CCNP Practice Test 34 — 15 Questions

Question 1

Drag and drop the steps of 4G/LTE WAN failover with IP SLA tracking into the correct order, from first to last.

Accepted Answer

Configure IP SLA probe to monitor primary WAN. For 4G/LTE WAN failover using IP SLA, first an IP SLA probe is configured to monitor the primary WAN link, then the probe is associated with a tracking object, a backup static route with a higher metric is configured for the LTE interface, the primary route is removed when the tracking object goes down, and finally traffic is rerouted through the LTE interface. The correct order is: configure IP SLA probe to monitor primary WAN, associate probe with tracking object, configure backup static route with higher metric for LTE, remove primary route when tracking object goes down, reroute traffic through LTE interface.

Question 2

Drag and drop each WAN technology on the left to its matching OSI layer on the right.

Accepted Answer

MPLS: Layer 2.5. MPLS operates at Layer 2.5 (between Layer 2 and Layer 3). Metro Ethernet is a Layer 2 technology. SD-WAN is a Layer 3 overlay technology. DMVPN is a Layer 3 VPN technology.

Question 3

A network engineer is configuring model-driven telemetry on a Cisco IOS-XE router to stream CPU and memory statistics to a collector. The engineer wants to use the YANG model 'Cisco-IOS-XE-process-cpu-oper' and 'Cisco-IOS-XE-memory-oper'. After configuring the telemetry subscription, the engineer notices that no data is being received at the collector. The collector is reachable and the gRPC dial-out is configured correctly. What is the most likely cause of the issue?

Accepted Answer

The telemetry subscription is missing the 'source-interface' configuration. That the YANG models are operational data models and require the 'source-address' to be specified under the telemetry receiver, or the subscription must be for operational data. Actually, the most likely cause is that the engineer did not include the 'source-interface' configuration under the telemetry subscription, which is required for dial-out telemetry to ensure the router uses the correct IP address. The other options are incorrect because the collector is reachable, so firewall is not the issue; YANG models are correct; and gRPC is supported.

Answer

The YANG models specified are not supported on IOS-XE

Answer

The collector is blocking UDP traffic from the router

Answer

The engineer must enable 'ip http secure-server' for telemetry to work

Question 4

Drag and drop each TACACS+ packet type on the left to its correct function on the right.

Accepted Answer

START: Initiates an authentication session from the client to the server. TACACS+ uses START to initiate authentication, REPLY to respond with prompts or success/failure, CONTINUE to send user responses, and also has special types for authorization and accounting.

Question 5

A network engineer is implementing model-driven telemetry on a Cisco Nexus 9000 switch to monitor VLAN and STP changes. The engineer wants to use the native telemetry protocol with UDP as the transport. After configuring the telemetry subscription with the 'destination-group' and 'sensor-group', the engineer notices that the collector is not receiving any data. The collector is reachable and the UDP port is open. What is the most likely missing configuration?

Accepted Answer

The engineer did not create a 'policy' that binds the sensor-group and destination-group. That the engineer must configure a 'policy' that associates the sensor-group with the destination-group and commits the configuration. On Nexus switches, model-driven telemetry requires a policy to bind the sensor and destination groups. The other options are incorrect because the source-interface is optional; the YANG models are correct; and the encoding is not the issue.

Answer

The engineer forgot to configure a 'source-interface' under the destination-group

Answer

The YANG models for VLAN and STP are not supported in the native telemetry protocol

Answer

The engineer used GPB encoding instead of JSON, and the collector only accepts JSON

Question 6

Which two statements about local AAA and fallback methods are true? (Choose two.)

Accepted Answer

Local AAA authentication uses the username and password configured in the running configuration.. Local AAA uses the device's local database for authentication. Fallback methods define the order of servers to try. If all servers are unreachable, the local database can be used as a backup. The 'aaa authentication login default local' command uses the local database only. The 'aaa new-model' command enables AAA globally.

Answer

The 'aaa authentication login default local' command configures the device to use a RADIUS server first, then fall back to local.

Answer

The 'aaa new-model' command is required only when using TACACS+ servers.

Answer

Fallback to local authentication occurs only if all remote servers explicitly reject the authentication request.

Question 7

Drag and drop each VRF component on the left to its matching function on the right.

Accepted Answer

Route Distinguisher (RD): Makes an IPv4 prefix globally unique across the MPLS VPN network. The Route Distinguisher (RD) makes a customer prefix globally unique; the Route Target (RT) controls import/export of routes between VRFs; the RIB stores routing information for the VRF; the VRF table holds the IP routing table for the VRF; the VRF label is used for MPLS forwarding.

Question 8

Examine the following Python script snippet that uses netmiko to configure a Cisco IOS-XE device:

```python
from netmiko import ConnectHandler

device = {
    'device_type': 'cisco_ios',
    'ip': '192.168.1.1',
    'username': 'admin',
    'password': 'cisco',
}

connection = ConnectHandler(**device)
output = connection.send_command('show ip interface brief')
print(output)
connection.disconnect()
```

What is the primary purpose of this script?

Accepted Answer

It retrieves and prints the output of 'show ip interface brief'.. The script uses netmiko's `send_command()` method, which sends a show command to the device and returns the output. It does not include any configuration commands or file transfer operations. Therefore, its primary purpose is to retrieve and print the output of 'show ip interface brief'.

Answer

It configures an IP address on an interface.

Answer

It saves the running configuration to startup configuration.

Answer

It backs up the configuration to a TFTP server.

Question 9

Drag and drop the steps of NFV MANO (VNFM/NFVO/VIM) interaction flow into the correct order, from first to last.

Accepted Answer

NFVO receives service request from OSS/BSS. The MANO interaction flow starts with the NFVO receiving a service request from OSS/BSS. The NFVO then requests the VNFM to instantiate a VNF. The VNFM requests the VIM to allocate resources. The VIM allocates resources and returns resource information to the VNFM. Finally, the VNFM instantiates the VNF and reports status to the NFVO.

Question 10

Drag and drop the steps of adding a new VLAN to a trunk link into the correct order, from first to last.

Accepted Answer

Create VLAN 100 in global configuration. First, create the VLAN globally on the switch. Then, verify the VLAN exists. Next, ensure the trunk allows that VLAN. After that, check the trunk's allowed VLAN list. Finally, test connectivity for hosts in the new VLAN.

Question 11

Drag and drop each DSCP PHB on the left to its matching queue treatment on the right.

Accepted Answer

EF: Expedited forwarding, strict priority queuing, low delay and jitter. EF PHB (DSCP 46) is for low-loss, low-latency traffic; AF PHBs (AF1x-AF4x) provide assured forwarding with four classes and three drop precedences; CS PHBs (CS1-CS7) are backward-compatible with IP precedence; BE (DSCP 0) is best-effort; DF (DSCP 0) is the default PHB.

Question 12

Drag and drop each MQC command on the left to its matching configuration level on the right.

Accepted Answer

class-map: Defines a traffic class using match criteria. class-map defines traffic classes; policy-map associates actions with classes; service-policy applies the policy to an interface or globally.

Question 13

Drag and drop each queuing mechanism on the left to its matching use case on the right.

Accepted Answer

PQ: Strict priority queuing for delay-sensitive traffic. PQ gives strict priority to one queue, CBWFQ guarantees bandwidth to classes, LLQ combines strict priority with CBWFQ, WFQ provides fair queuing for flows, and CBWFQ is often used for data classes.

Question 14

Drag and drop the steps of DSCP re-marking at enterprise WAN edge into the correct order, from first to last.

Accepted Answer

Classify traffic using class-map matching DSCP or ACL. At the enterprise WAN edge, traffic is first classified based on existing markings or other criteria. Then a policy-map is created to set the new DSCP value. The policy is applied outbound on the WAN interface. The router re-marks packets as they exit. Finally, the new DSCP value is verified using show commands.

Question 15

Which two statements about policing and shaping are true? (Choose two.)

Accepted Answer

Policing can be configured on both ingress and egress interfaces, whereas shaping is typically applied only on egress interfaces.. Policing drops or re-marks packets that exceed a configured rate, while shaping buffers excess packets and delays them to smooth traffic. Policing can be applied inbound or outbound, but shaping is typically outbound only. Shaping uses a buffer, which can introduce jitter.

Answer

Shaping drops packets that exceed the configured rate, while policing buffers them to meet the rate.

Answer

Shaping is more suitable than policing for traffic that must be dropped immediately, such as scavenger-class traffic.

Answer

Policing always introduces additional latency due to queuing, while shaping does not.