CCNP Practice Exam 52 — 20 Questions

Question 1

Which two statements about NFV MANO (Management and Orchestration) are true? (Choose two.)

Accepted Answer

The VNF Manager (VNFM) is responsible for the lifecycle management of VNF instances, including instantiation and scaling.. NFV MANO consists of three main components: NFV Orchestrator (NFVO), VNF Manager (VNFM), and Virtualized Infrastructure Manager (VIM). The NFVO coordinates network services across multiple VNFs, the VNFM manages individual VNF instances, and the VIM controls the NFVI resources. Option A is correct because the VNFM handles VNF lifecycle (instantiation, scaling, termination). Option B is correct because the NFVO coordinates resources across VNFs and the infrastructure. Option C is incorrect because the VIM manages the NFVI, not VNFs. Option D is incorrect because the VIM does not handle service chaining; that is the role of the NFVO. Option E is incorrect because the VNFM does not manage physical hardware.

Answer

The Virtualized Infrastructure Manager (VIM) manages the lifecycle of VNFs and their connectivity.

Answer

The VIM is responsible for service chaining and policy enforcement within the NFV environment.

Answer

The VNFM is responsible for managing the physical hardware resources in the NFVI.

Question 2

Which two statements about native VLANs on an 802.1Q trunk are true? (Choose two.)

Accepted Answer

Frames belonging to the native VLAN are transmitted untagged on the trunk link.. The native VLAN is a key concept in 802.1Q trunking. Frames on the native VLAN are sent untagged to maintain compatibility with legacy devices that do not understand VLAN tags. Both ends of the trunk must agree on the native VLAN; a mismatch can cause connectivity issues or VLAN hopping. The default native VLAN is VLAN 1.

Answer

The native VLAN can be any VLAN from 1 to 4094.

Answer

The native VLAN is always VLAN 1 and cannot be changed.

Answer

A native VLAN mismatch will cause all traffic on the trunk to be dropped.

Question 3

Drag and drop each container technology on the left to its matching orchestration tool on the right.

Accepted Answer

Docker: Kubernetes. Docker is orchestrated by Docker Swarm or Kubernetes, but Kubernetes is the primary orchestrator; LXC/LXD is orchestrated by LXD; containerd is often used with Kubernetes; rkt was orchestrated by Kubernetes; and OpenVZ is managed by Proxmox VE.

Question 4

Drag and drop the steps of Q-in-Q (802.1ad) double-tagging configuration into the correct order, from first to last.

Accepted Answer

Enable dot1q tunneling globally. First enable the dot1q tunnel globally, then configure the access VLAN on the interface, enable the tunnel mode, and set the native VLAN to avoid conflicts.

Question 5

Drag and drop each route-target action on the left to its matching behavior on the right.

Accepted Answer

Import RT: Adds routes with a matching Route Target into the VRF. Import RT adds routes with matching RT into the VRF; export RT tags routes from the VRF; import map filters routes during import; export map filters routes during export; both import and export can be configured per VRF.

Question 6

Drag and drop the steps of EIGRP stub configuration for hub-and-spoke into the correct order, from first to last.

Accepted Answer

Enter EIGRP router configuration mode. In hub-and-spoke EIGRP, the spoke router is configured as a stub to limit query propagation. First, enter router configuration mode, then enable EIGRP on the spoke, configure it as a stub, optionally restrict advertised routes, and finally verify the stub status.

Question 7

Drag and drop each VLAN range on the left to its matching type on the right.

Accepted Answer

1–1005: Normal range VLANs. VLANs 1–1005 are normal range, 1006–4094 extended, 0 and 4095 reserved, 1002–1005 are default token ring/FDDI VLANs, and 1 is the default Ethernet VLAN.

Question 8

Drag and drop the steps of MP-BGP VPNv4 route advertisement between PE routers into the correct order, from first to last.

Accepted Answer

Local PE learns CE route via IGP or static. The correct order starts with the local PE learning the customer route via IGP or static, then redistributing it into MP-BGP with a route distinguisher, advertising the VPNv4 route to the remote PE, which receives and installs it into the VRF, and finally the remote PE redistributes the route into the customer-facing IGP.

Question 9

Which two statements about BGP neighbor states are true? (Choose two.)

Accepted Answer

In the Idle state, BGP is waiting for a start event before initiating a TCP connection.. The BGP neighbor state machine includes Idle, Connect, Active, OpenSent, OpenConfirm, and Established. In the Idle state, BGP does not initiate any connection and may be waiting for a start event. In the Active state, BGP is actively trying to establish a TCP connection. In the Established state, BGP has successfully formed a peering session and is exchanging routing updates. The OpenSent state is when BGP has sent an OPEN message and is waiting for an OPEN message from the peer. The Connect state is when BGP is waiting for the TCP connection to complete.

Answer

In the Established state, BGP has sent an OPEN message but has not yet received an OPEN message from the peer.

Answer

In the OpenSent state, BGP is waiting for the TCP connection to complete.

Answer

In the Connect state, BGP is actively trying to establish a TCP connection.

Question 10

Which two statements about VRF configuration in Cisco IOS-XE are true? (Choose two.)

Accepted Answer

A VRF instance maintains its own routing table, CEF table, and forwarding table.. Correct: VRF instances use separate routing tables and can be used with OSPF. Incorrect: VRFs do not require MPLS; VLANs are not automatically associated; VRF-lite does not support MPLS; VRF is not a Layer 2 concept.

Answer

VRF requires MPLS to be enabled on the router.

Answer

A VRF is automatically associated with all VLANs on a switch.

Answer

VRF is a Layer 2 isolation mechanism.

Question 11

Drag and drop the steps of EIGRP variance-based unequal-cost load balancing into the correct order, from first to last.

Accepted Answer

Verify feasible successors in the topology table. To enable unequal-cost load balancing, first ensure feasible successors exist, then set the variance multiplier, optionally adjust the metric offset, and finally verify the load sharing across multiple paths.

Question 12

Drag and drop the steps of VRF import/export route-target policy flow into the correct order, from first to last.

Accepted Answer

Configure export RT on local VRF. The order starts with configuring the export RT on the VRF, the PE advertising the VPNv4 route with that RT, the remote PE receiving the route and comparing the RT with its import RT list, if matched the route is imported into the VRF, and finally the route is installed in the VRF routing table.

Question 13

Which three statements about OSPF area types are correct? (Choose three.)

Accepted Answer

A stub area blocks Type 5 AS External LSAs but allows Type 3 Summary LSAs and a default route.. OSPF area types control the propagation of LSAs. A standard area can carry all LSA types. A stub area blocks Type 5 LSAs but allows Type 3. A totally stubby area blocks both Type 5 and Type 3 (except a default route). A not-so-stubby-area (NSSA) blocks Type 5 but allows Type 7 for external routes. A totally NSSA further blocks Type 3.

Answer

A not-so-stubby-area (NSSA) allows Type 5 LSAs to be imported from external networks.

Answer

A totally NSSA blocks Type 3 LSAs but allows Type 5 LSAs from external sources.

Question 14

Which two statements about EIGRP feasible successors are true? (Choose two.)

Accepted Answer

A feasible successor must have a reported distance less than the feasible distance of the current successor.. A feasible successor is a backup route that meets the feasibility condition (reported distance < feasible distance). It is stored in the topology table, not the routing table, and is used immediately if the successor fails.

Answer

A feasible successor is installed in the routing table as a backup route.

Answer

The feasible successor must have the same metric as the successor.

Answer

EIGRP uses the Diffusing Update Algorithm (DUAL) to determine feasible successors.

Question 15

Drag and drop each EIGRP state on the left to its matching DUAL stage on the right.

Accepted Answer

Passive: Route is stable and no DUAL computation is in progress. Passive is the stable state; Active is when DUAL is actively searching for a new route; Stuck in Active occurs when a query is not answered within the active timer.

Question 16

Drag and drop the steps of OSPFv3 IPv6 neighbor adjacency formation into the correct order, from first to last.

Accepted Answer

Router sends Hello with its router ID. OSPFv3 neighbor formation follows the same state machine as OSPFv2: Down, Init, 2-Way, ExStart, Exchange, Loading, Full. The steps reflect the key actions at each state.

Question 17

Drag and drop the steps of SR-IOV configuration for VM network bypass into the correct order, from first to last.

Accepted Answer

Enable SR-IOV in server BIOS. SR-IOV configuration starts with enabling SR-IOV in the BIOS. Then, virtual functions (VFs) are created on the physical NIC. Next, the hypervisor is configured to pass a VF to the VM. After that, the VM is assigned the VF as a PCI device. Finally, the VM boots and uses the VF directly.

Question 18

Drag and drop each VRF-Lite vs MPLS VPN characteristic on the left to its matching description on the right.

Accepted Answer

VRF-Lite: Uses only VRFs without MPLS labels for path isolation. VRF-Lite uses only VRFs without MPLS labels; MPLS VPN uses labels for isolation; VRF-Lite is limited to a single router; MPLS VPN scales across the core; VRF-Lite does not require MP-BGP; MPLS VPN uses MP-BGP for VPNv4 route exchange.

Question 19

Drag and drop the steps of iBGP route reflection configuration into the correct order, from first to last.

Accepted Answer

Enable BGP process and define local AS. First, you enable the BGP process and define the local AS. Then you configure the router as a route reflector using the neighbor route-reflector-client command. Next, you specify the cluster ID if needed, then adjust the next-hop behavior with next-hop-self. Finally, you verify the configuration with show ip bgp neighbors.

Question 20

Drag and drop the steps of NAT overload (PAT) packet translation process into the correct order, from first to last.

Accepted Answer

Host sends packet with private source IP and port. PAT translates private source IPs to a public IP with unique port numbers. The host sends a packet, the router creates a translation entry, replaces the source IP and port, forwards the packet, and reverses the process on the return.