CCNP Mock Exam 104 — 25 Questions

Question 1

Refer to the exhibit. An administrator needs to ensure that traffic to 192.168.1.0/24 is forwarded via a different path than traffic to 192.168.2.0/24, even though both routes are learned via OSPF with the same metric. Which action should the administrator take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Add a static route for 192.168.1.0/24 with a lower administrative distance than OSPF.. Adding a static route for 192.168.1.0/24 with a lower administrative distance (e.g., 1) than OSPF (default 110) forces the router to prefer the static route over the OSPF-learned route, even though the OSPF metric is the same. This allows traffic to 192.168.1.0/24 to use a different next-hop (e.g., 10.0.0.1) while traffic to 192.168.2.0/24 continues using the OSPF-learned path via 10.0.0.2, achieving the desired path differentiation without altering OSPF metrics or using complex PBR.

Answer

Configure policy-based routing to match 192.168.1.0/24 and set the next hop to 10.0.0.1.

Answer

Use the 'distance ospf' command to change the OSPF administrative distance for all routes.

Answer

Adjust the OSPF cost on the interface to 10.0.0.2.

Question 2

What is the maximum hop count for EIGRP?

Accepted Answer

100. EIGRP uses a maximum hop count of 100 by default to prevent routing loops. This is a hard limit; if a route's hop count exceeds 100, EIGRP considers it unreachable. This value is configurable via the 'metric maximum-hops' command under the EIGRP process.

Answer

15

Answer

255

Answer

16

Question 3

Drag and drop each MPLS label field on the left to its matching bit size on the right.

Accepted Answer

Label: 20 bits. The MPLS label is 20 bits, Traffic Class (TC) is 3 bits, Bottom of Stack (S) is 1 bit, and TTL is 8 bits, totaling 32 bits per label entry.

Question 4

Which two statements about MPLS VPN (Layer 3 VPN) are true? (Choose two.)

Accepted Answer

PE routers maintain separate VRF tables for each VPN customer.. In MPLS Layer 3 VPNs, the PE router maintains separate VRF tables per customer and uses MP-BGP to exchange VPNv4 routes (including the route distinguisher and VPN label). The P router does not need to know customer routes; it only swaps labels. The CE router does not participate in MPLS; it runs standard IP routing with the PE.

Answer

P routers must maintain a full routing table for each VPN customer.

Answer

CE routers run MPLS and participate in label distribution with the PE.

Answer

The VPN label is used by P routers to forward traffic across the MPLS core.

Question 5

Which three statements about LDP (Label Distribution Protocol) are true? (Choose three.)

Accepted Answer

LDP uses UDP to send Hello messages for neighbor discovery.. LDP uses Hello messages (UDP on port 646) for neighbor discovery and TCP (port 646) for session establishment and label exchange. LDP assigns labels to all prefixes in the routing table by default. LDP does not support traffic engineering; RSVP-TE is used for that. LDP does not use OSPF for label distribution; it has its own discovery and session mechanisms.

Answer

LDP supports traffic engineering by reserving bandwidth along LSPs.

Answer

LDP uses OSPF to distribute label bindings across the network.

Question 6

Which three statements about MPLS forwarding are true? (Choose three.)

Accepted Answer

MPLS forwarding uses the Label Forwarding Information Base (LFIB) to make forwarding decisions.. MPLS forwarding is based on a label lookup in the LFIB (Label Forwarding Information Base). The LFIB is populated by label distribution protocols such as LDP or RSVP-TE. The FIB (Forwarding Information Base) is used for IP forwarding, not MPLS. The LIB (Label Information Base) stores all labels learned from neighbors, but the LFIB is used for actual forwarding decisions. Option D is incorrect because the FIB is not used for MPLS forwarding. Option E is incorrect because the RIB (Routing Information Base) is used for IP routing, not MPLS label switching.

Answer

MPLS forwarding uses the Forwarding Information Base (FIB) for label lookups.

Answer

MPLS forwarding uses the Routing Information Base (RIB) to determine the next hop.

Question 7

A company is deploying a new campus network with a hierarchical design (core, distribution, access). The QoS design must ensure that voice traffic is prioritized end-to-end, and that marking is trusted only on access ports connected to IP phones. Which architectural approach should the architect take for classification and marking?

Accepted Answer

Configure the access switches to trust DSCP on ports connected to IP phones, and apply queuing policies on distribution and core switches that match the trusted markings.. It aligns with the Cisco QoS trust boundary model for campus networks. IP phones are trusted endpoints that mark voice traffic with the correct DSCP values (e.g., EF for voice, AF41 for video). By configuring the access switch port to trust DSCP from the IP phone, the marking is preserved end-to-end. Distribution and core switches then apply queuing policies (e.g., LLQ) based on these trusted markings, ensuring voice traffic receives priority treatment across the entire network.

Answer

Remark all traffic to a single DSCP value at the access layer and apply priority queuing at the core.

Answer

Apply QoS policies only at the core layer, ignoring markings from the access layer.

Answer

Use the distribution layer to reclassify traffic based on source MAC addresses of IP phones.

Question 8

A network engineer runs the following command on Router R1:

R1# show ip eigrp interfaces detail
EIGRP-IPv4 Interfaces for AS(100)

Interface: GigabitEthernet0/0
  Mtu: 1500, Bandwidth: 1000000 Kbit, Delay: 100 microseconds
  Reliability: 255/255, Load: 1/255, Min MTU: 1500
  Hello interval: 5 sec, Hold time: 15 sec
  Next hello in: 3 secs
  Passive interface: No
  Split horizon: Enabled
  Authentication: None
  Neighbor count: 1

Interface: GigabitEthernet0/1
  Mtu: 1500, Bandwidth: 100000 Kbit, Delay: 1000 microseconds
  Reliability: 255/255, Load: 1/255, Min MTU: 1500
  Hello interval: 5 sec, Hold time: 15 sec
  Next hello in: 1 secs
  Passive interface: No
  Split horizon: Enabled
  Authentication: None
  Neighbor count: 1

Based on this output, what can be concluded?

Accepted Answer

GigabitEthernet0/1 will have a higher EIGRP metric than GigabitEthernet0/0 for the same prefix.. EIGRP uses the composite metric formula: metric = (K1 * bandwidth + (K2 * bandwidth) / (256 - load) + K3 * delay) * (K5 / (reliability + K4)). With default K values (K1=K3=1, others=0), the metric simplifies to bandwidth + delay. Gi0/0 has bandwidth 1,000,000 Kbit and delay 100 microseconds, while Gi0/1 has bandwidth 100,000 Kbit and delay 1000 microseconds. The lower bandwidth and higher delay on Gi0/1 result in a higher metric for the same prefix.

Answer

Both interfaces have the same metric weight for bandwidth and delay.

Answer

Interface Gi0/1 is configured as a passive interface.

Answer

EIGRP authentication is enabled on both interfaces.

Question 9

Consider the following configuration for a Cisco IOS-XE device:

interface GigabitEthernet0/0
 ip address 192.168.1.1 255.255.255.0
 standby 1 ip 192.168.1.254
 standby 1 priority 150
 standby 1 preempt
!
interface GigabitEthernet0/1
 ip address 192.168.2.1 255.255.255.0
 standby 2 ip 192.168.2.254
 standby 2 priority 100

What is the effect of this HSRP configuration?

Accepted Answer

For group 1, this router will be active and will preempt if a higher-priority router fails. For group 2, it will be active or standby depending on other routers, but will not preempt.. HSRP uses priority to determine the active router. Preempt allows a higher-priority router to become active after a failure. Without preempt, the current active router remains active even if a higher-priority router comes online.

Answer

For group 1, this router will be active if it has the highest priority, and for group 2, it will be standby because priority is 100.

Answer

Both groups will have this router as active because it is configured on both interfaces.

Answer

The configuration is invalid because HSRP group numbers must be unique across all interfaces.

Question 10

Drag and drop the steps of REST API call using Requests library to DNA Center into the correct order, from first to last.

Accepted Answer

Import requests module. The correct order starts with importing the Requests library, sending a POST request to the authentication endpoint with credentials, extracting the token from the JSON response, using the token in headers for a GET request to a resource endpoint, and finally parsing the JSON response.

Question 11

A network engineer runs the following command on Router R1:

R1# show bgp ipv4 unicast neighbors 10.0.1.2 received-routes
Network          Next Hop            Metric LocPrf Weight Path
*> 192.168.1.0/24   10.0.1.2               0    100      0 65050 i
*> 192.168.2.0/24   10.0.1.2               0    100      0 65050 i
*> 10.10.10.0/24    10.0.1.2               0    100      0 65050 65100 i

Total number of prefixes 3

Based on this output, what can be concluded?

Accepted Answer

R1 has received 3 prefixes from neighbor 10.0.1.2.. The command `show bgp ipv4 unicast neighbors 10.0.1.2 received-routes` displays all BGP routes that have been received from the specified neighbor, regardless of whether they are installed in the routing table. The output shows three prefixes, confirming that R1 has received exactly three routes from neighbor 10.0.1.2. The asterisk (*) and greater-than (>) symbols indicate the route is valid and best, but this does not guarantee installation in the routing table if a better administrative distance route exists.

Answer

All three routes are installed in the routing table of R1.

Answer

R1 is advertising these three routes to neighbor 10.0.1.2.

Answer

The route 10.10.10.0/24 has a weight of 0, meaning it is not preferred.

Question 12

Refer to the exhibit. A network engineer is troubleshooting a routing issue. The route for 10.0.0.0/8 is learned via EIGRP with metric 2560512. Which change would most likely cause the metric to increase?

Accepted Answer

Increase the delay on GigabitEthernet0/0.. The EIGRP metric is calculated using the formula: metric = (K1 * bandwidth + (K2 * bandwidth) / (256 - load) + K3 * delay) * 256, with default K values (K1=1, K3=1, others=0). Increasing the delay on the outgoing interface (GigabitEthernet0/0) directly increases the delay component in the composite metric, causing the overall metric to increase. Option D is correct because delay is a key variable in the EIGRP metric calculation.

Answer

Increase the bandwidth on GigabitEthernet0/0.

Answer

Add a redistribute static command under EIGRP.

Answer

Change the administrative distance to 90.

Question 13

A network engineer is configuring a Cisco SD-WAN solution for a multinational corporation. The engineer wants to use a centralized data policy to steer all traffic from the Finance department (VPN 10) to a specific WAN link (MPLS) for security reasons. The engineer creates a policy that matches traffic from VPN 10 and sets the preferred color to 'mpls'. After applying the policy, the engineer tests and finds that traffic from VPN 10 is still using the Internet link. The vEdge routers show that the policy is received and active. What is the most likely reason?

Accepted Answer

The policy is not attached to the correct site list or VPN list.. The most likely reason is that the centralized data policy was not attached to the correct site list or VPN list. In Cisco SD-WAN, a centralized data policy must be explicitly associated with the sites (via site list) and VPNs (via VPN list) where it should be applied. Even if the policy is received and active on the vEdge routers, without proper attachment to the VPN 10 site list, the policy will not enforce the preferred color 'mpls' for Finance traffic, leaving it to use the default Internet link.

Answer

The vEdge routers have not rebooted after the policy was applied.

Answer

The data policy was applied on the vEdge instead of the vSmart.

Answer

The preferred color is not configured correctly in the policy.

Question 14

An engineer is using the Cisco pyATS framework to test the configuration of a new QoS policy on a router. The engineer writes a testbed file and a test script that logs into the router, applies the configuration, and then verifies the output of 'show policy-map interface'. The test script fails because the verification step cannot find the expected output. The engineer confirms that the configuration was applied successfully. What is the most likely cause of the failure?

Accepted Answer

The test script does not include a sleep or wait mechanism after applying the configuration.. After applying a QoS policy with the `service-policy` command, the router may take a short time to update the operational state shown in `show policy-map interface`. Without an explicit sleep or wait mechanism in the pyATS test script, the verification step executes before the router has processed and reflected the new policy, causing a mismatch even though the configuration was applied successfully.

Answer

The pyATS library requires Python 3.8 or later, and the engineer is using an older version.

Answer

The testbed file has incorrect credentials for the router.

Answer

The test script uses the 'genie' library instead of 'pyats' for parsing.

Question 15

A network engineer is troubleshooting an STP issue in a network that uses Rapid PVST+. The network has a root bridge (SW1) and a secondary root bridge (SW2). The engineer notices that after a link failure between SW1 and SW2, the network takes longer than expected to converge. The engineer checks the configuration and finds that SW2 has the 'spanning-tree uplinkfast' command enabled. The engineer also notices that SW2 has a lower priority than SW1. What is the most likely cause of the slow convergence?

Accepted Answer

UplinkFast is enabled, which is incompatible with Rapid PVST+ and causes the switch to use legacy STP convergence.. UplinkFast is a legacy STP feature that is incompatible with Rapid PVST+. When enabled on a switch running Rapid PVST+, it forces the switch to revert to 802.1D STP convergence behavior on the affected ports, disabling the rapid transition mechanisms (such as proposal/agreement and sync). This causes the network to take longer to converge after a link failure, as the switch falls back to the slower listening and learning states.

Answer

SW2 has a lower priority than SW1, so it takes longer to become the root bridge after failure.

Answer

BPDU Guard is enabled on the uplink ports, which prevents BPDU exchange.

Answer

Loop Guard is enabled on the uplink ports, which delays port transition.

Question 16

Which two statements about NetFlow are true? (Choose two.)

Accepted Answer

NetFlow v9 is template-based, allowing flexible and extensible flow record formats. [CORRECT]. Three statements are true: B (NetFlow v9 is template-based), C (Sampled NetFlow reduces CPU impact), and E (NetFlow can be used for IPv4 and IPv6 monitoring). The question asks for two, but three are factually correct; the original marking of E as wrong is inaccurate. A uses TCP instead of UDP, and D incorrectly claims full payload inclusion.

Answer

NetFlow uses TCP port 2055 for exporting flow records.

Answer

NetFlow records include the full payload of each packet.

Question 17

Which two statements about IP Source Guard are true? (Choose two.)

Accepted Answer

IP Source Guard uses the DHCP snooping binding table to validate the source IP address of packets received on a port.. IP Source Guard (IPSG) is a security feature that filters IP traffic on untrusted Layer 2 ports based on the DHCP snooping binding table or static IP source bindings. It can be configured with or without port security. IPSG is typically applied on access ports facing end devices. Option C is incorrect because IPSG can be used with both static and DHCP-assigned IP addresses. Option D is incorrect because IPSG filters traffic at Layer 3 (IP), not Layer 2. Option E is incorrect because IPSG does not require 802.1X authentication; it can operate independently.

Answer

IP Source Guard only works with DHCP-assigned IP addresses, not static IP addresses.

Answer

IP Source Guard filters traffic based on the destination MAC address.

Answer

IP Source Guard requires 802.1X authentication to be enabled on the port.

Question 18

Drag and drop each gRPC method on the left to its matching subscription type on the right.

Accepted Answer

Subscribe: stream telemetry data from device. Subscribe is used for streaming telemetry subscriptions, Capabilities retrieves supported RPCs, Get retrieves data, and Set modifies data.

Question 19

An engineer is designing an MPLS L3VPN service for a customer that requires overlapping IP addresses between two sites. The customer uses OSPF as the PE-CE protocol. The engineer configures VRFs on the PE routers and assigns unique route distinguishers (RDs) and route targets (RTs). However, the customer reports that routes from one site are not being installed in the other site's VRF. What is the most likely cause?

Accepted Answer

The route-target export on PE1 does not match the route-target import on PE2.. In MPLS L3VPN, route targets (RTs) control the import and export of VPN routes between VRFs. For routes from one site to be installed in another site's VRF, the route-target export on the exporting PE must match the route-target import on the importing PE. If they do not match, the routes are not imported, even if route distinguishers (RDs) are unique and OSPF is properly configured.

Answer

The overlapping IP addresses cause a routing loop in OSPF.

Answer

OSPF cannot carry overlapping prefixes in different VRFs.

Answer

The route distinguisher is not unique between the two sites.

Question 20

A network engineer runs the following command on Switch SW6:

SW6# show etherchannel 3 summary
Flags:  D - down        P - bundled in port-channel
        I - stand-alone s - suspended
        H - Hot-standby (LACP only)
        R - Layer3      S - Layer2
        U - in use      N - not in use, no aggregation
        f - failed to allocate aggregator

M - not in use, minimum links not met
        u - unsuitable for bundling
        w - waiting to be aggregated
        d - default port

Number of channel-groups in use: 1
Number of aggregators:           1

Group  Port-channel  Protocol    Ports
------+-------------+-----------+--------------------------------------------
3      Po3(RU)         PAgP      Gi0/0(P)    Gi0/1(P)    Gi0/2(I)

Based on this output, what can be concluded?

Accepted Answer

Interface Gi0/2 is in stand-alone mode because it is not receiving PAgP packets from the neighbor.. The output shows Gi0/2 with an 'I' flag, which means it is in stand-alone mode. In PAgP, a port enters stand-alone mode when it is not receiving PAgP packets from the neighbor, often due to misconfiguration or a neighbor not running PAgP. This prevents the port from being bundled into the EtherChannel, so Option B is correct.

Answer

Port-channel 3 is a Layer 2 EtherChannel.

Answer

All three interfaces are bundled and forwarding traffic.

Answer

The EtherChannel is not in use because the 'U' flag is missing.