CCNP Practice Test 15 — 15 Questions

Question 1

A network engineer is configuring a new switch that will be used as an access layer switch. The switch connects to two distribution switches via trunk links. The engineer wants to ensure that the access switch does not become the root bridge for any VLAN. The engineer also wants to provide redundancy so that if one uplink fails, the other uplink takes over quickly. The engineer is using Rapid PVST+. What configuration should the engineer apply on the access switch?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure 'spanning-tree vlan vlan-list priority 61440' on the access switch.. Setting the spanning-tree priority to 61440 (which is 0xF000 in hex) makes the switch a very unlikely root bridge candidate. In Rapid PVST+, the bridge priority is a 4-bit value (0-15) multiplied by 4096, so 61440 corresponds to priority 15 — the highest possible value. This ensures the access switch will never become the root bridge for any VLAN, while Rapid PVST+ provides fast failover (sub-second convergence) via its alternate/backup port mechanism without needing UplinkFast.

Answer

Configure 'spanning-tree vlan vlan-list priority 0' on the access switch.

Answer

Enable UplinkFast on the access switch to provide fast failover.

Answer

Enable PortFast on the trunk ports to speed up convergence.

Question 2

Drag and drop each broadband type on the left to its matching technology on the right.

Accepted Answer

DSL: Uses telephone line with ADSL or VDSL. DSL uses telephone lines with frequencies above voice. Cable uses coaxial cable with DOCSIS. Fiber uses optical fiber with GPON or active Ethernet. 4G LTE uses cellular radio. Satellite uses geostationary or LEO satellites.

Question 3

spanning-tree mode rapid-pvst

What is the effect of this global configuration command?

Accepted Answer

The switch will use Rapid PVST+ for all VLANs, providing faster convergence than classic STP.. The command 'spanning-tree mode rapid-pvst' enables Rapid PVST+ (Per-VLAN Spanning Tree Plus) on the switch, which runs a separate instance of RSTP (802.1w) for each VLAN. This provides faster convergence than classic STP (802.1D) by using mechanisms such as sync/agreement handshakes, edge ports, and link types, while still maintaining per-VLAN topology independence.

Answer

The switch will use MSTP for all VLANs.

Answer

The switch will use classic STP for all VLANs.

Answer

The switch will disable STP on all ports.

Question 4

Given the following SD-WAN configuration on a Cisco IOS-XE router:

router ospf 1
 redistribute bgp 65000 subnets
 network 192.168.1.0 0.0.0.255 area 0
!
interface GigabitEthernet0/0/0
 ip address 192.168.1.1 255.255.255.0
 ip ospf network point-to-point
!

Which statement is true?

Accepted Answer

The OSPF network type is point-to-point, so the hello interval defaults to 10 seconds on this interface.. On a Cisco IOS-XE router, when the OSPF network type is set to point-to-point, the default hello interval is 10 seconds (not 30 seconds as on broadcast networks). The dead interval defaults to 40 seconds (four times the hello interval), not 120 seconds. This configuration is valid and does not require a manually configured router-id, as OSPF can dynamically select one. The redistribution of BGP into OSPF only injects routes that are in the BGP table; it does not automatically include all SD-WAN overlay routes unless they are present in BGP.

Answer

The OSPF network type is point-to-point, so the dead interval defaults to 120 seconds.

Answer

The redistribution of BGP into OSPF will cause OSPF to advertise all BGP routes, including those learned via SD-WAN overlay.

Answer

The configuration is incomplete because OSPF requires a router-id to be manually configured.

Question 5

Drag and drop the steps of the CAPWAP discovery and join process between a lightweight AP and a WLC into the correct order, from first to last.

Accepted Answer

AP obtains IP address via DHCP. The CAPWAP process starts with the AP obtaining an IP address (via DHCP), then discovering the WLC (via DHCP option 43 or DNS). The AP sends a Discovery Request, the WLC replies with a Discovery Response, and finally the AP sends a Join Request to establish the control tunnel.

Question 6

Given the following EIGRP configuration on a router:

router eigrp 200
 network 192.168.1.0 0.0.0.255
 network 10.0.0.0

Which statement about this configuration is true?

Accepted Answer

EIGRP will be enabled on any interface with an IP address in the 10.0.0.0/8 range, and only on interfaces with an IP address in the 192.168.1.0/24 range.. The first network statement uses a wildcard mask (0.0.0.255) to enable EIGRP only on interfaces in the 192.168.1.0/24 subnet, while the second network statement (10.0.0.0) is classful and enables EIGRP on all interfaces in the 10.0.0.0/8 range. EIGRP network statements can include a wildcard mask to specify a subnet; without one, the router assumes the classful boundary.

Answer

Both network statements are classful and will enable EIGRP on all interfaces with IP addresses in the 192.168.0.0/16 and 10.0.0.0/8 ranges.

Answer

EIGRP will only be enabled on interfaces with an IP address in the 192.168.1.0/24 range.

Answer

This configuration will cause an error because wildcard masks are not allowed in EIGRP network statements.

Question 7

A network engineer is configuring a Cisco router to provide internet access to a small office using a single public IP address assigned by the ISP. The engineer wants to allow internal hosts to initiate connections to the internet, but also needs to make a web server on the internal network reachable from the internet. The engineer configures a standard access list for NAT and an ip nat inside source list command. However, external users cannot reach the internal web server. What is the most likely cause?

Accepted Answer

The engineer forgot to add the ip nat inside source static command for the web server.. The scenario describes a need for both dynamic PAT (for internal hosts to reach the internet) and static NAT (to make the internal web server reachable from the internet). The 'ip nat inside source list' command alone performs dynamic NAT/PAT, translating multiple inside addresses to the single public IP. To allow inbound connections to the web server, a static one-to-one mapping is required using the 'ip nat inside source static tcp' command, which creates a permanent translation entry. Without this static command, the router has no way to know which inside host should receive incoming traffic destined for the public IP on port 80.

Answer

The access list used for NAT does not permit the web server's IP address.

Answer

The ip nat inside and ip nat outside commands are applied on the wrong interfaces.

Answer

The global configuration mode is missing the ip nat pool command.

Question 8

A network engineer runs the following command on Switch SW5:

SW5# show monitor session 5
Session 5
---------
Type                   : Remote Source Session
Source Ports           :
    Both               : Gi1/0/1-3
Destination Ports     : Gi1/0/24
    Encapsulation      : Replicate

Based on this output, what can be concluded?

Accepted Answer

Traffic from ports Gi1/0/1-3 is mirrored and sent to a remote VLAN via Gi1/0/24.. The output shows a Remote Source SPAN (RSPAN) session. The 'Type: Remote Source Session' indicates that traffic from source ports Gi1/0/1-3 is mirrored and sent to a remote VLAN (the RSPAN VLAN) via the destination port Gi1/0/24, which acts as a reflector port. The 'Encapsulation: Replicate' means the destination port replicates the original frames without adding an extra VLAN tag, forwarding them onto the RSPAN VLAN for transport to a remote switch.

Answer

This is a local SPAN session that sends traffic to Gi1/0/24.

Answer

The destination port Gi1/0/24 is used to receive mirrored traffic from another switch.

Answer

Only egress traffic from Gi1/0/1-3 is captured.

Question 9

A network engineer runs the following command on Router R1:

R1# show ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
10.0.0.2         1   FULL/DR         00:00:38    192.168.1.2     GigabitEthernet0/0
10.0.0.3         1   2WAY/DROTHER   00:00:32    192.168.1.3     GigabitEthernet0/0
10.0.0.4         1   FULL/BDR        00:00:35    192.168.1.4     GigabitEthernet0/0

Based on this output, what can be concluded?

Accepted Answer

Router R1 is a DROTHER on this segment.. The output shows Router R1 has a neighbor in the FULL/DR state (10.0.0.2) and another in FULL/BDR state (10.0.0.4), but R1 itself is in the 2WAY/DROTHER state with 10.0.0.3. Since R1 is not the DR or BDR (it has a FULL neighbor relationship with the DR and BDR, but is only in 2WAY with another DROTHER), R1 must be a DROTHER router on this multi-access segment.

Answer

Router R1 is the DR on this segment.

Answer

Router R1 is the BDR on this segment.

Answer

Router R1 has no OSPF neighbors.

Question 10

Which of the following is a valid AP mode on Cisco 9800 WLCs that allows the AP to function as a standalone access point without controller management?

Accepted Answer

FlexConnect mode. FlexConnect mode (option B) is the correct answer because it allows a Cisco AP to switch client traffic locally at the AP and continue forwarding traffic even if the connection to the Cisco 9800 WLC is lost, effectively functioning as a standalone access point without controller management. In this mode, the AP can operate in a 'connected' or 'standalone' state, with the latter providing full local switching and authentication when the CAPWAP tunnel to the controller is down.

Answer

Local mode

Answer

Monitor mode

Answer

Sniffer mode

Question 11

Drag and drop the steps of the DHCP DORA process into the correct order, from first to last.

Accepted Answer

Client broadcasts DHCP Discover. The DHCP DORA process begins with the client broadcasting a Discover message to locate a DHCP server. The server responds with an Offer message containing an IP address and configuration parameters. The client then sends a Request message to formally request the offered IP address. Finally, the server sends an Acknowledge message to confirm the lease and provide the configuration.

Question 12

An architect is designing a QoS policy for a campus LAN that must support real-time voice and video traffic alongside mission-critical data. The design must use the DiffServ model with consistent per-hop behavior across all switches. Which approach should the architect choose to ensure that voice traffic receives priority queuing while video traffic is guaranteed bandwidth without starving other classes?

Accepted Answer

Use the MQC framework to classify traffic based on DSCP markings, apply a priority queue for EF traffic, and allocate a minimum bandwidth guarantee for AF41 traffic.. It uses the Modular QoS CLI (MQC) framework to classify traffic by DSCP markings, which aligns with the DiffServ model's per-hop behavior consistency. By applying a strict priority queue for EF (Expedited Forwarding, DSCP 46) traffic, voice gets low-latency treatment, while a minimum bandwidth guarantee for AF41 (Assured Forwarding, DSCP 34) ensures video traffic receives a guaranteed share without starving other classes, as AF uses weighted fair queuing with bandwidth allocation.

Answer

Implement a single FIFO queue on all interfaces and rely on the default CoS-to-queue mapping to prioritize voice.

Answer

Configure strict priority queuing for all traffic marked with DSCP values greater than 0.

Answer

Use the IntServ model with RSVP to reserve bandwidth for each voice and video flow.

Question 13

Which three statements about virtual networking and hypervisor switches are true? (Choose three.)

Accepted Answer

A standard virtual switch (vSwitch) operates at Layer 2 and can forward frames between virtual machines on the same host.. Virtual switches (vSwitch) forward frames between VMs and physical NICs. They support VLANs and port groups. A distributed switch spans multiple hosts. Virtual switches do not require STP because loops are prevented by design.

Answer

Spanning Tree Protocol (STP) must always be enabled on virtual switches to prevent loops in the virtual network.

Answer

A virtual switch can only be configured with a single port group for all virtual machines.

Question 14

router bgp 65000
 bgp router-id 10.0.0.1
 neighbor 10.0.0.2 remote-as 65001
 neighbor 10.0.0.2 route-map SET_COMMUNITY in
!
route-map SET_COMMUNITY permit 10
 set community 100:200
!
What is the effect of this configuration?

Accepted Answer

Routes received from 10.0.0.2 are tagged with community 100:200, but the community is not sent to other BGP peers unless send-community is configured.. The route-map SET_COMMUNITY is applied to inbound updates from neighbor 10.0.0.2, so routes received from that neighbor are tagged with community 100:200. However, BGP does not propagate communities to other peers unless the neighbor is explicitly configured with the send-community command. Without send-community, the community attribute is stripped from outbound updates, so the community is not sent to other BGP peers.

Answer

Routes received from 10.0.0.2 are tagged with community 100:200 and automatically sent to all neighbors.

Answer

The route-map is applied to outbound updates to 10.0.0.2, setting community on routes sent to that neighbor.

Answer

The configuration is invalid because the community must be a string, not a numeric value.

Question 15

Drag and drop the steps of NetFlow v9 cache export process into the correct order, from first to last.

Accepted Answer

Packet arrives and is matched to a flow. NetFlow v9 export starts with packet arrival, then flow creation and cache update. When export conditions are met, the template is sent first, followed by data records. Finally, the flow is aged out.