CCNP Mock Exam 93 — 25 Questions

Question 1

Which two statements about AAA accounting are true? (Choose two.)

Accepted Answer

RADIUS accounting uses UDP as the transport protocol.. AAA accounting tracks user activities and resource usage. RADIUS accounting uses UDP ports 1646/1813, while TACACS+ uses TCP port 49. Accounting can be start-stop, stop-only, or wait-start. The wait-start method delays service until the accounting start is acknowledged, which can impact user experience. TACACS+ encrypts the entire packet, including accounting data.

Answer

TACACS+ accounting uses UDP as the transport protocol.

Answer

AAA accounting is only supported for EXEC sessions, not for network access.

Answer

TACACS+ encrypts only the password portion of the accounting packet.

Question 2

Which two statements about AAA authorization and accounting are true? (Choose two.)

Accepted Answer

Authorization determines what commands a user is allowed to execute after authentication.. The correct answers describe the purpose of authorization and accounting. Option A is correct because authorization controls what commands or services a user can access. Option D is correct because accounting records user activity for auditing and billing. Option B is wrong because authorization does not encrypt traffic; encryption is a separate function. Option C is wrong because accounting does not authenticate users; it logs actions. Option E is wrong because authorization can be based on user or group attributes, not just the source IP.

Answer

Authorization ensures that all traffic between the client and server is encrypted.

Answer

Accounting is used to authenticate users based on their previous login history.

Answer

Authorization can only be based on the source IP address of the user.

Question 3

Drag and drop each streaming telemetry mode on the left to its matching trigger on the right.

Accepted Answer

periodic: Data is sent at a fixed interval. Periodic sends at intervals, on-change sends on value change, target-defined leaves timing to the device, on-change-with-policy adds conditions, and periodic-and-on-change combines both.

Question 4

Drag and drop each YANG module on the left to its matching data category on the right.

Accepted Answer

openconfig-interfaces: vendor-neutral interface configuration and state. OpenConfig defines vendor-neutral models, Cisco-IOS-XE-native defines Cisco-specific native models, and ietf-interfaces defines standard interface models.

Question 5

Which three statements about telemetry data collection intervals and on-change notifications are true? (Choose three.)

Accepted Answer

Periodic telemetry sends data at a configured interval regardless of whether the value has changed.. Periodic telemetry sends data at fixed intervals, while on-change sends data only when a value changes. On-change reduces bandwidth but may miss transient events if suppression is used. Periodic ensures regular updates but increases load. Both can be combined in a single subscription. On-change is not always supported for all YANG paths.

Answer

On-change telemetry guarantees that every change, no matter how brief, will be reported.

Answer

Periodic telemetry is always preferred over on-change for all use cases.

Question 6

Which two statements about telemetry subscription types in model-driven telemetry are true? (Choose two.)

Accepted Answer

In a dial-out subscription, the network device pushes telemetry data to a configured collector.. Dial-in subscriptions are initiated by the collector connecting to the device, while dial-out subscriptions are initiated by the device pushing data to the collector. Periodic subscriptions stream data at fixed intervals, and on-change subscriptions stream data only when a value changes. Cadence is a property of periodic subscriptions, not on-change. Dial-out is more scalable for many devices because the device manages connections.

Answer

In a dial-in subscription, the network device initiates the connection to the telemetry collector.

Answer

On-change subscriptions stream data at a regular, user-defined cadence.

Answer

Dial-out subscriptions are less scalable than dial-in subscriptions because each device must manage its own connections.

Question 7

Drag and drop each WAN technology on the left to its matching layer on the right.

Accepted Answer

MPLS: Layer 2.5. MPLS operates at Layer 2.5 (shim header between Layer 2 and Layer 3). Metro Ethernet is a Layer 2 technology. SD-WAN abstracts the underlay and operates at Layer 3 and above. DMVPN is a Layer 3 VPN overlay.

Question 8

Drag and drop each MQC command on the left to its configuration level on the right.

Accepted Answer

class-map: Defines traffic classification criteria. class-map defines traffic classes. policy-map associates class-maps with QoS actions. service-policy applies the policy-map to an interface. class (within policy-map) references a class-map. match (within class-map) specifies classification criteria.

Question 9

Drag and drop each leased line technology on the left to its matching speed on the right.

Accepted Answer

T1: 1.544 Mbps. T1 = 1.544 Mbps, E1 = 2.048 Mbps, DS3 = 44.736 Mbps, OC-3 = 155.52 Mbps, OC-12 = 622.08 Mbps.

Question 10

Which two statements about SD-WAN architecture are true? (Choose two.)

Accepted Answer

The vSmart controller is responsible for distributing routing and policy information to the WAN edge routers.. In Cisco SD-WAN, the vSmart controller is responsible for centralized control and policy distribution, while the vBond orchestrator handles authentication and NAT traversal. The vManage is the management plane. vEdge routers establish OMP sessions with vSmart, not with each other. Control plane traffic between vSmart and vEdge is secured with DTLS or TLS, not IPsec. The vBond is not involved in forwarding data traffic.

Answer

The vBond orchestrator is responsible for forwarding data traffic between branch sites.

Answer

vEdge routers establish OMP sessions with each other to exchange control plane information.

Answer

Control plane communication between vSmart and vEdge is secured using IPsec.

Question 11

Which two statements about the Cisco Enterprise Campus Architecture are true? (Choose two.)

Accepted Answer

The distribution layer provides policy-based connectivity and controls traffic flow between access and core layers.. The Cisco Enterprise Campus Architecture uses a hierarchical model to improve scalability, performance, and manageability. The access layer provides user and device connectivity, often with VLANs and PoE. The distribution layer aggregates access switches and provides policy enforcement, while the core layer provides high-speed transport. The collapsed core design merges core and distribution for smaller networks. Option A is correct because the distribution layer is indeed the policy enforcement point. Option C is correct because the core layer should be optimized for high-speed switching without complex policies. Option B is incorrect because the access layer typically does not perform routing between VLANs (that is a distribution layer function). Option D is incorrect because a two-tier design (collapsed core) is actually recommended for smaller campuses, not larger ones. Option E is incorrect because the core layer should not be used for security filtering, which is a distribution layer role.

Answer

The access layer is responsible for routing between VLANs and providing high-speed switching for the campus backbone.

Answer

A two-tier hierarchical design (collapsed core) is recommended for large campus networks with thousands of users.

Answer

The core layer should enforce security policies and perform packet inspection to protect the campus network.

Question 12

Which two statements about EIGRP route summarization are true? (Choose two.)

Accepted Answer

Manual summarization can be configured on a per-interface basis using the ip summary-address eigrp command.. EIGRP supports manual summarization on any interface, which creates a summary route with an administrative distance of 5 by default. Automatic summarization at classful boundaries is disabled by default in modern IOS versions. Manual summarization can be configured per interface and suppresses more specific routes from being advertised out that interface. The summary route is installed in the routing table as a local route.

Answer

Automatic summarization is enabled by default in EIGRP for IPv4.

Answer

Manual summarization causes the router to advertise all specific routes in addition to the summary.

Answer

EIGRP for IPv6 does not support manual summarization.

Question 13

Drag and drop each EIGRP packet type on the left to its matching function on the right.

Accepted Answer

Hello: Discovers and maintains neighbors. Hello packets discover and maintain neighbors; Update packets carry routing information; Query packets ask for successor information; Reply packets respond to queries; ACK packets acknowledge reliable packets.

Question 14

Which three statements about EIGRP route summarization are true? (Choose three.)

Accepted Answer

Manual summarization is configured using the 'ip summary-address eigrp ' command on an interface.. EIGRP supports manual summarization on any interface and automatic summarization at classful boundaries (disabled by default in modern IOS). Summary routes are advertised with a metric based on the component routes.

Answer

Automatic summarization is enabled by default in EIGRP for IPv4.

Answer

Summary routes are always preferred over more specific routes in the routing table.

Question 15

Drag and drop each WAN encapsulation on the left to its matching use case on the right.

Accepted Answer

HDLC: Default serial encapsulation on Cisco routers. HDLC is default synchronous serial encapsulation. PPP supports authentication and multilink. PPPoE is used over DSL. Frame Relay is legacy L2 VPN. MLPPP bonds multiple links.

Question 16

An enterprise is deploying a virtual router (vRouter) as part of its NFV infrastructure. The engineer needs to ensure that the vRouter can handle a sudden spike in traffic without dropping packets. The vRouter is running on a KVM hypervisor. What should the engineer configure to guarantee CPU resources for the vRouter during peak demand?

Accepted Answer

Configure CPU pinning and CPU reservation for the vRouter VM.. CPU pinning binds the vRouter's virtual CPUs to specific physical cores, preventing other processes from using them, while CPU reservation guarantees a minimum amount of CPU capacity. Together, they ensure deterministic CPU availability during traffic spikes, preventing packet drops due to resource contention on the KVM hypervisor.

Answer

Enable memory ballooning on the vRouter VM.

Answer

Enable DPDK on the vRouter's virtual NICs.

Answer

Set the vRouter VM to use NUMA node pinning.

Question 17

A network engineer runs the following command on Router R1:

R1# show ip eigrp neighbors detail
EIGRP-IPv4 Neighbors for AS(100)
H   Address                 Interface       Hold Uptime   SRTT   RTO  Q  Seq
                                            (sec)         (ms)       Cnt Num
0   192.168.1.2             Gi0/0            13 00:12:34   12   100  0  45
  Version 2.0/2.0, Retrans: 0, Retry: 0, Maxseq: 0
  Prefixes: 3
  Topology ids: 0
  Authentication: None
  Topology: base (0x0)

Based on this output, what can be concluded?

Accepted Answer

The neighbor has advertised 3 prefixes to R1.. The output shows 'Prefixes: 3' under the neighbor details, which indicates that the neighbor has advertised exactly three prefixes to R1. This is a direct interpretation of the 'show ip eigrp neighbors detail' command, where the 'Prefixes' field lists the number of routes learned from that neighbor.

Answer

The neighbor is using EIGRP version 1.

Answer

There is a high number of retransmissions indicating packet loss.

Answer

The neighbor is using MD5 authentication.

Question 18

Drag and drop the steps of QoS policing with two-rate three-color marker (RFC 2698) into the correct order, from first to last.

Accepted Answer

Check committed token bucket for packet. RFC 2698 two-rate three-color marker uses committed and peak token buckets. The correct order is: first check the committed bucket (A). If tokens are available, mark the packet green (B). If not, check the peak bucket (C). If tokens are available, mark the packet yellow (D). If no tokens are available, mark the packet red and drop (E). This sequence ensures proper conformance classification.

Question 19

A company is deploying a new wireless network in a large warehouse. The network engineer must choose between using a centralized WLC architecture (with CAPWAP tunnels) or a converged access (SD-Access) wireless architecture. The warehouse has high-density client areas and requires low latency for real-time applications like voice and video. Which architecture should the engineer choose and why?

Accepted Answer

Converged access (SD-Access) wireless, because it allows local switching of traffic at the access layer, reducing latency.. Converged access (SD-Access) wireless enables local switching of traffic at the access layer, which eliminates the need to hairpin traffic through a centralized WLC. This reduces latency significantly, which is critical for real-time applications like voice and video in high-density warehouse environments. Centralized CAPWAP tunnels would add unnecessary delay by forcing all traffic back to the WLC.

Answer

Centralized WLC architecture, because it provides better RF management and security.

Answer

Centralized WLC architecture, because it requires fewer access points to cover the warehouse.

Answer

Converged access (SD-Access) wireless, because it requires fewer WLCs to manage the network.

Question 20

What is the maximum hop count for EIGRP?

Accepted Answer

100. EIGRP uses a maximum hop count of 100 by default, which is a loop-prevention mechanism. Unlike RIP's hard limit of 15 hops, EIGRP's hop count is not used for metric calculation but as a safety threshold; routes exceeding 100 hops are considered unreachable. This value can be modified with the 'metric maximum-hops' command under the EIGRP process.

Answer

15

Answer

255

Answer

Unlimited