CCNP Practice Exam 53 — 20 Questions

Question 1

Drag and drop the steps of AAA method list fallback from RADIUS to local into the correct order, from first to last.

Accepted Answer

Device sends authentication request to primary RADIUS. When a RADIUS server is unreachable, the device first tries the primary RADIUS server, then any backup RADIUS servers. If all RADIUS servers fail, the device falls back to the local database for authentication. This ensures redundancy.

Question 2

Which three statements about RSPAN are true? (Choose three.)

Accepted Answer

RSPAN uses a dedicated VLAN that is trunked between switches to carry mirrored traffic.. RSPAN uses a dedicated VLAN to transport mirrored traffic across switches. The RSPAN VLAN must be created on all switches in the path and should not be used for user traffic. Trunk ports carry the RSPAN VLAN, and the destination switch receives the traffic on an RSPAN destination port. The RSPAN VLAN must not be pruned from trunks.

Answer

The RSPAN VLAN can also be used for regular user data traffic if needed.

Answer

The RSPAN destination port can be a regular access port in the RSPAN VLAN.

Question 3

Drag and drop each SNMP component on the left to its matching role on the right.

Accepted Answer

Manager: Network management station that polls agents. Manager is the NMS; agent runs on the device; MIB is the database; OID identifies a specific variable.

Question 4

Drag and drop the steps of CBWFQ and LLQ queue servicing order into the correct order, from first to last.

Accepted Answer

Service the LLQ (priority queue). LLQ is serviced before any CBWFQ queues to ensure low-latency traffic. Within CBWFQ, queues are serviced in a weighted round-robin fashion based on bandwidth allocation. The default queue is serviced last.

Question 5

Drag and drop the steps of sFlow agent sampling and forwarding steps into the correct order, from first to last.

Accepted Answer

Agent samples packets at configured rate. sFlow begins with the agent sampling packets at a configured rate, then extracts header and counter information, encapsulates the sample into an sFlow datagram, sends the datagram to the collector via UDP, and finally the collector analyzes the samples for monitoring.

Question 6

Drag and drop each flow record field on the left to its matching category (key or non-key) on the right.

Accepted Answer

source IPv4 address: Key field. Key fields define the flow identity (e.g., IP addresses, ports, protocol). Non-key fields provide additional information about the flow (e.g., packet counts, timestamps, TCP flags).

Question 7

Drag and drop the steps of Netconf/Yang-based device monitoring subscription into the correct order, from first to last.

Accepted Answer

Establish NETCONF over SSH session. First establish NETCONF session, then subscribe to YANG data, then receive periodic updates, and finally unsubscribe.

Question 8

Which TWO statements are correct about Cisco SD-Access architecture? (Choose two.)

Accepted Answer

VXLAN encapsulation is used for data plane traffic within the fabric.. VXLAN is the encapsulation protocol used in the Cisco SD-Access fabric to carry data plane traffic between fabric edge nodes. VXLAN provides a Layer 2 overlay over a Layer 3 underlay, enabling scalable segmentation and mobility without VLAN limitations.

Answer

Wireless access points must be directly connected to the fabric edge switches.

Answer

Fabric edge nodes are responsible for connecting the fabric to external networks.

Answer

The fabric uses VLANs to isolate tenant traffic.

Question 9

Drag and drop the steps of SNMP bulk walk operation process into the correct order, from first to last.

Accepted Answer

Send GetBulkRequest with max-repetitions. The bulk walk starts with GetBulkRequest, retrieves multiple rows, then iterates until the end of the MIB subtree.

Question 10

Drag and drop the steps of Streaming telemetry sensor path subscription flow into the correct order, from first to last.

Accepted Answer

Define sensor path for desired YANG data. First a sensor path is defined, then a subscription is created with destination, the device pushes data periodically, the collector receives and processes, and the subscription can be updated or deleted.

Question 11

Drag and drop each SNMP version on the left to its matching security feature on the right.

Accepted Answer

SNMPv1: Uses community strings in plaintext. SNMPv1 and v2c use community strings (plaintext) for authentication; SNMPv3 provides authentication and encryption.

Question 12

Drag and drop the steps of AAA accounting for command logging setup into the correct order, from first to last.

Accepted Answer

Enable AAA globally on device. AAA accounting for commands requires first enabling AAA globally, then defining an accounting method list for commands. The method list is applied to a line (e.g., vty or console). The device then sends command logs to the accounting server, which records them.

Question 13

Drag and drop each YANG module on the left to its matching standard body on the right.

Accepted Answer

openconfig-interfaces: OpenConfig. OpenConfig: vendor-neutral YANG models. IETF: RFC-based YANG models. Cisco-IOS-XE: Cisco proprietary YANG models for IOS-XE.

Question 14

Drag and drop the steps of ACL reflexive access list (dynamic inspection) flow into the correct order, from first to last.

Accepted Answer

Configure outbound ACL with 'reflect' keyword. Reflexive ACLs work by evaluating outbound traffic, creating a reflexive entry, then applying inbound ACL to permit return traffic. The order ensures proper dynamic inspection.

Question 15

Which three statements about IP SLA UDP jitter operation are true? (Choose three.)

Accepted Answer

UDP jitter operation measures one-way delay, jitter, and packet loss between source and destination.. UDP jitter operation measures one-way delay, jitter, and packet loss by sending timestamped UDP packets. It requires the IP SLA responder on the destination. The operation can be configured with a codec type to simulate voice traffic. The 'num-packets' command sets the number of packets in each probe. The operation does not measure TCP throughput.

Answer

The 'num-packets' command in UDP jitter configuration sets the total number of probes to be sent over the entire operation lifetime.

Answer

UDP jitter operation can measure TCP window scaling and throughput.

Question 16

Drag and drop the steps of IP SLA scheduling with frequency and lifetime into the correct order, from first to last.

Accepted Answer

Create IP SLA operation. First, the IP SLA operation is created. Then the frequency (how often to run) is configured. The lifetime (how long to run) is set. The operation is scheduled to start. Finally, the schedule is verified.

Question 17

Drag and drop the steps of DSCP-to-CoS mapping at LAN boundary into the correct order, from first to last.

Accepted Answer

Trust DSCP on the ingress interface. At the LAN boundary (switch port), DSCP is mapped to CoS for 802.1Q trunking. The order ensures proper trust, mapping, and queuing for consistent QoS across the campus network.

Question 18

Drag and drop the steps of IP SLA with threshold and reaction configuration into the correct order, from first to last.

Accepted Answer

Define IP SLA operation with type and target. First, define the IP SLA operation with a type and target. Then set the threshold values for the monitored metric. Next, configure the reaction to trigger on threshold violation. After that, schedule the operation to start. Finally, verify the configuration to ensure it works.

Question 19

Which two statements about SNMP MIB objects and OIDs are true? (Choose two.)

Accepted Answer

The MIB defines the structure of managed objects and their OIDs.. MIB (Management Information Base) is a hierarchical database of managed objects. Each object is identified by an OID (Object Identifier). OIDs are structured as a tree; for example, 1.3.6.1.2.1.1.1.0 is the sysDescr OID. The MIB defines the structure and allowed operations (get, set, etc.) for each object. SNMPv2c and SNMPv3 support GetBulk, which retrieves large tables efficiently. SNMPv1 does not support GetBulk.

Answer

The GetBulk operation is supported in SNMPv1.

Answer

The sysDescr OID (1.3.6.1.2.1.1.1.0) is a read-write object.

Answer

A single MIB object can have multiple OIDs.

Question 20

Drag and drop each traffic shaping or policing characteristic on the left to its matching description on the right.

Accepted Answer

Traffic shaping: Buffers excess packets to send later, smoothing traffic rate. Shaping buffers excess traffic to smooth bursts; policing drops or re-marks excess traffic; shaping uses a token bucket with a queue; policing typically uses a single or dual token bucket without queuing; policing can be applied inbound or outbound.