CCNP Practice Exam 65 — 20 Questions

Question 1

Drag and drop each EIGRP router role on the left to its matching definition on the right.

Accepted Answer

Successor: Next-hop router for the best route to a destination. In EIGRP, successors are the next-hop routers for the best path to a destination. Feasible successors serve as backup next-hop routers that meet the feasibility condition. Neighbors are directly connected EIGRP routers that exchange Hello packets. Feasible Distance is the lowest metric from the local router to a destination. Reported Distance is the metric that a neighbor advertises for a specific route.

Question 2

Drag and drop each syslog severity level on the left to its matching severity number on the right.

Accepted Answer

Emergency: 0. Emergency=0, Alert=1, Critical=2, Error=3, Warning=4, Notice=5, Informational=6, Debug=7.

Question 3

Consider the following partial configuration for QoS on a Cisco IOS-XE router:

class-map match-all VOICE
 match ip dscp ef
!
policy-map QOS_POLICY
 class VOICE
  priority 1000
 class class-default
  fair-queue
!
interface GigabitEthernet0/0
 service-policy output QOS_POLICY

What is the effect of the 'priority 1000' command under class VOICE?

Accepted Answer

Voice traffic is placed in a strict priority queue with a bandwidth limit of 1000 kbps.. The 'priority' command under the class VOICE in the policy-map QOS_POLICY enables strict priority queuing (low-latency queue) for voice traffic matching DSCP EF. The 'priority 1000' sets a bandwidth limit of 1000 kbps for this queue, meaning voice traffic can use up to 1000 kbps in the strict priority queue; if it exceeds this rate, excess traffic is dropped (or reclassified, depending on configuration). This ensures voice traffic is serviced before other traffic but is limited to 1000 kbps.

Answer

Voice traffic is given a minimum bandwidth guarantee of 1000 kbps but no priority.

Answer

Voice traffic is dropped if it exceeds 1000 kbps.

Answer

Voice traffic is shaped to 1000 kbps.

Question 4

Drag and drop the steps of WRED configuration for TCP congestion avoidance into the correct order, from first to last.

Accepted Answer

Define class map matching TCP traffic. The correct order for WRED configuration is: first define a class map matching TCP traffic (B), then create a policy map with the random-detect command (C), apply the service policy to an interface (D), and verify with show policy-map interface (E). Option A is a distractor; WRED is not enabled globally but per class under a policy map using the 'random-detect' command.

Answer

Enable WRED globally with random-detect

Question 5

Which two statements about OSPF neighbor states are true? (Choose two.)

Accepted Answer

The 2-Way state indicates that both routers have seen their own router ID in the neighbor's hello packet.. The 2-Way state indicates that both routers have received each other's hello packets, confirming bidirectional communication. Option B is correct because the Full state means that the routers have exchanged all LSAs and their databases are synchronized. Option C is incorrect because the ExStart state is where the master/slave relationship is established, not where LSAs are exchanged. Option D is incorrect because the Loading state is where LSRs and LSUs are exchanged, not the Exchange state. Option E is incorrect because the Down state is the initial state before any hello packets are received.

Answer

In the ExStart state, routers exchange Database Description packets containing LSA headers.

Answer

In the Exchange state, routers send Link State Requests and receive Link State Updates.

Answer

The Down state is the final state when a neighbor is unreachable.

Question 6

Drag and drop the steps of parsing 'show interfaces' output using TextFSM into the correct order, from first to last.

Accepted Answer

Capture CLI output from device. The correct order of steps for parsing 'show interfaces' output using TextFSM is: first, capture CLI output from the device (A); second, load the TextFSM template file (B); third, initialize the TextFSM parser with the template (C); fourth, parse the output using the ParseText method (D); finally, access the structured data as a list of dictionaries (E). This sequence follows the logical workflow of a script: obtain raw data, set up the template, apply the parser, and retrieve structured results.

Question 7

Which two statements about Rapid PVST+ are true? (Choose two.)

Accepted Answer

Rapid PVST+ converges faster than classic STP because it uses synchronized handshakes between switches.. Rapid PVST+ is the Cisco implementation of RSTP per VLAN. It converges faster than classic STP due to synchronized handshakes (A). It supports one spanning-tree instance per VLAN, allowing load balancing across multiple VLANs by configuring different root bridges for different VLANs (E). Option C is incorrect because, while alternate ports provide a backup path to the root bridge, the statement about being in a discarding state when the root port is operational is overly simplistic; in RSTP, alternate ports are in discarding state by default, but this is a characteristic of all RSTP port roles, not a unique feature of alternate ports.

Answer

Rapid PVST+ uses a separate BPDU version for each VLAN to maintain per-VLAN spanning-tree instances.

Answer

In Rapid PVST+, an alternate port provides a backup path to the root bridge and is in a discarding state when the root port is operational.

Answer

Rapid PVST+ requires the use of UplinkFast and BackboneFast features to achieve sub-second convergence.

Question 8

Drag and drop each ERSPAN version on the left to its correct header format on the right.

Accepted Answer

ERSPAN Type II (v1): GRE header with 6-byte header containing session ID.. ERSPAN Type II (v1) uses a 6-byte GRE header with a 4-byte session ID; ERSPAN Type III (v2) uses an 8-byte GRE header with a 4-byte session ID and a 4-byte timestamp/index.

Question 9

An architect is designing an SD-Access fabric for a campus that requires high availability. The design must ensure that if one fabric edge node fails, endpoints can be re-homed to another edge node without manual intervention. Which feature should be implemented?

Accepted Answer

Anycast Layer 2 gateway. Anycast Layer 2 gateway is the correct feature because it allows multiple fabric edge nodes to share the same anycast IP and MAC address for a given VLAN. If one edge node fails, endpoints simply continue using the same gateway address, and their traffic is automatically forwarded to a surviving edge node via the fabric's underlay routing, requiring no manual intervention or protocol convergence.

Answer

HSRP

Answer

VRRP

Answer

GLBP

Question 10

Match each EIGRP term to its definition.

Accepted Answer

Feasible Distance: The total metric from the local router to the destination network.. EIGRP uses Feasible Distance (FD) as the best metric to a destination, Reported Distance (RD) as a neighbor's metric, and the Feasible Condition (RD < FD) to ensure loop-free paths. Successor is the next-hop router with the lowest FD.

Answer

Feasible Distance: The metric advertised by a neighboring router for a specific route.

Answer

Reported Distance: The total metric from the local router to the destination network.

Question 11

Match each routing protocol to its administrative distance.

Accepted Answer

OSPF: 110. Administrative distances are used to select the best route when multiple routing protocols provide routes to the same destination.

Answer

OSPF: 90

Answer

RIP: 110

Question 12

Match each Spanning Tree Protocol (STP) variant to its key characteristic.

Accepted Answer

STP (802.1D): Original standard with slow convergence (30-50 seconds). STP (802.1D) is the original slow-converging standard; RSTP (802.1w) provides rapid convergence; MSTP (802.1s) maps multiple VLANs to fewer spanning tree instances; PVST+ runs per-VLAN STP. Common confusions include equating STP with per-VLAN and RSTP with multiple instances.

Answer

STP (802.1D): Per-VLAN spanning tree

Answer

RSTP (802.1w): Multiple spanning tree instances

Question 13

Match each network device to its primary function.

Accepted Answer

Router: Forwards packets between different networks. Correct matches: Router forwards packets between networks, Switch forwards frames within a network, Firewall filters traffic. Common confusions include swapping these roles.

Answer

Router: Filters traffic based on security rules

Answer

Switch: Forwards packets between different networks

Answer

Firewall: Forwards frames within the same network

Question 14

What is the default OSPF hello interval on an Ethernet link?

Accepted Answer

10 seconds. The default OSPF hello interval on an Ethernet (broadcast multi-access) link is 10 seconds, as defined in RFC 2328. This interval determines how often a router sends Hello packets to discover and maintain neighbor relationships. The correct answer is A because Ethernet is a broadcast network type, which uses a 10-second hello interval by default.

Answer

30 seconds

Answer

40 seconds

Answer

5 seconds

Question 15

Which TWO of the following are benefits of using network virtualization with VXLAN? (Choose two.)

Accepted Answer

Enables Layer 2 extension across Layer 3 boundaries.. VXLAN encapsulates Layer 2 frames in UDP packets over IP, allowing Layer 2 segments to be stretched across Layer 3 networks. This enables virtual machine mobility and multi-tenant environments without being constrained by physical network boundaries.

Answer

Eliminates the need for STP by using a centralized controller.

Answer

Uses only multicast for control plane learning.

Answer

Provides native encryption for data in transit.

Question 16

Which two statements about the MQC (Modular QoS CLI) classification process are true? (Choose two.)

Accepted Answer

A class map can contain multiple match statements that are evaluated using a logical OR when the match-any keyword is configured.. The MQC classification process relies on class maps to define match criteria. A class map with match-any uses logical OR between match statements (A is correct). A class map with match-all requires all match statements to be true (E is correct). Option B is a true statement about MQC, but it describes the policy map evaluation process (which applies actions after classification) rather than the classification process itself. Option C is false because class-default is always present and can be used even when other class maps exist. Option D is false because match statements can reference DSCP values.

Answer

In a policy map, class maps are evaluated in the order they are configured, and the first matching class map is applied to the packet.

Answer

The class-default class is used only when no other class map is defined in the policy map.

Answer

Match statements in a class map can reference ACLs, NBAR protocols, or CoS values, but not DSCP values.

Question 17

A network engineer uses Cisco DNA Center API to retrieve the health of a device. The API call returns:

```json
{
  "response": [
    {
      "deviceId": "1234567890",
      "healthScore": 85,
      "overallHealth": "good",
      "memory": {
        "used": 4096,
        "total": 8192,
        "usage": 50
      },
      "cpu": {
        "usage": 25
      }
    }
  ]
}
```

What does the healthScore of 85 indicate?

Accepted Answer

The device is healthy with a score of 85 out of 100.. In Cisco DNA Center, health scores range from 0 to 100. A score of 85 is considered 'good' (typically 75-90 range), indicating the device is healthy but may have minor issues.

Answer

The device is critical and needs immediate attention.

Answer

The device has 85% memory usage.

Answer

The device has 85% CPU usage.

Question 18

Drag and drop each NAPALM getter on the left to its matching returned data on the right.

Accepted Answer

get_facts: Hostname, vendor, model, uptime. get_facts returns device info like hostname, vendor; get_interfaces returns interface details; get_bgp_neighbors returns BGP peer info.

Question 19

Drag and drop the steps of STP root guard and loop guard activation into the correct order, from first to last.

Accepted Answer

Enable root guard on designated port. The correct activation steps are: (A) Enable root guard on designated ports, (B) Enable loop guard on non-designated ports, and (C) Verify root guard and loop guard status. Options D and E are not activation steps; they describe reactive states (root-inconsistent and loop-inconsistent) that may occur after enabling the guards. They should not be part of the ordered activation sequence.

Answer

Port enters root-inconsistent state on superior BPDU

Answer

Port enters loop-inconsistent state on BPDU loss

Question 20

Drag and drop the steps of configuring a standard ACL for traffic filtering on a Cisco IOS router into the correct order, from first to last.

Accepted Answer

Enter global configuration mode. Standard ACLs are configured by first entering global configuration mode, then defining ACL entries with permit or deny statements, where each entry specifies a source IP and wildcard mask. After defining all entries, the ACL is applied to an interface in the inbound or outbound direction. Finally, verification with 'show access-lists' confirms the ACL is active and shows hit counts.