CCNP Practice Exam 68 — 20 Questions

Question 1

Which two statements about telemetry subscription types in model-driven telemetry are true? (Choose two.)

Accepted Answer

In a dial-out subscription, the network device pushes telemetry data to a configured collector.. Dial-in subscriptions are initiated by the collector connecting to the device, while dial-out subscriptions are initiated by the device pushing data to the collector. Periodic subscriptions stream data at fixed intervals, and on-change subscriptions stream data only when a value changes. Cadence is a property of periodic subscriptions, not on-change. Dial-out is more scalable for many devices because the device manages connections.

Answer

In a dial-in subscription, the network device initiates the connection to the telemetry collector.

Answer

On-change subscriptions stream data at a regular, user-defined cadence.

Answer

Dial-out subscriptions are less scalable than dial-in subscriptions because each device must manage its own connections.

Question 2

Drag and drop each WAN technology on the left to its matching layer on the right.

Accepted Answer

MPLS: Layer 2.5. MPLS operates at Layer 2.5 (shim header between Layer 2 and Layer 3). Metro Ethernet is a Layer 2 technology. SD-WAN abstracts the underlay and operates at Layer 3 and above. DMVPN is a Layer 3 VPN overlay.

Question 3

Drag and drop each MQC command on the left to its configuration level on the right.

Accepted Answer

class-map: Defines traffic classification criteria. class-map defines traffic classes. policy-map associates class-maps with QoS actions. service-policy applies the policy-map to an interface. class (within policy-map) references a class-map. match (within class-map) specifies classification criteria.

Question 4

Drag and drop each leased line technology on the left to its matching speed on the right.

Accepted Answer

T1: 1.544 Mbps. T1 = 1.544 Mbps, E1 = 2.048 Mbps, DS3 = 44.736 Mbps, OC-3 = 155.52 Mbps, OC-12 = 622.08 Mbps.

Question 5

Which two statements about SD-WAN architecture are true? (Choose two.)

Accepted Answer

The vSmart controller is responsible for distributing routing and policy information to the WAN edge routers.. In Cisco SD-WAN, the vSmart controller is responsible for centralized control and policy distribution, while the vBond orchestrator handles authentication and NAT traversal. The vManage is the management plane. vEdge routers establish OMP sessions with vSmart, not with each other. Control plane traffic between vSmart and vEdge is secured with DTLS or TLS, not IPsec. The vBond is not involved in forwarding data traffic.

Answer

The vBond orchestrator is responsible for forwarding data traffic between branch sites.

Answer

vEdge routers establish OMP sessions with each other to exchange control plane information.

Answer

Control plane communication between vSmart and vEdge is secured using IPsec.

Question 6

Which two statements about the Cisco Enterprise Campus Architecture are true? (Choose two.)

Accepted Answer

The distribution layer provides policy-based connectivity and controls traffic flow between access and core layers.. The Cisco Enterprise Campus Architecture uses a hierarchical model to improve scalability, performance, and manageability. The access layer provides user and device connectivity, often with VLANs and PoE. The distribution layer aggregates access switches and provides policy enforcement, while the core layer provides high-speed transport. The collapsed core design merges core and distribution for smaller networks. Option A is correct because the distribution layer is indeed the policy enforcement point. Option C is correct because the core layer should be optimized for high-speed switching without complex policies. Option B is incorrect because the access layer typically does not perform routing between VLANs (that is a distribution layer function). Option D is incorrect because a two-tier design (collapsed core) is actually recommended for smaller campuses, not larger ones. Option E is incorrect because the core layer should not be used for security filtering, which is a distribution layer role.

Answer

The access layer is responsible for routing between VLANs and providing high-speed switching for the campus backbone.

Answer

A two-tier hierarchical design (collapsed core) is recommended for large campus networks with thousands of users.

Answer

The core layer should enforce security policies and perform packet inspection to protect the campus network.

Question 7

Which two statements about EIGRP route summarization are true? (Choose two.)

Accepted Answer

Manual summarization can be configured on a per-interface basis using the ip summary-address eigrp command.. EIGRP supports manual summarization on any interface, which creates a summary route with an administrative distance of 5 by default. Automatic summarization at classful boundaries is disabled by default in modern IOS versions. Manual summarization can be configured per interface and suppresses more specific routes from being advertised out that interface. The summary route is installed in the routing table as a local route.

Answer

Automatic summarization is enabled by default in EIGRP for IPv4.

Answer

Manual summarization causes the router to advertise all specific routes in addition to the summary.

Answer

EIGRP for IPv6 does not support manual summarization.

Question 8

Drag and drop each EIGRP packet type on the left to its matching function on the right.

Accepted Answer

Hello: Discovers and maintains neighbors. Hello packets discover and maintain neighbors; Update packets carry routing information; Query packets ask for successor information; Reply packets respond to queries; ACK packets acknowledge reliable packets.

Question 9

Which three statements about EIGRP route summarization are true? (Choose three.)

Accepted Answer

Manual summarization is configured using the 'ip summary-address eigrp ' command on an interface.. EIGRP supports manual summarization on any interface and automatic summarization at classful boundaries (disabled by default in modern IOS). Summary routes are advertised with a metric based on the component routes.

Answer

Automatic summarization is enabled by default in EIGRP for IPv4.

Answer

Summary routes are always preferred over more specific routes in the routing table.

Question 10

Drag and drop each WAN encapsulation on the left to its matching use case on the right.

Accepted Answer

HDLC: Default serial encapsulation on Cisco routers. HDLC is default synchronous serial encapsulation. PPP supports authentication and multilink. PPPoE is used over DSL. Frame Relay is legacy L2 VPN. MLPPP bonds multiple links.

Question 11

An enterprise is deploying a virtual router (vRouter) as part of its NFV infrastructure. The engineer needs to ensure that the vRouter can handle a sudden spike in traffic without dropping packets. The vRouter is running on a KVM hypervisor. What should the engineer configure to guarantee CPU resources for the vRouter during peak demand?

Accepted Answer

Configure CPU pinning and CPU reservation for the vRouter VM.. CPU pinning binds the vRouter's virtual CPUs to specific physical cores, preventing other processes from using them, while CPU reservation guarantees a minimum amount of CPU capacity. Together, they ensure deterministic CPU availability during traffic spikes, preventing packet drops due to resource contention on the KVM hypervisor.

Answer

Enable memory ballooning on the vRouter VM.

Answer

Enable DPDK on the vRouter's virtual NICs.

Answer

Set the vRouter VM to use NUMA node pinning.

Question 12

A network engineer runs the following command on Router R1:

R1# show ip eigrp neighbors detail
EIGRP-IPv4 Neighbors for AS(100)
H   Address                 Interface       Hold Uptime   SRTT   RTO  Q  Seq
                                            (sec)         (ms)       Cnt Num
0   192.168.1.2             Gi0/0            13 00:12:34   12   100  0  45
  Version 2.0/2.0, Retrans: 0, Retry: 0, Maxseq: 0
  Prefixes: 3
  Topology ids: 0
  Authentication: None
  Topology: base (0x0)

Based on this output, what can be concluded?

Accepted Answer

The neighbor has advertised 3 prefixes to R1.. The output shows 'Prefixes: 3' under the neighbor details, which indicates that the neighbor has advertised exactly three prefixes to R1. This is a direct interpretation of the 'show ip eigrp neighbors detail' command, where the 'Prefixes' field lists the number of routes learned from that neighbor.

Answer

The neighbor is using EIGRP version 1.

Answer

There is a high number of retransmissions indicating packet loss.

Answer

The neighbor is using MD5 authentication.

Question 13

Drag and drop the steps of QoS policing with two-rate three-color marker (RFC 2698) into the correct order, from first to last.

Accepted Answer

Check committed token bucket for packet. RFC 2698 two-rate three-color marker uses committed and peak token buckets. The correct order is: first check the committed bucket (A). If tokens are available, mark the packet green (B). If not, check the peak bucket (C). If tokens are available, mark the packet yellow (D). If no tokens are available, mark the packet red and drop (E). This sequence ensures proper conformance classification.

Question 14

Drag and drop each EIGRP packet type on the left to its matching function on the right.

Accepted Answer

Hello: Discovers and maintains neighbor relationships. Hello packets discover and maintain neighbors; Update packets carry routing information; Query packets ask for alternate paths; Reply packets respond to queries; ACK packets acknowledge reliable delivery.

Question 15

Drag and drop the steps of EIGRP authentication using MD5 key-chain into the correct order, from first to last.

Accepted Answer

Create a key chain using key chain command. The correct order for configuring EIGRP MD5 authentication with a key chain is: first, create a key chain using the 'key chain' command. Next, configure a key number and key-string under the key chain. Then, enter interface configuration mode for the interface on which EIGRP is enabled. After that, issue the command 'ip authentication mode eigrp md5' to set the authentication mode. Finally, issue the command 'ip authentication key-chain eigrp <name>' to apply the key chain to the interface.

Question 16

Drag and drop each congestion avoidance mechanism on the left to its matching method on the right.

Accepted Answer

Tail-drop: Drops all arriving packets when the queue is full. Tail-drop drops all packets when queue is full; RED starts dropping packets probabilistically before queue full; WRED uses IP precedence or DSCP to vary drop probability per class.

Question 17

Drag and drop each VTP mode on the left to its matching capability on the right.

Accepted Answer

server: Can create, modify, and delete VLANs; advertises VTP updates; stores VLAN database in NVRAM. VTP server mode can create, modify, and delete VLANs, advertises VTP updates, and stores the VLAN database in NVRAM. Client mode synchronizes from servers and cannot create VLANs. Transparent mode forwards VTP advertisements but does not process them. Off mode disables VTP entirely.

Answer

server: Stores VLAN database in NVRAM

Question 18

Drag and drop each SNMP version on the left to its matching security feature on the right.

Accepted Answer

SNMPv1: Uses community strings for authentication only. SNMPv1 and v2c use community strings for authentication, while SNMPv3 provides encryption, authentication, and message integrity.

Question 19

Drag and drop each SNMP component on the left to its matching role on the right.

Accepted Answer

Manager: Network management station that polls agents. The manager collects data, the agent runs on the device, MIB defines the data structure, and OID identifies specific variables.

Question 20

Drag and drop the steps of OSPF redistribution from EIGRP with metric conversion into the correct order, from first to last.

Accepted Answer

Configure redistribute eigrp under OSPF. Redistribution requires enabling redistribution, setting a seed metric (or using default-metric), optionally matching routes, and then verifying. The order ensures routes are properly injected.