Which device learns MAC addresses and forwards Ethernet frames?
Answer: Switch. A Layer 2 switch learns source MAC addresses by VLAN and uses its forwarding table for known-unicast delivery. A router instead makes Layer 3 decisions from IP routes.
Follow-up: if many endpoints connect to one switch and only one access port fails, the failure scope can remain local to that port.
Which device forwards packets between IP networks?
Answer: Router. A router evaluates destination IP addresses against a routing table and chooses a next hop or connected interface.
A Layer 3 switch can also route between VLANs/subnets, so the important clue is Layer 3 forwarding—not the shape of the chassis.
Which device connects wireless clients into the LAN?
Answer: Wireless access point. An AP provides the 802.11 radio attachment and bridges wireless traffic into the wired network according to its configuration.
A consumer wireless router often combines AP, switch, router, DHCP, NAT, and firewall functions, which is why device role matters more than product label.
Which device evaluates traffic against security policy?
Answer: Firewall. A firewall can permit or deny flows based on source, destination, protocol, port, state, identity, or other supported criteria.
Routing tells traffic where to go; firewall policy tells whether the flow is allowed to cross a boundary.
Which component gives one endpoint its network interface?
Answer: NIC/network interface. A NIC provides the endpoint's network attachment and MAC identity for Ethernet/Wi-Fi as applicable.
A failed or disabled NIC can prevent link/association even when the switch or AP is healthy.
Which device terminates an ISP access technology in a home network?
Answer: Modem or ONT depending on access technology. A cable modem converts/terminates cable-provider service; a fiber ONT performs the optical network termination role.
Do not assume 'modem' and 'router' are synonyms even when one gateway appliance combines both functions.
Which device can route between VLANs at high speed inside a LAN?
Answer: Layer 3 switch. It combines switching with Layer 3 interfaces/routing. It can serve as the default gateway for multiple VLANs in campus-style designs.
This is different from a basic Layer 2 switch that cannot route between IP subnets by itself.
Which device repeats traffic rather than learning MAC destinations?
Answer: Hub. A classic Ethernet hub operates as a shared repeater and does not build a MAC table. Modern switched Ethernet largely replaced hubs.
A physical star using a hub behaves differently from a star using a switch.
All clients can reach the local router page but not the Internet
The router's LAN-facing function is working enough for local access. The next shared boundary is its WAN/upstream connection, external route, or provider path—not each client's NIC simultaneously.
This question tests device role and failure scope together.
Wi-Fi fails, wired clients through the same router work
The shared upstream Internet path is demonstrated by wired clients. Focus on AP/radio, wireless authentication, WLAN-to-VLAN mapping, or wireless client state.
Do not replace the modem first when the evidence isolates the wireless function.
Two VLANs can switch locally but cannot communicate between each other
The missing function is Layer 3 inter-VLAN routing or policy. A Layer 2 switch can keep each VLAN operating locally while the routing boundary remains absent or blocked.
Explain the function behind each answer
Give yourself one point for the device name and one for the mechanism. 'Switch' earns partial credit; 'Switch, because it learns MAC addresses and forwards frames within the VLAN' demonstrates understanding.
Then add one troubleshooting artifact: MAC table for a switch, route table for a router, wireless association/logs for an AP, rule logs for a firewall.
Identify the device from its table or log
Artifact A lists MAC address, VLAN, and outgoing port. That is switch forwarding evidence. Artifact B lists destination prefix, next hop, and outgoing interface. That is routing evidence. Artifact C records source/destination IP, protocol, port, rule ID, and action. That is firewall-policy evidence. Artifact D lists SSID, associated clients, signal information, and authentication events. That points to an access point or wireless controller.
The device name matters because it tells you which state can answer the next question. Asking a switch for a route to the Internet or asking a modem for a VLAN MAC table confuses roles.
One physical appliance can host many functions
A home gateway may contain an ISP modem component, Ethernet switch, wireless AP, router, NAT, DHCP server, and firewall in one enclosure. A user saying 'the router is broken' does not identify which function failed.
If wired clients have Internet but Wi-Fi clients cannot associate, the wireless AP function is the better boundary. If all LAN clients reach the gateway but no WAN traffic passes, inspect routing/WAN/modem-provider path. If clients lack leases, inspect DHCP.
Role-based reasoning works even when hardware packaging is combined.
When a switch is also the router
Enterprise switches can provide switched virtual interfaces (SVIs) and route between VLANs. A Layer 3 switch may therefore appear in both MAC-table and route-table evidence. The correct identification comes from the specific function in the scenario.
If VLAN 10 and VLAN 20 each work locally but cannot communicate and their default gateways are SVIs on the same Layer 3 switch, inspect routing/SVI state and policy on that device.
Do not assume all devices named 'switch' are limited to Layer 2.
Identify the shared device from who is affected
Only one wired endpoint loses link: inspect its NIC, cable, and switch port. Every endpoint on one access switch loses connectivity: inspect the switch, power, or uplink. Only wireless clients fail while wired clients work: inspect AP/wireless function. Every local device reaches the router but no one reaches the Internet: inspect the router WAN, modem/ONT, or provider.
This round ties device identification to troubleshooting scope rather than icon recognition.
Choose the device needed by the requirement
Need to connect many Ethernet endpoints in one VLAN? A switch provides local Layer 2 forwarding. Need to connect different IP subnets? A router or Layer 3 switch provides Layer 3 forwarding. Need wireless attachment? An AP. Need policy enforcement between zones? A firewall. Need provider access termination? A modem/ONT appropriate to the service.
Real designs often combine these roles, but the functional requirement remains the cleanest way to identify the needed component.
Apply the page to a complete evidence chain
Capstone identification round: You are given six artifacts without device names. Artifact 1 lists MAC address, VLAN and outgoing interface. Artifact 2 lists destination prefix, next hop and metric. Artifact 3 records source, destination, protocol, port, rule ID and ALLOW/DENY. Artifact 4 shows SSID, BSSID, associated clients and authentication events. Artifact 5 shows ISP signal/link state and a provider-facing Ethernet handoff. Artifact 6 shows a host interface with MAC address, link speed and local IP configuration.
Match the artifacts to switch, router/Layer 3 switch, firewall, access point/controller, modem/ONT, and NIC. Then explain the function behind each match. The switch artifact reflects Layer 2 learning. The route table reflects Layer 3 forwarding. The firewall log reflects policy enforcement. Wireless association data belongs to the AP function. Provider access state belongs to the modem/ONT role. Endpoint interface state belongs to the NIC.
Now add complexity: Artifact 2 and Artifact 1 come from the same chassis. That device can be a Layer 3 switch because one physical device can both switch frames and route packets. The correct answer depends on which function the scenario asks about.
Next, troubleshoot a combined home gateway. Wired clients have Internet, but wireless clients cannot associate. Do not label the entire gateway 'down.' The modem/provider path, routing, NAT and wired switching work sufficiently for wired clients. The wireless AP function is isolated by scope.
Create your own device-identification scenario where two products could look similar from a picture but only one function explains the evidence. For example, router versus modem: one terminates provider access; the other performs IP forwarding between LAN and WAN.
Score yourself with two points per item: one for device/role, one for mechanism. A picture-only answer earns less than an evidence-based functional explanation.
Apply this skill with evidence
For Network Device Identification Quiz, apply this checkpoint only after the page-specific evidence has established the relevant boundary. State the observed value, compare it with the documented expected state, and choose a control that shares the same path except for the suspected dependency. Identify a result that would force you to reject the hypothesis, then verify the original network requirement after the targeted correction.
Applied drills for Network Device Identification Quiz
Drill 1: Use the section idea “Which device learns MAC addresses and forwards Ethernet frames?” as the starting condition. Evidence provided: Answer: Switch. A Layer 2 switch learns source MAC addresses by VLAN and uses its forwarding table for known-unicast delivery. A router instead makes Layer 3 decisions from IP routes. Follow-up: if many endpoints connect to one switch and only one access port fails, the failure scope can remain local to that port. Write the next best test or configuration check for this exact network device identification quiz problem. Then name one result that would contradict your first hypothesis, one broad change you should avoid because it is not yet supported, and a verification step that proves the original requirement after correction. Finally, explain which already-successful checkpoint must be preserved so your troubleshooting does not move backward.
Drill 2: Use the section idea “Which device forwards packets between IP networks?” as the starting condition. Evidence provided: Answer: Router. A router evaluates destination IP addresses against a routing table and chooses a next hop or connected interface. A Layer 3 switch can also route between VLANs/subnets, so the important clue is Layer 3 forwarding—not the shape of the chassis. Write the next best test or configuration check for this exact network device identification quiz problem. Then name one result that would contradict your first hypothesis, one broad change you should avoid because it is not yet supported, and a verification step that proves the original requirement after correction. Finally, explain which already-successful checkpoint must be preserved so your troubleshooting does not move backward.
Drill 3: Use the section idea “Which device connects wireless clients into the LAN?” as the starting condition. Evidence provided: Answer: Wireless access point. An AP provides the 802.11 radio attachment and bridges wireless traffic into the wired network according to its config uration. A consumer wireless router often combines AP, switch, router, DHCP, NAT, and firewall functions, which is why device role matters more than product label. Write the next best test or configuration check for this exact network device identification quiz problem. Then name one result that would contradict your first hypothesis, one broad change you should avoid because it is not yet supported, and a verification step that proves the original requirement after correction. Finally, explain which already-successful checkpoint must be preserved so your troubleshooting does not move backward.
Drill 4: Use the section idea “Which device evaluates traffic against security policy?” as the starting condition. Evidence provided: Answer: Firewall. A firewall can permit or deny flows based on source, destination, protocol, port, state, identity, or other supported criteria. Routing tells traffic where to go; firewall policy tells whether the flow is allowed to cross a boundary. Write the next best test or configuration check for this exact network device identification quiz problem. Then name one result that would contradict your first hypothesis, one broad change you should avoid because it is not yet supported, and a verification step that proves the original requirement after correction. Finally, explain which already-successful checkpoint must be preserved so your troubleshooting does not move backward.
Drill 5: Use the section idea “Which component gives one endpoint its network interface?” as the starting condition. Evidence provided: Answer: NIC/network interface. A NIC provides the endpoint's network attachment and MAC identity for Ethernet/Wi-Fi as applicable. A failed or disabled NIC can prevent link/association even when the switch or AP is healthy. Write the next best test or configuration check for this exact network device identification quiz problem. Then name one result that would contradict your first hypothesis, one broad change you should avoid because it is not yet supported, and a verification step that proves the original requirement after correction. Finally, explain which already-successful checkpoint must be preserved so your troubleshooting does not move backward.
Drill 6: Use the section idea “Which device terminates an ISP access technology in a home network?” as the starting condition. Evidence provided: Answer: Modem or ONT depending on access technology. A cable modem converts/terminates cable-provider service; a fiber ONT performs the optical network termination role. Do not assume 'modem' and 'router' are synonyms even when one gateway appliance combines both functions. Write the next best test or configuration check for this exact network device identification quiz problem. Then name one result that would contradict your first hypothesis, one broad change you should avoid because it is not yet supported, and a verification step that proves the original requirement after correction. Finally, explain which already-successful checkpoint must be preserved so your troubleshooting does not move backward.
Continue studying
Study Guide · Troubleshooting Guide · CLI Tools · Practice Questions · Artifact Analysis