Network Interface Cards and Link Status

CCST Networking Study Guide Exam

Track your progress as you read

Finished sections get a check mark.

1 Orientation, Official Sources, and Exam Strategy

Official Exam Profile and Source Hierarchy Registration, Delivery, Attempts, and Results Using the Six Official Topic Areas Building a Practical Study Plan Exam Strategy Without Unsupported Shortcuts Ethical Preparation and Path Forward

2 Network Standards, Models, and Common Protocols

Network Building Blocks OSI and TCP/IP Models Frames, Packets, Segments, and Data Flow Network Types and Scope Cloud, On-Premises, Protocols, and Ports Bandwidth, Throughput, Latency, and Jitter

3 Chapter 3: IPv4, IPv6 Addressing, and Subnet Formats

3.1 Public, Private, and Local Addressing 3.2 IPv4 Dotted Decimal and Binary Basics 3.3 Subnet Masks, CIDR, and Prefix Lengths 3.4 Subnet Logic, Host Ranges, and Gateways 3.5 IPv6 Address and Prefix Formats 3.6 MAC vs IP in Addressing Troubleshooting

4 Endpoints, Media, Cabling, and Client Connectivity

Endpoint Devices and Network Roles Network Interface Cards and Link Status Copper, Fiber, Coax, and Connector Basics Wired, Wi-Fi, and Cellular Access Methods Interference, Signal Quality, and Physical Reliability Client Connectivity Checks by Operating System

5 Infrastructure Devices, Ports, and Physical Installation

Infrastructure Device Roles Ports, Connectors, and Device Identification Cisco Device LEDs and Status Checks Network Diagrams and Cabling Instructions Power over Ethernet and Powered Devices Racks, Patch Panels, and Installation Basics

6 Switching, Routing, and Network Services

Basic Switching and MAC Learning VLANs and Local Boundaries Routing, Default Gateway, and ARP DNS, DHCP, and NAT Services Transport-Layer Services Small Network Traffic Flow

7 Troubleshooting Methodology, Ticketing, and Documentation

Help Desk Intake and Information Gathering Scope, Impact, and Prioritization Reproduce, Isolate, and Escalate Ticket Quality and Operational Documentation User Communication and Change History Physical, Data Link, and Network Layer Triage

8 Diagnostic Commands, Packet Capture, and Device Data

Command-Line Triage and Ping Path and Client Configuration Commands DNS and Socket Diagnostics Wireshark Capture and Save Device Access and Data Collection Basic Cisco Show Commands

9 Security, Firewalls, Wireless, and Safe Defaults

Firewall Filtering and Traffic Policy Least Privilege, AAA, Passwords, and MFA Wireless Security, WPA2, WPA3, and WPAx Guest Networks, Segmentation, and Shared Devices Common Threats and Safe User Practices Secure Home Router Baseline

10 Integrated Small Network Build and Repair Labs

Lab 1: Build a Basic Office LAN Lab 2: Repair No Internet After an Office Move Lab 3: Wireless Clients Cannot Reach Local Resources Lab 4: DHCP, DNS, and Default Gateway Symptoms Lab 5: Switch, Router, and Service Boundaries Lab 6: Escalation, Documentation, and Handoff

11 CCST to CCNA Career Path and Operational Readiness

Entry-Level Networking Roles and Expectations CCST vs CCNA and the Cisco Roadmap NetAcad 70-Hour Path and Study Plan Lab Habits for Real Operational Readiness Ethical Preparation, Portfolio, and Logbook Exam Scheduling Calendar and Readiness Check

12 Final Review, Exam Day, and Remediation Plan

Final Review Map to Official Objectives 50-Minute Exam Day Timing Unsupported Facts and Ethical Preparation Retake Planning Before the First Attempt Post-Fail Remediation Workflow Post-Pass Next Steps and Validity

Network Interface Cards and Link Status

Key Takeaways Explain This Topic AI

A NIC is the physical or virtual interface that attaches a host to the network; one endpoint can have several (Ethernet, Wi-Fi, USB, dock, VPN, virtual).

Every Ethernet/Wi-Fi NIC has a 48-bit MAC address (Layer 2); Wi-Fi MAC randomization can break allow lists and DHCP reservations.

Wired first checks: link light, cable seating, known-good cable/jack, bypass the dock, and confirm the switch port is up.

Negotiated speed and duplex (auto-negotiation, full duplex) reveal cable, dock, adapter, or port faults before any IP test.

Wi-Fi NICs show radio on/off, SSID visibility, signal, band, security type, and association state instead of a copper link light.

Last updated: June 2026

NICs and Link Status

A network interface card (NIC) is the component that lets an endpoint attach to a network. On modern hardware the NIC may be soldered to the motherboard, built into a mobile radio, supplied by a USB adapter, embedded in a docking station, or created in software as a virtual adapter. A laptop commonly has all of these at once: a Wi-Fi radio, wired Ethernet through a dock, a Bluetooth Personal Area Network (PAN) interface, and a VPN virtual adapter. The first support step is always to identify which interface is actually carrying traffic.

MAC Addresses and Randomization

Every Ethernet and Wi-Fi NIC has a MAC address , a 48-bit (six-byte) Layer 2 hardware identifier written as 12 hexadecimal digits, for example 00:1A:2B:3C:4D:5E . The first three bytes are the Organizationally Unique Identifier (OUI) assigned to the vendor. A MAC differs from an IP address, which is the host's logical Layer 3 placement. One endpoint can hold several MACs, one per interface. Windows 11, iOS, and Android default to MAC randomization (a private, per-SSID address) for privacy.

That breaks MAC allow lists, captive-portal sign-ins, and DHCP reservations, so if a ticket cites a MAC, confirm it belongs to the active interface and check whether randomization is on.

Wired Link Troubleshooting

Wired NIC work starts at Layer 1. A link light on the NIC, wall jack, switch, or dock usually means two Ethernet interfaces have established an electrical link. Colors and blink patterns vary by vendor, so follow local documentation. Practical checks:

• Reseat the cable fully (listen for the RJ-45 click)
• Swap in a known-good patch cord
• Try a known-good wall jack
• Bypass the dock by plugging directly into the laptop
• Confirm the switch port shows up/up, not err-disabled
• Speed and Duplex

Speed and duplex describe how the wired link runs. Common rates are 100 Mbps, 1 Gbps, 2.5 Gbps, and 10 Gbps. Duplex is whether both sides transmit and receive simultaneously; modern links use auto-negotiation and full duplex. A poor cable or a forced/half-duplex mismatch causes slow speed, late collisions, and intermittent drops.

• Symptom in OS Likely cause First action
• No link at all Cable, port, or adapter dead Known-good cable and port
• Link up at 100 Mbps on a Gig port Damaged pair / bad patch cord Replace cable, retest speed
• Frequent drops after sleep/dock Driver or dock state Update driver, bypass dock
• Link up but no IP DHCP or VLAN issue Move to addressing checks
• Wireless and Virtual NIC Clues

A Wi-Fi adapter has no copper link light. Instead check whether the radio is on, whether it sees the SSID, signal strength, band (2.4/5/6 GHz), security type, and association state. Airplane mode, a disabled radio, the wrong SSID, a bad passphrase, a pending captive portal, or unsupported security can stop connectivity before IP work begins. For a virtual NIC , the adapter can be disconnected from the virtual switch even when the physical host has perfect network access.

Order of Operations

A structured NIC check moves simple to specific: confirm the intended path, verify the adapter is enabled, check physical link or wireless association, inspect IP settings, test gateway reachability, then test DNS and the application. Common trap: treating a disconnected adapter or wrong SSID as a "DNS problem" or "server outage" wastes time and points the engineer in the wrong direction.

Drivers, Power, and Operating-System State

A NIC can be physically perfect and still fail at the software layer. The driver may be missing, outdated, disabled by Group Policy, or simply confused after the laptop wakes from sleep or is hot-docked, which is one of the most common real-world causes of "my Ethernet stopped working after lunch." Windows exposes adapter and driver state in Device Manager and in Settings; Linux uses ip link to show whether an interface is administratively up or down; macOS shows enabled services in Network settings; Android and iOS expose the radio toggles in their connectivity panels.

Power management adds another wrinkle: a setting that lets the operating system turn off the adapter to save energy can drop links during idle periods, producing intermittent failures that look like cabling faults. Disabling and re-enabling the adapter, or reseating it in the dock, frequently clears a stuck post-sleep state, but you should record that you did so.

Counting Interfaces Correctly

The biggest conceptual error at this level is assuming an endpoint has one interface. A single laptop can simultaneously present a wired adapter, a Wi-Fi radio, a Bluetooth PAN interface, a USB tethering adapter, and one or more VPN virtual adapters, each with its own MAC, its own IP, and its own link state. The operating system chooses an outbound route by interface metric, so traffic may leave on an interface the user is not thinking about. Before drawing any conclusion, list every adapter, mark which one is up, and confirm which one carries the destination of interest.

This single discipline prevents the classic mistake of "fixing" DNS on the Wi-Fi adapter while the user's corporate traffic is actually riding a half-broken VPN tunnel or a stale docked Ethernet link.