CCNP WAN Technologies Practice Test 2 — 15 Questions

Question 1

A network engineer runs the following command on Router R7:

R7# show vrf brief
  Name                             Default RD            Protocols   Interfaces
  Mgmt-intf                        <not set>             ipv4,ipv6    GigabitEthernet0/0
  CUSTOMER-A                       65001:100             ipv4         GigabitEthernet0/1.10
  CUSTOMER-B                       65001:200             ipv4         GigabitEthernet0/1.20

Based on this output, what can be concluded?

Accepted Answer

VRF CUSTOMER-B is associated with subinterface GigabitEthernet0/1.20.. The output shows VRFs with route distinguishers and associated interfaces. VRF CUSTOMER-A and CUSTOMER-B are configured with specific RDs and interfaces.

Answer

VRF CUSTOMER-A is using IPv6.

Answer

VRF Mgmt-intf has a route distinguisher set.

Answer

All VRFs are using the same route distinguisher.

Question 2

A network engineer issues the following command on Router R8:

R8# show policy-map interface gigabitethernet 0/1
 GigabitEthernet0/1

Service-policy output: SHAPE-1M
    Class-map: class-default (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: any
      queue limit 64 packets
      (queue depth 0)
      (congestion occurrences)
      shape (average) cir 1000000, bc 10000, be 10000
      target shape rate 1000000

Based on this output, what is true about the traffic shaping policy?

Accepted Answer

The policy is shaping traffic to an average rate of 1 Mbps.. The output shows a shaping policy applied in the output direction with a CIR of 1 Mbps. The class-default is used, meaning all traffic is shaped.

Answer

The policy is policing traffic to 1 Mbps.

Answer

The policy is dropping all traffic because the queue is full.

Answer

The policy is applied in the input direction.

Question 3

A network engineer runs the following command on Router R9:

R9# show ip pim neighbor
PIM Neighbor Table
Neighbor Address     Interface          Uptime    Expires    Mode
192.168.1.10         GigabitEthernet0/0 1w2d      00:01:30   Dense
192.168.1.11         GigabitEthernet0/0 2w0d      00:01:25   Sparse
192.168.1.12         GigabitEthernet0/1 3d04h     00:01:28   Sparse

Based on this output, what can be concluded?

Accepted Answer

Router R9 has three PIM neighbors, one in Dense mode and two in Sparse mode.. The output shows PIM neighbors with different modes (Dense and Sparse). The mode indicates the PIM mode configured on the interface.

Answer

All PIM neighbors are operating in Sparse mode.

Answer

The PIM neighbor 192.168.1.12 is on the same interface as the others.

Answer

All PIM neighbors are in the 'Expires' state.

Question 4

interface GigabitEthernet0/0
 ip address 192.168.1.1 255.255.255.0
 ip ospf network point-to-point
 ip ospf hello-interval 10
!
router ospf 1
 network 192.168.1.0 0.0.0.255 area 0

What is the effect of this configuration?

Accepted Answer

OSPF will use a 10-second hello interval and suppress DR/BDR election.. The configuration sets the OSPF network type to point-to-point and overrides the default hello interval (which for point-to-point is 10 seconds) to 10 seconds, which is actually the default for point-to-point. However, the key point is that the 'ip ospf network point-to-point' command changes the OSPF network type from broadcast to point-to-point, which disables DR/BDR election and uses a 10-second hello interval by default. The explicit hello-interval command is redundant but not harmful.

Answer

OSPF will use a 30-second hello interval and elect a DR/BDR.

Answer

OSPF will use a 10-second hello interval but still elect a DR/BDR.

Answer

OSPF will use a 30-second hello interval and suppress DR/BDR election.

Question 5

interface Tunnel0
 ip address 10.0.0.1 255.255.255.252
 tunnel source GigabitEthernet0/0
 tunnel destination 203.0.113.2
 tunnel mode ipsec ipv4
!
crypto isakmp policy 10
 authentication pre-share
 encryption aes 256
 hash sha
 group 14
 lifetime 86400
!
crypto isakmp key cisco123 address 203.0.113.2
!
crypto ipsec transform-set TSET esp-aes 256 esp-sha-hmac
 mode tunnel
!
crypto map CMAP 10 ipsec-isakmp
 set peer 203.0.113.2
 set transform-set TSET
 match address 100
!
interface GigabitEthernet0/0
 crypto map CMAP
!
access-list 100 permit ip 10.0.0.0 0.0.0.3 10.0.0.4 0.0.0.3

What is the effect of this configuration?

Accepted Answer

The configuration creates an IPsec VTI that encrypts traffic between the two tunnel endpoints.. The configuration sets up a site-to-site IPsec VPN using a tunnel interface with IPsec protection. The crypto map is applied to the physical interface, and the access list defines interesting traffic between the two /30 subnets (10.0.0.0/30 and 10.0.0.4/30). This is a valid configuration for a DMVPN or static VTI, but note that the tunnel mode is 'ipsec ipv4' which is used for IPsec VTI (Virtual Tunnel Interface) and requires a crypto map on the physical interface to protect the tunnel. The access list correctly matches the tunnel networks.

Answer

The configuration will fail because the crypto map must be applied to the tunnel interface, not the physical interface.

Answer

The configuration will only encrypt traffic from 10.0.0.0/30 to 10.0.0.4/30, but not the reverse.

Answer

The configuration uses IKEv2 because of the transform-set and crypto map.

Question 6

interface GigabitEthernet0/0
 ip address 192.168.1.1 255.255.255.0
 ip ospf network broadcast
 ip ospf priority 0
!
router ospf 1
 network 192.168.1.0 0.0.0.255 area 0

What is the effect of setting the OSPF priority to 0 on this interface?

Accepted Answer

The router will never become the DR or BDR on this segment.. Setting the OSPF priority to 0 on a broadcast network prevents the router from becoming the Designated Router (DR) or Backup Designated Router (BDR). It will never participate in the DR/BDR election and will only form full adjacencies with the DR and BDR.

Answer

The router will have a higher chance of becoming the DR.

Answer

The router will only form adjacencies with other routers that have priority 0.

Answer

The router will use a longer hello interval.

Question 7

interface GigabitEthernet0/0
 ip address 10.0.0.1 255.255.255.0
 ip nat outside
!
interface GigabitEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload

What is the effect of this configuration?

Accepted Answer

All traffic from 192.168.1.0/24 will be translated to the IP address of GigabitEthernet0/0 using PAT.. This is a standard NAT overload (PAT) configuration. The inside network 192.168.1.0/24 is translated to the IP address of the outside interface (GigabitEthernet0/0) using port address translation. All inside hosts share the outside interface IP address.

Answer

Only one host from 192.168.1.0/24 can access the internet at a time.

Answer

Traffic from the outside interface will be translated to 192.168.1.0/24.

Answer

The configuration will fail because the access list must be applied to an interface.

Question 8

interface GigabitEthernet0/0
 ip address 10.0.0.1 255.255.255.252
 ip ospf network point-to-multipoint
 ip ospf hello-interval 30
!
router ospf 1
 network 10.0.0.0 0.0.0.3 area 0

What is the effect of this configuration?

Accepted Answer

OSPF will use a 30-second hello interval and form adjacencies with all neighbors without DR/BDR election.. The OSPF network type is set to point-to-multipoint, which is used for non-broadcast multi-access networks (like Frame Relay) but can also be used on Ethernet. The default hello interval for point-to-multipoint is 30 seconds, but here it is explicitly set to 30 seconds, which is the default. This network type does not elect DR/BDR and forms adjacencies with all neighbors.

Answer

OSPF will use a 10-second hello interval and elect a DR/BDR.

Answer

OSPF will use a 30-second hello interval and elect a DR/BDR.

Answer

OSPF will use a 10-second hello interval and form adjacencies with all neighbors without DR/BDR.

Question 9

interface GigabitEthernet0/0
 ip address 192.168.1.1 255.255.255.0
 ip ospf network non-broadcast
 ip ospf priority 1
!
router ospf 1
 network 192.168.1.0 0.0.0.255 area 0
 neighbor 192.168.1.2

What is the effect of this configuration?

Accepted Answer

OSPF will form an adjacency with 192.168.1.2 and elect a DR/BDR based on priority.. The OSPF network type is set to non-broadcast, which requires manual neighbor configuration. The 'neighbor' command is used to specify the neighbor IP. The priority is set to 1, which allows the router to participate in DR/BDR election. This is typical for Frame Relay or other NBMA networks.

Answer

OSPF will form an adjacency with 192.168.1.2 without DR/BDR election.

Answer

OSPF will automatically discover neighbors via multicast and form adjacencies.

Answer

OSPF will use a 30-second hello interval and suppress DR/BDR election.

Question 10

What is the default OSPF hello interval on an Ethernet broadcast network?

Accepted Answer

10 seconds. On Ethernet broadcast networks, OSPF uses a default hello interval of 10 seconds.

Answer

30 seconds

Answer

40 seconds

Answer

20 seconds

Question 11

Which BGP attribute is used as the first tie-breaker when multiple paths are available and the weight is equal?

Accepted Answer

Local preference. BGP uses a multi-step path selection process. After comparing weight (highest wins), the next attribute is local preference (highest wins).

Answer

AS path length

Answer

Origin code

Answer

MED

Question 12

What is the maximum hop count for EIGRP?

Accepted Answer

255. EIGRP uses a maximum hop count of 255 by default, though the default administrative distance is 90 for internal routes and 170 for external routes.

Answer

100

Answer

15

Answer

224

Question 13

Drag and drop the steps of PPPoE session establishment into the correct order, from first to last.

Accepted Answer

Client sends PADI broadcast. PPPoE session establishment begins with the Discovery stage: the client sends a PADI to find a server, the server responds with a PADO, the client selects a server and sends a PADR, the server assigns a session ID via PADS. Finally, the PPP link is negotiated using LCP and authentication.

Question 14

Drag and drop the steps of IPsec IKEv2 tunnel establishment into the correct order, from first to last.

Accepted Answer

IKE_SA_INIT exchange (DH, nonces). IKEv2 establishment starts with IKE_SA_INIT to negotiate cryptographic parameters and exchange Diffie-Hellman keys. Next, IKE_AUTH authenticates the peers and establishes the first CHILD_SA. Then, additional CHILD_SAs can be created via CREATE_CHILD_SA. Finally, the IPsec SA is used to encrypt data traffic.

Question 15

Drag and drop the steps of DMVPN phase 2 spoke-to-spoke tunnel establishment into the correct order, from first to last.

Accepted Answer

Spoke registers with hub via NHRP. In DMVPN phase 2, each spoke first registers with the hub via mGRE and NHRP. When a spoke wants to reach another spoke, it sends an NHRP Resolution Request to the hub. The hub forwards the request to the destination spoke, which replies with its real (non-NBMA) address. The source spoke then initiates a direct mGRE tunnel to the destination spoke, and finally the spokes exchange routing information over the direct tunnel.