CCNP Practice Test 34 — 15 Questions

Question 1

Examine the following RSPAN configuration on a Cisco Catalyst switch:

vlan 100
 name RSPAN_VLAN
 remote-span

monitor session 1 source vlan 10 both
monitor session 1 destination remote vlan 100

Which statement about this configuration is true?

Accepted Answer

The RSPAN VLAN 100 must be created on all switches in the network that participate in RSPAN.. This configures an RSPAN session where traffic from VLAN 10 is sent to the RSPAN VLAN 100, which is then transported across the network to other switches.

Answer

The destination remote vlan 100 command is incorrect; it should be 'destination remote vlan 100 encapsulation replicate'.

Answer

This configuration copies traffic from VLAN 10 to the local switch only.

Answer

The RSPAN VLAN 100 must be tagged on all trunk ports between switches.

Question 2

Given the following SPAN configuration on a Cisco IOS-XE switch:

monitor session 4 source interface GigabitEthernet1/0/6 tx
monitor session 4 destination interface GigabitEthernet1/0/7

What does this configuration do?

Accepted Answer

Only traffic transmitted from GigabitEthernet1/0/6 is copied to GigabitEthernet1/0/7.. This SPAN session captures only egress traffic (tx) from GigabitEthernet1/0/6 and sends it to GigabitEthernet1/0/7.

Answer

Both ingress and egress traffic on GigabitEthernet1/0/6 is copied to GigabitEthernet1/0/7.

Answer

Traffic on GigabitEthernet1/0/7 is mirrored to GigabitEthernet1/0/6.

Answer

The configuration is invalid because the destination interface must be in the same VLAN as the source.

Question 3

Drag and drop the steps of RSPAN session configuration and traffic flow into the correct order, from first to last.

Accepted Answer

Create a dedicated RSPAN VLAN on all switches. The correct order starts with creating a dedicated VLAN for RSPAN traffic, then configuring the source switch to monitor traffic and forward it to that VLAN, followed by configuring the intermediate switches to transport the RSPAN VLAN, then configuring the destination switch to receive and analyze the traffic, and finally verifying end-to-end packet flow.

Question 4

A network engineer configures an IP SLA on a Cisco router to monitor reachability to a critical server at 10.1.1.1 using ICMP echo. The IP SLA is used as a track object for a static default route. After deployment, the engineer notices that the static route is never removed from the routing table, even when the server is unreachable. The IP SLA operation shows 'State: Active' and 'Latest RTT: NoConnection/Busy/Timeout'. What is the most likely cause?

Accepted Answer

The IP SLA operation needs a threshold configured to mark the operation as 'down' when the RTT exceeds the threshold or a timeout occurs.. The IP SLA operation is not failing because the threshold has not been configured. Without a threshold, the operation never transitions to a 'down' state, so the track object never triggers the removal of the static route.

Answer

The IP SLA operation is not configured with a timeout value, so it never times out.

Answer

The track object must be configured with a 'down' delay to allow the route to be removed.

Answer

The static route must be configured with a higher administrative distance to allow the IP SLA to remove it.

Question 5

A network engineer configures IP SLA 20 to monitor the response time of a DNS server at 10.1.1.1 using DNS query for 'example.com'. The operation is used to influence routing decisions. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 50 ms', but the DNS server is actually down and not responding to any queries. What is the most likely reason?

Accepted Answer

The IP SLA DNS probe is using a cached DNS response from the router's DNS resolver, so it does not actually query the server.. The DNS probe may be receiving a response from a cache (either on the router itself or an intermediate DNS cache) rather than the actual DNS server. This can cause the probe to succeed even if the server is down.

Answer

The IP SLA DNS probe must be configured with a 'timeout' value lower than 50 ms to detect the failure.

Answer

The DNS server is responding to the probe but not to other queries because the probe uses a different port.

Answer

The IP SLA operation is configured with a 'frequency' that is too low, causing the probe to be sent before the server times out.

Question 6

A network engineer configures IP SLA 40 to monitor the reachability of a server at 10.1.1.1 using ICMP echo. The operation is used as a track object for a static route. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 10 ms', but the track object shows 'Track 40: down'. The engineer checks the track configuration and sees 'track 40 ip sla 40 reachability'. What is the most likely cause?

Accepted Answer

The IP SLA operation has a threshold configured that is lower than the RTT, causing the operation to be marked as 'down'.. The track object is configured to track reachability, which means it checks if the IP SLA operation is in a 'down' state. However, if the IP SLA operation is active, the track object should be up. The most likely cause is that the IP SLA operation is configured with a threshold that is being exceeded, causing the operation to be considered 'down' even though it is active.

Answer

The track object must be configured with 'ip sla 40 state' instead of 'reachability' to match the operation state.

Answer

The IP SLA operation is not configured with a 'frequency', so it only runs once and then goes down.

Answer

The static route is configured with a higher administrative distance, causing the track object to go down.

Question 7

A network engineer runs the following command on Router R1:

R1# show ip sla summary

IPSLAs Latest Operation Summary
Codes: * active, ^ inactive, ~ pending

ID       Type         Destination       Stats       Return Code      Last
1        icmp-echo    192.168.1.10      Success     OK               1
2        icmp-echo    192.168.1.20      Success     OK               2
3        udp-jitter   192.168.1.30      Success     OK               3
*4       icmp-echo    192.168.1.40      Success     OK               10

Based on this output, what can be concluded?

Accepted Answer

IP SLA operation 4 is currently active.. The asterisk (*) next to ID 4 indicates that this IP SLA operation is currently active. The other operations are not marked as active, meaning they are either configured but not running or have been stopped.

Answer

All IP SLA operations are active.

Answer

IP SLA operation 3 has failed.

Answer

IP SLA operation 1 has the highest round-trip time.

Question 8

A network engineer executes the following command on Router R5:

R5# show ip sla monitor configuration 4

IP SLAs Monitor Configuration
Entry number: 4
Owner:
Tag:
Type of operation to perform: udp-jitter
Target address: 192.168.5.10
Target port: 16384
Source address: 192.168.5.1
Source port: 0
Type Of Service parameter: 0x0
Request size (ARR data portion): 32
Operation timeout (milliseconds): 5000
Frequency (seconds): 60
Next Scheduled Start Time: Start Time already passed
Group Scheduled : FALSE
Life (seconds): Forever
Entry Ageout (seconds): never
Recurring (Starting Everyday, Starting Time: 00:00:01)
Status of entry (SNMP RowStatus): Active
Threshold (milliseconds): 5000
Distribution Statistics:
Number of statistic hours kept: 2
Number of statistic distribution buckets kept: 1
Statistic distribution interval (milliseconds): 20
Enhanced History:

Based on this output, what type of IP SLA operation is configured?

Accepted Answer

UDP jitter. The line 'Type of operation to perform: udp-jitter' clearly indicates the operation type is UDP jitter.

Answer

ICMP echo

Answer

TCP connect

Answer

HTTP get

Question 9

An engineer configures IP SLA 100 to monitor the jitter and latency of a VoIP call path between two branch routers. The configuration uses UDP jitter with a target of 192.168.2.2 on port 16384. The engineer notices that the IP SLA operation shows 'State: Active' but no jitter or latency statistics are collected. The router is generating the probe packets, but the remote router does not respond. What is the most likely reason?

Accepted Answer

The remote router must have an IP SLA responder configured to process the UDP jitter probes.. UDP jitter probes require a responder on the destination router to echo the packets back. Without the responder, the source router sends probes but receives no response, so no jitter statistics can be computed.

Answer

The IP SLA operation must be configured with a 'request-data-size' value to match the remote router's MTU.

Answer

The source router needs a 'frequency' setting that matches the remote router's response interval.

Answer

The firewall on the remote router is blocking the UDP port 16384, preventing the probe from reaching the target.

Question 10

A network engineer configures IP SLA 1 to monitor HTTP server availability at 10.1.1.1 using HTTP GET. The operation is used as a track object for a backup static route. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 200 ms', but the track object shows 'Track 1: up' even though the HTTP server returns a 404 error. What is the cause?

Accepted Answer

The IP SLA HTTP operation does not interpret HTTP status codes by default; it only checks if a TCP connection is established.. By default, IP SLA HTTP operations consider a successful HTTP response (any status code) as a success. The operation does not fail on 404 unless a specific status code match is configured.

Answer

The IP SLA HTTP operation must be configured with a 'url' that includes the full path, otherwise it defaults to the root and returns 404.

Answer

The track object must be configured with a 'down' threshold to trigger when the HTTP response time exceeds a value.

Answer

The HTTP server is responding, so the IP SLA operation correctly shows success; the engineer must use a different type of probe, like TCP connect, to detect the 404.

Question 11

An engineer configures IP SLA 30 to monitor the one-way delay to a remote site using UDP jitter. The operation is used to adjust routing metrics via route maps. The engineer notices that the IP SLA operation shows 'State: Active' but the one-way delay values are inconsistent, sometimes showing negative values. What is the most likely cause?

Accepted Answer

The source and destination routers do not have synchronized clocks via NTP, causing one-way delay calculations to be inaccurate.. One-way delay measurements require clock synchronization between the source and destination routers. Without NTP, the clocks may drift, causing negative or inaccurate delay values.

Answer

The IP SLA operation is not configured with a 'request-data-size' that matches the remote router's MTU, causing fragmentation and delay variations.

Answer

The IP SLA operation is using a 'frequency' that is too high, causing the probes to overlap and corrupt the statistics.

Answer

The remote router's IP SLA responder is not configured, so the source is using a different method to estimate delay.

Question 12

An engineer configures IP SLA 10 to monitor the reachability of a next-hop router at 10.1.1.1 using ICMP echo. The IP SLA is used as a track object for a static route. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 1 ms', but the track object shows 'Track 10: up' even though the next-hop router is actually unreachable from the source. The source router has a default route pointing to 10.1.1.1. What is the most likely cause?

Accepted Answer

The IP SLA operation is using the wrong source IP address; it should be sourced from the interface that connects to the next-hop router.. If the source router has a default route pointing to the same next-hop, the IP SLA probe packets may be sent out using that default route, which could lead to the probe being sent to a different path or looping. However, the more direct cause is that the IP SLA probe is sourced from an interface that is not the one that would be used to reach the next-hop, so the probe may succeed even if the next-hop is unreachable via the expected path.

Answer

The IP SLA operation must be configured with a 'timeout' value lower than the RTT to force a failure.

Answer

The track object must be configured with a 'down' delay to prevent flapping.

Answer

The static route must be configured with a higher administrative distance to allow the IP SLA to remove it.

Question 13

A network engineer runs the following command on Router R7:

R7# show ip sla monitor statistics 6

Round Trip Time (RTT) for Index 6
Latest RTT: NoConnection/Busy/Timeout
Latest Operation Start Time: 18:00:00.000 UTC Mon Mar 1 2021
Latest Operation Return Code: Timeout
Number of successes: 0
Number of failures: 15
Over thresholds: 0

Based on this output, what is the status of the IP SLA operation?

Accepted Answer

The target is unreachable, as all probes have timed out.. All 15 probes have failed with a timeout return code, indicating a persistent connectivity issue to the target. The target is likely unreachable.

Answer

The operation is functioning normally with occasional timeouts.

Answer

The target is reachable but with high latency.

Answer

The operation has been configured but not started.

Question 14

A network engineer issues the following command on Router R3:

R3# show ip sla statistics 2

Round Trip Time (RTT) for Index 2
Latest RTT: 12 ms
Latest RTT: NoConnection/Busy/Timeout
Latest Operation Start Time: 12:00:00.000 UTC Mon Mar 1 2021
Latest Operation Return Code: Timeout
Number of successes: 45
Number of failures: 5
Over thresholds: 0

Based on this output, what is the most likely issue?

Accepted Answer

The most recent probe timed out, indicating a possible connectivity issue.. The 'Latest Operation Return Code: Timeout' indicates that the most recent probe did not receive a response, suggesting a connectivity problem to the target. The presence of both successes and failures shows intermittent issues.

Answer

The IP SLA operation has never succeeded.

Answer

The target is unreachable due to a persistent failure.

Answer

The round-trip time is 12 ms, which is above the threshold.

Question 15

Examine this IP SLA configuration on Router R1:

ip sla 4
 icmp-echo 10.4.4.4
 frequency 10
ip sla schedule 4 life forever start-time now
ip sla reaction-configuration 4 react timeout threshold-type immediate action-type triggerOnly

Which of the following is missing from this configuration to make it useful for tracking?

Accepted Answer

A 'track' object that references the IP SLA operation is missing.. IP SLA reaction configurations need to be associated with a tracking object to be useful for actions like route manipulation. Without 'track', the trigger has no effect.

Answer

The 'frequency' command is missing; it should be set to 60 seconds.

Answer

The 'ip sla responder' must be configured on the target router.

Answer

The 'life' parameter should be set to a specific number of repetitions.