CCNP TShoot Final

Question 1

Which two advantages does scheduled maintenance offer over interrupt-driven events? (Choose two.)

Accepted Answer

reduced network downtime

Accepted Answer

predictable lead times for change requests

Answer

faster time to resolution of problems

Answer

simplified troubleshooting processes

Answer

maintenance windows during regular business hours

Question 2

RSPAN depends on which type of VLAN?

Accepted Answer

RSPAN VLAN

Answer

native VLAN

Answer

management VLAN

Answer

default VLAN

Answer

black hole VLAN

Answer

private VLAN

Question 3

Refer to the exhibit. What information can be deduced from the provided debug aaa accounting command output?

Accepted Answer

The user successfully gained access to the router EXEC shell.

Answer

The user attempts to gain access to a local security server were unsuccessful.

Answer

The user credentials were rejected by the default authentication method.

Answer

The user access to the services was stopped because of the improper protocol that was used for the session.

Question 4

Refer to the exhibit. A network administrator issues the show interfaces s0/0/0 command on a router to determine the cause for a
recent decrease in device performance. Based on the output shown, what is a possible cause of the observed performance issues?

Accepted Answer

high CPU usage on the router

Answer

insufficient RAM in the router

Answer

incorrect or outdated version of the Cisco IOS

Answer

unrecognized Layer 2 encapsulation formats on the network

Question 5

In which three situations will traffic be handed off (punted) to the CPU for processing? (Choose three.)

Accepted Answer

any traffic that is going through a GRE tunnel

Accepted Answer

any traffic that is destined for any of the switch IP addresses

Accepted Answer

any multicast and broadcast traffic that is coming from the Spanning Tree Protocol (STP) or routing protocols

Answer

any traffic that is explicitly blocked by an ACL

Answer

any traffic that is assigned to a particular VLAN that is not allowed on a trunk

Answer

any traffic that is coming to an inbound port that is in the spanning-tree blocking state

Question 6

An administrator has just implemented two-way route redistribution between an OSPF and EIGRP domain. However, network performance between domains quickly degraded and an investigation revealed routing loops. What action could be used to solve this issue?

Accepted Answer

Filter the routes being redistributed between the protocols.

Answer

Change the seed metric of the routes being redistributed.

Answer

Redistribute all subnets in both EIGRP and OSPF domains.

Answer

Configure an additional router to be a secondary point of route redistribution.

Question 7

What content can be found in the show ip eigrp topology network mask output?

Accepted Answer

hop count

Answer

minimum delay

Answer

cumulative cost

Answer

variance

Answer

metric weights

Question 8

Refer to the exhibit. BPDU guard and PortFast have been configured on all edge ports on the access switches. A junior network administrator tested a new switch in the lab and verified that the bridge ID is 32887. What would happen when the Administrator plugs this switch into port Fa0/20 on ASW_1 in an attempt to extend the LAN?

Accepted Answer

Port Fa0/20 will be shut down.

Answer

Port Fa0/20 will become a root port.

Answer

Port Fa0/20 will start forwarding traffic immediately.

Answer

Port Fa0/20 will transition from blocking to forwarding state after the spanning tree convergence.

Question 9

What is a characteristic of network maintenance?

Accepted Answer

Maintaining network documentation is an important element of network maintenance.

Answer

Network maintenance typically excludes consideration of network changes.

Answer

Proper network maintenance will eliminate network downtime.

Answer

The amount of resources expended on network maintenance is consistent across all companies.

Question 10

Refer to the exhibit. A network administrator is troubleshooting a connectivity issue between LAN clients on routers R1 and R3. Connectivity tests from R2 to the R1 and R3 LAN segments are successful. The administrator issues the debug ip icmp command for R1 and confirms that a routing issue exists. Based on the information that is presented in the exhibit, which configuration command would correct the problem?

Accepted Answer

R1(config)# ip route 172.16.6.0 255.255.255.0 172.16.7.10

Answer

R1(config)# ip route 0.0.0.0 0.0.0.0 172.16.7.1

Answer

R2(config)# ip route 172.16.6.0 255.255.255.0 172.16.7.9

Answer

R2(config)# ip route 0.0.0.0 0.0.0.0 172.16.7.9

Answer

R3(config)# ip route 0.0.0.0 0.0.0.0 172.16.7.9

Answer

R3(config)# ip route 172.16.6.0 255.255.255.0 172.16.7.10

Question 11

What is the final task in a structured troubleshooting process?

Accepted Answer

documenting the changes

Answer

gathering information

Answer

testing the hypothesis

Answer

eliminating possible causes

Question 12

Syslogs reveal malicious activity originating from an internal host that is located at IP address 10.10.10.251. From the local gateway router, the administrator successfully pings the host IP address and populates the ARP cache of the router. The administrator then issues the show ip arp 10.10.10.251 command and discovers that the MAC address of the host is 0011.9254.e2a0. What could the administrator do next to discover the physical location of the malicious host?

Accepted Answer

Issue the show mac address-table address 0011.9254.e2a0 command on various switches and follow the path to the host.

Answer

Issue the show vlan command on various switches and follow the path to the host.

Answer

Issue the traceroute 0011.9254.e2a0 command and follow the path to the host.

Answer

Issue the traceroute 10.10.10.251 command and follow the path to the host.

Question 13

Which two pieces of information are displayed by the debug ip bgp command? (Choose two.)

Accepted Answer

BGP related events

Accepted Answer

phases of BGP peering relationships

Answer

BGP updates

Answer

route redistribution information

Answer

internal metrics of IBGP routes

Question 14

Refer to the exhibit. What could be concluded about the TACACS+ failure based on the exhibited command output from debug tacacsand debug aaa authentication?

Accepted Answer

The TACACS+ server key of the router does not match that of the TACACS+ server.

Answer

The TACACS+ server is not operational.

Answer

The TACACS+ server IP address has been incorrectly configured on the router.

Answer

The username and password that were supplied by the user were rejected by the TACACS+ server.

Question 15

Refer to the exhibit. A network administrator issued the debug dhcp detail command to verify the operations of DHCP on router R2. Which statement is correct about the active DHCP processes on R2?

Accepted Answer

The DHCP server sends a DHCPACK message with the full set of configuration parameters to the client.

Answer

The DHCP server sends a DHCPOFFER message with the full set of configuration parameters to the client.

Answer

The DHCP client sends out a DHCPDISCOVER broadcast message to find its local DHCP server.

Answer

The DHCP client sends out a DHCPREQUEST broadcast message to the DHCP server to accept the offered parameters.

Question 16

Which two benefits do the use of templates provide in the troubleshooting process? (Choose two.)

Accepted Answer

provide an effective method of maintaining network documentation

Accepted Answer

ensure that all individuals carry out similar tasks in a consistent manner

Answer

document the solution to specific problems eliminating the requirement for troubleshooting

Answer

allow each technician to select the best troubleshooting process to use for a particular problem

Answer

ensure that the problem is located and corrected regardless of the knowledge level of the technician

Question 17

Which VTP mode is configured on a switch in the implementation of private VLANs?

Accepted Answer

transparent

Answer

client

Answer

server

Answer

client or server

Answer

client or transparent

Answer

transparent or server

Question 18

A network administrator notices frames are received on a different port than expected on a switch. What are two plausible causes of the problem? (Choose two.)

Accepted Answer

duplicate MAC addresses

Accepted Answer

a Spanning Tree Protocol related issue

Answer

a routing error

Answer

an access list error

Answer

VLAN trunk misconfiguration

Question 19

What are the three private VLAN (PVLAN) port types? (Choose three.)

Accepted Answer

community

Accepted Answer

isolated

Accepted Answer

promiscuous

Answer

edge

Answer

point-to-point

Answer

protected

Question 20

Refer to the exhibit. Based on the information that is provided, which two NetFlow statements are correct? (Choose two.)

Accepted Answer

All NetFlow packets sent from R1 to the traffic collector will be sourced from IP address 1.1.1.1.

Accepted Answer

NetFlow will track all ingress traffic for interfaces Fa0/0 and Fa0/1.

Answer

Interfaces Fa0/0 and Fa0/1 must also be included as flow-export source interfaces.

Answer

NetFlow version 5 should be configured if the infrastructure includes non-Cisco devices.

Answer

NetFlow will forward the traffic statistics and packet payload content of interfaces Fa0/0 and Fa0/1 to IP address 10.10.10.1.

Answer

The UDP value 9996 is optional because it is the default NetFlow destination port number.

Question 21

Refer to the exhibit. A network administrator issues the show interfaces s0/0/0 command on a router to determine the cause for a
recent decrease in device performance. Based on the output shown, what is a possible cause of the observed performance issues?

Accepted Answer

The R2 LAN is not configured as an inside interface.

Answer

The NAT pool is exhausted.

Answer

The static translation prevents any new dynamic translations.

Answer

The ACL is using a wrong pool reference.

Question 22

Refer to the exhibit. An administrator has configured VRRP on routers R1 and R2. However, no output is generated using the show vrrp brief command on router R1. The administrator then verifies the VRRP interface and key chain configurations. Based on the output in the exhibit, what is the cause of the problem?

Accepted Answer

Interface FastEthernet 0/0 on router R1 requires the vrrp 1 ip 10.1.1.254 command to be issued.

Answer

Interface FastEthernet 0/0 on router R1 requires the vrrp 1 preempt command to be issued.

Answer

Interface FastEthernet 0/0 on router R1 requires the vrrp 1 priority 100 command to be issued.

Answer

Router R1 is configured to use text authentication, while R2 is configured to use MD5 authentication.

Answer

Router R1 should be configured to use text authentication.

Question 23

Refer to the exhibit. A network administrator is investigating a possible network congestion problem. Which information is indicative of network congestion?

Accepted Answer

The Q Cnt field should be at zero.

Answer

The EIGRP neighbor has not sent any hello packets in the last 14 seconds.

Answer

The EIGRP neighbor is redistributing routes from OSPF with invalid seed metrics.

Answer

The EIGRP neighbor is offline and unreachable.

Answer

The Seq Num field should be much higher.

Answer

The values of the SRTT and RTO fields should be much lower.

Question 24

Which DHCP message is sent by the server to the client and contains the DHCP configuration parameters?

Accepted Answer

DHCP ACK

Answer

DHCP DISCOVER

Answer

DHCP OFFER

Answer

DHCP REQUEST

Answer

DHCP NAK

Answer

DHCP INFORM

Question 25

Which statement is true based on the show ip ospf neighbor command output that is shown in the exhibit?

Accepted Answer

RTB did not see its router ID in the hello packet that was received from RTA.

Answer

RTB did not receive a hello packet from RTA.

Answer

RTB is able to exchange routing updates with RTA.

Answer

RTB has established an adjacency with RTA.

Question 26

Refer to the exhibit. A network administrator issues the show interfaces s0/0/0 command on a router to determine the cause for a
recent decrease in device performance. Based on the output shown, what is a possible cause of the observed performance issues?

Accepted Answer

Map the DLCI to the link local address of R2.

Answer

Change the OSPF neighbor to point to the global unicast address of R2.

Answer

Change the IPv6 address on Serial 0/0/0 to be in the same segment as the Serial 0/0/0 interface of R2.

Answer

Remove the broadcast keyword from the frame-relay map statement.

Question 27

Refer to the exhibit. You have been asked to troubleshoot a connectivity issue between R3 and R1. From the partial output of theshow running-config command on both routers, what configuration change is required?

Accepted Answer

The tunnel destination for Tunnel0 on R3 should be the IP address of Loopback0 on R1.

Answer

A static route should be added to R3 to point to the 192.168.1.0/24 network.

Answer

A static route should be added to R1 to point to the 192.168.1.0/24 network.

Answer

The tunnel source for Tunnel0 on R3 should be the IP address of Serial0/0/1 on R1.

Answer

The tunnel source for Tunnel0 on R1 should be the IP address of Loopback0 on R3.

Answer

The tunnel destination for Tunnel0 on R1 should be the IP address of Serial0/0/1 on R3.

Question 28

Which type of spanning tree failure is the most disruptive?

Accepted Answer

Ports that should be blocked start forwarding.

Answer

The STP reaches its maximum diameter.

Answer

The TTL field in the Ethernet frames decrements to 0 on all frames.

Answer

Frames with matching entries in the MAC address table are not forwarded.

Question 29

Refer to the exhibit. Wireless network users are complaining about performance issues, especially when using Voice over WLAN. Based on the output that is shown, what could be the problem?

Accepted Answer

SW1 is resetting the DSCP values supplied by the Lightweight AP.

Answer

QoS is not supported in Lightweight mode.

Answer

The trunk between R1 and SW1 does not support QoS.

Answer

The Wireless LAN Controller has not been configured to support voice traffic.

Answer

QoS has not been enabled between the Lightweight AP and the Wireless LAN Controller.

Question 30

Which backup mechanism presents the highest security risk?

Accepted Answer

TFTP

Answer

FTP

Answer

HTTPS

Answer

SCP

Question 31

An administrator notices that CDP is disabled on a port that connects to an IP phone. What effect will this have?

Accepted Answer

The phone will not be able to discover auxiliary VLAN information, QoS settings, or automatically negotiate power settings.

Answer

The phone will experience intermittent connectivity.

Answer

The phone will be placed into the default VLAN.

Answer

The phone will be able to make calls but will not be able to receive calls.

Question 32

Which two conditions could cause two routers to have trouble establishing a neighbor relationship in an OSPF network? (Choose two.)

Accepted Answer

Hello packets are not sent from either neighbor.

Accepted Answer

Slow network connections cause OSPF advertisements to time out.

Answer

The interfaces have different network types.

Answer

One of the routers is redistributing the OSPF routes into EIGRP.

Answer

The network command has put the connected interfaces into the same OSPF area.

Question 33

Refer to the exhibit. A port channel link between a branch site and the main site experiences an outage after a hardware upgrade at the branch site. The network administrator at the main site checks the log and sees a “%SPANTREE-2-CHNL_MISCFG” message. What is a likely cause of this message?

Accepted Answer

The main site has been configured to bundle links into an EtherChannel and the branch site has not.

Answer

The branch site has been configured for the Spanning Tree Protocol, but the main site has not.

Answer

The branch site is running a newer, incompatible version of the Spanning Tree Protocol.

Answer

The main site has inconsistencies in the physical ports that are members of the channel.

Question 34

Refer to the exhibit. Based on the output of the debug ip nat command in the exhibit, which two statements are true? (Choose two.)

Accepted Answer

Packets that are destined for 172.31.2.132 from source 192.168.1.95 are translated into 172.31.233.209.

Accepted Answer

Entries that are indicated with NAT* have been translated via the fast path.

Answer

Packets were not translated for the return path from source 192.168.1.95.

Answer

The IP address 172.31.233.209 is the configured IP address on the remote PC.

Answer

Entries with NAT* have the ToS value 5.

Question 35

When configuring private VLANs, how many isolated VLANs can be mapped to a primary VLAN?

Accepted Answer

1

Answer

0

Answer

2

Answer

4

Answer

platform dependent

Question 36

Which switch error is indicative of a duplex mismatch on the full-duplex side of a link?

Accepted Answer

FCS-Err

Answer

Xmit-Err

Answer

Rcv-Err

Answer

Giants

Question 37

Refer to the exhibit. Users are complaining that they are unable to access the web server that is located at 172.16.1.101. Based on the partial syslog output that is exhibited, what is causing this problem?

Accepted Answer

A Java applet reset option is configured on the zone-based policy firewall.

Answer

The web server is denying the client request.

Answer

There is no logical path from the client to the web server location.

Answer

The zone-based policy firewall has been configured to block all HTTP traffic to the server location.

Answer

The classic IOS firewall has not been properly configured to allow HTTP traffic in response to an internal request.

Question 38

Which action occurs immediately following POST in the boot process of a Cisco IP phone?

Accepted Answer

The IP phone uses CDP to learn the voice VLAN.

Answer

The IP phone sends DHCP broadcasts.

Answer

The IP phone initializes the IP stack.

Answer

The IP phone requests a configuration file from a TFTP server.

Question 39

What occurs when the no service password-recovery command is entered on the router?

Accepted Answer

The original configuration and passwords cannot be retrieved.

Answer

Passwords will not be encrypted.

Answer

Executive passwords can be retrieved and viewed in the running configuration.

Answer

Executive passwords can be changed in ROMMON mode.

Answer

All passwords are encrypted to level 7.

Question 40

Which anti-spoofing mechanism will filter packets that enter a multilayer switch through an interface that does not provide the best path back to the source of the packet?

Accepted Answer

Unicast Reverse Path Forwarding

Answer

spanning tree

Answer

private VLAN

Answer

intrusion prevention

Answer

VLAN access control lists

Question 41

Which DSCP value should be applied to voice traffic?

Accepted Answer

EF

Answer

AF11

Answer

AF31

Answer

CS1

Question 42

Which command would a network administrator use to verify which VLANs are allowed on a trunk?

Accepted Answer

show interfaces trunk

Answer

show vlan

Answer

show vlan interface

Answer

show mac address-table

Question 43

Refer to the exhibit. An administrator is troubleshooting an HSRP implementation on routers R1 and R2. Based on the output in the exhibit, what is the probable cause of the problem?

Accepted Answer

Routers R1 and R2 have different MD5 authentication strings configured.

Answer

Router R1 requires the standby 1 ip 10.1.1.254 command to be issued on interface FastEthernet 0/0.

Answer

Router R2 requires the standby 1 ip 10.1.1.254 command to be issued on interface FastEthernet 0/0.

Answer

Router R1 is configured to support MD5 authentication while router R2 is configured to support text authentication.

Answer

Router R1 is configured to support text authentication while router R2 is configured to support MD5 authentication.

Answer

Routers R1 and R2 have different text authentication strings configured.

Question 44

What are two problems that can occur when routes are redistributed in two directions? (Choose two.)

Accepted Answer

suboptimal routing

Accepted Answer

routing loops

Answer

lost seed metrics

Answer

route filtering

Answer

lost external routes

Question 45

Refer to the exhibit. Which two FTP-related statements are true? (Choose two.)

Accepted Answer

The configuration was copied using a method that is less secure than HTTPS.

Accepted Answer

The ip ftp username and ip ftp password commands were issued on router R1.

Answer

The Configuration Rollback feature was preconfigured on router R1 via the archive command.

Answer

The login credentials were sent to the FTP server in an encrypted format.

Answer

The R1-test.cfg configuration was successfully copied from the FTP server to the running configuration file of router R1.

Answer

The R1-test.cfg configuration was successfully copied from the FTP server to the startup configuration file of router R1.

Question 46

Refer to the exhibit. Users are complaining that they are unable to connect to resources outside of their corporate network during peak hours. What action should the administrator take to correct this problem?

Accepted Answer

Increase the size of the NAT pool to provide more IP addresses for translation.

Answer

Remove the ACL because it is blocking connections.

Answer

Change the FastEthernet 0/1 interface to an inside NAT interface.

Answer

Disable CEF because it is sending packets to the CPU for processing.

Answer

Disable static NAT because it is interfering with the dynamic translations.

Question 47

Refer to the exhibit. A network administrator issues the show interfaces s0/0/0 command on a router to determine the cause for a
recent decrease in device performance. Based on the output shown, what is a possible cause of the observed performance issues?

Accepted Answer

The transport input telnet command should be changed to transport input ssh.

Answer

The enable password must be encrypted.

Answer

The commands listed under the VTY line should be listed under the Console line.

Answer

The transport input telnet command should be changed to transport input none.

Question 48

Users at a branch office are complaining that they are unable to connect to resources at the head office. The network administrator issues the show ip route command and verifies that the correct next hop IP address and egress interface are listed. What should the administrator do next?

Accepted Answer

Verify end-to-end connectivity via the use of the ping command.

Answer

Verify that CEF is running on the router.

Answer

Verify the Layer 3 to Layer 2 mappings.

Answer

Verify that the information in the CEF FIB is correct.

Answer

Verify that the interface is active and participating in the routing process.

Question 49

Refer to the exhibit. In a converged spanning tree, how many blocked ports will there be in VLAN 1 for the pictured topology?

Accepted Answer

2

Answer

1

Answer

3

Answer

4

Question 50

Refer to the exhibit. Users are complaining that they are receiving duplicate address error messages when they start their machines. What should the administrator do to correct this problem?

Accepted Answer

Use the ip dhcp excluded-address command to exclude any statically assigned addresses from the DHCP pool.

Answer

Change the address assigned to the default router and dns server.

Answer

Decrease the DHCP lease time to make more addresses available at one time.

Answer

Change the netmask to 255.0.0.0 to agree with the class A network that is used in the DHCP pool.

Question 51

What is a characteristic of network maintenance toolkits?

Accepted Answer

may be both GUI and CLI

Answer

are vendor specific

Answer

require expensive investments

Answer

support only real-time monitoring

Question 52

What can be inferred from the fact that a switch is receiving BPDUs on a port but not transmitting BPDUs?

Accepted Answer

The port is a root port.

Answer

The port is a designated port.

Answer

The port is disabled.

Answer

The port is in listening state.

Question 53

A newly configured switch is connected to an existing network. The instant the trunk link is brought up to the rest of the network, the entire network goes down. What could have caused this problem?

Accepted Answer

The configuration revision number of the inserted switch was higher than the configuration revision of the VTP domain.

Answer

The switch was inserted into the network using an incorrect VTP domain name.

Answer

The VTP password entered on the new switch did not match that of the existing VTP domain.

Answer

The switch should have been placed into VTP Transparent Mode prior to being inserted into the network.

Answer

The configuration revision number of the inserted switch was lower than the configuration revision of the VTP domain.

Question 54

Refer to the exhibit. A network engineer is investigating a reported issue of Computer1 not receiving its IP configuration from the DHCP server. Computer2 is receiving its configuration from the DHCP server. What is a plausible reason for this issue?

Accepted Answer

The DHCP server does not have a DHCP pool for 192.168.0.0 /24 network.

Answer

An ACL is blocking broadcasts into the F0/0 interface of router North .

Answer

The WAN segment between routers East and North should be replaced with a LAN.

Answer

The S0/0/0 interface of router East should be configured to provide DHCP relay.

Question 55

Refer to the exhibit. Based on the output that is generated, which two statements are true? (Choose two.)

Accepted Answer

The archive path is the only mandatory archive parameter that must be configured.

Accepted Answer

Every time the running configuration file is saved to NVRAM, it will also be automatically archived.

Answer

The $h and $t parameters will automatically add the device hostname and version number to the archive filename.

Answer

Use the archive config privileged EXEC mode command to replace the running configuration file with the most recent archived file.

Answer

The time-period parameter must be configured to enable the automatic archiving of the running-configuration file everytime it is saved to NVRAM.

Question 56

What are two limitations of using buffered logging? (Choose two.)

Accepted Answer

Log messages are removed when a device is powered down.

Accepted Answer

Oldest messages are overwritten when allocated memory is exceeded.

Answer

Only high severity messages can be captured.

Answer

Messages are lost when there is a connectivity issue.

Answer

Message services may have messages filtered through a firewall.

Question 57

Refer to the exhibit. You have been asked to correct the configuration on R1 so that the Tunnel 0 interface does not flap and R3 can be consistently reached from R1. What command would you issue on R1 to accomplish this?

Accepted Answer

ip route 10.3.3.3 255.255.255.255 Serial0/0/0

Answer

ip route 10.3.3.3 255.255.255.255 Tunnel0

Answer

ip route 172.16.25.3 255.255.255.0 Serial0/0/0

Answer

ip route 172.16.25.0 255.255.255.0 Serial0/0/0

Answer

ip route 172.16.25.3 255.255.255.255 Tunnel0

Answer

ip route 172.16.15.2 255.255.255.255 Tunnel0

Question 58

What type of BGP message precedes the successful formation of a BGP peering session?

Accepted Answer

update

Answer

keepalive

Answer

established

Answer

withdraw

Answer

open

Question 59

Refer to the exhibit. A network administrator is unable to have two BGP peers exchange routing information. Which solution would correct this problem?