Focused practice
Practice ospf questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about ospf
Why learners struggle
Why ospf questions are commonly missed
OSPF questions are often missed because learners confuse neighbour states, route selection rules, router IDs, areas, timers, and cost calculations. A question may look like it is testing OSPF, but the real decision may depend on administrative distance, route specificity, passive interfaces, DR/BDR behaviour, or command-output interpretation.
- ·OSPF cost vs administrative distance — they measure different things and compare differently
- ·2-Way vs FULL neighbour state — 2-Way is not always a failed adjacency
- ·DR vs BDR vs DROTHER — election depends on network type and interface priority
- ·Area mismatch vs timer mismatch — both prevent adjacency but for different reasons
- ·Passive interface vs failed adjacency — passive interfaces intentionally suppress hello packets
- ·Router ID selection — highest loopback address wins unless manually configured
- ·show ip route OSPF codes — O, O IA, O E1, O E2 describe different route sources
- ·OSPF external route types — E1 accumulates cost, E2 preserves the external cost only
Watch out for
Common ospf exam traps
- ▸A matching network statement does not guarantee adjacency.
- ▸OSPF cost and administrative distance solve different problems.
- ▸Router ID may come from a loopback or manual configuration.
- ▸A route can exist in OSPF but still not become the installed route.
Question index
All ospf questions (1175)
Click any question to see the full explanation, or start a practice session above.
Drag and drop each NFV management layer on the left to its matching function on the right.
Medium2Which three statements about Cisco DNA Center integration with external systems are true? (Choose three.)
Hard3Which three statements about telemetry data collection intervals and on-change notifications are true? (Choose three.)
Hard4Drag and drop the steps of NAPALM get_facts() retrieval from IOS-XE device into the correct order, from first to last.
Medium5Drag and drop the steps of SVI configuration for inter-VLAN routing into the correct order, from first to last.
Medium6Drag and drop the steps of hierarchical LAN design implementation phases into the correct order, from first to last.
Medium7Which TWO statements are correct about Cisco SD-Access architecture? (Choose two.)
Hard8Drag and drop the steps of DHCP snooping and dynamic ARP inspection flow into the correct order, from first to last.
Medium9Drag and drop each CAPWAP message type on the left to its matching function on the right.
Medium10Drag and drop the steps of configuring a local SPAN session on a Cisco IOS switch into the correct order, from first to last.
Medium11Which three statements about IPsec VPNs are true? (Choose three.)
Hard12Drag and drop each Python data structure on the left to its matching network config use on the right.
Medium13Drag and drop the steps of BGP best path selection process into the correct order, from first to last.
Hard14Drag and drop the steps of Rapid PVST+ topology change notification process into the correct order, from first to last.
Medium15Which TWO of the following are benefits of using network virtualization with VXLAN? (Choose two.)
Easy16Which two statements about Rapid PVST+ are true? (Choose two.)
Medium17Which THREE are valid methods for automating network device configuration using Cisco IOS XE? (Choose three.)
Hard18Given this telemetry configuration on a Cisco IOS-XE device: telemetry ietf subscription 400 encoding encode-kvgpb filter xpath /interfaces/interface/state stream yang-push update-policy periodic 1000 receiver ip address 10.1.1.1 50000 protocol grpc source-interface Loopback0 What is the effect of the source-interface Loopback0 command?
Medium19Drag and drop the steps of BGP graceful restart negotiation steps into the correct order, from first to last.
Medium20Which two statements about DHCP snooping are true? (Choose two.)
Hard21A network engineer runs the following command on Router R7: R7# show ip nat translations verbose Pro Inside global Inside local Outside local Outside global --- 192.0.2.10 10.0.0.10 --- --- create: 03/01/2025 09:00:00, use: 03/01/2025 09:05:00 timeout: never, flags: static --- 192.0.2.11 10.0.0.11 --- --- create: 03/01/2025 09:00:00, use: 03/01/2025 09:06:00 timeout: never, flags: static Based on this output, what can be concluded?
Medium22Drag and drop each WPA security version on the left to its matching authentication method on the right.
Medium23Drag and drop the steps of NAT overload (PAT) packet translation process into the correct order, from first to last.
Medium24Which two statements about REST API HTTP methods are true? (Choose two.)
Medium25Drag and drop each congestion avoidance mechanism on the left to its matching method on the right.
Medium26Drag and drop the steps of IKEv2 fragmentation and DPD keepalive process into the correct order, from first to last.
Medium27Drag and drop each Ansible component on the left to its matching function on the right.
Medium28Drag and drop each DSCP PHB on the left to its matching queue treatment on the right.
Medium29Drag and drop the steps of NUMA-aware VM placement process into the correct order, from first to last.
Medium30Drag and drop the steps of PPPoE session establishment into the correct order, from first to last.
Medium31Drag and drop each HTTP method on the left to its matching REST operation on the right.
Medium32A network engineer is using the Cisco DNA Center REST API to retrieve the health score of a specific device. The API response is as follows: { "response": [ { "deviceId": "1234567890", "hostname": "Core-Switch-1", "score": 8, "overallHealth": "good", "timestamp": 1623456789 } ], "version": "1.0" } The engineer wants to extract the 'overallHealth' value. Which Python code correctly extracts it?
Easy33Drag and drop the steps of Q-in-Q (802.1ad) double-tagging configuration into the correct order, from first to last.
Medium34Drag and drop each trunk encapsulation type on the left to its matching standard or characteristic on the right.
Medium35Drag and drop each BGP attribute on the left to its preferred value (highest or lowest) on the right.
Medium36Drag and drop the steps of RESTCONF GET with depth and field query parameters into the correct order, from first to last.
Medium37Which three statements about the benefits and challenges of NFV are true? (Choose three.)
Hard38Drag and drop each OSPF packet type on the left to its matching function on the right.
Medium39Drag and drop the steps of stateless DHCPv6 address assignment steps into the correct order, from first to last.
Medium40Drag and drop the steps of BGP route aggregation and suppress-map process into the correct order, from first to last.
Medium41An engineer is using the Cisco DNA Center GUI to create a new site hierarchy. They add a building under an existing area. After saving, they run a Python script to verify the site via API: import requests url = "https://dna-center.local/dna/intent/api/v1/site" headers = {"X-Auth-Token": "token"} response = requests.get(url, headers=headers, verify=False) sites = response.json()['response'] for site in sites: if site['name'] == 'Building-A': print(site['id']) What is the output if the building was created successfully?
Easy42Drag and drop the steps of IP SLA scheduling with frequency and lifetime into the correct order, from first to last.
Medium43Drag and drop the steps of troubleshooting NetFlow export issues into the correct order, from first to last.
Medium44Drag and drop each IP SLA schedule parameter on the left to its function on the right.
Medium45Drag and drop the steps of the 802.1X/EAP authentication process for a wireless client into the correct order, from first to last.
Medium46Drag and drop each MQC command on the left to its matching configuration level on the right.
Medium47A network engineer configures IP SLA 1 to monitor HTTP server availability at 10.1.1.1 using HTTP GET. The operation is used as a track object for a backup static route. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 200 ms', but the track object shows 'Track 1: up' even though the HTTP server returns a 404 error. What is the cause?
Medium48Which three statements about Control Plane Policing (CoPP) are true? (Choose three.)
Medium49Which three statements about using Python for interacting with Cisco IOS-XE devices via NETCONF and RESTCONF are true? (Choose three.)
Hard50Drag and drop the steps of OSPF virtual link configuration into the correct order, from first to last.
Medium51Drag and drop the steps of DMVPN Phase 3 spoke-to-spoke shortcut creation into the correct order, from first to last.
Medium52Drag and drop the steps of VRF-aware NAT configuration steps into the correct order, from first to last.
Medium53Drag and drop each VRF-Lite or MPLS VPN characteristic on the left to its matching description on the right.
Hard54A network engineer runs the following command on Router R1: R1# show ip interface GigabitEthernet0/0 | include access list Inbound access list is 101 Outbound access list is not set R1# show access-lists 101 Extended IP access list 101 10 permit tcp 192.168.1.0 0.0.0.255 any eq 80 (100 matches) 20 deny tcp any any eq 80 (50 matches) 30 permit ip any any (200 matches) Based on this output, what can be concluded?
Medium55Drag and drop the steps of WRED configuration for TCP congestion avoidance into the correct order, from first to last.
Medium56Drag and drop the steps of AAA method list fallback from RADIUS to local into the correct order, from first to last.
Medium57Drag and drop the steps of NAT64 IPv6-to-IPv4 translation flow into the correct order, from first to last.
Medium58Which three statements about extended ACLs on Cisco IOS are true? (Choose three.)
Hard59Drag and drop the steps of the 802.1X EAP-TLS authentication exchange into the correct order, from first to last.
Medium60Which three statements about Cisco TrustSec security group access control lists (SGACLs) are true? (Choose three.)
Hard61Drag and drop the steps of DHCP snooping and dynamic ARP inspection flow into the correct order, from first to last.
Medium62Drag and drop each VLAN range on the left to its matching type on the right.
Medium63Examine the following telemetry configuration: telemetry ietf subscription 500 encoding encode-kvgpb filter xpath /interfaces/interface/state/counters stream yang-push update-policy periodic 500 receiver ip address 10.1.1.1 50000 protocol grpc A network engineer wants to add a second receiver for redundancy. Which additional configuration is correct?
Medium64Drag and drop the steps of SNMP community-based access control setup into the correct order, from first to last.
Medium65Which three statements about CoPP configuration and operation are true? (Choose three.)
Hard66Drag and drop the steps of service function chaining (SFC) path setup into the correct order, from first to last.
Medium67What is the default load-balancing method used by Cisco switches for EtherChannel?
Easy68Drag and drop the steps of Control Plane Policing (CoPP) rate-limit evaluation into the correct order, from first to last.
Medium69An engineer needs to configure a switchport to carry traffic for multiple VLANs to a router using a single physical link. Which configuration should be applied on the switchport?
Easy70Drag and drop the steps of MPLS Traffic Engineering (TE) tunnel setup (RSVP) into the correct order, from first to last.
Medium71A network engineer is configuring ACLs on a Cisco router to filter traffic between two subnets. The engineer wants to allow HTTP traffic from subnet 10.1.1.0/24 to subnet 10.2.2.0/24, but deny all other traffic. The engineer applies an ACL inbound on the interface connected to subnet 10.1.1.0/24. The ACL has a permit statement for TCP port 80 from 10.1.1.0/24 to 10.2.2.0/24, followed by a deny ip any any. However, hosts in subnet 10.1.1.0/24 can still ping hosts in subnet 10.2.2.0/24. What is the most likely reason?
Easy72Which two statements about local SPAN configuration are true? (Choose two.)
Medium73Which three statements about Cisco SD-Access policy enforcement are true? (Choose three.)
Hard74Drag and drop the steps of RADIUS CoA (Change of Authorization) message flow into the correct order, from first to last.
Medium75Drag and drop the steps of OSPF SPF calculation steps (Dijkstra) into the correct order, from first to last.
Medium76Drag and drop the steps of FlexVPN spoke-to-spoke dynamic tunnel creation into the correct order, from first to last.
Medium77Drag and drop each PAgP port mode on the left to its matching negotiation behavior on the right.
Medium78Which three statements about IP SLA probe types and their characteristics are true? (Choose three.)
Hard79Drag and drop each DSCP value on the left to its matching Per-Hop Behavior (PHB) on the right.
Medium80Drag and drop the steps of configuring Control Plane Policing (CoPP) on a Cisco IOS router into the correct order, from first to last.
Medium81Drag and drop the steps of SNMP community-based access control setup into the correct order, from first to last.
Medium82Drag and drop the steps of gNMI Subscribe RPC using Python gRPC library into the correct order, from first to last.
Hard83Drag and drop the steps of MPLS VPN (L3VPN) service provisioning into the correct order, from first to last.
Medium84Which two statements about Network Function Virtualization (NFV) architecture are true? (Choose two.)
Medium85Which two statements about Ansible inventory and variables are true? (Choose two.)
Medium86Drag and drop each ACL action on the left to its matching result on the right.
Medium87A network engineer runs the following command on switch SW3: SW3# show cts role-based permissions IPv4 Role-based permissions: Source Group Dest Group Action 10 20 PERMIT 10 30 DENY 20 30 PERMIT Based on this output, what can be concluded?
Medium88Drag and drop each protocol number on the left to its matching protocol on the right.
Easy89Drag and drop each Ansible task return value on the left to its matching meaning on the right.
Easy90Drag and drop the steps of IGMP v3 SSM membership report process into the correct order, from first to last.
Medium91Which three statements about Python functions and modules for network automation are true? (Choose three.)
Hard92Drag and drop each EtherChannel port state on the left to its matching description on the right.
Medium93Drag and drop each DNA Center package on the left to its matching function on the right.
Medium94Drag and drop each WAN transport type on the left to its matching SD-WAN characteristic on the right.
Medium95Which three statements about BGP peering are true? (Choose three.)
Medium96Drag and drop the steps of MPLS L3VPN packet forwarding steps into the correct order, from first to last.
Medium97Examine the following OSPF configuration on a Cisco IOS-XE router: router ospf 1 router-id 1.1.1.1 network 10.0.0.0 0.255.255.255 area 0 network 192.168.1.0 0.0.0.255 area 1 default-information originate always metric 10 metric-type 1 What is the effect of the 'default-information originate always' command?
Medium98What is the default OSPF hello interval on an Ethernet link?
Easy99Drag and drop each DTP mode on the left to its matching trunking behavior on the right.
Medium100Which three statements about BGP route selection are true? (Choose three.)
Hard101Which two statements about Cisco QoS classification and marking are true? (Choose two.)
Hard102Drag and drop the steps of configuring an iBGP route reflector cluster into the correct order, from first to last.
Medium103Which two statements about VRF route leaking are true? (Choose two.)
Hard104Drag and drop the steps of SD-WAN overlay routing protocol (OMP) route advertisement sequence into the correct order, from first to last.
Medium105Drag and drop the steps of PIM DM (Dense Mode) flood and prune steps into the correct order, from first to last.
Medium106Drag and drop each WPA security version on the left to its matching authentication method on the right.
Medium107Drag and drop the steps of RSPAN VLAN propagation across trunk links into the correct order, from first to last.
Medium108Drag and drop each TrustSec component on the left to its matching function on the right.
Medium109Which three statements about Cisco SD-WAN architecture components and their roles are true? (Choose three.)
Easy110Drag and drop each MPLS router role on the left to its matching function on the right.
Medium111Drag and drop the steps of MPLS Layer 3 VPN VRF configuration on a PE router into the correct order, from first to last.
Medium112Drag and drop each route-target action on the left to its matching behavior on the right.
Medium113What is the purpose of the 'ip sla schedule' command in IP SLA configuration?
Easy114Which three statements about VRF path isolation in a service provider network are true? (Choose three.)
Medium115Drag and drop the steps of VRF selection using policy-based routing into the correct order, from first to last.
Medium116Which three statements about VXLAN in Cisco SD-Access are true? (Choose three.)
Hard117Drag and drop each VTP mode on the left to its matching capability on the right.
Medium118A network administrator is deploying a new QoS policy to prioritize voice traffic across a WAN link. The policy must ensure that voice packets are not dropped even during congestion, and that bandwidth is guaranteed for voice. Which queuing mechanism should be used for the voice class?
Hard119Drag and drop each YANG module on the left to its matching standard body on the right.
Medium120Which three statements about EIGRP packet types are true? (Choose three.)
Hard121A network engineer is troubleshooting a Cisco SD-WAN deployment where a branch office has two WAN links: a primary MPLS link and a backup LTE link. The engineer wants to configure application-aware routing so that critical applications (e.g., Salesforce) always use the MPLS link as long as its loss is below 2% and latency below 150 ms. The engineer configures an app-route policy on the vSmart with the appropriate SLA requirements. After deployment, the engineer notices that Salesforce traffic is still using the LTE link even when the MPLS link meets the SLA. What is the most likely cause?
Medium122Drag and drop each STP variant on the left to its matching standard on the right.
Medium123Which three statements about OSPF LSA types are true? (Choose three.)
Hard124Drag and drop the steps of Jinja2 template rendering for device config generation into the correct order, from first to last.
Medium125Drag and drop the steps of VRF-aware NAT configuration for path isolation into the correct order, from first to last.
Medium126Which two statements about SNMP trap and inform operations are true? (Choose two.)
Hard127Drag and drop each PIM message type on the left to its matching function on the right.
Medium128Drag and drop each queuing mechanism on the left to its matching use case on the right.
Medium129Which two statements about the Cisco SD-Access fabric roles are true? (Choose two.)
Medium130Which three statements about Ansible roles and directory structure are true? (Choose three.)
Hard131Which two statements about PAgP (Port Aggregation Protocol) are true? (Choose two.)
Hard132A network engineer runs the following command on Router R1: R1# show ip eigrp topology all-links EIGRP-IPv4 Topology Table for AS(100)/ID(192.168.1.1) Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply, r - reply Status, s - sia Status P 10.1.1.0/24, 1 successors, FD is 1310720, serno 5 via 192.168.1.2 (1310720/1310720), GigabitEthernet0/0 via 10.2.2.2 (1587200/1310720), GigabitEthernet0/1 P 10.2.2.0/24, 1 successors, FD is 1310720, serno 6 via 192.168.1.2 (1310720/1310720), GigabitEthernet0/0 via 10.2.2.2 (1587200/1310720), GigabitEthernet0/1 Based on this output, what can be concluded?
Hard133Drag and drop each CPU feature on the left to its matching virtualization purpose on the right.
Medium134Which three statements about Cisco SD-Access design are true? (Choose three.)
Hard135Drag and drop the steps of WRED configuration for TCP congestion avoidance into the correct order, from first to last.
Medium136Drag and drop the steps of BFD session establishment for path liveliness into the correct order, from first to last.
Medium137A router has the following configuration snippet: vrf definition RED rd 100:1 ! interface Loopback0 ip vrf forwarding RED ip address 10.0.0.1 255.255.255.255 ! router eigrp 100 address-family ipv4 unicast vrf RED autonomous-system 100 network 10.0.0.1 0.0.0.0 What is the issue with this EIGRP configuration for VRF RED?
Medium138Drag and drop the steps of EIGRP redistribution from OSPF with metric seeding into the correct order, from first to last.
Medium139A large enterprise uses Cisco SD-WAN with multiple transport clouds (MPLS and Internet). The network team wants to ensure that voice traffic between two branch offices always uses the MPLS link, even if the Internet link has lower latency. The engineer creates a centralized data policy on the vSmart to match voice traffic based on DSCP EF and sets the preferred color to 'mpls'. After applying the policy, the engineer tests and finds that voice traffic is still using the Internet link. The vEdge routers show that the policy is received and active. What is the most likely reason for this failure?
Hard140Drag and drop each MPLS VPN type on the left to its matching layer on the right.
Medium141Drag and drop the steps of YANG data model traversal for interface stats into the correct order, from first to last.
Medium142Drag and drop the steps of MSTP region and instance configuration steps into the correct order, from first to last.
Medium143A network engineer is configuring model-driven telemetry on a Cisco IOS-XE router to stream OSPF neighbor state changes. The engineer uses the YANG model 'Cisco-IOS-XE-ospf-oper' and creates an on-change subscription. After testing, the engineer notices that the telemetry data is being sent, but the collector is receiving duplicate updates for the same OSPF neighbor state change. What is the most likely cause of these duplicate updates?
Easy144Drag and drop the steps of Multicast RP discovery using BSR into the correct order, from first to last.
Medium145Which two statements about VLAN trunking using IEEE 802.1Q are true? (Choose two.)
Medium146Which THREE of the following are components of a Cisco ACI fabric? (Choose three.)
Easy147A network engineer runs the following command on Router R6: R6# show ip route vrf CUSTOMER-D VRF CUSTOMER-D: 10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 10.0.0.0/30 is directly connected, GigabitEthernet0/0.400 L 10.0.0.1/32 is directly connected, GigabitEthernet0/0.400 192.168.0.0/16 is variably subnetted, 1 subnets, 1 mask B 192.168.1.0/24 [200/0] via 10.0.0.2, 00:10:00 R6# show ip bgp vpnv4 vrf CUSTOMER-D BGP table version is 5, local router ID is 10.0.0.6 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *> 192.168.1.0/24 10.0.0.2 0 100 0 i Based on this output, what can be concluded?
Hard148Drag and drop each DNA Center Intent API on the left to its matching use on the right.
Medium149A network engineer writes the following Python script using the Requests library to retrieve interface information from a Cisco IOS-XE device via RESTCONF: ```python import requests import json url = "https://10.1.1.1:443/restconf/data/ietf-interfaces:interfaces" headers = { "Accept": "application/yang-data+json", "Content-Type": "application/yang-data+json" } auth = ("admin", "password") response = requests.get(url, headers=headers, auth=auth, verify=False) print(response.json()) ``` What is the primary issue with this code?
Medium150Drag and drop each PnP workflow step on the left to its matching action on the right.
Medium151Drag and drop the steps of configuring a standard ACL for traffic filtering on a Cisco IOS router into the correct order, from first to last.
Medium152Drag and drop each VM storage type on the left to its matching characteristic on the right.
Medium153Drag and drop each Ansible connection type on the left to its matching protocol on the right.
Medium154Drag and drop each EAP method on the left to its matching authentication type on the right.
Medium155Drag and drop each multicast tree type on the left to its matching description on the right.
Medium156A network engineer is deploying Cisco DNA Center in a brownfield network. The engineer wants to use DNA Center to automate the configuration of QoS policies across all access switches. After discovering the devices and adding them to Inventory, the engineer creates a QoS policy and assigns it to a site. However, when attempting to provision, DNA Center reports that the devices are in 'Compliance Error' state. What is the most likely reason?
Hard157Drag and drop the steps of DSCP re-marking at enterprise WAN edge into the correct order, from first to last.
Medium158Drag and drop each 802.11 standard on the left to its matching frequency band and maximum speed on the right.
Medium159Which two statements about REST API HTTP methods are true? (Choose two.)
Medium160Drag and drop each BGP message type on the left to its matching function on the right.
Medium161Which three statements about Cisco AP join process and discovery are true? (Choose three.)
Hard162A network engineer runs the following command on Switch SW7: SW7# show monitor session 7 Session 7 --------- Type : Local Session Source Ports : Both : Gi1/0/1 Destination Ports : Gi1/0/20 Encapsulation : Native Ingress : Enabled Based on this output, what can be concluded?
Hard163Which two statements about IP SLA probe scheduling and operation states are true? (Choose two.)
Easy164Drag and drop the steps of stateless DHCPv6 address assignment steps into the correct order, from first to last.
Medium165Which three statements about OSPF route summarization are true? (Choose three.)
Medium166Which four statements about multicast group addresses and Layer 2 mapping are true? (Choose four.)
Easy167Which two statements about BGP TTL security are true? (Choose two.)
Medium168Drag and drop each SD-WAN controller on the left to its matching function on the right.
Medium169Drag and drop the steps of Cisco TrustSec inline tagging across fabric into the correct order, from first to last.
Medium170Which three statements about configuring model-driven telemetry on Cisco IOS-XE devices are true? (Choose three.)
Hard171Drag and drop each MPLS label operation on the left to its matching action on the right.
Medium172Which two statements about EtherChannel configuration and verification are true? (Choose two.)
Hard173Drag and drop the steps of SD-Access fabric border handoff configuration into the correct order, from first to last.
Medium174A network engineer runs the following command on Router R9: R9# show ip nat translations Pro Inside global Inside local Outside local Outside global udp 192.0.2.20:1234 10.0.0.20:1234 203.0.113.1:53 203.0.113.1:53 tcp 192.0.2.20:5678 10.0.0.20:5678 198.51.100.1:80 198.51.100.1:80 --- 192.0.2.21 10.0.0.21 --- --- Based on this output, what can be concluded?
Hard175Drag and drop the steps of Cisco ISE profiling and policy assignment flow into the correct order, from first to last.
Medium176Drag and drop the steps of a NETCONF get-config operation into the correct order, from first to last.
Medium177Which two statements about policing and shaping are true? (Choose two.)
Medium178Drag and drop each AAA method list on the left to its correct fallback order on the right.
Medium179Drag and drop the steps of LDP session establishment between LSRs into the correct order, from first to last.
Medium180Which two statements about the Cisco Enterprise Campus Architecture are true? (Choose two.)
Medium181Drag and drop each ISE policy result on the left to its matching enforcement action on the right.
Medium182Which two statements about NAT configuration on Cisco IOS-XE are true? (Choose two.)
Medium183Drag and drop each DNA Center API category on the left to its matching endpoint group on the right.
Medium184Drag and drop the steps of OMP route advertisement between vSmart and vEdge into the correct order, from first to last.
Medium185Which two statements about Cisco DNA Center software image management (SWIM) are true? (Choose two.)
Medium186Which BGP attribute is preferred when it has the lowest value?
Easy187Drag and drop each SD-Access layer on the left to its matching technology on the right.
Medium188Drag and drop each OSPF area type on the left to its matching characteristic on the right.
Medium189Drag and drop each CAPWAP message type on the left to its matching function on the right.
Medium190Which two statements about PortFast are true? (Choose two.)
Easy191Drag and drop the steps of DSCP-to-CoS mapping at LAN boundary into the correct order, from first to last.
Medium192Drag and drop the steps of the CAPWAP discovery and join process between a lightweight AP and a WLC into the correct order, from first to last.
Medium193Drag and drop each data encoding format on the left to its typical use case on the right.
Medium194Drag and drop the steps of SNMPv3 authentication and privacy negotiation into the correct order, from first to last.
Medium195Drag and drop each EIGRP metric component on the left to its matching variable on the right.
Medium196Which three statements about MPLS VPN (Layer 3 VPN) are true? (Choose three.)
Hard197Drag and drop the steps of configuring NETCONF YANG-based telemetry with on-change subscription into the correct order, from first to last.
Hard198Drag and drop each DTP mode on the left to its matching trunking behavior on the right.
Medium199Drag and drop each trunk encapsulation on the left to its matching standard on the right.
Medium200Which two statements about VLAN configuration and verification on a Cisco IOS switch are true? (Choose two.)
Easy201Drag and drop the steps to configure port security on a Cisco switch in the correct order.
Medium202Drag and drop each HTTP method on the left to its matching REST operation on the right.
Medium203Drag and drop the steps of NETCONF edit-config with candidate datastore flow into the correct order, from first to last.
Medium204Which three statements about policing and shaping are true? (Choose three.)
Hard205Drag and drop the steps of NFV MANO (VNFM/NFVO/VIM) interaction flow into the correct order, from first to last.
Medium206Which three statements about REST API authentication and security are true? (Choose three.)
Medium207Which two statements about queuing and congestion management are true? (Choose two.)
Medium208Which two statements about BGP path attributes are true? (Choose two.)
Medium209What is the maximum hop count for EIGRP?
Easy210A network engineer runs the following command on Switch SW8: SW8# show monitor session 8 Session 8 --------- Type : Remote Source Session Source VLANs : Both : 30 Destination Ports : Gi1/0/30 Encapsulation : Replicate Based on this output, what can be concluded?
Medium211Drag and drop the steps of BGP confederations setup between sub-ASes into the correct order, from first to last.
Medium212Which three statements about PAgP (Port Aggregation Protocol) are true? (Choose three.)
Hard213Which BGP attribute is preferred with the lowest value?
Easy214Which three statements about the Multiple Spanning Tree Protocol (MSTP) are true? (Choose three.)
Hard215Drag and drop the steps of SPAN session on EtherChannel member ports into the correct order, from first to last.
Medium216Drag and drop each SD-WAN policy type on the left to its matching application point on the right.
Hard217Drag and drop each syslog severity level on the left to its matching numeric value on the right.
Medium218Which three statements about Cisco DNA Center Assurance are true? (Choose three.)
Hard219Drag and drop each SPAN source type on the left to the traffic it monitors on the right.
Medium220Drag and drop each queuing mechanism on the left to its matching feature on the right.
Medium221Which TWO of the following are valid methods to mitigate VLAN hopping attacks?
Medium222Drag and drop each BGP path selection criterion on the left to its order of preference (1 = highest priority) on the right.
Hard223Which QoS mechanism is used to prevent congestion by dropping packets before a queue becomes full?
Easy224Drag and drop each protocol on the left to its matching characteristic on the right.
Medium225A network administrator needs to allow SSH access to a router from the management network 192.168.1.0/24. Which configuration should be applied?
Easy226An engineer is troubleshooting QoS on a Cisco ASR 1002 router. The router is configured with a policy map that includes a class for voice with a priority command. During congestion, the engineer notices that voice traffic is being dropped even though the priority queue is not congested. The router logs show 'QoS: priority queue overflow'. What is the most likely cause?
Hard227Which three statements about DHCP snooping are true? (Choose three.)
Medium228Drag and drop each CoS value on the left to its matching traffic type on the right.
Medium229Drag and drop each service chaining element on the left to its matching position in a typical chain on the right.
Hard230Drag and drop each DSCP PHB on the left to its matching queue treatment on the right.
Medium231Match each network automation tool to its purpose.
Medium232Drag and drop each QoS model on the left to its matching characteristic on the right.
Medium233Which three statements about RADIUS server configuration and operation are true? (Choose three.)
Medium234Which three statements about HTTP response status codes in REST APIs are true? (Choose three.)
Easy235Drag and drop each EtherChannel load-balance method on the left to its matching hashing input on the right.
Hard236Drag and drop the steps of MPLS LDP label distribution and FIB population into the correct order, from first to last.
Medium237An engineer is configuring a virtual machine on a Microsoft Hyper-V host. The VM runs a legacy application that requires a static MAC address. The engineer sets the MAC address in the VM settings. After the VM starts, the application cannot communicate on the network. The engineer verifies that the MAC address is not duplicated on the network. What is the most likely cause?
Easy238Which three statements about NAT64 and NPTv6 are true? (Choose three.)
Hard239A network administrator is troubleshooting a BGP routing issue where routes from an eBGP neighbor are not being installed in the routing table. The 'show ip bgp' output shows the routes are received but not valid. What is the most likely cause?
Medium240Which three statements about trunking and VLAN pruning are true? (Choose three.)
Medium241Drag and drop the steps of DMVPN Phase 1 spoke-to-hub tunnel setup into the correct order, from first to last.
Medium242Drag and drop the steps of cisco.ios.ios_config module idempotent apply flow into the correct order, from first to last.
Hard243A network engineer is troubleshooting an OSPF adjacency issue between two routers connected via a serial link. The adjacency is stuck in the INIT state. The engineer has verified that the IP addresses are in the same subnet and that the link is up. What is the most likely cause?
Easy244Router R5 has the following OSPF configuration: router ospf 1 router-id 5.5.5.5 network 10.0.0.0 0.255.255.255 area 0 area 0 authentication message-digest ! interface GigabitEthernet0/0 ip address 10.1.1.5 255.255.255.0 ip ospf message-digest-key 1 md5 cisco123 What is missing from this OSPF authentication configuration?
Medium245Which two statements about EIGRP route summarization are true? (Choose two.)
Medium246Drag and drop the steps of traffic shaping vs policing configuration steps into the correct order, from first to last.
Medium247Which THREE benefits does network automation provide over manual configuration?
Easy248Drag and drop the steps of Dynamic Trunking Protocol (DTP) negotiation into the correct order, from first to last.
Medium249Drag and drop each BGP attribute on the left to its matching attribute type on the right.
Medium250Drag and drop the steps of configuring an IP SLA ICMP echo operation into the correct order, from first to last.
Medium251Drag and drop the steps of Flexible NetFlow flow record and exporter setup into the correct order, from first to last.
Medium252A network engineer runs the following command on Router R1: R1# show policy-map control-plane Control Plane Service-policy input: CoPP-POLICY Class-map: MGMT-CLASS (match-all) 100 packets, 5000 bytes 5 minute offered rate 1000 bps Match: access-group name MGMT-ACL police: cir 32000 bps, bc 4000 bytes, be 4000 bytes conformed 80 packets, 4000 bytes; actions: transmit exceeded 15 packets, 750 bytes; actions: drop violated 5 packets, 250 bytes; actions: drop Class-map: class-default (match-any) 200 packets, 10000 bytes 5 minute offered rate 2000 bps Match: any police: cir 64000 bps, bc 8000 bytes, be 8000 bytes conformed 200 packets, 10000 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop Based on this output, what can be concluded?
Hard253Drag and drop each BGP message type on the left to its matching function on the right.
Medium254Drag and drop the steps of Cisco SD-WAN control plane establishment sequence into the correct order, from first to last.
Medium255Drag and drop each VM storage type on the left to its matching characteristic on the right.
Medium256Drag and drop each DNA Center Intent API on the left to its matching use on the right.
Medium257Drag and drop each IP SLA schedule parameter on the left to its function on the right.
Medium258Drag and drop the steps of VNF scaling up and scaling out steps into the correct order, from first to last.
Medium259Drag and drop each MPLS label operation on the left to its matching action on the right.
Medium260Drag and drop the steps of DMVPN Phase 1 spoke-to-hub tunnel setup into the correct order, from first to last.
Medium261Drag and drop the steps of SD-WAN zero-touch provisioning (ZTP) flow into the correct order, from first to last.
Medium262Drag and drop the steps of EIGRP authentication using MD5 key-chain into the correct order, from first to last.
Medium263Drag and drop the steps of IBNS 2.0 concurrent authentication policy map into the correct order, from first to last.
Medium264Drag and drop each OSPF network type on the left to its matching DR election behavior on the right.
Medium265Drag and drop each STP port role on the left to its matching definition on the right.
Medium266Drag and drop each SNMP version on the left to its matching security feature on the right.
Medium267Which TWO statements are true about RESTCONF and NETCONF in a Cisco IOS XE environment? (Choose two.)
Hard268Which three statements about RADIUS and TACACS+ are true? (Choose three.)
Hard269Drag and drop the steps for configuring STP root guard and loop guard and the resulting port behavior into the correct order, from first to last.
Medium270Which three statements about DHCP relay are true? (Choose three.)
Medium271A network engineer is configuring port security on a Cisco switch. The requirement is to allow only the first MAC address that appears on the port to be learned and to automatically disable the port if a violation occurs. The engineer configures 'switchport port-security mac-address sticky' but does not specify a maximum number of secure MAC addresses. After connecting a single host, the port works. However, when the host is replaced with a different device, the port is error-disabled. What is the most likely reason?
Medium272Which three statements about LACP (Link Aggregation Control Protocol) are true? (Choose three.)
Medium273Drag and drop each Cisco DNA Center workflow on the left to its matching component on the right.
Medium274Drag and drop each leased line technology on the left to its matching speed on the right.
Easy275What is the maximum number of SPAN sessions that can be configured on a Cisco Catalyst 9300 switch?
Easy276Drag and drop the steps of AAA method list fallback from RADIUS to local into the correct order, from first to last.
Medium277Drag and drop each STP port role on the left to its matching definition on the right.
Medium278What is the default OSPF hello interval on an Ethernet link?
Easy279Drag and drop each OMP attribute on the left to its matching behavior on the right.
Hard280Drag and drop the steps of EIGRP stub configuration for hub-and-spoke into the correct order, from first to last.
Medium281A network engineer is configuring CoPP on a Cisco ASR 1000 router to protect the control plane from excessive traffic. The engineer wants to allow BGP traffic from a specific peer (10.0.0.1) while rate-limiting all other BGP traffic. The engineer creates an ACL that permits TCP port 179 from host 10.0.0.1 and denies all other BGP traffic. The CoPP class-map matches this ACL. However, after applying the policy, BGP sessions from other peers are still being established. What is the most likely reason?
Hard282Drag and drop the steps of gRPC dial-in telemetry session from collector into the correct order, from first to last.
Medium283Which three statements about RSPAN are true? (Choose three.)
Hard284Drag and drop the steps of EtherChannel troubleshooting and verification into the correct order, from first to last.
Medium285Drag and drop each RADIUS attribute on the left to its correct attribute number on the right.
Medium286Drag and drop the steps of BGP policy application (route-map, prefix-list, AS-path ACL) into the correct order, from first to last.
Medium287Which two statements about 802.1X authentication process are true? (Choose two.)
Medium288Drag and drop each DHCP option on the left to its matching purpose on the right.
Medium289Drag and drop the steps of Ansible Tower (AWX) job template execution steps into the correct order, from first to last.
Medium290Which three statements about virtual machine (VM) resource allocation and overcommitment are true? (Choose three.)
Hard291Drag and drop the steps of the PPDIOO network lifecycle into the correct order, from first to last.
Medium292Drag and drop each SNMP component on the left to its matching role on the right.
Medium293Drag and drop each BGP path selection criterion on the left to its correct order of preference (1 = highest priority) on the right.
Hard294Which three statements about Cisco QoS policing and shaping are true? (Choose three.)
Medium295Drag and drop each data encoding format on the left to its matching use case on the right.
Medium296Drag and drop each VNF category on the left to its matching example on the right.
Medium297Drag and drop the steps of SR-IOV configuration for VM network bypass into the correct order, from first to last.
Medium298Drag and drop the steps of CBWFQ and LLQ queue servicing order into the correct order, from first to last.
Medium299Drag and drop each traffic direction on the left to its correct SPAN keyword on the right.
Medium300Based on the exhibit, which traffic will be permitted outbound on GigabitEthernet0/0?
Hard301Consider the following Python script that uses the requests library to delete a VLAN via RESTCONF on a Cisco IOS-XE device: ```python import requests from requests.auth import HTTPBasicAuth url = 'https://192.168.1.1/restconf/data/Cisco-IOS-XE-native:native/vlan=10' headers = { 'Accept': 'application/yang-data+json', 'Content-Type': 'application/yang-data+json' } auth = HTTPBasicAuth('admin', 'cisco') response = requests.delete(url, headers=headers, auth=auth, verify=False) print(response.status_code) ``` What is the expected outcome if the VLAN 10 exists?
Medium302Drag and drop the steps of configuring model-driven telemetry with gRPC on a Cisco IOS-XE device into the correct order, from first to last.
Medium303Drag and drop the steps of IKEv2 fragmentation and DPD keepalive process into the correct order, from first to last.
Medium304Drag and drop the steps of Cisco IOS-XE mdt subscription via CLI configuration into the correct order, from first to last.
Medium305Which two statements about RESTCONF are true? (Choose two.)
Medium306Which two statements about IPsec IKEv2 are true? (Choose two.)
Medium307Which two statements about Type 1 and Type 2 hypervisors are true? (Choose two.)
Medium308Drag and drop each telemetry model on the left to its matching push type (dial-in or dial-out) on the right.
Medium309Drag and drop the steps of Ansible Vault encryption and decryption steps into the correct order, from first to last.
Medium310Drag and drop each SD-WAN controller on the left to its matching function on the right.
Medium311Drag and drop each EtherChannel port state on the left to its matching description on the right.
Medium312Drag and drop each Netmiko device type on the left to its matching OS on the right.
Medium313Drag and drop the steps of VLAN pruning on trunks using VTP into the correct order, from first to last.
Medium314Drag and drop each STP variant on the left to its matching IEEE standard on the right.
Medium315Which two statements about BGP route selection are true? (Choose two.)
Hard316Which three statements about EIGRP stub routing are true? (Choose three.)
Hard317Drag and drop the steps of PAgP EtherChannel negotiation into the correct order, from first to last.
Medium318Which three statements about NFV MANO (Management and Orchestration) are true? (Choose three.)
Hard319Your company has deployed a Cisco Catalyst 9300 switch stack as the distribution layer for a campus network. The network uses VLANs 10 (data), 20 (voice), and 30 (management). The switch stack is configured with DHCP snooping, Dynamic ARP Inspection (DAI), and IP Source Guard (IPSG) on access ports. Recently, users in VLAN 10 report intermittent connectivity issues. You notice that some users receive duplicate IP addresses from the DHCP server. The DHCP server is connected to a trunk port on the switch stack. After reviewing logs, you see that DHCPACK messages are being dropped on the trunk port. The DHCP snooping binding table shows entries for legitimate clients, but also some entries with MAC addresses from a different vendor. Which action should you take to resolve the issue?
Hard320Which two statements about telemetry subscription types in model-driven telemetry are true? (Choose two.)
Medium321Given this configuration on a Cisco IOS-XE router: crypto ikev2 keyring KEYRING peer SPOKE1 address 192.168.2.1 pre-shared-key cisco123 ! crypto ikev2 profile IKEV2_PROF match identity remote address 192.168.2.1 255.255.255.255 authentication remote pre-share authentication local pre-share keyring KEYRING ! What is missing from this configuration for a successful IKEv2 tunnel to the peer at 192.168.2.1?
Medium322A network engineer is configuring model-driven telemetry on a Cisco IOS-XE device that is part of a DNA Center managed fabric. The telemetry subscription configuration is: telemetry ietf subscription 101 encoding encode-kvgpb filter xpath /process-cpu-ios-xe-oper:cpu-usage/cpu-utilization stream yang-push update-policy periodic 500 receiver ip address 10.10.10.10 port 5555 protocol grpc-tcp What is the purpose of the 'encoding encode-kvgpb' line?
Hard323Drag and drop the steps of DNA Center site hierarchy creation into the correct order, from first to last.
Medium324Which three statements about Cisco DNA Center software image management are true? (Choose three.)
Hard325Which two statements about Cisco SD-WAN overlay routing and OMP are true? (Choose two.)
Hard326Drag and drop the steps of EtherChannel load-balancing hash configuration into the correct order, from first to last.
Medium327Drag and drop each NAPALM getter on the left to its matching returned data on the right.
Medium328Which three statements about EIGRP named mode configuration are true? (Choose three.)
Hard329Drag and drop each TrustSec component on the left to its matching function on the right.
Hard330Which two statements about Ansible modules and idempotency are true? (Choose two.)
Medium331Match each routing protocol to its administrative distance.
Medium332What is the maximum hop count for EIGRP?
Easy333Which two statements about VRF-aware services are true? (Choose two.)
Medium334A network engineer is deploying model-driven telemetry on a Cisco Nexus 9000 switch to monitor BGP prefix changes. The engineer wants to use YANG data models and prefers a transport protocol that is lightweight and uses UDP. Which transport protocol should the engineer select for the telemetry stream?
Medium335Drag and drop the steps of IP Source Guard binding and enforcement into the correct order, from first to last.
Medium336Drag and drop the steps of NFV MANO (VNFM/NFVO/VIM) interaction flow into the correct order, from first to last.
Medium337Drag and drop the steps of MP-BGP VPNv4 route advertisement between PE routers into the correct order, from first to last.
Medium338Drag and drop each OSPF area type on the left to its matching characteristic on the right.
Medium339Which TWO features are part of Cisco TrustSec for providing role-based access control?
Easy340Which two statements about Cisco Wireless LAN Controller (WLC) high availability (SSO) are true? (Choose two.)
Medium341Which three statements about DHCP snooping are true? (Choose three.)
Hard342Which two statements about Cisco DNA Center integration with Cisco SD-Access are true? (Choose two.)
Medium343Drag and drop the steps of SD-Access fabric node onboarding into DNA Center into the correct order, from first to last.
Medium344Drag and drop the steps of NetFlow v9 cache export process into the correct order, from first to last.
Medium345A network engineer is designing a disaster recovery solution using VMware vSphere. The engineer needs to replicate virtual machines from the primary site to a secondary site with minimal downtime. The application VMs are running on NFS datastores. The engineer plans to use vSphere Replication. What prerequisite must be met for vSphere Replication to work with NFS datastores?
Easy346Drag and drop the steps of SD-WAN edge device (vEdge/cEdge) bring-up sequence into the correct order, from first to last.
Medium347Drag and drop each NAT terminology on the left to its matching definition on the right.
Medium348Drag and drop the steps of using a REST API to retrieve interface statistics from a Cisco device into the correct order, from first to last.
Medium349Which two statements about network design for high availability are true? (Choose two.)
Easy350Which two statements about Cisco SD-WAN control plane components are true? (Choose two.)
Medium351Which three statements about STP topology changes and convergence are true? (Choose three.)
Medium352Which two statements about NetFlow are true? (Choose two.)
Medium353Drag and drop each ACL type on the left to its matching capability on the right.
Medium354A network engineer uses the following Python script with Netmiko to send a command to a Cisco IOS-XE device: ```python from netmiko import ConnectHandler device = { 'device_type': 'cisco_ios', 'ip': '10.1.1.1', 'username': 'admin', 'password': 'password', 'secret': 'enable_secret' } connection = ConnectHandler(**device) output = connection.send_command('show ip interface brief') print(output) connection.disconnect() ``` What is the purpose of the 'secret' parameter in the device dictionary?
Easy355Drag and drop each SNMPv3 security level on the left to its matching protection description on the right.
Medium356Drag and drop the steps of service function chaining (SFC) path setup into the correct order, from first to last.
Medium357Drag and drop each VLAN type on the left to its matching purpose on the right.
Medium358Which three statements about syslog configuration on Cisco IOS devices are true? (Choose three.)
Hard359Which TWO are benefits of using a spine-leaf architecture in a data center? (Choose two.)
Easy360Drag and drop the steps of WPA3 client authentication process into the correct order, from first to last.
Medium361Drag and drop the steps of WPA3 client authentication process into the correct order, from first to last.
Medium362Drag and drop the steps of MST region configuration and operation into the correct order, from first to last.
Medium363Drag and drop the steps of Control Plane Policing (CoPP) rate-limit evaluation into the correct order, from first to last.
Medium364Drag and drop the steps of sFlow agent sampling and forwarding steps into the correct order, from first to last.
Medium365Drag and drop each flow record field on the left to its matching category (key or non-key) on the right.
Medium366Which two statements about Cisco DNA Center automation workflows are true? (Choose two.)
Medium367Which three statements about NAT traversal and translation are true? (Choose three.)
Medium368Drag and drop the steps of Netmiko multi-threaded device polling workflow into the correct order, from first to last.
Medium369Drag and drop the steps of Ansible Tower (AWX) job template execution steps into the correct order, from first to last.
Medium370Drag and drop the steps of syslog message generation and storage into the correct order, from first to last.
Medium371Drag and drop the steps of MPLS L2VPN (AToM) pseudowire setup into the correct order, from first to last.
Medium372Drag and drop the steps of DMVPN phase 2 spoke-to-spoke tunnel establishment into the correct order, from first to last.
Hard373Drag and drop each Ansible variable precedence level on the left to its matching scope on the right.
Hard374Drag and drop the steps of Netconf/Yang-based device monitoring subscription into the correct order, from first to last.
Medium375Drag and drop each WAN technology on the left to its matching layer on the right.
Medium376A network engineer is planning to use Cisco DNA Center to automate the deployment of a new branch office. The engineer has already discovered the devices and added them to Inventory. The engineer wants to use a template to configure the devices consistently. Which tool in DNA Center should the engineer use to create and apply the template?
Easy377Which two statements about DMVPN Phase 2 are true? (Choose two.)
Medium378Which three statements about IP SLA threshold monitoring and reaction configuration are true? (Choose three.)
Hard379Drag and drop the steps to configure VLAN Trunking Protocol (VTP) on a Cisco switch in the correct order.
Medium380A network engineer runs the following command on Router R1: R1# show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 10.0.0.2 1 FULL/DR 00:00:32 192.168.1.2 GigabitEthernet0/0 10.0.0.3 1 2WAY/DROTHER 00:00:35 192.168.1.3 GigabitEthernet0/0 Based on this output, what can be concluded?
Medium381Drag and drop the steps of Metro Ethernet E-Line service provisioning into the correct order, from first to last.
Medium382Drag and drop each streaming telemetry mode on the left to its matching trigger on the right.
Medium383Drag and drop each VRF component on the left to its matching function on the right.
Medium384Which three statements about BGP route reflectors are true? (Choose three.)
Hard385Drag and drop each ERSPAN version on the left to its correct header format description on the right.
Medium386Drag and drop the steps of CoPP policy evaluation order into the correct order, from first to last.
Medium387Drag and drop the steps of GET VPN key server registration and rekey into the correct order, from first to last.
Medium388Drag and drop the steps of Multicast RP discovery using Auto-RP into the correct order, from first to last.
Medium389Drag and drop the steps of LLQ configuration for voice traffic into the correct order, from first to last.
Medium390Drag and drop the steps of telemetry path validation using YANG DevKit into the correct order, from first to last.
Medium391Drag and drop each EAP method on the left to its matching authentication type on the right.
Medium392Drag and drop the steps of EIGRP named mode configuration steps into the correct order, from first to last.
Medium393Drag and drop each queuing mechanism on the left to its matching feature on the right.
Medium394A network engineer runs the following command on Switch SW1: SW1# show interfaces trunk Port Mode Encapsulation Status Native vlan Gi0/1 on 802.1q trunking 1 Gi0/2 on 802.1q trunking 1 Port Vlans allowed on trunk Gi0/1 1-1005 Gi0/2 1-1005 Port Vlans allowed and active in management domain Gi0/1 1,10,20 Gi0/2 1,10,20 Port Vlans in spanning tree forwarding state and not pruned Gi0/1 1,10,20 Gi0/2 1,10,20 Based on this output, what can be concluded?
Hard395Drag and drop each SNMP component on the left to its matching role on the right.
Medium396Drag and drop the steps of connecting to a network device via Netmiko into the correct order, from first to last.
Medium397Which three statements about BGP route reflectors are true? (Choose three.)
Hard398Drag and drop the steps of the gRPC dial-out telemetry subscription flow into the correct order, from first to last.
Medium399Drag and drop each RSPAN VLAN requirement on the left to its correct restriction on the right.
Medium400Which three statements about OSPF LSA types are correct? (Choose three.)
Hard401Drag and drop each protocol on the left to its matching characteristic on the right.
Medium402Which BGP attribute is preferred when it has the lowest value?
Medium403A network engineer is troubleshooting a problem where Cisco DNA Center is not receiving syslog messages from a critical core switch. The switch is configured to send syslog to the DNA Center's IP address. The engineer checks the DNA Center syslog collector and finds that it is enabled. What should the engineer check next?
Medium404Drag and drop each protocol number on the left to its matching protocol on the right.
Easy405Drag and drop each OMP attribute on the left to its matching behavior on the right.
Hard406Drag and drop the steps of NBAR2 application recognition and classification steps into the correct order, from first to last.
Medium407Drag and drop the steps of IPFIX template negotiation and export into the correct order, from first to last.
Medium408Drag and drop the steps of Hierarchical QoS (H-QoS) parent/child policy steps into the correct order, from first to last.
Medium409Which two statements about classification and marking in QoS are true? (Choose two.)
Medium410Drag and drop the steps of TACACS+ command authorization flow into the correct order, from first to last.
Medium411Drag and drop each RESTCONF method on the left to its matching NETCONF equivalent on the right.
Medium412An engineer is using a Python script to retrieve interface statistics from a Cisco IOS-XE device via the REST API. The script sends a GET request to 'https://device/restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet1/statistics' and receives a 404 Not Found response. The interface exists and is operational. What is the most likely issue?
Medium413Drag and drop each CoS value on the left to its matching traffic type on the right.
Medium414Which two statements about the interaction between ACLs and CoPP are true? (Choose two.)
Hard415Drag and drop each DSCP value on the left to its matching Per-Hop Behavior (PHB) on the right.
Medium416Drag and drop each sFlow component on the left to its matching function on the right.
Medium417Drag and drop each NetFlow version on the left to its matching feature description on the right.
Medium418Drag and drop each sFlow component on the left to its matching function on the right.
Medium419Drag and drop the steps of VRF selection using policy-based routing into the correct order, from first to last.
Medium420Which of the following is a valid transport protocol for model-driven telemetry receivers on Cisco IOS-XE?
Easy421Which two statements about NFV MANO (Management and Orchestration) are true? (Choose two.)
Medium422Drag and drop the steps of Unicast Reverse Path Forwarding (uRPF) check process into the correct order, from first to last.
Medium423Drag and drop the steps of OSPF redistribution from EIGRP with metric conversion into the correct order, from first to last.
Medium424Drag and drop each RADIUS attribute name on the left to its matching attribute number on the right.
Medium425Drag and drop the steps of SSL VPN (AnyConnect) session establishment into the correct order, from first to last.
Medium426Drag and drop the steps of deploying a CoPP policy on a Cisco IOS-XE router into the correct order, from first to last.
Medium427A network engineer runs the following command on Switch SW2: SW2# show monitor session 2 Session 2 --------- Type : Remote Source Session Source Ports : TX Only : Gi1/0/5 RX Only : Gi1/0/6 Destination Ports : Gi1/0/20 Encapsulation : Replicate Based on this output, what can be concluded?
Medium428A network engineer is using Cisco DNA Center to monitor network health. The Assurance dashboard shows that a particular access switch has a high CPU utilization issue. The engineer wants to investigate the root cause using DNA Center's built-in tools. Which feature should the engineer use to analyze the switch's CPU utilization over time?
Easy429Which two statements about PIM sparse mode are true? (Choose two.)
Medium430Drag and drop each AAA function on the left to its correct description on the right.
Medium431Drag and drop the steps of TrustSec SGT assignment and propagation via SXP into the correct order, from first to last.
Medium432Drag and drop each gRPC method on the left to its matching subscription type on the right.
Medium433Drag and drop each SD-Access fabric role on the left to its matching function on the right.
Medium434A network engineer runs the following command on Switch SW5: SW5# show monitor session 5 Session 5 --------- Type : Remote Source Session Source Ports : Both : Gi1/0/1-3 Destination Ports : Gi1/0/24 Encapsulation : Replicate Based on this output, what can be concluded?
Hard435Consider the following telemetry configuration on a Cisco IOS-XE device: telemetry ietf subscription 600 encoding encode-kvgpb filter xpath /interfaces/interface/state stream yang-push update-policy on-change receiver ip address 10.1.1.1 50000 protocol grpc What is a potential issue with this configuration?
Medium436Which three statements about virtual networking and hypervisor switches are true? (Choose three.)
Hard437Which two statements about the MQC (Modular QoS CLI) classification process are true? (Choose two.)
Medium438Drag and drop the steps of MPLS Traffic Engineering (TE) tunnel setup (RSVP) into the correct order, from first to last.
Medium439Drag and drop the steps of Embedded Packet Capture (EPC) on IOS-XE steps into the correct order, from first to last.
Medium440Which two statements about MPLS label operations are true? (Choose two.)
Medium441Drag and drop the steps of MSTP region and instance configuration steps into the correct order, from first to last.
Medium442Drag and drop the steps of DNA Center SWIM (Software Image Management) upgrade flow into the correct order, from first to last.
Medium443Drag and drop the steps of Jinja2 template rendering for device config generation into the correct order, from first to last.
Medium444An Ansible playbook uses the cisco.ios.ios_telemetry module to configure a telemetry subscription: ```yaml --- - name: Configure telemetry subscription hosts: ios_xe gather_facts: no tasks: - name: Create telemetry subscription cisco.ios.ios_telemetry: state: present subscription_id: 300 receiver: ip: 10.1.1.100 port: 50051 protocol: grpc-tcp source_ip: 10.1.1.1 encoding: kvgpb filter: xpath: /interfaces/interface/state/counters update_policy: period: 10000 ``` What is the purpose of the 'state: present' parameter?
Easy445Drag and drop the steps of deploying a virtual machine from a template in VMware vSphere into the correct order, from first to last.
Medium446Which three statements about Cisco QoS queuing and scheduling are true? (Choose three.)
Hard447Drag and drop the steps of PHP (Penultimate Hop Popping) operation into the correct order, from first to last.
Medium448Drag and drop the steps of OSPF summarization at ABR configuration steps into the correct order, from first to last.
Medium449Drag and drop each TACACS+ packet type on the left to its matching function on the right.
Medium450Given the following Ansible playbook snippet: --- - name: Configure SNMP hosts: routers gather_facts: no tasks: - name: SNMP community ios_config: lines: - snmp-server community public RO What is the result of this playbook?
Medium451Drag and drop the steps of Cisco IOS-XE mdt subscription via CLI configuration into the correct order, from first to last.
Medium452Which three statements about RADIUS and TACACS+ are true? (Choose three.)
Hard453Drag and drop the steps of JSON vs XML encoding selection for RESTCONF into the correct order, from first to last.
Medium454Drag and drop the steps of DHCP snooping operation on a Cisco switch into the correct order, from first to last.
Medium455A network engineer is troubleshooting performance issues on a VMware ESXi host running multiple VMs. The host has two physical CPUs, each with 8 cores (16 logical processors with Hyper-Threading enabled). One VM, configured with 8 vCPUs, experiences high CPU ready time. Other VMs on the host are idle. What is the most likely cause of the high CPU ready time?
Hard456Drag and drop the steps of SD-WAN traffic engineering app-aware routing steps into the correct order, from first to last.
Medium457A network engineer runs the following command on Router R1: R1# show policy-map control-plane Control Plane Service-policy input: CoPP-POLICY Class-map: BGP-CLASS (match-all) 50 packets, 2500 bytes 5 minute offered rate 500 bps Match: access-group name BGP-ACL police: cir 64000 bps, bc 8000 bytes, be 8000 bytes conformed 50 packets, 2500 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop Class-map: SNMP-CLASS (match-all) 200 packets, 10000 bytes 5 minute offered rate 2000 bps Match: access-group name SNMP-ACL police: cir 16000 bps, bc 2000 bytes, be 2000 bytes conformed 150 packets, 7500 bytes; actions: transmit exceeded 40 packets, 2000 bytes; actions: drop violated 10 packets, 500 bytes; actions: drop Class-map: class-default (match-any) 100 packets, 5000 bytes 5 minute offered rate 1000 bps Match: any police: cir 32000 bps, bc 4000 bytes, be 4000 bytes conformed 100 packets, 5000 bytes; actions: transmit exceeded 0 packets, 0 bytes; actions: drop violated 0 packets, 0 bytes; actions: drop Based on this output, what can be concluded?
Hard458A service provider is migrating a customer from a global routing table to a VRF on a Cisco ASR 1000. The customer has a BGP session with the provider for internet access. After moving the customer's interface to VRF CUSTOMER_D, the BGP session goes down. The engineer verifies that the VRF is configured with the correct route-target and that the BGP neighbor is configured under address-family ipv4 vrf CUSTOMER_D. What else is missing?
Easy459Which three statements about the Differentiated Services (DiffServ) QoS model are true? (Choose three.)
Hard460Which two statements about YANG data models and their role in model-driven telemetry are true? (Choose two.)
Medium461An engineer uses the following Ansible playbook to configure an interface on a Cisco IOS-XE device using the cisco.ios.ios_interfaces module: ```yaml --- - name: Configure interface hosts: cisco-routers gather_facts: no tasks: - name: Set interface description cisco.ios.ios_interfaces: config: - name: GigabitEthernet0/1 description: "Uplink to Core" enabled: true state: replaced ``` What is the result of running this playbook?
Medium462Drag and drop the steps of NBAR2 application recognition and classification steps into the correct order, from first to last.
Medium463What is the maximum hop count for EIGRP?
Easy464Drag and drop the steps of ISE profiling-based dynamic ACL assignment into the correct order, from first to last.
Medium465Drag and drop each multicast tree type on the left to its matching description on the right.
Medium466Which two statements about native VLANs on an 802.1Q trunk are true? (Choose two.)
Medium467Which two statements about MPLS label operations are true? (Choose two.)
Medium468Drag and drop the steps of Cisco DHCP snooping binding table population into the correct order, from first to last.
Medium469Drag and drop the steps of IKEv2 IPsec tunnel establishment into the correct order, from first to last.
Medium470Which three statements about configuring AAA on Cisco IOS devices are true? (Choose three.)
Hard471Drag and drop the steps of Dynamic ARP Inspection (DAI) packet validation into the correct order, from first to last.
Medium472Drag and drop the steps of configuring a Cisco IOS Zone-Based Firewall (ZBFW) into the correct order, from first to last.
Medium473Drag and drop each traffic shaping or policing characteristic on the left to its correct description on the right.
Medium474Drag and drop the steps of IGMP v3 SSM membership report process into the correct order, from first to last.
Medium475Drag and drop each EtherChannel protocol on the left to its matching vendor on the right.
Medium476Which three statements about Syslog severity levels are true? (Choose three.)
Easy477Drag and drop the steps of DMVPN Phase 2 NHRP resolution process into the correct order, from first to last.
Medium478Drag and drop the steps of parsing 'show interfaces' output using TextFSM into the correct order, from first to last.
Medium479An Ansible playbook is written to configure a VLAN on a Cisco IOS-XE device via Cisco DNA Center's intent API: - name: Configure VLAN via DNA Center hosts: localhost gather_facts: no tasks: - name: Create VLAN 100 cisco.dnac.vlan: host: "{{ dnac_host }}" username: "{{ dnac_username }}" password: "{{ dnac_password }}" validate_certs: no state: present vlan_name: "Engineering" vlan_id: 100 site_id: "{{ site_id }}" register: result - debug: var=result What is a potential issue with this playbook?
Hard480Drag and drop each AAA function on the left to its matching description on the right.
Medium481Drag and drop the steps of SNMP bulk walk operation process into the correct order, from first to last.
Medium482Drag and drop each IPv6 ACL feature on the left to its matching IPv4 equivalent on the right.
Hard483Which two statements about DMVPN phase 2 are true? (Choose two.)
Hard484Drag and drop each YANG statement on the left to its matching function on the right.
Medium485Drag and drop the steps of SD-WAN zero-touch provisioning (ZTP) flow into the correct order, from first to last.
Medium486Drag and drop the steps of IP SLA DNS lookup operation setup into the correct order, from first to last.
Medium487Which two statements about SD-WAN policy architecture are true? (Choose two.)
Medium488A network engineer is configuring a Cisco router to act as a DHCP server for a branch office. The engineer creates a DHCP pool for the 192.168.1.0/24 subnet and configures the default-router, dns-server, and domain-name options. However, clients are able to obtain IP addresses but cannot ping the default gateway. The engineer verifies that the router's interface IP is 192.168.1.1. What is the most likely cause?
Easy489Drag and drop the steps of Rapid PVST+ convergence process into the correct order, from first to last.
Medium490Drag and drop the steps of OSPF redistribution from EIGRP with metric conversion into the correct order, from first to last.
Hard491Which three statements about RRM (Radio Resource Management) in a Cisco wireless LAN are true? (Choose three.)
Medium492Drag and drop the steps of Ansible inventory grouping and variable inheritance into the correct order, from first to last.
Medium493A Python script using Netmiko to configure telemetry on a Cisco IOS-XE device: ```python from netmiko import ConnectHandler device = { 'device_type': 'cisco_ios', 'host': '192.168.1.1', 'username': 'admin', 'password': 'cisco', } connection = ConnectHandler(**device) config_commands = [ 'telemetry ietf subscription 200', 'receiver ip address 10.1.1.100 port 50051 protocol grpc-tcp', 'source-address 10.1.1.1', 'encoding encode-kvgpb', 'filter xpath /interfaces/interface/state/counters', 'update-policy periodic 10000' ] output = connection.send_config_set(config_commands) print(output) connection.disconnect() ``` What is the expected outcome of this script?
Medium494Which two statements about Cisco DNA Center automation workflows are true? (Choose two.)
Medium495Which TWO methods can be used to prevent unauthorized access to the privileged EXEC mode on a Cisco router? (Choose two.)
Easy496A network engineer is using the Cisco Meraki REST API to update the SSID settings for a wireless network. The engineer sends a PUT request to 'https://api.meraki.com/api/v1/networks/{networkId}/wireless/ssids/{ssidNumber}' with a JSON payload containing the new settings. The API returns a 429 Too Many Requests error. What should the engineer do to resolve this issue?
Easy497Which two statements about AAA accounting are true? (Choose two.)
Medium498Drag and drop the steps of SSL VPN (AnyConnect) session establishment into the correct order, from first to last.
Medium499Drag and drop each OSPF packet type on the left to its matching function on the right.
Medium500Drag and drop each CoPP class on the left to its matching traffic type on the right.
Medium501Drag and drop each STP protection feature on the left to its matching purpose on the right.
Medium502Which three statements about MPLS Layer 3 VPNs are true? (Choose three.)
Hard503Drag and drop each SD-WAN plane on the left to its matching function on the right.
Medium504Drag and drop the steps of vSphere VM snapshot creation and revert steps into the correct order, from first to last.
Medium505A network engineer is configuring model-driven telemetry on a Cisco IOS-XE router to stream BGP route updates to a collector using gRPC dial-out. The engineer wants to ensure that the telemetry data is encrypted in transit. Which additional configuration is required to secure the gRPC telemetry stream?
Medium506Which three statements about VRF-lite are true? (Choose three.)
Hard507A network engineer is deploying 802.1X with Cisco ISE for a wired network. The engineer wants to use CoA (Change of Authorization) to dynamically change the VLAN of a user after authentication. The engineer configures the switch with 'aaa server radius dynamic-author' and the ISE with CoA settings. When the engineer tests CoA from ISE, the switch logs show 'CoA request received' but the VLAN does not change. What is the most likely cause?
Hard508Which three statements about the classification and marking tools in Cisco IOS are true? (Choose three.)
Hard509Which three statements about Cisco Wireless LAN Controller (WLC) mobility groups are true? (Choose three.)
Hard510Drag and drop each EtherChannel load-balance method on the left to its matching hashing input on the right.
Medium511Given the following configuration: router eigrp TEST network 10.0.0.0 0.255.255.255 network 192.168.1.0 ! interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 ip summary-address eigrp TEST 10.0.0.0 255.0.0.0 5 What is the effect of the ip summary-address command?
Medium512Drag and drop the steps of configuring a native VLAN mismatch detection into the correct order, from first to last.
Medium513Drag and drop the steps of Flexible NetFlow flow record and exporter setup into the correct order, from first to last.
Medium514Given the following configuration snippet on a Cisco IOS-XE switch: interface GigabitEthernet1/0/1 switchport mode access switchport access vlan 10 spanning-tree portfast monitor session 1 source interface GigabitEthernet1/0/1 both monitor session 1 destination interface GigabitEthernet1/0/2 What is the effect of this configuration?
Medium515Drag and drop the steps of OSPF route redistribution into a different autonomous system into the correct order, from first to last.
Hard516Which TWO statements about Cisco DNA Center's Assurance capabilities are correct?
Medium517Drag and drop each security protocol on the left to its matching provided security service on the right.
Medium518Which three statements about hypervisor security and isolation are true? (Choose three.)
Hard519Drag and drop the steps of YANG module import and augmentation resolution into the correct order, from first to last.
Medium520Which three statements about Control Plane Policing (CoPP) are true? (Choose three.)
Hard521Drag and drop the steps of Streaming telemetry sensor path subscription flow into the correct order, from first to last.
Medium522Examine the following telemetry configuration on a Cisco IOS-XE device: telemetry ietf subscription 200 encoding encode-kvgpb filter xpath /interfaces/interface[name='GigabitEthernet0/0/0']/state stream yang-push update-policy on-change receiver ip address 192.168.1.100 50001 protocol grpc Which statement is true about this configuration?
Medium523Which three statements about path isolation using VRF are true? (Choose three.)
Medium524A network engineer is using Netmiko to connect to a Cisco IOS-XE device that is managed by Cisco DNA Center. The script is: from netmiko import ConnectHandler device = { 'device_type': 'cisco_ios', 'host': '10.10.10.1', 'username': 'admin', 'password': 'cisco123', 'secret': 'enable123' } connection = ConnectHandler(**device) connection.enable() output = connection.send_command('show ip interface brief') print(output) connection.disconnect() What is a potential security concern with this script in the context of DNA Center?
Medium525Which three statements about YANG data models are true? (Choose three.)
Hard526Drag and drop the steps of BGP route aggregation and suppress-map process into the correct order, from first to last.
Medium527Drag and drop each container technology on the left to its matching orchestration tool on the right.
Medium528Drag and drop each ACL action on the left to its matching result on the right.
Easy529Drag and drop the steps of OSPFv3 IPv6 neighbor adjacency formation into the correct order, from first to last.
Medium530Drag and drop the steps of YANG push periodic vs on-change subscription into the correct order, from first to last.
Medium531Drag and drop each LACP port mode on the left to its matching negotiation behavior on the right.
Medium532Drag and drop the steps of configuring and applying a QoS policy using MQC into the correct order, from first to last.
Medium533What is the default CAPWAP control path DTLS encryption mode on Cisco 9800 WLCs?
Easy534Which two statements about STP port roles and states are true? (Choose two.)
Easy535Drag and drop each SNMP version on the left to its matching security feature on the right.
Medium536Drag and drop each syslog severity level on the left to its matching severity number on the right.
Medium537A network engineer is using the Cisco DNA Center REST API to retrieve the list of network devices. The engineer sends a GET request to '/dna/intent/api/v1/network-device' and receives a 400 Bad Request response. The API documentation indicates that the request requires a query parameter 'siteId'. What should the engineer do to resolve the issue?
Easy538Drag and drop each SPAN source type on the left to its correct monitored traffic description on the right.
Medium539Drag and drop the steps of Cisco DNA Center assurance data collection workflow into the correct order, from first to last.
Medium540A network engineer is configuring multicast on a Cisco router that connects to a multi-access network. The engineer wants to ensure that only one router forwards multicast traffic onto the segment to avoid duplication. The engineer enables PIM on the interface. However, multicast traffic is still being duplicated on the segment. What is the most likely reason?
Easy541Drag and drop the steps of NFVI resource allocation and VNF instantiation into the correct order, from first to last.
Medium542Which three statements about named ACLs and their configuration are true? (Choose three.)
Easy543Which two statements about RESTCONF are true? (Choose two.)
Easy544Drag and drop the steps of the DHCP DORA process into the correct order, from first to last.
Medium545Drag and drop each NETCONF operation on the left to its action on the right.
Medium546Drag and drop the steps of Q-in-Q (802.1ad) double-tagging configuration into the correct order, from first to last.
Medium547Which three statements about Dynamic Trunking Protocol (DTP) are true? (Choose three.)
Hard548Drag and drop each hypervisor product on the left to its matching vendor on the right.
Medium549Which two statements about Cisco Aironet 2800/3800 series APs are true? (Choose two.)
Easy550Drag and drop the steps of VLAN pruning on trunks using VTP into the correct order, from first to last.
Medium551Drag and drop the steps of YANG data model traversal for interface stats into the correct order, from first to last.
Medium552Match each Spanning Tree Protocol (STP) variant to its key characteristic.
Medium553Which three statements about SD-WAN segmentation and multi-tenancy are true? (Choose three.)
Hard554Drag and drop the steps of NFVI resource allocation and VNF instantiation into the correct order, from first to last.
Medium555A developer sends a RESTCONF request to retrieve interface statistics from a Cisco IOS-XE device: Request: ``` GET /restconf/data/ietf-interfaces:interfaces/interface=GigabitEthernet1/statistics HTTP/1.1 Host: 192.168.1.1 Accept: application/yang-data+json ``` Response: ```json { "ietf-interfaces:statistics": { "discontinuity-time": "2023-01-01T00:00:00Z", "in-octets": 1000000, "in-errors": 0, "out-octets": 500000, "out-errors": 0 } } ``` What is the correct way to interpret this response?
Easy556Drag and drop each route-target action on the left to its matching behavior on the right.
Medium557Drag and drop each YANG module on the left to its matching data category on the right.
Medium558Drag and drop each BGP attribute on the left to the value that is preferred (highest or lowest) during path selection on the right.
Medium559Drag and drop each MPLS VPN role on the left to its matching description on the right.
Medium560A network engineer is automating the configuration of a new VLAN on a Cisco Catalyst 9000 switch using RESTCONF. The engineer sends a PUT request to the URI 'https://switch/restconf/data/Cisco-IOS-XE-native:Native/VlanList' with a JSON payload containing the VLAN details. The switch responds with a 405 Method Not Allowed error. What is the most likely cause of this error?
Medium561Drag and drop the steps of configuring Dynamic NAT on a Cisco IOS router into the correct order, from first to last.
Medium562Drag and drop the steps of LLQ configuration for voice traffic into the correct order, from first to last.
Medium563Which two statements about virtual machine migration (vMotion and cold migration) are true? (Choose two.)
Medium564Drag and drop each NETCONF operation on the left to its matching action on the right.
Medium565Drag and drop each PIM mode on the left to its matching traffic distribution method on the right.
Medium566Drag and drop each CoPP class on the left to its matching traffic type on the right.
Hard567Drag and drop each Ansible variable precedence level on the left to its matching scope on the right.
Hard568Drag and drop the steps of gRPC dial-in telemetry session from collector into the correct order, from first to last.
Medium569Drag and drop each Ansible component on the left to its matching function on the right.
Medium570Which two statements about multicast RP (Rendezvous Point) are true? (Choose two.)
Hard571Drag and drop the steps of Ansible role directory structure and task execution into the correct order, from first to last.
Medium572Which three statements about dynamic ARP inspection (DAI) are true? (Choose three.)
Hard573Drag and drop the steps of network audit and gap analysis steps into the correct order, from first to last.
Medium574An engineer is configuring MPLS L3VPN on a Cisco IOS-XR router. The VRF CUSTOMER_B is configured with route-target import 100:1 and export 100:1. The engineer notices that the VRF routes are not being advertised to the route reflector. The BGP session to the route reflector is established and the VPNv4 address family is activated. What is the missing configuration?
Medium575Drag and drop the steps of NETCONF edit-config with candidate datastore flow into the correct order, from first to last.
Medium576Examine the following Python script snippet that uses netmiko to configure a Cisco IOS-XE device: ```python from netmiko import ConnectHandler device = { 'device_type': 'cisco_ios', 'ip': '192.168.1.1', 'username': 'admin', 'password': 'cisco', } connection = ConnectHandler(**device) output = connection.send_command('show ip interface brief') print(output) connection.disconnect() ``` What is the primary purpose of this script?
Medium577Which three statements about model-driven telemetry are true? (Choose three.)
Hard578Drag and drop the steps of MSDP peering for inter-domain multicast into the correct order, from first to last.
Medium579Drag and drop the steps of DNA Center template deployment to a device into the correct order, from first to last.
Medium580Which two statements about 802.1X authentication with MAC Authentication Bypass (MAB) are true? (Choose two.)
Medium581Which two statements about AAA authentication methods are true? (Choose two.)
Medium582Drag and drop each MPLS VPN type on the left to its matching layer on the right.
Medium583Which three statements about Cisco DNA Center Assurance are true? (Choose three.)
Hard584A network engineer configured VRF TENANT_A and moved the subinterfaces into the VRF. After the change, the CEF table shows the prefixes but the next-hop addresses are unreachable. What is the most likely cause?
Hard585Drag and drop the steps of MAB (MAC Authentication Bypass) fallback flow into the correct order, from first to last.
Medium586Drag and drop the steps of SD-WAN policy creation and push via vManage into the correct order, from first to last.
Medium587An Ansible playbook uses the cisco.ios.ios_l3_interfaces module to configure an IPv4 address on GigabitEthernet0/1: ```yaml --- - name: Configure IPv4 address hosts: cisco-routers gather_facts: no tasks: - name: Set IP address cisco.ios.ios_l3_interfaces: config: - name: GigabitEthernet0/1 ipv4: - address: 10.1.1.1/24 state: merged ``` What is the effect of the 'state: merged' parameter?
Medium588Drag and drop the steps of EIGRP stub configuration for hub-and-spoke into the correct order, from first to last.
Medium589A network team must design QoS for a campus network that carries voice, video, and data traffic. The design must use the DiffServ model and ensure that voice traffic is prioritized over all other traffic classes. Which DSCP marking and queuing strategy should be used for voice?
Easy590Drag and drop the steps of BGP session establishment between eBGP peers into the correct order, from first to last.
Medium591Drag and drop the steps of OpenAPI schema validation for DNA Center REST call into the correct order, from first to last.
Medium592Which three statements about Cisco DNA Center wireless assurance are true? (Choose three.)
Hard593Which three statements about EtherChannel configuration and verification are true? (Choose three.)
Hard594Drag and drop each STP timer on the left to its matching default value on the right.
Medium595Which three statements about Cisco SD-Access policy enforcement are true? (Choose three.)
Hard596A network engineer is configuring a Cisco SD-WAN solution for a retail chain with hundreds of stores. The engineer wants to use a centralized data policy to steer all YouTube traffic to a specific WAN link (broadband) to save MPLS bandwidth. The engineer creates a policy that matches YouTube traffic by destination IP and sets the preferred color to 'biz-internet'. After applying the policy, the engineer tests and finds that YouTube traffic is still using the MPLS link. The vEdge routers show that the policy is received and active. What is the most likely reason?
Medium597Drag and drop the steps of KVM VM provisioning via virsh CLI into the correct order, from first to last.
Medium598Examine the following Python script that uses the netmiko library to send configuration commands to a Cisco IOS-XE device: ```python from netmiko import ConnectHandler device = { 'device_type': 'cisco_ios', 'ip': '192.168.1.1', 'username': 'admin', 'password': 'cisco', } connection = ConnectHandler(**device) config_commands = [ 'interface GigabitEthernet1/0/1', 'description Link to Core', 'ip address 10.1.1.1 255.255.255.0', 'no shutdown' ] output = connection.send_config_set(config_commands) print(output) connection.disconnect() ``` What is the purpose of this script?
Medium599A network engineer is configuring PIM sparse mode in a network that uses a Bootstrap Router (BSR) for RP discovery. The engineer has configured a candidate BSR and candidate RPs. However, some routers in the network are not learning the RP set. The engineer checks the BSR and sees that it is receiving candidate RP advertisements, but the BSR messages are not being forwarded to all routers. What is the most likely cause?
Hard600Drag and drop the steps of deploying a virtual router as a VNF into the correct order, from first to last.
Medium601Drag and drop the steps of AAA accounting for command logging setup into the correct order, from first to last.
Medium602Which three statements about VRF route targets are true? (Choose three.)
Hard603Drag and drop each broadband type on the left to its matching technology on the right.
Easy604Drag and drop each EIGRP router role on the left to its matching definition on the right.
Medium605An engineer configures model-driven telemetry on a Cisco IOS-XE device with the following gRPC dial-out configuration: ``` telemetry ietf subscription 101 encoding encode-kvgpb filter xpath /interfaces/interface/state/counters source-address 10.1.1.1 stream yang-push update-policy periodic 500 receiver ip address 10.2.2.2 50001 protocol grpc-tcp ``` What is the purpose of the 'encoding encode-kvgpb' command?
Hard606Drag and drop each telemetry encoding on the left to its matching format on the right.
Medium607Drag and drop each MP-BGP address family on the left to its matching use case on the right.
Medium608Drag and drop each MQC component on the left to its matching role on the right.
Medium609Drag and drop each VPN type on the left to its matching tunnel technology on the right.
Medium610Drag and drop each IP SLA threshold type on the left to its trigger condition on the right.
Medium611Drag and drop the steps of SNMP bulk walk operation process into the correct order, from first to last.
Medium612Which three statements about SD-WAN (Cisco Catalyst SD-WAN) are true? (Choose three.)
Medium613Drag and drop each EIGRP router role on the left to its matching definition on the right.
Medium614A network engineer runs the following command on Switch SW6: SW6# show monitor session 6 Session 6 --------- Type : Remote Destination Session Source RSPAN VLAN : 200 Destination Ports : Gi1/0/12 Encapsulation : Native Ingress : Disabled Based on this output, what can be concluded?
Medium615Drag and drop each CPU feature on the left to its matching virtualization purpose on the right.
Medium616Drag and drop the steps of Multiple SPAN source ports with filter VLAN into the correct order, from first to last.
Medium617Drag and drop each NAPALM getter on the left to its matching returned data on the right.
Medium618Drag and drop the steps of IP SLA with threshold and reaction configuration into the correct order, from first to last.
Medium619Drag and drop each wireless roaming method on the left to its matching 802.11 standard on the right.
Medium620Drag and drop each PnP workflow step on the left to its matching action on the right.
Medium621Which three statements about the Cisco Enterprise WAN design principles are true? (Choose three.)
Hard622A network engineer is using Cisco DNA Center to automate the deployment of a new VLAN across multiple access switches. The engineer creates a new network profile with the VLAN definition and assigns it to a site. However, after provisioning, the VLAN is not created on any of the switches. The engineer verifies that the devices are in the Inventory and are reachable. What is the most likely cause?
Medium623Drag and drop the steps of vSphere VM snapshot creation and revert steps into the correct order, from first to last.
Medium624Which two statements about LISP in Cisco SD-Access are true? (Choose two.)
Medium625A network engineer is configuring model-driven telemetry on a Cisco IOS-XE router to stream interface statistics to a collector using gRPC. The engineer wants to ensure that the telemetry data is sent only when there is a change in the interface counters, rather than at a fixed interval. Which configuration parameter should the engineer use to achieve this behavior?
Medium626Which two statements about MPLS label distribution protocol (LDP) are true? (Choose two.)
Medium627Drag and drop the steps of VRF import/export route-target policy flow into the correct order, from first to last.
Medium628Drag and drop the steps of GET VPN key server registration and rekey into the correct order, from first to last.
Medium629Drag and drop the steps of Ansible playbook execution flow into the correct order, from first to last.
Medium630Drag and drop each VLAN type on the left to its matching purpose on the right.
Medium631An engineer configures gRPC dial-out telemetry on a Cisco IOS-XE device: ``` telemetry ietf subscription 100 receiver ip address 10.1.1.100 port 50051 protocol grpc-tcp source-address 10.1.1.1 encoding encode-kvgpb filter xpath /interfaces/interface/state/counters update-policy periodic 10000 ``` What is the purpose of the 'source-address' command?
Medium632Drag and drop the steps of STP root guard and loop guard activation into the correct order, from first to last.
Medium633Drag and drop the steps of IPFIX template negotiation and export into the correct order, from first to last.
Medium634Drag and drop each YANG module on the left to its matching standard body on the right.
Medium635Drag and drop each leased line technology on the left to its matching speed on the right.
Easy636Drag and drop each NFV management layer on the left to its matching function on the right.
Medium637Drag and drop each cisco.ios module on the left to its matching purpose on the right.
Medium638Drag and drop the steps of DSCP re-marking at enterprise WAN edge into the correct order, from first to last.
Medium639Drag and drop the steps of NAT64 IPv6-to-IPv4 translation flow into the correct order, from first to last.
Medium640A network engineer is troubleshooting a wireless connectivity issue in a campus network managed by Cisco DNA Center. The Assurance module shows that several access points have high client association failures. The engineer checks the wireless controller configuration and finds that the APs are registered and functional. What is the most likely cause of the association failures?
Medium641Drag and drop the steps of NUMA-aware VM placement process into the correct order, from first to last.
Medium642A network engineer is using Cisco DNA Center to manage a network with multiple sites. The engineer wants to ensure that all devices at a remote site have the same NTP server configuration. The engineer creates a network profile with the NTP settings and assigns it to the site. After provisioning, the engineer checks one of the switches and finds that the NTP configuration is missing. What should the engineer check first?
Medium643Drag and drop each REST HTTP status code on the left to its matching meaning on the right.
Medium644An enterprise network uses OSPF as its IGP. The network engineer notices that a particular route learned via OSPF is not being installed in the routing table, even though the neighbor adjacency is up and the route appears in the OSPF database. The route is an external route redistributed from EIGRP. What is the most likely cause?
Medium645Drag and drop each WAN encapsulation on the left to its matching use case on the right.
Medium646Drag and drop the steps of NAPALM get_facts() retrieval from IOS-XE device into the correct order, from first to last.
Medium647Drag and drop each wireless AP mode on the left to its matching function on the right.
Medium648Which two statements about AAA authorization and accounting are true? (Choose two.)
Medium649Drag and drop the steps of RPF check verification for multicast forwarding into the correct order, from first to last.
Medium650Which two statements about Python data structures used in network automation are true? (Choose two.)
Medium651Which three statements about Cisco TrustSec (CTS) are true? (Choose three.)
Hard652Drag and drop the steps of VLAN mapping on trunk interfaces into the correct order, from first to last.
Medium653Drag and drop the steps of Cisco NSO service provisioning workflow into the correct order, from first to last.
Medium654Drag and drop each authentication mode on the left to its matching behavior on the right.
Medium655Which two statements about SPAN and RSPAN configuration limits are true? (Choose two.)
Hard656Drag and drop the steps of ACL reflexive access list (dynamic inspection) flow into the correct order, from first to last.
Medium657A network engineer uses the Cisco DNA Center API to trigger a provisioning workflow for a new device. The API call returns the following JSON response: { "response": { "taskId": "task-12345", "url": "/api/v1/task/task-12345" }, "version": "1.0" } The engineer then polls the task status using the URL. Which HTTP method should be used to retrieve the task status?
Easy658Which two statements about IPsec VPNs are true? (Choose two.)
Easy659Drag and drop the steps of cisco.ios.ios_config module idempotent apply flow into the correct order, from first to last.
Medium660Which two statements about 802.1X port states and access control are true? (Choose two.)
Medium661Drag and drop each AAA service on the left to its matching protocol on the right.
Medium662Drag and drop the steps of Embedded Packet Capture (EPC) on IOS-XE steps into the correct order, from first to last.
Medium663Drag and drop the steps of Cisco Flex (FlexConnect) AP mode operation into the correct order, from first to last.
Medium664Drag and drop the steps of implementing QoS trust boundaries on a Cisco switch into the correct order, from first to last.
Medium665Which three statements about trunking and VLAN pruning are true? (Choose three.)
Hard666Drag and drop the steps of SVI configuration for inter-VLAN routing into the correct order, from first to last.
Medium667Drag and drop the steps of FlexVPN IKEv2 spoke registration to hub into the correct order, from first to last.
Medium668Drag and drop the steps of the QoS trust boundary configuration process into the correct order, from first to last.
Medium669Drag and drop the steps of troubleshooting an IP SLA operation into the correct order, from first to last.
Medium670Drag and drop each multicast address range on the left to its matching use on the right.
Medium671A network engineer runs the following command on Switch SW9: SW9# show monitor session 9 Session 9 --------- Type : Remote Destination Session Source RSPAN VLAN : 300 Destination Ports : Gi1/0/40 Encapsulation : Native Ingress : Disabled Based on this output, what can be concluded?
Hard672Drag and drop the steps of EtherChannel troubleshooting and verification steps into the correct order, from first to last.
Medium673Drag and drop the steps of MPLS L3VPN packet forwarding steps into the correct order, from first to last.
Medium674An engineer configures IP SLA 10 to monitor the reachability of a next-hop router at 10.1.1.1 using ICMP echo. The IP SLA is used as a track object for a static route. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 1 ms', but the track object shows 'Track 10: up' even though the next-hop router is actually unreachable from the source. The source router has a default route pointing to 10.1.1.1. What is the most likely cause?
Hard675Drag and drop each EIGRP timer on the left to its matching default value on the right.
Medium676Given the following BGP configuration on a Cisco IOS-XE device: router bgp 65001 bgp router-id 1.1.1.1 neighbor 10.0.0.2 remote-as 65002 neighbor 10.0.0.2 update-source Loopback0 neighbor 10.0.0.2 ebgp-multihop 2 ! interface Loopback0 ip address 1.1.1.1 255.255.255.255 ! interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.252 What is the purpose of the 'ebgp-multihop 2' command?
Medium677Drag and drop each STP port state on the left to its matching function on the right.
Medium678Drag and drop the steps of SD-WAN traffic engineering app-aware routing steps into the correct order, from first to last.
Medium679Drag and drop the steps of Netconf/Yang-based device monitoring subscription into the correct order, from first to last.
Medium680Drag and drop each MPLS role on the left to its matching function on the right.
Medium681What is the default OSPF hello interval on a broadcast multi-access network (e.g., Ethernet)?
Easy682Drag and drop the steps of creating and applying an Ansible role for network device configuration into the correct order, from first to last.
Medium683A network engineer uses Cisco DNA Center API to retrieve the health of a device. The API call returns: ```json { "response": [ { "deviceId": "1234567890", "healthScore": 85, "overallHealth": "good", "memory": { "used": 4096, "total": 8192, "usage": 50 }, "cpu": { "usage": 25 } } ] } ``` What does the healthScore of 85 indicate?
Easy684Which two statements about Rapid PVST+ are true? (Choose two.)
Medium685Drag and drop each LDP message type on the left to its matching function on the right.
Medium686Drag and drop each NFV component on the left to its matching role on the right.
Medium687Drag and drop the steps of DMVPN Phase 3 NHRP registration and spoke-to-spoke tunnel establishment into the correct order, from first to last.
Medium688Drag and drop the steps of PHP (Penultimate Hop Popping) operation into the correct order, from first to last.
Medium689Drag and drop each wireless roaming method on the left to its matching 802.11 standard on the right.
Medium690Drag and drop the steps of YANG module import and augmentation resolution into the correct order, from first to last.
Medium691Drag and drop the steps of IPsec IKEv2 tunnel establishment into the correct order, from first to last.
Medium692Which three statements about YANG data models are true? (Choose three.)
Hard693A network engineer is designing a model-driven telemetry solution for a large enterprise network with thousands of devices. The engineer wants to minimize the load on the network devices and the collector by sending data only when significant changes occur. The engineer decides to use on-change subscriptions. However, after deployment, the engineer notices that some subscriptions are sending updates too frequently, causing high CPU usage on the devices. What is the most likely reason for this excessive update frequency?
Hard694Drag and drop the steps of Dynamic ARP Inspection (DAI) packet validation into the correct order, from first to last.
Medium695Drag and drop each SD-WAN policy type on the left to its matching application point on the right.
Medium696A network engineer is planning to deploy model-driven telemetry in a brownfield network with a mix of Cisco IOS-XE and Nexus devices. The engineer wants to use a single collector that supports both gRPC and UDP-based telemetry. The engineer is concerned about the scalability of the solution, as the network has over 5000 devices. Which design consideration is most important to ensure the telemetry solution scales effectively?
Hard697Drag and drop each 802.1X component on the left to its matching role on the right.
Medium698Drag and drop each 802.1X component on the left to its matching role on the right.
Medium699Drag and drop the steps of TACACS+ command authorization flow into the correct order, from first to last.
Medium700What is the maximum hop count for EIGRP?
Easy701Drag and drop each cisco.ios module on the left to its matching purpose on the right.
Medium702Examine the following configuration snippet applied to a Cisco IOS-XE device: interface GigabitEthernet0/1 ip address 10.1.1.1 255.255.255.0 ip nat inside ! interface GigabitEthernet0/2 ip address 192.168.1.1 255.255.255.0 ip nat outside ! access-list 100 permit ip 10.1.1.0 0.0.0.255 any ip nat inside source list 100 interface GigabitEthernet0/2 overload What is the effect of this configuration?
Medium703Drag and drop the steps of named ACL modification using sequence numbers into the correct order, from first to last.
Medium704Drag and drop the steps of VRF-aware NAT configuration steps into the correct order, from first to last.
Medium705Drag and drop the steps of VNF service chain instantiation into the correct order, from first to last.
Medium706Drag and drop the steps of STP path cost manipulation for load balancing into the correct order, from first to last.
Medium707A service provider uses MPLS L3VPN with OSPF as the PE-CE routing protocol. A customer reports that a new subnet added on CE1 is not reachable from CE2, even though the PE1 router has the route in its VRF and BGP table. The 'show ip bgp vpnv4 vrf CUSTOMER' on PE2 shows the prefix with a valid next-hop. What should the engineer check next?
Hard708Which three statements about STP convergence and timers are true? (Choose three.)
Medium709Drag and drop the steps of IP SLA HTTP operation for application monitoring into the correct order, from first to last.
Medium710Drag and drop each security protocol on the left to its matching service on the right.
Medium711An engineer retrieves telemetry data from a Cisco IOS-XE device using RESTCONF and receives the following response: ```json { "ietf-interfaces:interfaces": { "interface": [ { "name": "GigabitEthernet1", "type": "iana-if-type:ethernetCsmacd", "enabled": true, "ipv4": { "address": [ { "ip": "192.168.1.1", "netmask": "255.255.255.0" } ] } } ] } } ``` What is the correct way to access the IP address of the interface using Python?
Medium712A network engineer runs the following command on Router R3: R3# show mpls ldp bindings lib entry: 10.1.1.1/32, rev 2 local binding: label: 16 remote binding: lsr: 10.1.1.2:0, label: 17 lib entry: 10.2.2.0/24, rev 4 local binding: label: 18 remote binding: lsr: 10.1.1.2:0, label: 19 lib entry: 10.3.3.0/24, rev 6 local binding: label: 20 remote binding: lsr: 10.1.1.2:0, label: 21 Based on this output, what is true?
Medium713Which two statements about PIM sparse mode (PIM-SM) are true? (Choose two.)
Medium714A network engineer is using the Cisco DNA Center API to initiate a network discovery. The API endpoint '/dna/intent/api/v1/discovery' is called with a POST request containing the following JSON payload: ```json { "discoveryType": "Range", "ipAddressList": "10.10.20.1-10.10.20.254", "protocolOrder": "SSH", "timeout": 5, "retryCount": 3 } ``` The API returns a 202 Accepted status code. What does this indicate?
Easy715Which two statements about using Python for network automation are true? (Choose two.)
Medium716Drag and drop the steps of IBNS 2.0 concurrent authentication policy map into the correct order, from first to last.
Medium717Drag and drop each STP protection feature on the left to its matching purpose on the right.
Medium718Which two statements about IPsec IKEv2 are true? (Choose two.)
Medium719Drag and drop each NAT type on the left to its matching description on the right.
Medium720Consider the following BGP configuration on a Cisco IOS-XE router: router bgp 65001 neighbor 10.0.0.2 remote-as 65002 neighbor 10.0.0.2 route-map SET_COMMUNITY out ! route-map SET_COMMUNITY permit 10 set community 65001:100 What is the effect of this configuration?
Medium721Which two statements about MPLS Layer 3 VPNs are true? (Choose two.)
Medium722Drag and drop each IP SLA tracking object on the left to its application on the right.
Medium723Drag and drop the steps of Private VLAN (PVLAN) configuration steps into the correct order, from first to last.
Medium724Which two statements about the Cisco FlexConnect architecture are true? (Choose two.)
Medium725Consider the following configuration for a Cisco IOS-XE device: interface GigabitEthernet0/0 ip address 192.168.1.1 255.255.255.0 standby 1 ip 192.168.1.254 standby 1 priority 150 standby 1 preempt ! interface GigabitEthernet0/1 ip address 192.168.2.1 255.255.255.0 standby 2 ip 192.168.2.254 standby 2 priority 100 What is the effect of this HSRP configuration?
Medium726Drag and drop each DMVPN phase on the left to its matching spoke-to-spoke capability on the right.
Hard727Drag and drop each PAgP port mode on the left to its matching negotiation behavior on the right.
Medium728Which three statements about IPv4 ACLs on Cisco IOS are true? (Choose three.)
Hard729Drag and drop the steps of Layer 3 EtherChannel (routed port-channel) setup into the correct order, from first to last.
Medium730Drag and drop the steps of troubleshooting a model-driven telemetry subscription using CLI into the correct order, from first to last.
Medium731Match each wireless standard to its frequency band and maximum data rate.
Medium732Drag and drop each VM network mode on the left to its matching behavior description on the right.
Medium733Drag and drop each WAN transport type on the left to its matching SD-WAN characteristic on the right.
Medium734Drag and drop each wireless AP mode on the left to its matching function on the right.
Medium735Match each Cisco IOS command to its function.
Medium736Drag and drop each EIGRP packet type on the left to its matching function on the right.
Medium737Which three statements about MPLS traffic engineering (MPLS-TE) are true? (Choose three.)
Hard738Which two statements about MPLS Layer 3 VPNs are true? (Choose two.)
Medium739Which TWO statements correctly describe characteristics of virtual device contexts (VDCs) in Cisco Nexus switches?
Easy740Drag and drop each VPN type on the left to its matching tunnel technology on the right.
Medium741Which two statements about Control Plane Policing (CoPP) are true? (Choose two.)
Medium742Drag and drop each network design tier on the left to its matching function on the right.
Medium743Drag and drop the steps of QoS policing with two-rate three-color marker (RFC 2698) into the correct order, from first to last.
Medium744Drag and drop the steps of REST API call using Requests library to DNA Center into the correct order, from first to last.
Medium745Drag and drop the steps of the TACACS+ authentication process into the correct order, from first to last.
Medium746Drag and drop each BGP attribute on the left to its matching type on the right.
Medium747Drag and drop the steps of DNA Center site hierarchy creation into the correct order, from first to last.
Medium748Drag and drop each DMVPN phase on the left to its matching NHRP operation type on the right.
Medium749Which two statements about EtherChannel load balancing are true? (Choose two.)
Medium750Drag and drop the steps of MPLS FRR (Fast Reroute) backup tunnel activation into the correct order, from first to last.
Medium751Which two statements about using Python for network automation with Cisco devices are true? (Choose two.)
Medium752Drag and drop each IGMP version on the left to its matching feature on the right.
Medium753Which two statements about OSPF neighbor states are true? (Choose two.)
Easy754Drag and drop each ERSPAN version on the left to its correct header format on the right.
Medium755Which two statements about Cisco TrustSec security group tags (SGTs) are true? (Choose two.)
Medium756Drag and drop the steps of YANG push periodic vs on-change subscription into the correct order, from first to last.
Medium757Drag and drop each IPsec mode on the left to its matching header usage on the right.
Medium758An architect is designing an SD-Access fabric for a campus that requires high availability. The design must ensure that if one fabric edge node fails, endpoints can be re-homed to another edge node without manual intervention. Which feature should be implemented?
Medium759Drag and drop the steps of using a Python REST API call to retrieve device configuration via Cisco DNA Center into the correct order, from first to last.
Medium760Drag and drop the steps of 802.11r Fast BSS Transition (FT) roaming steps into the correct order, from first to last.
Medium761Drag and drop the steps of using Ansible to push a new VLAN configuration to a Cisco IOS switch into the correct order, from first to last.
Medium762Which three statements about QoS trust boundaries and marking are true? (Choose three.)
Hard763Drag and drop the steps of SD-WAN policy creation and push via vManage into the correct order, from first to last.
Medium764Drag and drop each infrastructure hardening technique on the left to its matching configuration command on the right.
Medium765Drag and drop the steps of OpenConfig interface counters subscription and decode into the correct order, from first to last.
Medium766Drag and drop the steps of SPAN session on EtherChannel member ports into the correct order, from first to last.
Medium767Drag and drop the steps of IP SLA HTTP operation for application monitoring into the correct order, from first to last.
Medium768Match each network device to its primary function.
Medium769Match each Cisco switch security feature to its function.
Medium770Which three statements about IP SLA UDP jitter operation are true? (Choose three.)
Hard771Drag and drop the steps of CoPP class-map match criteria and rate-limit application into the correct order, from first to last.
Medium772Drag and drop the steps of Docker container networking with bridge mode into the correct order, from first to last.
Medium773Which two statements about SD-WAN control plane components are true? (Choose two.)
Medium774Drag and drop the steps of IP SLA DNS lookup operation setup into the correct order, from first to last.
Medium775A network engineer runs the following command on Router R1: R1# show ip eigrp neighbors detail EIGRP-IPv4 Neighbors for AS(100) H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num 0 192.168.1.2 Gi0/0 13 00:12:34 12 100 0 45 Version 2.0/2.0, Retrans: 0, Retry: 0, Maxseq: 0 Prefixes: 3 Topology ids: 0 Authentication: None Topology: base (0x0) Based on this output, what can be concluded?
Hard776Drag and drop the steps of QoS policing with two-rate three-color marker (RFC 2698) into the correct order, from first to last.
Medium777An enterprise is deploying a virtual router (vRouter) as part of its NFV infrastructure. The engineer needs to ensure that the vRouter can handle a sudden spike in traffic without dropping packets. The vRouter is running on a KVM hypervisor. What should the engineer configure to guarantee CPU resources for the vRouter during peak demand?
Medium778Which two statements about IP Source Guard are true? (Choose two.)
Hard779Drag and drop each PPDIOO phase on the left to its matching activity on the right.
Medium780Drag and drop the steps of micro-segmentation via SGT policy application into the correct order, from first to last.
Medium781Drag and drop each SNMPv3 security level on the left to its matching protection description on the right.
Medium782Drag and drop each gRPC method on the left to its matching subscription type on the right.
Medium783Drag and drop the steps of the SD-Access fabric deployment sequence into the correct order, from first to last.
Medium784Match each First Hop Redundancy Protocol (FHRP) to its description.
Medium785Drag and drop the steps of EIGRP named mode configuration steps into the correct order, from first to last.
Medium786An enterprise is migrating from a traditional MPLS WAN to Cisco SD-WAN. The network team has deployed vEdge routers at all branch offices and a vSmart controller in the data center. The engineer configures a centralized control policy to influence path selection based on cost and latency. After the policy is activated, the engineer notices that some branches are not receiving the updated policy and are still using the default best-path selection. The vSmart is reachable from all branches, and the vEdge routers show that they are connected to the vSmart. What is the most likely reason for this issue?
Medium787Drag and drop the steps of SD-Access underlay provisioning via LAN Automation into the correct order, from first to last.
Medium788Drag and drop the steps of KVM VM provisioning via virsh CLI into the correct order, from first to last.
Medium789Drag and drop the steps of troubleshooting a failed EtherChannel bundle into the correct order, from first to last.
Hard790Drag and drop the steps of OSPF neighbor adjacency formation into the correct order, from first to last.
Medium791A network engineer is using the Cisco IOS-XE REST API to configure a static route. The engineer sends a PATCH request to 'https://device/restconf/data/Cisco-IOS-XE-native:native/ip/route/ip-route-interface-forwarding-list=192.168.1.0,255.255.255.0,GigabitEthernet1' with a JSON payload containing the route details. The device responds with a 204 No Content status. What does this response indicate?
Medium792What is the maximum hop count for EIGRP?
Easy793Drag and drop the steps of named ACL modification using sequence numbers into the correct order, from first to last.
Medium794Drag and drop the steps of IP SLA scheduling with frequency and lifetime into the correct order, from first to last.
Medium795A network team is using Ansible with the iosxr_config module to push configuration changes to a Cisco IOS-XR router. The playbook uses the REST API via the 'ansible_connection: restconf' setting. The engineer notices that the changes are applied but the playbook reports 'changed: false' even when changes were made. What is the most likely reason for this behavior?
Hard796Which three statements about NFV and its relationship with SDN are true? (Choose three.)
Hard797A network engineer configures SNMPv3 on a Cisco router with the following: 'snmp-server group GRP v3 priv', 'snmp-server user usr GRP v3 auth sha pass1 priv aes 128 pass2'. The NMS is configured with the same credentials. However, the NMS cannot perform SNMP walks. The engineer notices that the router's SNMP agent is responding to queries from other devices. What is the most likely cause?
Hard798Which three statements about FlexVPN are true? (Choose three.)
Medium799Drag and drop each Layer 2 attack on the left to its matching mitigation feature on the right.
Medium800Drag and drop each Ansible connection type on the left to its matching protocol on the right.
Medium801Drag and drop the steps of DNA Center network discovery and device sync into the correct order, from first to last.
Medium802A network engineer executes the following command on Router R2: R2# show ip sla configuration 1 IP SLAs Infrastructure Engine-II Entry number: 1 Owner: admin Tag: Type of operation to perform: icmp-echo Target address: 192.168.2.10 Source address: 192.168.2.1 Type Of Service parameter: 0x0 Request size (ARR data portion): 28 Operation timeout (milliseconds): 5000 Frequency (seconds): 60 Next Scheduled Start Time: Start Time already passed Group Scheduled : FALSE Life (seconds): Forever Entry Ageout (seconds): never Recurring (Starting Everyday, Starting Time: 00:00:01) Status of entry (SNMP RowStatus): Active Threshold (milliseconds): 5000 Distribution Statistics: Number of statistic hours kept: 2 Number of statistic distribution buckets kept: 1 Statistic distribution interval (milliseconds): 20 Enhanced History: Based on this output, what is the frequency of the IP SLA operation?
Easy803Drag and drop the steps of OSPF virtual link configuration across area 0 into the correct order, from first to last.
Medium804Drag and drop each AAA method list type on the left to its correct fallback order (from first to last) on the right.
Hard805Consider the following configuration snippet from a Cisco IOS-XE router: router eigrp 100 network 10.0.0.0 network 192.168.1.0 passive-interface default no passive-interface GigabitEthernet0/0 What is the effect of the passive-interface commands?
Medium806Drag and drop each EIGRP timer on the left to its matching default value on the right.
Medium807Drag and drop the steps of SNMPv3 authentication and privacy negotiation into the correct order, from first to last.
Medium808Which two statements about MPLS VPN (Layer 3 VPN) are true? (Choose two.)
Medium809An Ansible playbook uses the cisco.dnac.site module to create a new building site. The playbook is: - name: Create building site cisco.dnac.site: host: "{{ dnac_host }}" username: "{{ dnac_username }}" password: "{{ dnac_password }}" validate_certs: no state: present site: name: Building-B type: building parentName: Area-1 address: "123 Main St" latitude: 37.7749 longitude: -122.4194 register: result What is the purpose of the 'parentName' parameter?
Medium810Drag and drop each IP SLA reaction action on the left to its corresponding behavior on the right.
Medium811Drag and drop the steps of RSPAN VLAN propagation across trunk links into the correct order, from first to last.
Medium812What is the maximum hop count for EIGRP?
Easy813Drag and drop the steps of the DiffServ traffic classification and marking pipeline into the correct order, from first to last.
Medium814Drag and drop each VLAN range on the left to its matching type on the right.
Medium815Which three statements about telemetry data collection methods are true? (Choose three.)
Hard816Drag and drop the steps of multicast RP discovery using Auto-RP into the correct order, from first to last.
Medium817Which two statements about NAT configuration on Cisco IOS routers are true? (Choose two.)
Medium818Drag and drop the steps of VNF life cycle management into the correct order, from first to last.
Medium819Drag and drop the steps of ISE RADIUS policy evaluation order into the correct order, from first to last.
Medium820Drag and drop each telemetry protocol on the left to its matching transport on the right.
Medium821Which two statements about EIGRP feasible successors are true? (Choose two.)
Medium822Drag and drop each SD-WAN plane on the left to its matching function on the right.
Medium823Drag and drop each streaming telemetry mode on the left to its matching trigger on the right.
Medium824Drag and drop each telemetry protocol on the left to its matching transport on the right.
Medium825Drag and drop the steps of MP-BGP VPNv4 route advertisement between PE routers into the correct order, from first to last.
Medium826Drag and drop each EtherChannel protocol on the left to its matching vendor on the right.
Medium827Consider the following SD-WAN device configuration on a Cisco IOS-XE router: sdwan interface GigabitEthernet0/0/1 tunnel-interface encapsulation ipsec color public-internet allow-service all ! interface GigabitEthernet0/0/2 tunnel-interface encapsulation ipsec color 3g allow-service all ! Which statement about this configuration is true?
Medium828An engineer creates an Ansible playbook to configure model-driven telemetry on a Cisco IOS-XE device: ```yaml --- - name: Configure MDT subscription hosts: ios_xe gather_facts: no tasks: - name: Configure telemetry receiver cisco.ios.ios_config: lines: - telemetry ietf subscription 101 - receiver ip address 10.10.10.10 port 57500 protocol grpc-tcp - encoding encode-kvgpb - filter xpath /interfaces/interface/state/counters - update-policy periodic 5000 ``` What is the problem with this playbook?
Hard829Which three statements about Ansible playbooks are true? (Choose three.)
Hard830Drag and drop each DHCP option on the left to its matching purpose on the right.
Medium831Drag and drop the steps of DNA Center assurance issue detection and root cause analysis into the correct order, from first to last.
Medium832Drag and drop the steps of Cisco TrustSec inline tagging across fabric into the correct order, from first to last.
Medium833Drag and drop each IP SLA reaction on the left to its action on the right.
Medium834Drag and drop the steps of DHCP failover configuration between primary and standby into the correct order, from first to last.
Medium835Drag and drop the steps of the QoS shaping and policing configuration sequence into the correct order, from first to last.
Medium836Which two statements about BGP neighbor states are true? (Choose two.)
Easy837Which two statements about VRF configuration in Cisco IOS-XE are true? (Choose two.)
Medium838Which two statements about IGMP snooping are true? (Choose two.)
Medium839Drag and drop each LDP message type on the left to its matching function on the right.
Medium840Drag and drop the steps of LACP active/passive mode negotiation into the correct order, from first to last.
Medium841Drag and drop each DNA Center ISE integration component on the left to its matching role on the right.
Medium842Drag and drop each Ansible task return value on the left to its matching meaning on the right.
Medium843Drag and drop the steps of OMP route advertisement between vSmart and vEdge into the correct order, from first to last.
Medium844What is the maximum hop count for EIGRP?
Medium845Consider the following SPAN configuration on a Cisco IOS-XE switch: monitor session 2 source interface GigabitEthernet1/0/3 rx monitor session 2 destination interface GigabitEthernet1/0/4 What is the effect of this configuration?
Medium846Drag and drop the steps of PAgP EtherChannel negotiation steps into the correct order, from first to last.
Medium847An engineer is using the Cisco IOS-XE RESTCONF API to create a new loopback interface. The following JSON payload is sent in a POST request to '/restconf/data/ietf-interfaces:interfaces': ```json { "ietf-interfaces:interface": [ { "name": "Loopback100", "description": "Management Loopback", "type": "iana-if-type:softwareLoopback", "enabled": true, "ietf-ip:ipv4": { "address": [ { "ip": "192.168.1.1", "netmask": "255.255.255.0" } ] } } ] } ``` What is the correct HTTP method and URL for this operation?
Medium848Drag and drop the steps of IP SLA tracking with static route failover into the correct order, from first to last.
Medium849Drag and drop the steps of IP SLA tracking with static route failover into the correct order, from first to last.
Medium850Drag and drop each DHCPv6 mode on the left to its matching address assignment method on the right.
Medium851Drag and drop the steps of 4G/LTE WAN failover with IP SLA tracking into the correct order, from first to last.
Medium852Drag and drop the steps of ERSPAN (Encapsulated RSPAN) session configuration into the correct order, from first to last.
Medium853Which two statements about OSPF neighbor states are true? (Choose two.)
Medium854A network architect is designing a campus network for a large university with 10,000+ users. The design must provide high availability, minimize failure domains, and allow for easy scaling of the access layer. The core layer should be resilient and support fast convergence. Which hierarchical design model best meets these requirements?
Medium855Drag and drop each EIGRP metric component on the left to its matching K variable on the right.
Medium856Drag and drop the steps of TrustSec SGT classification and enforcement into the correct order, from first to last.
Medium857Drag and drop each telemetry encoding on the left to its matching format on the right.
Medium858Drag and drop each SGT value range on the left to its matching policy type on the right.
Medium859Drag and drop the steps of EIGRP variance-based unequal-cost load balancing into the correct order, from first to last.
Medium860Drag and drop the steps of REST API call using Requests library to DNA Center into the correct order, from first to last.
Medium861Drag and drop each NAT terminology on the left to its matching definition on the right.
Medium862Drag and drop the steps of FlexVPN spoke-to-spoke dynamic tunnel creation into the correct order, from first to last.
Medium863Drag and drop the steps of VNF scaling up and scaling out into the correct order, from first to last.
Medium864Drag and drop each DNA Center API category on the left to its matching endpoint group on the right.
Medium865Which two statements about Ansible inventory files are true? (Choose two.)
Medium866Drag and drop each DMVPN phase on the left to its matching NHRP operation type on the right.
Medium867Drag and drop the steps of Hierarchical QoS (H-QoS) parent/child policy steps into the correct order, from first to last.
Medium868Drag and drop the steps of IP Source Guard binding and enforcement into the correct order, from first to last.
Medium869Which two statements about NFV performance considerations are true? (Choose two.)
Medium870Drag and drop each OSPF router role on the left to its matching function on the right.
Medium871Which three statements about Ansible modules for Cisco IOS-XE are true? (Choose three.)
Hard872Drag and drop the steps of Wireless client IP address assignment via DHCP bridging into the correct order, from first to last.
Medium873Which two statements about Cisco SD-Access fabric wireless integration are true? (Choose two.)
Medium874Drag and drop the steps of ACL reflexive access list (dynamic inspection) flow into the correct order, from first to last.
Medium875Drag and drop each OSPF network type on the left to its matching DR election behavior on the right.
Medium876Drag and drop each authentication mode on the left to its matching behavior on the right.
Medium877Consider the following partial configuration for QoS on a Cisco IOS-XE router: class-map match-all VOICE match ip dscp ef ! policy-map QOS_POLICY class VOICE priority 1000 class class-default fair-queue ! interface GigabitEthernet0/0 service-policy output QOS_POLICY What is the effect of the 'priority 1000' command under class VOICE?
Medium878Drag and drop the steps of EIGRP DUAL route computation into the correct order, from first to last.
Medium879Drag and drop the steps of DSCP-to-CoS mapping at LAN boundary into the correct order, from first to last.
Medium880Which two statements about DTP (Dynamic Trunking Protocol) are true? (Choose two.)
Medium881Drag and drop the steps of DMVPN Phase 3 spoke-to-spoke shortcut creation into the correct order, from first to last.
Medium882Which three statements about RSPAN are true? (Choose three.)
Hard883Drag and drop the steps of Wireless client IP address assignment via DHCP bridging into the correct order, from first to last.
Medium884Examine the following partial Cisco IOS-XE configuration: interface GigabitEthernet0/1 switchport mode access switchport access vlan 10 ip access-group ACL_IN in spanning-tree portfast What is the effect of this configuration?
Medium885Drag and drop the steps of adding a new VLAN to a trunk link into the correct order, from first to last.
Medium886Drag and drop each congestion avoidance mechanism on the left to its method on the right.
Medium887Drag and drop each SPAN type on the left to its correct scope description on the right.
Medium888Drag and drop the steps of IP SLA with threshold and reaction configuration into the correct order, from first to last.
Medium889In BGP best path selection, which of the following is compared first?
Medium890Which three statements about Cisco TrustSec SGT propagation and enforcement are true? (Choose three.)
Hard891Drag and drop each YANG module on the left to its matching data category on the right.
Medium892Drag and drop each container technology on the left to its matching orchestration tool on the right.
Medium893Which two statements about EtherChannel load balancing are true? (Choose two.)
Medium894Drag and drop each RESTCONF method on the left to its equivalent NETCONF operation on the right.
Hard895Drag and drop the steps of STP portfast and BPDU guard configuration into the correct order, from first to last.
Medium896Drag and drop the steps of Syslog severity filtering and rate-limiting configuration into the correct order, from first to last.
Medium897Drag and drop each IP SLA operation type on the left to its measured metric on the right.
Medium898Drag and drop the steps of Ansible Vault encryption and decryption steps into the correct order, from first to last.
Medium899Which two statements about the Cisco QoS trust boundary are true? (Choose two.)
Medium900Drag and drop each STP port state on the left to its matching function on the right.
Medium901Drag and drop each PIM mode on the left to its matching traffic distribution method on the right.
Medium902A company is virtualizing its network functions using NFV on a KVM-based hypervisor. The design must ensure that the virtual router (CSR1000v) can handle high-throughput traffic with minimal latency. Which architectural consideration is most critical for achieving this goal?
Medium903Drag and drop the steps of VRF import/export route-target policy flow into the correct order, from first to last.
Medium904Drag and drop the steps of traffic shaping vs policing configuration steps into the correct order, from first to last.
Medium905Drag and drop the steps of TrustSec SGT assignment and propagation via SXP into the correct order, from first to last.
Medium906What is the default OSPF hello interval on a broadcast multi-access network (e.g., Ethernet)?
Easy907Which three statements about SD-WAN overlay tunnels and transport are true? (Choose three.)
Hard908Consider the following configuration snippet: interface Port-channel1 switchport mode trunk switchport trunk allowed vlan 10,20,30 ! interface GigabitEthernet0/1 channel-group 1 mode active ! interface GigabitEthernet0/2 channel-group 1 mode passive What is the effect of this configuration?
Medium909Drag and drop the steps of ISE profiling-based dynamic ACL assignment into the correct order, from first to last.
Medium910Drag and drop each WAN technology on the left to its matching OSI layer on the right.
Medium911Drag and drop the steps of DNA Center network discovery and device sync into the correct order, from first to last.
Medium912Drag and drop each traffic direction on the left to the correct SPAN keyword used to monitor it on the right.
Medium913Which of the following is a valid VLAN range that can be created on a Cisco IOS switch?
Easy914Which three statements about Cisco SD-WAN security and segmentation are true? (Choose three.)
Medium915Which two statements about BGP path attributes are true? (Choose two.)
Medium916Drag and drop the steps of troubleshooting a failed RSPAN session into the correct order, from first to last.
Medium917Which three statements about syslog message severity levels are correct? (Choose three.)
Medium918Drag and drop the steps of EIGRP route summarization configuration into the correct order, from first to last.
Medium919Drag and drop each MQC component on the left to its matching role on the right.
Medium920A network engineer runs the following command on Switch SW2: SW2# show spanning-tree vlan 20 VLAN0020 Spanning tree enabled protocol ieee Root ID Priority 24596 Address aabb.cc00.0200 Cost 4 Port 1 (GigabitEthernet0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32778 (priority 32768 sys-id-ext 20) Address aabb.cc00.0300 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec Interface Role Sts Cost Prio.Nbr Type ------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Root FWD 4 128.1 P2p Gi0/2 Desg FWD 4 128.2 P2p Gi0/3 Altn BLK 4 128.3 P2p Based on this output, what can be concluded?
Medium921Which statement correctly describes the difference between RADIUS and TACACS+?
Medium922Drag and drop the steps of RSPAN session configuration and traffic flow into the correct order, from first to last.
Medium923spanning-tree mode rapid-pvst What is the effect of this global configuration command?
Medium924Drag and drop the steps of LDP session establishment between LSRs into the correct order, from first to last.
Medium925A network engineer is configuring model-driven telemetry on a Cisco IOS-XE router to stream CPU and memory statistics to a collector. The engineer wants to use the YANG model 'Cisco-IOS-XE-process-cpu-oper' and 'Cisco-IOS-XE-memory-oper'. After configuring the telemetry subscription, the engineer notices that no data is being received at the collector. The collector is reachable and the gRPC dial-out is configured correctly. What is the most likely cause of the issue?
Hard926Drag and drop each flow record field on the left to its matching category (key or non-key) on the right.
Medium927Which three statements about model-driven telemetry are true? (Choose three.)
Hard928Drag and drop the steps of DNA Center SWIM (Software Image Management) upgrade flow into the correct order, from first to last.
Medium929Drag and drop the steps of AAA accounting for command logging setup into the correct order, from first to last.
Medium930A network engineer is troubleshooting an issue where Cisco DNA Center is not sending configuration changes to a group of switches. The engineer checks the Provisioning dashboard and sees that the devices are in 'Pending' state. The engineer has already created the intent (network profile) and assigned it to the site. What is the most likely cause?
Hard931Which three statements about LDP (Label Distribution Protocol) are true? (Choose three.)
Hard932Which two statements about using Python for configuration management and templating in network automation are true? (Choose two.)
Medium933Given the following configuration on a Cisco IOS-XE device: router ospf 1 network 10.0.0.0 0.255.255.255 area 0 ! interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 ip ospf cost 10 ! interface GigabitEthernet0/1 ip address 10.2.2.1 255.255.255.0 ! Which statement is true about OSPF operation?
Medium934A network engineer writes the following Python script to collect telemetry data from a Cisco IOS-XE device using NETCONF: ```python from ncclient import manager m = manager.connect( host='192.168.1.1', port=830, username='admin', password='cisco', hostkey_verify=False ) filter = ''' <filter xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"> <interfaces xmlns="http://openconfig.net/yang/interfaces"> <interface> <name>GigabitEthernet1</name> </interface> </interfaces> </filter> ''' reply = m.get(filter=('subtree', filter)) print(reply.xml) m.close_session() ``` What is the issue with this code?
Medium935Drag and drop the steps of WLC high availability SSO failover steps into the correct order, from first to last.
Medium936Which two statements about virtual machine migration (vMotion/VMware) or live migration (Hyper-V) are true? (Choose two.)
Medium937Drag and drop the steps of NAT overload (PAT) packet translation process into the correct order, from first to last.
Medium938A network engineer uses the following Python code to subscribe to telemetry data from a Cisco IOS-XE device via NETCONF using the YANG module 'Cisco-IOS-XE-mdt-oper': ```python from ncclient import manager m = manager.connect( host='192.168.1.1', port=830, username='admin', password='cisco', hostkey_verify=False ) # Create a telemetry subscription subscription = ''' <config> <mdt-config-data xmlns="http://cisco.com/ns/yang/Cisco-IOS-XE-mdt-cfg"> <mdt-subscription> <subscription-id>400</subscription-id> <base> <stream>yang-push</stream> <encoding>encode-kvgpb</encoding> <period>5000</period> <xpath>/interfaces/interface/state/counters</xpath> </base> <mdt-receivers> <address>10.1.1.100</address> <port>50051</port> <protocol>grpc-tcp</protocol> </mdt-receivers> </mdt-subscription> </mdt-config-data> </config> ''' reply = m.edit_config(target='running', config=subscription) print(reply.xml) m.close_session() ``` What is the issue with this code?
Hard939Drag and drop each Cisco security feature on the left to its matching OSI layer on the right.
Medium940Which two statements about VRF-lite configuration are true? (Choose two.)
Easy941Drag and drop each YANG statement on the left to its matching function on the right.
Medium942Which three statements about encoding formats in model-driven telemetry are true? (Choose three.)
Hard943A network engineer runs the following command on Router R5: R5# show ip ospf border-routers OSPF Process 1 internal Routing Table Codes: i - Intra-area route, I - Inter-area route i 1.1.1.1 [110/10] via 192.168.1.1, GigabitEthernet0/0, ABR, Area 0, SPF 5 i 2.2.2.2 [110/20] via 192.168.1.2, GigabitEthernet0/0, ASBR, Area 0, SPF 5 Based on this output, what can be concluded?
Medium944Drag and drop the steps of WLC high availability SSO failover steps into the correct order, from first to last.
Medium945Which two statements about OSPF network types are true? (Choose two.)
Medium946Drag and drop the steps of IGMPv3 membership report processing into the correct order, from first to last.
Medium947Drag and drop each SNMP operation on the left to its matching direction on the right.
Medium948Which three statements about MPLS forwarding are true? (Choose three.)
Hard949An engineer is troubleshooting an EIGRP issue where a router is not learning a specific route from a neighbor. The engineer runs 'show ip eigrp topology all-links' and sees the route in the topology table with a feasible distance of 100 and a reported distance of 120. The neighbor's advertised distance is 80. The router's own computed distance to the network is 150. The route is not in the routing table. What is the most likely cause?
Hard950Drag and drop the steps of configuring LLQ (Low Latency Queuing) on a Cisco router into the correct order, from first to last.
Medium951Drag and drop the steps of VLAN mapping on trunk interfaces into the correct order, from first to last.
Medium952Which three statements about OSPF area types are correct? (Choose three.)
Hard953Drag and drop each TACACS+ packet type on the left to its correct function on the right.
Medium954A network engineer is deploying Cisco DNA Center in a large campus network with 5000+ devices. After initial setup, the engineer notices that the Assurance module is not receiving telemetry data from many access switches. The switches are running IOS-XE 16.12 and are reachable via SNMP. What is the most likely cause of this issue?
Medium955Which three statements about SNMP trap and inform operations are true? (Choose three.)
Hard956Drag and drop the steps of IP addressing scheme design and subnetting steps into the correct order, from first to last.
Medium957Drag and drop the steps of Multiple SPAN source ports with filter VLAN into the correct order, from first to last.
Medium958Which TWO statements are true about Cisco DNA Center automation? (Choose two.)
Easy959Examine the following configuration: policy-map QUEUE class GOLD bandwidth percent 25 queue-limit 64 packets class SILVER bandwidth percent 25 queue-limit 128 packets class class-default fair-queue interface GigabitEthernet0/2 service-policy output QUEUE Which statement about this configuration is true?
Medium960Drag and drop each hypervisor type on the left to its matching characteristic on the right.
Medium961Which two statements about SNMPv3 security models are true? (Choose two.)
Medium962Drag and drop each ACL type on the left to its matching capability on the right.
Medium963Drag and drop the steps of Layer 3 EtherChannel (routed port-channel) setup into the correct order, from first to last.
Medium964Drag and drop the steps of MSDP peering for inter-domain multicast into the correct order, from first to last.
Medium965Drag and drop each ISE policy result on the left to its matching enforcement action on the right.
Hard966Drag and drop the steps of LACP EtherChannel negotiation and bundle formation into the correct order, from first to last.
Medium967Drag and drop the steps of telemetry path validation using YANG DevKit into the correct order, from first to last.
Medium968Drag and drop each VNF category on the left to its matching example on the right.
Easy969Drag and drop the steps of a RESTCONF PUT transaction on IOS-XE into the correct order, from first to last.
Medium970Drag and drop the steps of DMVPN Phase 2 NHRP resolution process into the correct order, from first to last.
Medium971Drag and drop each EIGRP DUAL state on the left to its matching stage on the right.
Medium972Which two statements about Cisco FlexConnect are true? (Choose two.)
Medium973Drag and drop the steps of ISE RADIUS policy evaluation order into the correct order, from first to last.
Medium974Which three statements about NFV use cases and deployment models are true? (Choose three.)
Easy975Which three statements about error handling and debugging in Python network automation scripts are true? (Choose three.)
Hard976Drag and drop the steps of the RADIUS authentication process into the correct order, from first to last.
Medium977Drag and drop the steps of EIGRP neighbor establishment into the correct order, from first to last.
Medium978Drag and drop the steps of sFlow agent sampling and forwarding steps into the correct order, from first to last.
Medium979Drag and drop each DNA Center package on the left to its matching function on the right.
Medium980Drag and drop the steps of Netmiko multi-threaded device polling workflow into the correct order, from first to last.
Medium981A network engineer configures SNMPv2c on a Cisco switch to send traps to an NMS at 192.168.1.100 with community 'monitor'. The engineer also configures 'snmp-server enable traps snmp linkdown linkup'. The NMS receives link traps but not authentication failure traps. The engineer has not configured any access control. What is the most likely reason?
Medium982Which two statements about SNMP MIB objects and OIDs are true? (Choose two.)
Medium983Drag and drop each telemetry model on the left to its matching push type (dial-in or dial-out) on the right.
Medium984Drag and drop the steps of PIM-SM join and source registration into the correct order, from first to last.
Medium985Which two statements about telemetry subscription modes are true? (Choose two.)
Medium986Drag and drop the steps of DNA Center assurance issue detection and root cause into the correct order, from first to last.
Medium987Which three statements about RSPAN configuration and behavior are true? (Choose three.)
Medium988Drag and drop the steps of BFD session establishment for path liveliness into the correct order, from first to last.
Medium989Drag and drop the steps of MAB (MAC Authentication Bypass) fallback flow into the correct order, from first to last.
Medium990Drag and drop each STP timer on the left to its matching default value on the right.
Medium991Drag and drop each VM network mode on the left to its matching behavior on the right.
Medium992Drag and drop the steps of iBGP route reflection configuration steps into the correct order, from first to last.
Medium993Which two statements about EIGRP feasible successors are true? (Choose two.)
Medium994Which three statements about IP SLA threshold configuration and reaction are true? (Choose three.)
Hard995Drag and drop the steps of the hierarchical campus network design process into the correct order, from first to last.
Medium996What is the default OSPF hello interval on an Ethernet link?
Easy997Drag and drop the steps of LACP active/passive mode negotiation into the correct order, from first to last.
Medium998An architect is designing an SD-Access fabric for a campus with multiple buildings. The design must support wireless clients seamlessly roaming across fabric edge nodes. Which technology is used in the fabric to provide mobility for wireless endpoints?
Medium999Drag and drop each IPv6 ACL feature on the left to its matching IPv4 ACL equivalent on the right.
Hard1000A network engineer writes the following Python script to retrieve the list of devices from Cisco DNA Center using the REST API: import requests import json url = "https://dna-center.local/dna/intent/api/v1/network-device" headers = { "Content-Type": "application/json", "X-Auth-Token": "valid-token-here" } response = requests.get(url, headers=headers, verify=False) if response.status_code == 200: devices = response.json() for device in devices["response"]: print(device["hostname"]) else: print("Error:", response.status_code) What is the issue with this code?
Medium1001Drag and drop each OSPF LSA type on the left to its matching description on the right.
Medium1002Drag and drop the steps of the 802.11 client association process into the correct order, from first to last.
Medium1003Drag and drop the steps of Syslog severity filtering and rate-limiting configuration into the correct order, from first to last.
Medium1004Which two statements about VLAN configuration and verification are true? (Choose two.)
Hard1005Drag and drop each Python library on the left to its matching network use case on the right.
Medium1006Drag and drop each WAN topology type on the left to its matching characteristic on the right.
Medium1007Examine the following configuration for a Cisco IOS-XE device: interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.252 ipv6 address 2001:db8::1/64 ipv6 ospf 1 area 0 ! interface GigabitEthernet0/1 ip address 192.168.1.1 255.255.255.0 ipv6 address 2001:db8:1::1/64 ipv6 ospf 1 area 0 ! ipv6 router ospf 1 router-id 2.2.2.2 Which statement is true about OSPFv3 operation?
Medium1008Which three statements about EIGRP route summarization are true? (Choose three.)
Hard1009Which BGP attribute is preferred when it has the lowest value?
Easy1010Drag and drop each WAN encapsulation on the left to its matching use case on the right.
Medium1011An engineer is using a Python script to configure a new VLAN on a Cisco Nexus 9000 switch using the NX-API REST API. The script sends a POST request to 'https://switch/api/mo/org.json' with a JSON payload containing the VLAN configuration. The switch responds with a 403 Forbidden error. What is the most likely cause?
Medium1012Drag and drop each EIGRP state on the left to its matching DUAL stage on the right.
Medium1013Drag and drop each Control plane protection feature on the left to its matching threat on the right.
Medium1014A data center uses Cisco Nexus 9000 switches with VXLAN EVPN to provide network virtualization. The operations team notices that VLAN 100 (mapped to VNI 10100) is not reachable across the fabric, although other VLANs work fine. The NVE interface is up, and the EVPN address-family is configured. Which two actions should the engineer take to isolate the issue?
Hard1015Drag and drop each LACP port mode on the left to its matching negotiation behavior on the right.
Medium1016Drag and drop each Cisco security feature on the left to its matching OSI layer on the right.
Medium1017Match each QoS feature to its description.
Medium1018Drag and drop the steps of ERSPAN (Encapsulated RSPAN) session configuration into the correct order, from first to last.
Medium1019Drag and drop each EIGRP packet type on the left to its matching function on the right.
Medium1020Drag and drop the steps of EtherChannel load-balancing hash configuration into the correct order, from first to last.
Medium1021Which two statements about Ansible automation in a Cisco environment are true? (Choose two.)
Medium1022Drag and drop the steps of SD-Access fabric border node configuration steps into the correct order, from first to last.
Medium1023What is the default update interval for a Cisco IOS-XE telemetry subscription when using update-policy periodic without specifying a value?
Easy1024Drag and drop the steps of SNMPv3 secure agent configuration into the correct order, from first to last.
Hard1025Which three statements about using Python for device inventory and data serialization in network automation are true? (Choose three.)
Hard1026Drag and drop each HTTP status code on the left to its meaning on the right.
Easy1027Drag and drop each IP SLA operation type on the left to its measured metric on the right.
Medium1028Drag and drop each IGMP version on the left to its matching feature on the right.
Medium1029Drag and drop the steps of MPLS FRR (Fast Reroute) backup tunnel activation into the correct order, from first to last.
Medium1030Drag and drop the steps of OSPFv3 IPv6 neighbor adjacency formation into the correct order, from first to last.
Medium1031A network engineer is implementing model-driven telemetry on a Cisco Nexus 9000 switch to monitor VLAN and STP changes. The engineer wants to use the native telemetry protocol with UDP as the transport. After configuring the telemetry subscription with the 'destination-group' and 'sensor-group', the engineer notices that the collector is not receiving any data. The collector is reachable and the UDP port is open. What is the most likely missing configuration?
Hard1032Drag and drop the steps of BGP confederations setup between sub-ASes into the correct order, from first to last.
Medium1033Which two statements about the 'ip access-group' command are true? (Choose two.)
Easy1034Drag and drop each OSPF router role on the left to its matching function on the right.
Medium1035Drag and drop the steps of PIM DM (Dense Mode) flood and prune steps into the correct order, from first to last.
Medium1036Which two statements about EIGRP stub routing are true? (Choose two.)
Medium1037Which two statements about NetFlow are true? (Choose two.)
Medium1038Which two statements about local AAA and fallback methods are true? (Choose two.)
Easy1039Drag and drop each NetFlow version on the left to its matching feature on the right.
Medium1040Drag and drop the steps of Cisco DNA Center device onboarding via PnP into the correct order, from first to last.
Medium1041Which two statements about NetFlow flow records and export are correct? (Choose two.)
Easy1042Drag and drop the steps of disaster recovery failover process into the correct order, from first to last.
Medium1043Drag and drop the steps of streaming telemetry sensor path subscription flow into the correct order, from first to last.
Medium1044Drag and drop the steps of OSPF SPF calculation steps (Dijkstra) into the correct order, from first to last.
Medium1045Drag and drop each SPAN type on the left to its correct scope description on the right.
Medium1046Which three statements about virtual machine (VM) resource allocation and overcommitment are true? (Choose three.)
Hard1047Drag and drop the steps of configuring a Layer 2 EtherChannel using PAgP into the correct order, from first to last.
Medium1048A network engineer issues the following command on Router R4: R4# show ip ospf database OSPF Router with ID (4.4.4.4) (Process ID 1) Router Link States (Area 0) Link ID ADV Router Age Seq# Checksum Link count 1.1.1.1 1.1.1.1 123 0x80000002 0x00A1B2 2 2.2.2.2 2.2.2.2 456 0x80000003 0x00B2C3 3 4.4.4.4 4.4.4.4 789 0x80000001 0x00C3D4 1 Net Link States (Area 0) Link ID ADV Router Age Seq# Checksum 192.168.1.2 2.2.2.2 234 0x80000001 0x00D4E5 Based on this output, what can be concluded?
Hard1049Which of the following are requirements of an RSPAN VLAN? (Select all that apply.)
Medium1050Examine the following HSRP configuration on a Cisco IOS-XE switch: interface Vlan10 ip address 10.0.0.2 255.255.255.0 standby 10 ip 10.0.0.1 standby 10 priority 150 standby 10 preempt What is the effect of the 'standby 10 preempt' command?
Medium1051Which three statements about Multiple Spanning Tree Protocol (MSTP) are true? (Choose three.)
Hard1052Drag and drop each PIM message type on the left to its matching function on the right.
Medium1053Drag and drop the steps of uRPF (Unicast Reverse Path Forwarding) verification into the correct order, from first to last.
Medium1054A network engineer runs the following command on Switch SW1: SW1# show dtp interface gi0/1 DTP information on GigabitEthernet0/1: DTP: Enabled DTP mode: Desirable DTP negotiate: TRUE DTP status: Trunk DTP trunk status: Trunking DTP timer: 30 DTP max-age: 2 DTP encapsulation: 802.1q DTP refresh rate: Both DTP requests: 10 DTP errors: 0 Based on this output, what can be concluded?
Medium1055Drag and drop the steps of RADIUS CoA (Change of Authorization) message flow into the correct order, from first to last.
Medium1056Which two statements about Flexible NetFlow are true? (Choose two.)
Medium1057Drag and drop the steps of MPLS traffic engineering (MPLS-TE) tunnel setup into the correct order, from first to last.
Medium1058Drag and drop the steps of configuring an IP SLA UDP jitter operation into the correct order, from first to last.
Medium1059Drag and drop each IP SLA tracking object on the left to its application on the right.
Medium1060Which three statements about SSL VPNs are true? (Choose three.)
Easy1061Drag and drop each traffic shaping or policing characteristic on the left to its matching description on the right.
Medium1062Which four statements about VXLAN encapsulation in Cisco SD-Access are true? (Choose four.)
Hard1063Drag and drop each QoS model on the left to its matching characteristic on the right.
Medium1064Drag and drop the steps of DNA Center template deployment to a device into the correct order, from first to last.
Medium1065Drag and drop the steps of SR-IOV configuration for VM network bypass into the correct order, from first to last.
Medium1066Drag and drop each 802.11 standard on the left to its matching frequency band and maximum data rate on the right.
Medium1067Drag and drop each IKEv2 exchange on the left to its matching phase on the right.
Medium1068Drag and drop the steps of Docker container networking with bridge mode into the correct order, from first to last.
Medium1069Drag and drop the steps of FlexVPN IKEv2 spoke registration to hub into the correct order, from first to last.
Medium1070Which three statements about Ansible playbooks and roles are true? (Choose three.)
Hard1071Drag and drop each MQC command on the left to its configuration level on the right.
Medium1072A network engineer runs the following command on Router R1: R1# show bgp ipv4 unicast 10.10.10.0 BGP routing table entry for 10.10.10.0/24, version 20 Paths: (2 available, best #1, table default) Advertised to update-groups: 1 Refresh Epoch 1 65050 65100 10.0.1.2 from 10.0.1.2 (10.0.0.2) Origin IGP, metric 0, localpref 100, weight 0, valid, external, best rx pathid: 0, tx pathid: 0x0 65050 65100 65200 10.0.1.3 from 10.0.1.3 (10.0.0.3) Origin IGP, metric 0, localpref 100, weight 0, valid, external rx pathid: 0, tx pathid: 0x0 Based on this output, what can be concluded?
Hard1073Which three statements about gRPC and gNMI in the context of model-driven telemetry are true? (Choose three.)
Hard1074Drag and drop each hypervisor product on the left to its matching vendor on the right.
Medium1075Which three statements about DHCP snooping are true? (Choose three.)
Hard1076Which three statements about telemetry protocols and data collection are true? (Choose three.)
Medium1077A network engineer uses the Cisco DNA Center REST API to retrieve the list of devices. The API returns the following JSON: ```json { "response": [ { "id": "12345678-1234-1234-1234-123456789abc", "managementIpAddress": "192.168.1.1", "hostname": "Router1", "platformId": "ISR4331", "role": "ACCESS", "series": "ISR4300 Series" } ], "version": "1.0" } ``` The engineer writes the following Python code to extract the hostname of the first device: ```python import requests url = 'https://dna-center.local/dna/intent/api/v1/network-device' headers = {'X-Auth-Token': 'valid_token', 'Accept': 'application/json'} response = requests.get(url, headers=headers, verify=False) data = response.json() hostname = data['response'][0]['hostname'] print(hostname) ``` What is a potential issue with this code?
Medium1078Drag and drop the steps of Ansible inventory grouping and variable inheritance into the correct order, from first to last.
Medium1079Drag and drop the steps of Cisco Flex (FlexConnect) AP mode operation into the correct order, from first to last.
Medium1080Drag and drop the steps of OpenConfig interface counters subscription and decode into the correct order, from first to last.
Medium1081Drag and drop each AAA service on the left to its matching protocol on the right.
Medium1082What is the purpose of the 'source-interface' command under a telemetry receiver configuration?
Medium1083Drag and drop each Layer 2 attack on the left to its matching mitigation feature on the right.
Medium1084Drag and drop the steps of RESTCONF GET with depth and field query parameters into the correct order, from first to last.
Medium1085Examine the following EIGRP configuration on a Cisco IOS-XE device: router eigrp 100 network 10.0.0.0 0.255.255.255 passive-interface default no passive-interface GigabitEthernet0/0 ! interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 ! interface GigabitEthernet0/1 ip address 10.2.2.1 255.255.255.0 Which statement is true?
Medium1086Drag and drop the steps of LISP EID-to-RLOC mapping resolution process into the correct order, from first to last.
Medium1087Which TWO statements about virtual switching in a hypervisor environment are correct?
Easy1088Drag and drop each Cisco campus design model component on the left to its matching description on the right.
Medium1089Drag and drop the steps of a VM live migration process in vSphere into the correct order, from first to last.
Medium1090Which two statements about 802.1X port-based authentication on a Cisco switch are true? (Choose two.)
Medium1091An engineer is using the Cisco SD-WAN vManage REST API to retrieve the list of WAN edge devices. The engineer sends a GET request to 'https://vmanage/dataservice/device' and receives a 401 Unauthorized error. The engineer has already obtained a JSESSIONID cookie by authenticating with the API. What is the most likely cause of the error?
Hard1092Drag and drop each MPLS VPN role on the left to its matching description on the right.
Medium1093Drag and drop each Netmiko device type on the left to its matching operating system on the right.
Medium1094Drag and drop the steps of network documentation and change management workflow into the correct order, from first to last.
Medium1095Drag and drop the steps of Cisco IBNS 2.0 policy configuration into the correct order, from first to last.
Medium1096Drag and drop the steps of EIGRP redistribution from OSPF with metric seeding into the correct order, from first to last.
Medium1097Drag and drop the steps of IPv6 ACL configuration and application into the correct order, from first to last.
Medium1098Drag and drop each hypervisor type on the left to its matching characteristic on the right.
Medium1099Which two statements about Type 1 and Type 2 hypervisors are true? (Choose two.)
Medium1100Which two statements about SPAN and RSPAN limitations are true? (Choose two.)
Medium1101Which two statements about the Cisco SD-Access fabric roles are true? (Choose two.)
Medium1102Drag and drop each BGP community on the left to its standard behavior on the right.
Hard1103Drag and drop each SNMP operation on the left to its matching direction on the right.
Medium1104Drag and drop each VRF-Lite vs MPLS VPN characteristic on the left to its matching description on the right.
Medium1105Drag and drop the steps of configuring AAA on a Cisco IOS device into the correct order, from first to last.
Medium1106Drag and drop the steps of OSPF summarization at ABR configuration steps into the correct order, from first to last.
Medium1107Which THREE of the following are characteristics of Cisco TrustSec (CTS) security architecture?
Hard1108Drag and drop each multicast address range on the left to its matching use on the right.
Medium1109Drag and drop each Python data structure on the left to its matching network config use on the right.
Medium1110A network engineer is configuring EtherChannel between two Cisco Catalyst switches. The ports are configured as access ports in VLAN 10. After configuring the port-channel interface and adding the physical ports, the engineer notices that the EtherChannel does not come up. The show etherchannel summary command shows the port-channel in a down state. What is the most likely cause?
Medium1111Drag and drop the steps of MPLS L2VPN (AToM) pseudowire setup into the correct order, from first to last.
Medium1112Drag and drop each MPLS label field on the left to its matching bit size on the right.
Medium1113A network engineer runs the following command on Router R7: R7# show mpls ldp capabilities LDP Capabilities: Dynamic Capability: advertised Typed Wildcard FEC: advertised MTU Signaling: advertised P2MP: not advertised MPLS OAM: advertised LDP Graceful Restart: advertised Helper mode: enabled Restart mode: enabled Reconnect time: 120 sec Recovery time: 180 sec Based on this output, which capability is NOT supported by this router?
Medium1114Drag and drop the steps of uRPF (Unicast Reverse Path Forwarding) verification into the correct order, from first to last.
Medium1115Drag and drop each First Hop Redundancy Protocol on the left to its matching function on the right.
Medium1116Drag and drop each service chaining element on the left to its matching position in the chain on the right.
Medium1117Drag and drop the steps of configuring a site-to-site IPsec VPN on Cisco IOS into the correct order, from first to last.
Medium1118Drag and drop each Python library on the left to its matching network use case on the right.
Medium1119Drag and drop each LISP message type on the left to its matching purpose on the right.
Medium1120Drag and drop each MPLS label field on the left to its matching bit size on the right.
Medium1121Which two statements about SNMPv3 security features are true? (Choose two.)
Medium1122Drag and drop the steps of CoPP class-map match criteria and rate-limit application into the correct order, from first to last.
Medium1123Drag and drop the steps of Cisco NSO service provisioning workflow into the correct order, from first to last.
Medium1124Which two statements about SD-WAN architecture are true? (Choose two.)
Medium1125Drag and drop the steps of BGP policy application (route-map, prefix-list, AS-path ACL) into the correct order, from first to last.
Medium1126Which three statements about RPF check in IP multicast are true? (Choose three.)
Hard1127Drag and drop the steps of OpenAPI schema validation for DNA Center REST call into the correct order, from first to last.
Medium1128Drag and drop the steps of 4G/LTE WAN failover with IP SLA tracking into the correct order, from first to last.
Medium1129Drag and drop each DNA Center ISE integration component on the left to its matching role on the right.
Medium1130Which two statements about NFV architecture and components are true? (Choose two.)
Medium1131Drag and drop the steps of Rapid PVST+ topology change notification process into the correct order, from first to last.
Medium1132Drag and drop the steps of gNMI Subscribe RPC using Python gRPC library into the correct order, from first to last.
Hard1133A network engineer is configuring EIGRP on a router that connects to a service provider network. The engineer wants to advertise a default route to internal routers. The engineer configures 'ip default-network 0.0.0.0' and redistributes a static default route into EIGRP. However, internal routers are not receiving the default route. The engineer checks the EIGRP topology table and sees the default route with a metric of 1. What is the most likely reason?
Hard1134Which two statements about IP Source Guard are true? (Choose two.)
Medium1135Which two statements about YANG data models in model-driven telemetry are true? (Choose two.)
Medium1136Drag and drop each NFV component on the left to its matching role on the right.
Medium1137Which three statements about 802.1X port-based authentication are true? (Choose three.)
Hard1138Which four statements about LACP (Link Aggregation Control Protocol) are true? (Choose four.)
Medium1139Drag and drop each queuing mechanism on the left to its matching use case on the right.
Medium1140Which two statements about OSPF network types are true? (Choose two.)
Medium1141Drag and drop the steps of Cisco DHCP snooping binding table population into the correct order, from first to last.
Medium1142Drag and drop each VTP mode on the left to its matching capability on the right.
Medium1143A network engineer is troubleshooting a model-driven telemetry deployment on a Cisco IOS-XE router. The telemetry subscription is configured to stream interface statistics using gRPC dial-out to a collector at 10.1.1.100:50051. The engineer verifies that the collector is listening on the port and the router can reach it. However, the collector shows no data received. The engineer checks the router's telemetry logs and sees 'Connection refused' errors. What is the most likely cause?
Medium1144Which three statements about MPLS Layer 3 VPNs are true? (Choose three.)
Hard1145Drag and drop the steps of SNMP trap generation and forwarding into the correct order, from first to last.
Medium1146Match each EIGRP term to its definition.
Medium1147Drag and drop the steps of 802.1X port authentication with MAB fallback into the correct order, from first to last.
Medium1148Drag and drop the steps of DHCP failover configuration between primary and standby into the correct order, from first to last.
Medium1149Drag and drop each OSPF LSA type on the left to its matching description on the right.
Medium1150Drag and drop the steps of BGP graceful restart negotiation steps into the correct order, from first to last.
Medium1151Drag and drop each VRF component on the left to its matching function on the right.
Medium1152Drag and drop the steps of STP root bridge election and port state transitions into the correct order, from first to last.
Medium1153Drag and drop each IKEv2 exchange on the left to its matching phase on the right.
Medium1154Drag and drop the steps of QoS pre-classify for encrypted VPN traffic into the correct order, from first to last.
Medium1155Drag and drop the steps of 802.11r Fast BSS Transition (FT) roaming steps into the correct order, from first to last.
Medium1156Drag and drop each Control plane protection feature on the left to its matching threat on the right.
Medium1157Which two statements about IP SLA with object tracking are true? (Choose two.)
Medium1158Drag and drop each NAT type on the left to its matching description on the right.
Medium1159Drag and drop each infrastructure hardening technique on the left to its matching configuration command on the right.
Medium1160Drag and drop the steps of Metro Ethernet E-Line service provisioning into the correct order, from first to last.
Medium1161An engineer is configuring a site-to-site VPN between two Cisco routers using IPsec with IKEv2. The engineer wants to use a pre-shared key. The configuration on both routers includes: crypto ikev2 proposal default, encryption aes-cbc-256, integrity sha256, group 14. The engineer also configures crypto ikev2 keyring and crypto ikev2 profile. The tunnel does not establish. The engineer sees that the IKEv2 SA is not created. What is the most likely missing configuration?
Hard1162Drag and drop the steps of iBGP route reflection configuration into the correct order, from first to last.
Medium1163Drag and drop the steps of SD-Access fabric endpoint registration into the correct order, from first to last.
Medium1164Drag and drop the steps of EIGRP variance-based unequal-cost load balancing into the correct order, from first to last.
Medium1165A network engineer runs the following command on a Cisco WLC: WLC# show wlan summary WLAN ID SSID Status Security Interface 1 Guest Enabled Open guest-vlan 2 Corporate Enabled WPA2 corp-vlan 3 IoT Disabled WPA2 iot-vlan 4 Management Enabled WPA2 mgmt-vlan Based on this output, what can be concluded?
Easy1166A network engineer runs the following command on Router R1: R1# show ip access-lists Extended IP access list 150 10 permit tcp 10.0.0.0 0.255.255.255 any eq 23 (2 matches) 20 deny tcp any any eq 23 (8 matches) 30 permit tcp 172.16.0.0 0.0.255.255 any eq 22 (4 matches) 40 deny tcp any any eq 22 (1 match) 50 permit ip any any (15 matches) Based on this output, what can be concluded?
Hard1167A network engineer is using the Cisco DNA Center REST API to retrieve the list of devices. The API call returns the following JSON response: ```json { "response": [ { "id": "device-123", "hostname": "Router1", "managementIpAddress": "10.10.20.1", "softwareVersion": "17.3.3", "platformId": "ISR4451-X/K9" }, { "id": "device-456", "hostname": "Switch1", "managementIpAddress": "10.10.20.2", "softwareVersion": "16.12.5", "platformId": "C9300-24P" } ], "version": "1.0" } ``` The engineer wants to filter the results to only show devices with software version 17.3.3. Which of the following API query parameters should be used?
Hard1168Which three statements about DMVPN phase 2 are true? (Choose three.)
Hard1169Drag and drop each broadband type on the left to its matching technology on the right.
Easy1170Which three statements about IGMP snooping are true? (Choose three.)
Medium1171Which THREE attributes are typically included in a YANG module for interface configuration? (Choose three.)
Medium1172Drag and drop the steps of Private VLAN (PVLAN) configuration steps into the correct order, from first to last.
Medium1173Drag and drop the steps of OSPF virtual link configuration across area 0 into the correct order, from first to last.
Hard1174Drag and drop the steps of STP portfast and BPDU guard configuration into the correct order, from first to last.
Medium1175Drag and drop each MP-BGP address family on the left to its matching use case on the right.
MediumOther domains
All 350-401 exam domains
Frequently asked questions
- What does the ospf domain cover on the 350-401 exam?
- OSPF questions usually test neighbour formation, areas, router IDs, route preference, metrics and command-output interpretation.
- How many questions are in this domain?
- This page lists all 1175 ospf questions in the 350-401 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only ospf questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.