CCNA Network Assurance Questions — Page 2 of 2

MCQhard

A network administrator is using Cisco DNA Center Assurance to monitor a campus network. The administrator notices that a particular client device is experiencing poor voice quality. Which Cisco DNA Center Assurance feature should be used to analyze the issue and determine the root cause?

A.Network Health Dashboard

B.Client 360

C.Path Trace

D.Application Health Dashboard

AnswerB

Client 360 provides a comprehensive view of a specific client's experience, including onboarding, connectivity, and application performance. It includes detailed metrics such as voice quality (MOS), packet loss, and latency. In this scenario, Client 360 would allow the administrator to drill down into the client's voice traffic and identify the root cause of poor voice quality.

Why this answer

Client 360 in Cisco DNA Center Assurance offers detailed insights into a specific client's network experience, including voice quality metrics like MOS, jitter, and packet loss. By using Client 360, the administrator can quickly identify whether the poor voice quality is due to network congestion, wireless interference, or other factors, enabling targeted remediation.

Exam trap

The trap here is confusing the Application Health Dashboard with Client 360; the former provides application-level health, not per-client voice quality analysis.

Practice this question →

MCQhard

A network engineer is analyzing traffic flows using Cisco IOS NetFlow on a router. The engineer notices that the NetFlow cache is filling up rapidly, causing older entries to be exported prematurely before they can be properly aggregated. Which NetFlow configuration parameter should the engineer adjust to control the maximum number of entries in the cache?

A.cache entries

B.cache timeout active

C.ip flow-export destination

D.cache timeout inactive

AnswerA

The 'cache entries' command under the NetFlow cache configuration specifies the maximum number of entries that the NetFlow cache can hold. When the cache reaches this limit, the router may force-export older entries to make room for new ones. By increasing this value, the engineer can allow more entries to be stored, reducing premature exports. This directly addresses the issue of the cache filling up rapidly.

Why this answer

In Cisco IOS NetFlow, the cache has a maximum number of entries defined by the 'cache entries' command. When the cache reaches this limit, the router may prematurely export older flows to free space, leading to incomplete aggregation. Increasing the cache entries allows more flows to be stored, reducing premature exports.

Other parameters like timeouts affect flow expiration but not the total capacity. The engineer should adjust 'cache entries' to match the traffic volume and available memory.

Exam trap

The trap here is confusing cache size limits with timeout settings; timeouts control when flows are exported, but 'cache entries' controls how many flows can be stored.

Practice this question →

MCQmedium

A network administrator is using Cisco DNA Center Assurance to monitor the health of a campus network. The administrator notices that a particular client device shows a health score of 'Poor' but the switch port statistics indicate no errors or drops. Which Cisco DNA Center Assurance feature should the administrator use to identify the root cause of the poor health score?

A.Network Health dashboard

B.Path Trace

C.Client 360

D.Application Health dashboard

AnswerC

Client 360 provides a detailed view of a specific client's connectivity, including onboarding, authentication, and application experience. It aggregates data from multiple sources to help identify why a client has a poor health score, such as RF issues, authentication failures, or DHCP problems. This is the correct tool for root cause analysis of a single client's health.

Why this answer

Cisco DNA Center Assurance's Client 360 view provides comprehensive details about a specific client, including onboarding, authentication, RF statistics, and application experience. It is designed to help troubleshoot client-specific issues and determine the root cause of poor health scores. Other dashboards offer aggregate or path-based views but lack the client-centric depth needed here.

Exam trap

The trap here is confusing network-wide monitoring dashboards with client-specific troubleshooting tools; Client 360 is the dedicated feature for deep-dive analysis of an individual client's health.

Practice this question →

MCQhard

A network engineer is using Cisco DNA Center's Assurance to troubleshoot a performance issue reported by users on a specific floor. The engineer wants to analyze the path that traffic takes from a client to a server in the data center, including details of each hop such as device, interface, and any ACLs applied. Which Cisco DNA Center Assurance feature provides this information?

A.Application Health

B.Path Trace

C.Client 360

D.Network Health

AnswerB

Path Trace is a Cisco DNA Center Assurance feature that allows you to trace the path of a flow between two endpoints, such as a client and a server. It provides hop-by-hop details, including device names, ingress/egress interfaces, and any ACLs or QoS policies applied. This is exactly what the engineer needs to analyze the traffic path and identify where issues may occur.

Why this answer

Cisco DNA Center Assurance's Path Trace feature provides a visual and detailed hop-by-hop view of the path that traffic takes between two endpoints. It includes information about each device, interface, and any policies applied, making it ideal for troubleshooting performance issues along the path. Other features like Network Health, Client 360, and Application Health do not offer this level of path detail.

Exam trap

The trap here is assuming that Client 360 or Application Health can provide path details; however, only Path Trace is designed to show the complete hop-by-hop path and associated policies.

Practice this question →

MCQhard

A network administrator is analyzing NetFlow data on a Cisco IOS router to identify top talkers. The administrator notices that a large amount of traffic is being exported but the NetFlow cache is filling up quickly. Which action should the administrator take to reduce the cache size while maintaining visibility into the most significant flows?

A.Enable NetFlow aggregation with a suitable aggregation scheme, such as protocol-port or source-prefix.

B.Decrease the NetFlow cache timeout values for active and inactive flows.

C.Increase the NetFlow cache timeout values for active and inactive flows.

D.Configure NetFlow to export only ingress traffic on all interfaces.

AnswerA

NetFlow aggregation combines individual flows into aggregated flows based on criteria like protocol and port or source prefix. This reduces the number of entries in the cache, lowering memory usage and export volume, while still providing visibility into major traffic patterns. It is an effective way to manage cache size without losing sight of significant flows.

Why this answer

NetFlow aggregation reduces the number of flow entries by combining individual flows into aggregated records based on criteria like protocol and port or source prefix. This directly decreases cache size and export load while preserving visibility into major traffic patterns. Adjusting timeouts can have side effects such as increased export volume or incomplete data, whereas aggregation is designed to optimize cache usage without sacrificing essential visibility.

Exam trap

The trap here is assuming that decreasing timeouts will solve cache size issues; while it can reduce entries, it often leads to more frequent exports and lost granularity, whereas aggregation is the intended method to reduce cache size while maintaining meaningful visibility.

Practice this question →

MCQhard

A network administrator is using Cisco DNA Center Assurance to monitor the health of a campus network. The administrator wants to receive alerts when the number of clients on a specific wireless controller exceeds a threshold. Which feature in Cisco DNA Center Assurance should be used to configure this?

A.Sensor-driven Tests

B.Assurance Issues and Events

C.Custom Assurance Thresholds

D.Network Health Dashboard

AnswerC

Cisco DNA Center Assurance allows administrators to define custom thresholds for various metrics, including client count on wireless controllers. By setting a threshold, an alert is triggered when the metric exceeds the defined value. This is the correct feature to use for the described requirement.

Why this answer

Cisco DNA Center Assurance provides the ability to set custom thresholds for health metrics. To alert when client count exceeds a limit, the administrator configures a custom threshold for the wireless controller's client count. This generates an alert when the condition is met.

The other features are for monitoring and testing but not for threshold configuration.

Exam trap

The trap here is confusing monitoring dashboards with configuration interfaces for custom alerts, assuming that any health view allows threshold setting.

Practice this question →

MCQmedium

A network engineer needs to verify the performance of a WAN link between two Cisco routers. The engineer configures an IP SLA operation on Router A that sends ICMP echo requests to Router B every 60 seconds and stores the results. After a week, the engineer checks the results and finds that the operation has been running successfully, but no history data is available. What is the most likely reason for the lack of history data?

A.The IP SLA operation was not configured to collect history statistics.

B.The IP SLA responder was not enabled on Router B.

C.The IP SLA operation was not configured with a schedule.

D.The IP SLA operation was configured with the wrong frequency.

AnswerA

IP SLA operations do not collect history data by default. The 'history statistics' command must be configured under the IP SLA operation to enable collection of historical data. Without it, only the latest results are available. The engineer saw successful results but no history, which points to missing history configuration.

Why this answer

IP SLA operations only collect history statistics when explicitly configured with the 'history statistics' command. Without this, only the most recent results are available. The engineer saw successful results, indicating the operation ran, but no history was stored because the history collection was not enabled.

Enabling history statistics allows the router to maintain a record of past operations for analysis.

Exam trap

The trap here is assuming that IP SLA automatically stores history data once the operation runs successfully.

Practice this question →

MCQmedium

A network engineer is using Cisco DNA Center Assurance to troubleshoot a user's poor voice quality. The engineer wants to view detailed hop-by-hop performance metrics for the path between the user's endpoint and the voice gateway over the last 24 hours. Which Assurance feature should the engineer use?

A.Application Experience

B.Path Trace

C.Client 360

D.Network Health Dashboard

AnswerB

Path Trace in Cisco DNA Center Assurance provides hop-by-hop performance metrics, including latency, jitter, and packet loss, for a specified path and time window. It uses data from network devices and can visualize the exact path taken. This directly answers the requirement to see detailed hop-by-hop metrics between two endpoints over the last 24 hours.

Why this answer

Cisco DNA Center Assurance Path Trace is designed to provide detailed hop-by-hop performance metrics for a specific path between two endpoints. It collects and displays latency, jitter, and packet loss per hop, which is essential for diagnosing voice quality issues. The other features offer summary or client-centric views but not the granular path data required.

Exam trap

The trap here is confusing high-level health dashboards with the granular path analysis that Path Trace provides.

Practice this question →

MCQhard

A network engineer is using Cisco DNA Center Assurance to troubleshoot a client connectivity issue. The engineer notices that the client's health score is low due to onboarding failures. Which component of Cisco DNA Center Assurance should be examined first to identify the root cause?

A.Network Health

B.Application Health

C.Path Trace

D.Client 360

AnswerD

Client 360 provides a comprehensive view of a specific client's connectivity, including onboarding, authentication, and performance details. It shows the client's journey through the network, including association, authentication, DHCP, and DNS. For onboarding failures, Client 360 will display the exact step where the failure occurred, such as authentication failure or DHCP timeout, making it the primary tool for root cause analysis.

Why this answer

Client 360 is the correct component because it provides detailed information about a specific client's onboarding process, including authentication, DHCP, and DNS steps. It allows the engineer to pinpoint the exact failure point. Network Health, Application Health, and Path Trace offer broader or different perspectives that do not focus on individual client onboarding.

Exam trap

The trap here is confusing network-wide health monitoring with client-specific troubleshooting, leading to choosing Network Health instead of Client 360.

Practice this question →

MCQmedium

A network administrator is using Cisco DNA Center Assurance to monitor the health of a wireless network. The administrator notices that a particular access point is reporting a high number of client association failures. Which Cisco DNA Center Assurance feature should be used to correlate these failures with client device types and identify the root cause?

A.Network Health dashboard

B.Client 360

C.Path Trace

D.Application Health dashboard

AnswerB

Client 360 provides a comprehensive view of a specific client's experience, including connection history, onboarding issues, and performance metrics. It correlates data such as association failures with client device type, operating system, and location, enabling the administrator to identify patterns and root causes of wireless connectivity problems.

Why this answer

Client 360 in Cisco DNA Center Assurance is designed to provide detailed insights into individual client devices, including their onboarding process, association failures, and performance. By using Client 360, the administrator can filter and analyze association failures by client type, helping to pinpoint whether specific devices are experiencing issues due to compatibility or configuration problems.

Exam trap

The trap here is confusing Client 360 with the Network Health dashboard, but only Client 360 offers per-client granularity and correlation with device types.

Practice this question →

Multi-Selectmedium

A network engineer is analyzing Cisco DNA Center Assurance data to troubleshoot a wireless client's poor performance. The engineer observes that the client's health score is low due to high retry rates and low SNR. Which TWO Assurance metrics should the engineer examine to further diagnose the issue? (Choose two.)

Select 2 answers

A.AP channel utilization and interference

B.Switch CPU utilization

C.DHCP pool utilization

D.WAN latency and jitter

E.Client RSSI and SNR trends

AnswersA, E

AP channel utilization and interference metrics show how congested the wireless channel is and whether external interference is present. High channel utilization or interference can cause high retry rates and low SNR. DNA Center Assurance provides these metrics per AP and band, enabling the engineer to identify if the issue is due to co-channel interference or a noisy environment.

Why this answer

To diagnose high retry rates and low SNR, the engineer should examine RF-related metrics. Client RSSI and SNR trends reveal signal quality and potential coverage gaps. AP channel utilization and interference show if the channel is congested or noisy.

Together, these metrics help identify whether the issue is due to distance, interference, or channel overlap. Other metrics like switch CPU, WAN latency, or DHCP utilization do not directly address wireless RF performance.

Exam trap

The trap here is selecting wired or WAN metrics like switch CPU or WAN latency, which are unrelated to wireless RF symptoms such as high retry rates and low SNR.

Practice this question →

MCQhard

A network administrator is analyzing traffic flows using Cisco DNA Center Assurance. The administrator wants to see which applications are consuming the most bandwidth on a specific interface of a Catalyst 9500 switch. Which feature should be enabled on the switch to provide this level of granularity?

A.Syslog

B.IP SLA

C.SNMP

D.NetFlow

AnswerD

NetFlow provides detailed information about IP traffic flows, including source and destination IP addresses, ports, protocol, and byte counts. When enabled on an interface and exported to Cisco DNA Center, it allows the administrator to identify which applications are consuming the most bandwidth. This is the correct feature for application visibility and bandwidth analysis.

Why this answer

NetFlow is the appropriate feature to enable on the switch to gain application-level visibility into bandwidth consumption. It exports flow records that include application identification through NBAR2, allowing Cisco DNA Center to present detailed bandwidth usage per application. Without NetFlow, the administrator would only see aggregate interface statistics.

Exam trap

The trap here is confusing SNMP interface counters with application-level flow analysis; SNMP shows total bytes but not which applications are responsible.

Practice this question →