Courseiva

350-401 · domain

bgp

Practise ENCOR 350-401 bgp practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

1175 questions87 easy902 medium186 hard

Focused practice

Practice bgp questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about bgp

BGP questions usually test path selection attributes (AS-PATH, LOCAL_PREF, MED), eBGP vs iBGP rules, and why a route may be received but not used.

BGP path selection order: weight, LOCAL_PREF, origin, AS-PATH, MED.

eBGP vs iBGP peering rules and TTL requirements.

How route reflectors and confederations solve iBGP full-mesh requirements.

Why a route may appear in the BGP table but not be the best path.

Watch out for

Common bgp exam traps

  • BGP does not automatically advertise connected routes — network statements or redistribution are required.
  • iBGP peers do not increment AS-PATH; eBGP peers do.
  • LOCAL_PREF is used within an AS; MED is used between ASes.
  • A route being received does not mean it will be installed in the routing table.

Question index

All bgp questions (1175)

Click any question to see the full explanation, or start a practice session above.

1

Drag and drop each NFV management layer on the left to its matching function on the right.

Medium
2

Which three statements about Cisco DNA Center integration with external systems are true? (Choose three.)

Hard
3

Which three statements about telemetry data collection intervals and on-change notifications are true? (Choose three.)

Hard
4

Drag and drop the steps of NAPALM get_facts() retrieval from IOS-XE device into the correct order, from first to last.

Medium
5

Drag and drop the steps of SVI configuration for inter-VLAN routing into the correct order, from first to last.

Medium
6

Drag and drop the steps of hierarchical LAN design implementation phases into the correct order, from first to last.

Medium
7

Which TWO statements are correct about Cisco SD-Access architecture? (Choose two.)

Hard
8

Drag and drop the steps of DHCP snooping and dynamic ARP inspection flow into the correct order, from first to last.

Medium
9

Drag and drop each CAPWAP message type on the left to its matching function on the right.

Medium
10

Drag and drop the steps of configuring a local SPAN session on a Cisco IOS switch into the correct order, from first to last.

Medium
11

Which three statements about IPsec VPNs are true? (Choose three.)

Hard
12

Drag and drop each Python data structure on the left to its matching network config use on the right.

Medium
13

Drag and drop the steps of BGP best path selection process into the correct order, from first to last.

Hard
14

Drag and drop the steps of Rapid PVST+ topology change notification process into the correct order, from first to last.

Medium
15

Which TWO of the following are benefits of using network virtualization with VXLAN? (Choose two.)

Easy
16

Which two statements about Rapid PVST+ are true? (Choose two.)

Medium
17

Which THREE are valid methods for automating network device configuration using Cisco IOS XE? (Choose three.)

Hard
18

Given this telemetry configuration on a Cisco IOS-XE device: telemetry ietf subscription 400 encoding encode-kvgpb filter xpath /interfaces/interface/state stream yang-push update-policy periodic 1000 receiver ip address 10.1.1.1 50000 protocol grpc source-interface Loopback0 What is the effect of the source-interface Loopback0 command?

Medium
19

Drag and drop the steps of BGP graceful restart negotiation steps into the correct order, from first to last.

Medium
20

Which two statements about DHCP snooping are true? (Choose two.)

Hard
21

A network engineer runs the following command on Router R7: R7# show ip nat translations verbose Pro Inside global Inside local Outside local Outside global --- 192.0.2.10 10.0.0.10 --- --- create: 03/01/2025 09:00:00, use: 03/01/2025 09:05:00 timeout: never, flags: static --- 192.0.2.11 10.0.0.11 --- --- create: 03/01/2025 09:00:00, use: 03/01/2025 09:06:00 timeout: never, flags: static Based on this output, what can be concluded?

Medium
22

Drag and drop each WPA security version on the left to its matching authentication method on the right.

Medium
23

Drag and drop the steps of NAT overload (PAT) packet translation process into the correct order, from first to last.

Medium
24

Which two statements about REST API HTTP methods are true? (Choose two.)

Medium
25

Drag and drop each congestion avoidance mechanism on the left to its matching method on the right.

Medium
26

Drag and drop the steps of IKEv2 fragmentation and DPD keepalive process into the correct order, from first to last.

Medium
27

Drag and drop each Ansible component on the left to its matching function on the right.

Medium
28

Drag and drop each DSCP PHB on the left to its matching queue treatment on the right.

Medium
29

Drag and drop the steps of NUMA-aware VM placement process into the correct order, from first to last.

Medium
30

Drag and drop the steps of PPPoE session establishment into the correct order, from first to last.

Medium
31

Drag and drop each HTTP method on the left to its matching REST operation on the right.

Medium
32

A network engineer is using the Cisco DNA Center REST API to retrieve the health score of a specific device. The API response is as follows: { "response": [ { "deviceId": "1234567890", "hostname": "Core-Switch-1", "score": 8, "overallHealth": "good", "timestamp": 1623456789 } ], "version": "1.0" } The engineer wants to extract the 'overallHealth' value. Which Python code correctly extracts it?

Easy
33

Drag and drop the steps of Q-in-Q (802.1ad) double-tagging configuration into the correct order, from first to last.

Medium
34

Drag and drop each trunk encapsulation type on the left to its matching standard or characteristic on the right.

Medium
35

Drag and drop each BGP attribute on the left to its preferred value (highest or lowest) on the right.

Medium
36

Drag and drop the steps of RESTCONF GET with depth and field query parameters into the correct order, from first to last.

Medium
37

Which three statements about the benefits and challenges of NFV are true? (Choose three.)

Hard
38

Drag and drop each OSPF packet type on the left to its matching function on the right.

Medium
39

Drag and drop the steps of stateless DHCPv6 address assignment steps into the correct order, from first to last.

Medium
40

Drag and drop the steps of BGP route aggregation and suppress-map process into the correct order, from first to last.

Medium
41

An engineer is using the Cisco DNA Center GUI to create a new site hierarchy. They add a building under an existing area. After saving, they run a Python script to verify the site via API: import requests url = "https://dna-center.local/dna/intent/api/v1/site" headers = {"X-Auth-Token": "token"} response = requests.get(url, headers=headers, verify=False) sites = response.json()['response'] for site in sites: if site['name'] == 'Building-A': print(site['id']) What is the output if the building was created successfully?

Easy
42

Drag and drop the steps of IP SLA scheduling with frequency and lifetime into the correct order, from first to last.

Medium
43

Drag and drop the steps of troubleshooting NetFlow export issues into the correct order, from first to last.

Medium
44

Drag and drop each IP SLA schedule parameter on the left to its function on the right.

Medium
45

Drag and drop the steps of the 802.1X/EAP authentication process for a wireless client into the correct order, from first to last.

Medium
46

Drag and drop each MQC command on the left to its matching configuration level on the right.

Medium
47

A network engineer configures IP SLA 1 to monitor HTTP server availability at 10.1.1.1 using HTTP GET. The operation is used as a track object for a backup static route. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 200 ms', but the track object shows 'Track 1: up' even though the HTTP server returns a 404 error. What is the cause?

Medium
48

Which three statements about Control Plane Policing (CoPP) are true? (Choose three.)

Medium
49

Which three statements about using Python for interacting with Cisco IOS-XE devices via NETCONF and RESTCONF are true? (Choose three.)

Hard
50

Drag and drop the steps of OSPF virtual link configuration into the correct order, from first to last.

Medium
51

Drag and drop the steps of DMVPN Phase 3 spoke-to-spoke shortcut creation into the correct order, from first to last.

Medium
52

Drag and drop the steps of VRF-aware NAT configuration steps into the correct order, from first to last.

Medium
53

Drag and drop each VRF-Lite or MPLS VPN characteristic on the left to its matching description on the right.

Hard
54

A network engineer runs the following command on Router R1: R1# show ip interface GigabitEthernet0/0 | include access list Inbound access list is 101 Outbound access list is not set R1# show access-lists 101 Extended IP access list 101 10 permit tcp 192.168.1.0 0.0.0.255 any eq 80 (100 matches) 20 deny tcp any any eq 80 (50 matches) 30 permit ip any any (200 matches) Based on this output, what can be concluded?

Medium
55

Drag and drop the steps of WRED configuration for TCP congestion avoidance into the correct order, from first to last.

Medium
56

Drag and drop the steps of AAA method list fallback from RADIUS to local into the correct order, from first to last.

Medium
57

Drag and drop the steps of NAT64 IPv6-to-IPv4 translation flow into the correct order, from first to last.

Medium
58

Which three statements about extended ACLs on Cisco IOS are true? (Choose three.)

Hard
59

Drag and drop the steps of the 802.1X EAP-TLS authentication exchange into the correct order, from first to last.

Medium
60

Which three statements about Cisco TrustSec security group access control lists (SGACLs) are true? (Choose three.)

Hard
61

Drag and drop the steps of DHCP snooping and dynamic ARP inspection flow into the correct order, from first to last.

Medium
62

Drag and drop each VLAN range on the left to its matching type on the right.

Medium
63

Examine the following telemetry configuration: telemetry ietf subscription 500 encoding encode-kvgpb filter xpath /interfaces/interface/state/counters stream yang-push update-policy periodic 500 receiver ip address 10.1.1.1 50000 protocol grpc A network engineer wants to add a second receiver for redundancy. Which additional configuration is correct?

Medium
64

Drag and drop the steps of SNMP community-based access control setup into the correct order, from first to last.

Medium
65

Which three statements about CoPP configuration and operation are true? (Choose three.)

Hard
66

Drag and drop the steps of service function chaining (SFC) path setup into the correct order, from first to last.

Medium
67

What is the default load-balancing method used by Cisco switches for EtherChannel?

Easy
68

Drag and drop the steps of Control Plane Policing (CoPP) rate-limit evaluation into the correct order, from first to last.

Medium
69

An engineer needs to configure a switchport to carry traffic for multiple VLANs to a router using a single physical link. Which configuration should be applied on the switchport?

Easy
70

Drag and drop the steps of MPLS Traffic Engineering (TE) tunnel setup (RSVP) into the correct order, from first to last.

Medium
71

A network engineer is configuring ACLs on a Cisco router to filter traffic between two subnets. The engineer wants to allow HTTP traffic from subnet 10.1.1.0/24 to subnet 10.2.2.0/24, but deny all other traffic. The engineer applies an ACL inbound on the interface connected to subnet 10.1.1.0/24. The ACL has a permit statement for TCP port 80 from 10.1.1.0/24 to 10.2.2.0/24, followed by a deny ip any any. However, hosts in subnet 10.1.1.0/24 can still ping hosts in subnet 10.2.2.0/24. What is the most likely reason?

Easy
72

Which two statements about local SPAN configuration are true? (Choose two.)

Medium
73

Which three statements about Cisco SD-Access policy enforcement are true? (Choose three.)

Hard
74

Drag and drop the steps of RADIUS CoA (Change of Authorization) message flow into the correct order, from first to last.

Medium
75

Drag and drop the steps of OSPF SPF calculation steps (Dijkstra) into the correct order, from first to last.

Medium
76

Drag and drop the steps of FlexVPN spoke-to-spoke dynamic tunnel creation into the correct order, from first to last.

Medium
77

Drag and drop each PAgP port mode on the left to its matching negotiation behavior on the right.

Medium
78

Which three statements about IP SLA probe types and their characteristics are true? (Choose three.)

Hard
79

Drag and drop each DSCP value on the left to its matching Per-Hop Behavior (PHB) on the right.

Medium
80

Drag and drop the steps of configuring Control Plane Policing (CoPP) on a Cisco IOS router into the correct order, from first to last.

Medium
81

Drag and drop the steps of SNMP community-based access control setup into the correct order, from first to last.

Medium
82

Drag and drop the steps of gNMI Subscribe RPC using Python gRPC library into the correct order, from first to last.

Hard
83

Drag and drop the steps of MPLS VPN (L3VPN) service provisioning into the correct order, from first to last.

Medium
84

Which two statements about Network Function Virtualization (NFV) architecture are true? (Choose two.)

Medium
85

Which two statements about Ansible inventory and variables are true? (Choose two.)

Medium
86

Drag and drop each ACL action on the left to its matching result on the right.

Medium
87

A network engineer runs the following command on switch SW3: SW3# show cts role-based permissions IPv4 Role-based permissions: Source Group Dest Group Action 10 20 PERMIT 10 30 DENY 20 30 PERMIT Based on this output, what can be concluded?

Medium
88

Drag and drop each protocol number on the left to its matching protocol on the right.

Easy
89

Drag and drop each Ansible task return value on the left to its matching meaning on the right.

Easy
90

Drag and drop the steps of IGMP v3 SSM membership report process into the correct order, from first to last.

Medium
91

Which three statements about Python functions and modules for network automation are true? (Choose three.)

Hard
92

Drag and drop each EtherChannel port state on the left to its matching description on the right.

Medium
93

Drag and drop each DNA Center package on the left to its matching function on the right.

Medium
94

Drag and drop each WAN transport type on the left to its matching SD-WAN characteristic on the right.

Medium
95

Which three statements about BGP peering are true? (Choose three.)

Medium
96

Drag and drop the steps of MPLS L3VPN packet forwarding steps into the correct order, from first to last.

Medium
97

Examine the following OSPF configuration on a Cisco IOS-XE router: router ospf 1 router-id 1.1.1.1 network 10.0.0.0 0.255.255.255 area 0 network 192.168.1.0 0.0.0.255 area 1 default-information originate always metric 10 metric-type 1 What is the effect of the 'default-information originate always' command?

Medium
98

What is the default OSPF hello interval on an Ethernet link?

Easy
99

Drag and drop each DTP mode on the left to its matching trunking behavior on the right.

Medium
100

Which three statements about BGP route selection are true? (Choose three.)

Hard
101

Which two statements about Cisco QoS classification and marking are true? (Choose two.)

Hard
102

Drag and drop the steps of configuring an iBGP route reflector cluster into the correct order, from first to last.

Medium
103

Which two statements about VRF route leaking are true? (Choose two.)

Hard
104

Drag and drop the steps of SD-WAN overlay routing protocol (OMP) route advertisement sequence into the correct order, from first to last.

Medium
105

Drag and drop the steps of PIM DM (Dense Mode) flood and prune steps into the correct order, from first to last.

Medium
106

Drag and drop each WPA security version on the left to its matching authentication method on the right.

Medium
107

Drag and drop the steps of RSPAN VLAN propagation across trunk links into the correct order, from first to last.

Medium
108

Drag and drop each TrustSec component on the left to its matching function on the right.

Medium
109

Which three statements about Cisco SD-WAN architecture components and their roles are true? (Choose three.)

Easy
110

Drag and drop each MPLS router role on the left to its matching function on the right.

Medium
111

Drag and drop the steps of MPLS Layer 3 VPN VRF configuration on a PE router into the correct order, from first to last.

Medium
112

Drag and drop each route-target action on the left to its matching behavior on the right.

Medium
113

What is the purpose of the 'ip sla schedule' command in IP SLA configuration?

Easy
114

Which three statements about VRF path isolation in a service provider network are true? (Choose three.)

Medium
115

Drag and drop the steps of VRF selection using policy-based routing into the correct order, from first to last.

Medium
116

Which three statements about VXLAN in Cisco SD-Access are true? (Choose three.)

Hard
117

Drag and drop each VTP mode on the left to its matching capability on the right.

Medium
118

A network administrator is deploying a new QoS policy to prioritize voice traffic across a WAN link. The policy must ensure that voice packets are not dropped even during congestion, and that bandwidth is guaranteed for voice. Which queuing mechanism should be used for the voice class?

Hard
119

Drag and drop each YANG module on the left to its matching standard body on the right.

Medium
120

Which three statements about EIGRP packet types are true? (Choose three.)

Hard
121

A network engineer is troubleshooting a Cisco SD-WAN deployment where a branch office has two WAN links: a primary MPLS link and a backup LTE link. The engineer wants to configure application-aware routing so that critical applications (e.g., Salesforce) always use the MPLS link as long as its loss is below 2% and latency below 150 ms. The engineer configures an app-route policy on the vSmart with the appropriate SLA requirements. After deployment, the engineer notices that Salesforce traffic is still using the LTE link even when the MPLS link meets the SLA. What is the most likely cause?

Medium
122

Drag and drop each STP variant on the left to its matching standard on the right.

Medium
123

Which three statements about OSPF LSA types are true? (Choose three.)

Hard
124

Drag and drop the steps of Jinja2 template rendering for device config generation into the correct order, from first to last.

Medium
125

Drag and drop the steps of VRF-aware NAT configuration for path isolation into the correct order, from first to last.

Medium
126

Which two statements about SNMP trap and inform operations are true? (Choose two.)

Hard
127

Drag and drop each PIM message type on the left to its matching function on the right.

Medium
128

Drag and drop each queuing mechanism on the left to its matching use case on the right.

Medium
129

Which two statements about the Cisco SD-Access fabric roles are true? (Choose two.)

Medium
130

Which three statements about Ansible roles and directory structure are true? (Choose three.)

Hard
131

Which two statements about PAgP (Port Aggregation Protocol) are true? (Choose two.)

Hard
132

A network engineer runs the following command on Router R1: R1# show ip eigrp topology all-links EIGRP-IPv4 Topology Table for AS(100)/ID(192.168.1.1) Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply, r - reply Status, s - sia Status P 10.1.1.0/24, 1 successors, FD is 1310720, serno 5 via 192.168.1.2 (1310720/1310720), GigabitEthernet0/0 via 10.2.2.2 (1587200/1310720), GigabitEthernet0/1 P 10.2.2.0/24, 1 successors, FD is 1310720, serno 6 via 192.168.1.2 (1310720/1310720), GigabitEthernet0/0 via 10.2.2.2 (1587200/1310720), GigabitEthernet0/1 Based on this output, what can be concluded?

Hard
133

Drag and drop each CPU feature on the left to its matching virtualization purpose on the right.

Medium
134

Which three statements about Cisco SD-Access design are true? (Choose three.)

Hard
135

Drag and drop the steps of WRED configuration for TCP congestion avoidance into the correct order, from first to last.

Medium
136

Drag and drop the steps of BFD session establishment for path liveliness into the correct order, from first to last.

Medium
137

A router has the following configuration snippet: vrf definition RED rd 100:1 ! interface Loopback0 ip vrf forwarding RED ip address 10.0.0.1 255.255.255.255 ! router eigrp 100 address-family ipv4 unicast vrf RED autonomous-system 100 network 10.0.0.1 0.0.0.0 What is the issue with this EIGRP configuration for VRF RED?

Medium
138

Drag and drop the steps of EIGRP redistribution from OSPF with metric seeding into the correct order, from first to last.

Medium
139

A large enterprise uses Cisco SD-WAN with multiple transport clouds (MPLS and Internet). The network team wants to ensure that voice traffic between two branch offices always uses the MPLS link, even if the Internet link has lower latency. The engineer creates a centralized data policy on the vSmart to match voice traffic based on DSCP EF and sets the preferred color to 'mpls'. After applying the policy, the engineer tests and finds that voice traffic is still using the Internet link. The vEdge routers show that the policy is received and active. What is the most likely reason for this failure?

Hard
140

Drag and drop each MPLS VPN type on the left to its matching layer on the right.

Medium
141

Drag and drop the steps of YANG data model traversal for interface stats into the correct order, from first to last.

Medium
142

Drag and drop the steps of MSTP region and instance configuration steps into the correct order, from first to last.

Medium
143

A network engineer is configuring model-driven telemetry on a Cisco IOS-XE router to stream OSPF neighbor state changes. The engineer uses the YANG model 'Cisco-IOS-XE-ospf-oper' and creates an on-change subscription. After testing, the engineer notices that the telemetry data is being sent, but the collector is receiving duplicate updates for the same OSPF neighbor state change. What is the most likely cause of these duplicate updates?

Easy
144

Drag and drop the steps of Multicast RP discovery using BSR into the correct order, from first to last.

Medium
145

Which two statements about VLAN trunking using IEEE 802.1Q are true? (Choose two.)

Medium
146

Which THREE of the following are components of a Cisco ACI fabric? (Choose three.)

Easy
147

A network engineer runs the following command on Router R6: R6# show ip route vrf CUSTOMER-D VRF CUSTOMER-D: 10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 10.0.0.0/30 is directly connected, GigabitEthernet0/0.400 L 10.0.0.1/32 is directly connected, GigabitEthernet0/0.400 192.168.0.0/16 is variably subnetted, 1 subnets, 1 mask B 192.168.1.0/24 [200/0] via 10.0.0.2, 00:10:00 R6# show ip bgp vpnv4 vrf CUSTOMER-D BGP table version is 5, local router ID is 10.0.0.6 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *> 192.168.1.0/24 10.0.0.2 0 100 0 i Based on this output, what can be concluded?

Hard
148

Drag and drop each DNA Center Intent API on the left to its matching use on the right.

Medium
149

A network engineer writes the following Python script using the Requests library to retrieve interface information from a Cisco IOS-XE device via RESTCONF: ```python import requests import json url = "https://10.1.1.1:443/restconf/data/ietf-interfaces:interfaces" headers = { "Accept": "application/yang-data+json", "Content-Type": "application/yang-data+json" } auth = ("admin", "password") response = requests.get(url, headers=headers, auth=auth, verify=False) print(response.json()) ``` What is the primary issue with this code?

Medium
150

Drag and drop each PnP workflow step on the left to its matching action on the right.

Medium
151

Drag and drop the steps of configuring a standard ACL for traffic filtering on a Cisco IOS router into the correct order, from first to last.

Medium
152

Drag and drop each VM storage type on the left to its matching characteristic on the right.

Medium
153

Drag and drop each Ansible connection type on the left to its matching protocol on the right.

Medium
154

Drag and drop each EAP method on the left to its matching authentication type on the right.

Medium
155

Drag and drop each multicast tree type on the left to its matching description on the right.

Medium
156

A network engineer is deploying Cisco DNA Center in a brownfield network. The engineer wants to use DNA Center to automate the configuration of QoS policies across all access switches. After discovering the devices and adding them to Inventory, the engineer creates a QoS policy and assigns it to a site. However, when attempting to provision, DNA Center reports that the devices are in 'Compliance Error' state. What is the most likely reason?

Hard
157

Drag and drop the steps of DSCP re-marking at enterprise WAN edge into the correct order, from first to last.

Medium
158

Drag and drop each 802.11 standard on the left to its matching frequency band and maximum speed on the right.

Medium
159

Which two statements about REST API HTTP methods are true? (Choose two.)

Medium
160

Drag and drop each BGP message type on the left to its matching function on the right.

Medium
161

Which three statements about Cisco AP join process and discovery are true? (Choose three.)

Hard
162

A network engineer runs the following command on Switch SW7: SW7# show monitor session 7 Session 7 --------- Type : Local Session Source Ports : Both : Gi1/0/1 Destination Ports : Gi1/0/20 Encapsulation : Native Ingress : Enabled Based on this output, what can be concluded?

Hard
163

Which two statements about IP SLA probe scheduling and operation states are true? (Choose two.)

Easy
164

Drag and drop the steps of stateless DHCPv6 address assignment steps into the correct order, from first to last.

Medium
165

Which three statements about OSPF route summarization are true? (Choose three.)

Medium
166

Which four statements about multicast group addresses and Layer 2 mapping are true? (Choose four.)

Easy
167

Which two statements about BGP TTL security are true? (Choose two.)

Medium
168

Drag and drop each SD-WAN controller on the left to its matching function on the right.

Medium
169

Drag and drop the steps of Cisco TrustSec inline tagging across fabric into the correct order, from first to last.

Medium
170

Which three statements about configuring model-driven telemetry on Cisco IOS-XE devices are true? (Choose three.)

Hard
171

Drag and drop each MPLS label operation on the left to its matching action on the right.

Medium
172

Which two statements about EtherChannel configuration and verification are true? (Choose two.)

Hard
173

Drag and drop the steps of SD-Access fabric border handoff configuration into the correct order, from first to last.

Medium
174

A network engineer runs the following command on Router R9: R9# show ip nat translations Pro Inside global Inside local Outside local Outside global udp 192.0.2.20:1234 10.0.0.20:1234 203.0.113.1:53 203.0.113.1:53 tcp 192.0.2.20:5678 10.0.0.20:5678 198.51.100.1:80 198.51.100.1:80 --- 192.0.2.21 10.0.0.21 --- --- Based on this output, what can be concluded?

Hard
175

Drag and drop the steps of Cisco ISE profiling and policy assignment flow into the correct order, from first to last.

Medium
176

Drag and drop the steps of a NETCONF get-config operation into the correct order, from first to last.

Medium
177

Which two statements about policing and shaping are true? (Choose two.)

Medium
178

Drag and drop each AAA method list on the left to its correct fallback order on the right.

Medium
179

Drag and drop the steps of LDP session establishment between LSRs into the correct order, from first to last.

Medium
180

Which two statements about the Cisco Enterprise Campus Architecture are true? (Choose two.)

Medium
181

Drag and drop each ISE policy result on the left to its matching enforcement action on the right.

Medium
182

Which two statements about NAT configuration on Cisco IOS-XE are true? (Choose two.)

Medium
183

Drag and drop each DNA Center API category on the left to its matching endpoint group on the right.

Medium
184

Drag and drop the steps of OMP route advertisement between vSmart and vEdge into the correct order, from first to last.

Medium
185

Which two statements about Cisco DNA Center software image management (SWIM) are true? (Choose two.)

Medium
186

Which BGP attribute is preferred when it has the lowest value?

Easy
187

Drag and drop each SD-Access layer on the left to its matching technology on the right.

Medium
188

Drag and drop each OSPF area type on the left to its matching characteristic on the right.

Medium
189

Drag and drop each CAPWAP message type on the left to its matching function on the right.

Medium
190

Which two statements about PortFast are true? (Choose two.)

Easy
191

Drag and drop the steps of DSCP-to-CoS mapping at LAN boundary into the correct order, from first to last.

Medium
192

Drag and drop the steps of the CAPWAP discovery and join process between a lightweight AP and a WLC into the correct order, from first to last.

Medium
193

Drag and drop each data encoding format on the left to its typical use case on the right.

Medium
194

Drag and drop the steps of SNMPv3 authentication and privacy negotiation into the correct order, from first to last.

Medium
195

Drag and drop each EIGRP metric component on the left to its matching variable on the right.

Medium
196

Which three statements about MPLS VPN (Layer 3 VPN) are true? (Choose three.)

Hard
197

Drag and drop the steps of configuring NETCONF YANG-based telemetry with on-change subscription into the correct order, from first to last.

Hard
198

Drag and drop each DTP mode on the left to its matching trunking behavior on the right.

Medium
199

Drag and drop each trunk encapsulation on the left to its matching standard on the right.

Medium
200

Which two statements about VLAN configuration and verification on a Cisco IOS switch are true? (Choose two.)

Easy
201

Drag and drop the steps to configure port security on a Cisco switch in the correct order.

Medium
202

Drag and drop each HTTP method on the left to its matching REST operation on the right.

Medium
203

Drag and drop the steps of NETCONF edit-config with candidate datastore flow into the correct order, from first to last.

Medium
204

Which three statements about policing and shaping are true? (Choose three.)

Hard
205

Drag and drop the steps of NFV MANO (VNFM/NFVO/VIM) interaction flow into the correct order, from first to last.

Medium
206

Which three statements about REST API authentication and security are true? (Choose three.)

Medium
207

Which two statements about queuing and congestion management are true? (Choose two.)

Medium
208

Which two statements about BGP path attributes are true? (Choose two.)

Medium
209

What is the maximum hop count for EIGRP?

Easy
210

A network engineer runs the following command on Switch SW8: SW8# show monitor session 8 Session 8 --------- Type : Remote Source Session Source VLANs : Both : 30 Destination Ports : Gi1/0/30 Encapsulation : Replicate Based on this output, what can be concluded?

Medium
211

Drag and drop the steps of BGP confederations setup between sub-ASes into the correct order, from first to last.

Medium
212

Which three statements about PAgP (Port Aggregation Protocol) are true? (Choose three.)

Hard
213

Which BGP attribute is preferred with the lowest value?

Easy
214

Which three statements about the Multiple Spanning Tree Protocol (MSTP) are true? (Choose three.)

Hard
215

Drag and drop the steps of SPAN session on EtherChannel member ports into the correct order, from first to last.

Medium
216

Drag and drop each SD-WAN policy type on the left to its matching application point on the right.

Hard
217

Drag and drop each syslog severity level on the left to its matching numeric value on the right.

Medium
218

Which three statements about Cisco DNA Center Assurance are true? (Choose three.)

Hard
219

Drag and drop each SPAN source type on the left to the traffic it monitors on the right.

Medium
220

Drag and drop each queuing mechanism on the left to its matching feature on the right.

Medium
221

Which TWO of the following are valid methods to mitigate VLAN hopping attacks?

Medium
222

Drag and drop each BGP path selection criterion on the left to its order of preference (1 = highest priority) on the right.

Hard
223

Which QoS mechanism is used to prevent congestion by dropping packets before a queue becomes full?

Easy
224

Drag and drop each protocol on the left to its matching characteristic on the right.

Medium
225

A network administrator needs to allow SSH access to a router from the management network 192.168.1.0/24. Which configuration should be applied?

Easy
226

An engineer is troubleshooting QoS on a Cisco ASR 1002 router. The router is configured with a policy map that includes a class for voice with a priority command. During congestion, the engineer notices that voice traffic is being dropped even though the priority queue is not congested. The router logs show 'QoS: priority queue overflow'. What is the most likely cause?

Hard
227

Which three statements about DHCP snooping are true? (Choose three.)

Medium
228

Drag and drop each CoS value on the left to its matching traffic type on the right.

Medium
229

Drag and drop each service chaining element on the left to its matching position in a typical chain on the right.

Hard
230

Drag and drop each DSCP PHB on the left to its matching queue treatment on the right.

Medium
231

Match each network automation tool to its purpose.

Medium
232

Drag and drop each QoS model on the left to its matching characteristic on the right.

Medium
233

Which three statements about RADIUS server configuration and operation are true? (Choose three.)

Medium
234

Which three statements about HTTP response status codes in REST APIs are true? (Choose three.)

Easy
235

Drag and drop each EtherChannel load-balance method on the left to its matching hashing input on the right.

Hard
236

Drag and drop the steps of MPLS LDP label distribution and FIB population into the correct order, from first to last.

Medium
237

An engineer is configuring a virtual machine on a Microsoft Hyper-V host. The VM runs a legacy application that requires a static MAC address. The engineer sets the MAC address in the VM settings. After the VM starts, the application cannot communicate on the network. The engineer verifies that the MAC address is not duplicated on the network. What is the most likely cause?

Easy
238

Which three statements about NAT64 and NPTv6 are true? (Choose three.)

Hard
239

A network administrator is troubleshooting a BGP routing issue where routes from an eBGP neighbor are not being installed in the routing table. The 'show ip bgp' output shows the routes are received but not valid. What is the most likely cause?

Medium
240

Which three statements about trunking and VLAN pruning are true? (Choose three.)

Medium
241

Drag and drop the steps of DMVPN Phase 1 spoke-to-hub tunnel setup into the correct order, from first to last.

Medium
242

Drag and drop the steps of cisco.ios.ios_config module idempotent apply flow into the correct order, from first to last.

Hard
243

A network engineer is troubleshooting an OSPF adjacency issue between two routers connected via a serial link. The adjacency is stuck in the INIT state. The engineer has verified that the IP addresses are in the same subnet and that the link is up. What is the most likely cause?

Easy
244

Router R5 has the following OSPF configuration: router ospf 1 router-id 5.5.5.5 network 10.0.0.0 0.255.255.255 area 0 area 0 authentication message-digest ! interface GigabitEthernet0/0 ip address 10.1.1.5 255.255.255.0 ip ospf message-digest-key 1 md5 cisco123 What is missing from this OSPF authentication configuration?

Medium
245

Which two statements about EIGRP route summarization are true? (Choose two.)

Medium
246

Drag and drop the steps of traffic shaping vs policing configuration steps into the correct order, from first to last.

Medium
247

Which THREE benefits does network automation provide over manual configuration?

Easy
248

Drag and drop the steps of Dynamic Trunking Protocol (DTP) negotiation into the correct order, from first to last.

Medium
249

Drag and drop each BGP attribute on the left to its matching attribute type on the right.

Medium
250

Drag and drop the steps of configuring an IP SLA ICMP echo operation into the correct order, from first to last.

Medium
251

Drag and drop the steps of Flexible NetFlow flow record and exporter setup into the correct order, from first to last.

Medium
252

A network engineer runs the following command on Router R1: R1# show policy-map control-plane Control Plane Service-policy input: CoPP-POLICY Class-map: MGMT-CLASS (match-all) 100 packets, 5000 bytes 5 minute offered rate 1000 bps Match: access-group name MGMT-ACL police: cir 32000 bps, bc 4000 bytes, be 4000 bytes conformed 80 packets, 4000 bytes; actions: transmit exceeded 15 packets, 750 bytes; actions: drop violated 5 packets, 250 bytes; actions: drop Class-map: class-default (match-any) 200 packets, 10000 bytes 5 minute offered rate 2000 bps Match: any police: cir 64000 bps, bc 8000 bytes, be 8000 bytes conformed 200 packets, 10000 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop Based on this output, what can be concluded?

Hard
253

Drag and drop each BGP message type on the left to its matching function on the right.

Medium
254

Drag and drop the steps of Cisco SD-WAN control plane establishment sequence into the correct order, from first to last.

Medium
255

Drag and drop each VM storage type on the left to its matching characteristic on the right.

Medium
256

Drag and drop each DNA Center Intent API on the left to its matching use on the right.

Medium
257

Drag and drop each IP SLA schedule parameter on the left to its function on the right.

Medium
258

Drag and drop the steps of VNF scaling up and scaling out steps into the correct order, from first to last.

Medium
259

Drag and drop each MPLS label operation on the left to its matching action on the right.

Medium
260

Drag and drop the steps of DMVPN Phase 1 spoke-to-hub tunnel setup into the correct order, from first to last.

Medium
261

Drag and drop the steps of SD-WAN zero-touch provisioning (ZTP) flow into the correct order, from first to last.

Medium
262

Drag and drop the steps of EIGRP authentication using MD5 key-chain into the correct order, from first to last.

Medium
263

Drag and drop the steps of IBNS 2.0 concurrent authentication policy map into the correct order, from first to last.

Medium
264

Drag and drop each OSPF network type on the left to its matching DR election behavior on the right.

Medium
265

Drag and drop each STP port role on the left to its matching definition on the right.

Medium
266

Drag and drop each SNMP version on the left to its matching security feature on the right.

Medium
267

Which TWO statements are true about RESTCONF and NETCONF in a Cisco IOS XE environment? (Choose two.)

Hard
268

Which three statements about RADIUS and TACACS+ are true? (Choose three.)

Hard
269

Drag and drop the steps for configuring STP root guard and loop guard and the resulting port behavior into the correct order, from first to last.

Medium
270

Which three statements about DHCP relay are true? (Choose three.)

Medium
271

A network engineer is configuring port security on a Cisco switch. The requirement is to allow only the first MAC address that appears on the port to be learned and to automatically disable the port if a violation occurs. The engineer configures 'switchport port-security mac-address sticky' but does not specify a maximum number of secure MAC addresses. After connecting a single host, the port works. However, when the host is replaced with a different device, the port is error-disabled. What is the most likely reason?

Medium
272

Which three statements about LACP (Link Aggregation Control Protocol) are true? (Choose three.)

Medium
273

Drag and drop each Cisco DNA Center workflow on the left to its matching component on the right.

Medium
274

Drag and drop each leased line technology on the left to its matching speed on the right.

Easy
275

What is the maximum number of SPAN sessions that can be configured on a Cisco Catalyst 9300 switch?

Easy
276

Drag and drop the steps of AAA method list fallback from RADIUS to local into the correct order, from first to last.

Medium
277

Drag and drop each STP port role on the left to its matching definition on the right.

Medium
278

What is the default OSPF hello interval on an Ethernet link?

Easy
279

Drag and drop each OMP attribute on the left to its matching behavior on the right.

Hard
280

Drag and drop the steps of EIGRP stub configuration for hub-and-spoke into the correct order, from first to last.

Medium
281

A network engineer is configuring CoPP on a Cisco ASR 1000 router to protect the control plane from excessive traffic. The engineer wants to allow BGP traffic from a specific peer (10.0.0.1) while rate-limiting all other BGP traffic. The engineer creates an ACL that permits TCP port 179 from host 10.0.0.1 and denies all other BGP traffic. The CoPP class-map matches this ACL. However, after applying the policy, BGP sessions from other peers are still being established. What is the most likely reason?

Hard
282

Drag and drop the steps of gRPC dial-in telemetry session from collector into the correct order, from first to last.

Medium
283

Which three statements about RSPAN are true? (Choose three.)

Hard
284

Drag and drop the steps of EtherChannel troubleshooting and verification into the correct order, from first to last.

Medium
285

Drag and drop each RADIUS attribute on the left to its correct attribute number on the right.

Medium
286

Drag and drop the steps of BGP policy application (route-map, prefix-list, AS-path ACL) into the correct order, from first to last.

Medium
287

Which two statements about 802.1X authentication process are true? (Choose two.)

Medium
288

Drag and drop each DHCP option on the left to its matching purpose on the right.

Medium
289

Drag and drop the steps of Ansible Tower (AWX) job template execution steps into the correct order, from first to last.

Medium
290

Which three statements about virtual machine (VM) resource allocation and overcommitment are true? (Choose three.)

Hard
291

Drag and drop the steps of the PPDIOO network lifecycle into the correct order, from first to last.

Medium
292

Drag and drop each SNMP component on the left to its matching role on the right.

Medium
293

Drag and drop each BGP path selection criterion on the left to its correct order of preference (1 = highest priority) on the right.

Hard
294

Which three statements about Cisco QoS policing and shaping are true? (Choose three.)

Medium
295

Drag and drop each data encoding format on the left to its matching use case on the right.

Medium
296

Drag and drop each VNF category on the left to its matching example on the right.

Medium
297

Drag and drop the steps of SR-IOV configuration for VM network bypass into the correct order, from first to last.

Medium
298

Drag and drop the steps of CBWFQ and LLQ queue servicing order into the correct order, from first to last.

Medium
299

Drag and drop each traffic direction on the left to its correct SPAN keyword on the right.

Medium
300

Based on the exhibit, which traffic will be permitted outbound on GigabitEthernet0/0?

Hard
301

Consider the following Python script that uses the requests library to delete a VLAN via RESTCONF on a Cisco IOS-XE device: ```python import requests from requests.auth import HTTPBasicAuth url = 'https://192.168.1.1/restconf/data/Cisco-IOS-XE-native:native/vlan=10' headers = { 'Accept': 'application/yang-data+json', 'Content-Type': 'application/yang-data+json' } auth = HTTPBasicAuth('admin', 'cisco') response = requests.delete(url, headers=headers, auth=auth, verify=False) print(response.status_code) ``` What is the expected outcome if the VLAN 10 exists?

Medium
302

Drag and drop the steps of configuring model-driven telemetry with gRPC on a Cisco IOS-XE device into the correct order, from first to last.

Medium
303

Drag and drop the steps of IKEv2 fragmentation and DPD keepalive process into the correct order, from first to last.

Medium
304

Drag and drop the steps of Cisco IOS-XE mdt subscription via CLI configuration into the correct order, from first to last.

Medium
305

Which two statements about RESTCONF are true? (Choose two.)

Medium
306

Which two statements about IPsec IKEv2 are true? (Choose two.)

Medium
307

Which two statements about Type 1 and Type 2 hypervisors are true? (Choose two.)

Medium
308

Drag and drop each telemetry model on the left to its matching push type (dial-in or dial-out) on the right.

Medium
309

Drag and drop the steps of Ansible Vault encryption and decryption steps into the correct order, from first to last.

Medium
310

Drag and drop each SD-WAN controller on the left to its matching function on the right.

Medium
311

Drag and drop each EtherChannel port state on the left to its matching description on the right.

Medium
312

Drag and drop each Netmiko device type on the left to its matching OS on the right.

Medium
313

Drag and drop the steps of VLAN pruning on trunks using VTP into the correct order, from first to last.

Medium
314

Drag and drop each STP variant on the left to its matching IEEE standard on the right.

Medium
315

Which two statements about BGP route selection are true? (Choose two.)

Hard
316

Which three statements about EIGRP stub routing are true? (Choose three.)

Hard
317

Drag and drop the steps of PAgP EtherChannel negotiation into the correct order, from first to last.

Medium
318

Which three statements about NFV MANO (Management and Orchestration) are true? (Choose three.)

Hard
319

Your company has deployed a Cisco Catalyst 9300 switch stack as the distribution layer for a campus network. The network uses VLANs 10 (data), 20 (voice), and 30 (management). The switch stack is configured with DHCP snooping, Dynamic ARP Inspection (DAI), and IP Source Guard (IPSG) on access ports. Recently, users in VLAN 10 report intermittent connectivity issues. You notice that some users receive duplicate IP addresses from the DHCP server. The DHCP server is connected to a trunk port on the switch stack. After reviewing logs, you see that DHCPACK messages are being dropped on the trunk port. The DHCP snooping binding table shows entries for legitimate clients, but also some entries with MAC addresses from a different vendor. Which action should you take to resolve the issue?

Hard
320

Which two statements about telemetry subscription types in model-driven telemetry are true? (Choose two.)

Medium
321

Given this configuration on a Cisco IOS-XE router: crypto ikev2 keyring KEYRING peer SPOKE1 address 192.168.2.1 pre-shared-key cisco123 ! crypto ikev2 profile IKEV2_PROF match identity remote address 192.168.2.1 255.255.255.255 authentication remote pre-share authentication local pre-share keyring KEYRING ! What is missing from this configuration for a successful IKEv2 tunnel to the peer at 192.168.2.1?

Medium
322

A network engineer is configuring model-driven telemetry on a Cisco IOS-XE device that is part of a DNA Center managed fabric. The telemetry subscription configuration is: telemetry ietf subscription 101 encoding encode-kvgpb filter xpath /process-cpu-ios-xe-oper:cpu-usage/cpu-utilization stream yang-push update-policy periodic 500 receiver ip address 10.10.10.10 port 5555 protocol grpc-tcp What is the purpose of the 'encoding encode-kvgpb' line?

Hard
323

Drag and drop the steps of DNA Center site hierarchy creation into the correct order, from first to last.

Medium
324

Which three statements about Cisco DNA Center software image management are true? (Choose three.)

Hard
325

Which two statements about Cisco SD-WAN overlay routing and OMP are true? (Choose two.)

Hard
326

Drag and drop the steps of EtherChannel load-balancing hash configuration into the correct order, from first to last.

Medium
327

Drag and drop each NAPALM getter on the left to its matching returned data on the right.

Medium
328

Which three statements about EIGRP named mode configuration are true? (Choose three.)

Hard
329

Drag and drop each TrustSec component on the left to its matching function on the right.

Hard
330

Which two statements about Ansible modules and idempotency are true? (Choose two.)

Medium
331

Match each routing protocol to its administrative distance.

Medium
332

What is the maximum hop count for EIGRP?

Easy
333

Which two statements about VRF-aware services are true? (Choose two.)

Medium
334

A network engineer is deploying model-driven telemetry on a Cisco Nexus 9000 switch to monitor BGP prefix changes. The engineer wants to use YANG data models and prefers a transport protocol that is lightweight and uses UDP. Which transport protocol should the engineer select for the telemetry stream?

Medium
335

Drag and drop the steps of IP Source Guard binding and enforcement into the correct order, from first to last.

Medium
336

Drag and drop the steps of NFV MANO (VNFM/NFVO/VIM) interaction flow into the correct order, from first to last.

Medium
337

Drag and drop the steps of MP-BGP VPNv4 route advertisement between PE routers into the correct order, from first to last.

Medium
338

Drag and drop each OSPF area type on the left to its matching characteristic on the right.

Medium
339

Which TWO features are part of Cisco TrustSec for providing role-based access control?

Easy
340

Which two statements about Cisco Wireless LAN Controller (WLC) high availability (SSO) are true? (Choose two.)

Medium
341

Which three statements about DHCP snooping are true? (Choose three.)

Hard
342

Which two statements about Cisco DNA Center integration with Cisco SD-Access are true? (Choose two.)

Medium
343

Drag and drop the steps of SD-Access fabric node onboarding into DNA Center into the correct order, from first to last.

Medium
344

Drag and drop the steps of NetFlow v9 cache export process into the correct order, from first to last.

Medium
345

A network engineer is designing a disaster recovery solution using VMware vSphere. The engineer needs to replicate virtual machines from the primary site to a secondary site with minimal downtime. The application VMs are running on NFS datastores. The engineer plans to use vSphere Replication. What prerequisite must be met for vSphere Replication to work with NFS datastores?

Easy
346

Drag and drop the steps of SD-WAN edge device (vEdge/cEdge) bring-up sequence into the correct order, from first to last.

Medium
347

Drag and drop each NAT terminology on the left to its matching definition on the right.

Medium
348

Drag and drop the steps of using a REST API to retrieve interface statistics from a Cisco device into the correct order, from first to last.

Medium
349

Which two statements about network design for high availability are true? (Choose two.)

Easy
350

Which two statements about Cisco SD-WAN control plane components are true? (Choose two.)

Medium
351

Which three statements about STP topology changes and convergence are true? (Choose three.)

Medium
352

Which two statements about NetFlow are true? (Choose two.)

Medium
353

Drag and drop each ACL type on the left to its matching capability on the right.

Medium
354

A network engineer uses the following Python script with Netmiko to send a command to a Cisco IOS-XE device: ```python from netmiko import ConnectHandler device = { 'device_type': 'cisco_ios', 'ip': '10.1.1.1', 'username': 'admin', 'password': 'password', 'secret': 'enable_secret' } connection = ConnectHandler(**device) output = connection.send_command('show ip interface brief') print(output) connection.disconnect() ``` What is the purpose of the 'secret' parameter in the device dictionary?

Easy
355

Drag and drop each SNMPv3 security level on the left to its matching protection description on the right.

Medium
356

Drag and drop the steps of service function chaining (SFC) path setup into the correct order, from first to last.

Medium
357

Drag and drop each VLAN type on the left to its matching purpose on the right.

Medium
358

Which three statements about syslog configuration on Cisco IOS devices are true? (Choose three.)

Hard
359

Which TWO are benefits of using a spine-leaf architecture in a data center? (Choose two.)

Easy
360

Drag and drop the steps of WPA3 client authentication process into the correct order, from first to last.

Medium
361

Drag and drop the steps of WPA3 client authentication process into the correct order, from first to last.

Medium
362

Drag and drop the steps of MST region configuration and operation into the correct order, from first to last.

Medium
363

Drag and drop the steps of Control Plane Policing (CoPP) rate-limit evaluation into the correct order, from first to last.

Medium
364

Drag and drop the steps of sFlow agent sampling and forwarding steps into the correct order, from first to last.

Medium
365

Drag and drop each flow record field on the left to its matching category (key or non-key) on the right.

Medium
366

Which two statements about Cisco DNA Center automation workflows are true? (Choose two.)

Medium
367

Which three statements about NAT traversal and translation are true? (Choose three.)

Medium
368

Drag and drop the steps of Netmiko multi-threaded device polling workflow into the correct order, from first to last.

Medium
369

Drag and drop the steps of Ansible Tower (AWX) job template execution steps into the correct order, from first to last.

Medium
370

Drag and drop the steps of syslog message generation and storage into the correct order, from first to last.

Medium
371

Drag and drop the steps of MPLS L2VPN (AToM) pseudowire setup into the correct order, from first to last.

Medium
372

Drag and drop the steps of DMVPN phase 2 spoke-to-spoke tunnel establishment into the correct order, from first to last.

Hard
373

Drag and drop each Ansible variable precedence level on the left to its matching scope on the right.

Hard
374

Drag and drop the steps of Netconf/Yang-based device monitoring subscription into the correct order, from first to last.

Medium
375

Drag and drop each WAN technology on the left to its matching layer on the right.

Medium
376

A network engineer is planning to use Cisco DNA Center to automate the deployment of a new branch office. The engineer has already discovered the devices and added them to Inventory. The engineer wants to use a template to configure the devices consistently. Which tool in DNA Center should the engineer use to create and apply the template?

Easy
377

Which two statements about DMVPN Phase 2 are true? (Choose two.)

Medium
378

Which three statements about IP SLA threshold monitoring and reaction configuration are true? (Choose three.)

Hard
379

Drag and drop the steps to configure VLAN Trunking Protocol (VTP) on a Cisco switch in the correct order.

Medium
380

A network engineer runs the following command on Router R1: R1# show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 10.0.0.2 1 FULL/DR 00:00:32 192.168.1.2 GigabitEthernet0/0 10.0.0.3 1 2WAY/DROTHER 00:00:35 192.168.1.3 GigabitEthernet0/0 Based on this output, what can be concluded?

Medium
381

Drag and drop the steps of Metro Ethernet E-Line service provisioning into the correct order, from first to last.

Medium
382

Drag and drop each streaming telemetry mode on the left to its matching trigger on the right.

Medium
383

Drag and drop each VRF component on the left to its matching function on the right.

Medium
384

Which three statements about BGP route reflectors are true? (Choose three.)

Hard
385

Drag and drop each ERSPAN version on the left to its correct header format description on the right.

Medium
386

Drag and drop the steps of CoPP policy evaluation order into the correct order, from first to last.

Medium
387

Drag and drop the steps of GET VPN key server registration and rekey into the correct order, from first to last.

Medium
388

Drag and drop the steps of Multicast RP discovery using Auto-RP into the correct order, from first to last.

Medium
389

Drag and drop the steps of LLQ configuration for voice traffic into the correct order, from first to last.

Medium
390

Drag and drop the steps of telemetry path validation using YANG DevKit into the correct order, from first to last.

Medium
391

Drag and drop each EAP method on the left to its matching authentication type on the right.

Medium
392

Drag and drop the steps of EIGRP named mode configuration steps into the correct order, from first to last.

Medium
393

Drag and drop each queuing mechanism on the left to its matching feature on the right.

Medium
394

A network engineer runs the following command on Switch SW1: SW1# show interfaces trunk Port Mode Encapsulation Status Native vlan Gi0/1 on 802.1q trunking 1 Gi0/2 on 802.1q trunking 1 Port Vlans allowed on trunk Gi0/1 1-1005 Gi0/2 1-1005 Port Vlans allowed and active in management domain Gi0/1 1,10,20 Gi0/2 1,10,20 Port Vlans in spanning tree forwarding state and not pruned Gi0/1 1,10,20 Gi0/2 1,10,20 Based on this output, what can be concluded?

Hard
395

Drag and drop each SNMP component on the left to its matching role on the right.

Medium
396

Drag and drop the steps of connecting to a network device via Netmiko into the correct order, from first to last.

Medium
397

Which three statements about BGP route reflectors are true? (Choose three.)

Hard
398

Drag and drop the steps of the gRPC dial-out telemetry subscription flow into the correct order, from first to last.

Medium
399

Drag and drop each RSPAN VLAN requirement on the left to its correct restriction on the right.

Medium
400

Which three statements about OSPF LSA types are correct? (Choose three.)

Hard
401

Drag and drop each protocol on the left to its matching characteristic on the right.

Medium
402

Which BGP attribute is preferred when it has the lowest value?

Medium
403

A network engineer is troubleshooting a problem where Cisco DNA Center is not receiving syslog messages from a critical core switch. The switch is configured to send syslog to the DNA Center's IP address. The engineer checks the DNA Center syslog collector and finds that it is enabled. What should the engineer check next?

Medium
404

Drag and drop each protocol number on the left to its matching protocol on the right.

Easy
405

Drag and drop each OMP attribute on the left to its matching behavior on the right.

Hard
406

Drag and drop the steps of NBAR2 application recognition and classification steps into the correct order, from first to last.

Medium
407

Drag and drop the steps of IPFIX template negotiation and export into the correct order, from first to last.

Medium
408

Drag and drop the steps of Hierarchical QoS (H-QoS) parent/child policy steps into the correct order, from first to last.

Medium
409

Which two statements about classification and marking in QoS are true? (Choose two.)

Medium
410

Drag and drop the steps of TACACS+ command authorization flow into the correct order, from first to last.

Medium
411

Drag and drop each RESTCONF method on the left to its matching NETCONF equivalent on the right.

Medium
412

An engineer is using a Python script to retrieve interface statistics from a Cisco IOS-XE device via the REST API. The script sends a GET request to 'https://device/restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet1/statistics' and receives a 404 Not Found response. The interface exists and is operational. What is the most likely issue?

Medium
413

Drag and drop each CoS value on the left to its matching traffic type on the right.

Medium
414

Which two statements about the interaction between ACLs and CoPP are true? (Choose two.)

Hard
415

Drag and drop each DSCP value on the left to its matching Per-Hop Behavior (PHB) on the right.

Medium
416

Drag and drop each sFlow component on the left to its matching function on the right.

Medium
417

Drag and drop each NetFlow version on the left to its matching feature description on the right.

Medium
418

Drag and drop each sFlow component on the left to its matching function on the right.

Medium
419

Drag and drop the steps of VRF selection using policy-based routing into the correct order, from first to last.

Medium
420

Which of the following is a valid transport protocol for model-driven telemetry receivers on Cisco IOS-XE?

Easy
421

Which two statements about NFV MANO (Management and Orchestration) are true? (Choose two.)

Medium
422

Drag and drop the steps of Unicast Reverse Path Forwarding (uRPF) check process into the correct order, from first to last.

Medium
423

Drag and drop the steps of OSPF redistribution from EIGRP with metric conversion into the correct order, from first to last.

Medium
424

Drag and drop each RADIUS attribute name on the left to its matching attribute number on the right.

Medium
425

Drag and drop the steps of SSL VPN (AnyConnect) session establishment into the correct order, from first to last.

Medium
426

Drag and drop the steps of deploying a CoPP policy on a Cisco IOS-XE router into the correct order, from first to last.

Medium
427

A network engineer runs the following command on Switch SW2: SW2# show monitor session 2 Session 2 --------- Type : Remote Source Session Source Ports : TX Only : Gi1/0/5 RX Only : Gi1/0/6 Destination Ports : Gi1/0/20 Encapsulation : Replicate Based on this output, what can be concluded?

Medium
428

A network engineer is using Cisco DNA Center to monitor network health. The Assurance dashboard shows that a particular access switch has a high CPU utilization issue. The engineer wants to investigate the root cause using DNA Center's built-in tools. Which feature should the engineer use to analyze the switch's CPU utilization over time?

Easy
429

Which two statements about PIM sparse mode are true? (Choose two.)

Medium
430

Drag and drop each AAA function on the left to its correct description on the right.

Medium
431

Drag and drop the steps of TrustSec SGT assignment and propagation via SXP into the correct order, from first to last.

Medium
432

Drag and drop each gRPC method on the left to its matching subscription type on the right.

Medium
433

Drag and drop each SD-Access fabric role on the left to its matching function on the right.

Medium
434

A network engineer runs the following command on Switch SW5: SW5# show monitor session 5 Session 5 --------- Type : Remote Source Session Source Ports : Both : Gi1/0/1-3 Destination Ports : Gi1/0/24 Encapsulation : Replicate Based on this output, what can be concluded?

Hard
435

Consider the following telemetry configuration on a Cisco IOS-XE device: telemetry ietf subscription 600 encoding encode-kvgpb filter xpath /interfaces/interface/state stream yang-push update-policy on-change receiver ip address 10.1.1.1 50000 protocol grpc What is a potential issue with this configuration?

Medium
436

Which three statements about virtual networking and hypervisor switches are true? (Choose three.)

Hard
437

Which two statements about the MQC (Modular QoS CLI) classification process are true? (Choose two.)

Medium
438

Drag and drop the steps of MPLS Traffic Engineering (TE) tunnel setup (RSVP) into the correct order, from first to last.

Medium
439

Drag and drop the steps of Embedded Packet Capture (EPC) on IOS-XE steps into the correct order, from first to last.

Medium
440

Which two statements about MPLS label operations are true? (Choose two.)

Medium
441

Drag and drop the steps of MSTP region and instance configuration steps into the correct order, from first to last.

Medium
442

Drag and drop the steps of DNA Center SWIM (Software Image Management) upgrade flow into the correct order, from first to last.

Medium
443

Drag and drop the steps of Jinja2 template rendering for device config generation into the correct order, from first to last.

Medium
444

An Ansible playbook uses the cisco.ios.ios_telemetry module to configure a telemetry subscription: ```yaml --- - name: Configure telemetry subscription hosts: ios_xe gather_facts: no tasks: - name: Create telemetry subscription cisco.ios.ios_telemetry: state: present subscription_id: 300 receiver: ip: 10.1.1.100 port: 50051 protocol: grpc-tcp source_ip: 10.1.1.1 encoding: kvgpb filter: xpath: /interfaces/interface/state/counters update_policy: period: 10000 ``` What is the purpose of the 'state: present' parameter?

Easy
445

Drag and drop the steps of deploying a virtual machine from a template in VMware vSphere into the correct order, from first to last.

Medium
446

Which three statements about Cisco QoS queuing and scheduling are true? (Choose three.)

Hard
447

Drag and drop the steps of PHP (Penultimate Hop Popping) operation into the correct order, from first to last.

Medium
448

Drag and drop the steps of OSPF summarization at ABR configuration steps into the correct order, from first to last.

Medium
449

Drag and drop each TACACS+ packet type on the left to its matching function on the right.

Medium
450

Given the following Ansible playbook snippet: --- - name: Configure SNMP hosts: routers gather_facts: no tasks: - name: SNMP community ios_config: lines: - snmp-server community public RO What is the result of this playbook?

Medium
451

Drag and drop the steps of Cisco IOS-XE mdt subscription via CLI configuration into the correct order, from first to last.

Medium
452

Which three statements about RADIUS and TACACS+ are true? (Choose three.)

Hard
453

Drag and drop the steps of JSON vs XML encoding selection for RESTCONF into the correct order, from first to last.

Medium
454

Drag and drop the steps of DHCP snooping operation on a Cisco switch into the correct order, from first to last.

Medium
455

A network engineer is troubleshooting performance issues on a VMware ESXi host running multiple VMs. The host has two physical CPUs, each with 8 cores (16 logical processors with Hyper-Threading enabled). One VM, configured with 8 vCPUs, experiences high CPU ready time. Other VMs on the host are idle. What is the most likely cause of the high CPU ready time?

Hard
456

Drag and drop the steps of SD-WAN traffic engineering app-aware routing steps into the correct order, from first to last.

Medium
457

A network engineer runs the following command on Router R1: R1# show policy-map control-plane Control Plane Service-policy input: CoPP-POLICY Class-map: BGP-CLASS (match-all) 50 packets, 2500 bytes 5 minute offered rate 500 bps Match: access-group name BGP-ACL police: cir 64000 bps, bc 8000 bytes, be 8000 bytes conformed 50 packets, 2500 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop Class-map: SNMP-CLASS (match-all) 200 packets, 10000 bytes 5 minute offered rate 2000 bps Match: access-group name SNMP-ACL police: cir 16000 bps, bc 2000 bytes, be 2000 bytes conformed 150 packets, 7500 bytes; actions: transmit exceeded 40 packets, 2000 bytes; actions: drop violated 10 packets, 500 bytes; actions: drop Class-map: class-default (match-any) 100 packets, 5000 bytes 5 minute offered rate 1000 bps Match: any police: cir 32000 bps, bc 4000 bytes, be 4000 bytes conformed 100 packets, 5000 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop Based on this output, what can be concluded?

Hard
458

A service provider is migrating a customer from a global routing table to a VRF on a Cisco ASR 1000. The customer has a BGP session with the provider for internet access. After moving the customer's interface to VRF CUSTOMER_D, the BGP session goes down. The engineer verifies that the VRF is configured with the correct route-target and that the BGP neighbor is configured under address-family ipv4 vrf CUSTOMER_D. What else is missing?

Easy
459

Which three statements about the Differentiated Services (DiffServ) QoS model are true? (Choose three.)

Hard
460

Which two statements about YANG data models and their role in model-driven telemetry are true? (Choose two.)

Medium
461

An engineer uses the following Ansible playbook to configure an interface on a Cisco IOS-XE device using the cisco.ios.ios_interfaces module: ```yaml --- - name: Configure interface hosts: cisco-routers gather_facts: no tasks: - name: Set interface description cisco.ios.ios_interfaces: config: - name: GigabitEthernet0/1 description: "Uplink to Core" enabled: true state: replaced ``` What is the result of running this playbook?

Medium
462

Drag and drop the steps of NBAR2 application recognition and classification steps into the correct order, from first to last.

Medium
463

What is the maximum hop count for EIGRP?

Easy
464

Drag and drop the steps of ISE profiling-based dynamic ACL assignment into the correct order, from first to last.

Medium
465

Drag and drop each multicast tree type on the left to its matching description on the right.

Medium
466

Which two statements about native VLANs on an 802.1Q trunk are true? (Choose two.)

Medium
467

Which two statements about MPLS label operations are true? (Choose two.)

Medium
468

Drag and drop the steps of Cisco DHCP snooping binding table population into the correct order, from first to last.

Medium
469

Drag and drop the steps of IKEv2 IPsec tunnel establishment into the correct order, from first to last.

Medium
470

Which three statements about configuring AAA on Cisco IOS devices are true? (Choose three.)

Hard
471

Drag and drop the steps of Dynamic ARP Inspection (DAI) packet validation into the correct order, from first to last.

Medium
472

Drag and drop the steps of configuring a Cisco IOS Zone-Based Firewall (ZBFW) into the correct order, from first to last.

Medium
473

Drag and drop each traffic shaping or policing characteristic on the left to its correct description on the right.

Medium
474

Drag and drop the steps of IGMP v3 SSM membership report process into the correct order, from first to last.

Medium
475

Drag and drop each EtherChannel protocol on the left to its matching vendor on the right.

Medium
476

Which three statements about Syslog severity levels are true? (Choose three.)

Easy
477

Drag and drop the steps of DMVPN Phase 2 NHRP resolution process into the correct order, from first to last.

Medium
478

Drag and drop the steps of parsing 'show interfaces' output using TextFSM into the correct order, from first to last.

Medium
479

An Ansible playbook is written to configure a VLAN on a Cisco IOS-XE device via Cisco DNA Center's intent API: - name: Configure VLAN via DNA Center hosts: localhost gather_facts: no tasks: - name: Create VLAN 100 cisco.dnac.vlan: host: "{{ dnac_host }}" username: "{{ dnac_username }}" password: "{{ dnac_password }}" validate_certs: no state: present vlan_name: "Engineering" vlan_id: 100 site_id: "{{ site_id }}" register: result - debug: var=result What is a potential issue with this playbook?

Hard
480

Drag and drop each AAA function on the left to its matching description on the right.

Medium
481

Drag and drop the steps of SNMP bulk walk operation process into the correct order, from first to last.

Medium
482

Drag and drop each IPv6 ACL feature on the left to its matching IPv4 equivalent on the right.

Hard
483

Which two statements about DMVPN phase 2 are true? (Choose two.)

Hard
484

Drag and drop each YANG statement on the left to its matching function on the right.

Medium
485

Drag and drop the steps of SD-WAN zero-touch provisioning (ZTP) flow into the correct order, from first to last.

Medium
486

Drag and drop the steps of IP SLA DNS lookup operation setup into the correct order, from first to last.

Medium
487

Which two statements about SD-WAN policy architecture are true? (Choose two.)

Medium
488

A network engineer is configuring a Cisco router to act as a DHCP server for a branch office. The engineer creates a DHCP pool for the 192.168.1.0/24 subnet and configures the default-router, dns-server, and domain-name options. However, clients are able to obtain IP addresses but cannot ping the default gateway. The engineer verifies that the router's interface IP is 192.168.1.1. What is the most likely cause?

Easy
489

Drag and drop the steps of Rapid PVST+ convergence process into the correct order, from first to last.

Medium
490

Drag and drop the steps of OSPF redistribution from EIGRP with metric conversion into the correct order, from first to last.

Hard
491

Which three statements about RRM (Radio Resource Management) in a Cisco wireless LAN are true? (Choose three.)

Medium
492

Drag and drop the steps of Ansible inventory grouping and variable inheritance into the correct order, from first to last.

Medium
493

A Python script using Netmiko to configure telemetry on a Cisco IOS-XE device: ```python from netmiko import ConnectHandler device = { 'device_type': 'cisco_ios', 'host': '192.168.1.1', 'username': 'admin', 'password': 'cisco', } connection = ConnectHandler(**device) config_commands = [ 'telemetry ietf subscription 200', 'receiver ip address 10.1.1.100 port 50051 protocol grpc-tcp', 'source-address 10.1.1.1', 'encoding encode-kvgpb', 'filter xpath /interfaces/interface/state/counters', 'update-policy periodic 10000' ] output = connection.send_config_set(config_commands) print(output) connection.disconnect() ``` What is the expected outcome of this script?

Medium
494

Which two statements about Cisco DNA Center automation workflows are true? (Choose two.)

Medium
495

Which TWO methods can be used to prevent unauthorized access to the privileged EXEC mode on a Cisco router? (Choose two.)

Easy
496

A network engineer is using the Cisco Meraki REST API to update the SSID settings for a wireless network. The engineer sends a PUT request to 'https://api.meraki.com/api/v1/networks/{networkId}/wireless/ssids/{ssidNumber}' with a JSON payload containing the new settings. The API returns a 429 Too Many Requests error. What should the engineer do to resolve this issue?

Easy
497

Which two statements about AAA accounting are true? (Choose two.)

Medium
498

Drag and drop the steps of SSL VPN (AnyConnect) session establishment into the correct order, from first to last.

Medium
499

Drag and drop each OSPF packet type on the left to its matching function on the right.

Medium
500

Drag and drop each CoPP class on the left to its matching traffic type on the right.

Medium
501

Drag and drop each STP protection feature on the left to its matching purpose on the right.

Medium
502

Which three statements about MPLS Layer 3 VPNs are true? (Choose three.)

Hard
503

Drag and drop each SD-WAN plane on the left to its matching function on the right.

Medium
504

Drag and drop the steps of vSphere VM snapshot creation and revert steps into the correct order, from first to last.

Medium
505

A network engineer is configuring model-driven telemetry on a Cisco IOS-XE router to stream BGP route updates to a collector using gRPC dial-out. The engineer wants to ensure that the telemetry data is encrypted in transit. Which additional configuration is required to secure the gRPC telemetry stream?

Medium
506

Which three statements about VRF-lite are true? (Choose three.)

Hard
507

A network engineer is deploying 802.1X with Cisco ISE for a wired network. The engineer wants to use CoA (Change of Authorization) to dynamically change the VLAN of a user after authentication. The engineer configures the switch with 'aaa server radius dynamic-author' and the ISE with CoA settings. When the engineer tests CoA from ISE, the switch logs show 'CoA request received' but the VLAN does not change. What is the most likely cause?

Hard
508

Which three statements about the classification and marking tools in Cisco IOS are true? (Choose three.)

Hard
509

Which three statements about Cisco Wireless LAN Controller (WLC) mobility groups are true? (Choose three.)

Hard
510

Drag and drop each EtherChannel load-balance method on the left to its matching hashing input on the right.

Medium
511

Given the following configuration: router eigrp TEST network 10.0.0.0 0.255.255.255 network 192.168.1.0 ! interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 ip summary-address eigrp TEST 10.0.0.0 255.0.0.0 5 What is the effect of the ip summary-address command?

Medium
512

Drag and drop the steps of configuring a native VLAN mismatch detection into the correct order, from first to last.

Medium
513

Drag and drop the steps of Flexible NetFlow flow record and exporter setup into the correct order, from first to last.

Medium
514

Given the following configuration snippet on a Cisco IOS-XE switch: interface GigabitEthernet1/0/1 switchport mode access switchport access vlan 10 spanning-tree portfast monitor session 1 source interface GigabitEthernet1/0/1 both monitor session 1 destination interface GigabitEthernet1/0/2 What is the effect of this configuration?

Medium
515

Drag and drop the steps of OSPF route redistribution into a different autonomous system into the correct order, from first to last.

Hard
516

Which TWO statements about Cisco DNA Center's Assurance capabilities are correct?

Medium
517

Drag and drop each security protocol on the left to its matching provided security service on the right.

Medium
518

Which three statements about hypervisor security and isolation are true? (Choose three.)

Hard
519

Drag and drop the steps of YANG module import and augmentation resolution into the correct order, from first to last.

Medium
520

Which three statements about Control Plane Policing (CoPP) are true? (Choose three.)

Hard
521

Drag and drop the steps of Streaming telemetry sensor path subscription flow into the correct order, from first to last.

Medium
522

Examine the following telemetry configuration on a Cisco IOS-XE device: telemetry ietf subscription 200 encoding encode-kvgpb filter xpath /interfaces/interface[name='GigabitEthernet0/0/0']/state stream yang-push update-policy on-change receiver ip address 192.168.1.100 50001 protocol grpc Which statement is true about this configuration?

Medium
523

Which three statements about path isolation using VRF are true? (Choose three.)

Medium
524

A network engineer is using Netmiko to connect to a Cisco IOS-XE device that is managed by Cisco DNA Center. The script is: from netmiko import ConnectHandler device = { 'device_type': 'cisco_ios', 'host': '10.10.10.1', 'username': 'admin', 'password': 'cisco123', 'secret': 'enable123' } connection = ConnectHandler(**device) connection.enable() output = connection.send_command('show ip interface brief') print(output) connection.disconnect() What is a potential security concern with this script in the context of DNA Center?

Medium
525

Which three statements about YANG data models are true? (Choose three.)

Hard
526

Drag and drop the steps of BGP route aggregation and suppress-map process into the correct order, from first to last.

Medium
527

Drag and drop each container technology on the left to its matching orchestration tool on the right.

Medium
528

Drag and drop each ACL action on the left to its matching result on the right.

Easy
529

Drag and drop the steps of OSPFv3 IPv6 neighbor adjacency formation into the correct order, from first to last.

Medium
530

Drag and drop the steps of YANG push periodic vs on-change subscription into the correct order, from first to last.

Medium
531

Drag and drop each LACP port mode on the left to its matching negotiation behavior on the right.

Medium
532

Drag and drop the steps of configuring and applying a QoS policy using MQC into the correct order, from first to last.

Medium
533

What is the default CAPWAP control path DTLS encryption mode on Cisco 9800 WLCs?

Easy
534

Which two statements about STP port roles and states are true? (Choose two.)

Easy
535

Drag and drop each SNMP version on the left to its matching security feature on the right.

Medium
536

Drag and drop each syslog severity level on the left to its matching severity number on the right.

Medium
537

A network engineer is using the Cisco DNA Center REST API to retrieve the list of network devices. The engineer sends a GET request to '/dna/intent/api/v1/network-device' and receives a 400 Bad Request response. The API documentation indicates that the request requires a query parameter 'siteId'. What should the engineer do to resolve the issue?

Easy
538

Drag and drop each SPAN source type on the left to its correct monitored traffic description on the right.

Medium
539

Drag and drop the steps of Cisco DNA Center assurance data collection workflow into the correct order, from first to last.

Medium
540

A network engineer is configuring multicast on a Cisco router that connects to a multi-access network. The engineer wants to ensure that only one router forwards multicast traffic onto the segment to avoid duplication. The engineer enables PIM on the interface. However, multicast traffic is still being duplicated on the segment. What is the most likely reason?

Easy
541

Drag and drop the steps of NFVI resource allocation and VNF instantiation into the correct order, from first to last.

Medium
542

Which three statements about named ACLs and their configuration are true? (Choose three.)

Easy
543

Which two statements about RESTCONF are true? (Choose two.)

Easy
544

Drag and drop the steps of the DHCP DORA process into the correct order, from first to last.

Medium
545

Drag and drop each NETCONF operation on the left to its action on the right.

Medium
546

Drag and drop the steps of Q-in-Q (802.1ad) double-tagging configuration into the correct order, from first to last.

Medium
547

Which three statements about Dynamic Trunking Protocol (DTP) are true? (Choose three.)

Hard
548

Drag and drop each hypervisor product on the left to its matching vendor on the right.

Medium
549

Which two statements about Cisco Aironet 2800/3800 series APs are true? (Choose two.)

Easy
550

Drag and drop the steps of VLAN pruning on trunks using VTP into the correct order, from first to last.

Medium
551

Drag and drop the steps of YANG data model traversal for interface stats into the correct order, from first to last.

Medium
552

Match each Spanning Tree Protocol (STP) variant to its key characteristic.

Medium
553

Which three statements about SD-WAN segmentation and multi-tenancy are true? (Choose three.)

Hard
554

Drag and drop the steps of NFVI resource allocation and VNF instantiation into the correct order, from first to last.

Medium
555

A developer sends a RESTCONF request to retrieve interface statistics from a Cisco IOS-XE device: Request: ``` GET /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet1/statistics HTTP/1.1 Host: 192.168.1.1 Accept: application/yang-data+json ``` Response: ```json { "ietf-interfaces:statistics": { "discontinuity-time": "2023-01-01T00:00:00Z", "in-octets": 1000000, "in-errors": 0, "out-octets": 500000, "out-errors": 0 } } ``` What is the correct way to interpret this response?

Easy
556

Drag and drop each route-target action on the left to its matching behavior on the right.

Medium
557

Drag and drop each YANG module on the left to its matching data category on the right.

Medium
558

Drag and drop each BGP attribute on the left to the value that is preferred (highest or lowest) during path selection on the right.

Medium
559

Drag and drop each MPLS VPN role on the left to its matching description on the right.

Medium
560

A network engineer is automating the configuration of a new VLAN on a Cisco Catalyst 9000 switch using RESTCONF. The engineer sends a PUT request to the URI 'https://switch/restconf/data/Cisco-IOS-XE-native:Native/VlanList' with a JSON payload containing the VLAN details. The switch responds with a 405 Method Not Allowed error. What is the most likely cause of this error?

Medium
561

Drag and drop the steps of configuring Dynamic NAT on a Cisco IOS router into the correct order, from first to last.

Medium
562

Drag and drop the steps of LLQ configuration for voice traffic into the correct order, from first to last.

Medium
563

Which two statements about virtual machine migration (vMotion and cold migration) are true? (Choose two.)

Medium
564

Drag and drop each NETCONF operation on the left to its matching action on the right.

Medium
565

Drag and drop each PIM mode on the left to its matching traffic distribution method on the right.

Medium
566

Drag and drop each CoPP class on the left to its matching traffic type on the right.

Hard
567

Drag and drop each Ansible variable precedence level on the left to its matching scope on the right.

Hard
568

Drag and drop the steps of gRPC dial-in telemetry session from collector into the correct order, from first to last.

Medium
569

Drag and drop each Ansible component on the left to its matching function on the right.

Medium
570

Which two statements about multicast RP (Rendezvous Point) are true? (Choose two.)

Hard
571

Drag and drop the steps of Ansible role directory structure and task execution into the correct order, from first to last.

Medium
572

Which three statements about dynamic ARP inspection (DAI) are true? (Choose three.)

Hard
573

Drag and drop the steps of network audit and gap analysis steps into the correct order, from first to last.

Medium
574

An engineer is configuring MPLS L3VPN on a Cisco IOS-XR router. The VRF CUSTOMER_B is configured with route-target import 100:1 and export 100:1. The engineer notices that the VRF routes are not being advertised to the route reflector. The BGP session to the route reflector is established and the VPNv4 address family is activated. What is the missing configuration?

Medium
575

Drag and drop the steps of NETCONF edit-config with candidate datastore flow into the correct order, from first to last.

Medium
576

Examine the following Python script snippet that uses netmiko to configure a Cisco IOS-XE device: ```python from netmiko import ConnectHandler device = { 'device_type': 'cisco_ios', 'ip': '192.168.1.1', 'username': 'admin', 'password': 'cisco', } connection = ConnectHandler(**device) output = connection.send_command('show ip interface brief') print(output) connection.disconnect() ``` What is the primary purpose of this script?

Medium
577

Which three statements about model-driven telemetry are true? (Choose three.)

Hard
578

Drag and drop the steps of MSDP peering for inter-domain multicast into the correct order, from first to last.

Medium
579

Drag and drop the steps of DNA Center template deployment to a device into the correct order, from first to last.

Medium
580

Which two statements about 802.1X authentication with MAC Authentication Bypass (MAB) are true? (Choose two.)

Medium
581

Which two statements about AAA authentication methods are true? (Choose two.)

Medium
582

Drag and drop each MPLS VPN type on the left to its matching layer on the right.

Medium
583

Which three statements about Cisco DNA Center Assurance are true? (Choose three.)

Hard
584

A network engineer configured VRF TENANT_A and moved the subinterfaces into the VRF. After the change, the CEF table shows the prefixes but the next-hop addresses are unreachable. What is the most likely cause?

Hard
585

Drag and drop the steps of MAB (MAC Authentication Bypass) fallback flow into the correct order, from first to last.

Medium
586

Drag and drop the steps of SD-WAN policy creation and push via vManage into the correct order, from first to last.

Medium
587

An Ansible playbook uses the cisco.ios.ios_l3_interfaces module to configure an IPv4 address on GigabitEthernet0/1: ```yaml --- - name: Configure IPv4 address hosts: cisco-routers gather_facts: no tasks: - name: Set IP address cisco.ios.ios_l3_interfaces: config: - name: GigabitEthernet0/1 ipv4: - address: 10.1.1.1/24 state: merged ``` What is the effect of the 'state: merged' parameter?

Medium
588

Drag and drop the steps of EIGRP stub configuration for hub-and-spoke into the correct order, from first to last.

Medium
589

A network team must design QoS for a campus network that carries voice, video, and data traffic. The design must use the DiffServ model and ensure that voice traffic is prioritized over all other traffic classes. Which DSCP marking and queuing strategy should be used for voice?

Easy
590

Drag and drop the steps of BGP session establishment between eBGP peers into the correct order, from first to last.

Medium
591

Drag and drop the steps of OpenAPI schema validation for DNA Center REST call into the correct order, from first to last.

Medium
592

Which three statements about Cisco DNA Center wireless assurance are true? (Choose three.)

Hard
593

Which three statements about EtherChannel configuration and verification are true? (Choose three.)

Hard
594

Drag and drop each STP timer on the left to its matching default value on the right.

Medium
595

Which three statements about Cisco SD-Access policy enforcement are true? (Choose three.)

Hard
596

A network engineer is configuring a Cisco SD-WAN solution for a retail chain with hundreds of stores. The engineer wants to use a centralized data policy to steer all YouTube traffic to a specific WAN link (broadband) to save MPLS bandwidth. The engineer creates a policy that matches YouTube traffic by destination IP and sets the preferred color to 'biz-internet'. After applying the policy, the engineer tests and finds that YouTube traffic is still using the MPLS link. The vEdge routers show that the policy is received and active. What is the most likely reason?

Medium
597

Drag and drop the steps of KVM VM provisioning via virsh CLI into the correct order, from first to last.

Medium
598

Examine the following Python script that uses the netmiko library to send configuration commands to a Cisco IOS-XE device: ```python from netmiko import ConnectHandler device = { 'device_type': 'cisco_ios', 'ip': '192.168.1.1', 'username': 'admin', 'password': 'cisco', } connection = ConnectHandler(**device) config_commands = [ 'interface GigabitEthernet1/0/1', 'description Link to Core', 'ip address 10.1.1.1 255.255.255.0', 'no shutdown' ] output = connection.send_config_set(config_commands) print(output) connection.disconnect() ``` What is the purpose of this script?

Medium
599

A network engineer is configuring PIM sparse mode in a network that uses a Bootstrap Router (BSR) for RP discovery. The engineer has configured a candidate BSR and candidate RPs. However, some routers in the network are not learning the RP set. The engineer checks the BSR and sees that it is receiving candidate RP advertisements, but the BSR messages are not being forwarded to all routers. What is the most likely cause?

Hard
600

Drag and drop the steps of deploying a virtual router as a VNF into the correct order, from first to last.

Medium
601

Drag and drop the steps of AAA accounting for command logging setup into the correct order, from first to last.

Medium
602

Which three statements about VRF route targets are true? (Choose three.)

Hard
603

Drag and drop each broadband type on the left to its matching technology on the right.

Easy
604

Drag and drop each EIGRP router role on the left to its matching definition on the right.

Medium
605

An engineer configures model-driven telemetry on a Cisco IOS-XE device with the following gRPC dial-out configuration: ``` telemetry ietf subscription 101 encoding encode-kvgpb filter xpath /interfaces/interface/state/counters source-address 10.1.1.1 stream yang-push update-policy periodic 500 receiver ip address 10.2.2.2 50001 protocol grpc-tcp ``` What is the purpose of the 'encoding encode-kvgpb' command?

Hard
606

Drag and drop each telemetry encoding on the left to its matching format on the right.

Medium
607

Drag and drop each MP-BGP address family on the left to its matching use case on the right.

Medium
608

Drag and drop each MQC component on the left to its matching role on the right.

Medium
609

Drag and drop each VPN type on the left to its matching tunnel technology on the right.

Medium
610

Drag and drop each IP SLA threshold type on the left to its trigger condition on the right.

Medium
611

Drag and drop the steps of SNMP bulk walk operation process into the correct order, from first to last.

Medium
612

Which three statements about SD-WAN (Cisco Catalyst SD-WAN) are true? (Choose three.)

Medium
613

Drag and drop each EIGRP router role on the left to its matching definition on the right.

Medium
614

A network engineer runs the following command on Switch SW6: SW6# show monitor session 6 Session 6 --------- Type : Remote Destination Session Source RSPAN VLAN : 200 Destination Ports : Gi1/0/12 Encapsulation : Native Ingress : Disabled Based on this output, what can be concluded?

Medium
615

Drag and drop each CPU feature on the left to its matching virtualization purpose on the right.

Medium
616

Drag and drop the steps of Multiple SPAN source ports with filter VLAN into the correct order, from first to last.

Medium
617

Drag and drop each NAPALM getter on the left to its matching returned data on the right.

Medium
618

Drag and drop the steps of IP SLA with threshold and reaction configuration into the correct order, from first to last.

Medium
619

Drag and drop each wireless roaming method on the left to its matching 802.11 standard on the right.

Medium
620

Drag and drop each PnP workflow step on the left to its matching action on the right.

Medium
621

Which three statements about the Cisco Enterprise WAN design principles are true? (Choose three.)

Hard
622

A network engineer is using Cisco DNA Center to automate the deployment of a new VLAN across multiple access switches. The engineer creates a new network profile with the VLAN definition and assigns it to a site. However, after provisioning, the VLAN is not created on any of the switches. The engineer verifies that the devices are in the Inventory and are reachable. What is the most likely cause?

Medium
623

Drag and drop the steps of vSphere VM snapshot creation and revert steps into the correct order, from first to last.

Medium
624

Which two statements about LISP in Cisco SD-Access are true? (Choose two.)

Medium
625

A network engineer is configuring model-driven telemetry on a Cisco IOS-XE router to stream interface statistics to a collector using gRPC. The engineer wants to ensure that the telemetry data is sent only when there is a change in the interface counters, rather than at a fixed interval. Which configuration parameter should the engineer use to achieve this behavior?

Medium
626

Which two statements about MPLS label distribution protocol (LDP) are true? (Choose two.)

Medium
627

Drag and drop the steps of VRF import/export route-target policy flow into the correct order, from first to last.

Medium
628

Drag and drop the steps of GET VPN key server registration and rekey into the correct order, from first to last.

Medium
629

Drag and drop the steps of Ansible playbook execution flow into the correct order, from first to last.

Medium
630

Drag and drop each VLAN type on the left to its matching purpose on the right.

Medium
631

An engineer configures gRPC dial-out telemetry on a Cisco IOS-XE device: ``` telemetry ietf subscription 100 receiver ip address 10.1.1.100 port 50051 protocol grpc-tcp source-address 10.1.1.1 encoding encode-kvgpb filter xpath /interfaces/interface/state/counters update-policy periodic 10000 ``` What is the purpose of the 'source-address' command?

Medium
632

Drag and drop the steps of STP root guard and loop guard activation into the correct order, from first to last.

Medium
633

Drag and drop the steps of IPFIX template negotiation and export into the correct order, from first to last.

Medium
634

Drag and drop each YANG module on the left to its matching standard body on the right.

Medium
635

Drag and drop each leased line technology on the left to its matching speed on the right.

Easy
636

Drag and drop each NFV management layer on the left to its matching function on the right.

Medium
637

Drag and drop each cisco.ios module on the left to its matching purpose on the right.

Medium
638

Drag and drop the steps of DSCP re-marking at enterprise WAN edge into the correct order, from first to last.

Medium
639

Drag and drop the steps of NAT64 IPv6-to-IPv4 translation flow into the correct order, from first to last.

Medium
640

A network engineer is troubleshooting a wireless connectivity issue in a campus network managed by Cisco DNA Center. The Assurance module shows that several access points have high client association failures. The engineer checks the wireless controller configuration and finds that the APs are registered and functional. What is the most likely cause of the association failures?

Medium
641

Drag and drop the steps of NUMA-aware VM placement process into the correct order, from first to last.

Medium
642

A network engineer is using Cisco DNA Center to manage a network with multiple sites. The engineer wants to ensure that all devices at a remote site have the same NTP server configuration. The engineer creates a network profile with the NTP settings and assigns it to the site. After provisioning, the engineer checks one of the switches and finds that the NTP configuration is missing. What should the engineer check first?

Medium
643

Drag and drop each REST HTTP status code on the left to its matching meaning on the right.

Medium
644

An enterprise network uses OSPF as its IGP. The network engineer notices that a particular route learned via OSPF is not being installed in the routing table, even though the neighbor adjacency is up and the route appears in the OSPF database. The route is an external route redistributed from EIGRP. What is the most likely cause?

Medium
645

Drag and drop each WAN encapsulation on the left to its matching use case on the right.

Medium
646

Drag and drop the steps of NAPALM get_facts() retrieval from IOS-XE device into the correct order, from first to last.

Medium
647

Drag and drop each wireless AP mode on the left to its matching function on the right.

Medium
648

Which two statements about AAA authorization and accounting are true? (Choose two.)

Medium
649

Drag and drop the steps of RPF check verification for multicast forwarding into the correct order, from first to last.

Medium
650

Which two statements about Python data structures used in network automation are true? (Choose two.)

Medium
651

Which three statements about Cisco TrustSec (CTS) are true? (Choose three.)

Hard
652

Drag and drop the steps of VLAN mapping on trunk interfaces into the correct order, from first to last.

Medium
653

Drag and drop the steps of Cisco NSO service provisioning workflow into the correct order, from first to last.

Medium
654

Drag and drop each authentication mode on the left to its matching behavior on the right.

Medium
655

Which two statements about SPAN and RSPAN configuration limits are true? (Choose two.)

Hard
656

Drag and drop the steps of ACL reflexive access list (dynamic inspection) flow into the correct order, from first to last.

Medium
657

A network engineer uses the Cisco DNA Center API to trigger a provisioning workflow for a new device. The API call returns the following JSON response: { "response": { "taskId": "task-12345", "url": "/api/v1/task/task-12345" }, "version": "1.0" } The engineer then polls the task status using the URL. Which HTTP method should be used to retrieve the task status?

Easy
658

Which two statements about IPsec VPNs are true? (Choose two.)

Easy
659

Drag and drop the steps of cisco.ios.ios_config module idempotent apply flow into the correct order, from first to last.

Medium
660

Which two statements about 802.1X port states and access control are true? (Choose two.)

Medium
661

Drag and drop each AAA service on the left to its matching protocol on the right.

Medium
662

Drag and drop the steps of Embedded Packet Capture (EPC) on IOS-XE steps into the correct order, from first to last.

Medium
663

Drag and drop the steps of Cisco Flex (FlexConnect) AP mode operation into the correct order, from first to last.

Medium
664

Drag and drop the steps of implementing QoS trust boundaries on a Cisco switch into the correct order, from first to last.

Medium
665

Which three statements about trunking and VLAN pruning are true? (Choose three.)

Hard
666

Drag and drop the steps of SVI configuration for inter-VLAN routing into the correct order, from first to last.

Medium
667

Drag and drop the steps of FlexVPN IKEv2 spoke registration to hub into the correct order, from first to last.

Medium
668

Drag and drop the steps of the QoS trust boundary configuration process into the correct order, from first to last.

Medium
669

Drag and drop the steps of troubleshooting an IP SLA operation into the correct order, from first to last.

Medium
670

Drag and drop each multicast address range on the left to its matching use on the right.

Medium
671

A network engineer runs the following command on Switch SW9: SW9# show monitor session 9 Session 9 --------- Type : Remote Destination Session Source RSPAN VLAN : 300 Destination Ports : Gi1/0/40 Encapsulation : Native Ingress : Disabled Based on this output, what can be concluded?

Hard
672

Drag and drop the steps of EtherChannel troubleshooting and verification steps into the correct order, from first to last.

Medium
673

Drag and drop the steps of MPLS L3VPN packet forwarding steps into the correct order, from first to last.

Medium
674

An engineer configures IP SLA 10 to monitor the reachability of a next-hop router at 10.1.1.1 using ICMP echo. The IP SLA is used as a track object for a static route. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 1 ms', but the track object shows 'Track 10: up' even though the next-hop router is actually unreachable from the source. The source router has a default route pointing to 10.1.1.1. What is the most likely cause?

Hard
675

Drag and drop each EIGRP timer on the left to its matching default value on the right.

Medium
676

Given the following BGP configuration on a Cisco IOS-XE device: router bgp 65001 bgp router-id 1.1.1.1 neighbor 10.0.0.2 remote-as 65002 neighbor 10.0.0.2 update-source Loopback0 neighbor 10.0.0.2 ebgp-multihop 2 ! interface Loopback0 ip address 1.1.1.1 255.255.255.255 ! interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.252 What is the purpose of the 'ebgp-multihop 2' command?

Medium
677

Drag and drop each STP port state on the left to its matching function on the right.

Medium
678

Drag and drop the steps of SD-WAN traffic engineering app-aware routing steps into the correct order, from first to last.

Medium
679

Drag and drop the steps of Netconf/Yang-based device monitoring subscription into the correct order, from first to last.

Medium
680

Drag and drop each MPLS role on the left to its matching function on the right.

Medium
681

What is the default OSPF hello interval on a broadcast multi-access network (e.g., Ethernet)?

Easy
682

Drag and drop the steps of creating and applying an Ansible role for network device configuration into the correct order, from first to last.

Medium
683

A network engineer uses Cisco DNA Center API to retrieve the health of a device. The API call returns: ```json { "response": [ { "deviceId": "1234567890", "healthScore": 85, "overallHealth": "good", "memory": { "used": 4096, "total": 8192, "usage": 50 }, "cpu": { "usage": 25 } } ] } ``` What does the healthScore of 85 indicate?

Easy
684

Which two statements about Rapid PVST+ are true? (Choose two.)

Medium
685

Drag and drop each LDP message type on the left to its matching function on the right.

Medium
686

Drag and drop each NFV component on the left to its matching role on the right.

Medium
687

Drag and drop the steps of DMVPN Phase 3 NHRP registration and spoke-to-spoke tunnel establishment into the correct order, from first to last.

Medium
688

Drag and drop the steps of PHP (Penultimate Hop Popping) operation into the correct order, from first to last.

Medium
689

Drag and drop each wireless roaming method on the left to its matching 802.11 standard on the right.

Medium
690

Drag and drop the steps of YANG module import and augmentation resolution into the correct order, from first to last.

Medium
691

Drag and drop the steps of IPsec IKEv2 tunnel establishment into the correct order, from first to last.

Medium
692

Which three statements about YANG data models are true? (Choose three.)

Hard
693

A network engineer is designing a model-driven telemetry solution for a large enterprise network with thousands of devices. The engineer wants to minimize the load on the network devices and the collector by sending data only when significant changes occur. The engineer decides to use on-change subscriptions. However, after deployment, the engineer notices that some subscriptions are sending updates too frequently, causing high CPU usage on the devices. What is the most likely reason for this excessive update frequency?

Hard
694

Drag and drop the steps of Dynamic ARP Inspection (DAI) packet validation into the correct order, from first to last.

Medium
695

Drag and drop each SD-WAN policy type on the left to its matching application point on the right.

Medium
696

A network engineer is planning to deploy model-driven telemetry in a brownfield network with a mix of Cisco IOS-XE and Nexus devices. The engineer wants to use a single collector that supports both gRPC and UDP-based telemetry. The engineer is concerned about the scalability of the solution, as the network has over 5000 devices. Which design consideration is most important to ensure the telemetry solution scales effectively?

Hard
697

Drag and drop each 802.1X component on the left to its matching role on the right.

Medium
698

Drag and drop each 802.1X component on the left to its matching role on the right.

Medium
699

Drag and drop the steps of TACACS+ command authorization flow into the correct order, from first to last.

Medium
700

What is the maximum hop count for EIGRP?

Easy
701

Drag and drop each cisco.ios module on the left to its matching purpose on the right.

Medium
702

Examine the following configuration snippet applied to a Cisco IOS-XE device: interface GigabitEthernet0/1 ip address 10.1.1.1 255.255.255.0 ip nat inside ! interface GigabitEthernet0/2 ip address 192.168.1.1 255.255.255.0 ip nat outside ! access-list 100 permit ip 10.1.1.0 0.0.0.255 any ip nat inside source list 100 interface GigabitEthernet0/2 overload What is the effect of this configuration?

Medium
703

Drag and drop the steps of named ACL modification using sequence numbers into the correct order, from first to last.

Medium
704

Drag and drop the steps of VRF-aware NAT configuration steps into the correct order, from first to last.

Medium
705

Drag and drop the steps of VNF service chain instantiation into the correct order, from first to last.

Medium
706

Drag and drop the steps of STP path cost manipulation for load balancing into the correct order, from first to last.

Medium
707

A service provider uses MPLS L3VPN with OSPF as the PE-CE routing protocol. A customer reports that a new subnet added on CE1 is not reachable from CE2, even though the PE1 router has the route in its VRF and BGP table. The 'show ip bgp vpnv4 vrf CUSTOMER' on PE2 shows the prefix with a valid next-hop. What should the engineer check next?

Hard
708

Which three statements about STP convergence and timers are true? (Choose three.)

Medium
709

Drag and drop the steps of IP SLA HTTP operation for application monitoring into the correct order, from first to last.

Medium
710

Drag and drop each security protocol on the left to its matching service on the right.

Medium
711

An engineer retrieves telemetry data from a Cisco IOS-XE device using RESTCONF and receives the following response: ```json { "ietf-interfaces:interfaces": { "interface": [ { "name": "GigabitEthernet1", "type": "iana-if-type:ethernetCsmacd", "enabled": true, "ipv4": { "address": [ { "ip": "192.168.1.1", "netmask": "255.255.255.0" } ] } } ] } } ``` What is the correct way to access the IP address of the interface using Python?

Medium
712

A network engineer runs the following command on Router R3: R3# show mpls ldp bindings lib entry: 10.1.1.1/32, rev 2 local binding: label: 16 remote binding: lsr: 10.1.1.2:0, label: 17 lib entry: 10.2.2.0/24, rev 4 local binding: label: 18 remote binding: lsr: 10.1.1.2:0, label: 19 lib entry: 10.3.3.0/24, rev 6 local binding: label: 20 remote binding: lsr: 10.1.1.2:0, label: 21 Based on this output, what is true?

Medium
713

Which two statements about PIM sparse mode (PIM-SM) are true? (Choose two.)

Medium
714

A network engineer is using the Cisco DNA Center API to initiate a network discovery. The API endpoint '/dna/intent/api/v1/discovery' is called with a POST request containing the following JSON payload: ```json { "discoveryType": "Range", "ipAddressList": "10.10.20.1-10.10.20.254", "protocolOrder": "SSH", "timeout": 5, "retryCount": 3 } ``` The API returns a 202 Accepted status code. What does this indicate?

Easy
715

Which two statements about using Python for network automation are true? (Choose two.)

Medium
716

Drag and drop the steps of IBNS 2.0 concurrent authentication policy map into the correct order, from first to last.

Medium
717

Drag and drop each STP protection feature on the left to its matching purpose on the right.

Medium
718

Which two statements about IPsec IKEv2 are true? (Choose two.)

Medium
719

Drag and drop each NAT type on the left to its matching description on the right.

Medium
720

Consider the following BGP configuration on a Cisco IOS-XE router: router bgp 65001 neighbor 10.0.0.2 remote-as 65002 neighbor 10.0.0.2 route-map SET_COMMUNITY out ! route-map SET_COMMUNITY permit 10 set community 65001:100 What is the effect of this configuration?

Medium
721

Which two statements about MPLS Layer 3 VPNs are true? (Choose two.)

Medium
722

Drag and drop each IP SLA tracking object on the left to its application on the right.

Medium
723

Drag and drop the steps of Private VLAN (PVLAN) configuration steps into the correct order, from first to last.

Medium
724

Which two statements about the Cisco FlexConnect architecture are true? (Choose two.)

Medium
725

Consider the following configuration for a Cisco IOS-XE device: interface GigabitEthernet0/0 ip address 192.168.1.1 255.255.255.0 standby 1 ip 192.168.1.254 standby 1 priority 150 standby 1 preempt ! interface GigabitEthernet0/1 ip address 192.168.2.1 255.255.255.0 standby 2 ip 192.168.2.254 standby 2 priority 100 What is the effect of this HSRP configuration?

Medium
726

Drag and drop each DMVPN phase on the left to its matching spoke-to-spoke capability on the right.

Hard
727

Drag and drop each PAgP port mode on the left to its matching negotiation behavior on the right.

Medium
728

Which three statements about IPv4 ACLs on Cisco IOS are true? (Choose three.)

Hard
729

Drag and drop the steps of Layer 3 EtherChannel (routed port-channel) setup into the correct order, from first to last.

Medium
730

Drag and drop the steps of troubleshooting a model-driven telemetry subscription using CLI into the correct order, from first to last.

Medium
731

Match each wireless standard to its frequency band and maximum data rate.

Medium
732

Drag and drop each VM network mode on the left to its matching behavior description on the right.

Medium
733

Drag and drop each WAN transport type on the left to its matching SD-WAN characteristic on the right.

Medium
734

Drag and drop each wireless AP mode on the left to its matching function on the right.

Medium
735

Match each Cisco IOS command to its function.

Medium
736

Drag and drop each EIGRP packet type on the left to its matching function on the right.

Medium
737

Which three statements about MPLS traffic engineering (MPLS-TE) are true? (Choose three.)

Hard
738

Which two statements about MPLS Layer 3 VPNs are true? (Choose two.)

Medium
739

Which TWO statements correctly describe characteristics of virtual device contexts (VDCs) in Cisco Nexus switches?

Easy
740

Drag and drop each VPN type on the left to its matching tunnel technology on the right.

Medium
741

Which two statements about Control Plane Policing (CoPP) are true? (Choose two.)

Medium
742

Drag and drop each network design tier on the left to its matching function on the right.

Medium
743

Drag and drop the steps of QoS policing with two-rate three-color marker (RFC 2698) into the correct order, from first to last.

Medium
744

Drag and drop the steps of REST API call using Requests library to DNA Center into the correct order, from first to last.

Medium
745

Drag and drop the steps of the TACACS+ authentication process into the correct order, from first to last.

Medium
746

Drag and drop each BGP attribute on the left to its matching type on the right.

Medium
747

Drag and drop the steps of DNA Center site hierarchy creation into the correct order, from first to last.

Medium
748

Drag and drop each DMVPN phase on the left to its matching NHRP operation type on the right.

Medium
749

Which two statements about EtherChannel load balancing are true? (Choose two.)

Medium
750

Drag and drop the steps of MPLS FRR (Fast Reroute) backup tunnel activation into the correct order, from first to last.

Medium
751

Which two statements about using Python for network automation with Cisco devices are true? (Choose two.)

Medium
752

Drag and drop each IGMP version on the left to its matching feature on the right.

Medium
753

Which two statements about OSPF neighbor states are true? (Choose two.)

Easy
754

Drag and drop each ERSPAN version on the left to its correct header format on the right.

Medium
755

Which two statements about Cisco TrustSec security group tags (SGTs) are true? (Choose two.)

Medium
756

Drag and drop the steps of YANG push periodic vs on-change subscription into the correct order, from first to last.

Medium
757

Drag and drop each IPsec mode on the left to its matching header usage on the right.

Medium
758

An architect is designing an SD-Access fabric for a campus that requires high availability. The design must ensure that if one fabric edge node fails, endpoints can be re-homed to another edge node without manual intervention. Which feature should be implemented?

Medium
759

Drag and drop the steps of using a Python REST API call to retrieve device configuration via Cisco DNA Center into the correct order, from first to last.

Medium
760

Drag and drop the steps of 802.11r Fast BSS Transition (FT) roaming steps into the correct order, from first to last.

Medium
761

Drag and drop the steps of using Ansible to push a new VLAN configuration to a Cisco IOS switch into the correct order, from first to last.

Medium
762

Which three statements about QoS trust boundaries and marking are true? (Choose three.)

Hard
763

Drag and drop the steps of SD-WAN policy creation and push via vManage into the correct order, from first to last.

Medium
764

Drag and drop each infrastructure hardening technique on the left to its matching configuration command on the right.

Medium
765

Drag and drop the steps of OpenConfig interface counters subscription and decode into the correct order, from first to last.

Medium
766

Drag and drop the steps of SPAN session on EtherChannel member ports into the correct order, from first to last.

Medium
767

Drag and drop the steps of IP SLA HTTP operation for application monitoring into the correct order, from first to last.

Medium
768

Match each network device to its primary function.

Medium
769

Match each Cisco switch security feature to its function.

Medium
770

Which three statements about IP SLA UDP jitter operation are true? (Choose three.)

Hard
771

Drag and drop the steps of CoPP class-map match criteria and rate-limit application into the correct order, from first to last.

Medium
772

Drag and drop the steps of Docker container networking with bridge mode into the correct order, from first to last.

Medium
773

Which two statements about SD-WAN control plane components are true? (Choose two.)

Medium
774

Drag and drop the steps of IP SLA DNS lookup operation setup into the correct order, from first to last.

Medium
775

A network engineer runs the following command on Router R1: R1# show ip eigrp neighbors detail EIGRP-IPv4 Neighbors for AS(100) H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 0 192.168.1.2 Gi0/0 13 00:12:34 12 100 0 45 Version 2.0/2.0, Retrans: 0, Retry: 0, Maxseq: 0 Prefixes: 3 Topology ids: 0 Authentication: None Topology: base (0x0) Based on this output, what can be concluded?

Hard
776

Drag and drop the steps of QoS policing with two-rate three-color marker (RFC 2698) into the correct order, from first to last.

Medium
777

An enterprise is deploying a virtual router (vRouter) as part of its NFV infrastructure. The engineer needs to ensure that the vRouter can handle a sudden spike in traffic without dropping packets. The vRouter is running on a KVM hypervisor. What should the engineer configure to guarantee CPU resources for the vRouter during peak demand?

Medium
778

Which two statements about IP Source Guard are true? (Choose two.)

Hard
779

Drag and drop each PPDIOO phase on the left to its matching activity on the right.

Medium
780

Drag and drop the steps of micro-segmentation via SGT policy application into the correct order, from first to last.

Medium
781

Drag and drop each SNMPv3 security level on the left to its matching protection description on the right.

Medium
782

Drag and drop each gRPC method on the left to its matching subscription type on the right.

Medium
783

Drag and drop the steps of the SD-Access fabric deployment sequence into the correct order, from first to last.

Medium
784

Match each First Hop Redundancy Protocol (FHRP) to its description.

Medium
785

Drag and drop the steps of EIGRP named mode configuration steps into the correct order, from first to last.

Medium
786

An enterprise is migrating from a traditional MPLS WAN to Cisco SD-WAN. The network team has deployed vEdge routers at all branch offices and a vSmart controller in the data center. The engineer configures a centralized control policy to influence path selection based on cost and latency. After the policy is activated, the engineer notices that some branches are not receiving the updated policy and are still using the default best-path selection. The vSmart is reachable from all branches, and the vEdge routers show that they are connected to the vSmart. What is the most likely reason for this issue?

Medium
787

Drag and drop the steps of SD-Access underlay provisioning via LAN Automation into the correct order, from first to last.

Medium
788

Drag and drop the steps of KVM VM provisioning via virsh CLI into the correct order, from first to last.

Medium
789

Drag and drop the steps of troubleshooting a failed EtherChannel bundle into the correct order, from first to last.

Hard
790

Drag and drop the steps of OSPF neighbor adjacency formation into the correct order, from first to last.

Medium
791

A network engineer is using the Cisco IOS-XE REST API to configure a static route. The engineer sends a PATCH request to 'https://device/restconf/data/Cisco-IOS-XE-native:native/ip/route/ip-route-interface-forwarding-list=192.168.1.0,255.255.255.0,GigabitEthernet1' with a JSON payload containing the route details. The device responds with a 204 No Content status. What does this response indicate?

Medium
792

What is the maximum hop count for EIGRP?

Easy
793

Drag and drop the steps of named ACL modification using sequence numbers into the correct order, from first to last.

Medium
794

Drag and drop the steps of IP SLA scheduling with frequency and lifetime into the correct order, from first to last.

Medium
795

A network team is using Ansible with the iosxr_config module to push configuration changes to a Cisco IOS-XR router. The playbook uses the REST API via the 'ansible_connection: restconf' setting. The engineer notices that the changes are applied but the playbook reports 'changed: false' even when changes were made. What is the most likely reason for this behavior?

Hard
796

Which three statements about NFV and its relationship with SDN are true? (Choose three.)

Hard
797

A network engineer configures SNMPv3 on a Cisco router with the following: 'snmp-server group GRP v3 priv', 'snmp-server user usr GRP v3 auth sha pass1 priv aes 128 pass2'. The NMS is configured with the same credentials. However, the NMS cannot perform SNMP walks. The engineer notices that the router's SNMP agent is responding to queries from other devices. What is the most likely cause?

Hard
798

Which three statements about FlexVPN are true? (Choose three.)

Medium
799

Drag and drop each Layer 2 attack on the left to its matching mitigation feature on the right.

Medium
800

Drag and drop each Ansible connection type on the left to its matching protocol on the right.

Medium
801

Drag and drop the steps of DNA Center network discovery and device sync into the correct order, from first to last.

Medium
802

A network engineer executes the following command on Router R2: R2# show ip sla configuration 1 IP SLAs Infrastructure Engine-II Entry number: 1 Owner: admin Tag: Type of operation to perform: icmp-echo Target address: 192.168.2.10 Source address: 192.168.2.1 Type Of Service parameter: 0x0 Request size (ARR data portion): 28 Operation timeout (milliseconds): 5000 Frequency (seconds): 60 Next Scheduled Start Time: Start Time already passed Group Scheduled : FALSE Life (seconds): Forever Entry Ageout (seconds): never Recurring (Starting Everyday, Starting Time: 00:00:01) Status of entry (SNMP RowStatus): Active Threshold (milliseconds): 5000 Distribution Statistics: Number of statistic hours kept: 2 Number of statistic distribution buckets kept: 1 Statistic distribution interval (milliseconds): 20 Enhanced History: Based on this output, what is the frequency of the IP SLA operation?

Easy
803

Drag and drop the steps of OSPF virtual link configuration across area 0 into the correct order, from first to last.

Medium
804

Drag and drop each AAA method list type on the left to its correct fallback order (from first to last) on the right.

Hard
805

Consider the following configuration snippet from a Cisco IOS-XE router: router eigrp 100 network 10.0.0.0 network 192.168.1.0 passive-interface default no passive-interface GigabitEthernet0/0 What is the effect of the passive-interface commands?

Medium
806

Drag and drop each EIGRP timer on the left to its matching default value on the right.

Medium
807

Drag and drop the steps of SNMPv3 authentication and privacy negotiation into the correct order, from first to last.

Medium
808

Which two statements about MPLS VPN (Layer 3 VPN) are true? (Choose two.)

Medium
809

An Ansible playbook uses the cisco.dnac.site module to create a new building site. The playbook is: - name: Create building site cisco.dnac.site: host: "{{ dnac_host }}" username: "{{ dnac_username }}" password: "{{ dnac_password }}" validate_certs: no state: present site: name: Building-B type: building parentName: Area-1 address: "123 Main St" latitude: 37.7749 longitude: -122.4194 register: result What is the purpose of the 'parentName' parameter?

Medium
810

Drag and drop each IP SLA reaction action on the left to its corresponding behavior on the right.

Medium
811

Drag and drop the steps of RSPAN VLAN propagation across trunk links into the correct order, from first to last.

Medium
812

What is the maximum hop count for EIGRP?

Easy
813

Drag and drop the steps of the DiffServ traffic classification and marking pipeline into the correct order, from first to last.

Medium
814

Drag and drop each VLAN range on the left to its matching type on the right.

Medium
815

Which three statements about telemetry data collection methods are true? (Choose three.)

Hard
816

Drag and drop the steps of multicast RP discovery using Auto-RP into the correct order, from first to last.

Medium
817

Which two statements about NAT configuration on Cisco IOS routers are true? (Choose two.)

Medium
818

Drag and drop the steps of VNF life cycle management into the correct order, from first to last.

Medium
819

Drag and drop the steps of ISE RADIUS policy evaluation order into the correct order, from first to last.

Medium
820

Drag and drop each telemetry protocol on the left to its matching transport on the right.

Medium
821

Which two statements about EIGRP feasible successors are true? (Choose two.)

Medium
822

Drag and drop each SD-WAN plane on the left to its matching function on the right.

Medium
823

Drag and drop each streaming telemetry mode on the left to its matching trigger on the right.

Medium
824

Drag and drop each telemetry protocol on the left to its matching transport on the right.

Medium
825

Drag and drop the steps of MP-BGP VPNv4 route advertisement between PE routers into the correct order, from first to last.

Medium
826

Drag and drop each EtherChannel protocol on the left to its matching vendor on the right.

Medium
827

Consider the following SD-WAN device configuration on a Cisco IOS-XE router: sdwan interface GigabitEthernet0/0/1 tunnel-interface encapsulation ipsec color public-internet allow-service all ! interface GigabitEthernet0/0/2 tunnel-interface encapsulation ipsec color 3g allow-service all ! Which statement about this configuration is true?

Medium
828

An engineer creates an Ansible playbook to configure model-driven telemetry on a Cisco IOS-XE device: ```yaml --- - name: Configure MDT subscription hosts: ios_xe gather_facts: no tasks: - name: Configure telemetry receiver cisco.ios.ios_config: lines: - telemetry ietf subscription 101 - receiver ip address 10.10.10.10 port 57500 protocol grpc-tcp - encoding encode-kvgpb - filter xpath /interfaces/interface/state/counters - update-policy periodic 5000 ``` What is the problem with this playbook?

Hard
829

Which three statements about Ansible playbooks are true? (Choose three.)

Hard
830

Drag and drop each DHCP option on the left to its matching purpose on the right.

Medium
831

Drag and drop the steps of DNA Center assurance issue detection and root cause analysis into the correct order, from first to last.

Medium
832

Drag and drop the steps of Cisco TrustSec inline tagging across fabric into the correct order, from first to last.

Medium
833

Drag and drop each IP SLA reaction on the left to its action on the right.

Medium
834

Drag and drop the steps of DHCP failover configuration between primary and standby into the correct order, from first to last.

Medium
835

Drag and drop the steps of the QoS shaping and policing configuration sequence into the correct order, from first to last.

Medium
836

Which two statements about BGP neighbor states are true? (Choose two.)

Easy
837

Which two statements about VRF configuration in Cisco IOS-XE are true? (Choose two.)

Medium
838

Which two statements about IGMP snooping are true? (Choose two.)

Medium
839

Drag and drop each LDP message type on the left to its matching function on the right.

Medium
840

Drag and drop the steps of LACP active/passive mode negotiation into the correct order, from first to last.

Medium
841

Drag and drop each DNA Center ISE integration component on the left to its matching role on the right.

Medium
842

Drag and drop each Ansible task return value on the left to its matching meaning on the right.

Medium
843

Drag and drop the steps of OMP route advertisement between vSmart and vEdge into the correct order, from first to last.

Medium
844

What is the maximum hop count for EIGRP?

Medium
845

Consider the following SPAN configuration on a Cisco IOS-XE switch: monitor session 2 source interface GigabitEthernet1/0/3 rx monitor session 2 destination interface GigabitEthernet1/0/4 What is the effect of this configuration?

Medium
846

Drag and drop the steps of PAgP EtherChannel negotiation steps into the correct order, from first to last.

Medium
847

An engineer is using the Cisco IOS-XE RESTCONF API to create a new loopback interface. The following JSON payload is sent in a POST request to '/restconf/data/ietf-interfaces:interfaces': ```json { "ietf-interfaces:interface": [ { "name": "Loopback100", "description": "Management Loopback", "type": "iana-if-type:softwareLoopback", "enabled": true, "ietf-ip:ipv4": { "address": [ { "ip": "192.168.1.1", "netmask": "255.255.255.0" } ] } } ] } ``` What is the correct HTTP method and URL for this operation?

Medium
848

Drag and drop the steps of IP SLA tracking with static route failover into the correct order, from first to last.

Medium
849

Drag and drop the steps of IP SLA tracking with static route failover into the correct order, from first to last.

Medium
850

Drag and drop each DHCPv6 mode on the left to its matching address assignment method on the right.

Medium
851

Drag and drop the steps of 4G/LTE WAN failover with IP SLA tracking into the correct order, from first to last.

Medium
852

Drag and drop the steps of ERSPAN (Encapsulated RSPAN) session configuration into the correct order, from first to last.

Medium
853

Which two statements about OSPF neighbor states are true? (Choose two.)

Medium
854

A network architect is designing a campus network for a large university with 10,000+ users. The design must provide high availability, minimize failure domains, and allow for easy scaling of the access layer. The core layer should be resilient and support fast convergence. Which hierarchical design model best meets these requirements?

Medium
855

Drag and drop each EIGRP metric component on the left to its matching K variable on the right.

Medium
856

Drag and drop the steps of TrustSec SGT classification and enforcement into the correct order, from first to last.

Medium
857

Drag and drop each telemetry encoding on the left to its matching format on the right.

Medium
858

Drag and drop each SGT value range on the left to its matching policy type on the right.

Medium
859

Drag and drop the steps of EIGRP variance-based unequal-cost load balancing into the correct order, from first to last.

Medium
860

Drag and drop the steps of REST API call using Requests library to DNA Center into the correct order, from first to last.

Medium
861

Drag and drop each NAT terminology on the left to its matching definition on the right.

Medium
862

Drag and drop the steps of FlexVPN spoke-to-spoke dynamic tunnel creation into the correct order, from first to last.

Medium
863

Drag and drop the steps of VNF scaling up and scaling out into the correct order, from first to last.

Medium
864

Drag and drop each DNA Center API category on the left to its matching endpoint group on the right.

Medium
865

Which two statements about Ansible inventory files are true? (Choose two.)

Medium
866

Drag and drop each DMVPN phase on the left to its matching NHRP operation type on the right.

Medium
867

Drag and drop the steps of Hierarchical QoS (H-QoS) parent/child policy steps into the correct order, from first to last.

Medium
868

Drag and drop the steps of IP Source Guard binding and enforcement into the correct order, from first to last.

Medium
869

Which two statements about NFV performance considerations are true? (Choose two.)

Medium
870

Drag and drop each OSPF router role on the left to its matching function on the right.

Medium
871

Which three statements about Ansible modules for Cisco IOS-XE are true? (Choose three.)

Hard
872

Drag and drop the steps of Wireless client IP address assignment via DHCP bridging into the correct order, from first to last.

Medium
873

Which two statements about Cisco SD-Access fabric wireless integration are true? (Choose two.)

Medium
874

Drag and drop the steps of ACL reflexive access list (dynamic inspection) flow into the correct order, from first to last.

Medium
875

Drag and drop each OSPF network type on the left to its matching DR election behavior on the right.

Medium
876

Drag and drop each authentication mode on the left to its matching behavior on the right.

Medium
877

Consider the following partial configuration for QoS on a Cisco IOS-XE router: class-map match-all VOICE match ip dscp ef ! policy-map QOS_POLICY class VOICE priority 1000 class class-default fair-queue ! interface GigabitEthernet0/0 service-policy output QOS_POLICY What is the effect of the 'priority 1000' command under class VOICE?

Medium
878

Drag and drop the steps of EIGRP DUAL route computation into the correct order, from first to last.

Medium
879

Drag and drop the steps of DSCP-to-CoS mapping at LAN boundary into the correct order, from first to last.

Medium
880

Which two statements about DTP (Dynamic Trunking Protocol) are true? (Choose two.)

Medium
881

Drag and drop the steps of DMVPN Phase 3 spoke-to-spoke shortcut creation into the correct order, from first to last.

Medium
882

Which three statements about RSPAN are true? (Choose three.)

Hard
883

Drag and drop the steps of Wireless client IP address assignment via DHCP bridging into the correct order, from first to last.

Medium
884

Examine the following partial Cisco IOS-XE configuration: interface GigabitEthernet0/1 switchport mode access switchport access vlan 10 ip access-group ACL_IN in spanning-tree portfast What is the effect of this configuration?

Medium
885

Drag and drop the steps of adding a new VLAN to a trunk link into the correct order, from first to last.

Medium
886

Drag and drop each congestion avoidance mechanism on the left to its method on the right.

Medium
887

Drag and drop each SPAN type on the left to its correct scope description on the right.

Medium
888

Drag and drop the steps of IP SLA with threshold and reaction configuration into the correct order, from first to last.

Medium
889

In BGP best path selection, which of the following is compared first?

Medium
890

Which three statements about Cisco TrustSec SGT propagation and enforcement are true? (Choose three.)

Hard
891

Drag and drop each YANG module on the left to its matching data category on the right.

Medium
892

Drag and drop each container technology on the left to its matching orchestration tool on the right.

Medium
893

Which two statements about EtherChannel load balancing are true? (Choose two.)

Medium
894

Drag and drop each RESTCONF method on the left to its equivalent NETCONF operation on the right.

Hard
895

Drag and drop the steps of STP portfast and BPDU guard configuration into the correct order, from first to last.

Medium
896

Drag and drop the steps of Syslog severity filtering and rate-limiting configuration into the correct order, from first to last.

Medium
897

Drag and drop each IP SLA operation type on the left to its measured metric on the right.

Medium
898

Drag and drop the steps of Ansible Vault encryption and decryption steps into the correct order, from first to last.

Medium
899

Which two statements about the Cisco QoS trust boundary are true? (Choose two.)

Medium
900

Drag and drop each STP port state on the left to its matching function on the right.

Medium
901

Drag and drop each PIM mode on the left to its matching traffic distribution method on the right.

Medium
902

A company is virtualizing its network functions using NFV on a KVM-based hypervisor. The design must ensure that the virtual router (CSR1000v) can handle high-throughput traffic with minimal latency. Which architectural consideration is most critical for achieving this goal?

Medium
903

Drag and drop the steps of VRF import/export route-target policy flow into the correct order, from first to last.

Medium
904

Drag and drop the steps of traffic shaping vs policing configuration steps into the correct order, from first to last.

Medium
905

Drag and drop the steps of TrustSec SGT assignment and propagation via SXP into the correct order, from first to last.

Medium
906

What is the default OSPF hello interval on a broadcast multi-access network (e.g., Ethernet)?

Easy
907

Which three statements about SD-WAN overlay tunnels and transport are true? (Choose three.)

Hard
908

Consider the following configuration snippet: interface Port-channel1 switchport mode trunk switchport trunk allowed vlan 10,20,30 ! interface GigabitEthernet0/1 channel-group 1 mode active ! interface GigabitEthernet0/2 channel-group 1 mode passive What is the effect of this configuration?

Medium
909

Drag and drop the steps of ISE profiling-based dynamic ACL assignment into the correct order, from first to last.

Medium
910

Drag and drop each WAN technology on the left to its matching OSI layer on the right.

Medium
911

Drag and drop the steps of DNA Center network discovery and device sync into the correct order, from first to last.

Medium
912

Drag and drop each traffic direction on the left to the correct SPAN keyword used to monitor it on the right.

Medium
913

Which of the following is a valid VLAN range that can be created on a Cisco IOS switch?

Easy
914

Which three statements about Cisco SD-WAN security and segmentation are true? (Choose three.)

Medium
915

Which two statements about BGP path attributes are true? (Choose two.)

Medium
916

Drag and drop the steps of troubleshooting a failed RSPAN session into the correct order, from first to last.

Medium
917

Which three statements about syslog message severity levels are correct? (Choose three.)

Medium
918

Drag and drop the steps of EIGRP route summarization configuration into the correct order, from first to last.

Medium
919

Drag and drop each MQC component on the left to its matching role on the right.

Medium
920

A network engineer runs the following command on Switch SW2: SW2# show spanning-tree vlan 20 VLAN0020 Spanning tree enabled protocol ieee Root ID Priority 24596 Address aabb.cc00.0200 Cost 4 Port 1 (GigabitEthernet0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32778 (priority 32768 sys-id-ext 20) Address aabb.cc00.0300 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec Interface Role Sts Cost Prio.Nbr Type ------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Root FWD 4 128.1 P2p Gi0/2 Desg FWD 4 128.2 P2p Gi0/3 Altn BLK 4 128.3 P2p Based on this output, what can be concluded?

Medium
921

Which statement correctly describes the difference between RADIUS and TACACS+?

Medium
922

Drag and drop the steps of RSPAN session configuration and traffic flow into the correct order, from first to last.

Medium
923

spanning-tree mode rapid-pvst What is the effect of this global configuration command?

Medium
924

Drag and drop the steps of LDP session establishment between LSRs into the correct order, from first to last.

Medium
925

A network engineer is configuring model-driven telemetry on a Cisco IOS-XE router to stream CPU and memory statistics to a collector. The engineer wants to use the YANG model 'Cisco-IOS-XE-process-cpu-oper' and 'Cisco-IOS-XE-memory-oper'. After configuring the telemetry subscription, the engineer notices that no data is being received at the collector. The collector is reachable and the gRPC dial-out is configured correctly. What is the most likely cause of the issue?

Hard
926

Drag and drop each flow record field on the left to its matching category (key or non-key) on the right.

Medium
927

Which three statements about model-driven telemetry are true? (Choose three.)

Hard
928

Drag and drop the steps of DNA Center SWIM (Software Image Management) upgrade flow into the correct order, from first to last.

Medium
929

Drag and drop the steps of AAA accounting for command logging setup into the correct order, from first to last.

Medium
930

A network engineer is troubleshooting an issue where Cisco DNA Center is not sending configuration changes to a group of switches. The engineer checks the Provisioning dashboard and sees that the devices are in 'Pending' state. The engineer has already created the intent (network profile) and assigned it to the site. What is the most likely cause?

Hard
931

Which three statements about LDP (Label Distribution Protocol) are true? (Choose three.)

Hard
932

Which two statements about using Python for configuration management and templating in network automation are true? (Choose two.)

Medium
933

Given the following configuration on a Cisco IOS-XE device: router ospf 1 network 10.0.0.0 0.255.255.255 area 0 ! interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 ip ospf cost 10 ! interface GigabitEthernet0/1 ip address 10.2.2.1 255.255.255.0 ! Which statement is true about OSPF operation?

Medium
934

A network engineer writes the following Python script to collect telemetry data from a Cisco IOS-XE device using NETCONF: ```python from ncclient import manager m = manager.connect( host='192.168.1.1', port=830, username='admin', password='cisco', hostkey_verify=False ) filter = ''' <filter xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"> <interfaces xmlns="http://openconfig.net/yang/interfaces"> <interface> <name>GigabitEthernet1</name> </interface> </interfaces> </filter> ''' reply = m.get(filter=('subtree', filter)) print(reply.xml) m.close_session() ``` What is the issue with this code?

Medium
935

Drag and drop the steps of WLC high availability SSO failover steps into the correct order, from first to last.

Medium
936

Which two statements about virtual machine migration (vMotion/VMware) or live migration (Hyper-V) are true? (Choose two.)

Medium
937

Drag and drop the steps of NAT overload (PAT) packet translation process into the correct order, from first to last.

Medium
938

A network engineer uses the following Python code to subscribe to telemetry data from a Cisco IOS-XE device via NETCONF using the YANG module 'Cisco-IOS-XE-mdt-oper': ```python from ncclient import manager m = manager.connect( host='192.168.1.1', port=830, username='admin', password='cisco', hostkey_verify=False ) # Create a telemetry subscription subscription = ''' <config> <mdt-config-data xmlns="http://cisco.com/ns/yang/Cisco-IOS-XE-mdt-cfg"> <mdt-subscription> <subscription-id>400</subscription-id> <base> <stream>yang-push</stream> <encoding>encode-kvgpb</encoding> <period>5000</period> <xpath>/interfaces/interface/state/counters</xpath> </base> <mdt-receivers> <address>10.1.1.100</address> <port>50051</port> <protocol>grpc-tcp</protocol> </mdt-receivers> </mdt-subscription> </mdt-config-data> </config> ''' reply = m.edit_config(target='running', config=subscription) print(reply.xml) m.close_session() ``` What is the issue with this code?

Hard
939

Drag and drop each Cisco security feature on the left to its matching OSI layer on the right.

Medium
940

Which two statements about VRF-lite configuration are true? (Choose two.)

Easy
941

Drag and drop each YANG statement on the left to its matching function on the right.

Medium
942

Which three statements about encoding formats in model-driven telemetry are true? (Choose three.)

Hard
943

A network engineer runs the following command on Router R5: R5# show ip ospf border-routers OSPF Process 1 internal Routing Table Codes: i - Intra-area route, I - Inter-area route i 1.1.1.1 [110/10] via 192.168.1.1, GigabitEthernet0/0, ABR, Area 0, SPF 5 i 2.2.2.2 [110/20] via 192.168.1.2, GigabitEthernet0/0, ASBR, Area 0, SPF 5 Based on this output, what can be concluded?

Medium
944

Drag and drop the steps of WLC high availability SSO failover steps into the correct order, from first to last.

Medium
945

Which two statements about OSPF network types are true? (Choose two.)

Medium
946

Drag and drop the steps of IGMPv3 membership report processing into the correct order, from first to last.

Medium
947

Drag and drop each SNMP operation on the left to its matching direction on the right.

Medium
948

Which three statements about MPLS forwarding are true? (Choose three.)

Hard
949

An engineer is troubleshooting an EIGRP issue where a router is not learning a specific route from a neighbor. The engineer runs 'show ip eigrp topology all-links' and sees the route in the topology table with a feasible distance of 100 and a reported distance of 120. The neighbor's advertised distance is 80. The router's own computed distance to the network is 150. The route is not in the routing table. What is the most likely cause?

Hard
950

Drag and drop the steps of configuring LLQ (Low Latency Queuing) on a Cisco router into the correct order, from first to last.

Medium
951

Drag and drop the steps of VLAN mapping on trunk interfaces into the correct order, from first to last.

Medium
952

Which three statements about OSPF area types are correct? (Choose three.)

Hard
953

Drag and drop each TACACS+ packet type on the left to its correct function on the right.

Medium
954

A network engineer is deploying Cisco DNA Center in a large campus network with 5000+ devices. After initial setup, the engineer notices that the Assurance module is not receiving telemetry data from many access switches. The switches are running IOS-XE 16.12 and are reachable via SNMP. What is the most likely cause of this issue?

Medium
955

Which three statements about SNMP trap and inform operations are true? (Choose three.)

Hard
956

Drag and drop the steps of IP addressing scheme design and subnetting steps into the correct order, from first to last.

Medium
957

Drag and drop the steps of Multiple SPAN source ports with filter VLAN into the correct order, from first to last.

Medium
958

Which TWO statements are true about Cisco DNA Center automation? (Choose two.)

Easy
959

Examine the following configuration: policy-map QUEUE class GOLD bandwidth percent 25 queue-limit 64 packets class SILVER bandwidth percent 25 queue-limit 128 packets class class-default fair-queue interface GigabitEthernet0/2 service-policy output QUEUE Which statement about this configuration is true?

Medium
960

Drag and drop each hypervisor type on the left to its matching characteristic on the right.

Medium
961

Which two statements about SNMPv3 security models are true? (Choose two.)

Medium
962

Drag and drop each ACL type on the left to its matching capability on the right.

Medium
963

Drag and drop the steps of Layer 3 EtherChannel (routed port-channel) setup into the correct order, from first to last.

Medium
964

Drag and drop the steps of MSDP peering for inter-domain multicast into the correct order, from first to last.

Medium
965

Drag and drop each ISE policy result on the left to its matching enforcement action on the right.

Hard
966

Drag and drop the steps of LACP EtherChannel negotiation and bundle formation into the correct order, from first to last.

Medium
967

Drag and drop the steps of telemetry path validation using YANG DevKit into the correct order, from first to last.

Medium
968

Drag and drop each VNF category on the left to its matching example on the right.

Easy
969

Drag and drop the steps of a RESTCONF PUT transaction on IOS-XE into the correct order, from first to last.

Medium
970

Drag and drop the steps of DMVPN Phase 2 NHRP resolution process into the correct order, from first to last.

Medium
971

Drag and drop each EIGRP DUAL state on the left to its matching stage on the right.

Medium
972

Which two statements about Cisco FlexConnect are true? (Choose two.)

Medium
973

Drag and drop the steps of ISE RADIUS policy evaluation order into the correct order, from first to last.

Medium
974

Which three statements about NFV use cases and deployment models are true? (Choose three.)

Easy
975

Which three statements about error handling and debugging in Python network automation scripts are true? (Choose three.)

Hard
976

Drag and drop the steps of the RADIUS authentication process into the correct order, from first to last.

Medium
977

Drag and drop the steps of EIGRP neighbor establishment into the correct order, from first to last.

Medium
978

Drag and drop the steps of sFlow agent sampling and forwarding steps into the correct order, from first to last.

Medium
979

Drag and drop each DNA Center package on the left to its matching function on the right.

Medium
980

Drag and drop the steps of Netmiko multi-threaded device polling workflow into the correct order, from first to last.

Medium
981

A network engineer configures SNMPv2c on a Cisco switch to send traps to an NMS at 192.168.1.100 with community 'monitor'. The engineer also configures 'snmp-server enable traps snmp linkdown linkup'. The NMS receives link traps but not authentication failure traps. The engineer has not configured any access control. What is the most likely reason?

Medium
982

Which two statements about SNMP MIB objects and OIDs are true? (Choose two.)

Medium
983

Drag and drop each telemetry model on the left to its matching push type (dial-in or dial-out) on the right.

Medium
984

Drag and drop the steps of PIM-SM join and source registration into the correct order, from first to last.

Medium
985

Which two statements about telemetry subscription modes are true? (Choose two.)

Medium
986

Drag and drop the steps of DNA Center assurance issue detection and root cause into the correct order, from first to last.

Medium
987

Which three statements about RSPAN configuration and behavior are true? (Choose three.)

Medium
988

Drag and drop the steps of BFD session establishment for path liveliness into the correct order, from first to last.

Medium
989

Drag and drop the steps of MAB (MAC Authentication Bypass) fallback flow into the correct order, from first to last.

Medium
990

Drag and drop each STP timer on the left to its matching default value on the right.

Medium
991

Drag and drop each VM network mode on the left to its matching behavior on the right.

Medium
992

Drag and drop the steps of iBGP route reflection configuration steps into the correct order, from first to last.

Medium
993

Which two statements about EIGRP feasible successors are true? (Choose two.)

Medium
994

Which three statements about IP SLA threshold configuration and reaction are true? (Choose three.)

Hard
995

Drag and drop the steps of the hierarchical campus network design process into the correct order, from first to last.

Medium
996

What is the default OSPF hello interval on an Ethernet link?

Easy
997

Drag and drop the steps of LACP active/passive mode negotiation into the correct order, from first to last.

Medium
998

An architect is designing an SD-Access fabric for a campus with multiple buildings. The design must support wireless clients seamlessly roaming across fabric edge nodes. Which technology is used in the fabric to provide mobility for wireless endpoints?

Medium
999

Drag and drop each IPv6 ACL feature on the left to its matching IPv4 ACL equivalent on the right.

Hard
1000

A network engineer writes the following Python script to retrieve the list of devices from Cisco DNA Center using the REST API: import requests import json url = "https://dna-center.local/dna/intent/api/v1/network-device" headers = { "Content-Type": "application/json", "X-Auth-Token": "valid-token-here" } response = requests.get(url, headers=headers, verify=False) if response.status_code == 200: devices = response.json() for device in devices["response"]: print(device["hostname"]) else: print("Error:", response.status_code) What is the issue with this code?

Medium
1001

Drag and drop each OSPF LSA type on the left to its matching description on the right.

Medium
1002

Drag and drop the steps of the 802.11 client association process into the correct order, from first to last.

Medium
1003

Drag and drop the steps of Syslog severity filtering and rate-limiting configuration into the correct order, from first to last.

Medium
1004

Which two statements about VLAN configuration and verification are true? (Choose two.)

Hard
1005

Drag and drop each Python library on the left to its matching network use case on the right.

Medium
1006

Drag and drop each WAN topology type on the left to its matching characteristic on the right.

Medium
1007

Examine the following configuration for a Cisco IOS-XE device: interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.252 ipv6 address 2001:db8::1/64 ipv6 ospf 1 area 0 ! interface GigabitEthernet0/1 ip address 192.168.1.1 255.255.255.0 ipv6 address 2001:db8:1::1/64 ipv6 ospf 1 area 0 ! ipv6 router ospf 1 router-id 2.2.2.2 Which statement is true about OSPFv3 operation?

Medium
1008

Which three statements about EIGRP route summarization are true? (Choose three.)

Hard
1009

Which BGP attribute is preferred when it has the lowest value?

Easy
1010

Drag and drop each WAN encapsulation on the left to its matching use case on the right.

Medium
1011

An engineer is using a Python script to configure a new VLAN on a Cisco Nexus 9000 switch using the NX-API REST API. The script sends a POST request to 'https://switch/api/mo/org.json' with a JSON payload containing the VLAN configuration. The switch responds with a 403 Forbidden error. What is the most likely cause?

Medium
1012

Drag and drop each EIGRP state on the left to its matching DUAL stage on the right.

Medium
1013

Drag and drop each Control plane protection feature on the left to its matching threat on the right.

Medium
1014

A data center uses Cisco Nexus 9000 switches with VXLAN EVPN to provide network virtualization. The operations team notices that VLAN 100 (mapped to VNI 10100) is not reachable across the fabric, although other VLANs work fine. The NVE interface is up, and the EVPN address-family is configured. Which two actions should the engineer take to isolate the issue?

Hard
1015

Drag and drop each LACP port mode on the left to its matching negotiation behavior on the right.

Medium
1016

Drag and drop each Cisco security feature on the left to its matching OSI layer on the right.

Medium
1017

Match each QoS feature to its description.

Medium
1018

Drag and drop the steps of ERSPAN (Encapsulated RSPAN) session configuration into the correct order, from first to last.

Medium
1019

Drag and drop each EIGRP packet type on the left to its matching function on the right.

Medium
1020

Drag and drop the steps of EtherChannel load-balancing hash configuration into the correct order, from first to last.

Medium
1021

Which two statements about Ansible automation in a Cisco environment are true? (Choose two.)

Medium
1022

Drag and drop the steps of SD-Access fabric border node configuration steps into the correct order, from first to last.

Medium
1023

What is the default update interval for a Cisco IOS-XE telemetry subscription when using update-policy periodic without specifying a value?

Easy
1024

Drag and drop the steps of SNMPv3 secure agent configuration into the correct order, from first to last.

Hard
1025

Which three statements about using Python for device inventory and data serialization in network automation are true? (Choose three.)

Hard
1026

Drag and drop each HTTP status code on the left to its meaning on the right.

Easy
1027

Drag and drop each IP SLA operation type on the left to its measured metric on the right.

Medium
1028

Drag and drop each IGMP version on the left to its matching feature on the right.

Medium
1029

Drag and drop the steps of MPLS FRR (Fast Reroute) backup tunnel activation into the correct order, from first to last.

Medium
1030

Drag and drop the steps of OSPFv3 IPv6 neighbor adjacency formation into the correct order, from first to last.

Medium
1031

A network engineer is implementing model-driven telemetry on a Cisco Nexus 9000 switch to monitor VLAN and STP changes. The engineer wants to use the native telemetry protocol with UDP as the transport. After configuring the telemetry subscription with the 'destination-group' and 'sensor-group', the engineer notices that the collector is not receiving any data. The collector is reachable and the UDP port is open. What is the most likely missing configuration?

Hard
1032

Drag and drop the steps of BGP confederations setup between sub-ASes into the correct order, from first to last.

Medium
1033

Which two statements about the 'ip access-group' command are true? (Choose two.)

Easy
1034

Drag and drop each OSPF router role on the left to its matching function on the right.

Medium
1035

Drag and drop the steps of PIM DM (Dense Mode) flood and prune steps into the correct order, from first to last.

Medium
1036

Which two statements about EIGRP stub routing are true? (Choose two.)

Medium
1037

Which two statements about NetFlow are true? (Choose two.)

Medium
1038

Which two statements about local AAA and fallback methods are true? (Choose two.)

Easy
1039

Drag and drop each NetFlow version on the left to its matching feature on the right.

Medium
1040

Drag and drop the steps of Cisco DNA Center device onboarding via PnP into the correct order, from first to last.

Medium
1041

Which two statements about NetFlow flow records and export are correct? (Choose two.)

Easy
1042

Drag and drop the steps of disaster recovery failover process into the correct order, from first to last.

Medium
1043

Drag and drop the steps of streaming telemetry sensor path subscription flow into the correct order, from first to last.

Medium
1044

Drag and drop the steps of OSPF SPF calculation steps (Dijkstra) into the correct order, from first to last.

Medium
1045

Drag and drop each SPAN type on the left to its correct scope description on the right.

Medium
1046

Which three statements about virtual machine (VM) resource allocation and overcommitment are true? (Choose three.)

Hard
1047

Drag and drop the steps of configuring a Layer 2 EtherChannel using PAgP into the correct order, from first to last.

Medium
1048

A network engineer issues the following command on Router R4: R4# show ip ospf database OSPF Router with ID (4.4.4.4) (Process ID 1) Router Link States (Area 0) Link ID ADV Router Age Seq# Checksum Link count 1.1.1.1 1.1.1.1 123 0x80000002 0x00A1B2 2 2.2.2.2 2.2.2.2 456 0x80000003 0x00B2C3 3 4.4.4.4 4.4.4.4 789 0x80000001 0x00C3D4 1 Net Link States (Area 0) Link ID ADV Router Age Seq# Checksum 192.168.1.2 2.2.2.2 234 0x80000001 0x00D4E5 Based on this output, what can be concluded?

Hard
1049

Which of the following are requirements of an RSPAN VLAN? (Select all that apply.)

Medium
1050

Examine the following HSRP configuration on a Cisco IOS-XE switch: interface Vlan10 ip address 10.0.0.2 255.255.255.0 standby 10 ip 10.0.0.1 standby 10 priority 150 standby 10 preempt What is the effect of the 'standby 10 preempt' command?

Medium
1051

Which three statements about Multiple Spanning Tree Protocol (MSTP) are true? (Choose three.)

Hard
1052

Drag and drop each PIM message type on the left to its matching function on the right.

Medium
1053

Drag and drop the steps of uRPF (Unicast Reverse Path Forwarding) verification into the correct order, from first to last.

Medium
1054

A network engineer runs the following command on Switch SW1: SW1# show dtp interface gi0/1 DTP information on GigabitEthernet0/1: DTP: Enabled DTP mode: Desirable DTP negotiate: TRUE DTP status: Trunk DTP trunk status: Trunking DTP timer: 30 DTP max-age: 2 DTP encapsulation: 802.1q DTP refresh rate: Both DTP requests: 10 DTP errors: 0 Based on this output, what can be concluded?

Medium
1055

Drag and drop the steps of RADIUS CoA (Change of Authorization) message flow into the correct order, from first to last.

Medium
1056

Which two statements about Flexible NetFlow are true? (Choose two.)

Medium
1057

Drag and drop the steps of MPLS traffic engineering (MPLS-TE) tunnel setup into the correct order, from first to last.

Medium
1058

Drag and drop the steps of configuring an IP SLA UDP jitter operation into the correct order, from first to last.

Medium
1059

Drag and drop each IP SLA tracking object on the left to its application on the right.

Medium
1060

Which three statements about SSL VPNs are true? (Choose three.)

Easy
1061

Drag and drop each traffic shaping or policing characteristic on the left to its matching description on the right.

Medium
1062

Which four statements about VXLAN encapsulation in Cisco SD-Access are true? (Choose four.)

Hard
1063

Drag and drop each QoS model on the left to its matching characteristic on the right.

Medium
1064

Drag and drop the steps of DNA Center template deployment to a device into the correct order, from first to last.

Medium
1065

Drag and drop the steps of SR-IOV configuration for VM network bypass into the correct order, from first to last.

Medium
1066

Drag and drop each 802.11 standard on the left to its matching frequency band and maximum data rate on the right.

Medium
1067

Drag and drop each IKEv2 exchange on the left to its matching phase on the right.

Medium
1068

Drag and drop the steps of Docker container networking with bridge mode into the correct order, from first to last.

Medium
1069

Drag and drop the steps of FlexVPN IKEv2 spoke registration to hub into the correct order, from first to last.

Medium
1070

Which three statements about Ansible playbooks and roles are true? (Choose three.)

Hard
1071

Drag and drop each MQC command on the left to its configuration level on the right.

Medium
1072

A network engineer runs the following command on Router R1: R1# show bgp ipv4 unicast 10.10.10.0 BGP routing table entry for 10.10.10.0/24, version 20 Paths: (2 available, best #1, table default) Advertised to update-groups: 1 Refresh Epoch 1 65050 65100 10.0.1.2 from 10.0.1.2 (10.0.0.2) Origin IGP, metric 0, localpref 100, weight 0, valid, external, best rx pathid: 0, tx pathid: 0x0 65050 65100 65200 10.0.1.3 from 10.0.1.3 (10.0.0.3) Origin IGP, metric 0, localpref 100, weight 0, valid, external rx pathid: 0, tx pathid: 0x0 Based on this output, what can be concluded?

Hard
1073

Which three statements about gRPC and gNMI in the context of model-driven telemetry are true? (Choose three.)

Hard
1074

Drag and drop each hypervisor product on the left to its matching vendor on the right.

Medium
1075

Which three statements about DHCP snooping are true? (Choose three.)

Hard
1076

Which three statements about telemetry protocols and data collection are true? (Choose three.)

Medium
1077

A network engineer uses the Cisco DNA Center REST API to retrieve the list of devices. The API returns the following JSON: ```json { "response": [ { "id": "12345678-1234-1234-1234-123456789abc", "managementIpAddress": "192.168.1.1", "hostname": "Router1", "platformId": "ISR4331", "role": "ACCESS", "series": "ISR4300 Series" } ], "version": "1.0" } ``` The engineer writes the following Python code to extract the hostname of the first device: ```python import requests url = 'https://dna-center.local/dna/intent/api/v1/network-device' headers = {'X-Auth-Token': 'valid_token', 'Accept': 'application/json'} response = requests.get(url, headers=headers, verify=False) data = response.json() hostname = data['response'][0]['hostname'] print(hostname) ``` What is a potential issue with this code?

Medium
1078

Drag and drop the steps of Ansible inventory grouping and variable inheritance into the correct order, from first to last.

Medium
1079

Drag and drop the steps of Cisco Flex (FlexConnect) AP mode operation into the correct order, from first to last.

Medium
1080

Drag and drop the steps of OpenConfig interface counters subscription and decode into the correct order, from first to last.

Medium
1081

Drag and drop each AAA service on the left to its matching protocol on the right.

Medium
1082

What is the purpose of the 'source-interface' command under a telemetry receiver configuration?

Medium
1083

Drag and drop each Layer 2 attack on the left to its matching mitigation feature on the right.

Medium
1084

Drag and drop the steps of RESTCONF GET with depth and field query parameters into the correct order, from first to last.

Medium
1085

Examine the following EIGRP configuration on a Cisco IOS-XE device: router eigrp 100 network 10.0.0.0 0.255.255.255 passive-interface default no passive-interface GigabitEthernet0/0 ! interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 ! interface GigabitEthernet0/1 ip address 10.2.2.1 255.255.255.0 Which statement is true?

Medium
1086

Drag and drop the steps of LISP EID-to-RLOC mapping resolution process into the correct order, from first to last.

Medium
1087

Which TWO statements about virtual switching in a hypervisor environment are correct?

Easy
1088

Drag and drop each Cisco campus design model component on the left to its matching description on the right.

Medium
1089

Drag and drop the steps of a VM live migration process in vSphere into the correct order, from first to last.

Medium
1090

Which two statements about 802.1X port-based authentication on a Cisco switch are true? (Choose two.)

Medium
1091

An engineer is using the Cisco SD-WAN vManage REST API to retrieve the list of WAN edge devices. The engineer sends a GET request to 'https://vmanage/dataservice/device' and receives a 401 Unauthorized error. The engineer has already obtained a JSESSIONID cookie by authenticating with the API. What is the most likely cause of the error?

Hard
1092

Drag and drop each MPLS VPN role on the left to its matching description on the right.

Medium
1093

Drag and drop each Netmiko device type on the left to its matching operating system on the right.

Medium
1094

Drag and drop the steps of network documentation and change management workflow into the correct order, from first to last.

Medium
1095

Drag and drop the steps of Cisco IBNS 2.0 policy configuration into the correct order, from first to last.

Medium
1096

Drag and drop the steps of EIGRP redistribution from OSPF with metric seeding into the correct order, from first to last.

Medium
1097

Drag and drop the steps of IPv6 ACL configuration and application into the correct order, from first to last.

Medium
1098

Drag and drop each hypervisor type on the left to its matching characteristic on the right.

Medium
1099

Which two statements about Type 1 and Type 2 hypervisors are true? (Choose two.)

Medium
1100

Which two statements about SPAN and RSPAN limitations are true? (Choose two.)

Medium
1101

Which two statements about the Cisco SD-Access fabric roles are true? (Choose two.)

Medium
1102

Drag and drop each BGP community on the left to its standard behavior on the right.

Hard
1103

Drag and drop each SNMP operation on the left to its matching direction on the right.

Medium
1104

Drag and drop each VRF-Lite vs MPLS VPN characteristic on the left to its matching description on the right.

Medium
1105

Drag and drop the steps of configuring AAA on a Cisco IOS device into the correct order, from first to last.

Medium
1106

Drag and drop the steps of OSPF summarization at ABR configuration steps into the correct order, from first to last.

Medium
1107

Which THREE of the following are characteristics of Cisco TrustSec (CTS) security architecture?

Hard
1108

Drag and drop each multicast address range on the left to its matching use on the right.

Medium
1109

Drag and drop each Python data structure on the left to its matching network config use on the right.

Medium
1110

A network engineer is configuring EtherChannel between two Cisco Catalyst switches. The ports are configured as access ports in VLAN 10. After configuring the port-channel interface and adding the physical ports, the engineer notices that the EtherChannel does not come up. The show etherchannel summary command shows the port-channel in a down state. What is the most likely cause?

Medium
1111

Drag and drop the steps of MPLS L2VPN (AToM) pseudowire setup into the correct order, from first to last.

Medium
1112

Drag and drop each MPLS label field on the left to its matching bit size on the right.

Medium
1113

A network engineer runs the following command on Router R7: R7# show mpls ldp capabilities LDP Capabilities: Dynamic Capability: advertised Typed Wildcard FEC: advertised MTU Signaling: advertised P2MP: not advertised MPLS OAM: advertised LDP Graceful Restart: advertised Helper mode: enabled Restart mode: enabled Reconnect time: 120 sec Recovery time: 180 sec Based on this output, which capability is NOT supported by this router?

Medium
1114

Drag and drop the steps of uRPF (Unicast Reverse Path Forwarding) verification into the correct order, from first to last.

Medium
1115

Drag and drop each First Hop Redundancy Protocol on the left to its matching function on the right.

Medium
1116

Drag and drop each service chaining element on the left to its matching position in the chain on the right.

Medium
1117

Drag and drop the steps of configuring a site-to-site IPsec VPN on Cisco IOS into the correct order, from first to last.

Medium
1118

Drag and drop each Python library on the left to its matching network use case on the right.

Medium
1119

Drag and drop each LISP message type on the left to its matching purpose on the right.

Medium
1120

Drag and drop each MPLS label field on the left to its matching bit size on the right.

Medium
1121

Which two statements about SNMPv3 security features are true? (Choose two.)

Medium
1122

Drag and drop the steps of CoPP class-map match criteria and rate-limit application into the correct order, from first to last.

Medium
1123

Drag and drop the steps of Cisco NSO service provisioning workflow into the correct order, from first to last.

Medium
1124

Which two statements about SD-WAN architecture are true? (Choose two.)

Medium
1125

Drag and drop the steps of BGP policy application (route-map, prefix-list, AS-path ACL) into the correct order, from first to last.

Medium
1126

Which three statements about RPF check in IP multicast are true? (Choose three.)

Hard
1127

Drag and drop the steps of OpenAPI schema validation for DNA Center REST call into the correct order, from first to last.

Medium
1128

Drag and drop the steps of 4G/LTE WAN failover with IP SLA tracking into the correct order, from first to last.

Medium
1129

Drag and drop each DNA Center ISE integration component on the left to its matching role on the right.

Medium
1130

Which two statements about NFV architecture and components are true? (Choose two.)

Medium
1131

Drag and drop the steps of Rapid PVST+ topology change notification process into the correct order, from first to last.

Medium
1132

Drag and drop the steps of gNMI Subscribe RPC using Python gRPC library into the correct order, from first to last.

Hard
1133

A network engineer is configuring EIGRP on a router that connects to a service provider network. The engineer wants to advertise a default route to internal routers. The engineer configures 'ip default-network 0.0.0.0' and redistributes a static default route into EIGRP. However, internal routers are not receiving the default route. The engineer checks the EIGRP topology table and sees the default route with a metric of 1. What is the most likely reason?

Hard
1134

Which two statements about IP Source Guard are true? (Choose two.)

Medium
1135

Which two statements about YANG data models in model-driven telemetry are true? (Choose two.)

Medium
1136

Drag and drop each NFV component on the left to its matching role on the right.

Medium
1137

Which three statements about 802.1X port-based authentication are true? (Choose three.)

Hard
1138

Which four statements about LACP (Link Aggregation Control Protocol) are true? (Choose four.)

Medium
1139

Drag and drop each queuing mechanism on the left to its matching use case on the right.

Medium
1140

Which two statements about OSPF network types are true? (Choose two.)

Medium
1141

Drag and drop the steps of Cisco DHCP snooping binding table population into the correct order, from first to last.

Medium
1142

Drag and drop each VTP mode on the left to its matching capability on the right.

Medium
1143

A network engineer is troubleshooting a model-driven telemetry deployment on a Cisco IOS-XE router. The telemetry subscription is configured to stream interface statistics using gRPC dial-out to a collector at 10.1.1.100:50051. The engineer verifies that the collector is listening on the port and the router can reach it. However, the collector shows no data received. The engineer checks the router's telemetry logs and sees 'Connection refused' errors. What is the most likely cause?

Medium
1144

Which three statements about MPLS Layer 3 VPNs are true? (Choose three.)

Hard
1145

Drag and drop the steps of SNMP trap generation and forwarding into the correct order, from first to last.

Medium
1146

Match each EIGRP term to its definition.

Medium
1147

Drag and drop the steps of 802.1X port authentication with MAB fallback into the correct order, from first to last.

Medium
1148

Drag and drop the steps of DHCP failover configuration between primary and standby into the correct order, from first to last.

Medium
1149

Drag and drop each OSPF LSA type on the left to its matching description on the right.

Medium
1150

Drag and drop the steps of BGP graceful restart negotiation steps into the correct order, from first to last.

Medium
1151

Drag and drop each VRF component on the left to its matching function on the right.

Medium
1152

Drag and drop the steps of STP root bridge election and port state transitions into the correct order, from first to last.

Medium
1153

Drag and drop each IKEv2 exchange on the left to its matching phase on the right.

Medium
1154

Drag and drop the steps of QoS pre-classify for encrypted VPN traffic into the correct order, from first to last.

Medium
1155

Drag and drop the steps of 802.11r Fast BSS Transition (FT) roaming steps into the correct order, from first to last.

Medium
1156

Drag and drop each Control plane protection feature on the left to its matching threat on the right.

Medium
1157

Which two statements about IP SLA with object tracking are true? (Choose two.)

Medium
1158

Drag and drop each NAT type on the left to its matching description on the right.

Medium
1159

Drag and drop each infrastructure hardening technique on the left to its matching configuration command on the right.

Medium
1160

Drag and drop the steps of Metro Ethernet E-Line service provisioning into the correct order, from first to last.

Medium
1161

An engineer is configuring a site-to-site VPN between two Cisco routers using IPsec with IKEv2. The engineer wants to use a pre-shared key. The configuration on both routers includes: crypto ikev2 proposal default, encryption aes-cbc-256, integrity sha256, group 14. The engineer also configures crypto ikev2 keyring and crypto ikev2 profile. The tunnel does not establish. The engineer sees that the IKEv2 SA is not created. What is the most likely missing configuration?

Hard
1162

Drag and drop the steps of iBGP route reflection configuration into the correct order, from first to last.

Medium
1163

Drag and drop the steps of SD-Access fabric endpoint registration into the correct order, from first to last.

Medium
1164

Drag and drop the steps of EIGRP variance-based unequal-cost load balancing into the correct order, from first to last.

Medium
1165

A network engineer runs the following command on a Cisco WLC: WLC# show wlan summary WLAN ID SSID Status Security Interface 1 Guest Enabled Open guest-vlan 2 Corporate Enabled WPA2 corp-vlan 3 IoT Disabled WPA2 iot-vlan 4 Management Enabled WPA2 mgmt-vlan Based on this output, what can be concluded?

Easy
1166

A network engineer runs the following command on Router R1: R1# show ip access-lists Extended IP access list 150 10 permit tcp 10.0.0.0 0.255.255.255 any eq 23 (2 matches) 20 deny tcp any any eq 23 (8 matches) 30 permit tcp 172.16.0.0 0.0.255.255 any eq 22 (4 matches) 40 deny tcp any any eq 22 (1 match) 50 permit ip any any (15 matches) Based on this output, what can be concluded?

Hard
1167

A network engineer is using the Cisco DNA Center REST API to retrieve the list of devices. The API call returns the following JSON response: ```json { "response": [ { "id": "device-123", "hostname": "Router1", "managementIpAddress": "10.10.20.1", "softwareVersion": "17.3.3", "platformId": "ISR4451-X/K9" }, { "id": "device-456", "hostname": "Switch1", "managementIpAddress": "10.10.20.2", "softwareVersion": "16.12.5", "platformId": "C9300-24P" } ], "version": "1.0" } ``` The engineer wants to filter the results to only show devices with software version 17.3.3. Which of the following API query parameters should be used?

Hard
1168

Which three statements about DMVPN phase 2 are true? (Choose three.)

Hard
1169

Drag and drop each broadband type on the left to its matching technology on the right.

Easy
1170

Which three statements about IGMP snooping are true? (Choose three.)

Medium
1171

Which THREE attributes are typically included in a YANG module for interface configuration? (Choose three.)

Medium
1172

Drag and drop the steps of Private VLAN (PVLAN) configuration steps into the correct order, from first to last.

Medium
1173

Drag and drop the steps of OSPF virtual link configuration across area 0 into the correct order, from first to last.

Hard
1174

Drag and drop the steps of STP portfast and BPDU guard configuration into the correct order, from first to last.

Medium
1175

Drag and drop each MP-BGP address family on the left to its matching use case on the right.

Medium

Frequently asked questions

What does the bgp domain cover on the 350-401 exam?
BGP questions usually test path selection attributes (AS-PATH, LOCAL_PREF, MED), eBGP vs iBGP rules, and why a route may be received but not used.
How many questions are in this domain?
This page lists all 1175 bgp questions in the 350-401 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only bgp questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.