CCNP Enterprise Network Design Practice Test 2 — 15 Questions

Question 1

An enterprise is deploying Cisco SD-WAN and must ensure that data plane traffic between branch sites is encrypted and authenticated. The design must also allow the use of application-aware routing to steer traffic based on real-time performance metrics. Which component is responsible for establishing and managing the IPsec tunnels between branch routers?

Accepted Answer

vEdge/cEdge routers. The vEdge/cEdge routers are the correct answer because they are the SD-WAN edge devices that terminate IPsec tunnels for data plane traffic. In Cisco SD-WAN, the data plane is fully distributed: each vEdge or cEdge router establishes and manages its own IPsec tunnels (using DTLS/TLS for control and IPsec for data) directly with other branch routers. This allows the routers to apply application-aware routing by monitoring real-time performance metrics (e.g., loss, latency, jitter) and steering traffic across the encrypted tunnels accordingly.

Answer

vSmart controllers

Answer

vManage

Answer

vBond

Question 2

A network architect is designing QoS for a converged network carrying voice, video, and data. The design must use the DiffServ model and ensure that voice traffic is marked with the highest priority and that video traffic is marked with a lower priority but still above data. Which DSCP markings should be assigned to voice and video traffic, respectively, to comply with the standard Per-Hop Behavior (PHB) definitions?

Accepted Answer

Voice: DSCP 46 (EF); Video: DSCP 34 (AF41). Option A is correct because the DiffServ model defines specific Per-Hop Behaviors (PHBs) for different traffic types. Voice traffic requires low latency, jitter, and loss, which is best served by the Expedited Forwarding (EF) PHB, assigned DSCP 46. Video traffic, while still delay-sensitive, can tolerate some loss and is typically marked with Assured Forwarding (AF41, DSCP 34), which provides a lower priority queue than EF but higher than best-effort data.

Answer

Voice: DSCP 56 (CS7); Video: DSCP 48 (CS6)

Answer

Voice: DSCP 40 (AF41); Video: DSCP 46 (EF)

Answer

Voice: DSCP 26 (AF31); Video: DSCP 18 (AF21)

Question 3

An enterprise is migrating its data center to a leaf-spine architecture to support high east-west traffic between servers. The design must provide non-blocking forwarding and allow for easy scaling by adding more spines. Which characteristic is essential for the spine switches in this design?

Accepted Answer

Spine switches must support high port density and high forwarding capacity, and act as Layer 3 routers. In a leaf-spine architecture designed for non-blocking forwarding and high east-west traffic, spine switches must act as Layer 3 routers with high port density and forwarding capacity. This allows them to perform Equal-Cost Multi-Path (ECMP) routing, which distributes traffic across all available uplinks without blocking, ensuring that any leaf can reach any other leaf with predictable latency and full bandwidth utilization.

Answer

Spine switches must run Spanning Tree Protocol (STP) to prevent loops

Answer

Spine switches must be connected to each other to provide redundancy

Answer

Spine switches must perform NAT to translate between VLANs

Question 4

Examine the following configuration snippet:
interface GigabitEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 ip ospf network point-to-point
 ip ospf hello-interval 10
 ip ospf dead-interval 40
!
router ospf 1
 network 192.168.1.0 0.0.0.255 area 0

What is the effect of this configuration?

Accepted Answer

OSPF adjacency will form with a neighbor using hello/dead intervals of 10/40 seconds.. The configuration sets the OSPF network type to point-to-point on the interface, which allows OSPF to form an adjacency with a neighbor using the configured hello interval of 10 seconds and dead interval of 40 seconds. These intervals are valid for point-to-point networks, and the network command under router ospf correctly enables OSPF on the interface. Therefore, an adjacency will form as long as the neighbor's intervals match.

Answer

OSPF adjacency will not form because the hello interval is too low for point-to-point.

Answer

The network command under router ospf will be ignored because the interface has an explicit network type.

Answer

OSPF will use the default broadcast network type because the point-to-point keyword is misspelled.

Question 5

Consider this configuration:
interface GigabitEthernet0/2
 switchport mode trunk
 switchport trunk native vlan 10
 switchport trunk allowed vlan 10,20,30
!
interface Vlan10
 ip address 192.168.10.1 255.255.255.0

Which statement is true about this configuration?

Accepted Answer

The trunk will only allow VLANs 10, 20, and 30, and VLAN 10 is the native VLAN.. Option B is correct because the configuration explicitly permits VLANs 10, 20, and 30 on the trunk using the 'switchport trunk allowed vlan' command, and VLAN 10 is set as the native VLAN with the 'switchport trunk native vlan 10' command. The native VLAN carries untagged traffic on the trunk, but it is still a valid VLAN that can be included in the allowed list and can have an SVI for routing. The SVI for VLAN 10 will come up as long as the VLAN exists and there is at least one active switchport in that VLAN, which is satisfied by the trunk port.

Answer

The native VLAN 10 cannot be used as a routed interface because it is the native VLAN.

Answer

The SVI for VLAN 10 will not come up because the native VLAN must be untagged.

Answer

The configuration is invalid because the native VLAN must be the same as the management VLAN.

Question 6

Given the following configuration:
router eigrp TEST
 network 10.0.0.0 0.255.255.255
 network 192.168.1.0
!
interface GigabitEthernet0/0
 ip address 10.1.1.1 255.255.255.0
 ip summary-address eigrp TEST 10.0.0.0 255.0.0.0 5

What is the effect of the ip summary-address command?

Accepted Answer

It creates a summary route 10.0.0.0/8 with a metric of 5, advertised out GigabitEthernet0/0.. The `ip summary-address eigrp TEST 10.0.0.0 255.0.0.0 5` command creates a summary route of 10.0.0.0/8 with an administrative distance of 5, which is advertised out of GigabitEthernet0/0. The EIGRP process name TEST matches the router eigrp configuration, and the summary is generated regardless of the network statements, as long as the router has a more specific route within the summarized range.

Answer

It creates a summary route 10.0.0.0/8 with a metric of 5, but only for the EIGRP process named TEST.

Answer

It creates a summary route 10.0.0.0/8 with a hop count of 5.

Answer

The command is invalid because the summary address must match the network statement exactly.

Question 7

Examine this configuration:
policy-map QOS_POLICY
 class VOICE
  priority percent 10
 class VIDEO
  bandwidth percent 30
 class class-default
  fair-queue
!
interface GigabitEthernet0/0
 service-policy output QOS_POLICY

What is the effect of this policy-map?

Accepted Answer

Voice traffic gets strict priority up to 10% of interface bandwidth, video gets at least 30%, and all other traffic is fair-queued.. Option A is correct because the policy-map uses the 'priority percent 10' command under class VOICE, which provides strict priority queuing for voice traffic, guaranteeing it is serviced first up to 10% of the interface bandwidth. The 'bandwidth percent 30' command under class VIDEO allocates a minimum bandwidth guarantee of 30% for video traffic, while the 'fair-queue' command under class-default ensures all other traffic shares the remaining bandwidth fairly using Cisco's Class-Based Weighted Fair Queuing (CBWFQ). This configuration is valid and commonly used in enterprise QoS designs to prioritize real-time traffic while still providing bandwidth guarantees for other critical traffic.

Answer

Voice and video both get priority queuing, with voice at 10% and video at 30%.

Answer

The policy-map is invalid because you cannot use both priority and bandwidth in the same policy-map.

Answer

The policy-map will only shape traffic, not prioritize it.

Question 8

Consider the following configuration:
router bgp 65000
 bgp router-id 192.168.0.1
 neighbor 10.0.0.2 remote-as 65001
 neighbor 10.0.0.2 ebgp-multihop 2
 neighbor 10.0.0.2 update-source Loopback0
!
interface Loopback0
 ip address 192.168.0.1 255.255.255.255

What is missing for this BGP session to establish?

Accepted Answer

A route to reach 10.0.0.2 is missing; the neighbor must be reachable via the routing table.. Option A is correct because for an eBGP session to establish, the neighbor IP address (10.0.0.2) must be reachable via the routing table. The configuration uses `ebgp-multihop 2` and an update-source of Loopback0, but there is no route (static or dynamic) to reach 10.0.0.2, so the TCP connection cannot be initiated. Without reachability, BGP will remain in the Idle state.

Answer

The ebgp-multihop value should be 1 for a directly connected neighbor.

Answer

The remote-as must be the same as the local AS for EBGP.

Answer

The router-id must be the same as the update-source interface IP.

Question 9

Given this configuration:
interface GigabitEthernet0/0
 ip address 172.16.1.1 255.255.255.0
 ip pim sparse-mode
!
interface GigabitEthernet0/1
 ip address 172.16.2.1 255.255.255.0
 ip pim sparse-mode
!
ip pim rp-address 172.16.1.1

What is the effect of this configuration?

Accepted Answer

The router uses 172.16.1.1 as the RP for all multicast groups, and PIM sparse-mode is enabled on both interfaces.. The configuration statically assigns 172.16.1.1 as the RP for all multicast groups using the 'ip pim rp-address' command, and both interfaces are explicitly configured with 'ip pim sparse-mode'. This ensures that PIM sparse-mode is operational on the interfaces and that the router uses the specified RP for group-to-RP mapping, making option A correct.

Answer

The router will automatically elect an RP using BSR because no RP is configured.

Answer

PIM dense-mode is used because sparse-mode is not fully configured.

Answer

The configuration is invalid because the RP address must be a loopback interface.

Question 10

What is the default OSPF hello interval on an Ethernet broadcast network?

Accepted Answer

10 seconds. On Ethernet broadcast networks, OSPF defaults to a hello interval of 10 seconds, as specified in RFC 2328. This interval is used to maintain neighbor relationships and detect failures quickly on high-speed multi-access links.

Answer

30 seconds

Answer

5 seconds

Answer

20 seconds

Question 11

Which BGP attribute is preferred when the local preference is equal?

Accepted Answer

AS-path length (shorter is better). When the local preference is equal, BGP selects the path with the shortest AS-path length. This is because AS-path length is the second tiebreaker in the BGP best path selection algorithm (after highest weight, then highest local preference). A shorter AS-path implies fewer autonomous system hops, which is generally preferred for routing efficiency.

Answer

MED (lower is better)

Answer

Origin code (IGP is preferred over EGP)

Answer

Next-hop IP address (lowest is preferred)

Question 12

What is the maximum hop count for EIGRP?

Accepted Answer

255. EIGRP uses a maximum hop count of 255 to prevent routing loops, which is a hard limit enforced by the protocol. This value is configurable via the 'metric maximum-hops' command under the EIGRP process, but the absolute maximum is 255. Unlike distance-vector protocols like RIP, EIGRP is an advanced distance-vector protocol that uses the Diffusing Update Algorithm (DUAL) for loop avoidance, but the hop count serves as a final safety mechanism.

Answer

15

Answer

128

Answer

Unlimited

Question 13

Drag and drop the steps of the PPDIOO network lifecycle into the correct order, from first to last.

Accepted Answer

Prepare: Define network requirements and strategy. The PPDIOO lifecycle defines six phases: Prepare, Plan, Design, Implement, Operate, and Optimize. This order ensures a structured approach from initial requirements gathering through ongoing improvement.

Question 14

Drag and drop the steps of the hierarchical campus network design process into the correct order, from first to last.

Accepted Answer

Design access layer with VLANs and port security. The hierarchical design process starts with access layer connectivity, then moves to distribution layer aggregation, core layer transport, and finally WAN edge integration. This layered approach optimizes scalability and performance.

Question 15

Drag and drop the steps of the SD-Access fabric deployment sequence into the correct order, from first to last.

Accepted Answer

Configure underlay network with IS-IS or OSPF. SD-Access deployment begins with underlay configuration for physical connectivity, then overlay setup with LISP/VXLAN, followed by policy definition and integration with DNA Center for automation and assurance.