CCNP SD-Access Architecture Practice Test 2 — 15 Questions

Question 1

Consider this VLAN configuration on a Cisco switch:

vlan 10
 name Sales
vlan 20
 name Engineering
interface GigabitEthernet0/1
 switchport mode trunk
 switchport trunk allowed vlan 10,20

What is missing if the switch needs to carry VLAN 30 traffic on this trunk?

Accepted Answer

VLAN 30 must be created and added to the allowed VLAN list on the trunk.. Option A is correct because a trunk port only forwards traffic for VLANs that exist in the switch's VLAN database and are explicitly permitted in the allowed VLAN list. VLAN 30 is neither created (no 'vlan 30' command) nor added to the trunk's allowed list (missing 'switchport trunk allowed vlan add 30'), so the switch will drop any frames tagged with VLAN 30. Creating the VLAN and updating the allowed list ensures the trunk can forward VLAN 30 traffic.

Answer

The trunk must be configured as an access port for VLAN 30.

Answer

The native VLAN must be changed to VLAN 30.

Answer

The switchport mode must be changed to dynamic desirable.

Question 2

Given the following policy-map:

policy-map QOS_POLICY
 class VOICE
  priority percent 30
 class VIDEO
  bandwidth percent 20
  queue-limit 100 packets
 class class-default
  fair-queue

What is the effect of the 'priority percent 30' command in the VOICE class?

Accepted Answer

Voice traffic is placed in a strict priority queue with a guaranteed bandwidth of 30% of the interface bandwidth.. The 'priority percent 30' command in the VOICE class configures a strict priority queue (LLQ) that guarantees voice traffic up to 30% of the interface bandwidth. During congestion, voice packets are always transmitted before other traffic, but they are policed to ensure they do not exceed the allocated 30%, preventing starvation of other queues.

Answer

Voice traffic is limited to 30% of the interface bandwidth and will be dropped if exceeded.

Answer

Voice traffic is given a weight of 30 in the weighted fair queueing algorithm.

Answer

Voice traffic is re-marked with IP precedence 30.

Question 3

What is the default OSPF hello interval on an Ethernet link?

Accepted Answer

10 seconds. The default OSPF hello interval on an Ethernet link is 10 seconds, as specified in RFC 2328. Ethernet is a broadcast multi-access network type, and OSPF uses a 10-second hello interval on such networks to maintain neighbor adjacencies and detect failures within the dead interval (default 40 seconds, or 4 times the hello interval).

Answer

30 seconds

Answer

40 seconds

Answer

5 seconds

Question 4

Which BGP attribute is preferred when it has the lowest value?

Accepted Answer

MED (Multi-Exit Discriminator). The Multi-Exit Discriminator (MED) is a BGP path attribute used to influence inbound traffic to an AS from multiple entry points. A lower MED value is preferred over a higher one, making it the correct answer among the options where the lowest value is preferred.

Answer

Local Preference

Answer

Weight

Answer

AS Path

Question 5

What is the maximum hop count for EIGRP?

Accepted Answer

255. EIGRP uses a maximum hop count of 255, which is a hard limit encoded in the protocol's metric structure. This high limit allows EIGRP to scale in large enterprise networks without the hop-count restrictions of distance-vector protocols like RIP.

Answer

100

Answer

15

Answer

16

Question 6

Drag and drop the steps of SD-Access fabric node onboarding into DNA Center into the correct order, from first to last.

Accepted Answer

Physically connect the node to the network and power it on. The correct order begins with physical connectivity and discovery, followed by adding the device to inventory, assigning it to a site, configuring the network profile and fabric role, and finally provisioning the node. This sequence ensures the device is discovered, recognized, and properly configured within the SD-Access fabric.

Question 7

Drag and drop the steps of SD-Access fabric border handoff configuration into the correct order, from first to last.

Accepted Answer

Define the external network and VLAN mapping. The correct order starts with defining the external network, then creating the SVI for the handoff, configuring the routing protocol, applying the border handoff policy, and finally verifying the connectivity. This sequence ensures the border node can properly connect the fabric to external networks.

Question 8

Drag and drop the steps of SD-Access fabric endpoint registration into the correct order, from first to last.

Accepted Answer

Endpoint sends ARP or DHCP request. The correct order begins with the endpoint sending an ARP or DHCP request, the edge node detecting the new endpoint, registering it with the control plane (LISP), the control plane updating the map server, and finally the edge node installing the necessary forwarding entries. This sequence ensures the endpoint is properly discovered and integrated into the fabric.

Question 9

Drag and drop the steps of SD-Access underlay provisioning via LAN Automation into the correct order, from first to last.

Accepted Answer

Seed device discovers new switches via CDP. LAN Automation begins with the seed device discovering new switches via CDP, then the new switches are automatically configured with the underlay template, including PnP and DHCP. After configuration, the switches join the fabric underlay, and finally, the automation process verifies connectivity and updates the inventory.

Question 10

Drag and drop the steps of Cisco ISE profiling and policy assignment flow into the correct order, from first to last.

Accepted Answer

Endpoint authenticates via 802.1X or MAB. The flow starts with endpoint authentication via 802.1X/MAB, then ISE collects profiling data (e.g., DHCP, HTTP). ISE matches the endpoint to a profiling policy, assigns an identity group, and finally applies the appropriate authorization policy (e.g., SGT, VLAN).

Question 11

Drag and drop the steps of SD-Access fabric border node configuration steps into the correct order, from first to last.

Accepted Answer

Enable LISP on border node. Configuration starts with enabling LISP on the border node, then configuring the EID-to-RLOC mapping and border services. Next, the border is connected to external networks (e.g., WAN), followed by applying VRF and SGT policies, and finally verifying the border operation.

Question 12

Drag and drop the steps of LISP EID-to-RLOC mapping resolution process into the correct order, from first to last.

Accepted Answer

ITR receives packet for destination EID. The process begins when the ingress tunnel router (ITR) receives a packet for a destination EID. The ITR sends a Map-Request to the Map-Server, which looks up the mapping and replies with a Map-Reply containing the RLOC. The ITR then caches the mapping and encapsulates the packet to the egress tunnel router (ETR).

Question 13

Drag and drop the steps of micro-segmentation via SGT policy application into the correct order, from first to last.

Accepted Answer

Classify endpoints into SGT groups. Micro-segmentation starts with classifying endpoints into SGTs based on identity, then defining SGT-to-SGT policies (permit/deny). The policies are enforced at the fabric edge, where the SGT is propagated in the VXLAN header, and traffic is filtered accordingly. Finally, monitoring ensures compliance.

Question 14

Drag and drop each SD-Access fabric role on the left to its matching function on the right.

Accepted Answer

Fabric Border Node: Connects the SD-Access fabric to external Layer 2 or Layer 3 networks. The fabric border node connects the fabric to external networks, the fabric edge node connects endpoints to the fabric, and the fabric control node manages LISP mapping and VXLAN tunnels.

Question 15

Drag and drop each LISP message type on the left to its matching purpose on the right.

Accepted Answer

Map-Request: Queries the LISP mapping system for an EID-to-RLOC mapping. Map-Request queries the location of an EID, Map-Reply provides the mapping, Map-Register registers EID-to-RLOC mappings, Map-Notify confirms registration, and Map-Solicit triggers a Map-Request from the map-server.