a nonconflicting address plan.

dhcp-easy-19 · Which configuration detail should accompany a DHCP troubleshooting capture?
  1. Only the client hostname without interface context
  2. Only the server's saved scope configuration
  3. Only an old capture from a different attachment
  4. The client interface and network where the exchange was observed

Correct answer: D. The client interface and network where the exchange was observed

DHCP is tied to the client's attachment and address context. A trace from a different interface may not represent the failed allocation.

dhcp-easy-20 · A full pool has no unassigned addresses. What is the direct allocation problem?
  1. The server must reject every renewal even for current owners
  2. The scope automatically grows beyond its configured subnet
  3. Every valid existing lease immediately expires
  4. New clients may receive no usable offer from that pool

Correct answer: D. New clients may receive no usable offer from that pool

Scope exhaustion limits new allocation. Current valid leases can continue, so the affected cohort and timing matter.

dhcp-easy-21 · Which DHCP setting commonly supplies recursive DNS server addresses to clients?
  1. The router option
  2. The lease time option
  3. The domain name server option
  4. The server identifier option alone

Correct answer: C. The domain name server option

The DNS server option supplies resolver addresses. That configuration still needs reachability and correct resolution policy.

dhcp-easy-22 · A client with a static address needs DHCP-supplied options without an address allocation. Which message supports that use?
  1. DHCPRELEASE
  2. DHCPDECLINE
  3. DHCPREQUEST for a new allocation
  4. DHCPINFORM

Correct answer: D. DHCPINFORM

DHCPINFORM requests configuration parameters for an externally configured address. It is not a new dynamic address lease.

dhcp-easy-23 · Why is a received DHCPACK not sufficient proof of Internet access?
  1. The acknowledged settings and downstream paths must still be valid
  2. Every acknowledged lease proves the gateway forwards all traffic
  3. The assigned settings are always correct because a server sent them
  4. The ACK necessarily includes a completed application transaction

Correct answer: A. The acknowledged settings and downstream paths must still be valid

DHCP completes configuration allocation. Gateway forwarding, DNS and the required service are separate checks.

dhcp-easy-24 · What is a practical reason to keep DHCP server clocks and logs consistent?
  1. To prevent static endpoints from conflicting automatically
  2. To replace the need for client identity fields
  3. To correlate leases with events and other observations
  4. To make every DHCP address permanent

Correct answer: C. To correlate leases with events and other observations

Time correlation supports reliable attribution. Accurate clocks do not by themselves eliminate overlapping allocations.

dhcp-easy-25 · A laptop is disconnected before it can send DHCPRELEASE. What normally returns its lease to availability eventually?
  1. The server's lease expiration handling
  2. The resolver cache TTL expiring
  3. The switch's MAC entry aging out
  4. The application session ending

Correct answer: A. The server's lease expiration handling

DHCP cannot depend on every client releasing cleanly. Lease lifetime limits abandoned allocations.

Medium explained questions · 1–12

Combine the configuration with the symptom before selecting a decision. These 12 questions are 1–12 of the medium set.

dhcp-medium-1 · A lease lasts eight hours and the server supplies no explicit T1 or T2. At the default T1, when does renewal begin?
  1. Seven hours after start
  2. Four hours after the lease starts
  3. Eight hours after start
  4. One hour after start

Correct answer: B. Four hours after the lease starts

The default T1 is half the lease duration. Default T2 is later, at seven eighths, and expiration is a separate boundary.

dhcp-medium-2 · For the same eight-hour lease with default timers, when does rebinding begin?
  1. Four hours after start
  2. Seven hours after the lease starts
  3. Eight hours after start
  4. Eight minutes after start

Correct answer: B. Seven hours after the lease starts

Default T2 is 0.875 of the lease duration: eight times 0.875 equals seven hours. The client still has one hour of validity remaining.

dhcp-medium-3 · During ordinary renewal at T1, to whom does the client initially send DHCPREQUEST?
  1. Every DHCP server by broadcast immediately at T1
  2. The server that granted the lease, normally by unicast
  3. Only the relay's management interface regardless of server
  4. Only whichever server last answered a DNS query

Correct answer: B. The server that granted the lease, normally by unicast

A renewing client first attempts its original server. If this fails until T2, rebinding broadens the attempt.

dhcp-medium-4 · The original server is unreachable at T2. What changes in the rebinding request?
  1. The client releases the lease and never requests again
  2. The client broadcasts a DHCPREQUEST so an available server can respond
  3. The client permanently pins the original server without rebinding
  4. The client continues the old lease indefinitely

Correct answer: B. The client broadcasts a DHCPREQUEST so an available server can respond

Rebinding seeks a server able to extend valid configuration. It differs from both original-server renewal and expired-lease use.

dhcp-medium-5 · No server responds before the current lease expires. What must the client do with that leased address?
  1. Extend it locally by the previous duration
  2. Treat it as a permanent reservation
  3. Stop using it and seek valid configuration
  4. Keep using it until the user signs out

Correct answer: C. Stop using it and seek valid configuration

A client cannot authorize its own lease extension. Expiration ends the assignment's validity unless a new valid lease is obtained.

dhcp-medium-6 · A pool spans .100 through .149 inclusive. Ten addresses are excluded and 35 of the remaining addresses are actively leased. How many are unassigned, assuming no other holds?
  1. 5
  2. 15
  3. 50
  4. 25

Correct answer: A. 5

The inclusive range has 50 addresses. Subtract ten exclusions and 35 leases: five remain available.

dhcp-medium-7 · A relay receives a client's discovery on VLAN 40. Which field helps a remote server identify that relay's client network?
  1. The client hostname option alone
  2. The DNS server option alone
  3. giaddr, the relay agent address field
  4. The lease time option alone

Correct answer: C. giaddr, the relay agent address field

The relay address identifies the client-side network for allocation and reply delivery. The server needs the matching scope and a return path.

dhcp-medium-8 · Two clients on different VLANs receive addresses from the same wrong scope after a relay change. What should be inspected first?
  1. The browser's certificate store
  2. Only the router option printed by one client
  3. The DNS server's authority role
  4. The client-facing relay address and the server's scope selection

Correct answer: D. The client-facing relay address and the server's scope selection

A relay or scope-selection error can misidentify the client subnet. Compare the actual giaddr and configured pool before changing endpoint masks individually.

dhcp-medium-9 · A packet trace shows an OFFER for transaction X, but the client's REQUEST selects another server. What is supported?
  1. Every offer in the trace was accepted
  2. The client must use both offered addresses simultaneously
  3. The first offer necessarily became the effective lease
  4. The client chose a different offer; the first OFFER alone was not its final assignment

Correct answer: D. The client chose a different offer; the first OFFER alone was not its final assignment

Initial selection identifies the chosen server. Follow the same client and transaction through request and acknowledgement.

dhcp-medium-10 · A server logs an ACK, but the client never sees it at its port. What is the next focused investigation?
  1. Trace server-to-relay-to-client reply delivery
  2. Increase lease duration without checking return delivery
  3. Clear every active lease despite the observed ACK
  4. Replace only the DNS option

Correct answer: A. Trace server-to-relay-to-client reply delivery

Server transmission is not endpoint receipt. Check relay reply handling, intervening policy and the local broadcast or unicast delivery.

dhcp-medium-11 · A client obtains the expected subnet and DNS addresses but receives a router address on another subnet. Which repair is appropriate?
  1. Correct the scope's router option and verify newly applied client settings
  2. Treat a valid address as proof that the gateway option is valid
  3. Change only the client's hostname
  4. Clear resolver cache without changing the router option

Correct answer: A. Correct the scope's router option and verify newly applied client settings

A faulty router option can prevent off-subnet reachability despite a successful lease. Verify the effective client configuration after the repair.

dhcp-medium-12 · A reserved device receives a dynamic address after its NIC replacement. What should be compared?
  1. The reservation's matching identity and the new client's identifier or hardware identity
  2. Only the scope duration
  3. Only the configured DNS addresses
  4. Only the reserved hostname label

Correct answer: A. The reservation's matching identity and the new client's identifier or hardware identity

Reservation behavior depends on the server's matching rule. A replaced NIC or changed client identifier can break that match.

Medium explained questions · 13–25

Combine the configuration with the symptom before selecting a decision. These 13 questions are 13–25 of the medium set.

dhcp-medium-13 · A captured DHCP exchange uses the same transaction ID but a different client identity from the complaint. How should it be handled?
  1. Attribute every ACK on the segment to that laptop
  2. Do not attribute it to the affected client without the matching identity and context
  3. Attribute it solely by transaction ID regardless of client
  4. Treat the latest ACK as the affected client's without context

Correct answer: B. Do not attribute it to the affected client without the matching identity and context

Transaction identifiers help match an exchange but are not permanent globally unique endpoint identities. Include client identity, interface and time.

dhcp-medium-14 · New clients fail only on VLAN 70; existing leased clients still reach services. The server pool has space. Which test best narrows the failure?
  1. Check discovery and relay delivery specifically from VLAN 70
  2. Delete all leases before observing that VLAN's request
  3. Change DNS settings on every VLAN
  4. Assume the entire server is off despite other successful allocations

Correct answer: A. Check discovery and relay delivery specifically from VLAN 70

The working leased clients and available pool narrow the issue toward that VLAN's allocation path. Verify each DHCP stage there.

dhcp-medium-15 · A device moves to another IP subnet and asks to reuse its old address. An authoritative server rejects that address. What result may follow?
  1. A DHCPNAK followed by fresh acquisition for the new subnet
  2. A permanent right to retain the old subnet's address
  3. A silent extension of the old lease despite rejection
  4. Automatic use of the same gateway on every network

Correct answer: A. A DHCPNAK followed by fresh acquisition for the new subnet

Clients can attempt to validate remembered configuration after moving. A rejected old assignment requires new valid configuration.

dhcp-medium-16 · Several reservations fall inside a pool range. What matters when counting available dynamic addresses?
  1. How this server accounts for reserved addresses and current allocation state
  2. Only the inclusive range size
  3. Only the number of currently connected devices
  4. Only the reservation count without overlaps or state

Correct answer: A. How this server accounts for reserved addresses and current allocation state

Servers may represent reserved capacity differently. Use the effective allocation rules and state, not range size alone.

dhcp-medium-17 · A rogue DHCP server offers its own gateway while the approved server also offers. What evidence best identifies the issue?
  1. Only the configured scope label
  2. Only one successful public lookup
  3. Only the presence of an approved server process
  4. Captured offers and chosen ACK tied to each server identifier and supplied options

Correct answer: D. Captured offers and chosen ACK tied to each server identifier and supplied options

Compare the actual competing offers and selected assignment. Correct-looking address syntax does not make a gateway trustworthy.

dhcp-medium-18 · DHCP snooping permits server messages only on trusted ports. A legitimate server uplink is incorrectly untrusted. What symptom fits?
  1. Its offers or acknowledgements can be dropped by the switch
  2. All client discoveries must be blocked by definition
  3. Every statically addressed endpoint must change IP
  4. The switch automatically promotes the server port to trusted

Correct answer: A. Its offers or acknowledgements can be dropped by the switch

Snooping trust configuration controls where server-originated messages are accepted. Validate the actual deployment path before changing trust.

dhcp-medium-19 · Why should an ordinary access port for student devices remain untrusted in DHCP snooping?
  1. The port's trust means the endpoint may run an approved server
  2. The port must be trusted before a client can receive any lease
  3. It should not be accepted as a source of DHCP server replies
  4. The port must reject all client discovery messages

Correct answer: C. It should not be accepted as a source of DHCP server replies

An untrusted client port can carry legitimate client DHCP traffic while server messages are restricted. Trust means a server-message source, not general client permission.

dhcp-medium-20 · A DHCP reservation exists, but another endpoint is statically configured with the same address. What does the reservation fail to guarantee?
  1. Availability of the intended server configuration row
  2. The configured identity match existing in the reservation
  3. Freedom from independently configured address conflicts
  4. The reserved value stored on the server

Correct answer: C. Freedom from independently configured address conflicts

DHCP allocation cannot prevent an independent endpoint from manually claiming an address. Check actual ownership as well as pool bookkeeping.

dhcp-medium-21 · A laptop receives correct settings over Ethernet and wrong settings over Wi-Fi. Which comparison is most useful?
  1. Only the common DHCP hostname
  2. Only the laptop's previously remembered lease
  3. The selected DHCP server, options and attachment for each interface
  4. Only the identical browser version

Correct answer: C. The selected DHCP server, options and attachment for each interface

Different interfaces can attach to different VLANs and servers. Compare effective assignments rather than treating the laptop as one allocation path.

dhcp-medium-22 · A server hands out a wrong DNS option. An administrator repairs that option. Why might some clients still show the old resolver?
  1. Updating one authoritative record changes every client's resolver option
  2. DHCP edits immediately push new options to all clients
  3. They have not yet received and applied updated DHCP configuration
  4. Old option values are permanently fixed in hardware

Correct answer: C. They have not yet received and applied updated DHCP configuration

A server-side change does not instantly replace every client's effective settings. Verify renewal or an approved reacquisition and the resulting configuration.

dhcp-medium-23 · Which pair of ports normally carries client-server DHCPv4 messages without a relay-specific extension?
  1. UDP client 67 and server 68
  2. UDP client 53 and server 53
  3. TCP client 68 and server 67
  4. UDP client 68 and server 67

Correct answer: D. UDP client 68 and server 67

DHCPv4 uses UDP 67 and 68 for its normal server/client exchange. Relay-path policy must fit the actual packet direction and addressing.

dhcp-medium-24 · A client sends repeated discoveries but no server receives them. Why is clearing the server's lease database a poor first action?
  1. It does not repair the demonstrated missing discovery path and can disrupt allocation state
  2. It corrects giaddr on every relay automatically
  3. It is necessary whenever discoveries are absent at the server
  4. It guarantees request delivery after a database reset

Correct answer: A. It does not repair the demonstrated missing discovery path and can disrupt allocation state

Evidence points to transport from client to server. Preserve valid state while tracing the missing exchange.

dhcp-medium-25 · Why compare the leased subnet with the switchport's actual VLAN?
  1. The DNS search list establishes the client's VLAN
  2. A valid DHCP response may still come from an unintended attachment or scope
  3. The intended switch configuration proves effective attachment
  4. A received ACK guarantees intended VLAN membership

Correct answer: B. A valid DHCP response may still come from an unintended attachment or scope

The assignment and effective network attachment must agree. A completed exchange can allocate configuration from the wrong network.

Hard explained questions · 1–12

State what the evidence proves and reject conclusions that reach beyond it. These 12 questions are 1–12 of the hard set.

dhcp-hard-1 · A four-hour lease starts at 10:00 with explicit T1=3600 seconds and T2=10800 seconds. No replies arrive. Which timeline is correct?
  1. Continue the assignment after its acknowledged expiration
  2. Renew at 11:00, rebind at 13:00, stop using the lease at 14:00
  3. Rebind before renewing because T2 is later
  4. Renew at the default times despite the explicit timer options

Correct answer: B. Renew at 11:00, rebind at 13:00, stop using the lease at 14:00

Explicit valid timer values override defaults. Convert seconds to one and three hours, retaining the four-hour expiration boundary.

dhcp-hard-2 · A subnet's client broadcasts reach the relay; the server receives them with the correct giaddr and sends replies to the relay. Clients see none. Which boundary remains to be demonstrated?
  1. Client transmission of the already-observed discovery
  2. Scope selection already demonstrated by the recorded reply
  3. Server receipt of the already-observed request
  4. Relay receipt and delivery of those replies onto the client network

Correct answer: D. Relay receipt and delivery of those replies onto the client network

The observations already establish the request path and server reply generation. Trace the remaining return stages with the same transaction and client identity.

dhcp-hard-3 · A /24 scope offers .20 through .219 inclusive. There are 12 excluded addresses, 150 ordinary active leases, and 8 additional unavailable reserved addresses, all disjoint. What capacity remains?
  1. 29 addresses
  2. 50 addresses
  3. 30 addresses
  4. 42 addresses

Correct answer: C. 30 addresses

The inclusive range has 200 addresses. Effective unavailable entries total 170, leaving 30. The disjoint condition prevents double subtraction.

dhcp-hard-4 · A client keeps a valid eight-hour lease from a now-unreachable server. At hour six its task still works, but at hour eight connectivity stops. What best explains why the outage was delayed?
  1. The server's outage instantly canceled every client lease
  2. The existing assignment remained valid until expiry, then could not be extended
  3. The client permanently converted the lease to static use
  4. All clients must stop at T1 even while their lease is valid

Correct answer: B. The existing assignment remained valid until expiry, then could not be extended

Server availability and current lease validity are different. A renewal-path problem can become visible only as clients exhaust their remaining validity.

dhcp-hard-5 · Server A and server B each allocate the same dynamic range independently without a coordination mechanism. Why is this unsafe?
  1. Clients always reject one of the servers before either allocates
  2. Different server identifiers guarantee disjoint allocations
  3. A reservation on A automatically reserves the same entry on B
  4. Each can lease an address the other has already assigned

Correct answer: D. Each can lease an address the other has already assigned

Independent overlapping allocation lacks shared ownership state. Use a supported coordinated design or correctly separated allocation rather than assuming mutual awareness.

dhcp-hard-6 · A DHCP relay source interface is reachable, but giaddr identifies a different client-side subnet with no configured pool. Which change addresses the allocation problem?
  1. Change only the reachable server's display name
  2. Treat server reachability as proof that pool selection is correct
  3. Correct the client-subnet identification or provide the intended matching scope
  4. Expand an unrelated scope while retaining the incorrect identification

Correct answer: C. Correct the client-subnet identification or provide the intended matching scope

Server reachability alone does not identify the correct allocation network. The relay information must match the intended client scope.

dhcp-hard-7 · Only large DHCP replies fail after a firewall change, while small offers arrive. What evidence should precede a remedy?
  1. Permit only the small reply size and declare complete recovery
  2. Blame exhaustion despite the received offers
  3. Clear all leases without examining reply delivery
  4. Reply sizes, fragmentation or path limits, and actual drops on the return path

Correct answer: D. Reply sizes, fragmentation or path limits, and actual drops on the return path

Size-dependent behavior calls for packet and policy evidence on that path. Avoid removing all filtering before finding the constrained or discarded packet.

dhcp-hard-8 · A client moves between APs mapped to the same IP VLAN and keeps its lease. Does that alone require a new subnet allocation?
  1. No; confirm the effective IP network rather than assume every radio roam changes it
  2. Yes, every AP roam requires a new IPv4 subnet
  3. Yes, an unchanged VLAN forces a different client identifier
  4. No, no radio roam can ever change IP attachment

Correct answer: A. No; confirm the effective IP network rather than assume every radio roam changes it

A radio attachment change and an IP-network change are separate events. Verify actual VLAN and address context before requiring fresh allocation.

dhcp-hard-9 · A laptop alternates between two different subnets that share the same SSID text. What invalidates treating the old lease as universally usable?
  1. The SSID text grants permanent use of every old lease
  2. The actual subnet and lease validity, not the SSID label, determine address suitability
  3. The remembered gateway remains valid on every similarly named network
  4. The old server identifier proves current subnet suitability

Correct answer: B. The actual subnet and lease validity, not the SSID label, determine address suitability

Wireless network names do not prove identical IP attachment. Validate the remembered assignment against the network actually reached.

dhcp-hard-10 · A server's active lease count falls after an unplanned database rollback, but many endpoints still use acknowledged, unexpired assignments. What is the risk?
  1. Every endpoint automatically discards its acknowledged lease after rollback
  2. The server's free count alone proves current address ownership
  3. The switch reconciles abandoned server state without DHCP evidence
  4. The server may reallocate addresses that those endpoints still validly use

Correct answer: D. The server may reallocate addresses that those endpoints still validly use

Allocation state and endpoint lease state can diverge. Reconcile ownership using the supported recovery procedure before treating apparently free addresses as safe.

dhcp-hard-11 · A client requests its remembered address after reboot with no server identifier in an INIT-REBOOT request. What is it seeking?
  1. Selection of a newly received offer with a selected server identifier
  2. Validation of the remembered configuration on the current network
  3. A release of the remembered assignment before validation
  4. Renewal unicast to the original server in every case

Correct answer: B. Validation of the remembered configuration on the current network

INIT-REBOOT checks previously known configuration. Distinguish this from SELECTING, RENEWING and REBINDING using message fields and client state.

dhcp-hard-12 · A relay path works for new discoveries, but renewing clients fail to reach their original server by unicast. What should the test distinguish?
  1. Change lease length without examining the renewal route
  2. Use discovery success as proof of direct unicast renewal
  3. Test only server loopback allocation
  4. The direct renewal path from the relayed initial broadcast path

Correct answer: D. The direct renewal path from the relayed initial broadcast path

Successful relayed allocation does not prove every client's unicast renewal route and policy. Test both states and their actual addressing.

Hard explained questions · 13–25

State what the evidence proves and reject conclusions that reach beyond it. These 13 questions are 13–25 of the hard set.

dhcp-hard-13 · A pool seems exhausted, but hundreds of leases belong to randomized client identities generated repeatedly by a test tool. What should be done first?
  1. Delete all legitimate leases while leaving the generator running
  2. Assume every identity represents a separate physical endpoint
  3. Stop the approved test workload and investigate its allocation behavior before resizing the production pool
  4. Double the pool before checking the test tool's behavior

Correct answer: C. Stop the approved test workload and investigate its allocation behavior before resizing the production pool

Lease consumption can reflect client identity behavior rather than genuine endpoint growth. Preserve legitimate assignments and correct the test process before capacity changes.

dhcp-hard-14 · Two cloned hosts present the same configured DHCP client identifier. What makes reservation behavior unreliable for distinguishing them?
  1. Identical hostnames are required for the server to confuse them
  2. Different switch ports always override the configured server identity key
  3. The server identifier uniquely distinguishes every requesting client
  4. The server's chosen identity key cannot uniquely distinguish those clients

Correct answer: D. The server's chosen identity key cannot uniquely distinguish those clients

Check the actual server matching rule. Duplicate identity inputs can make distinct machines appear to be one allocating client.

dhcp-hard-15 · A security rule permits client-to-server DHCP but drops relay-to-server traffic from the relay's actual source address. What is the narrow repair?
  1. Permit the intended relay-server exchange with its real endpoints and ports
  2. Permit every UDP source without limiting the relay exchange
  3. Permit only the original client address on the server-side boundary
  4. Allow the opposite reply direction and leave the request blocked

Correct answer: A. Permit the intended relay-server exchange with its real endpoints and ports

Policy must model the relay path actually used. Scope the correction to intended DHCP exchange and retain unrelated restrictions.

dhcp-hard-16 · A new subnet mask is pushed with DHCP, but statically addressed controllers retain the old mask. How should completion be verified?
  1. Inventory and test both DHCP-managed and statically configured endpoints
  2. Use the saved server option as proof of all effective client settings
  3. Assume static controllers consume the changed DHCP mask
  4. Verify only newly leased endpoints

Correct answer: A. Inventory and test both DHCP-managed and statically configured endpoints

DHCP controls clients that consume its configuration. A mixed estate needs explicit treatment and verification of static devices.

dhcp-hard-17 · An eight-hour lease is acknowledged at 09:00. At 12:00 a valid renewal ACK grants eight hours from that renewal. When does the renewed lease expire, ignoring transit delay?
  1. 20:00
  2. 09:00 the following day
  3. 13:00
  4. 17:00

Correct answer: A. 20:00

A successful renewal starts the acknowledged new lifetime. Eight hours after 12:00 is 20:00; the original expiration is superseded.

dhcp-hard-18 · A server receives DECLINE reports for multiple addresses after a subnet merger. What evidence should drive the response?
  1. Release all declined addresses without checking claimants
  2. Extend lease duration as a substitute for attribution
  3. Actual address ownership, overlapping pools and static assignments on the merged segment
  4. Disable conflict reports while retaining overlapping ownership

Correct answer: C. Actual address ownership, overlapping pools and static assignments on the merged segment

Repeated conflict reports indicate allocation and ownership need review. Avoid disabling conflict handling to conceal duplicate use.

dhcp-hard-19 · A DHCP snooping binding is expected to support another switch security feature, but leases were obtained before snooping was enabled. What should be verified?
  1. Use the MAC table alone as complete lease state
  2. Apply dependent enforcement before validating required bindings
  3. Assume all earlier leases were imported into the binding table
  4. How valid bindings are learned or restored in this implementation before relying on enforcement

Correct answer: D. How valid bindings are learned or restored in this implementation before relying on enforcement

Enforcement dependent on binding state needs a supported state acquisition or recovery path. Do not assume preexisting leases populate it retrospectively.

dhcp-hard-20 · A relay adds circuit information used by server policy. The circuit mapping changes after a switch replacement. What can explain valid offers from the wrong policy group?
  1. The new relay identifier necessarily preserves the old policy match
  2. The server's relay-information policy now matches the changed circuit values incorrectly
  3. The circuit information can affect only DNS answers
  4. Any received offer proves the intended circuit group

Correct answer: B. The server's relay-information policy now matches the changed circuit values incorrectly

Relay metadata can influence allocation policy in configured deployments. Compare the received values with the actual intended attachment and server rules.

dhcp-hard-21 · A newly shortened lease duration is configured at 15:00. A disconnected client still holds an earlier lease valid until 18:00. What is unsafe to assume?
  1. That earlier clients may retain their acknowledged timers
  2. That migration must account for effective client state
  3. That later acknowledgements can apply the new duration
  4. That the edit instantly invalidates or shortens every earlier acknowledged lease

Correct answer: D. That the edit instantly invalidates or shortens every earlier acknowledged lease

Configuration changes do not retroactively prove all existing client lease timers changed. Plan migration around effective acknowledged state.

dhcp-hard-22 · A 60-address usable pool has 48 valid leases. An event needs 20 additional simultaneous clients, with no releases expected. What minimum extra usable capacity is needed?
  1. 8 addresses
  2. 12 addresses
  3. 20 addresses
  4. 48 addresses

Correct answer: A. 8 addresses

There are 12 free addresses. Twenty additional clients need eight more usable slots, subject to the subnet's real address and exclusion limits.

dhcp-hard-23 · Two DHCP servers are configured for coordinated operation. A network partition occurs. What supports a safe availability claim?
  1. A general promise that all pairs behave identically during partition
  2. A single allocation while both servers are healthy
  3. A count of two configured servers
  4. The specific supported partition behavior, address ownership rules and tested client outcomes

Correct answer: D. The specific supported partition behavior, address ownership rules and tested client outcomes

Coordination details determine how partitioned servers allocate safely and resume operation. Test the supported failure mode rather than promise universal availability.

dhcp-hard-24 · A capture records both an ACK from the expected server and a later ACK from an unexpected server to the same client context. What should be investigated?
  1. An ACK from any source proves the approved assignment
  2. The last visible ACK always wins regardless of client state
  3. The first visible ACK always proves final effective state
  4. The actual client state, selected exchange and resulting applied settings

Correct answer: D. The actual client state, selected exchange and resulting applied settings

Correlate state and transaction fields with effective endpoint configuration. Multiple observed responses need attribution, not a simplistic first-or-last rule.

dhcp-hard-25 · After repairing a relay, one new client leases successfully. What additional acceptance test covers the failure that affected aging clients?
  1. Verify only relay management ping
  2. Repeat only the same initial discovery
  3. Inspect only the server's saved pool definition
  4. Verify renewal, rebinding when required, and correct effective options for representative clients

Correct answer: D. Verify renewal, rebinding when required, and correct effective options for representative clients

A complete test covers the relevant client states and applied settings. New allocation alone does not establish lifecycle recovery.

Use the result to choose your next study step

Make a lease timeline with start, T1, T2, acknowledgement and expiration. Add a relay stage table and a count of genuinely available addresses. Explain whether a failed test concerns allocation capacity, subnet selection, request delivery, reply delivery or effective client options.

Record whether each miss concerned lease state and timers, relay path evidence, pool ownership. Copy one decisive observation and one rejected inference into your error log. Then review the focused supporting resource, explain a missed item without its options, and retry the relevant level after a separate study session.

For course-level transfer, move to Unit 1 practice, Unit 2 practice, Unit 3 practice. When the topic labels no longer guide your answer, use full practice exams and artifact analysis to combine selection, evidence, and explanation.

Teacher use

Assign one level as a diagnostic, collect explanations for two missed items, and group students by the missing step rather than total score alone. Ask pairs to compare a correct conclusion with a tempting overclaim. Do not treat repeated exposure to the same answer as independent evidence of mastery.