CCNP Practice Exam 70 — 20 Questions

Question 1

A network engineer is using the Cisco IOS-XE REST API to configure a static route. The engineer sends a PATCH request to 'https://device/restconf/data/Cisco-IOS-XE-native:native/ip/route/ip-route-interface-forwarding-list=192.168.1.0,255.255.255.0,GigabitEthernet1' with a JSON payload containing the route details. The device responds with a 204 No Content status. What does this response indicate?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The request was successful, and the static route has been configured.. A 204 No Content response indicates that the request was successful, but there is no content to return. In RESTCONF, a successful PATCH request that updates an existing resource typically returns 204 No Content. The engineer should verify that the route was applied by retrieving the configuration.

Answer

The request failed because the route already exists; the engineer must use PUT instead.

Answer

The device does not support PATCH; the engineer must use POST to update the route.

Answer

The payload was empty; the engineer must include the route parameters in the body.

Question 2

Drag and drop the steps of Ansible inventory grouping and variable inheritance into the correct order, from first to last.

Accepted Answer

Define group 'all' with default variables. In Ansible, inventory grouping starts with defining groups and hosts, then applying group variables with precedence: all group vars are overridden by parent group vars, which are overridden by host vars, and finally by ansible_host connection details.

Question 3

Drag and drop each VM storage type on the left to its matching characteristic on the right.

Accepted Answer

Thin: Allocates storage on demand, grows as needed. Thin provisioning allocates space on demand, thick provisioning allocates full space at creation, RDM provides direct LUN access, VMDK is VMware's virtual disk format, and VHDX is Hyper-V's virtual disk format.

Question 4

Drag and drop each Ansible connection type on the left to its matching protocol on the right.

Accepted Answer

network_cli: SSH-based connection for Cisco IOS/IOS-XE CLI. network_cli uses SSH for CLI-based devices; netconf uses SSH for NETCONF-based devices; httpapi uses HTTP/HTTPS for REST APIs like NX-API or IOS-XE RESTCONF.

Question 5

Drag and drop the steps of OSPF virtual link configuration across area 0 into the correct order, from first to last.

Accepted Answer

Ensure transit area has full connectivity. First, ensure the transit area (non-backbone) has full connectivity and at least one ABR. Then, identify the router IDs of the two ABRs that will form the virtual link. On each ABR, configure the virtual link using the 'area transit-area-id virtual-link router-id' command. Verify the virtual link state using 'show ip ospf virtual-links'. Finally, confirm that routes from the backbone area are now reachable across the virtual link.

Question 6

Consider the following configuration snippet from a Cisco IOS-XE router:

router eigrp 100
 network 10.0.0.0
 network 192.168.1.0
 passive-interface default
 no passive-interface GigabitEthernet0/0

What is the effect of the passive-interface commands?

Accepted Answer

EIGRP hellos are suppressed on all interfaces except GigabitEthernet0/0.. The command 'passive-interface default' makes all interfaces passive by default, meaning they will not send or receive EIGRP hellos. The subsequent 'no passive-interface GigabitEthernet0/0' overrides this for that specific interface, allowing EIGRP adjacency formation on it.

Answer

EIGRP hellos are sent on all interfaces, but updates are blocked.

Answer

EIGRP adjacency is formed on all interfaces except GigabitEthernet0/0.

Answer

EIGRP is disabled on all interfaces.

Question 7

Drag and drop the steps of IPFIX template negotiation and export into the correct order, from first to last.

Accepted Answer

Exporter defines IPFIX template with field definitions. IPFIX starts with the exporter defining a template with field definitions, then the exporter sends the template record to the collector, the collector acknowledges (optional), the exporter sends data records referencing the template ID, and finally the collector interprets data using the stored template.

Question 8

Drag and drop each EIGRP timer on the left to its matching default value on the right.

Accepted Answer

Hello Timer: 5 seconds. Hello timer default is 5 seconds on LAN; Hold timer default is 15 seconds; Active timer default is 3 minutes.

Question 9

Drag and drop the steps of SD-Access fabric border node configuration steps into the correct order, from first to last.

Accepted Answer

Enable LISP on border node. Configuration starts with enabling LISP on the border node, then configuring the EID-to-RLOC mapping and border services. Next, the border is connected to external networks (e.g., WAN), followed by applying VRF and SGT policies, and finally verifying the border operation.

Question 10

Drag and drop the steps of SNMPv3 authentication and privacy negotiation into the correct order, from first to last.

Accepted Answer

Discover SNMP engine ID. SNMPv3 first discovers the engine ID, then the manager and agent agree on security parameters, authenticate, and finally encrypt the payload.

Question 11

Drag and drop each IP SLA reaction action on the left to its corresponding behavior on the right.

Accepted Answer

syslog: Send a log message. Syslog sends a log message; SNMP trap sends an SNMP notification; trigger starts another IP SLA operation; none disables reaction; timeout triggers on probe timeout.

Question 12

Which two statements about NAT configuration on Cisco IOS routers are true? (Choose two.)

Accepted Answer

The ip nat inside source list command translates traffic from the inside interface to the outside interface.. A is correct because the 'ip nat inside source list' command translates inside local addresses to inside global addresses for traffic exiting the inside interface. E is correct because NAT overload (PAT) typically uses a single public IP address and differentiates flows using TCP/UDP port numbers. B is incorrect: static NAT requires 'ip nat inside' on one interface and 'ip nat outside' on a different interface, not both on the same interface. C is incorrect: 'ip nat outside source list' translates the source IP of packets entering the outside interface, not the inside. D is incorrect: dynamic NAT uses a pool of public IP addresses but does not assign them on a true 'first-come, first-served' basis; it allocates from the pool as needed, but the phrase is misleading in the context of NAT behavior.

Answer

Static NAT requires both ip nat inside and ip nat outside commands on the same interface.

Answer

The ip nat outside source list command translates the source IP of packets entering the inside interface.

Answer

Dynamic NAT uses a pool of public IP addresses assigned on a first-come, first-served basis.

Question 13

Which two statements about EIGRP feasible successors are true? (Choose two.)

Accepted Answer

A feasible successor must have a reported distance less than the feasible distance.. A feasible successor is a backup route that meets the feasibility condition (reported distance < feasible distance). It is stored in the topology table and can be used immediately if the successor fails, without querying neighbors. The feasible distance is the lowest metric to a destination; the successor is the route with that metric. The reported distance is the neighbor's metric to the destination.

Answer

The feasible distance is the metric of the feasible successor route.

Answer

EIGRP will always have at least one feasible successor for every route.

Answer

The feasible successor is stored in the routing table as a backup route.

Question 14

Consider the following SD-WAN device configuration on a Cisco IOS-XE router:

sdwan
 interface GigabitEthernet0/0/1
 tunnel-interface
 encapsulation ipsec
 color public-internet
 allow-service all
!
 interface GigabitEthernet0/0/2
 tunnel-interface
 encapsulation ipsec
 color 3g
 allow-service all
!

Which statement about this configuration is true?

Accepted Answer

The router will establish two separate SD-WAN tunnels, one for each color, and load balance traffic across them.. In Cisco SD-WAN, each WAN interface configured under the `sdwan` configuration with a unique `color` creates a separate SD-WAN transport tunnel (TLOC). The router will establish two distinct IPsec tunnels—one for `public-internet` and one for `3g`—and can load balance traffic across them using ECMP or policy-based steering. This is the standard behavior for multi-homed SD-WAN edge routers.

Answer

The router will use only the first tunnel interface (GigabitEthernet0/0/1) because the second interface has an invalid color name.

Answer

The 'allow-service all' command is invalid on a tunnel-interface; only specific services can be allowed.

Answer

The configuration will cause a conflict because both interfaces use the same encapsulation (ipsec).

Question 15

Which TWO statements about Cisco DNA Center's Assurance capabilities are correct?

Accepted Answer

It uses streaming telemetry to collect data for real-time analytics.. Cisco DNA Center uses model-driven telemetry (e.g., gRPC, NETCONF/YANG, or UDP-based push) to stream real-time data from network devices, enabling sub-second analytics and faster troubleshooting compared to traditional polling methods like SNMP.

Answer

It supports only wired networks and not wireless.

Answer

It is a fully cloud-based solution with no on-premises components.

Answer

It only displays network device health scores and does not provide path tracing.

Question 16

Drag and drop each HTTP status code on the left to its meaning on the right.

Accepted Answer

200: Request succeeded. Correct pairings: 200 OK for success; 201 Created for resource creation; 400 Bad Request for client error; 401 Unauthorized for missing/invalid credentials; 404 Not Found for missing resource; 500 Internal Server Error for server-side failure.

Question 17

Drag and drop the steps of the QoS shaping and policing configuration sequence into the correct order, from first to last.

Accepted Answer

Define traffic classes using class maps. Shaping and policing require first defining traffic classes, then configuring the shaping/policing actions in a policy map, applying the policy to an interface, and finally adjusting parameters based on monitoring. This order ensures proper traffic control.

Question 18

Drag and drop the steps of Cisco TrustSec inline tagging across fabric into the correct order, from first to last.

Accepted Answer

Ingress switch classifies traffic and assigns SGT. TrustSec inline tagging starts with the ingress switch classifying traffic and adding an SGT to the frame, then forwarding it across the fabric, the egress switch reading the SGT, matching it to an SGACL, and finally enforcing the permit/deny decision.

Question 19

What is the maximum hop count for EIGRP?

Accepted Answer

255. EIGRP uses a metric based on bandwidth and delay, but it also has a hop count limit. The maximum hop count for EIGRP is 255, though the default is 100.

Answer

100

Answer

15

Answer

16

Question 20

An engineer is using the Cisco IOS-XE RESTCONF API to create a new loopback interface. The following JSON payload is sent in a POST request to '/restconf/data/ietf-interfaces:interfaces':

```json
{
  "ietf-interfaces:interface": [
    {
      "name": "Loopback100",
      "description": "Management Loopback",
      "type": "iana-if-type:softwareLoopback",
      "enabled": true,
      "ietf-ip:ipv4": {
        "address": [
          {
            "ip": "192.168.1.1",
            "netmask": "255.255.255.0"
          }
        ]
      }
    }
  ]
}
```

What is the correct HTTP method and URL for this operation?

Accepted Answer

POST /restconf/data/ietf-interfaces:interfaces. To create a new resource, the POST method is used. The URL should point to the collection of interfaces. The payload includes the 'ietf-interfaces:interface' list. The correct URL is '/restconf/data/ietf-interfaces:interfaces'.

Answer

PUT /restconf/data/ietf-interfaces:interfaces

Answer

PATCH /restconf/data/ietf-interfaces:interfaces

Answer

POST /restconf/data/ietf-interfaces:interfaces/interface=Loopback100