CCNP VRF and Path Isolation Practice Test 2 — 15 Questions

Question 1

A network engineer runs the following command on Router R7:

R7# show ip ospf neighbor vrf CUSTOMER-E

Neighbor ID     Pri   State           Dead Time   Address         Interface
10.0.0.8         1   FULL/DR         00:00:35    10.0.1.2        GigabitEthernet0/0.500
10.0.0.9         1   FULL/BDR        00:00:31    10.0.2.2        GigabitEthernet0/0.600

Based on this output, what can be concluded?

Accepted Answer

OSPF is operating within VRF CUSTOMER-E with two neighbors. The command `show ip ospf neighbor vrf CUSTOMER-E` explicitly queries OSPF neighbors within the VRF named CUSTOMER-E. The output shows two neighbors (10.0.0.8 and 10.0.0.9) with states FULL/DR and FULL/BDR, confirming that OSPF is actively operating inside that VRF. Therefore, option C is correct because it accurately states that OSPF is operating within VRF CUSTOMER-E with two neighbors.

Answer

OSPF is not configured for VRF CUSTOMER-E

Answer

There is only one OSPF neighbor in VRF CUSTOMER-E

Answer

The DR is 10.0.0.9

Question 2

A network engineer runs the following command on Router R8:

R8# show ip pim neighbor vrf CUSTOMER-F

Neighbor          Interface                Uptime/Expires    Ver   DR
10.0.3.2          GigabitEthernet0/0.700   02:00:00/00:01:30 v2    1/ DR
10.0.4.2          GigabitEthernet0/0.800   01:30:00/00:01:45 v2    0/ NDR (BDR)

Based on this output, what can be concluded?

Accepted Answer

PIM is enabled in VRF CUSTOMER-F with a DR and BDR. The output shows two PIM neighbors (10.0.3.2 and 10.0.4.2) with their respective interfaces, uptimes, and DR/BDR roles. The presence of a DR (Designated Router) and BDR (Backup Designated Router) indicates that PIM is enabled and operating in VRF CUSTOMER-F, with the DR being 10.0.3.2 (as shown by '1/ DR') and the BDR being 10.0.4.2 (as shown by '0/ NDR (BDR)'). Therefore, option C is correct.

Answer

PIM is not configured for VRF CUSTOMER-F

Answer

The DR is 10.0.4.2

Answer

Both neighbors are using PIM version 1

Question 3

A network engineer runs the following command on Router R9:

R9# show policy-map interface GigabitEthernet0/0.900

GigabitEthernet0/0.900

Service-policy input: QOS_POLICY_VRF_G
    Class-map: CLASS_VOICE (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: ip dscp ef (46)
      police:
          cir 1000000 bps, bc 31250 bytes, be 31250 bytes
        conformed 0 packets, 0 bytes; actions:
          transmit
        exceeded 0 packets, 0 bytes; actions:
          drop
        violated 0 packets, 0 bytes; actions:
          drop
    Class-map: CLASS_DATA (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: ip dscp af31 (26)
      police:
          cir 2000000 bps, bc 62500 bytes, be 62500 bytes
        conformed 0 packets, 0 bytes; actions:
          transmit
        exceeded 0 packets, 0 bytes; actions:
          drop
        violated 0 packets, 0 bytes; actions:
          drop
    Class-map: class-default (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: any

Based on this output, what can be concluded?

Accepted Answer

A QoS policy is applied inbound on GigabitEthernet0/0.900, policing voice and data traffic. The output shows the 'Service-policy input: QOS_POLICY_VRF_G' line, confirming that a QoS policy is applied inbound on GigabitEthernet0/0.900. The policy contains two user-defined class maps: CLASS_VOICE (matching DSCP EF) with a police rate of 1 Mbps and CLASS_DATA (matching DSCP AF31) with a police rate of 2 Mbps, both with conform/transmit and exceed/violate drop actions. This demonstrates that both voice and data traffic are being policed, making option C correct.

Answer

No QoS policy is applied to this interface

Answer

The policy only polices voice traffic

Answer

The policy is applied outbound

Question 4

Examine the following configuration snippet on a Cisco IOS-XE router:

interface GigabitEthernet0/1
 ip vrf forwarding BLUE
 ip address 192.168.1.1 255.255.255.0
 no shutdown

What is the effect of this configuration?

Accepted Answer

The interface is placed into VRF BLUE, and all traffic sent or received on this interface uses the routing table of VRF BLUE.. The 'ip vrf forwarding BLUE' command associates the interface with VRF BLUE, which creates a separate routing table instance. All traffic entering or exiting this interface is forwarded using the VRF BLUE routing table, not the global routing table. This isolates the interface's traffic from the global routing domain.

Answer

The interface remains in the global routing table but is allowed to communicate with VRF BLUE via route leaking.

Answer

The interface is placed into VRF BLUE, but the IP address is assigned from the global routing table.

Answer

The configuration is invalid because VRF BLUE must be created first using 'vrf definition BLUE'.

Question 5

Consider the following configuration on a Cisco IOS-XE router:

vrf definition RED
 rd 100:1
 route-target export 100:1
 route-target import 100:1
!
interface GigabitEthernet0/2
 vrf forwarding RED
 ip address 10.10.10.1 255.255.255.0

Which statement is true about this configuration?

Accepted Answer

The VRF RED is correctly configured for MPLS L3VPN, and the interface is placed in VRF RED.. Option A is correct because the configuration defines a VRF named RED with an RD of 100:1 and matching route-target import/export values, which is the standard setup for an MPLS L3VPN. The 'vrf forwarding RED' command under the interface assigns that interface to the VRF, isolating its routing table from the global table. This allows the router to participate in a Layer 3 VPN by importing and exporting routes with the specified route-target.

Answer

The 'rd' command is optional for VRF operation and can be omitted.

Answer

The 'route-target export' and 'route-target import' must match the RD value exactly.

Answer

This configuration will cause the interface to use the global routing table for forwarding.

Question 6

A network engineer configures VRF-lite on a router with the following snippet:

vrf definition GREEN
 rd 200:1
!
interface GigabitEthernet0/3
 vrf forwarding GREEN
 ip address 172.16.1.1 255.255.255.0
!
router ospf 10 vrf GREEN
 network 172.16.1.0 0.0.0.255 area 0

What is missing from this configuration to enable proper OSPF routing within VRF GREEN?

Accepted Answer

The configuration is complete and OSPF will operate correctly within VRF GREEN.. Option A is correct because the configuration is complete for VRF-lite OSPF routing. In VRF-lite, the 'vrf definition GREEN' with an RD, the interface assignment via 'vrf forwarding GREEN', and the OSPF process with 'vrf GREEN' and the network statement are all that is required. OSPF will operate correctly within VRF GREEN using the specified network in area 0.

Answer

The 'network' command should specify the interface instead of the subnet.

Answer

The 'vrf definition GREEN' must include a 'route-target' command.

Answer

The OSPF process must be configured under the global VRF context, not using 'vrf GREEN'.

Question 7

Review the following configuration:

vrf definition CUSTOMER_A
 rd 65000:100
 route-target export 65000:100
 route-target import 65000:100
!
interface GigabitEthernet0/4
 vrf forwarding CUSTOMER_A
 ip address 192.168.100.1 255.255.255.0
!
router bgp 65000
 address-family ipv4 vrf CUSTOMER_A
  redistribute connected

What is the purpose of the 'redistribute connected' command under the VRF address-family?

Accepted Answer

It advertises the directly connected network of GigabitEthernet0/4 into BGP for VRF CUSTOMER_A.. The 'redistribute connected' command under the BGP address-family for VRF CUSTOMER_A injects the directly connected network on GigabitEthernet0/4 (192.168.100.0/24) into the BGP table for that VRF. This allows BGP to advertise that subnet to BGP peers within the VRF, enabling reachability to the VRF's local interface network.

Answer

It redistributes all BGP routes into the VRF's routing table.

Answer

It enables BGP to exchange routes with other VRFs on the same router.

Answer

It is used to leak routes between VRF CUSTOMER_A and the global routing table.

Question 8

Examine the following VRF configuration:

vrf definition BLUE
 rd 1:1
 route-target export 1:1
 route-target import 2:2
!
interface GigabitEthernet0/5
 vrf forwarding BLUE
 ip address 10.0.0.1 255.255.255.0

What is the effect of having different export and import route targets?

Accepted Answer

The VRF exports routes tagged with RT 1:1 and imports routes tagged with RT 2:2, enabling selective route exchange.. Option A is correct because the VRF BLUE configuration uses different route targets for export (1:1) and import (2:2). This enables selective route exchange: routes learned in VRF BLUE are exported with RT 1:1, and only routes tagged with RT 2:2 are imported into VRF BLUE. This is a common design for hub-and-spoke or inter-VRF route leaking scenarios where import and export RTs are intentionally asymmetric.

Answer

The configuration is invalid because export and import RTs must be identical.

Answer

The VRF will only import routes from other VRFs that also have RT 1:1.

Answer

This configuration disables route advertisement for VRF BLUE.

Question 9

A router has the following configuration snippet:

vrf definition RED
 rd 100:1
!
interface Loopback0
 ip vrf forwarding RED
 ip address 10.0.0.1 255.255.255.255
!
router eigrp 100
 address-family ipv4 unicast vrf RED autonomous-system 100
  network 10.0.0.1 0.0.0.0

What is the issue with this EIGRP configuration for VRF RED?

Accepted Answer

The EIGRP address-family is not activated because 'no shutdown' is missing under the address-family configuration.. The EIGRP address-family configuration for VRF RED is missing the 'no shutdown' command under the address-family mode. In Cisco IOS, EIGRP address-families are administratively shut down by default; without 'no shutdown', the EIGRP process for that VRF will not form adjacencies or advertise routes, even though the network command is correctly configured.

Answer

The 'network' command should use a wildcard mask of 0.0.0.255 instead of 0.0.0.0.

Answer

The VRF must be defined under 'router eigrp' globally before using address-family.

Answer

The loopback interface cannot be placed in a VRF because it is a virtual interface.

Question 10

What is the default OSPF hello interval on an Ethernet link?

Accepted Answer

10 seconds. The default OSPF hello interval on an Ethernet link is 10 seconds, as defined in RFC 2328. OSPF uses this interval to maintain neighbor adjacency and detect link failures; on broadcast multi-access networks like Ethernet, the default is 10 seconds, while on non-broadcast multi-access (NBMA) networks it is 30 seconds.

Answer

30 seconds

Answer

40 seconds

Answer

5 seconds

Question 11

Which BGP attribute is preferred when it has the lowest value?

Accepted Answer

MED (Multi-Exit Discriminator). The Multi-Exit Discriminator (MED) is a BGP attribute used to influence inbound traffic from a neighboring AS. A lower MED value is preferred because it indicates a more preferred path into the AS, making it the correct answer when the question asks for the attribute preferred with the lowest value.

Answer

Local Preference

Answer

Weight

Answer

AS Path

Question 12

What is the maximum hop count for EIGRP?

Accepted Answer

255. EIGRP uses a maximum hop count of 255, which is the default and hard limit for the protocol. This is because EIGRP is a distance-vector protocol that uses hop count as one of its metrics, but unlike RIP (which has a limit of 15), EIGRP's DUAL algorithm allows for much larger networks without the same loop-prevention constraints.

Answer

15

Answer

100

Answer

16

Question 13

Drag and drop the steps of VRF-Lite inter-VRF route leaking configuration into the correct order, from first to last.

Accepted Answer

Create VRF definitions with 'vrf definition'. First, you create the VRF definitions. Then, you assign interfaces to the VRFs. Next, you configure the route targets for import and export. After that, you enable route leaking between VRFs using the 'route-replicate' command. Finally, you verify the routing tables to confirm the leaked routes are present.

Question 14

Drag and drop the steps of MPLS Layer 3 VPN VRF configuration on a PE router into the correct order, from first to last.

Accepted Answer

Enable MPLS globally on the PE. First, you enable MPLS globally on the PE router. Then, you create the VRF and assign an RD. Next, you configure the route-target import and export policies. After that, you apply the VRF to the customer-facing interface. Finally, you redistribute routes between the VRF and the MPLS backbone using BGP.

Question 15

Drag and drop the steps of VRF-aware NAT configuration for path isolation into the correct order, from first to last.

Accepted Answer

Create VRF and assign route distinguisher. First, you create the VRF and assign an RD. Then, you configure the NAT inside and outside interfaces under the VRF. Next, you define the NAT pool and access list for translation. After that, you apply the NAT rules with 'ip nat inside source' referencing the VRF. Finally, you verify NAT translations using 'show ip nat translations vrf'.