CCNP Practice Test 36 — 15 Questions

Question 1

Drag and drop each congestion avoidance mechanism on the left to its method on the right.

Accepted Answer

Tail-drop: Drops all packets when queue is full. Tail-drop drops all packets when queue is full. RED randomly drops packets before congestion. WRED uses IP precedence or DSCP to vary drop probability.

Question 2

Drag and drop each STP port state on the left to its matching function on the right.

Accepted Answer

Blocking: Discards frames and listens for BPDUs. Blocking discards frames and listens for BPDUs; Listening listens for BPDUs only; Learning learns MAC addresses but does not forward; Forwarding sends and receives frames; Disabled is administratively down.

Question 3

A company is virtualizing its network functions using NFV on a KVM-based hypervisor. The design must ensure that the virtual router (CSR1000v) can handle high-throughput traffic with minimal latency. Which architectural consideration is most critical for achieving this goal?

Accepted Answer

Pin the vCPU of the CSR1000v to dedicated physical cores and ensure the VM memory is allocated from the same NUMA node.. Pinning vCPUs to dedicated physical cores and allocating memory from the same NUMA node eliminates cross-NUMA memory access and CPU scheduling contention, which are critical for reducing latency and maximizing throughput in a data-plane-intensive VNF like the CSR1000v. This ensures that the VM's memory accesses are local to the NUMA node where its vCPUs run, avoiding the performance penalty of remote memory access over the QPI/UPI interconnect.

Answer

Use a Type 2 hypervisor to allow the VNF to share resources with other VMs more efficiently.

Answer

Enable overcommitment of CPU resources to maximize the number of VNFs per host.

Answer

Place the CSR1000v on a VMware ESXi host instead of KVM for better performance.

Question 4

Drag and drop the steps of EIGRP route summarization configuration into the correct order, from first to last.

Accepted Answer

Enable EIGRP with router eigrp AS. EIGRP route summarization first requires enabling EIGRP, configuring the network statement, then entering interface configuration mode, applying the summary-address command, and finally verifying the summary route in the routing table.

Question 5

Drag and drop the steps of Syslog severity filtering and rate-limiting configuration into the correct order, from first to last.

Accepted Answer

Enable logging on device. First enable logging, then set severity, apply rate-limit, specify destination, and finally verify the configuration.

Question 6

Which three statements about Multiple Spanning Tree Protocol (MSTP) are true? (Choose three.)

Accepted Answer

MSTP allows multiple VLANs to be grouped into a single spanning-tree instance, reducing CPU and memory usage.. MSTP (IEEE 802.1s) allows multiple VLANs to be mapped to a single spanning-tree instance (MST instance), reducing the number of STP instances needed. It uses an Internal Spanning Tree (IST) instance (instance 0) that always runs and carries BPDUs for the region. Switches in the same MST region must have identical VLAN-to-instance mappings, revision number, and region name. MSTP interoperates with Rapid PVST+ at region boundaries by using PVST simulation mode. MSTP does not require a separate root bridge for each VLAN; instead, each MST instance has its own root bridge.

Answer

MSTP automatically load-balances traffic across all available uplinks without any configuration.

Answer

MSTP requires a separate root bridge to be elected for each VLAN in the network.

Question 7

What is the maximum hop count for EIGRP?

Accepted Answer

100. EIGRP uses a metric based on bandwidth and delay, but it also has a hop count limit. The default maximum hop count is 100, but it can be configured up to 255.

Answer

15

Answer

255

Answer

Unlimited

Question 8

Drag and drop each SNMP operation on the left to its matching direction on the right.

Accepted Answer

GET: Manager to agent. GET, GETNEXT, GETBULK, and SET are manager-to-agent requests; TRAP and INFORM are agent-to-manager notifications.

Question 9

Drag and drop the steps of OSPF virtual link configuration across area 0 into the correct order, from first to last.

Accepted Answer

Identify ABRs and transit area (not area 0). Virtual links require area 0 transit area, and must be configured on both ABRs. The steps ensure proper connectivity: identify endpoints, configure on each router, and verify.

Question 10

A router has the following configuration snippet:

vrf definition RED
 rd 100:1
!
interface Loopback0
 ip vrf forwarding RED
 ip address 10.0.0.1 255.255.255.255
!
router eigrp 100
 address-family ipv4 unicast vrf RED autonomous-system 100
  network 10.0.0.1 0.0.0.0

What is the issue with this EIGRP configuration for VRF RED?

Accepted Answer

The EIGRP address-family is not activated because 'no shutdown' is missing under the address-family configuration.. The EIGRP address-family configuration for VRF RED is missing the 'no shutdown' command under the address-family mode. In Cisco IOS, EIGRP address-families are administratively shut down by default; without 'no shutdown', the EIGRP process for that VRF will not form adjacencies or advertise routes, even though the network command is correctly configured.

Answer

The 'network' command should use a wildcard mask of 0.0.0.255 instead of 0.0.0.0.

Answer

The VRF must be defined under 'router eigrp' globally before using address-family.

Answer

The loopback interface cannot be placed in a VRF because it is a virtual interface.

Question 11

Which three statements about PAgP (Port Aggregation Protocol) are true? (Choose three.)

Accepted Answer

PAgP uses the multicast MAC address 01-00-0c-cc-cc-cc for its protocol frames.. PAgP is a Cisco proprietary protocol for EtherChannel negotiation. It uses modes 'auto', 'desirable', and 'on'. PAgP packets are sent using Cisco's proprietary multicast address 01-00-0c-cc-cc-cc. PAgP supports up to 8 ports per channel and does not support standby ports. PAgP can detect misconfigurations.

Answer

PAgP can negotiate an EtherChannel with a device that runs LACP in active mode.

Answer

The PAgP modes 'desirable' and 'auto' will form an EtherChannel only if the neighbor is set to 'desirable' or 'auto'.

Question 12

Drag and drop the steps of EtherChannel troubleshooting and verification into the correct order, from first to last.

Accepted Answer

Check physical link status and errors. Troubleshooting begins with checking physical layer, then verifying protocol negotiation, inspecting bundle state, checking load balancing, and finally reviewing logs.

Question 13

Given this configuration on a Cisco IOS-XE router:

crypto ikev2 keyring KEYRING
 peer SPOKE1
  address 192.168.2.1
  pre-shared-key cisco123
!
crypto ikev2 profile IKEV2_PROF
 match identity remote address 192.168.2.1 255.255.255.255
 authentication remote pre-share
 authentication local pre-share
 keyring KEYRING
!

What is missing from this configuration for a successful IKEv2 tunnel to the peer at 192.168.2.1?

Accepted Answer

The IKEv2 proposal and policy are not defined and must be referenced by the profile or the IPsec profile.. The configuration is missing an IKEv2 proposal and an IKEv2 policy, which define the encryption, integrity, and DH group parameters for the IKEv2 SA. The profile must reference these via the 'proposal' command under the IKEv2 proposal or the 'match proposal' command under the IKEv2 policy; without them, the router has no agreed-upon parameters to negotiate with the peer, so the tunnel cannot be established.

Answer

The configuration is complete; no additional commands are needed.

Answer

The profile is missing the 'set transform-set' command to specify the IPsec transform set.

Answer

The keyring must use a different name to match the profile.

Question 14

Drag and drop the steps of service function chaining (SFC) path setup into the correct order, from first to last.

Accepted Answer

Classifier identifies traffic and adds NSH. SFC path setup starts with the classifier identifying traffic to be steered, then the classifier adds an NSH encapsulation to the packet. The first SFF receives the packet and forwards it to the first SF. After processing, the SF returns the packet to the SFF, which then forwards it to the next SFF in the chain. This repeats until the packet reaches the last SFF, which removes the NSH and forwards the packet.

Question 15

A network engineer runs the following command on Router R1:

R1# show ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
10.0.0.2          1   FULL/DR         00:00:32    192.168.1.2     GigabitEthernet0/0
10.0.0.3          1   2WAY/DROTHER    00:00:35    192.168.1.3     GigabitEthernet0/0

Based on this output, what can be concluded?

Accepted Answer

R1 is a DROTHER on this segment.. The output shows R1 has a neighbor with state 2WAY/DROTHER (10.0.0.3), which indicates that R1 is also a DROTHER on this broadcast multiaccess segment. The FULL/DR neighbor (10.0.0.2) is the Designated Router, and since R1 is not the BDR (no FULL/BDR state), it must be a DROTHER.

Answer

R1 is the Backup Designated Router (BDR) on this segment.

Answer

R1 has a full OSPF adjacency with the neighbor 10.0.0.3.

Answer

The OSPF network type is point-to-point.