CCNP Network Assurance Practice Test 8 — 15 Questions

Question 1

A network administrator is using Cisco DNA Center to monitor the health of network devices. The administrator wants to see a summary of the overall network health and any issues that need attention. Which Cisco DNA Center feature provides this information?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Assurance. Cisco DNA Center Assurance is designed to give network administrators a holistic view of network health. It collects data from devices and uses machine learning to detect anomalies and provide insights. The health dashboard summarizes the status of network devices, clients, and applications, and lists issues with recommended actions. The other features are related to configuration and policy, not monitoring.

Answer

Policy

Answer

Provision

Answer

Design

Question 2

A network engineer is using Cisco DNA Center Assurance to monitor a network with Cisco SD-Access fabric. The engineer notices that the fabric health score is consistently low, but individual device health scores are high. Which component of the fabric should the engineer investigate first?

Accepted Answer

Fabric control plane nodes. In Cisco SD-Access, the fabric health score reflects the health of the overlay and control plane. If individual device health scores are high but fabric health is low, the issue is likely with fabric control plane nodes (LISP map-server/map-resolver) or overlay tunnels. These components are critical for fabric operation but may not affect individual device health scores. Investigating control plane nodes first is the logical step to identify misconfigurations or failures in the fabric overlay.

Answer

Underlay network devices

Answer

Wireless LAN controllers

Answer

Fabric edge nodes

Question 3

A network engineer is using Cisco DNA Center's Assurance to troubleshoot a performance issue reported by users on a specific floor. The engineer wants to analyze the path that traffic takes from a client to a server in the data center, including details of each hop such as device, interface, and any ACLs applied. Which Cisco DNA Center Assurance feature provides this information?

Accepted Answer

Path Trace. Cisco DNA Center Assurance's Path Trace feature provides a visual and detailed hop-by-hop view of the path that traffic takes between two endpoints. It includes information about each device, interface, and any policies applied, making it ideal for troubleshooting performance issues along the path. Other features like Network Health, Client 360, and Application Health do not offer this level of path detail.

Answer

Application Health

Answer

Client 360

Answer

Network Health

Question 4

A network engineer has configured an IP SLA operation on a Cisco router to monitor the reachability of a remote server. The engineer wants to ensure that the operation sends ICMP echo requests every 30 seconds and that the router tracks the operation's state to influence a static route. Which command is required to associate the IP SLA operation with the static route?

Accepted Answer

ip route 10.1.1.0 255.255.255.0 192.168.1.1 track 1. To associate an IP SLA operation with a static route, the engineer must use the 'track' keyword in the static route configuration. The tracked object is created separately and linked to the IP SLA operation. This allows the static route to be withdrawn if the IP SLA operation fails, providing reliable path failover based on reachability.

Answer

ip route 10.1.1.0 255.255.255.0 192.168.1.1 sla 1

Answer

ip route 10.1.1.0 255.255.255.0 192.168.1.1 ip sla 1

Answer

ip route 10.1.1.0 255.255.255.0 192.168.1.1 monitor 1

Question 5

A network administrator is using Cisco DNA Center to monitor the health of network devices. The administrator wants to see a summary of the overall network health and any issues that need attention. Which Cisco DNA Center feature provides this information?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Client 360. Client 360 is the Cisco DNA Center Assurance feature designed to provide detailed, historical, and real-time information about a specific client device. It includes connectivity trends, event timelines, and root cause analysis for client issues. The Network Health dashboard, Application Health dashboard, and Path Trace serve different purposes: overall network health, application performance, and flow path analysis, respectively. Therefore, Client 360 is the correct choice for troubleshooting intermittent connectivity of a single client.

Answer

Application Health dashboard

Answer

Path Trace

Answer

Network Health dashboard

Question 6

A network administrator is using Cisco DNA Center to monitor the health of network devices. The administrator wants to see a summary of the overall network health and any issues that need attention. Which Cisco DNA Center feature provides this information?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Assurance Health Rules. Cisco DNA Center Assurance Health Rules enable the creation of custom thresholds for a wide range of metrics, including client onboarding time. When the defined threshold is breached, an alert is triggered. Other dashboards and issue lists are either passive or based on predefined logic and do not support user-defined thresholds for this purpose.

Answer

Assurance Issues

Answer

Network Health Dashboard

Answer

Issues and Alerts

Question 7

A network administrator is analyzing the output of 'show ip sla statistics' on a Cisco router. Which two statements correctly describe the information provided by this command? (Choose two.)

Accepted Answer

It displays the number of successes and failures for the IP SLA operation.. The 'show ip sla statistics' command provides operational results such as success/failure counts and the latest RTT. It does not show packet captures, hop-by-hop details, or configuration parameters. Thus, the statements about successes/failures and RTT are correct.

Answer

It lists the IP addresses of all intermediate hops along the path.

Answer

It displays the configured threshold and timeout values for the operation.

Answer

It provides a detailed packet-by-packet capture of the probe traffic.

Question 8

A network engineer is deploying Cisco SD-Access and needs to ensure that fabric edge nodes can register with the fabric control plane node. Which protocol is used for this registration and for endpoint location mapping?

Accepted Answer

LISP. In Cisco SD-Access, LISP is the control plane protocol that enables fabric edge nodes to register endpoints with the control plane node. The control plane node maintains a mapping database of endpoint identifiers to routing locators. VXLAN, BGP, and IS-IS serve other roles in the fabric, such as data plane encapsulation and underlay routing.

Answer

BGP

Answer

VXLAN

Answer

IS-IS

Question 9

A network administrator is analyzing traffic flows using Cisco DNA Center Assurance. The administrator wants to see which applications are consuming the most bandwidth on a specific interface of a Catalyst 9500 switch. Which feature should be enabled on the switch to provide this level of granularity?

Accepted Answer

NetFlow. NetFlow is the appropriate feature to enable on the switch to gain application-level visibility into bandwidth consumption. It exports flow records that include application identification through NBAR2, allowing Cisco DNA Center to present detailed bandwidth usage per application. Without NetFlow, the administrator would only see aggregate interface statistics.

Answer

Syslog

Answer

IP SLA

Answer

SNMP

Question 10

A network engineer is troubleshooting a routing loop between two OSPF areas. To verify the path that packets are taking, the engineer decides to use the Cisco IOS Embedded Event Manager (EEM) to generate a syslog message when the OSPF neighbor state changes. Which EEM applet configuration is required to trigger on the OSPF neighbor state change?

Accepted Answer

event tag ospf-neighbor syslog pattern "%OSPF-5-ADJCHG". The correct configuration uses a syslog event detector to match the OSPF adjacency change message. When OSPF neighbor state changes, the router generates a %OSPF-5-ADJCHG syslog message. An EEM applet with a syslog event detector and the appropriate pattern will trigger actions based on that message. This provides immediate, event-driven monitoring without polling. The other options either use inappropriate event detectors or incorrect syntax for this purpose.

Answer

event tag ospf-neighbor timer watchdog time 60

Answer

event tag ospf-neighbor cli pattern "show ip ospf neighbor"

Answer

event tag ospf-neighbor snmp oid 1.3.6.1.2.1.14.10.1.6

Question 11

A network engineer is deploying Cisco DNA Center Assurance to monitor a campus network. The engineer wants to leverage machine learning to baseline normal behavior and detect anomalies without manually defining thresholds. Which capability should be enabled?

Accepted Answer

AI Network Analytics. AI Network Analytics is the Cisco DNA Center Assurance feature that applies machine learning to create baselines and detect anomalies without manual thresholds. It continuously analyzes telemetry to identify deviations, which aligns with the engineer's goal of automated, threshold-free monitoring.

Answer

Network Time Travel

Answer

Path Trace

Answer

Sensor-driven tests

Question 12

A network engineer is troubleshooting why a Cisco Catalyst 9300 switch is not exporting flow data to a NetFlow collector. The engineer verified that the flow record and exporter are correctly configured and that the collector is reachable. Which additional configuration is required on the switch to enable Flexible NetFlow?

Accepted Answer

Apply the flow monitor to an interface in the ingress direction.. Flexible NetFlow requires three main components: a flow record, a flow exporter, and a flow monitor. The monitor ties the record and exporter together and must be applied to an interface to activate flow accounting. Without applying the monitor, no flows are processed or exported, regardless of other configurations. The other options are either incorrect commands or optional features.

Answer

Add the collector IP address to the flow record using the collect counter bytes command.

Answer

Enable NetFlow version 9 globally with the ip flow-export version 9 command.

Answer

Configure a flow sampler to reduce CPU overhead.

Question 13

A network administrator is using Cisco DNA Center to monitor the health of network devices. The administrator wants to see a summary of the overall network health and any issues that need attention. Which Cisco DNA Center feature provides this information?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Client 360. Client 360 in Cisco DNA Center Assurance offers a detailed, per-client view that includes a timeline of events such as association, authentication, and roaming. This feature allows the administrator to pinpoint when and why a client disconnected. Other Assurance features like the Network Health Dashboard or Application Health provide aggregate or application-level views, not the granular client event history required. Therefore, Client 360 is the correct choice for troubleshooting a specific client's disconnects.

Answer

Sensor Test

Answer

Network Health Dashboard

Answer

Application Health

Question 14

A network administrator is using Cisco DNA Center to monitor the health of network devices. The administrator wants to see a summary of the overall network health and any issues that need attention. Which Cisco DNA Center feature provides this information?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Client 360. Client 360 in Cisco DNA Center Assurance provides a comprehensive view of a specific client's network experience, including onboarding, authentication, and performance. It aggregates data and presents a health score with detailed metrics and events. To determine the root cause of a poor health score, the administrator should use Client 360, which offers drill-down capabilities and suggested actions. Other dashboards provide broader or different scopes of information.

Answer

Path Trace

Answer

Network Health dashboard

Answer

Application Health dashboard

Question 15

A network administrator is using Cisco DNA Center to monitor the health of network devices. The administrator wants to see a summary of the overall network health and any issues that need attention. Which Cisco DNA Center feature provides this information?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Assurance custom threshold rules. Custom threshold rules in Cisco DNA Center Assurance are designed to trigger alerts when a monitored metric crosses a defined threshold for a specified duration. Configuring a rule for CPU utilization above 80% for 5 minutes directly fulfills the administrator's requirement, unlike health score or issue-based features.

Answer

Issue definitions with custom severity

Answer

Assurance health score thresholds

Answer

Syslog forwarding to an external server