CCNP Network Assurance Practice Test 7 — 15 Questions

Question 1

A network engineer is deploying Cisco DNA Center Assurance and wants to ensure that the system can accurately monitor and troubleshoot network issues. Which two statements about Cisco DNA Center Assurance are true? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Assurance uses streaming telemetry to collect data from network devices.. Cisco DNA Center Assurance uses streaming telemetry for real-time data collection and provides a graphical topology view of network health. These features enable proactive monitoring and rapid troubleshooting. The other statements are false: Assurance does not require SNMP polling for all devices, it supports both wired and wireless, and it does not require manual per-device configuration for monitoring.

Answer

Assurance requires SNMP polling for all device monitoring.

Answer

Assurance requires manual configuration of each device to enable monitoring.

Answer

Assurance can only monitor wired devices, not wireless.

Question 2

A network engineer is using Cisco DNA Center Assurance to troubleshoot a user's poor voice quality. The engineer wants to view detailed hop-by-hop performance metrics for the path between the user's endpoint and the voice gateway over the last 24 hours. Which Assurance feature should the engineer use?

Accepted Answer

Path Trace. Cisco DNA Center Assurance Path Trace is designed to provide detailed hop-by-hop performance metrics for a specific path between two endpoints. It collects and displays latency, jitter, and packet loss per hop, which is essential for diagnosing voice quality issues. The other features offer summary or client-centric views but not the granular path data required.

Answer

Application Experience

Answer

Client 360

Answer

Network Health Dashboard

Question 3

A network administrator needs to validate that the path taken by packets from a branch router to a remote server matches the expected primary path. The administrator wants to collect per-hop latency and packet loss statistics along that path. Which tool should be used?

Accepted Answer

IP SLA with a path-echo operation. IP SLA path-echo is designed to trace the path to a destination and collect per-hop latency and packet loss. Unlike simple ICMP echo, it provides hop-by-hop details, which are necessary to validate that traffic follows the expected primary path. The other options either lack hop-by-hop granularity or are not performance-monitoring tools.

Answer

Cisco IOS Embedded Event Manager (EEM) with a Tcl script

Answer

IOS IP SLA with an ICMP echo operation

Answer

Cisco Discovery Protocol (CDP) neighbor details

Question 4

A network engineer is deploying Cisco DNA Center Assurance and wants to ensure that the system can accurately monitor and troubleshoot network issues. Which two statements about Cisco DNA Center Assurance are true? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Streaming telemetry from fabric nodes via the network data platform. Cisco DNA Center Assurance computes fabric health scores using streaming telemetry collected by the Network Data Platform. This telemetry includes underlay and overlay performance metrics, control plane status, and client health. The NDP processes this data to generate real-time health scores, enabling proactive monitoring and troubleshooting. Other data sources like SNMP, syslog, or NetFlow supplement assurance but are not the primary basis for fabric health scoring.

Answer

Syslog messages forwarded to the DNA Center syslog collector

Answer

SNMP polling of fabric edge nodes every 5 minutes

Answer

NetFlow records exported from fabric edge switches

Question 5

A network engineer is configuring a Cisco Catalyst switch to send flow data to a NetFlow collector for traffic analysis. The engineer wants to ensure that only ingress traffic on a specific interface is exported. Which command is required to enable NetFlow on that interface?

Accepted Answer

ip flow ingress. To enable NetFlow for ingress traffic on a specific interface, the 'ip flow ingress' command must be applied in interface configuration mode. This command activates flow capture for packets entering the interface. The other options either enable egress flow, use an outdated method, or configure the export destination rather than enabling flow capture.

Answer

ip flow egress

Answer

ip route-cache flow

Answer

ip flow-export destination

Question 6

A network engineer is using Cisco DNA Center Assurance to troubleshoot a client connectivity issue. The engineer notices that the client's health score is low due to onboarding failures. Which component of Cisco DNA Center Assurance should be examined first to identify the root cause?

Accepted Answer

Client 360. Client 360 is the correct component because it provides detailed information about a specific client's onboarding process, including authentication, DHCP, and DNS steps. It allows the engineer to pinpoint the exact failure point. Network Health, Application Health, and Path Trace offer broader or different perspectives that do not focus on individual client onboarding.

Answer

Network Health

Answer

Application Health

Answer

Path Trace

Question 7

A network administrator is using Cisco DNA Center Assurance to troubleshoot a client connectivity issue. The client is associated to a wireless controller but cannot reach the default gateway. The administrator notices that the client's onboarding status shows 'DHCP failed'. Which Assurance feature should the administrator use to trace the client's path and identify where DHCP packets are being dropped?

Accepted Answer

Path Trace. Path Trace in Cisco DNA Center Assurance is designed to trace the exact path of a client's traffic, including DHCP, through the network. It shows each device and interface the traffic traverses and identifies where packets are dropped. This makes it the ideal tool for troubleshooting a client's DHCP failure by pinpointing the drop location. Other features like Time Travel or Application Experience provide different types of analysis but not hop-by-hop path tracing.

Answer

Application Experience

Answer

Sensor-driven tests

Answer

Network Time Travel

Question 8

A network engineer is troubleshooting why a newly added Cisco Catalyst 9300 switch is not appearing in Cisco DNA Center's topology view, even though it is reachable via SSH from the management network. The switch has been configured with the correct SNMP community string. Which protocol must be enabled on the switch for Cisco DNA Center to discover and monitor it?

Accepted Answer

SNMP. Cisco DNA Center relies on SNMP to discover and monitor network devices. Although SSH may be used for CLI-based configuration, SNMP is the protocol that provides the management data for topology and health monitoring. Without SNMP enabled and correctly configured, the switch will not be discovered, regardless of SSH reachability or correct community strings.

Answer

NETCONF

Answer

Syslog

Answer

IP SLA

Question 9

A network engineer is troubleshooting intermittent packet loss on a WAN circuit connecting a branch office to headquarters. The engineer suspects the provider is not honoring the committed rate. Which tool should be used to measure one-way delay, jitter, and packet loss between the two sites and generate threshold-based alerts?

Accepted Answer

IP SLA with UDP jitter operation. The correct tool is the one that actively generates synthetic traffic and reports latency, jitter, and loss with thresholds. IP SLA UDP jitter operations are purpose-built for this and integrate with tracking objects to trigger alerts or failover, which matches the engineer's need to verify the provider's adherence to the committed rate.

Answer

Cisco DNA Center Assurance with SWIM

Answer

Embedded Packet Capture on the WAN interface

Answer

NetFlow export to a collector

Question 10

A network administrator is implementing NetFlow on a Cisco IOS XE router to monitor traffic. Which two statements about NetFlow are true? (Choose two.)

Accepted Answer

NetFlow can export flow data to a collector using UDP.. The two true statements are that NetFlow can export flow data using UDP and that it can be configured to export only ingress or egress traffic on an interface. NetFlow does not require SNMP, does not collect payload data, and does not use TCP port 2055 by default.

Answer

NetFlow requires SNMP to be enabled on the router.

Answer

NetFlow collects packet payload data for deep packet inspection.

Answer

NetFlow export uses TCP port 2055 by default.

Question 11

A network engineer is analyzing Cisco DNA Center Assurance data to troubleshoot a wireless client's poor performance. The engineer observes that the client's health score is low due to high retry rates and low SNR. Which TWO Assurance metrics should the engineer examine to further diagnose the issue? (Choose two.)

Accepted Answer

AP channel utilization and interference. To diagnose high retry rates and low SNR, the engineer should examine RF-related metrics. Client RSSI and SNR trends reveal signal quality and potential coverage gaps. AP channel utilization and interference show if the channel is congested or noisy. Together, these metrics help identify whether the issue is due to distance, interference, or channel overlap. Other metrics like switch CPU, WAN latency, or DHCP utilization do not directly address wireless RF performance.

Answer

Switch CPU utilization

Answer

DHCP pool utilization

Answer

WAN latency and jitter

Question 12

A network administrator is using Cisco DNA Center Assurance to monitor the health of wireless clients. The administrator notices that some clients are experiencing poor performance, but the Assurance dashboard shows them as 'Good'. Which action should the administrator take to troubleshoot the issue?

Accepted Answer

Review the client's detailed health metrics, including RSSI, SNR, and retry rates.. Cisco DNA Center Assurance client health scores are composite metrics that may not reflect all RF issues. When clients report poor performance but show 'Good' health, the administrator should examine detailed client metrics such as RSSI, SNR, and retry rates to uncover hidden problems. The other options are either too broad or unnecessary.

Answer

Verify that the wireless controller is registered with Cisco DNA Center.

Answer

Check the overall network health dashboard for any global alerts.

Answer

Restart the Cisco DNA Center Assurance service.

Question 13

A network administrator is using Cisco DNA Center Assurance to monitor the health of a campus network. The administrator wants to receive alerts when the number of clients on a specific wireless controller exceeds a threshold. Which feature in Cisco DNA Center Assurance should be used to configure this?

Accepted Answer

Custom Assurance Thresholds. Cisco DNA Center Assurance provides the ability to set custom thresholds for health metrics. To alert when client count exceeds a limit, the administrator configures a custom threshold for the wireless controller's client count. This generates an alert when the condition is met. The other features are for monitoring and testing but not for threshold configuration.

Answer

Sensor-driven Tests

Answer

Assurance Issues and Events

Answer

Network Health Dashboard

Question 14

A network administrator is using Cisco DNA Center Assurance to monitor the health of a campus network. The administrator wants to receive alerts when a switch's health score drops below a threshold. Which Assurance feature should be configured to generate these alerts?

Accepted Answer

Assurance Issues and Notifications. To generate alerts when a switch's health score drops below a threshold, the administrator must configure Assurance Issues and Notifications in Cisco DNA Center. This feature allows defining specific health score conditions and setting up notification channels such as email or webhooks. The Network Health Dashboard is for visualization, Path Trace for troubleshooting, and Sensor-driven tests for proactive monitoring, none of which provide threshold-based alerting directly.

Answer

Sensor-driven tests

Answer

Network Health Dashboard

Answer

Path Trace

Question 15

A network administrator is using Cisco DNA Center Assurance to monitor the health of a campus network. The administrator notices that a particular client device shows a health score of 'Poor' but the switch port statistics indicate no errors or drops. Which Cisco DNA Center Assurance feature should the administrator use to identify the root cause of the poor health score?

Accepted Answer

Client 360. Cisco DNA Center Assurance's Client 360 view provides comprehensive details about a specific client, including onboarding, authentication, RF statistics, and application experience. It is designed to help troubleshoot client-specific issues and determine the root cause of poor health scores. Other dashboards offer aggregate or path-based views but lack the client-centric depth needed here.

Answer

Network Health dashboard

Answer

Path Trace

Answer

Application Health dashboard