CCNP Infrastructure Practice Test 19 — 15 Questions

Question 1

A network administrator is configuring a Cisco IOS router to act as a DHCP server for a subnet. The administrator wants to ensure that the router assigns IP addresses to clients and also provides them with the IP address of a TFTP server for configuration files. Which DHCP option should the administrator configure to provide the TFTP server address?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Option 66. DHCP option 66 is the standard option for specifying the TFTP server name or IP address. Configuring this option in the DHCP pool allows clients to learn the TFTP server address, which they can use to download configuration files. This is the correct choice for providing the TFTP server address to DHCP clients.

Answer

Option 67

Answer

Option 43

Answer

Option 150

Question 2

A network engineer is configuring a Cisco IOS router to authenticate management users against a RADIUS server. The engineer wants to ensure that if the RADIUS server is unreachable, the router falls back to local authentication using the local username database. Which configuration should be applied?

Accepted Answer

aaa authentication login default group radius local. The correct configuration uses 'group radius' followed by 'local' to ensure that RADIUS is tried first and local authentication is used only as a fallback when the RADIUS server is unreachable. This provides both centralized authentication and resilience.

Answer

aaa authentication login default group radius enable

Answer

aaa authentication login default group radius none

Answer

aaa authentication login default local group radius

Question 3

A network administrator is configuring a Cisco IOS router to act as a DHCP server for a subnet. The administrator wants to ensure that the router assigns IP addresses to clients and also provides them with the IP address of a TFTP server for configuration files. Which DHCP option should the administrator configure to provide the TFTP server address?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

aaa new-model
aaa authentication login default group tacacs+ local
tacacs server TAC1
 address ipv4 10.1.1.100
 key SecretKey
username admin privilege 15 secret Cisco123. The correct configuration enables AAA, specifies TACACS+ with local fallback in the authentication method list, defines the TACACS+ server using the modern 'tacacs server' command, and creates a local username with a secret. This ensures authentication works even if the TACACS+ server is down.

Answer

aaa new-model
aaa authentication login default group tacacs+ local
tacacs-server host 10.1.1.100 key SecretKey
username admin privilege 15 secret Cisco123

Answer

aaa new-model
aaa authentication login default group tacacs+
tacacs server TAC1
 address ipv4 10.1.1.100
 key SecretKey
username admin privilege 15 secret Cisco123

Answer

aaa new-model
aaa authentication login default group tacacs+ local
tacacs server TAC1
 address ipv4 10.1.1.100
 key SecretKey
username admin privilege 15 password Cisco123

Question 4

A network engineer is configuring VXLAN on a Cisco Nexus 9000 series switch. The underlay network is a routed Layer 3 network using OSPF. The engineer needs to ensure that the VXLAN tunnel endpoint (VTEP) IP addresses are reachable across the underlay. Which statement describes the correct configuration for the VTEP source interface?

Accepted Answer

The VTEP source interface must be a loopback interface with an IP address advertised into the underlay routing protocol.. For VXLAN, the VTEP source interface should be a loopback interface with an IP address advertised into the underlay routing protocol. This ensures that the VTEP IP remains reachable even if a physical link fails, providing redundancy. The underlay network must route the loopback IP so that remote VTEPs can establish VXLAN tunnels.

Answer

The VTEP source interface must be a VLAN interface (SVI) on the switch, and the VLAN must be allowed on all trunk links.

Answer

The VTEP source interface must be a subinterface configured with 802.1Q encapsulation.

Answer

The VTEP source interface must be a physical interface that is directly connected to the underlay network.

Question 5

A network engineer is implementing VXLAN with a Cisco Nexus 9000 series switch acting as a VTEP. The engineer wants to ensure that the VXLAN traffic is encapsulated and forwarded correctly over the underlay network. Which statement describes the VXLAN encapsulation and forwarding process?

Accepted Answer

VXLAN encapsulates Layer 2 frames in UDP packets with a destination port of 4789, and the VTEP performs a lookup in the underlay routing table to forward the encapsulated packet to the remote VTEP.. VXLAN encapsulates original Layer 2 frames into UDP packets, with the outer UDP destination port typically 4789. The VTEP adds an outer IP header and forwards the packet based on the underlay network's routing table. This allows the overlay Layer 2 network to span across a Layer 3 underlay. The encapsulation process preserves the original frame, and the underlay routing ensures the packet reaches the remote VTEP.

Answer

VXLAN encapsulates Layer 2 frames in UDP packets with a destination port of 4789, and the VTEP uses the overlay routing table to forward the encapsulated packet to the remote VTEP.

Answer

VXLAN encapsulates Layer 3 packets in UDP packets with a destination port of 4789, and the VTEP performs a lookup in the underlay routing table to forward the encapsulated packet to the remote VTEP.

Answer

VXLAN encapsulates Layer 2 frames in GRE tunnels, and the VTEP uses the underlay routing table to forward the encapsulated packet to the remote VTEP.

Question 6

An engineer is implementing a VXLAN overlay network using Cisco Nexus switches. The engineer needs to ensure that the VXLAN tunnel endpoint (VTEP) can dynamically learn the mapping of remote VTEP IP addresses to MAC addresses. Which protocol should be used to achieve this dynamic learning?

Accepted Answer

MP-BGP EVPN. MP-BGP EVPN is the control plane protocol used in VXLAN overlays to dynamically exchange MAC address and IP address reachability information between VTEPs. It replaces flood-and-learn with a scalable, efficient control plane, enabling optimal forwarding and reducing flooding. This is the correct protocol for dynamic VTEP mapping learning.

Answer

OSPF

Answer

IS-IS

Answer

PIM sparse mode

Question 7

A network engineer is configuring a Cisco Catalyst switch to support a new wireless access point that will carry management traffic on VLAN 10 and client traffic on VLAN 20. The AP connects to a single switchport and requires both VLANs to be trunked with 802.1Q tagging, with VLAN 10 as the native VLAN. Which configuration on the switchport will meet these requirements?

Accepted Answer

switchport mode trunk
switchport trunk native vlan 10
switchport trunk allowed vlan 10,20. The switchport must be configured as a trunk to carry multiple VLANs. Setting the native VLAN to 10 ensures untagged management traffic uses VLAN 10, and allowing VLANs 10 and 20 permits both management and client traffic. The other options either do not enable trunking, set the wrong native VLAN, or use a dynamic mode that may not form a trunk with an access point.

Answer

switchport mode dynamic auto
switchport trunk native vlan 10
switchport trunk allowed vlan 10,20

Answer

switchport mode access
switchport access vlan 10
switchport trunk allowed vlan 20

Answer

switchport mode trunk
switchport trunk encapsulation dot1q
switchport trunk native vlan 20
switchport trunk allowed vlan 10,20

Question 8

A network engineer is implementing a first-hop redundancy protocol on a pair of Cisco switches. The requirement is to provide sub-second failover for IPv4 hosts and to load-balance traffic between the two switches for different VLANs. Which protocol should be used to meet these requirements?

Accepted Answer

Gateway Load Balancing Protocol (GLBP). GLBP is designed to provide both redundancy and load balancing. It elects an Active Virtual Gateway that assigns virtual MAC addresses to up to four Active Virtual Forwarders, allowing multiple switches to share the traffic load while providing sub-second failover. HSRP and VRRP can provide redundancy but require manual configuration for load balancing, and IRDP lacks the necessary features.

Answer

ICMP Router Discovery Protocol (IRDP)

Answer

Hot Standby Router Protocol (HSRP) version 1

Answer

Virtual Router Redundancy Protocol (VRRP) version 3

Question 9

A network engineer is configuring a Cisco Wireless LAN Controller (WLC) for a new wireless network. The engineer wants to ensure that client traffic is tunneled back to the WLC and that the WLC is the single point of management for the access points. Which mode should the access points be configured in?

Accepted Answer

Local mode. Local mode is the standard mode for access points in a centralized wireless deployment. It creates a CAPWAP tunnel to the WLC, carrying both management and client data traffic. This ensures that the WLC is the single point of management and that all client traffic is tunneled back to the WLC, meeting the engineer's requirements. Other modes either do not serve clients or switch traffic locally.

Answer

Sniffer mode

Answer

FlexConnect mode

Answer

Monitor mode

Question 10

A network engineer is configuring a Cisco IOS router to support OSPFv3 for IPv6. The router is connected to two OSPFv3 areas: area 0 and area 1. The engineer wants to summarize the IPv6 routes from area 1 into area 0 using the prefix 2001:DB8:1::/48. Which command should be used on the area border router (ABR)?

Accepted Answer

area 1 range 2001:DB8:1::/48. In OSPFv3, inter-area route summarization is configured on an ABR using the 'area range ' command. The area ID specifies the source area whose routes are to be summarized. Here, routes from area 1 are summarized into area 0 using the prefix 2001:DB8:1::/48. The other commands either do not exist, are for external summarization, or specify the wrong area.

Answer

summary-address 2001:DB8:1::/48

Answer

ipv6 ospf summary-prefix 2001:DB8:1::/48

Answer

area 0 range 2001:DB8:1::/48

Question 11

A network engineer is configuring QoS on a Cisco IOS switch. The engineer needs to mark packets coming from a specific server with DSCP EF (46) and ensure that this marking is trusted throughout the network. Which command should be used to trust the DSCP markings on the interface connected to the server?

Accepted Answer

mls qos trust dscp. To trust DSCP markings on an interface, the correct command is 'mls qos trust dscp'. This tells the switch to accept the DSCP value in incoming packets and use it for QoS processing. Since the server is already marking its traffic with DSCP EF, this command ensures that the marking is preserved and honored throughout the network, preventing the switch from re-marking the packets.

Answer

mls qos trust cos

Answer

mls qos trust ip-precedence

Answer

mls qos map cos-dscp 0 8 16 24 32 40 48 56

Question 12

A network engineer is implementing QoS on a Cisco IOS router. The engineer wants to ensure that VoIP traffic is prioritized and that excess VoIP traffic is dropped when the interface is congested. Which QoS mechanism should be used?

Accepted Answer

Low Latency Queuing (LLQ) with a policer.. For VoIP, LLQ provides a strict priority queue to minimize latency and jitter. To prevent excess VoIP traffic from starving other queues, a policer is applied to the priority queue, dropping packets that exceed the configured rate. This combination ensures VoIP is prioritized and excess traffic is dropped during congestion.

Answer

Weighted Random Early Detection (WRED) on the VoIP class.

Answer

Class-Based Weighted Fair Queuing (CBWFQ) with a bandwidth guarantee.

Answer

Traffic shaping on the VoIP class.

Question 13

A network engineer is deploying a new branch office with a single Cisco Catalyst switch that will connect to the corporate network via a routed uplink. The switch must be able to forward traffic for VLANs 10, 20, and 30 over that single uplink to a router. The router interface is configured with subinterfaces and dot1Q encapsulation. Which switchport configuration should be applied to the uplink port?

Accepted Answer

switchport mode trunk
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 10,20,30. The uplink must be a trunk to carry multiple VLANs to the router's subinterfaces. Configuring the port as a static trunk with 802.1Q encapsulation and limiting allowed VLANs to the ones in use ensures tagged frames reach the correct router subinterfaces. Dynamic trunking or access mode would not reliably support multiple VLANs over a single physical link.

Answer

switchport mode access
switchport access vlan 10

Answer

switchport mode dynamic desirable
switchport trunk allowed vlan 10,20,30

Answer

switchport mode trunk
switchport trunk native vlan 10
switchport trunk allowed vlan 20,30

Question 14

A network engineer is deploying a new branch office with a single Cisco Catalyst switch. The branch requires that all access ports automatically authenticate devices using 802.1X with RADIUS, but also allow unauthenticated devices to be placed into a guest VLAN. Which feature must be configured on the switch to meet this requirement?

Accepted Answer

Configure 802.1X authentication with a guest VLAN on the access ports.. The requirement is to authenticate devices using 802.1X with RADIUS and also provide a guest VLAN for unauthenticated devices. The 802.1X with guest VLAN feature on Cisco switches accomplishes this by assigning authenticated users to a VLAN and unauthenticated users to a guest VLAN. This is a standard implementation for branch offices needing both secure and guest access.

Answer

Configure Web Authentication (WebAuth) with a guest VLAN on the access ports.

Answer

Configure MAC authentication bypass (MAB) with a guest VLAN on the access ports.

Answer

Configure port security with a guest VLAN on the access ports.

Question 15

A network engineer is configuring a new switch stack using Cisco StackWise technology. The engineer wants to ensure that if the stack master fails, another switch takes over with minimal disruption. Which statement accurately describes the failover behavior in a StackWise stack?

Accepted Answer

The standby switch becomes the new master without reloading, and other members continue forwarding traffic.. Cisco StackWise provides high availability by allowing a standby switch to take over as master if the active master fails. This failover is designed to be hitless or near-hitless, with other stack members continuing to forward traffic. No reboot of all switches is required, and the failed master does not need immediate replacement. This ensures minimal disruption to network operations.

Answer

All switches in the stack must be rebooted to elect a new master, causing a network outage.

Answer

The stack master election is based on the highest MAC address, and failover requires a reboot of all stack members.

Answer

The failed master must be physically replaced before the stack can resume normal operations.