CCNP Architecture Practice Test 5 — 15 Questions

Question 1

A network engineer is designing a high-availability campus network using Cisco StackWise Virtual technology on two Catalyst 9000 switches. The engineer wants to ensure that the control plane remains active on both switches and that the data plane forwarding is distributed. Which statement accurately describes the operational behavior of Cisco StackWise Virtual?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Both switches operate as a single logical entity with one control plane and distributed data plane forwarding.. Cisco StackWise Virtual merges two Catalyst switches into one logical switch with a single control plane and a distributed data plane. Both switches actively forward traffic, providing high availability and increased bandwidth. The other options incorrectly describe active/standby or independent control plane models that do not apply to StackWise Virtual.

Answer

Each switch runs an independent control plane, and they synchronize forwarding tables via VXLAN.

Answer

The two switches share a single control plane, but only one switch handles all data plane forwarding.

Answer

One switch is active and the other is standby, and only the active switch forwards traffic.

Question 2

A network architect is designing a Cisco SD-Access fabric for a large enterprise. The design must ensure that the fabric supports seamless roaming for wireless clients and that traffic between wired and wireless clients is consistently enforced with security policies. Which two statements are true regarding Cisco SD-Access wireless integration? (Choose two.)

Accepted Answer

The fabric uses VXLAN to encapsulate traffic between fabric edge nodes and the wireless controller.. Cisco SD-Access wireless integration uses VXLAN encapsulation for both wired and wireless traffic, with the wireless controller acting as a fabric edge node. This allows seamless roaming and consistent policy enforcement because the VNI and SGT are preserved in the VXLAN header. Authentication is handled by the WLC and ISE, and the control plane is unified via LISP. These two statements accurately describe the architecture.

Answer

The fabric uses a separate control plane for wireless traffic, distinct from the wired control plane.

Answer

Fabric edge nodes must be configured with Mobility Agent functionality to support wireless roaming.

Answer

Wireless clients are authenticated by the fabric edge node using 802.1X before being assigned to a virtual network.

Question 3

A network architect is planning a Cisco SD-WAN deployment using Cisco vManage. The architect needs to ensure that the control plane is secure and scalable. Which two components are responsible for establishing the control plane connections in a Cisco SD-WAN solution? (Choose two.)

Accepted Answer

vSmart controllers. The control plane in Cisco SD-WAN is established by vSmart controllers, which maintain OMP sessions with vEdge routers, and vBond orchestrators, which handle initial authentication and orchestration. Together, they enable secure and scalable control plane connections. vManage is for management, and vEdge routers are data plane devices.

Answer

vEdge routers

Answer

vManage

Answer

Cisco DNA Center

Question 4

A network architect is planning a Cisco SD-Access fabric and must ensure that the fabric supports seamless mobility for endpoints across fabric edge nodes. The architect is reviewing the roles of fabric nodes. Which two node roles are responsible for providing endpoint mobility and policy enforcement within the fabric? (Choose two.)

Accepted Answer

Fabric edge node. In Cisco SD-Access, fabric edge nodes connect and register endpoints, enforce policy, and encapsulate traffic, while control plane nodes maintain the LISP mapping database that enables endpoint mobility. Together they provide seamless mobility and policy enforcement. Border nodes handle external connectivity, intermediate nodes provide underlay transport, and the wireless controller integrates wireless but is not a core mobility role.

Answer

Fabric border node

Answer

Intermediate node

Answer

Fabric wireless controller

Question 5

A network architect is comparing routing protocol behaviors for a dual-stack enterprise WAN. The design requires that IPv6 routes learned from one routing protocol be redistributed into another while avoiding routing loops, and that the administrative distance of learned routes be predictable. Which statement correctly describes a routing protocol characteristic relevant to this design?

Accepted Answer

EIGRP has a default administrative distance of 90 for internal routes and 170 for external routes, while OSPF has a default administrative distance of 110.. Administrative distance determines which routing source is preferred when multiple protocols advertise the same prefix. EIGRP internal routes use 90 and external routes use 170, while OSPF uses 110. Knowing these defaults lets the architect predict route selection during redistribution and design route maps or distance commands to avoid loops and suboptimal paths.

Answer

BGP uses a default administrative distance of 20 for external routes, making it preferred over EIGRP internal routes.

Answer

RIPng uses a default administrative distance of 120, which is higher than OSPF's 110 and therefore always preferred.

Answer

OSPF uses a default administrative distance of 90, which is lower than EIGRP's 90 for internal routes.

Question 6

A network architect is designing a Cisco SD-Access fabric for a large enterprise. The architect must ensure that the fabric supports endpoints that are not capable of 802.1X authentication, such as legacy printers and IoT devices. Which TWO features should be used to onboard these endpoints securely? (Choose two.)

Accepted Answer

MAC Authentication Bypass (MAB). For non-802.1X endpoints like legacy printers, MAB provides authentication based on MAC address, and CoA allows Cisco ISE to dynamically apply authorization policies. Together, they enable secure onboarding and segmentation in SD-Access. EAP-TLS requires supplicants, static VLAN assignment lacks dynamic policy, and WebAuth requires user interaction, making them unsuitable.

Answer

Static VLAN assignment

Answer

802.1X with EAP-TLS

Answer

Web Authentication (WebAuth)

Question 7

A company is deploying a wireless network in an office with high client density. Which Cisco architecture is best suited to handle client roaming without requiring a central controller for every roaming event?

Accepted Answer

FlexConnect. FlexConnect (option D) is the correct architecture because it allows client data traffic to be switched locally at the remote site, while the control plane remains centralized. This design eliminates the need for a central controller to process every roaming event, as clients can roam between FlexConnect APs using local switching and 802.11r (Fast Roaming) without requiring a WLC in the data path.

Answer

Mesh networking

Answer

Autonomous APs

Answer

Centralized switching with a WLC

Question 8

An enterprise is using OSPF in a multi-area design. Area 1 is a regular area, and Area 2 is a totally stubby area. Which LSA types are present in Area 2?

Accepted Answer

Type 1, Type 2, Type 3 (including default). In a totally stubby area, the ABR blocks Type 4 and Type 5 LSAs and replaces all Type 3 inter-area routes with a single default route (Type 3 LSA with link-state ID 0.0.0.0). Therefore, only Type 1 (router), Type 2 (network), and the default Type 3 LSAs are present. This matches option A.

Answer

Type 1, Type 2, Type 3, Type 5

Answer

Type 1, Type 2, Type 4, Type 5

Answer

Type 1, Type 2, Type 3 (including default), Type 4

Question 9

A network engineer is troubleshooting a routing loop in an EIGRP network. Which mechanism is designed to prevent routing loops by causing a router to reject routes that are learned from a neighbor that is not the successor?

Accepted Answer

Feasibility condition. The feasibility condition is a loop-prevention mechanism unique to EIGRP. It ensures that a router only accepts a route from a neighbor if that neighbor's reported distance (RD) to the destination is less than the router's own feasible distance (FD). This guarantees that the path through that neighbor is loop-free, effectively rejecting routes learned from any neighbor that is not the successor.

Answer

Split horizon

Answer

Route poisoning

Answer

Hold-down timers

Question 10

A company is implementing QoS in a network where voice traffic must have strict priority over all other traffic. Which queuing mechanism should be used on the outbound interface of a router to ensure voice packets are always sent first?

Accepted Answer

Low Latency Queuing (LLQ). Low Latency Queuing (LLQ) is the correct choice because it combines Class-Based Weighted Fair Queuing (CBWFQ) with a strict priority queue, ensuring that voice traffic (marked with EF or CS5) is always dequeued before any other traffic class. This guarantees low latency and jitter for real-time traffic, which is essential for voice quality.

Answer

Random Early Detection (RED)

Answer

First In First Out (FIFO)

Answer

Class-Based Weighted Fair Queuing (CBWFQ)

Question 11

A network administrator is configuring a new VLAN 100 on a switch and wants to ensure that the VLAN is created and active. Which command is required to create a VLAN in the VLAN database?

Accepted Answer

vlan 100. The 'vlan 100' command is executed in global configuration mode to create a VLAN in the VLAN database on a Cisco IOS switch. This command creates the VLAN and places the switch into VLAN configuration mode, where optional parameters like name can be set. The VLAN is active immediately upon creation, provided the switch is in VTP server or transparent mode.

Answer

interface vlan 100

Answer

name VLAN100

Answer

switchport access vlan 100

Question 12

An engineer is troubleshooting a network where OSPF neighbors are stuck in the EXSTART state. What is the most likely cause?

Accepted Answer

MTU mismatch between the routers. The EXSTART state in OSPF indicates that routers have formed a bidirectional communication (2-Way state) and are now attempting to exchange Database Description (DBD) packets to negotiate the master/slave relationship and the initial sequence number. An MTU mismatch between the routers is the most common cause of neighbors being stuck in EXSTART because the router with the smaller MTU will drop DBD packets that exceed its interface MTU, preventing the exchange from progressing to the Loading state.

Answer

Dead timer mismatch

Answer

Authentication misconfiguration

Answer

Mismatched OSPF area IDs

Question 13

A company is deploying a WAN with MPLS VPN and wants to ensure that customer traffic is isolated from other customers. Which technology is used to maintain separation in the MPLS core?

Accepted Answer

Virtual Routing and Forwarding (VRF). VRF (Virtual Routing and Forwarding) is the technology used in MPLS VPN to maintain customer traffic separation within the MPLS core. Each customer is assigned a unique VRF on the Provider Edge (PE) router, which maintains a separate routing table and forwarding instance, ensuring that traffic from one customer never crosses into another customer's routing domain. This separation is enforced at Layer 3, independent of the MPLS label switching that occurs in the core.

Answer

VLAN tagging

Answer

MPLS labels

Answer

IPsec tunnels

Question 14

Which TWO statements are correct about Cisco SD-Access architecture? (Choose two.)

Accepted Answer

VXLAN encapsulation is used for data plane traffic within the fabric.. VXLAN is the encapsulation protocol used in the Cisco SD-Access fabric to carry data plane traffic between fabric edge nodes. VXLAN provides a Layer 2 overlay over a Layer 3 underlay, enabling scalable segmentation and mobility without VLAN limitations.

Answer

Wireless access points must be directly connected to the fabric edge switches.

Answer

Fabric edge nodes are responsible for connecting the fabric to external networks.

Answer

The fabric uses VLANs to isolate tenant traffic.

Question 15

Which TWO are benefits of using a spine-leaf architecture in a data center? (Choose two.)

Accepted Answer

Predictable latency between any two devices. A is correct because spine-leaf architecture ensures that every leaf switch is connected to every spine switch, creating a full-mesh topology. This design guarantees that traffic between any two leaf switches traverses at most one spine hop, resulting in predictable, consistent latency regardless of which devices are communicating.

Answer

Increased number of single points of failure

Answer

Increased broadcast domain size

Answer

Reduced need for VLANs