CCNP TEST BANK 2025 ACTUAL
QUESTIONS AND ANSWERS 100%
COMPLETE WITH A GUARANTEED
PASS
A customer deploys a new wireless network to perform location-based services using
Cisco DNA Spaces. The customer has a single WLC located on-premises in a secure
data center. The security team does not want to expose the WLC to the public Internet.
Which solution allows the customer to securely send RSSI updates to Cisco DNA
Spaces?
A. Deploy a Cisco DNA Spaces connector as a VM
B. Perform tethering with Cisco DNA Center
C. Replace the WLC with a cloud-based controller
D. Implement Cisco Mobility Services Engine - Answer-A. Deploy a Cisco DNA Spaces
connector as a VM
Refer to the exhibit. An engineer entered the command no spanning-tree bpduguard
enable on interface Fa1/0/7. What is the effect of this command onFa1/0/7?
A. It remains in err-disabled state until the errdisable recovery cause failed-port-state
command is entered in the global configuration mode
B. It remains in err-disabled state until the no shutdown command is entered in the
interface configuration mode
C. It remains in err-disabled state until the shutdown/no shutdown command is entered
in the interface configuration mode
D. It remains in err-disabled state until the spanning-tree portfast bpduguard disable
command is entered in the interface configuration mode. - Answer-C. It remains in err-
disabled state until the shutdown/no shutdown command is entered in the interface
configuration mode
Which design principle states that a user has no access by default to any resource, and
unless a resource is explicitly granted, it should be denied?
,A. least privilege
B. fail-safe defaults
C. economy of mechanism
D. complete mediation - Answer-B. fail-safe defaults
A customer wants to connect a device to an autonomous Cisco AP configured as a
WGB. The WGB is configured properly: however, it fails to associate to aCAPWAP-
enabled AP. Which change must be applied in the advanced WLAN settings to resolve
this issue?
A. Enable Aironet IE.
B. Enable passive client.
C. Disable AAA override.
D. Disable FlexConnect local switching. - Answer-A. Enable Aironet IE.
By default, which virtual MAC address does HSRP group 32 use?
A. 04:19:01:05:2e:32
B. 05:5e:5c:ac:0c:32
C. 00:00:0c:07:ac:20
D. 00:5e:0c:07:ac:20 - Answer-C. 00:00:0c:07:ac:20
Which two Cisco SD-WAN components exchange OMP information? (Choose two.)
A. WAN Edge
B. vBond
C. vManage
D. vAnalytics
E. vSmart - Answer-A. WAN Edge
E. vSmart
What does the number in an NTP stratum level represent?
A. The number of hops it takes to reach the authoritative time source
B. The amount of offset between the device clock and true time
C. The number of hops it takes to reach the primary time server
D. The amount of drift between the device clock and true time - Answer-A. The number
of hops it takes to reach the authoritative time source
Refer to the exhibit. Clients report that they cannot connect to this SSID using the
provided PSK. Which action will resolve this issue?
A. Apply the correct interface to this WLAN
B. Apply the changes this SSID
C. Select the PSK under authentication key management
, D. Define the correct Radio Policy. - Answer-C. Select the PSK under authentication
key management
Which QoS queuing method transmits packets out of the interface in the order the
packets arrive?
A. custom
B. weighted-fair
C. FIFO
D. priority - Answer-C. FIFO
Which two results occur if Cisco DNA Center loses connectivity to devices in the SD-
Access fabric? (Choose two.)
A. Users lose connectivity
B. Already connected users are unaffected but new users cannot connect
C. All devices reload after detecting loss of connection to Cisco DNA Center
D. User connectivity is unaffected
E. Cisco DNA Center is unable to collect monitoring data in Assurance - Answer-D.
User connectivity is unaffected
E. Cisco DNA Center is unable to collect monitoring data in Assurance
Refer to the exhibit. The connection between SW1 and SW2 is not operational. Which
two actions resolve the issue? (Choose two.)
A. configure switchport nonegotiate on SW1
B. configure switchport nonegotiate on SW2
C. configure switchport mode access on SW2
D. configure switchport mode trunk on SW2
E. configure switchport mode dynamic desirable on SW2 - Answer-D. configure
switchport mode trunk on SW2
E. configure switchport mode dynamic desirable on SW2
Refer to the exhibit. A company has an internal wireless network with a hidden SSID
and RADIUS-based client authentication for increased security. An employee attempts
to manually add the company network to a laptop, but the laptop does not attempt to
connect to the network. The regulatory domains of the access points and the laptop are
identical. Which action resolves this issue?
A. Ensure that the "Connect even if this network is not broadcasting" option is selected.
, B. Change the security type to WPA2-Personal AES.
C. Use the empty string as the hidden SSID network name.
D. Limit the enabled wireless channels on the laptop to the maximum channel range
that is supported by the access points. - Answer-A. Ensure that the "Connect even if this
network is not broadcasting" option is selected.
How do the RIB and the FIB differ?
A. RIB is derived from the control plane, and the FIB is derived from the RIB.
B. FIB is derived from the control plane, and the RIB is derived from the data plane.
C. RIB contains the interface for a destination, and the FIB contains the next hop
information.
D. FIB contains routes learned through a dynamic routing protocol and the RIB
contains routes that are static or directly connected. - Answer-A. RIB is derived from the
control plane, and the FIB is derived from the RIB.
What does a YANG model provide?
A. standardized data structure independent of the transport protocols
B. creation of transport protocols and their interaction with the OS
C. user access to interact directly with the CLI of the device to receive or modify
network configurations
D. standardized data structure that can be used only with NETCONF or RESTCONF
transport protocols - Answer-D. standardized data structure that can be used only with
NETCONF or RESTCONF transport protocols
A system must validate access rights to all its resources and must not rely on a cached
permission matrix. If the access level to a given resource is revoked but is not reflected
in the permission matrix, the security is violated. Which term refers to this REST
security design principle?
A. economy of mechanism
B. complete mediation
C. separation of privilege
D. least common mechanism - Answer-B. complete mediation
"HTTP/1.1 204 No Content" is returned when the curl -i -X DELETE command is issued.
Which situation has occurred?
QUESTIONS AND ANSWERS 100%
COMPLETE WITH A GUARANTEED
PASS
A customer deploys a new wireless network to perform location-based services using
Cisco DNA Spaces. The customer has a single WLC located on-premises in a secure
data center. The security team does not want to expose the WLC to the public Internet.
Which solution allows the customer to securely send RSSI updates to Cisco DNA
Spaces?
A. Deploy a Cisco DNA Spaces connector as a VM
B. Perform tethering with Cisco DNA Center
C. Replace the WLC with a cloud-based controller
D. Implement Cisco Mobility Services Engine - Answer-A. Deploy a Cisco DNA Spaces
connector as a VM
Refer to the exhibit. An engineer entered the command no spanning-tree bpduguard
enable on interface Fa1/0/7. What is the effect of this command onFa1/0/7?
A. It remains in err-disabled state until the errdisable recovery cause failed-port-state
command is entered in the global configuration mode
B. It remains in err-disabled state until the no shutdown command is entered in the
interface configuration mode
C. It remains in err-disabled state until the shutdown/no shutdown command is entered
in the interface configuration mode
D. It remains in err-disabled state until the spanning-tree portfast bpduguard disable
command is entered in the interface configuration mode. - Answer-C. It remains in err-
disabled state until the shutdown/no shutdown command is entered in the interface
configuration mode
Which design principle states that a user has no access by default to any resource, and
unless a resource is explicitly granted, it should be denied?
,A. least privilege
B. fail-safe defaults
C. economy of mechanism
D. complete mediation - Answer-B. fail-safe defaults
A customer wants to connect a device to an autonomous Cisco AP configured as a
WGB. The WGB is configured properly: however, it fails to associate to aCAPWAP-
enabled AP. Which change must be applied in the advanced WLAN settings to resolve
this issue?
A. Enable Aironet IE.
B. Enable passive client.
C. Disable AAA override.
D. Disable FlexConnect local switching. - Answer-A. Enable Aironet IE.
By default, which virtual MAC address does HSRP group 32 use?
A. 04:19:01:05:2e:32
B. 05:5e:5c:ac:0c:32
C. 00:00:0c:07:ac:20
D. 00:5e:0c:07:ac:20 - Answer-C. 00:00:0c:07:ac:20
Which two Cisco SD-WAN components exchange OMP information? (Choose two.)
A. WAN Edge
B. vBond
C. vManage
D. vAnalytics
E. vSmart - Answer-A. WAN Edge
E. vSmart
What does the number in an NTP stratum level represent?
A. The number of hops it takes to reach the authoritative time source
B. The amount of offset between the device clock and true time
C. The number of hops it takes to reach the primary time server
D. The amount of drift between the device clock and true time - Answer-A. The number
of hops it takes to reach the authoritative time source
Refer to the exhibit. Clients report that they cannot connect to this SSID using the
provided PSK. Which action will resolve this issue?
A. Apply the correct interface to this WLAN
B. Apply the changes this SSID
C. Select the PSK under authentication key management
, D. Define the correct Radio Policy. - Answer-C. Select the PSK under authentication
key management
Which QoS queuing method transmits packets out of the interface in the order the
packets arrive?
A. custom
B. weighted-fair
C. FIFO
D. priority - Answer-C. FIFO
Which two results occur if Cisco DNA Center loses connectivity to devices in the SD-
Access fabric? (Choose two.)
A. Users lose connectivity
B. Already connected users are unaffected but new users cannot connect
C. All devices reload after detecting loss of connection to Cisco DNA Center
D. User connectivity is unaffected
E. Cisco DNA Center is unable to collect monitoring data in Assurance - Answer-D.
User connectivity is unaffected
E. Cisco DNA Center is unable to collect monitoring data in Assurance
Refer to the exhibit. The connection between SW1 and SW2 is not operational. Which
two actions resolve the issue? (Choose two.)
A. configure switchport nonegotiate on SW1
B. configure switchport nonegotiate on SW2
C. configure switchport mode access on SW2
D. configure switchport mode trunk on SW2
E. configure switchport mode dynamic desirable on SW2 - Answer-D. configure
switchport mode trunk on SW2
E. configure switchport mode dynamic desirable on SW2
Refer to the exhibit. A company has an internal wireless network with a hidden SSID
and RADIUS-based client authentication for increased security. An employee attempts
to manually add the company network to a laptop, but the laptop does not attempt to
connect to the network. The regulatory domains of the access points and the laptop are
identical. Which action resolves this issue?
A. Ensure that the "Connect even if this network is not broadcasting" option is selected.
, B. Change the security type to WPA2-Personal AES.
C. Use the empty string as the hidden SSID network name.
D. Limit the enabled wireless channels on the laptop to the maximum channel range
that is supported by the access points. - Answer-A. Ensure that the "Connect even if this
network is not broadcasting" option is selected.
How do the RIB and the FIB differ?
A. RIB is derived from the control plane, and the FIB is derived from the RIB.
B. FIB is derived from the control plane, and the RIB is derived from the data plane.
C. RIB contains the interface for a destination, and the FIB contains the next hop
information.
D. FIB contains routes learned through a dynamic routing protocol and the RIB
contains routes that are static or directly connected. - Answer-A. RIB is derived from the
control plane, and the FIB is derived from the RIB.
What does a YANG model provide?
A. standardized data structure independent of the transport protocols
B. creation of transport protocols and their interaction with the OS
C. user access to interact directly with the CLI of the device to receive or modify
network configurations
D. standardized data structure that can be used only with NETCONF or RESTCONF
transport protocols - Answer-D. standardized data structure that can be used only with
NETCONF or RESTCONF transport protocols
A system must validate access rights to all its resources and must not rely on a cached
permission matrix. If the access level to a given resource is revoked but is not reflected
in the permission matrix, the security is violated. Which term refers to this REST
security design principle?
A. economy of mechanism
B. complete mediation
C. separation of privilege
D. least common mechanism - Answer-B. complete mediation
"HTTP/1.1 204 No Content" is returned when the curl -i -X DELETE command is issued.
Which situation has occurred?
