CCNP Practice Test 29 — 15 Questions

Question 1

Given the following SNMPv3 configuration on a Cisco IOS-XE router:

snmp-server group ADMIN v3 priv write ADMINVIEW
snmp-server user admin ADMIN v3 auth sha cisco123 priv aes 128 cisco456
snmp-server view ADMINVIEW iso included

What is missing or incorrect in this configuration?

Accepted Answer

The view 'ADMINVIEW' includes the entire ISO tree, which might be too permissive for a restricted write view.. The SNMPv3 user 'admin' is configured with authentication (SHA) and privacy (AES 128), and the group 'ADMIN' is set with write access to view 'ADMINVIEW'. However, the view 'ADMINVIEW' only includes the 'iso' subtree, which is too broad and may not be appropriate for a restricted view. Additionally, the configuration lacks an 'snmp-server host' command to send traps or informs, but that is not strictly required for SNMP access.

Answer

The SNMPv3 user 'admin' must also specify an engine ID for the router.

Answer

The privacy password 'cisco456' must be at least 8 characters long.

Answer

The group 'ADMIN' must be configured with a read view to allow SNMP get operations.

Question 2

A network engineer runs the following command on Switch SW1:

SW1# show vlan brief

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Gi0/1, Gi0/2, Gi0/3
10   Sales                            active    Gi0/4, Gi0/5
20   Engineering                      active    Gi0/6
1002 fddi-default                     act/unsup
1003 token-ring-default               act/unsup
1004 fddinet-default                  act/unsup
1005 trnet-default                    act/unsup

Based on this output, what can be concluded?

Accepted Answer

Port Gi0/6 is an access port in VLAN 20.. The output shows VLANs configured on the switch. VLANs 1, 10, and 20 are active and have ports assigned. VLANs 1002-1005 are default VLANs for legacy technologies (FDDI, Token Ring) and are shown as 'act/unsup' (active/unsupported) because the switch does not support them. The key point is that VLAN 20 has only one port (Gi0/6) assigned, which is unusual but possible. However, the question tests understanding that VLAN 20 exists and is active with one port.

Answer

VLAN 20 is not operational because it has only one port assigned.

Answer

The switch supports FDDI and Token Ring VLANs.

Answer

VLAN 10 has more broadcast traffic than VLAN 20.

Question 3

A network engineer runs the following command on Router R2:

R2# show ip bgp summary

BGP router identifier 10.0.0.2, local AS number 65002
BGP table version is 10, main routing table version 10
4 network entries using 576 bytes of memory
4 path entries using 320 bytes of memory
3/2 BGP path/bestpath attribute entries using 456 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 1376 total bytes of memory
BGP activity 6/2 prefixes, 6/2 paths, scan interval 60 secs

Neighbor        V           AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
192.168.1.1     4        65001    1024    1020       10    0    0 02:15:30        3
192.168.1.3     4        65003       0       0        0    0    0 00:00:12   Idle (Admin)

Based on this output, what can be concluded?

Accepted Answer

The BGP session to 192.168.1.3 has been manually disabled.. The BGP summary shows two neighbors. The neighbor 192.168.1.1 (AS 65001) is up (02:15:30) and has sent 3 prefixes (PfxRcd=3). The neighbor 192.168.1.3 (AS 65003) is in Idle state with '(Admin)' indicating it has been administratively shut down (using 'neighbor shutdown' command). The Idle state with Admin flag means the neighbor is manually disabled.

Answer

The BGP session to 192.168.1.3 is down due to a network failure.

Answer

Router R2 has received 3 routes from 192.168.1.1.

Answer

The BGP table version is 10, meaning 10 routes are in the table.

Question 4

A network engineer runs the following command on Router R4:

R4# show ip nat translations

Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.1.10:1024  10.0.0.10:1024     203.0.113.5:80     203.0.113.5:80
tcp 192.168.1.10:1024  10.0.0.10:1024     203.0.113.5:80     203.0.113.5:80
--- 192.168.1.11:2048  10.0.0.11:2048     198.51.100.2:443   198.51.100.2:443

Based on this output, what can be concluded?

Accepted Answer

The translation for 10.0.0.10 is a static NAT entry.. The output shows NAT translations. The first entry has no protocol (---) indicating a static translation, while the second is a dynamic TCP translation (tcp). The inside global addresses are 192.168.1.10 and 192.168.1.11, mapping to inside local addresses 10.0.0.10 and 10.0.0.11. The outside addresses show the destinations. The key is that the first entry is static (no protocol) and the second is dynamic.

Answer

Both translations are dynamic NAT entries.

Answer

The router is performing PAT for both translations.

Answer

The outside global address is the same as the outside local address for both entries.

Question 5

A network engineer runs the following command on Router R3:

R3# show interfaces GigabitEthernet0/0

GigabitEthernet0/0 is up, line protocol is up
  Hardware is ISR4331-2x1GE, address is aabb.cc00.0300 (bia aabb.cc00.0300)
  Internet address is 10.0.0.3/24
  MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 1000Mb/s, media type is RJ45
  output flow-control is unsupported, input flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 1000 bits/sec, 2 packets/sec
  5 minute output rate 2000 bits/sec, 3 packets/sec
     12345 packets input, 1234567 bytes, 0 no buffer
     Received 123 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     12345 packets output, 2345678 bytes, 0 underruns
     0 output errors, 0 collisions, 1 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out

Based on this output, what can be concluded?

Accepted Answer

The interface has had one reset since the last counter clear.. The output shows the interface is up/up. The key clue is '1 interface resets' in the output counters. Interface resets can occur due to hardware issues, cable problems, or when the interface is administratively reset. The presence of 1 reset indicates a past event, but the interface is currently operational. The question tests understanding of interface counters.

Answer

The interface has experienced a hardware failure.

Answer

The interface is experiencing high input errors.

Answer

The interface is operating at half-duplex.

Question 6

A network engineer runs the following command on Router R5:

R5# show mpls ldp neighbor

Peer LDP Ident: 10.0.0.2:0, Local LDP Ident: 10.0.0.5:0
        TCP connection: 10.0.0.2.646 - 10.0.0.5.646
        State: Oper; Msgs sent/rcvd: 123/120; Downstream
        Up time: 01:23:45
        LDP discovery sources:
          GigabitEthernet0/0, Src IP addr: 10.0.1.2
        Addresses bound to peer LDP Ident:
          10.0.0.2        10.0.1.2        192.168.1.1

Based on this output, what can be concluded?

Accepted Answer

The LDP neighbor is reachable via GigabitEthernet0/0.. The output shows an LDP neighbor with peer LDP identifier 10.0.0.2:0. The state is 'Oper' (operational). The discovery source is GigabitEthernet0/0 with source IP 10.0.1.2. The peer's addresses include 10.0.0.2, 10.0.1.2, and 192.168.1.1. The key conclusion is that the LDP session is established and operational.

Answer

The LDP session is down because the state is 'Oper'.

Answer

The local LDP identifier is 10.0.0.2:0.

Answer

The LDP session has been up for 1 hour 23 minutes 45 seconds.

Question 7

A network engineer runs the following command on Switch SW3:

SW3# show etherchannel summary

Flags:  D - down        P - in port-channel
        I - stand-alone s - suspended
        H - Hot-standby (LACP only)
        R - Layer3      S - Layer2
        U - in use      N - not in use, no aggregation
        f - failed to allocate aggregator

M - not in use, minimum links not met
        u - unsuitable for bundling
        w - waiting to be aggregated
        d - default port

Number of channel-groups in use: 1
Number of aggregators:           1

Group  Port-channel  Protocol    Ports
------+-------------+-----------+---------------------------------------------
1      Po1(SU)         LACP      Gi0/1(P)   Gi0/2(P)   Gi0/3(D)

Based on this output, what can be concluded?

Accepted Answer

The EtherChannel is using LACP protocol.. The output shows an EtherChannel group 1 using LACP. The Port-channel Po1 is in SU state (Layer2, in use). Two ports (Gi0/1 and Gi0/2) are bundled (P), while Gi0/3 is down (D). The key is that Gi0/3 is down, so it is not part of the active bundle. The channel is still operational with two links.

Answer

All three ports are actively participating in the EtherChannel.

Answer

The EtherChannel is a Layer 3 port-channel.

Answer

Port Gi0/3 is in standby mode.

Question 8

Examine this SNMP configuration snippet from a Cisco IOS-XE router:

snmp-server community MyComm RO 10
access-list 10 permit 192.168.1.0 0.0.0.255

What is the effect of this configuration?

Accepted Answer

SNMP read requests from any host in the 192.168.1.0/24 network using community 'MyComm' will be accepted.. The community string 'MyComm' is configured with read-only access and is restricted by access-list 10, which permits only the 192.168.1.0/24 network.

Answer

SNMP read and write requests from 192.168.1.0/24 using community 'MyComm' will be accepted.

Answer

Only SNMP requests from the 192.168.1.0/24 network are allowed, regardless of community string.

Answer

The access-list 10 is incomplete; it needs a deny statement to block other traffic.

Question 9

Which SNMP version introduced the use of a username and authentication/password framework, without encryption?

Accepted Answer

SNMPv3. SNMPv3 introduced a security model with usernames, authentication, and privacy, but SNMPv3 noAuthNoPriv provides authentication without encryption.

Answer

SNMPv1

Answer

SNMPv2c

Answer

SNMPv2u

Question 10

Drag and drop the steps of SNMP trap generation and forwarding into the correct order, from first to last.

Accepted Answer

Agent detects event matching a trap condition. The SNMP agent monitors the device for a defined event, then builds a trap message including the OID and value, encapsulates it in a UDP packet, looks up the trap destination in the SNMP configuration, and finally forwards the packet to the NMS.

Question 11

Given the following SNMP configuration on a Cisco IOS-XE router:

snmp-server community public RO
snmp-server community private RW
snmp-server location Building-A
snmp-server contact admin@example.com
snmp-server enable traps snmp linkdown linkup
snmp-server host 192.168.1.100 version 2c public

What is the effect of this configuration?

Accepted Answer

The router will send SNMP traps to 192.168.1.100 using community string 'public' for linkdown and linkup events.. The configuration enables SNMPv2c with read-only (RO) and read-write (RW) community strings, sets location and contact information, enables linkdown and linkup traps, and sends traps to the NMS at 192.168.1.100 using community 'public'.

Answer

The router will send SNMP traps to 192.168.1.100 using community string 'private' for all SNMP traps.

Answer

The router will only accept SNMP read requests using community 'public' and write requests using community 'private'.

Answer

The router will send SNMPv3 traps to 192.168.1.100 using authentication.

Question 12

Given the following syslog configuration on a Cisco IOS-XE router:

logging buffered 4096 warnings
logging console warnings
logging monitor warnings
logging trap warnings

Which statement is true?

Accepted Answer

The router will store up to 4096 syslog messages in the internal buffer, but only those with severity 'warnings' or higher.. All four logging destinations (buffer, console, monitor, trap) are set to severity level 'warnings' (level 4). This means only messages with severity 0-4 are logged to each destination.

Answer

Syslog messages with severity 'debugging' (level 7) will be displayed on the console.

Answer

Syslog messages will be sent to a remote syslog server using the 'trap' facility.

Answer

The 'monitor' destination refers to logging to the console line.

Question 13

What is the default SNMP trap port number?

Accepted Answer

UDP 162. The default UDP port for SNMP traps is 162, as defined by IANA.

Answer

UDP 161

Answer

TCP 161

Answer

TCP 162

Question 14

Drag and drop the steps of syslog message generation and storage into the correct order, from first to last.

Accepted Answer

Application or kernel generates syslog message. A process or kernel generates a syslog message with a facility and severity, the syslogd daemon compares the severity to the configured logging level, then writes the message to the local buffer, optionally forwards it to a remote syslog server, and finally the message is stored or displayed.

Question 15

Consider this SNMP configuration on a Cisco IOS-XE switch:

snmp-server community public RO
snmp-server community private RW
snmp-server ifindex persist

What is the purpose of the 'snmp-server ifindex persist' command?

Accepted Answer

It prevents SNMP interface indices from changing after a router reload or interface configuration change.. The 'snmp-server ifindex persist' command ensures that SNMP interface indices (ifIndex) remain consistent across reboots, which is important for NMS systems that rely on stable interface identifiers.

Answer

It enables SNMP traps for interface status changes.

Answer

It forces SNMP to use persistent storage for community strings.

Answer

It allows SNMP to index interfaces by their names instead of numbers.