CCNP Practice Exam 66 — 20 Questions

Question 1

Drag and drop each 802.11 standard on the left to its matching frequency band and maximum data rate on the right.

Accepted Answer

802.11b: 2.4 GHz, up to 11 Mbps. 802.11b operates at 2.4 GHz with 11 Mbps; 802.11a operates at 5 GHz with 54 Mbps; 802.11g operates at 2.4 GHz with 54 Mbps; 802.11n operates at both 2.4 and 5 GHz with 600 Mbps; 802.11ac operates at 5 GHz with up to 6.9 Gbps.

Question 2

Drag and drop each wireless AP mode on the left to its matching function on the right.

Accepted Answer

Local: Normal client access with CAPWAP tunnel to controller. Local mode provides normal client access with CAPWAP tunnel; FlexConnect switches client traffic locally at the AP; Monitor mode listens for rogue devices; Sniffer mode captures packets for analysis; Rogue detector mode detects rogues without serving clients.

Question 3

Drag and drop each WPA security version on the left to its matching authentication method on the right.

Accepted Answer

WPA: TKIP with PSK or 802.1X. WPA uses TKIP with PSK or 802.1X; WPA2 uses CCMP (AES) with PSK or 802.1X; WPA3 uses GCMP-256 with SAE or 802.1X; WPA2-Personal uses PSK; WPA3-Enterprise uses 802.1X with GCMP-256.

Question 4

Drag and drop the steps of WPA3 client authentication process into the correct order, from first to last.

Accepted Answer

AP advertises WPA3 in beacon frames. WPA3 uses SAE (Simultaneous Authentication of Equals) handshake. First, the AP announces WPA3 capability in beacons. The client then initiates the SAE commit exchange, followed by the SAE confirm exchange. After SAE completes, the 4-Way Handshake occurs, and finally group key is installed.

Question 5

Drag and drop each CAPWAP message type on the left to its matching function on the right.

Accepted Answer

Control: Manages AP configuration and keepalive. Control messages manage the AP (e.g., configuration, keepalive); Data messages carry user traffic; Discovery messages find controllers; Join messages establish the AP-controller association; Configuration messages push settings to the AP.

Question 6

Drag and drop each wireless roaming method on the left to its matching 802.11 standard on the right.

Accepted Answer

Fast BSS Transition (FT): 802.11r. 802.11r provides Fast BSS Transition (FT); 802.11k provides Radio Resource Measurement (RRM) for neighbor reports; 802.11v provides BSS Transition Management (BTM) for network-assisted roaming.

Question 7

Which three statements about Cisco DNA Center wireless assurance are true? (Choose three.)

Accepted Answer

DNA Center collects telemetry from wireless controllers and access points to provide health scores for clients and APs.. DNA Center provides proactive health monitoring, client troubleshooting via historical data, and sensor-based proactive testing. It does not replace the WLC for real-time client association, nor does it require a separate controller for assurance data.

Answer

DNA Center replaces the WLC for real-time client association and roaming decisions.

Answer

DNA Center requires a dedicated wireless LAN controller to be deployed solely for assurance data collection.

Question 8

Drag and drop each wireless AP mode on the left to its matching function on the right.

Accepted Answer

Local: Serves clients with CAPWAP control and data to WLC. Local mode serves clients with CAPWAP control and data; FlexConnect mode switches client data locally; Monitor mode listens for rogue APs; Sniffer mode captures packets for analysis; Rogue Detector mode detects rogue devices via wired network.

Question 9

Drag and drop each 802.11 standard on the left to its matching frequency band and maximum speed on the right.

Accepted Answer

802.11b: 2.4 GHz, 11 Mbps. 802.11b operates at 2.4 GHz with 11 Mbps; 802.11a at 5 GHz with 54 Mbps; 802.11g at 2.4 GHz with 54 Mbps; 802.11n can use both 2.4 and 5 GHz with 600 Mbps; 802.11ac operates only at 5 GHz with up to 6.9 Gbps.

Question 10

Which three statements about Cisco AP join process and discovery are true? (Choose three.)

Accepted Answer

An AP can discover a WLC using DHCP option 43, which provides the WLC management IP address.. APs discover WLCs via DHCP option 43, DNS, or local subnet broadcast. They use CAPWAP for control and data. The AP must have a valid certificate for DTLS. APs can be pre-configured with a primary WLC name. APs do not use SNMP to find WLCs.

Answer

An AP can discover a WLC by sending an SNMP broadcast to the local subnet.

Answer

An AP can be manually configured with the primary WLC name via the AP CLI before joining.

Question 11

Drag and drop the steps of IP SLA DNS lookup operation setup into the correct order, from first to last.

Accepted Answer

Define IP SLA DNS operation with hostname. First, the DNS operation is defined with the target hostname. Then the DNS server is specified if needed. The operation is configured to perform a lookup. Next, the operation is scheduled. Finally, the DNS resolution result is verified.

Question 12

Drag and drop each IP SLA reaction on the left to its action on the right.

Answer

syslog: Generates a log message

Answer

snmp trap: Sends an SNMP trap

Answer

trigger: Starts another IP SLA operation or event

Answer

react: Enables reaction to threshold violations

Answer

action-type: Specifies the type of reaction action

Question 13

Drag and drop each IP SLA threshold type on the left to its trigger condition on the right.

Accepted Answer

over-threshold: Trigger when metric exceeds threshold. Over-threshold triggers when a metric exceeds the configured value; immediate triggers on the first violation; consecutive triggers after a specified number of consecutive violations.

Question 14

A network engineer is using Cisco DNA Center to monitor network health. The Assurance dashboard shows that a particular access switch has a high CPU utilization issue. The engineer wants to investigate the root cause using DNA Center's built-in tools. Which feature should the engineer use to analyze the switch's CPU utilization over time?

Accepted Answer

Use the 'Trends' feature in Assurance to view CPU utilization over time.. Cisco DNA Center's Assurance module provides historical and real-time data for network devices. The 'Trends' feature allows engineers to view metrics like CPU utilization over a selected time period, helping to identify patterns and root causes.

Answer

Use the 'Command Runner' to execute 'show process cpu' on the switch.

Answer

Use the 'Path Trace' tool to analyze traffic paths.

Answer

Use the 'Software Image Management' to check for software bugs.

Question 15

A network engineer is deploying Cisco DNA Center in a brownfield network. The engineer wants to use DNA Center to automate the configuration of QoS policies across all access switches. After discovering the devices and adding them to Inventory, the engineer creates a QoS policy and assigns it to a site. However, when attempting to provision, DNA Center reports that the devices are in 'Compliance Error' state. What is the most likely reason?

Accepted Answer

The devices have existing QoS configurations that conflict with the new policy.. In brownfield deployments, devices may have existing configurations that conflict with the intended policies. DNA Center performs a compliance check before provisioning. If the current device configuration does not match the intended configuration (e.g., existing QoS settings), DNA Center reports a compliance error. The engineer must either update the device configuration to match the intent or modify the intent to accommodate the existing configuration.

Answer

The devices are not running a supported IOS-XE version for QoS automation.

Answer

The DNA Center appliance does not have enough storage to process the QoS policy.

Answer

The QoS policy was created with an invalid DSCP value.

Question 16

A network engineer is planning to use Cisco DNA Center to automate the deployment of a new branch office. The engineer has already discovered the devices and added them to Inventory. The engineer wants to use a template to configure the devices consistently. Which tool in DNA Center should the engineer use to create and apply the template?

Accepted Answer

Use the 'Template Editor' to create a CLI template and apply it during provisioning.. Cisco DNA Center includes a feature called 'Template Editor' (or 'Network Templates') that allows engineers to create CLI templates for device configuration. These templates can be parameterized and applied to devices during provisioning, ensuring consistent configuration across the branch.

Answer

Use the 'Policy Editor' to create a policy-based configuration.

Answer

Use the 'Command Runner' to execute commands on multiple devices.

Answer

Use the 'Network Profiles' to define the configuration.

Question 17

Examine the following OSPF configuration on a Cisco IOS-XE router:

router ospf 1
 router-id 1.1.1.1
 network 10.0.0.0 0.255.255.255 area 0
 network 192.168.1.0 0.0.0.255 area 1
 default-information originate always metric 10 metric-type 1

What is the effect of the 'default-information originate always' command?

Accepted Answer

A default route is unconditionally advertised into OSPF with metric 10 and type E1.. This command injects a default route (0.0.0.0/0) into the OSPF domain unconditionally, even if the router does not have a default route in its routing table. The metric and type are set as specified.

Answer

A default route is advertised into OSPF only if the router has a default route in its routing table.

Answer

The router will redistribute static default routes into OSPF.

Answer

The router will generate a default route only for area 1.

Question 18

Which three statements about Cisco DNA Center Assurance are true? (Choose three.)

Accepted Answer

Cisco DNA Center Assurance uses NetFlow, SNMP, and syslog data to analyze network performance and client experience.. DNA Center Assurance provides proactive monitoring and troubleshooting. The correct answers cover its data sources (NetFlow, SNMP, syslog), client health scoring, and AI-driven insights. The wrong answers incorrectly claim real-time packet capture (not a core Assurance feature) and that Assurance only monitors wired clients.

Answer

Cisco DNA Center Assurance can capture and analyze full packet captures in real time for every flow.

Answer

Cisco DNA Center Assurance only monitors wired clients and does not provide visibility into wireless client performance.

Question 19

Drag and drop each PnP workflow step on the left to its matching action on the right.

Accepted Answer

Claim: Assigns a discovered device to a specific site and profile. PnP steps: Claim assigns a device to a site; Day0 Template applies initial configuration; Image Upgrade updates the device software; Provision deploys the full configuration.

Question 20

Drag and drop each DNA Center package on the left to its matching function on the right.

Accepted Answer

Assurance: Provides network analytics, health scores, and troubleshooting insights. Cisco DNA Center packages: Assurance provides analytics and troubleshooting; Provision automates device configuration; Design creates network hierarchies and settings; Policy manages access and segmentation.