CCNP Infrastructure Practice Test 7 — 15 Questions

Question 1

A network engineer is deploying a new branch office that requires dynamic routing between the branch and the headquarters. The engineer decides to use EIGRP and wants to ensure that the branch router does not become a transit router for traffic destined to other sites. The engineer also wants to minimize the size of the EIGRP topology table on the branch router. Which EIGRP feature should the engineer configure on the branch router's WAN interfaces?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

EIGRP stub routing. EIGRP stub routing is specifically designed for spoke routers to advertise only directly connected or summary routes, preventing them from becoming transit routers and reducing the size of the EIGRP topology table on other routers. This feature is ideal for branch offices that should not forward traffic between other sites.

Answer

EIGRP authentication

Answer

EIGRP offset lists

Answer

EIGRP route summarization

Question 2

A network administrator is configuring a new Cisco Catalyst switch that will participate in a VTP domain. The switch currently has all ports in VLAN 1 and no other VLANs configured. The administrator wants to ensure that when the switch is connected to the existing VTP domain, it can synchronize VLAN information from the VTP server without overwriting the server's VLAN database. Which VTP mode should be configured on the new switch?

Accepted Answer

VTP client mode. A switch in VTP client mode receives VLAN configuration from a VTP server and applies it, ensuring synchronization. Clients cannot modify the VLAN database, so they cannot overwrite the server's VLAN information. This mode is ideal for a new switch that should learn VLANs from the existing domain without risking the server's database.

Answer

VTP transparent mode

Answer

VTP server mode

Answer

VTP off mode

Question 3

A network engineer is configuring a new branch router to participate in an EIGRP named-mode process for the first time. The router must form an adjacency with an existing EIGRP classic-mode neighbor over a point-to-point serial link using autonomous system number 10. Which command sequence correctly enables EIGRP named mode and ensures interoperability with the existing classic-mode neighbor?

Accepted Answer

router eigrp NAMED-MODE address-family ipv4 autonomous-system 10 network 10.0.0.0 0.255.255.255. EIGRP named mode requires entering router eigrp , then address-family ipv4 autonomous-system . The AS number must match the neighbor's AS for adjacency. The network command is placed under the address family. This configuration enables named mode and interoperates with classic-mode EIGRP when the AS matches.

Answer

router eigrp 10
 network 10.0.0.0 0.255.255.255
 address-family ipv4

Answer

router eigrp NAMED-MODE
 network 10.0.0.0 0.255.255.255
 autonomous-system 10

Answer

router eigrp 10
 address-family ipv4 autonomous-system 10
 network 10.0.0.0 0.255.255.255

Question 4

Refer to the scenario. A network engineer is configuring VXLAN on Cisco Nexus switches using a spine-leaf topology. The engineer needs to ensure that the VXLAN data plane can forward traffic between leaf switches. The underlay uses OSPF, and the loopback interfaces are reachable. Which configuration must be applied to the NVE interface to enable VXLAN traffic forwarding?

Accepted Answer

Configure the NVE interface with a source-interface loopback0, map VNIs to VLANs, and specify the remote VTEP peer addresses.. To enable VXLAN data plane forwarding, the NVE interface must be configured with a source interface (typically a loopback for stability), VNI-to-VLAN mappings to associate VXLAN segments with VLANs, and the remote VTEP peer addresses to establish tunnels. This combination allows the leaf switches to encapsulate and forward traffic across the underlay network.

Answer

Configure the NVE interface with a source-interface loopback0 and enable VXLAN encapsulation.

Answer

Configure the NVE interface with a source-interface loopback0 and enable OSPF on the NVE interface.

Answer

Configure the NVE interface with a source-interface loopback0 and set the VXLAN UDP port to 4789.

Question 5

A network administrator is implementing VXLAN with a Cisco Nexus 9000 series switch acting as a VTEP. The underlay network is running OSPF, and the administrator wants to ensure that the VXLAN traffic is load-balanced across multiple equal-cost paths. Which action should be taken?

Accepted Answer

Configure the underlay to use the default load-balancing method based on Layer 3 and Layer 4 headers.. VXLAN traffic is encapsulated in UDP, so the underlay network must use a load-balancing hash that includes Layer 3 and Layer 4 information to differentiate flows. This allows equal-cost paths to be utilized effectively. Configuring the underlay to use such a hashing method ensures that VXLAN traffic is distributed across multiple paths.

Answer

Enable the feature bgp and configure BGP EVPN for the overlay.

Answer

Configure a unique VNI for each VLAN to ensure flow-based load balancing.

Answer

Enable jumbo frames on all interfaces in the underlay to accommodate VXLAN overhead.

Question 6

A network engineer is deploying a new branch office that requires dynamic routing between the branch and the headquarters. The engineer decides to use EIGRP and wants to ensure that the branch router does not become a transit router for traffic destined to other sites. The engineer also wants to minimize the size of the EIGRP topology table on the branch router. Which EIGRP feature should the engineer configure on the branch router's WAN interfaces?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure 802.1X with critical authentication and a critical VLAN.. The requirement is to maintain connectivity for already authenticated users and to place new users into a restricted VLAN when the authentication server is down. This is achieved with 802.1X critical authentication and a critical VLAN. The other options do not provide a failover mechanism for authentication server unavailability.

Answer

Configure MACsec encryption on the switch ports.

Answer

Configure 802.1X with downloadable ACLs from the authentication server.

Answer

Configure MAB with a fallback to the guest VLAN.

Question 7

A network engineer is configuring a Cisco IOS router for OSPFv3. The engineer wants to enable OSPFv3 on interface GigabitEthernet0/0 and assign it to area 0. Which command sequence is correct?

Accepted Answer

ipv6 router ospf 1, then interface GigabitEthernet0/0, ipv6 ospf 1 area 0. OSPFv3 for IPv6 is enabled using 'ipv6 router ospf' in global configuration mode, followed by 'ipv6 ospf [process-id] area [area-id]' on the interface. The process ID must be consistent. The other options either use incorrect commands for OSPFv2, omit the process ID, or use non-standard syntax for classic Cisco IOS.

Answer

ipv6 router ospf 1, then interface GigabitEthernet0/0, ipv6 ospf area 0

Answer

router ospfv3 1, then interface GigabitEthernet0/0, ospfv3 1 ipv6 area 0

Answer

router ospf 1, then interface GigabitEthernet0/0, ipv6 ospf 1 area 0

Question 8

A network engineer is configuring NETCONF on a Cisco IOS XE device. The engineer wants to retrieve the running configuration using NETCONF. Which protocol and port does NETCONF use by default for secure transport?

Accepted Answer

SSH on TCP port 830. NETCONF uses SSH as its default secure transport, operating on TCP port 830. This is standardized in RFC 6242. The SSH subsystem 'netconf' is used to establish the session. Other options like TLS or HTTP are not the default for NETCONF on Cisco IOS XE.

Answer

HTTP on TCP port 80

Answer

SSH on TCP port 22

Answer

TLS on TCP port 6513

Question 9

A network engineer is implementing a VXLAN EVPN fabric using Cisco Nexus 9000 switches. The engineer needs to ensure that the underlay network provides redundancy and load balancing for VXLAN traffic. Which routing protocol and configuration should be used in the underlay to achieve this?

Accepted Answer

OSPF with equal-cost multipath (ECMP) enabled. In a VXLAN EVPN fabric, the underlay network must provide IP connectivity with redundancy and load balancing. OSPF with ECMP is a common and recommended choice because it is easy to configure, supports equal-cost multipath, and is well-suited for data center fabrics. While IS-IS with ECMP is also valid, OSPF is more prevalent in Cisco Nexus environments for this purpose.

Answer

BGP with multipath and additional-path features

Answer

IS-IS with wide metrics and ECMP

Answer

EIGRP with variance configured

Question 10

A network engineer is deploying a Cisco SD-Access fabric. The engineer needs to ensure that the fabric can provide policy-based segmentation and group-based policies. Which component of the Cisco SD-Access architecture is responsible for defining and enforcing group-based policies?

Accepted Answer

Fabric edge node. In Cisco SD-Access, group-based policies are enforced at the fabric edge nodes. These nodes encapsulate traffic in VXLAN and carry the source and destination group tags (SGTs) in the VXLAN header. The edge node then applies the policy defined by the Cisco DNA Center based on these tags, allowing micro-segmentation and contract-based enforcement.

Answer

Cisco DNA Center

Answer

Fabric border node

Answer

Identity Services Engine (ISE)

Question 11

A network engineer is configuring a VXLAN EVPN fabric. The engineer wants to ensure that the underlay network provides load balancing across multiple paths using all available links. Which routing protocol and configuration should be used in the underlay to achieve this?

Accepted Answer

BGP with maximum-paths configured and ECMP enabled.. For VXLAN EVPN fabrics, the underlay network commonly uses BGP with ECMP to provide load balancing across all links. BGP is preferred because it scales well and integrates seamlessly with the EVPN control plane. Configuring maximum-paths allows multiple equal-cost routes to be used simultaneously, ensuring efficient utilization of all available bandwidth.

Answer

IS-IS with multiple Level 2 adjacencies and ECMP.

Answer

OSPF with equal-cost multipath (ECMP) enabled.

Answer

EIGRP with variance configured to allow unequal-cost load balancing.

Question 12

A network engineer is configuring OSPF on a Cisco router. The router is connected to a broadcast network with multiple OSPF routers. The engineer wants to ensure that this router becomes the Designated Router (DR) on the segment. Which configuration should be applied to the router's interface?

Accepted Answer

Set the OSPF priority to 0 on all other routers on the segment.. To guarantee that a specific router becomes the DR on a broadcast segment, the most reliable method is to set the OSPF priority to 0 on all other routers, making them ineligible. This router, with its default priority of 1, will then be the only eligible router and will win the election. Simply setting a high priority on the desired router does not guarantee DR status if another router already has a higher priority or if the election has already occurred.

Answer

Set the OSPF priority to 255 on the interface.

Answer

Configure the interface as a point-to-point network type.

Answer

Configure the router as a stub router.

Question 13

A network engineer is implementing QoS on a Cisco IOS router. The engineer needs to classify traffic based on the DSCP value in the IP header and mark it with a new DSCP value. The engineer also wants to ensure that the marking is trusted from an upstream switch. Which two actions must be performed to achieve this? (Choose two.)

Accepted Answer

Configure a policy-map to set the new DSCP value using the 'set dscp' command.. To classify and mark traffic based on DSCP, you must create a class-map to match the existing DSCP value and a policy-map to set the new DSCP value. These are then applied to an interface. Trusting DSCP is typically a switch function, not a router function, and is not required for marking on the router.

Answer

Configure a route-map to match on DSCP and set the new value.

Answer

Configure the 'mls qos trust dscp' command on the interface.

Answer

Configure the 'trust dscp' command under the policy-map class.

Question 14

A network engineer is troubleshooting a VXLAN environment. The engineer needs to verify the configuration of the VXLAN Tunnel Endpoint (VTEP) and ensure proper operation. Which two statements about VXLAN VTEPs are true? (Choose two.)

Accepted Answer

The VTEP encapsulates Layer 2 frames into UDP packets with destination port 4789.. VXLAN VTEPs encapsulate Layer 2 frames into UDP packets with destination port 4789. Each VTEP must have a unique IP address in the underlay network. These are fundamental requirements. BGP EVPN is an optional control plane, and VTEPs do not perform Layer 2 bridging or encapsulate Layer 3 packets directly.

Answer

The VTEP encapsulates Layer 3 packets into VXLAN frames for routing between subnets.

Answer

The VTEP performs Layer 2 bridging between VXLAN segments and VLANs.

Answer

VTEPs use BGP EVPN to exchange MAC addresses and IP addresses for overlay reachability.

Question 15

A network engineer is implementing QoS on a Cisco IOS router. The engineer needs to classify traffic based on the Layer 2 CoS field and then mark it with an IP DSCP value. Which two statements are true regarding the configuration of QoS on the router? (Choose two.)

Accepted Answer

The 'set ip dscp' command is used in a policy map to mark the DSCP value of packets.. To classify traffic based on CoS and mark with DSCP, the switch port must trust CoS using 'mls qos trust cos', and the policy map must use 'set ip dscp' to mark the DSCP value. These two commands are essential for mapping Layer 2 CoS to Layer 3 DSCP in a QoS deployment.

Answer

The 'mls qos map cos-dscp' command is used to map CoS values to DSCP values for egress traffic.

Answer

The 'trust dscp' command is used to trust the DSCP value of incoming packets on a router interface.

Answer

The 'priority-queue out' command is required to enable QoS on a router interface.