CCNA IP Sla Questions

57 questions · IP Sla topic · All types, answers revealed

1
MCQmedium

Review this IP SLA configuration on Router R1: ip sla 6 icmp-echo 10.6.6.6 frequency 10 ip sla schedule 6 life forever start-time now ip sla reaction-configuration 6 react timeout threshold-type immediate action-type triggerOnly Which statement is true about the 'threshold-type immediate' parameter?

A.It triggers an event immediately when a timeout occurs.
B.It triggers an event after a delay of 10 seconds.
C.It triggers an event only if the timeout persists for 5 consecutive probes.
D.It triggers an event only if the timeout occurs within the first 10 seconds.
AnswerA

'immediate' triggers on the first occurrence of the condition.

Why this answer

'threshold-type immediate' means the trigger fires as soon as the condition (timeout) occurs, without waiting for multiple occurrences.

2
Matchingmedium

Drag and drop each IP SLA threshold type on the left to its trigger condition on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Triggers when a value exceeds a set threshold

Triggers on the first violation

Triggers after a specified number of consecutive violations

Triggers when value rises above a threshold

Triggers when value falls below a threshold

Why these pairings

Over-threshold triggers when a value exceeds a set threshold; immediate triggers on the first violation; consecutive triggers after a specified number of consecutive violations.

3
Multi-Selectmedium

Which two statements about IP SLA responder configuration are true? (Choose two.)

Select 2 answers
A.The IP SLA responder must be enabled on the destination device for UDP jitter probes to function correctly.
B.The 'ip sla responder' command is entered in global configuration mode to enable the responder globally.
C.The IP SLA responder must be enabled on every intermediate router along the path for accurate one-way delay measurements.
D.ICMP echo probes require the IP SLA responder to be enabled on the target device.
E.The IP SLA responder can be configured to respond only to specific source IP addresses using an access list.
AnswersA, B

Correct because UDP jitter probes require the responder on the destination to timestamp packets and calculate delay, jitter, and packet loss.

Why this answer

The IP SLA responder is required for certain probe types to ensure accurate measurements. The 'ip sla responder' command enables the responder globally, and it can be further refined with an access list to limit which source IPs are allowed to trigger the responder. The responder does not need to be enabled on every device in the path, only on the destination device for UDP-based probes.

The responder is not used for ICMP echo probes, and it does not require a control protocol like SNMP to function.

4
MCQhard

An engineer configures IP SLA 100 to monitor the jitter and latency of a VoIP call path between two branch routers. The configuration uses UDP jitter with a target of 192.168.2.2 on port 16384. The engineer notices that the IP SLA operation shows 'State: Active' but no jitter or latency statistics are collected. The router is generating the probe packets, but the remote router does not respond. What is the most likely reason?

A.The IP SLA operation must be configured with a 'request-data-size' value to match the remote router's MTU.
B.The remote router must have an IP SLA responder configured to process the UDP jitter probes.
C.The source router needs a 'frequency' setting that matches the remote router's response interval.
D.The firewall on the remote router is blocking the UDP port 16384, preventing the probe from reaching the target.
AnswerB

Correct. For UDP jitter (and other UDP-based probes), the destination router must run the IP SLA responder to echo the packets back. Without it, the source cannot compute one-way metrics.

Why this answer

UDP jitter probes require a responder on the destination router to echo the packets back. Without the responder, the source router sends probes but receives no response, so no jitter statistics can be computed.

5
Drag & Dropmedium

Drag and drop the steps of IP SLA scheduling with frequency and lifetime into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

First, create the IP SLA operation. Then configure the frequency (how often probes are sent). Next, set the lifetime (how long the operation runs).

After that, schedule the operation with a start time. Finally, verify the scheduling parameters are active.

6
Matchingmedium

Drag and drop each IP SLA schedule parameter on the left to its function on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Defines when the operation begins

Sets the interval between probes

Sets the total duration of the operation

Removes the operation after inactivity

Sets the value that triggers a reaction

Why these pairings

Start-time defines when the operation begins; frequency sets the interval between probes; life sets the total duration of the operation.

7
MCQmedium

A network engineer configures IP SLA 1 to monitor HTTP server availability at 10.1.1.1 using HTTP GET. The operation is used as a track object for a backup static route. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 200 ms', but the track object shows 'Track 1: up' even though the HTTP server returns a 404 error. What is the cause?

A.The IP SLA HTTP operation must be configured with a 'url' that includes the full path, otherwise it defaults to the root and returns 404.
B.The IP SLA HTTP operation does not interpret HTTP status codes by default; it only checks if a TCP connection is established.
C.The track object must be configured with a 'down' threshold to trigger when the HTTP response time exceeds a value.
D.The HTTP server is responding, so the IP SLA operation correctly shows success; the engineer must use a different type of probe, like TCP connect, to detect the 404.
AnswerB

Correct. IP SLA HTTP probe by default only verifies that the TCP handshake succeeds and a response is received. It does not parse the HTTP status code unless a 'status-code' match is configured.

Why this answer

By default, IP SLA HTTP operations consider a successful HTTP response (any status code) as a success. The operation does not fail on 404 unless a specific status code match is configured.

8
MCQeasy

A network engineer runs the following command on Router R4: R4# show ip sla monitor statistics 3 Round Trip Time (RTT) for Index 3 Latest RTT: 25 ms Latest Operation Start Time: 14:30:00.000 UTC Mon Mar 1 2021 Latest Operation Return Code: OK Number of successes: 100 Number of failures: 0 Over thresholds: 0 Based on this output, what can be concluded about the IP SLA operation?

A.The operation has experienced failures.
B.The operation is currently failing.
C.The operation is working correctly with no failures.
D.The round-trip time exceeds the threshold.
AnswerC

100 successes and 0 failures confirm proper operation.

Why this answer

The return code 'OK' and zero failures indicate that the operation is functioning correctly and the target is reachable.

9
Multi-Selecthard

Which three statements about IP SLA probe types and their characteristics are true? (Choose three.)

Select 3 answers
A.The UDP jitter operation measures one-way delay, jitter, and packet loss in both directions.
B.The ICMP echo operation measures round-trip time and can also provide jitter calculations.
C.The TCP connect operation measures the time to establish a TCP three-way handshake.
D.The HTTP operation measures the time to resolve the DNS name of the target web server.
E.The ICMP echo operation requires the IP SLA responder to be enabled on the target device.
AnswersA, B, C

Correct because UDP jitter probes timestamp packets at both ends to compute one-way metrics and can detect packet loss.

Why this answer

Different IP SLA probe types measure different network metrics. UDP jitter measures one-way delay, jitter, and packet loss. ICMP echo measures round-trip time and packet loss.

TCP connect measures the time to establish a TCP connection. HTTP probes measure the time to retrieve a web page. The probe type determines what metrics are available and how the probe is configured.

10
MCQmedium

Consider the following partial configuration on Router R1: ip sla 2 icmp-echo 10.2.2.2 frequency 15 ip sla schedule 2 life forever start-time now ip sla reaction-configuration 2 react timeout threshold-type immediate action-type triggerOnly Which statement about this configuration is true?

A.The IP SLA operation will send ICMP echo requests every 15 seconds and trigger an event if a timeout occurs, but the trigger will only activate once.
B.The IP SLA operation will send ICMP echo requests every 15 seconds and continuously trigger events for each timeout.
C.The IP SLA operation will send ICMP echo requests every 15 seconds and trigger an event if the round-trip time exceeds a threshold.
D.The IP SLA operation will send ICMP echo requests every 15 seconds, but the 'reaction-configuration' command is invalid because it requires a threshold value.
AnswerA

'threshold-type immediate' triggers as soon as a timeout occurs, and 'action-type triggerOnly' ensures it triggers only once.

Why this answer

The 'reaction-configuration' command configures IP SLA to monitor the 'timeout' condition. When a timeout occurs, it triggers an immediate action, but 'triggerOnly' means it only triggers once and does not reset automatically.

11
MCQeasy

What is the purpose of the 'ip sla schedule' command in IP SLA configuration?

A.It defines the type of IP SLA operation.
B.It sets the frequency of the IP SLA operation.
C.It starts the IP SLA operation and sets its lifetime and start time.
D.It configures threshold monitoring for the IP SLA operation.
AnswerC

'ip sla schedule' activates the operation with parameters like 'life' and 'start-time'.

Why this answer

The 'ip sla schedule' command starts an IP SLA operation and defines its lifetime and start time.

12
Multi-Selecteasy

Which two statements about IP SLA probe scheduling and operation states are true? (Choose two.)

Select 2 answers
A.The 'schedule' command with 'start-time now' causes the IP SLA operation to begin immediately.
B.An IP SLA operation in the 'active' state indicates that the probe is currently being sent and responses are being collected.
C.The 'life' parameter in the IP SLA configuration sets the frequency at which probes are sent.
D.An IP SLA operation remains in the 'pending' state until the 'start-time' is reached, even if the configuration is complete.
E.The 'schedule' command with 'life forever' causes the operation to stop after a single probe.
AnswersA, B

Correct because 'start-time now' starts the operation as soon as the command is entered.

Why this answer

IP SLA operations can be scheduled to start immediately or at a specific time, and they can run indefinitely or for a fixed duration. The 'life' parameter controls how long the operation runs. An operation in 'active' state is currently sending probes.

The 'pending' state means the operation is configured but not yet scheduled. The 'life forever' command makes the operation run until manually stopped.

13
MCQhard

A network engineer runs the following command on Router R7: R7# show ip sla monitor statistics 6 Round Trip Time (RTT) for Index 6 Latest RTT: NoConnection/Busy/Timeout Latest Operation Start Time: 18:00:00.000 UTC Mon Mar 1 2021 Latest Operation Return Code: Timeout Number of successes: 0 Number of failures: 15 Over thresholds: 0 Based on this output, what is the status of the IP SLA operation?

A.The operation is functioning normally with occasional timeouts.
B.The target is reachable but with high latency.
C.The target is unreachable, as all probes have timed out.
D.The operation has been configured but not started.
AnswerC

15 failures and timeout indicate unreachable target.

Why this answer

All 15 probes have failed with a timeout return code, indicating a persistent connectivity issue to the target. The target is likely unreachable.

14
Drag & Dropmedium

Drag and drop the steps of configuring an IP SLA ICMP echo operation into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

First, enter global config mode. Then create the IP SLA operation with type icmp-echo, set the target address and optional parameters like frequency, schedule the operation, and finally verify reachability using show commands.

15
Matchingmedium

Drag and drop each IP SLA schedule parameter on the left to its function on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Defines when the operation begins

Interval between probes

Total duration of the operation

Time after which inactive operation is removed

Repeats the schedule daily

Why these pairings

start-time defines when the operation begins; frequency sets the interval between probes; life sets the total duration; ageout removes the operation after inactivity; recurring repeats the schedule daily.

16
MCQeasy

An engineer configures IP SLA 50 to monitor the response time of a TCP connection to a server at 10.1.1.1 on port 80. The operation is used to trigger a backup path. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 100 ms', but the server is actually down and not responding to TCP SYN packets. What is the most likely reason?

A.A stateful firewall or load balancer is responding to the TCP SYN on behalf of the server, causing the probe to succeed.
B.The IP SLA TCP connect probe does not actually verify that the server responds; it only checks if the port is open.
C.The IP SLA operation must be configured with a 'timeout' value lower than 100 ms to detect the failure.
D.The server is actually responding to the probe but not to other traffic because the probe uses a different source IP.
AnswerA

Correct. If a network device intercepts the TCP handshake and responds, the IP SLA probe will consider the connection successful even if the actual server is down.

Why this answer

The TCP connect probe only checks if the TCP three-way handshake completes. If the server is down but a stateful firewall or load balancer responds to the SYN with a SYN-ACK, the probe will succeed even if the server is down.

17
MCQmedium

A network engineer configures IP SLA 60 to monitor the jitter of a VoIP call path between two sites. The operation uses UDP jitter with a target of 192.168.3.3 on port 16384. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 10 ms', but the jitter values are all zero. The remote router has an IP SLA responder configured. What is the most likely cause?

A.The IP SLA operation is configured with a 'num-packets' value of 1, so only one packet is sent per probe, and jitter cannot be calculated.
B.The remote router's IP SLA responder is not configured to calculate jitter, only to echo packets.
C.The IP SLA operation is using a 'frequency' that is too high, causing the probes to be sent too quickly and jitter to be zero.
D.The network path has no variable delay, so jitter is naturally zero.
AnswerA

Correct. Jitter requires at least two packets to measure variation. By default, UDP jitter sends 10 packets, but if the engineer changed it to 1, jitter will be zero.

Why this answer

Jitter is calculated as the variation in delay between consecutive packets. If only one probe packet is sent per operation, there is no variation to measure, so jitter will be zero. The IP SLA UDP jitter operation must send multiple packets per probe to calculate jitter.

18
Multi-Selecthard

Which three statements about IP SLA threshold monitoring and reaction configuration are true? (Choose three.)

Select 3 answers
A.The 'threshold' command sets the rising threshold that triggers a reaction when exceeded.
B.The 'reaction' configuration can specify an action such as 'connection-loss' to trigger when the probe fails to receive a response.
C.The IP SLA reaction can be used to update a tracking object, which can then influence policy-based routing or static route removal.
D.The 'reaction' command supports a 'timeout' type that triggers when the probe response time exceeds a configured value.
E.The 'reaction' command can only monitor round-trip time and cannot be used for jitter or packet loss.
AnswersA, B, C

Correct because the 'threshold' command defines the upper boundary; when the measured value exceeds it, the reaction is triggered.

Why this answer

IP SLA allows configuring rising and falling thresholds to trigger events. The reaction can be tied to a tracking object, which can then influence routing decisions. The 'connection-loss' type triggers when all probes fail.

The 'timeout' reaction is not a valid type; the correct keyword is 'timeout' within the threshold configuration. The 'react' command can also monitor jitter values.

19
Drag & Dropmedium

Drag and drop the steps of IP SLA DNS lookup operation setup into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

First, the DNS operation is defined with the target hostname. Then the DNS server is specified if needed. The operation is configured to perform a lookup.

Next, the operation is scheduled. Finally, the DNS resolution result is verified.

20
MCQmedium

Examine this IP SLA configuration on Router R1: ip sla 4 icmp-echo 10.4.4.4 frequency 10 ip sla schedule 4 life forever start-time now ip sla reaction-configuration 4 react timeout threshold-type immediate action-type triggerOnly Which of the following is missing from this configuration to make it useful for tracking?

A.A 'track' object that references the IP SLA operation is missing.
B.The 'frequency' command is missing; it should be set to 60 seconds.
C.The 'ip sla responder' must be configured on the target router.
D.The 'life' parameter should be set to a specific number of repetitions.
AnswerA

The 'track' command (e.g., 'track 1 ip sla 4') is needed to link the IP SLA reaction to a tracking object that can be used by routing protocols or other features.

Why this answer

IP SLA reaction configurations need to be associated with a tracking object to be useful for actions like route manipulation. Without 'track', the trigger has no effect.

21
MCQmedium

A network engineer issues the following command on Router R3: R3# show ip sla statistics 2 Round Trip Time (RTT) for Index 2 Latest RTT: 12 ms Latest RTT: NoConnection/Busy/Timeout Latest Operation Start Time: 12:00:00.000 UTC Mon Mar 1 2021 Latest Operation Return Code: Timeout Number of successes: 45 Number of failures: 5 Over thresholds: 0 Based on this output, what is the most likely issue?

A.The IP SLA operation has never succeeded.
B.The target is unreachable due to a persistent failure.
C.The most recent probe timed out, indicating a possible connectivity issue.
D.The round-trip time is 12 ms, which is above the threshold.
AnswerC

The return code 'Timeout' for the latest operation suggests a recent failure.

Why this answer

The 'Latest Operation Return Code: Timeout' indicates that the most recent probe did not receive a response, suggesting a connectivity problem to the target. The presence of both successes and failures shows intermittent issues.

22
MCQmedium

A network engineer configures an IP SLA on a Cisco router to monitor reachability to a critical server at 10.1.1.1 using ICMP echo. The IP SLA is used as a track object for a static default route. After deployment, the engineer notices that the static route is never removed from the routing table, even when the server is unreachable. The IP SLA operation shows 'State: Active' and 'Latest RTT: NoConnection/Busy/Timeout'. What is the most likely cause?

A.The IP SLA operation is not configured with a timeout value, so it never times out.
B.The IP SLA operation needs a threshold configured to mark the operation as 'down' when the RTT exceeds the threshold or a timeout occurs.
C.The track object must be configured with a 'down' delay to allow the route to be removed.
D.The static route must be configured with a higher administrative distance to allow the IP SLA to remove it.
AnswerB

Correct. IP SLA uses thresholds to determine when an operation should be considered failed. Without a threshold, the operation stays active regardless of timeouts.

Why this answer

The IP SLA operation is not failing because the threshold has not been configured. Without a threshold, the operation never transitions to a 'down' state, so the track object never triggers the removal of the static route.

23
MCQmedium

Which IP SLA operation type requires an IP SLA responder to be configured on the target device?

A.ICMP echo
B.UDP jitter
C.TCP connect
D.HTTP get
AnswerB

UDP jitter requires an IP SLA responder to generate timestamps for accurate measurements.

Why this answer

UDP jitter operations require a responder to accurately measure one-way delay, jitter, and packet loss. ICMP echo does not require a responder.

24
Matchingmedium

Drag and drop each IP SLA threshold type on the left to its trigger condition on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Trigger when metric exceeds threshold

Trigger on first violation

Trigger after N consecutive violations

Trigger after N violations within M probes

Do not trigger

Why these pairings

Over-threshold triggers when a metric exceeds the configured value; immediate triggers on the first violation; consecutive triggers after a specified number of consecutive violations.

25
Drag & Dropmedium

Drag and drop the steps of IP SLA with threshold and reaction configuration into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

First, the IP SLA operation is defined. Then thresholds for rising and falling are configured. The reaction is set to trigger when thresholds are crossed.

The operation is scheduled. Finally, the reaction is enabled to take action.

26
Drag & Dropmedium

Drag and drop the steps of troubleshooting an IP SLA operation into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

Start by checking the IP SLA configuration for errors, then verify the operation is scheduled and active. Next, examine the statistics for failures, check reachability to the target, and finally review logs for any system-level issues.

27
MCQhard

An engineer configures IP SLA 10 to monitor the reachability of a next-hop router at 10.1.1.1 using ICMP echo. The IP SLA is used as a track object for a static route. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 1 ms', but the track object shows 'Track 10: up' even though the next-hop router is actually unreachable from the source. The source router has a default route pointing to 10.1.1.1. What is the most likely cause?

A.The IP SLA operation is using the wrong source IP address; it should be sourced from the interface that connects to the next-hop router.
B.The IP SLA operation must be configured with a 'timeout' value lower than the RTT to force a failure.
C.The track object must be configured with a 'down' delay to prevent flapping.
D.The static route must be configured with a higher administrative distance to allow the IP SLA to remove it.
AnswerA

Correct. If the IP SLA probe is sourced from a different interface (e.g., loopback), it may take a different path and succeed even if the next-hop router is unreachable via the intended interface.

Why this answer

If the source router has a default route pointing to the same next-hop, the IP SLA probe packets may be sent out using that default route, which could lead to the probe being sent to a different path or looping. However, the more direct cause is that the IP SLA probe is sourced from an interface that is not the one that would be used to reach the next-hop, so the probe may succeed even if the next-hop is unreachable via the expected path.

28
MCQeasy

A network engineer executes the following command on Router R5: R5# show ip sla monitor configuration 4 IP SLAs Monitor Configuration Entry number: 4 Owner: Tag: Type of operation to perform: udp-jitter Target address: 192.168.5.10 Target port: 16384 Source address: 192.168.5.1 Source port: 0 Type Of Service parameter: 0x0 Request size (ARR data portion): 32 Operation timeout (milliseconds): 5000 Frequency (seconds): 60 Next Scheduled Start Time: Start Time already passed Group Scheduled : FALSE Life (seconds): Forever Entry Ageout (seconds): never Recurring (Starting Everyday, Starting Time: 00:00:01) Status of entry (SNMP RowStatus): Active Threshold (milliseconds): 5000 Distribution Statistics: Number of statistic hours kept: 2 Number of statistic distribution buckets kept: 1 Statistic distribution interval (milliseconds): 20 Enhanced History: Based on this output, what type of IP SLA operation is configured?

A.ICMP echo
B.UDP jitter
C.TCP connect
D.HTTP get
AnswerB

The output explicitly states 'udp-jitter'.

Why this answer

The line 'Type of operation to perform: udp-jitter' clearly indicates the operation type is UDP jitter.

29
Drag & Dropmedium

Drag and drop the steps of IP SLA HTTP operation for application monitoring into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

Start by creating the IP SLA operation with HTTP type. Then specify the target URL and HTTP method (e.g., GET). Optionally configure HTTP version and other parameters.

Next, schedule the operation to run. Finally, verify the HTTP response times and status.

30
Matchingmedium

Drag and drop each IP SLA tracking object on the left to its application on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Used with a floating static route

Used to adjust HSRP priority

Used with policy-based routing

Used to debounce state changes

Used to trigger event-based actions

Why these pairings

IP SLA tracking can be used to monitor reachability for static routes (floating static) or to influence HSRP priority.

31
MCQmedium

Examine the following IP SLA configuration: ip sla 1 icmp-echo 10.1.1.1 frequency 10 ip sla schedule 1 life forever start-time now What is the effect of this configuration?

A.It sends ICMP echo requests to 10.1.1.1 every 10 seconds, starting immediately and running forever.
B.It sends ICMP echo requests to 10.1.1.1 every 10 seconds, but only for 10 minutes.
C.It sends ICMP echo requests to 10.1.1.1 every 60 seconds by default.
D.It sends ICMP echo requests to 10.1.1.1 every 10 seconds, but only if an IP SLA responder is configured on the target.
AnswerA

The 'frequency 10' sets the interval to 10 seconds, 'start-time now' starts it immediately, and 'life forever' keeps it running indefinitely.

Why this answer

This configuration creates an IP SLA operation that sends ICMP echo requests to 10.1.1.1 every 10 seconds and schedules it to run immediately and indefinitely.

32
Drag & Dropmedium

Drag and drop the steps of IP SLA HTTP operation for application monitoring into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

First, the HTTP operation is defined with the target URL. Then optional parameters like HTTP method or version are set. The operation is configured to monitor HTTP response.

Next, the operation is scheduled. Finally, verification is done to confirm the operation is active.

33
Multi-Selecthard

Which three statements about IP SLA UDP jitter operation are true? (Choose three.)

Select 3 answers
A.UDP jitter operation measures one-way delay, jitter, and packet loss between source and destination.
B.The IP SLA responder must be enabled on the destination device for UDP jitter to function correctly.
C.The UDP jitter operation can be configured with a codec type (e.g., G.711) to simulate specific voice traffic patterns.
D.The 'num-packets' command in UDP jitter configuration sets the total number of probes to be sent over the entire operation lifetime.
E.UDP jitter operation can measure TCP window scaling and throughput.
AnswersA, B, C

Correct because the UDP jitter operation calculates these metrics using timestamps in the probe packets.

Why this answer

UDP jitter operation measures one-way delay, jitter, and packet loss by sending timestamped UDP packets. It requires the IP SLA responder on the destination. The operation can be configured with a codec type to simulate voice traffic.

The 'num-packets' command sets the number of packets in each probe. The operation does not measure TCP throughput.

34
Drag & Dropmedium

Drag and drop the steps of IP SLA DNS lookup operation setup into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

First, define the IP SLA operation with type dns. Then specify the target DNS server and the domain name to resolve. Optionally set the DNS source interface or timeout.

Next, schedule the operation. Finally, verify the DNS resolution success and response time.

35
Drag & Dropmedium

Drag and drop the steps of IP SLA scheduling with frequency and lifetime into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

First, the IP SLA operation is created. Then the frequency (how often to run) is configured. The lifetime (how long to run) is set.

The operation is scheduled to start. Finally, the schedule is verified.

36
MCQeasy

A network engineer executes the following command on Router R2: R2# show ip sla configuration 1 IP SLAs Infrastructure Engine-II Entry number: 1 Owner: admin Tag: Type of operation to perform: icmp-echo Target address: 192.168.2.10 Source address: 192.168.2.1 Type Of Service parameter: 0x0 Request size (ARR data portion): 28 Operation timeout (milliseconds): 5000 Frequency (seconds): 60 Next Scheduled Start Time: Start Time already passed Group Scheduled : FALSE Life (seconds): Forever Entry Ageout (seconds): never Recurring (Starting Everyday, Starting Time: 00:00:01) Status of entry (SNMP RowStatus): Active Threshold (milliseconds): 5000 Distribution Statistics: Number of statistic hours kept: 2 Number of statistic distribution buckets kept: 1 Statistic distribution interval (milliseconds): 20 Enhanced History: Based on this output, what is the frequency of the IP SLA operation?

A.30 seconds
B.60 seconds
C.120 seconds
D.5000 milliseconds
AnswerB

The output shows 'Frequency (seconds): 60'.

Why this answer

The 'Frequency (seconds): 60' line indicates that the IP SLA operation runs every 60 seconds.

37
Matchingmedium

Drag and drop each IP SLA reaction action on the left to its corresponding behavior on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Send a log message

Send an SNMP notification

Start another IP SLA operation

Disable reaction

Trigger on probe timeout

Why these pairings

Syslog sends a log message; SNMP trap sends an SNMP notification; trigger starts another IP SLA operation; none disables reaction; timeout triggers on probe timeout.

38
MCQmedium

A network engineer issues the following command on Router R6: R6# show ip sla statistics 5 Round Trip Time (RTT) for Index 5 Latest RTT: 150 ms Latest Operation Start Time: 16:00:00.000 UTC Mon Mar 1 2021 Latest Operation Return Code: OK Number of successes: 10 Number of failures: 0 Over thresholds: 8 Based on this output, what does the 'Over thresholds: 8' indicate?

A.8 probes failed to reach the target.
B.8 probes had RTT exceeding the configured threshold.
C.8 probes were sent in total.
D.The threshold is set to 150 ms.
AnswerB

Over thresholds count indicates threshold violations.

Why this answer

The 'Over thresholds' counter shows how many times the RTT exceeded the configured threshold. In this case, 8 out of 10 successful probes had RTT above the threshold, indicating high latency even though the operation succeeded.

39
Matchingmedium

Drag and drop each IP SLA reaction on the left to its action on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Generates a log message

Sends an SNMP trap

Starts another IP SLA operation or event

Enables reaction to threshold violations

Specifies the type of reaction action

Why these pairings

Syslog generates a log message; SNMP trap sends an SNMP trap; trigger starts another IP SLA operation or event.

40
Drag & Dropmedium

Drag and drop the steps of IP SLA tracking with static route failover into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

First, the IP SLA operation is defined to monitor reachability. Then a track object is created that references the IP SLA operation. The track object is configured with a threshold for up/down state.

A static route is configured with the track object for failover. Finally, the static route is verified to use the track.

41
Drag & Dropmedium

Drag and drop the steps of IP SLA tracking with static route failover into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

First, configure the IP SLA operation to monitor reachability. Then create a track object that references the IP SLA operation. Next, define a static route with the track option.

After that, configure the backup static route (with higher metric). Finally, verify failover by simulating a failure.

42
MCQeasy

What is the default frequency (in seconds) for an IP SLA ICMP echo operation if not explicitly configured?

A.10 seconds
B.30 seconds
C.60 seconds
D.120 seconds
AnswerC

The default frequency for IP SLA operations is 60 seconds.

Why this answer

The default frequency for IP SLA operations, including ICMP echo, is 60 seconds.

43
Drag & Dropmedium

Drag and drop the steps of IP SLA with threshold and reaction configuration into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

First, define the IP SLA operation with a type and target. Then set the threshold values for the monitored metric. Next, configure the reaction to trigger on threshold violation.

After that, schedule the operation to start. Finally, verify the configuration to ensure it works.

44
MCQeasy

A network engineer configures IP SLA 40 to monitor the reachability of a server at 10.1.1.1 using ICMP echo. The operation is used as a track object for a static route. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 10 ms', but the track object shows 'Track 40: down'. The engineer checks the track configuration and sees 'track 40 ip sla 40 reachability'. What is the most likely cause?

A.The IP SLA operation has a threshold configured that is lower than the RTT, causing the operation to be marked as 'down'.
B.The track object must be configured with 'ip sla 40 state' instead of 'reachability' to match the operation state.
C.The IP SLA operation is not configured with a 'frequency', so it only runs once and then goes down.
D.The static route is configured with a higher administrative distance, causing the track object to go down.
AnswerA

Correct. If a threshold is configured and the RTT exceeds it, the IP SLA operation transitions to a 'down' state, which then causes the track object to go down.

Why this answer

The track object is configured to track reachability, which means it checks if the IP SLA operation is in a 'down' state. However, if the IP SLA operation is active, the track object should be up. The most likely cause is that the IP SLA operation is configured with a threshold that is being exceeded, causing the operation to be considered 'down' even though it is active.

45
MCQmedium

A network engineer runs the following command on Router R1: R1# show ip sla summary IPSLAs Latest Operation Summary Codes: * active, ^ inactive, ~ pending ID Type Destination Stats Return Code Last 1 icmp-echo 192.168.1.10 Success OK 1 2 icmp-echo 192.168.1.20 Success OK 2 3 udp-jitter 192.168.1.30 Success OK 3 *4 icmp-echo 192.168.1.40 Success OK 10 Based on this output, what can be concluded?

A.All IP SLA operations are active.
B.IP SLA operation 4 is currently active.
C.IP SLA operation 3 has failed.
D.IP SLA operation 1 has the highest round-trip time.
AnswerB

The asterisk next to ID 4 indicates it is active.

Why this answer

The asterisk (*) next to ID 4 indicates that this IP SLA operation is currently active. The other operations are not marked as active, meaning they are either configured but not running or have been stopped.

46
Matchingmedium

Drag and drop each IP SLA operation type on the left to its measured metric on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Round-trip time

Delay, jitter, and packet loss

Connection setup time

Page load time

Resolution time

Why these pairings

ICMP echo measures round-trip time; UDP jitter measures delay, jitter, and packet loss; TCP connect measures connection setup time; HTTP measures page load time; DNS measures resolution time.

47
MCQmedium

A network engineer issues the following command on Router R9: R9# show ip sla configuration 7 IP SLAs Infrastructure Engine-II Entry number: 7 Owner: Tag: Type of operation to perform: icmp-echo Target address: 192.168.9.10 Source address: 192.168.9.1 Type Of Service parameter: 0x0 Request size (ARR data portion): 28 Operation timeout (milliseconds): 5000 Frequency (seconds): 30 Next Scheduled Start Time: Start Time already passed Group Scheduled : FALSE Life (seconds): 3600 Entry Ageout (seconds): never Recurring (Starting Everyday, Starting Time: 00:00:01) Status of entry (SNMP RowStatus): Active Threshold (milliseconds): 5000 Distribution Statistics: Number of statistic hours kept: 2 Number of statistic distribution buckets kept: 1 Statistic distribution interval (milliseconds): 20 Enhanced History: Based on this output, how long will this IP SLA operation run?

A.Forever
B.30 seconds
C.3600 seconds
D.5000 milliseconds
AnswerC

The life is explicitly 3600 seconds.

Why this answer

The 'Life (seconds): 3600' indicates the operation will run for 3600 seconds (1 hour) before stopping.

48
Multi-Selecthard

Which three statements about IP SLA threshold configuration and reaction are true? (Choose three.)

Select 3 answers
A.The 'reaction-configuration' command is used to define rising and falling threshold values for an IP SLA operation.
B.The 'reaction-trigger' command associates a threshold violation with an action such as enabling a static route.
C.When a rising threshold is exceeded, an SNMP trap can be sent to the network management system.
D.The threshold is based on the number of probes sent within a specified time interval.
E.If a threshold is violated, the IP SLA operation automatically changes its probe schedule to a higher frequency.
AnswersA, B, C

Correct because this command configures the threshold values and the action (e.g., trap) when the threshold is crossed.

Why this answer

IP SLA allows configuring rising and falling thresholds to trigger events. The 'reaction-configuration' command sets the threshold values and the action to take when a threshold is crossed. The 'reaction-trigger' command is used to associate the reaction with a specific action, such as enabling a backup route.

The threshold violation can be used to trigger an SNMP trap, which is a common method for network management systems to receive alerts. The threshold is not based on the number of probes sent, but on the measured values like delay or jitter. The reaction does not automatically change the probe schedule; it triggers an external action.

49
Matchingmedium

Drag and drop each IP SLA operation type on the left to its measured metric on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Round-trip time and packet loss

Delay, jitter, and packet loss

Connection establishment time

Page load time and success

DNS resolution time

Why these pairings

ICMP echo measures round-trip time and packet loss; UDP jitter measures delay, jitter, and packet loss; TCP connect measures connection establishment time; HTTP measures page load time and success; DNS measures DNS resolution time.

50
Drag & Dropmedium

Drag and drop the steps of configuring an IP SLA UDP jitter operation into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Why this order

The correct order begins with entering global configuration mode, then defining the IP SLA operation type and target, setting scheduling parameters, and finally verifying the operation with a show command.

51
Matchingmedium

Drag and drop each IP SLA tracking object on the left to its application on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Install or remove a static route

Adjust HSRP priority

Change policy routing

Adjust VRRP priority

Adjust GLBP weighting

Why these pairings

Static route uses tracking to install or remove a route; HSRP uses tracking to adjust priority; PBR uses tracking to change policy routing; VRRP uses tracking for priority; GLBP uses tracking for weighting.

52
MCQhard

An engineer configures IP SLA 30 to monitor the one-way delay to a remote site using UDP jitter. The operation is used to adjust routing metrics via route maps. The engineer notices that the IP SLA operation shows 'State: Active' but the one-way delay values are inconsistent, sometimes showing negative values. What is the most likely cause?

A.The IP SLA operation is not configured with a 'request-data-size' that matches the remote router's MTU, causing fragmentation and delay variations.
B.The source and destination routers do not have synchronized clocks via NTP, causing one-way delay calculations to be inaccurate.
C.The IP SLA operation is using a 'frequency' that is too high, causing the probes to overlap and corrupt the statistics.
D.The remote router's IP SLA responder is not configured, so the source is using a different method to estimate delay.
AnswerB

Correct. One-way delay is computed by subtracting the send timestamp from the receive timestamp. If clocks are not synchronized, the result can be negative or wildly inaccurate.

Why this answer

One-way delay measurements require clock synchronization between the source and destination routers. Without NTP, the clocks may drift, causing negative or inaccurate delay values.

53
MCQmedium

Consider the following partial configuration on Router R1: ip sla 5 icmp-echo 10.5.5.5 frequency 10 ip sla schedule 5 life forever start-time now ip sla reaction-configuration 5 react rtt threshold-type immediate threshold-value 200 action-type triggerAndReset What is the effect of the 'action-type triggerAndReset' parameter?

A.It triggers an event once and then stops monitoring.
B.It triggers an event each time the RTT exceeds 200 ms and resets the counter after each trigger.
C.It triggers an event only if the RTT exceeds 200 ms for 5 consecutive probes.
D.It triggers an event and then immediately stops the IP SLA operation.
AnswerB

'triggerAndReset' allows multiple triggers by resetting after each event.

Why this answer

'triggerAndReset' means that when the threshold is exceeded, the trigger fires, and then the monitoring resets so it can trigger again on future threshold violations.

54
MCQmedium

A network engineer executes the following command on Router R8: R8# show ip sla monitor summary IP SLAs Monitor Summary Codes: * active, ^ inactive, ~ pending ID Type Destination Stats Return Code Last *1 icmp-echo 192.168.8.10 Success OK 1 ^2 udp-jitter 192.168.8.20 Success OK 2 *3 icmp-echo 192.168.8.30 Success OK 3 Based on this output, which IP SLA operations are currently active?

A.Only ID 1
B.Only ID 2
C.IDs 1 and 3
D.All three operations
AnswerC

Both IDs 1 and 3 show asterisks.

Why this answer

The asterisk (*) indicates active operations. IDs 1 and 3 have asterisks, while ID 2 has a caret (^) indicating inactive.

55
Multi-Selectmedium

Which two statements about IP SLA with object tracking are true? (Choose two.)

Select 2 answers
A.A tracking object can monitor the state of an IP SLA operation and change state when the operation fails.
B.The 'track' command is used to create a tracking object that references an IP SLA operation by its operation number.
C.Object tracking can only be used with static routes, not with dynamic routing protocols like EIGRP or OSPF.
D.The tracking object automatically modifies the routing table when the IP SLA operation fails.
E.An IP SLA operation can be configured after the tracking object that references it.
AnswersA, B

Correct because the tracking object uses the IP SLA operation's success/failure to determine its own state (up/down).

Why this answer

Object tracking allows IP SLA operations to influence routing decisions. The 'track' command is used to create a tracking object that monitors the state of an IP SLA operation. When the IP SLA operation fails, the tracked object changes state, which can then be used to adjust routing, such as floating static routes.

The tracking object can be referenced by multiple routing protocols or static routes. The tracking object does not directly modify the routing table; it provides a state that other features use. The IP SLA operation must be configured before the tracking object can reference it.

56
MCQmedium

Review the following IP SLA configuration on Router R1: ip sla 3 icmp-echo 10.3.3.3 frequency 30 ip sla schedule 3 life forever start-time now ip sla reaction-configuration 3 react rtt threshold-type xof 5 threshold-value 100 action-type triggerAndReset What is the purpose of the 'threshold-type xof 5' parameter?

A.It triggers an event if 5 out of the last 10 RTT measurements exceed 100 ms.
B.It triggers an event if 5 consecutive RTT measurements exceed 100 ms.
C.It triggers an event if the RTT exceeds 100 ms for 5 seconds.
D.It triggers an event if the RTT exceeds 100 ms and then repeats 5 times.
AnswerB

'xof 5' means 5 consecutive measurements must exceed the threshold to trigger the event.

Why this answer

'threshold-type xof 5' means the trigger will occur if 5 consecutive RTT measurements exceed the threshold value of 100 ms. This helps avoid false triggers from transient spikes.

57
MCQmedium

A network engineer configures IP SLA 20 to monitor the response time of a DNS server at 10.1.1.1 using DNS query for 'example.com'. The operation is used to influence routing decisions. The engineer notices that the IP SLA operation shows 'State: Active' and 'Latest RTT: 50 ms', but the DNS server is actually down and not responding to any queries. What is the most likely reason?

A.The IP SLA DNS probe is using a cached DNS response from the router's DNS resolver, so it does not actually query the server.
B.The IP SLA DNS probe must be configured with a 'timeout' value lower than 50 ms to detect the failure.
C.The DNS server is responding to the probe but not to other queries because the probe uses a different port.
D.The IP SLA operation is configured with a 'frequency' that is too low, causing the probe to be sent before the server times out.
AnswerA

Correct. If the router has DNS caching enabled, the IP SLA DNS probe may receive a cached response, making it appear as if the server is reachable when it is not.

Why this answer

The DNS probe may be receiving a response from a cache (either on the router itself or an intermediate DNS cache) rather than the actual DNS server. This can cause the probe to succeed even if the server is down.

Ready to test yourself?

Try a timed practice session using only IP Sla questions.