CCNP Practice Test 21 — 15 Questions

Question 1

Drag and drop each Ansible variable precedence level on the left to its matching scope on the right.

Accepted Answer

extra-vars: Variables passed via --extra-vars, highest precedence. extra-vars have highest precedence; role defaults have lowest; host vars apply to a specific host; group vars apply to all hosts in a group; play vars are set at the play level.

Question 2

Drag and drop the steps of Cisco DHCP snooping binding table population into the correct order, from first to last.

Accepted Answer

Switch receives DHCPACK from trusted server port. DHCP snooping first validates DHCP server messages on trusted ports, then creates a binding entry from the DHCPACK, stores the entry with MAC/IP/port/VLAN, updates the table on lease renewal, and finally removes the entry on lease expiry or DHCPRELEASE.

Question 3

Drag and drop each ACL action on the left to its matching result on the right.

Accepted Answer

permit: Packet is allowed to pass through the ACL. Permit allows the packet; Deny discards the packet; Remark adds a comment; Log generates a log message for matched packets; Sequence-number assigns a line number for editing.

Question 4

Drag and drop the steps of implementing QoS trust boundaries on a Cisco switch into the correct order, from first to last.

Accepted Answer

Identify the trust boundary location. First, identify the trust boundary (e.g., access port). Then configure the trusted interface to trust CoS or DSCP. Next, set the default CoS for untrusted frames. Finally, verify the configuration and adjust as needed.

Question 5

Drag and drop each Cisco DNA Center workflow on the left to its matching component on the right.

Accepted Answer

Design: Creates network profiles, site hierarchy, and IP address pools. Design creates network profiles and site hierarchy, Policy defines SGTs and access contracts, Provision deploys configurations to devices, Assurance monitors network health, and Automation runs workflows like PnP and SWIM.

Question 6

Drag and drop the steps of JSON vs XML encoding selection for RESTCONF into the correct order, from first to last.

Accepted Answer

Client decides to use JSON or XML encoding. The selection process starts with the client choosing an encoding, setting the Accept header, the server reading it, encoding the response accordingly, and the client parsing the response.

Question 7

Which of the following are requirements of an RSPAN VLAN? (Select all that apply.)

Accepted Answer

Must not be the native VLAN on any trunk. The RSPAN VLAN must not be the native VLAN; it must be allowed on all trunk ports between source and destination; no other traffic should use it; it must exist on all intermediate switches; it must be configured as an RSPAN VLAN.

Question 8

Drag and drop each WAN transport type on the left to its matching SD-WAN characteristic on the right.

Accepted Answer

MPLS: Provides guaranteed SLA, low jitter, and private connectivity. MPLS offers predictable performance; broadband Internet provides low-cost but variable quality; LTE offers mobility; 5G adds low latency and high bandwidth.

Question 9

Drag and drop each SD-WAN controller on the left to its matching function on the right.

Accepted Answer

vManage: Centralized management, monitoring, and configuration of the SD-WAN fabric. vManage provides centralized management and monitoring; vSmart is the control plane controller that distributes routing and policy; vBond handles authentication and orchestration of the overlay network.

Question 10

Drag and drop the steps of using a REST API to retrieve interface statistics from a Cisco device into the correct order, from first to last.

Accepted Answer

Authenticate with the REST API. The process starts with authenticating to the device's REST API, then constructing the GET request for the interface statistics endpoint. The device processes the request, retrieves the data, and sends a JSON response. The client then parses the JSON to extract the statistics.

Question 11

Which three statements about SD-WAN overlay tunnels and transport are true? (Choose three.)

Accepted Answer

Control plane communication between vSmart and edge devices uses DTLS or TLS encryption.. SD-WAN uses DTLS or TLS for secure control plane tunnels, and IPsec for data plane tunnels. Each edge device builds multiple IPsec tunnels to other edge devices based on TLOC mapping. The transport can be any combination of MPLS, Internet, or LTE. TLOC uniquely identifies a WAN attachment point. OMP manages route distribution, not tunnel establishment.

Answer

SD-WAN edge devices can only use MPLS or Internet as transport; LTE is not supported.

Answer

OMP is responsible for dynamically establishing IPsec tunnels between edge devices based on policy.

Question 12

Drag and drop the steps of the RADIUS authentication process into the correct order, from first to last.

Accepted Answer

Client sends Access-Request to RADIUS server. RADIUS uses UDP and encrypts only the password in the Access-Request. The server checks credentials and responds with Access-Accept or Access-Reject. Accounting-Start is sent after authentication succeeds.

Question 13

Drag and drop the steps of ERSPAN (Encapsulated RSPAN) session configuration into the correct order, from first to last.

Accepted Answer

Configure source interface and direction. ERSPAN configuration requires first defining the source, then the destination with encapsulation, optionally filtering VLANs, and finally activating the session.

Question 14

Drag and drop the steps of uRPF (Unicast Reverse Path Forwarding) verification into the correct order, from first to last.

Accepted Answer

Verify CEF is enabled globally. uRPF verification involves checking CEF tables, interface configuration, and packet statistics. The order ensures systematic troubleshooting: start with global CEF, then interface config, then verification commands.

Question 15

Drag and drop the steps of gNMI Subscribe RPC using Python gRPC library into the correct order, from first to last.

Accepted Answer

Import gnmi_pb2, gnmi_pb2_grpc, and grpc. The correct order starts with importing the gNMI protobuf modules and gRPC, creating a secure channel with credentials, instantiating the gNMI stub, building a SubscribeRequest with paths and mode, and finally calling the Subscribe RPC and iterating over responses.