Ccnp Actual Exam Questions With All Correct Answers

CCNP ACTUAL EXAM QUESTIONS WITH ALL CORRECT ANSWERS An engineer must protect their company against ransom ware attacks. Which solution allows the engineer to block the execution stage and prevent file encryption? A. Use Cisco AMP deployment with the Malicious Activity Protection engineer enabled B. Use Cisco AMP deployment with the Exploit Prevention engine enabled C. Use Cisco Firepower and block traffic to TOR networks D. Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation - Answer-A. Use Cisco AMP deployment with the Malicious Activity Protection engineer enabled Assuming the WLC's interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic? A. the interface specified on the WLAN configuration B. any interface configured on the WLC C. the controller management interface D. the controller virtual interface - Answer-A. the interface specified on the WLAN configuration Which benefit is offered by a cloud infrastructure deployment but is lacking in an on-premises deployment? A. efficient scalability B. virtualization C. storage capacity D. supported systems - Answer-A. efficient scalability Wireless users report frequent disconnections from the wireless network. While troubleshooting a network engineer finds that after the user a disconnect, the connection reestablishes automatically without any input required. The engineer also notices these message logs. AP 'AP2' is down Reason: Radio channel set. 6:54:04 PM AP 'AP4' is down Reason: Radio channel set. 6:44:49 PM AP 'AP7' is down Reason: Radio channel set. 6:34:32 PM Which action reduces the user impact? A. increase the dynamic channel assignment interval B. increase BandSelect C. increase the AP heartbeat timeout D. enable coverage hole detection - Answer-A. increase the dynamic channel assignment interval Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller? A. Option 43 B. Option 60 C. Option 67 D. Option 150 - Answer-A. Option 43 A network administrator applies the following configuration to an IOS device. aaa new-model aaa authentication login default local group tacacs+ What is the process of password checks when a login attempt is made to the device? A. A TACACS+ server is checked first. If that check fail, a database is checked B. A TACACS+ server is checked first. If that check fail, a RADIUS server is checked. If that check fail, a local database is checked C. A local database is checked first. If that fails, a TACACS+server is checked, if that check fails, a RADIUS server is checked D. A local database is checked first. If that check fails, a TACACS+server is checked - Answer-D. A local database is checked first. If that check fails, a TACACS+server is checked What is the role of the vsmart controller in a Cisco SD-WAN environment? A. IT performs authentication and authorization B. It manages the control plane. C. It is the centralized network management system. D. It manages the data plane. - Answer-B. It manages the control plane. Why is an AP joining a different WLC than the one specified through option 43? A. The WLC is running a different software version B. The API is joining a primed WLC C. The AP multicast traffic unable to reach the WLC through Layer 3 D. The APs broadcast traffic is unable to reach the WLC through Layer 2 - Answer-B. The API is joining a primed WLC Which devices does Cisco Center configure when deploying an IP-based access control policy? A. All devices integrating with ISE B. selected individual devices C. all devices in selected sites D. all wired devices - Answer-A. All devices integrating with ISE Which method of account authentication does OAuth 2.0 within REST APIs? A. username/role combination B. access tokens C. cookie authentication D. basic signature workflow - Answer-B. access tokens What does the Cisco DNA Center use to enable the delivery of applications through a network and to yield analytics for innovation? A. process adapters B. Command Runner C. intent-based APIs D. domain adapters - Answer-C. intent-based APIs Which action is a function of VTEP in VXLAN? A. tunneling traffic from IPv6 to IPv4 VXLANs B. allowing encrypted communication on the local VXLAN Ethernet segment C. encapsulating and de-encapsulating VXLAN Ethernet frames D. tunneling traffic from IPv4 to IPv6 VXLANs - Answer-C. encapsulating and de-encapsulating VXLAN Ethernet frames