Networking Fundamentals Interview Questions and Answers – Part 1: Basics, Network Devices & Core Concepts

Networking is one of the most important areas for System Administrators, Network Administrators, System Engineers, Network Engineers and IT Infrastructure professionals.

Before moving into CCNA, CCNP and CCIE-level networking, it is important to understand how computers communicate, how network devices operate, how data moves through a network, and how the OSI and TCP/IP models describe that communication.

This article starts the networking curriculum from the beginning and focuses on the fundamental concepts that every IT infrastructure professional should understand.

The goal is not simply to memorize definitions. The questions are designed to help you understand how networking works in real production environments.

Networking Fundamentals Interview Questions and Answers – Part 1

1. What is a computer network?

A computer network is a collection of interconnected devices that communicate with each other to exchange data and share resources.

Examples of network resources include:

• Files
• Applications
• Printers
• Internet connectivity
• Databases
• Servers
• Storage
• Network services

A network can contain computers, servers, switches, routers, firewalls, wireless access points, printers and other devices.

Example

A typical office network may contain:

Users
  |
Access Switches
  |
Core/Distribution
  |
Firewall
  |
Internet

2. Why are computer networks used?

Networks are primarily used for:

• Resource sharing
• Communication
• Internet access
• Centralized application access
• File sharing
• Centralized management
• Remote access
• Backup and replication
• Voice and video communication
• Security and access control

For example, instead of every employee having a separate printer, multiple users can access a centrally managed network printer.

3. What are the main components of a network?

A network generally contains:

End devices

Examples:

• PCs
• Laptops
• Servers
• Printers
• IP phones
• Cameras
• IoT devices

Intermediate devices

Examples:

• Switches
• Routers
• Firewalls
• Wireless Access Points
• Load balancers

Transmission media

Examples:

• Copper Ethernet
• Fiber optic
• Wireless/RF

Protocols

Examples:

• Ethernet
• IP
• TCP
• UDP
• DNS
• DHCP
• HTTP/HTTPS
• SSH

4. What is a node in networking?

A node is a device or endpoint that participates in network communication.

Depending on the context, a node can include:

• Computer
• Server
• Router
• Switch
• Printer
• IP phone
• IoT device

In practical networking discussions, the exact meaning of “node” depends on the technology and context.

5. What is a host?

A host is a network-connected device that can send or receive network traffic.

Examples:

• Windows Server
• Linux server
• Desktop computer
• Laptop
• Virtual machine
• Network appliance

A host generally has a network identity such as an IP address.

6. What is an endpoint?

An endpoint is a device or system that represents the source or destination of communication.

Examples include:

• User workstation
• Server
• Mobile device
• Virtual machine
• Printer

A switch or router normally forwards traffic rather than being the final application endpoint.

7. What is a network interface?

A network interface is the logical or physical interface through which a device communicates with a network.

Examples:

• Ethernet NIC
• Wi-Fi adapter
• Virtual Ethernet adapter
• Router interface

A physical server can have multiple network interfaces.

For example:

Server
 |
 +-- NIC 1 → Management Network
 |
 +-- NIC 2 → Production Network
 |
 +-- NIC 3 → Backup Network

8. What is a NIC?

NIC stands for Network Interface Card or Network Interface Controller.

It provides network connectivity to a device.

A NIC can be:

• Physical Ethernet adapter
• Wireless adapter
• Virtual network adapter

A NIC normally has a MAC address.

9. What is a MAC address?

A MAC address is a Layer 2 hardware address associated with a network interface.

A common Ethernet MAC address representation is:

00:1A:2B:3C:4D:5E

MAC addresses are used for communication on the local Layer 2 network.

Switches use MAC addresses to make forwarding decisions.

10. What is an IP address?

An IP address is a logical network-layer address used to identify an interface for IP communication.

The two major versions are:

• IPv4
• IPv6

Example IPv4 address:

192.168.10.25

Example IPv6 address:

2001:db8:10::25

IP addressing and subnetting will be covered in detail in later CCNA-focused parts.

11. What is the difference between a MAC address and an IP address?

A useful way to remember it:

MAC = local Layer 2 delivery

IP = Layer 3 logical addressing and routing

12. What is a network protocol?

A network protocol is a defined set of rules that devices use to communicate.

Examples:

• Ethernet
• IP
• TCP
• UDP
• DNS
• DHCP
• HTTP
• HTTPS
• SSH
• SMTP

Protocols define things such as:

• Message format
• Addressing
• Communication behavior
• Error handling
• Delivery mechanisms

13. What is a protocol stack?

A protocol stack is a collection of networking protocols that work together at different layers.

For example, when accessing a website:

HTTP/HTTPS
    ↓
TCP
    ↓
IP
    ↓
Ethernet/Wi-Fi

Each layer provides services to the layer above it.

14. What is the OSI model?

OSI stands for Open Systems Interconnection.

The OSI model is a seven-layer conceptual model used to describe network communication.

The seven layers are:

A common mnemonic is:

Please Do Not Throw Sausage Pizza Away

Physical → Data Link → Network → Transport → Session → Presentation → Application

15. What is Layer 1 of the OSI model?

Layer 1 is the Physical Layer.

It deals with transmitting raw bits over the physical medium.

Examples include:

• Copper cable
• Fiber optic cable
• Radio signals
• Connectors
• Electrical signaling
• Optical signaling
• Physical interfaces

Typical Layer 1 problems include:

• Damaged cable
• Incorrect fiber
• Bad transceiver
• Interface hardware failure
• No link
• Physical interference

16. What is Layer 2 of the OSI model?

Layer 2 is the Data Link Layer.

It provides communication over a local network and handles concepts such as:

• MAC addressing
• Ethernet frames
• Switching
• VLANs
• Layer 2 error detection
• Layer 2 forwarding

Ethernet operates primarily at Layer 2 and Layer 1.

17. What is Layer 3 of the OSI model?

Layer 3 is the Network Layer.

It deals with logical addressing and routing.

Important Layer 3 concepts include:

• IPv4
• IPv6
• Routing
• IP addresses
• Routers

A router makes Layer 3 forwarding decisions.

18. What is Layer 4 of the OSI model?

Layer 4 is the Transport Layer.

Important protocols include:

• TCP
• UDP

Transport-layer concepts include:

• Port numbers
• Reliability
• Flow control
• Connection management
• Segmentation

TCP and UDP will be studied in greater detail later.

19. What are OSI Layers 5, 6 and 7?

Layer 5 — Session

Responsible for establishing, managing and terminating communication sessions in the OSI conceptual model.

Layer 6 — Presentation

Deals conceptually with:

• Data representation
• Encoding
• Encryption
• Compression

Layer 7 — Application

Provides network services to applications.

Examples include:

• HTTP
• DNS
• SMTP
• FTP
• SSH

Important: The OSI model is primarily a conceptual and troubleshooting framework. Real protocols do not always map perfectly to exactly one OSI layer.

20. What is the TCP/IP model?

The TCP/IP model is the practical protocol architecture used by modern IP networks.

A commonly used four-layer representation is:

Some textbooks use a five-layer Internet model by separating the Physical and Data Link functions.

21. What is the difference between the OSI model and TCP/IP model?

The OSI model is primarily a conceptual reference model, while TCP/IP represents the protocol architecture used by Internet and enterprise IP networks.

For interviews, don’t say that “OSI is used and TCP/IP is not.” Both are useful, but for different purposes.

22. What is encapsulation?

Encapsulation is the process of adding protocol information as data moves down the networking stack.

For example:

Application Data
      ↓
TCP Header + Data
      ↓
IP Header + TCP Segment
      ↓
Ethernet Header/Trailer + IP Packet

At the receiving side, the process is reversed and is called decapsulation.

23. What is decapsulation?

Decapsulation is the process of removing the corresponding protocol headers as data moves up the networking stack at the destination.

Conceptually:

Ethernet Frame
      ↓
IP Packet
      ↓
TCP Segment
      ↓
Application Data

24. What are data, segments, packets and frames?

The terminology changes according to the layer.

A common representation is:

Application → Data
Transport   → Segment (TCP) / Datagram (UDP)
Network     → Packet
Data Link   → Frame
Physical    → Bits

For example:

Application Data
       ↓
TCP Segment
       ↓
IP Packet
       ↓
Ethernet Frame
       ↓
Bits

The exact terminology can vary between protocols and contexts, but this model is widely used in networking education.

25. What is a frame?

A frame is a Layer 2 data unit.

An Ethernet frame contains information such as:

• Source MAC address
• Destination MAC address
• Type/Length information
• Payload
• Frame Check Sequence

Switches primarily make forwarding decisions based on Layer 2 information such as destination MAC address.

26. What is a packet?

A packet is commonly used to describe a Layer 3 IP data unit.

An IP packet contains information such as:

• Source IP address
• Destination IP address
• Protocol information
• TTL/Hop Limit
• Payload

Routers use Layer 3 information to determine where an IP packet should be forwarded.

27. What is a segment?

A TCP segment is the Layer 4 data unit created by TCP.

It contains information such as:

• Source port
• Destination port
• Sequence number
• Acknowledgment number
• TCP flags
• Window information
• Payload

UDP uses the term datagram rather than TCP segment.

28. What is bandwidth?

Bandwidth represents the capacity of a communication link.

It is normally expressed in:

• bits per second
• Mbps
• Gbps

For example:

1 Gbps Ethernet

means the interface has a nominal link rate of 1 gigabit per second.

Bandwidth is not the same as actual application throughput.

29. What is throughput?

Throughput is the actual rate at which data is successfully transferred.

For example:

A network interface may have:

Link speed = 1 Gbps

but an application may achieve only:

Throughput = 700 Mbps

because of protocol overhead, congestion, latency, packet loss, server limitations or other factors.

30. What is latency?

Latency is the time required for data to travel from one point to another.

It is usually measured in milliseconds.

Example:

Client → Server = 10 ms

Low latency is particularly important for:

• Voice
• Video
• Interactive applications
• Financial systems
• Remote desktops
• Real-time applications

31. What is jitter?

Jitter is variation in packet delay.

For example:

Packet 1 → 10 ms
Packet 2 → 12 ms
Packet 3 → 30 ms
Packet 4 → 11 ms

The changing delay represents jitter.

High jitter can negatively affect:

• VoIP
• Video conferencing
• Real-time applications

32. What is packet loss?

Packet loss occurs when packets fail to successfully reach their intended destination.

Possible causes include:

• Network congestion
• Faulty cables
• Interface errors
• Packet filtering
• Routing problems
• Wireless interference
• Hardware problems
• Oversubscribed links

Packet loss can cause:

• Slow applications
• TCP retransmissions
• Poor voice quality
• Video problems
• Connection failures

33. What is network congestion?

Network congestion occurs when traffic demand exceeds the available capacity of a network path or device.

For example:

Traffic generated
       ↓
     10 Gbps
       ↓
     Router
       ↓
     1 Gbps
       ↓
    Destination

The 1 Gbps link can become a bottleneck.

Congestion can lead to:

• Queuing
• Increased latency
• Packet loss
• Reduced throughput

34. What is a LAN?

LAN stands for Local Area Network.

A LAN generally covers a limited geographic area such as:

• Office
• Building
• Floor
• Campus section
• Home

Ethernet and Wi-Fi are common LAN technologies.

35. What is a WAN?

WAN stands for Wide Area Network.

A WAN connects geographically separated networks.

Examples:

Office A ───── WAN ───── Office B

WAN connectivity can use technologies such as:

• MPLS
• Internet VPN
• SD-WAN
• Dedicated circuits
• Ethernet services
• Other provider connectivity

36. What is a MAN?

MAN stands for Metropolitan Area Network.

It generally refers to a network spanning a metropolitan or city-scale area.

The distinction between LAN, MAN and WAN is primarily based on geographic scope and network architecture.

37. What is a PAN?

PAN stands for Personal Area Network.

It generally refers to a very small network around an individual.

Examples include:

• Bluetooth devices
• Smartphone connected to peripherals
• Personal wireless devices

38. What is a WLAN?

WLAN stands for Wireless Local Area Network.

It is a LAN that uses wireless communication, normally based on IEEE 802.11 technologies.

A typical WLAN contains:

Wireless Client
      ↓
Access Point
      ↓
Switch
      ↓
Network

Wireless networking will be covered in much greater detail later in the curriculum.

39. What is a switch?

A network switch primarily connects devices within a Layer 2 network.

An Ethernet switch learns source MAC addresses and builds a MAC address table.

It then uses the destination MAC address to determine where to forward Ethernet frames.

Example:

PC-A
 |
Switch
 |
PC-B

The switch connects the two devices and forwards Ethernet frames between them.

40. What is a router?

A router connects different IP networks and forwards packets between them.

For example:

192.168.10.0/24
       |
     Router
       |
192.168.20.0/24

The router maintains routing information and uses it to determine the next hop/interface for an IP packet.

41. What is a firewall?

A firewall controls network traffic according to security policies.

It can inspect and control traffic based on factors such as:

• Source IP
• Destination IP
• Protocol
• Port
• Application
• User identity
• Security policy
• Threat information

Modern firewalls can provide capabilities far beyond traditional packet filtering.

Examples include:

• Palo Alto Networks
• Fortinet FortiGate
• Cisco Secure Firewall

These platforms will be covered later as separate sections of this curriculum.

42. What is a Layer 3 switch?

A Layer 3 switch combines traditional switching capabilities with Layer 3 routing capabilities.

It can perform:

• Layer 2 switching
• VLAN connectivity
• Inter-VLAN routing
• IP routing

Layer 3 switching will be covered in detail in the CCNA and CCNP sections.

43. What is a wireless access point?

A wireless access point provides wireless network connectivity to client devices.

For example:

Laptop ))))
          \
           Access Point
                |
              Switch
                |
             Network

The AP bridges wireless clients into the wired network according to its configuration.

Enterprise wireless architecture will be covered later.

44. What is a modem?

A modem is a device that provides connectivity to a service provider’s communication technology by converting or terminating the relevant signaling.

The exact function depends on the access technology.

Examples include:

• Cable modem
• DSL modem
• Cellular modem

A modem and router are not necessarily the same device, although consumer equipment often combines multiple functions into one appliance.

45. What is a hub?

A hub is a legacy Layer 1 networking device that repeats incoming signals out other ports.

It does not intelligently forward Ethernet frames based on MAC addresses.

Because of these limitations, hubs have largely been replaced by switches.

46. What is a repeater?

A repeater regenerates or repeats a signal to extend communication over a medium.

Its primary function is associated with the Physical Layer.

Modern networks use more sophisticated technologies and devices for network extension, but the concept remains important for understanding Layer 1.

47. What is a bridge?

A bridge is a Layer 2 device that connects network segments and forwards frames based on MAC addresses.

Modern Ethernet switches essentially provide multiport bridging functionality.

Therefore, the terms are closely related:

A switch can be viewed as a multiport Layer 2 bridge.

48. What is a network topology?

Network topology describes how network devices and links are arranged.

Common topologies include:

• Bus
• Star
• Ring
• Mesh
• Partial mesh
• Tree
• Hybrid

Modern Ethernet LANs commonly use a star or hierarchical star design.

49. What is a star topology?

In a star topology, devices connect to a central device.

Example:

       PC
        |
PC — Switch — PC
        |
      Server

The switch is the central connection point.

Star topology is widely used in modern LANs.

50. What is a mesh topology?

In a mesh topology, devices have multiple interconnections.

A full mesh attempts to connect every node to every other node.

A partial mesh provides multiple connections without connecting every possible pair.

Mesh designs can provide redundancy but increase complexity and cost.

51. What is network redundancy?

Network redundancy means providing additional components or paths so that failure of one component does not necessarily cause complete service interruption.

Examples:

• Two switches
• Two routers
• Multiple uplinks
• Dual firewalls
• Multiple Internet connections
• Redundant power supplies

Example:

          Firewall-1
         /          \
Server ─ Switch-1   Switch-2
         \          /
          Firewall-2

Redundancy is a major concept in enterprise network design.

52. What is a single point of failure?

A single point of failure (SPOF) is a component whose failure can cause a service or system to become unavailable.

Example:

Internet
   |
One Firewall
   |
Network

If the only firewall fails, connectivity may be lost.

A redundant design could use two firewalls in a high-availability configuration.

53. What is unicast?

Unicast is one-to-one communication.

Source ─────────→ Destination

Example:

Client → Web Server

Most normal client-server communication is unicast.

54. What is broadcast?

Broadcast is one-to-all communication within the applicable broadcast domain.

Conceptually:

       → Device 1
      /
Source → Device 2
      \
       → Device 3

IPv4 uses broadcast in certain protocols and scenarios.

Routers normally do not forward Layer 2 broadcasts between different broadcast domains.

IPv6 does not use broadcast; it uses multicast instead.

55. What is multicast?

Multicast is one-to-many communication where traffic is delivered to interested members of a multicast group.

             → Receiver 1
            /
Source → Multicast Group
            \
             → Receiver 2

Multicast is useful for certain applications such as:

• Streaming
• Market data
• Some routing protocols
• Service discovery

Multicast will be covered at a much deeper level in the CCNP/CCIE sections.

56. What is anycast?

Anycast uses the same IP address on multiple possible destinations, with routing determining which instance is reached.

The client generally reaches the topologically appropriate or otherwise selected instance according to the routing system.

Anycast is commonly used in large distributed services such as DNS infrastructure and content delivery architectures.

57. What is a collision domain?

A collision domain is a network segment in which devices could potentially contend for the same shared Ethernet medium.

In modern switched full-duplex Ethernet networks, each switch port generally represents a separate collision domain.

Hubs, by contrast, place connected devices into a shared collision domain.

58. What is a broadcast domain?

A broadcast domain is the set of devices that receive a particular Layer 2 broadcast.

In a typical VLAN-based Ethernet network:

One VLAN generally represents one broadcast domain.

Routers and Layer 3 boundaries separate broadcast domains.

This concept becomes extremely important when we study VLANs and inter-VLAN routing.

59. What is a default gateway?

A default gateway is the Layer 3 device a host uses to reach destinations outside its local IP subnet.

For example:

PC
IP:      192.168.10.25
Mask:    255.255.255.0
Gateway: 192.168.10.1

If the destination is outside the local subnet, the PC normally forwards the packet to its default gateway.

60. What happens when a user accesses a website?

Consider:

User PC
   ↓
Access Switch
   ↓
Router/Layer 3 Switch
   ↓
Firewall
   ↓
Internet
   ↓
Web Server

At a high level:

1. The user enters a website address.
2. DNS may be used to resolve the hostname.
3. The client determines whether the destination is local or remote.
4. If the destination is remote, the client sends traffic toward its default gateway.
5. The local network uses Layer 2 forwarding to reach the gateway.
6. The router/firewall makes Layer 3 and security decisions.
7. The packet travels through one or more networks.
8. The destination server receives the traffic.
9. The response travels back toward the client.
10. The application receives the returned data.

Later articles will break this process down at the packet level.

Real-World Scenario

61. A user says, “My computer is connected to the network, but I cannot access the Internet.” How would you approach the problem?

A good troubleshooting approach is to move from lower-level connectivity toward higher-level services.

Step 1 — Check physical connectivity

Check:

• Ethernet cable
• Link LEDs
• NIC status
• Wi-Fi association
• Switch port status

Step 2 — Check IP configuration

On Windows:

ipconfig /all

Look for:

• IP address
• Subnet mask
• Default gateway
• DNS servers

Step 3 — Test the local TCP/IP stack

ping 127.0.0.1

Step 4 — Test the local IP address

ping <client-IP>

Step 5 — Test the default gateway

ping <gateway-IP>

Step 6 — Test external IP connectivity

For example:

ping 8.8.8.8

A failure here can indicate a routing, firewall, ISP or upstream connectivity problem.

Step 7 — Test DNS

nslookup example.com

If:

ping 8.8.8.8

works but:

nslookup example.com

fails, DNS becomes a strong area of investigation.

Step 8 — Check the application

If IP connectivity and DNS work but the website still fails, investigate:

• TCP connectivity
• Firewall policy
• Proxy
• TLS/certificate issues
• Application/server availability

The key interview principle is:

Don’t immediately blame DNS or the firewall. Isolate the failure layer by layer.

Interview Questions: Rapid-Fire Revision

Here below are some questions that one should know.

62. Which OSI layer uses MAC addresses?

Layer 2 — Data Link.

63. Which OSI layer uses IP addresses?

Layer 3 — Network.

64. Which OSI layer uses TCP and UDP?

Layer 4 — Transport.

65. What device primarily forwards Ethernet frames using MAC addresses?

A Layer 2 switch.

66. What device primarily forwards IP packets between networks?

A router or Layer 3 forwarding device.

67. What is the basic unit at Layer 2?

Frame.

68. What is the basic IP data unit at Layer 3?

Packet.

69. What is the TCP data unit?

Segment.

70. What is the purpose of a default gateway?

To provide the next-hop Layer 3 destination for traffic that needs to leave the local subnet.

71. What is bandwidth?

The capacity/rate of a network link, normally expressed in bits per second.

72. What is latency?

The delay associated with transferring data across a network path.

73. What is jitter?

Variation in packet delay.

74. What is packet loss?

Failure of packets to successfully reach their destination.

75. What is a broadcast domain?

The set of devices that receive a particular Layer 2 broadcast.

Practical Commands for Basic Network Troubleshooting

Windows

Display IP configuration

ipconfig

Detailed configuration:

ipconfig /all

Test connectivity

ping <IP-address>

Display route

route print

Trace a path

tracert <destination>

Test DNS

nslookup <hostname>

Display ARP information

arp -a

Linux

Display interfaces and addresses

ip addr

Display routing table

ip route

Test connectivity

ping <IP-address>

Trace a path

traceroute <destination>

DNS lookup

nslookup <hostname>

or:

dig <hostname>

Display ARP/neighbor information

ip neigh

Quick Revision

Remember these fundamentals:

Network
   ↓
Devices communicate using protocols
   ↓
NIC provides network connectivity
   ↓
MAC = Layer 2 addressing
   ↓
IP = Layer 3 addressing
   ↓
TCP/UDP = Layer 4 transport
   ↓
Switch = primarily Layer 2 forwarding
   ↓
Router = Layer 3 forwarding
   ↓
Firewall = traffic/security control

OSI Model

7  Application
6  Presentation
5  Session
4  Transport
3  Network
2  Data Link
1  Physical

Common data-unit terminology

Application → Data
TCP         → Segment
UDP         → Datagram
IP          → Packet
Ethernet    → Frame
Physical    → Bits

Network performance

Bandwidth → Capacity
Throughput → Actual achieved data rate
Latency → Delay
Jitter → Variation in delay
Packet Loss → Packets not successfully delivered

Communication types

Unicast   → One-to-one
Broadcast → One-to-all within the broadcast domain
Multicast → One-to-many interested receivers
Anycast   → One address, multiple possible destinations

Exam Answer Summary

If an interviewer asks:

“Explain networking in simple terms.”

A strong answer is:

A computer network is a collection of interconnected devices that communicate using standardized protocols. Devices use Layer 2 technologies such as Ethernet and MAC addressing for local network communication and Layer 3 technologies such as IPv4 and IPv6 for logical addressing and routing between networks. TCP and UDP provide transport services, while application protocols such as DNS, DHCP, HTTP and SSH provide specific network services. Switches primarily perform Layer 2 forwarding, routers perform Layer 3 forwarding, and firewalls enforce security policies between network zones or interfaces.

Senior Interview Tip

For senior infrastructure interviews, don’t answer networking questions only with definitions.

For example, if asked:

“What is a switch?”

A junior answer might be:

A switch connects computers in a network.

A stronger answer is:

An Ethernet switch provides Layer 2 connectivity between devices, learns source MAC addresses to build its forwarding table, and uses the destination MAC address to determine where to forward frames. In enterprise networks, switches also commonly support VLANs, trunking, STP, EtherChannel and, in the case of Layer 3 switches, IP routing.

This demonstrates that you understand how the technology actually works, rather than only memorizing terminology.

What Comes Next?

In Part 2, we will go deeper into the communication models and how data actually travels through a network, including:

• OSI vs TCP/IP mapping
• Encapsulation and decapsulation
• PDU flow
• MAC-to-MAC communication
• IP-to-IP communication
• Source and destination addressing
• Local vs remote communication
• ARP fundamentals
• Default gateway operation
• Broadcast domains
• Collision domains
• Unicast, broadcast and multicast behavior
• How switches and routers process traffic
• Packet journey from a client to a remote server
• Practical packet-flow interview scenarios

This will establish the foundation before we move into Ethernet, switching, VLANs, IP addressing and the formal CCNA curriculum.