How should I use these Scenario practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Scenario questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Scenario domain.

300-410 · topic practice

Scenario practice questions

Practise Cisco CCNP ENARSI 300-410 Scenario practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

7 questionsDomain: Scenario

Practice 10 questions Browse domain →

What the exam tests

What to know about Scenario

Scenario questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Scenario exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Scenario questions

7 questions · select your answer, then reveal the explanation

Question 1hardmultiple choice

Study the full IPv6 explanation →

An engineer configures uRPF loose mode on an interface that is part of an IPv6 network with multiple equal-cost paths to the same destination via different interfaces. The router receives traffic from a source that is reachable via one of the paths, but the traffic arrives on a different interface. The traffic is dropped. Which is the most likely explanation?

Trap 1: The router has 'ipv6 uRPF strict' configured instead of loose, but…

Incorrect. The configuration is loose mode.

Trap 2: The equal-cost paths cause the routing table to have multiple…

Incorrect. uRPF loose mode works with multiple paths; it just needs any entry.

Trap 3: The interface has an IPv6 ACL that denies the traffic before uRPF…

Incorrect. ACLs are applied before uRPF, but the question implies uRPF is the cause.

Study all Scenario common traps →

A
The source address is a link-local address (fe80::), which is not installed in the global routing table, causing uRPF loose mode to drop the packet.
Correct. Link-local addresses are not in the routing table, so uRPF loose mode drops them.
B
The router has 'ipv6 uRPF strict' configured instead of loose, but the show command indicates loose.
Why wrong: Incorrect. The configuration is loose mode.
C
The equal-cost paths cause the routing table to have multiple entries, and uRPF loose mode requires a single best path.
Why wrong: Incorrect. uRPF loose mode works with multiple paths; it just needs any entry.
D
The interface has an IPv6 ACL that denies the traffic before uRPF is applied.
Why wrong: Incorrect. ACLs are applied before uRPF, but the question implies uRPF is the cause.

Full breakdown with real-world context →

Question 2hardmultiple choice

Open the full VLAN trunking answer →

A network engineer is troubleshooting IPv6 neighbor discovery issues on a VLAN. Router R1 is configured with IPv6 First Hop Security features. Hosts are unable to communicate with each other, even though they have valid IPv6 addresses. Router R1 has the following relevant configuration:

interface Vlan100

ipv6 address 2001:DB8:1:100::1/64 ipv6 nd raguard ipv6 dhcp guard ipv6 source guard !

Router R2 shows: debug ipv6 nd output indicates that Neighbor Solicitations from hosts are being dropped. What is the root cause?

Trap 1: RA Guard is blocking Neighbor Solicitations because they are…

RA Guard only filters Router Advertisements, not Neighbor Solicitations.

Trap 2: DHCP Guard is dropping Neighbor Solicitations because they contain…

DHCP Guard filters DHCP messages, not Neighbor Solicitations.

Trap 3: The VLAN interface is not in a state to forward ND messages due to…

No spanning tree issue is indicated; the debug shows drops due to security features.

Study all Scenario common traps →

A
RA Guard is blocking Neighbor Solicitations because they are mistaken for RAs.
Why wrong: RA Guard only filters Router Advertisements, not Neighbor Solicitations.
B
DHCP Guard is dropping Neighbor Solicitations because they contain DHCP options.
Why wrong: DHCP Guard filters DHCP messages, not Neighbor Solicitations.
C
IPv6 Source Guard is dropping Neighbor Solicitations because the source address is not in the binding table.
Source Guard validates source addresses against the binding table; if the host is not bound, the NS is dropped.
D
The VLAN interface is not in a state to forward ND messages due to a spanning tree issue.
Why wrong: No spanning tree issue is indicated; the debug shows drops due to security features.

Full breakdown with real-world context →

Question 3hardmultiple choice

Open the full BGP breakdown →

An engineer configures iBGP between two routers in the same AS. The BGP table shows the prefix, but it is not installed in the routing table. The next-hop is reachable via an IGP route. Which is the most likely explanation?

Trap 1: The next-hop-self command is missing on the iBGP peer.

Missing next-hop-self would cause unreachable next-hop, but next-hop is reachable.

Trap 2: The prefix is filtered by an inbound route-map.

Filtered prefix would not appear in BGP table.

Trap 3: The maximum-paths limit is exceeded.

Maximum-paths affects load balancing, not installation.

Study all Scenario common traps →

A
BGP synchronization is enabled, and the prefix is not present in the IGP.
Correct. Synchronization prevents route installation if IGP does not have the prefix.
B
The next-hop-self command is missing on the iBGP peer.
Why wrong: Missing next-hop-self would cause unreachable next-hop, but next-hop is reachable.
C
The prefix is filtered by an inbound route-map.
Why wrong: Filtered prefix would not appear in BGP table.
D
The maximum-paths limit is exceeded.
Why wrong: Maximum-paths affects load balancing, not installation.

Full breakdown with real-world context →

Question 4mediummultiple choice

Read the full network assurance explanation →

A network engineer is troubleshooting why the NMS cannot poll the CPU utilization of router R7 via SNMP. The router has 'snmp-server community cisco RO' configured. The NMS can poll interface statistics and routing table entries successfully. What is the most likely cause?

Trap 1: The router needs the 'snmp-server enable traps cpu' command to…

Incorrect because that command enables CPU traps, not polling; polling is independent.

Trap 2: The NMS is using an incorrect OID for CPU utilization; the correct…

Incorrect because the NMS can poll other OIDs, so it is likely using the correct OID; the issue is on the router side.

Trap 3: The router's CPU is not supported for SNMP polling due to hardware…

Incorrect because most Cisco routers support CPU polling via SNMP.

Study all Scenario common traps →

A
The engineer configured an SNMP view that excludes the CPU utilization OID tree.
Correct because an SNMP view can restrict access to specific MIB objects; if the view does not include the CPU OIDs, polling fails.
B
The router needs the 'snmp-server enable traps cpu' command to allow CPU polling.
Why wrong: Incorrect because that command enables CPU traps, not polling; polling is independent.
C
The NMS is using an incorrect OID for CPU utilization; the correct OID is in the CISCO-PROCESS-MIB.
Why wrong: Incorrect because the NMS can poll other OIDs, so it is likely using the correct OID; the issue is on the router side.
D
The router's CPU is not supported for SNMP polling due to hardware limitations.
Why wrong: Incorrect because most Cisco routers support CPU polling via SNMP.

Full breakdown with real-world context →

Question 5hardmultiple choice

Study the full ACL explanation →

A network engineer is troubleshooting why the NMS cannot poll SNMP data from router R5. The router has 'snmp-server community cisco RO' configured. The NMS is on subnet 192.168.1.0/24, and the router has an ACL applied to the VTY lines that permits only 10.0.0.0/8. The NMS can ping the router. What is the most likely cause?

Trap 1: The VTY ACL is blocking SNMP packets because SNMP uses TCP port 161.

Incorrect because SNMP uses UDP port 161, not TCP, and VTY ACLs only affect Telnet/SSH.

Trap 2: The router needs the 'snmp-server ifindex persist' command to…

Incorrect because ifindex persist is for interface indexing, not for basic polling.

Trap 3: The NMS is using SNMPv3, but the router only has SNMPv2c configured.

Incorrect because the router has an SNMPv2c community; if the NMS uses v3, it would need a user configuration.

Study all Scenario common traps →

A
The engineer applied an ACL to the SNMP community that denies the NMS subnet, but the VTY ACL is unrelated.
Correct because the community string's ACL must permit the NMS; the VTY ACL does not affect SNMP.
B
The VTY ACL is blocking SNMP packets because SNMP uses TCP port 161.
Why wrong: Incorrect because SNMP uses UDP port 161, not TCP, and VTY ACLs only affect Telnet/SSH.
C
The router needs the 'snmp-server ifindex persist' command to enable polling.
Why wrong: Incorrect because ifindex persist is for interface indexing, not for basic polling.
D
The NMS is using SNMPv3, but the router only has SNMPv2c configured.
Why wrong: Incorrect because the router has an SNMPv2c community; if the NMS uses v3, it would need a user configuration.

Full breakdown with real-world context →

Question 6mediummultiple choice

Review the full OSPF breakdown →

A network engineer is troubleshooting an OSPFv2 adjacency issue between two directly connected routers, R1 and R2, both running IOS-XE. The link is a point-to-point Ethernet link. The engineer issues 'show ip ospf neighbor' on R1 and sees no neighbors. 'show ip ospf interface GigabitEthernet0/0' on R1 shows 'Network Type BROADCAST', but the link is actually a point-to-point link. Both routers have 'ip ospf 1 area 0' configured on the interface. What is the most likely cause of the adjacency not forming?

Trap 1: The OSPF network type mismatch between the two routers (one is…

Both show BROADCAST, so no mismatch.

Trap 2: The interface is configured with 'ip ospf passive-interface'.

Passive interface would still allow the router to receive hellos but not send them, but the neighbor list would show the neighbor in INIT state, not absent.

Trap 3: The OSPF process is not enabled globally; 'router ospf 1' is…

If 'ip ospf 1 area 0' is configured on the interface, the process is automatically created if not already present.

Study all Scenario common traps →

A
The OSPF network type mismatch between the two routers (one is BROADCAST, the other is POINT-TO-POINT).
Why wrong: Both show BROADCAST, so no mismatch.
B
The routers have duplicate OSPF router IDs.
Duplicate router IDs prevent OSPF adjacency from forming; each router must have a unique router ID.
C
The interface is configured with 'ip ospf passive-interface'.
Why wrong: Passive interface would still allow the router to receive hellos but not send them, but the neighbor list would show the neighbor in INIT state, not absent.
D
The OSPF process is not enabled globally; 'router ospf 1' is missing.
Why wrong: If 'ip ospf 1 area 0' is configured on the interface, the process is automatically created if not already present.

Full breakdown with real-world context →

Question 7mediummultiple choice

Review the full OSPF breakdown →

A network engineer is troubleshooting an OSPFv2 adjacency issue between two routers connected via a VLAN trunk. R1 and R2 are in different VLANs but are connected through a Layer 2 switch. The engineer has configured 'ip ospf 1 area 0' on the subinterfaces. The adjacency forms but is stuck in INIT state. What is the most likely cause?

Trap 1: The OSPF hello interval is mismatched between the two routers.

A hello interval mismatch would cause the adjacency to not form at all, not to be stuck in INIT.

Trap 2: The subinterfaces are in different VLANs, preventing Layer 2…

If they were in different VLANs, the routers would not receive each other's hellos, so no adjacency would form.

Trap 3: The OSPF network type is set to point-to-point on one side and…

A network type mismatch would cause the adjacency to be stuck in EXSTART or EXCHANGE, not INIT.

Study all Scenario common traps →

A
The routers have the same OSPF router ID.
When a router receives a hello packet with its own router ID, it ignores it, causing the adjacency to stay in INIT.
B
The OSPF hello interval is mismatched between the two routers.
Why wrong: A hello interval mismatch would cause the adjacency to not form at all, not to be stuck in INIT.
C
The subinterfaces are in different VLANs, preventing Layer 2 communication.
Why wrong: If they were in different VLANs, the routers would not receive each other's hellos, so no adjacency would form.
D
The OSPF network type is set to point-to-point on one side and broadcast on the other.
Why wrong: A network type mismatch would cause the adjacency to be stuck in EXSTART or EXCHANGE, not INIT.

Full breakdown with real-world context →

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Scenario sessions

Start a Scenario only practice session

Every question in these sessions is drawn from the Scenario domain — nothing else.

10 questions 20 questions 30 questions 50 questions

Browse all Scenario questions →Mixed 300-410 session

Frequently asked questions

What does the 300-410 exam test about Scenario?: Scenario questions test whether you can apply the concept in context, not just recognise a definition.
How should I use these practice questions?: Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Scenario questions in a focused session?: Yes — the session launcher on this page draws every question from the Scenario domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other 300-410 topics?: Use the topic links above to move to related areas, or go back to the 300-410 question bank to see all topics.
Are these real exam questions or dumps?: These are original practice questions written to test the same concepts the 300-410 exam covers. They are not copied from any real exam or dump site.

Scenario only

10 questions 20 questions 30 questions 50 questions

Mixed 300-410 session

Track your progress

A free account saves results across sessions and highlights which topics need work.

Study resources

All 300-410 questions Scenario domain overview 300-410 exam guide

Exam traps to avoid

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Scenario practice questions

What to know about Scenario

Common Scenario exam traps

Scenario questions

An engineer configures iBGP between two routers in the same AS. The BGP table shows the prefix, but it is not installed in the routing table. The next-hop is reachable via an IGP route. Which is the most likely explanation?

A network engineer is troubleshooting why the NMS cannot poll the CPU utilization of router R7 via SNMP. The router has 'snmp-server community cisco RO' configured. The NMS can poll interface statistics and routing table entries successfully. What is the most likely cause?

Track your progress over time

Start a Scenario only practice session

Related 300-410 topic practice pages

Layer 3 Technologies practice questions

EIGRP Troubleshooting practice questions

OSPF Troubleshooting (v2/v3) practice questions

BGP Troubleshooting practice questions

Route Redistribution practice questions

Policy-Based Routing (PBR) practice questions

VRF-Lite practice questions

Route Maps and Route Filtering practice questions

Administrative Distance practice questions

Route Summarization practice questions

Bidirectional Forwarding Detection (BFD) practice questions

VPN Technologies practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid