CCNP EXAM QUUESTIONS AND
CORRECT ANSWERS ALREADY
PASSED
What function does VXLAN perform in an SD-Access deployment?
A. policy plane forwarding
B. control plane forwarding
C. data plane forwarding
D. systems management and orchestration - Answer-C. data plane forwarding
A server running Linux is providing support for virtual machines along with DNS and
DHCP services for a small business. Which technology does this represent?
A. container
B. Type 1 hypervisor
C. hardware pass-through
D. Type 2 hypervisor - Answer-D. Type 2 hypervisor
Which configuration restricts the amount of SSH that a router accepts 100 kbps?
A. Option A
B. Option B
C. Option C
D. Option D - Answer-C. Option C
What NTP stratum level is a server that is connected directly to an authoritative time
source?
A. Stratum 0
B. Stratum 1
C. Stratum 14
D. Stratum 15 - Answer-B. Stratum 1
What is the primary effect of the spanning-tree portfast command?
A. It enables BPDU messages
B. It minimizes spanning-tree convergence time
C. It immediately puts the port into the forwarding state when the switch is reloaded
D. It immediately enables the port in the listening state - Answer-B. It minimizes
spanning-tree convergence time
, What is calculated using the numerical values of the transmitter power level, cable loss
and antenna gain?
A. SNR
B. RSSI
C. dBi
D. EIRP - Answer-D. EIRP
Which two security features are available when implementing NTP? (Choose two)
A. encrypted authentication mechanism
B. dock offset authentication
C. broadcast association mode
D. access list based restriction scheme
E. symmetric server passwords - Answer-A. encrypted authentication mechanism
D. access list based restriction scheme
What is the result of applying this access control list?
ip access-list extended STATEFUL10 permit tcp any any established20 deny ip any any
A. TCP traffic with the DF bit set is allowed
B. TCP traffic with the SYN bit set is allowed
C. TCP traffic with the ACK bit set is allowed
D. TCP traffic with the URG bit set is allowed - Answer-C. TCP traffic with the ACK bit
set is allowed
public API resource:
username and password in an encoded string:
API-dependent secret:
authorization through identity provider: - Answer-secure vault
HTTP basic authentication
OAuth
token-based authentication
When a wired client connects to an edge switch in an SDA fabric, which component
decides whether the client has access to the network?
A. control-plane node
B. Identity Service Engine
C. RADIUS server
D. edge node - Answer-B. Identity Service Engine
An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit
point. Assuming that all BGP neighbor relationships have been formed and that the
attributes have not been changed on any of the routers, which configuration accomplish
task?
A. R4(config-router)#bgp default local-preference 200
B. R3(config-router)#neighbor 10.1.1.1 weight 200
C. R3(config-router)#bgp default local-preference 200
CORRECT ANSWERS ALREADY
PASSED
What function does VXLAN perform in an SD-Access deployment?
A. policy plane forwarding
B. control plane forwarding
C. data plane forwarding
D. systems management and orchestration - Answer-C. data plane forwarding
A server running Linux is providing support for virtual machines along with DNS and
DHCP services for a small business. Which technology does this represent?
A. container
B. Type 1 hypervisor
C. hardware pass-through
D. Type 2 hypervisor - Answer-D. Type 2 hypervisor
Which configuration restricts the amount of SSH that a router accepts 100 kbps?
A. Option A
B. Option B
C. Option C
D. Option D - Answer-C. Option C
What NTP stratum level is a server that is connected directly to an authoritative time
source?
A. Stratum 0
B. Stratum 1
C. Stratum 14
D. Stratum 15 - Answer-B. Stratum 1
What is the primary effect of the spanning-tree portfast command?
A. It enables BPDU messages
B. It minimizes spanning-tree convergence time
C. It immediately puts the port into the forwarding state when the switch is reloaded
D. It immediately enables the port in the listening state - Answer-B. It minimizes
spanning-tree convergence time
, What is calculated using the numerical values of the transmitter power level, cable loss
and antenna gain?
A. SNR
B. RSSI
C. dBi
D. EIRP - Answer-D. EIRP
Which two security features are available when implementing NTP? (Choose two)
A. encrypted authentication mechanism
B. dock offset authentication
C. broadcast association mode
D. access list based restriction scheme
E. symmetric server passwords - Answer-A. encrypted authentication mechanism
D. access list based restriction scheme
What is the result of applying this access control list?
ip access-list extended STATEFUL10 permit tcp any any established20 deny ip any any
A. TCP traffic with the DF bit set is allowed
B. TCP traffic with the SYN bit set is allowed
C. TCP traffic with the ACK bit set is allowed
D. TCP traffic with the URG bit set is allowed - Answer-C. TCP traffic with the ACK bit
set is allowed
public API resource:
username and password in an encoded string:
API-dependent secret:
authorization through identity provider: - Answer-secure vault
HTTP basic authentication
OAuth
token-based authentication
When a wired client connects to an edge switch in an SDA fabric, which component
decides whether the client has access to the network?
A. control-plane node
B. Identity Service Engine
C. RADIUS server
D. edge node - Answer-B. Identity Service Engine
An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit
point. Assuming that all BGP neighbor relationships have been formed and that the
attributes have not been changed on any of the routers, which configuration accomplish
task?
A. R4(config-router)#bgp default local-preference 200
B. R3(config-router)#neighbor 10.1.1.1 weight 200
C. R3(config-router)#bgp default local-preference 200
