I85PREP
⌘ K
NCoE Selection Test study materials
NCoE Selection Test study resources

NCoE Selection Test practice questions

One question at a time. Build your NCoE Selection Test understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Network Fundamentals and Protocols

Which OSI layer is responsible for logical addressing and path selection between networks?

  1. Transport layer
  2. Network layer Correct answer.
  3. Data link layer
  4. Session layer

Explanation

The network layer handles logical addressing (such as IP addresses) and routing decisions that determine the path packets take across multiple networks. The data link layer deals with physical addressing and local delivery, while transport and session layers operate at higher abstraction levels.

Question 2Network Fundamentals and Protocols

A host with IP address 192.168.10.130 and subnet mask 255.255.255.192 belongs to which subnet?

  1. 192.168.10.64/26
  2. 192.168.10.128/26 Correct answer.
  3. 192.168.10.192/26
  4. 192.168.10.0/25

Explanation

A /26 mask has a block size of 64 in the last octet, producing subnets at .0, .64, .128, and .192. The address .130 falls in the .128 block, which spans .128 through .191.

Question 3Network Fundamentals and Protocols

Which transport protocol provides reliable, connection-oriented delivery with acknowledgments and retransmission?

  1. ARP
  2. TCP Correct answer.
  3. ICMP
  4. UDP

Explanation

TCP establishes a connection via a three-way handshake and guarantees ordered, reliable delivery using sequence numbers, acknowledgments, and retransmissions. UDP is connectionless and does not guarantee delivery, while ICMP and ARP are not transport-layer protocols.

Question 4Network Fundamentals and Protocols

What is the primary purpose of the ARP protocol on an IPv4 network?

  1. To map a known IP address to the corresponding MAC address on the local link Correct answer.
  2. To discover the default gateway through dynamic routing advertisements
  3. To translate private IP addresses into public addresses for internet access
  4. To assign IP addresses automatically to hosts joining the network

Explanation

ARP broadcasts a request asking which device owns a given IPv4 address, and the owner replies with its MAC address so frames can be encapsulated for local delivery. Address translation is NAT, gateway discovery is routing, and automatic assignment is DHCP.

Question 5Network Fundamentals and Protocols

Which port number is the well-known default for HTTPS traffic?

  1. 80
  2. 443 Correct answer.
  3. 53
  4. 22

Explanation

HTTPS uses TCP port 443 by default to carry HTTP over TLS. Port 80 is plain HTTP, port 22 is SSH, and port 53 is DNS.

Question 6Network Fundamentals and Protocols

During the TCP three-way handshake, what flags are set in the first segment sent by the initiating client?

  1. ACK only
  2. FIN and ACK
  3. SYN only Correct answer.
  4. SYN and ACK

Explanation

The client begins connection establishment by sending a segment with only the SYN flag set and an initial sequence number. The server replies with SYN and ACK, and the client completes the handshake with an ACK.

Question 7Network Fundamentals and Protocols

Which device operates primarily at Layer 2 and forwards frames based on destination MAC addresses?

  1. Switch Correct answer.
  2. Firewall
  3. Router
  4. Hub

Explanation

A switch builds a MAC address table and forwards frames only out the port associated with the destination MAC, operating at the data link layer. A hub repeats to all ports, a router forwards by IP, and a firewall filters traffic by policy.

Question 8Network Fundamentals and Protocols

What is the usable host range of the subnet 10.0.0.0/29?

  1. 10.0.0.1 through 10.0.0.6 Correct answer.
  2. 10.0.0.1 through 10.0.0.7
  3. 10.0.0.0 through 10.0.0.6
  4. 10.0.0.0 through 10.0.0.7

Explanation

A /29 leaves three host bits, giving eight addresses total. The network address .0 and broadcast address .7 are reserved, so usable hosts run from .1 through .6.

Question 9Network Fundamentals and Protocols

Which record type in DNS maps a hostname to an IPv6 address?

  1. AAAA Correct answer.
  2. A
  3. CNAME
  4. MX

Explanation

An AAAA record stores a 128-bit IPv6 address for a hostname. A records hold IPv4 addresses, CNAME records alias one name to another, and MX records designate mail servers.

Question 10Network Fundamentals and Protocols

A technician sees a host configured with address 169.254.22.5. What does this address indicate?

  1. The host failed to reach DHCP and self-assigned a link-local address Correct answer.
  2. The host is using a public routable address
  3. The host obtained an address from a DHCP server
  4. The host is configured with a static manual address

Explanation

The 169.254.0.0/16 range is the IPv4 link-local block used by APIPA when a DHCP server cannot be reached. The host self-assigns an address in this range and can communicate only on the local segment.

Question 11Network Fundamentals and Protocols

Which characteristic distinguishes UDP from TCP?

  1. UDP has lower overhead because it omits connection setup and acknowledgments Correct answer.
  2. UDP performs a three-way handshake before transmitting data
  3. UDP retransmits lost datagrams automatically
  4. UDP guarantees ordered delivery of segments

Explanation

UDP is a connectionless protocol with a minimal eight-byte header and no handshake, acknowledgments, or retransmission, which lowers overhead. Applications needing reliability must implement it themselves or use TCP.

Question 12Network Fundamentals and Protocols

Which IPv4 address range is reserved for private use according to RFC 1918?

  1. 172.16.0.0 through 172.31.255.255 Correct answer.
  2. 10.0.0.0 through 10.255.255.255 only
  3. 192.168.0.0 through 192.168.255.255 only
  4. 172.0.0.0 through 172.255.255.255

Explanation

RFC 1918 defines three private blocks: 10.0.0.0/8, 172.16.0.0/12 (172.16.0.0 through 172.31.255.255), and 192.168.0.0/16. The 172.16.0.0/12 block spans exactly 172.16 through 172.31 in the second octet.

Question 13Network Fundamentals and Protocols

What does a default gateway provide to a host on a subnet?

  1. A backup address used when DHCP fails
  2. A DNS server address for name resolution
  3. A next-hop router address for traffic destined outside the local subnet Correct answer.
  4. A MAC address used for all local frame delivery

Explanation

When a destination IP is not on the host's local subnet, the host sends the frame to the default gateway's MAC address so the router can forward it onward. Local delivery uses ARP for the destination itself, and DNS or DHCP serve different purposes.

Question 14Network Fundamentals and Protocols

Which ICMP message type is used by the ping utility to test reachability?

  1. Time exceeded
  2. Destination unreachable
  3. Redirect
  4. Echo request Correct answer.

Explanation

Ping sends an ICMP Echo Request and expects an Echo Reply, confirming that the target is reachable and responding. Redirect, unreachable, and time-exceeded messages report routing conditions or errors rather than serving as reachability probes.

Question 15Network Fundamentals and Protocols

An engineer wants to divide 192.168.5.0/24 into subnets supporting at least 50 hosts each. What is the most efficient subnet mask?

  1. 255.255.255.128
  2. 255.255.255.224
  3. 255.255.255.240
  4. 255.255.255.192 Correct answer.

Explanation

A /26 mask leaves six host bits, yielding 62 usable hosts, which satisfies the 50-host requirement with the least waste. A /27 gives only 30 usable hosts and is too small, while /25 and /28 waste more space or fail the requirement.

Question 16Network Fundamentals and Protocols

Which protocol uses a three-way handshake and windowing to manage flow control between sender and receiver?

  1. TCP Correct answer.
  2. ICMP
  3. UDP
  4. IP

Explanation

TCP uses a sliding window mechanism so the receiver can advertise how much data it can accept, preventing the sender from overwhelming it, and it establishes sessions with a three-way handshake. ICMP, UDP, and IP lack these flow-control features.

Question 17Network Fundamentals and Protocols

What is the role of the TTL field in an IPv4 header?

  1. It stores a checksum for the header only
  2. It specifies the total length of the packet in bytes
  3. It limits the number of hops a packet can traverse before being discarded Correct answer.
  4. It identifies the upper-layer protocol carried in the payload

Explanation

Each router decrements the TTL by one, and when it reaches zero the packet is discarded with an ICMP time-exceeded message, preventing loops. Total length, protocol, and header checksum are separate fields.

Question 18Network Fundamentals and Protocols

A network uses the address 200.1.1.0/28. How many usable host addresses does this subnet provide?

  1. 8
  2. 16
  3. 30
  4. 14 Correct answer.

Explanation

A /28 leaves four host bits, producing 16 total addresses. Subtracting the network and broadcast addresses leaves 14 usable hosts.

Question 19Network Fundamentals and Protocols

Which statement best describes the function of NAT on a border router?

  1. It assigns MAC addresses to newly attached devices
  2. It encrypts payloads between internal hosts and external servers
  3. It rewrites source addresses so many private hosts share a public address Correct answer.
  4. It resolves domain names to IP addresses for internal clients

Explanation

NAT, commonly in the form of PAT, translates private source addresses to a public address and tracks the mapping so return traffic reaches the correct internal host. Encryption, MAC assignment, and name resolution are handled by other mechanisms.

Question 20Network Fundamentals and Protocols

Which feature of IPv6 eliminates the need for broadcast-based address resolution used in IPv4?

  1. Automatic address autoconfiguration
  2. Neighbor Discovery using multicast Correct answer.
  3. Flow labels
  4. Extension headers

Explanation

IPv6 Neighbor Discovery replaces ARP by using ICMPv6 multicast solicitation and advertisement messages to resolve link-layer addresses. Autoconfiguration, extension headers, and flow labels serve other purposes.

Question 21Network Fundamentals and Protocols

A packet arrives at a router with destination 10.20.30.40. The routing table contains 10.0.0.0/8, 10.20.0.0/16, and 10.20.30.0/24. Which route is selected?

  1. The packet is dropped because multiple routes match
  2. 10.20.30.0/24 Correct answer.
  3. 10.20.0.0/16
  4. 10.0.0.0/8

Explanation

When multiple routes match a destination, the router applies the longest-prefix match rule and chooses the most specific route. The /24 entry is more specific than the /16 and /8 entries, so it wins.

Question 22Network Fundamentals and Protocols

Which field in the TCP header allows a receiver to signal how much data it can accept without overflowing its buffer?

  1. Checksum
  2. Window size Correct answer.
  3. Sequence number
  4. Urgent pointer

Explanation

The window size field advertises the amount of data the receiver is willing to accept, enabling flow control. Sequence numbers order bytes, the urgent pointer marks urgent data, and the checksum detects corruption.

Question 23Network Fundamentals and Protocols

Which two protocols are most commonly used together to securely retrieve email from a mail server while leaving messages on the server?

  1. IMAP and TLS Correct answer.
  2. FTP and SSH
  3. SMTP and POP3
  4. SNMP and TFTP

Explanation

IMAP keeps messages on the server and synchronizes mailbox state across clients, and running it over TLS secures the session. POP3 typically downloads and removes messages, while SMTP is for sending, and FTP, SNMP, and TFTP serve unrelated purposes.

Question 24Network Fundamentals and Protocols

What is the purpose of the DHCP DISCOVER message?

  1. A client broadcasts to locate available DHCP servers Correct answer.
  2. A server offers an address to the client
  3. A server acknowledges the completed lease
  4. A client formally requests the offered address

Explanation

The DHCP process begins with the client broadcasting a DISCOVER to find servers. Servers respond with OFFER, the client sends REQUEST, and the server confirms with ACK.

Question 25Network Fundamentals and Protocols

A host can reach other hosts on its own subnet but cannot reach the internet, and its default gateway is misconfigured. Which behavior explains the symptom?

  1. ARP fails for local hosts, so all communication stops
  2. Frames to remote destinations are sent to the wrong next hop, so replies never return Correct answer.
  3. DNS resolution fails only for internal hostnames
  4. The subnet mask is automatically corrected by DHCP

Explanation

Local traffic uses ARP for the destination directly and succeeds, but off-subnet traffic must be sent to the default gateway's MAC address. A wrong gateway sends those frames to a device that cannot forward them, so remote replies never arrive.

Question 26Network Fundamentals and Protocols

Which OSI layer is responsible for logical addressing and path determination between networks?

  1. Layer 2, the data link layer
  2. Layer 5, the session layer
  3. Layer 3, the network layer Correct answer.
  4. Layer 4, the transport layer

Explanation

The network layer handles logical (IP) addressing and routing decisions that move packets between different networks. Layer 2 deals with MAC addressing on a local link, while layers 4 and 5 handle transport and session functions.

Question 27Network Fundamentals and Protocols

A switch receives a frame whose destination MAC address is not in its MAC address table. What does the switch do with the frame?

  1. It floods the frame out all ports except the receiving port Correct answer.
  2. It forwards the frame only to the default gateway port
  3. It returns the frame to the sender with an ICMP unreachable
  4. It drops the frame and logs an error

Explanation

Unknown unicast frames are flooded out every port in the same VLAN except the ingress port so the destination can be learned. The switch records the source MAC and port, and later traffic to that address is unicast.

Question 28Network Fundamentals and Protocols

Which statement describes the behavior of ARP on an IPv4 local network?

  1. It resolves an IP address to a MAC address by broadcasting a request Correct answer.
  2. It assigns IP addresses to hosts from a central pool
  3. It encrypts frames between two hosts on the same segment
  4. It resolves a MAC address to an IP address by querying a DNS server

Explanation

ARP broadcasts a request asking which device owns a given IPv4 address, and the owner replies with its MAC address. The result is cached so later frames can be sent directly.

Question 29Network Fundamentals and Protocols

Which port number is used by the standard HTTPS service?

  1. 21
  2. 80
  3. 443 Correct answer.
  4. 3389

Explanation

HTTPS is assigned TCP port 443 by IANA and is used for HTTP over TLS. Port 80 is plain HTTP, port 21 is FTP control, and 3389 is RDP.

Question 30Network Fundamentals and Protocols

A host on VLAN 10 must send traffic to a host on VLAN 20. Which device function is required?

  1. A DNS server resolving the destination hostname
  2. A router or Layer 3 switch performing inter-VLAN routing Correct answer.
  3. A Layer 2 switch performing MAC flooding
  4. A hub repeating the frame to all ports

Explanation

VLANs are separate broadcast domains, so traffic between them must be routed at Layer 3. A router with subinterfaces or a Layer 3 switch with switched virtual interfaces performs this function.

Question 31Network Fundamentals and Protocols

An engineer sees the route 172.16.0.0/12 in a routing table. Which address range does this prefix cover?

  1. 172.16.0.0 through 172.16.255.255
  2. 172.16.0.0 through 172.31.255.255 Correct answer.
  3. 172.0.0.0 through 172.255.255.255
  4. 172.16.0.0 through 172.23.255.255

Explanation

A /12 mask leaves 20 host bits, so the second octet varies across 16 values from 16 to 31. The block therefore spans 172.16.0.0 to 172.31.255.255.

Question 32Network Fundamentals and Protocols

A network administrator needs to summarize the four subnets 10.1.4.0/24, 10.1.5.0/24, 10.1.6.0/24, and 10.1.7.0/24 into a single route. Which prefix accomplishes this?

  1. 10.1.4.0/24
  2. 10.1.4.0/23
  3. 10.1.4.0/22 Correct answer.
  4. 10.1.0.0/21

Explanation

The four /24 blocks occupy the third octet values 4 through 7, which differ only in the lowest two bits. Aggregating them requires removing those two bits, giving a /22 network of 10.1.4.0/22.

Question 33Network Fundamentals and Protocols

Which statement accurately describes the difference between a collision domain and a broadcast domain?

  1. A collision domain is a segment where frames can collide, while a broadcast domain is the set of devices reached by a single broadcast Correct answer.
  2. A collision domain is bounded by a router, and a broadcast domain is bounded by a switch
  3. A collision domain and a broadcast domain are always identical on any switch port
  4. A collision domain contains only wireless clients, and a broadcast domain contains only wired clients

Explanation

A collision domain is the portion of a network where simultaneous transmissions can interfere, whereas a broadcast domain is the group of devices that receive a broadcast frame. Switches create a separate collision domain per port but keep one broadcast domain per VLAN.

Question 34Network Fundamentals and Protocols

Which protocol allows a host to discover the link-layer address of a neighbor on an IPv6 network?

  1. NDP Correct answer.
  2. ARP
  3. DHCPv6
  4. ICMP redirect

Explanation

IPv6 Neighbor Discovery uses ICMPv6 Neighbor Solicitation and Neighbor Advertisement messages to map IPv6 addresses to link-layer addresses. ARP is an IPv4-only protocol and is not used in IPv6.

Question 35Network Fundamentals and Protocols

What is the purpose of the TCP sequence number field?

  1. It identifies the application protocol carried in the payload
  2. It records the number of hops the segment has traversed
  3. It specifies the maximum segment size the sender will accept
  4. It orders bytes so the receiver can reassemble data and detect loss Correct answer.

Explanation

Each TCP segment carries a sequence number identifying the position of its first data byte in the stream. The receiver uses it to reorder out-of-order segments and to acknowledge what has arrived.

Question 36Network Fundamentals and Protocols

A company wants to allow a single public IPv4 address to serve many internal hosts while preserving most transport-layer information. Which technique accomplishes this?

  1. Dynamic routing with OSPF
  2. Port address translation Correct answer.
  3. Static one-to-one NAT
  4. Proxy ARP

Explanation

Port address translation maps many internal addresses to one public address by translating source ports as well, so connections can be distinguished. One-to-one NAT consumes a public address per internal host.

Question 37Network Fundamentals and Protocols

A network technician suspects a duplex mismatch on a link. Which symptom most strongly supports that diagnosis?

  1. Collisions and CRC errors increase on one side while the other side reports late collisions Correct answer.
  2. The interface negotiates a lower speed than expected but shows no errors
  3. The link shows high bandwidth utilization with no error counters incrementing
  4. The link fails to come up at all

Explanation

A duplex mismatch produces collisions and CRC or alignment errors, often seen as late collisions on the full-duplex side and FCS errors on the half-duplex side. Speed mismatch instead prevents the link from coming up.

Question 38Network Fundamentals and Protocols

Which statement best explains why TCP uses a three-way handshake before data transfer?

  1. It encrypts the session key before any application data is sent
  2. It selects the best path through the network for the connection
  3. It allows both endpoints to agree on initial sequence numbers and confirm bidirectional reachability Correct answer.
  4. It assigns an IP address to the client for the duration of the connection

Explanation

The SYN, SYN-ACK, ACK exchange synchronizes initial sequence numbers in both directions and verifies that each side can send and receive. Encryption and path selection are handled by other mechanisms.

Question 39Network Fundamentals and Protocols

An enterprise deploys a router-on-a-stick configuration. Which element is required on the router to forward traffic for multiple VLANs over one physical link?

  1. A loopback interface for each VLAN
  2. A separate physical interface per VLAN
  3. Subinterfaces, each with an 802.1Q encapsulation and VLAN tag Correct answer.
  4. A trunk port configured only as an access port

Explanation

Router-on-a-stick uses one physical interface divided into subinterfaces, each tagged with an 802.1Q VLAN identifier and an IP address for that subnet. The connected switch port must be a trunk carrying those VLAN tags.

Question 40Network Fundamentals and Protocols

A host sends a packet to 192.168.1.200/26. The host's own address is 192.168.1.70/26. What does the host do with the packet?

  1. It drops the packet because the destination address is a broadcast address
  2. It sends the packet directly to the destination on the local link because both addresses share the same subnet
  3. It sends the packet to the DNS server for resolution
  4. It sends the packet to its default gateway because the destination is in a different subnet Correct answer.

Explanation

A /26 mask creates blocks of 64 addresses, so 192.168.1.70 lies in the 192.168.1.64–127 block while 192.168.1.200 lies in the 192.168.1.192–255 block. Because the destination is off-subnet, the host forwards the frame to its default gateway.

Question 41Routing and Switching

On a Cisco IOS device, which command displays the current contents of the routing table?

  1. show ip protocols
  2. show ip interface brief
  3. show ip route Correct answer.
  4. show running-config

Explanation

The show ip route command prints the contents of the Routing Information Base, including the code legend and each prefix with its administrative distance and metric. It is the primary verification step when confirming that a prefix was installed by the intended protocol.

Question 42Routing and Switching

A switch port configured with the switchport mode access command belongs to which type of VLAN membership?

  1. Routed, performing Layer 3 forwarding
  2. Trunk, carrying multiple tagged VLANs
  3. Dynamic, negotiated through VTP
  4. Access, carrying a single untagged VLAN Correct answer.

Explanation

An access port carries traffic for exactly one VLAN and normally sends frames untagged toward the attached host. The VLAN is set with the switchport access vlan command. Trunk ports, by contrast, carry multiple VLANs and normally use 802.1Q tagging.

Question 43Routing and Switching

Which destination address does a host use when it must send a frame to a device on a different subnet?

  1. The MAC address of the destination host
  2. The MAC address of the DNS server
  3. The MAC address of the default gateway Correct answer.
  4. The broadcast MAC address ff:ff:ff:ff:ff:ff

Explanation

When the destination IP address is off-subnet, the host resolves the MAC address of its configured default gateway and places that MAC in the frame header. The destination IP address remains that of the remote host. The gateway then forwards the packet toward the destination.

Question 44Routing and Switching

Which statement describes the function of administrative distance in Cisco routing?

  1. It sets the maximum number of equal-cost paths installed in the RIB.
  2. It limits the number of hops a packet may traverse.
  3. It measures the cost of a path within a single routing protocol.
  4. It ranks route sources by trustworthiness when the same prefix is learned from multiple sources. Correct answer.

Explanation

Administrative distance is a value from 0 to 255 that expresses the trustworthiness of a route source. When several protocols offer the same prefix, the route with the lowest administrative distance is preferred. The metric is used only to compare paths within the same protocol.

Question 45Routing and Switching

Which protocol provides loop-free Layer 2 forwarding by blocking redundant ports?

  1. Virtual Router Redundancy Protocol
  2. Spanning Tree Protocol Correct answer.
  3. Link Aggregation Control Protocol
  4. Dynamic Host Configuration Protocol

Explanation

Spanning Tree Protocol elects a root bridge and places redundant ports into a blocking state so that a single active topology exists. This prevents broadcast storms and MAC table instability caused by Layer 2 loops. The other protocols serve different purposes entirely.

Question 46Routing and Switching

Which address range is reserved for IPv4 link-local (APIPA) addressing?

  1. 172.16.0.0/12
  2. 169.254.0.0/16 Correct answer.
  3. 192.168.0.0/16
  4. 10.0.0.0/8

Explanation

The 169.254.0.0/16 block is reserved for link-local addressing, which a host self-assigns when no DHCP server responds. The other three ranges listed are private address space defined in RFC 1918 for internal use with routing.

Question 47Routing and Switching

Which OSPF packet type is used to confirm that a neighbor is reachable and to detect a failed adjacency?

  1. Hello Correct answer.
  2. Link State Update
  3. Link State Request
  4. Database Description

Explanation

OSPF sends Hello packets on a periodic interval, and a neighbor is declared down when the dead interval expires without a Hello. Hellos also carry parameters such as area ID, router ID, and timers that must match before adjacency forms.

Question 48Routing and Switching

What does a switch do when it receives a unicast frame whose destination MAC address is absent from its MAC address table?

  1. It floods the frame out all ports in the ingress VLAN except the ingress port. Correct answer.
  2. It queues the frame until the destination host sends a frame.
  3. It discards the frame and sends an ICMP unreachable message.
  4. It forwards the frame only to the port mapped to the default VLAN.

Explanation

Unknown unicast frames are flooded within the ingress VLAN so that the destination can be reached without a table entry. When the destination replies, the switch learns its MAC address and stops flooding for that address. This behavior is fundamental to transparent bridging.

Question 49Routing and Switching

A router has two routes to 192.168.10.0/24: one learned by OSPF with metric 20 and one learned by EIGRP with metric 409600. Assuming default administrative distances, which route is installed in the routing table?

  1. The EIGRP route, because OSPF has a higher administrative distance Correct answer.
  2. The EIGRP route, because its metric is higher
  3. The OSPF route, because its metric is lower
  4. The OSPF route only if the two routes have equal cost

Explanation

Administrative distance is compared before metrics across different protocols. EIGRP has a default distance of 90 and OSPF has 110, so the EIGRP route wins even though its metric value is numerically larger. Metrics are only compared between paths from the same protocol.

Question 50Routing and Switching

A host on VLAN 10 must communicate with a host on VLAN 20 through a Layer 3 switch. Which configuration enables this on the Layer 3 switch?

  1. Switched virtual interfaces for VLAN 10 and VLAN 20 with IP routing enabled Correct answer.
  2. A routed port assigned to VLAN 10 only
  3. An access port in VLAN 10 and an access port in VLAN 20 only
  4. A trunk port carrying both VLANs with no SVI configured

Explanation

Inter-VLAN routing on a multilayer switch requires an SVI for each VLAN with an IP address, plus the global ip routing command. Hosts use the SVI addresses as their default gateways. Trunking alone carries the VLANs but does not route between them.