CCNP Enterprise

In the Cisco Enterprise Architecture, which layer aggregates traffic from access layer devices and provides Layer 3 routing boundaries and policy enforcement?

• ACore layer
• BDistribution layer
• CAccess layer
• DData Center layer

What is the primary advantage of using SD-WAN over traditional WAN technologies like MPLS?

• ALower cost and increased bandwidth utilization through multiple transport options
• BGuaranteed zero packet loss
• CBuilt-in encryption that cannot be disabled
• DElimination of the need for routing protocols

In a Cisco SD-Access fabric, what is the role of the Control Plane Node?

• AIt performs all data forwarding for the fabric
• BIt tracks all endpoint locations and maintains the host tracking database
• CIt provides wireless LAN controller services only
• DIt acts solely as a DHCP server for fabric endpoints

Which high availability mechanism allows a switch to use multiple links simultaneously for both data forwarding and redundancy without creating Layer 2 loops?

• ASpanning Tree Protocol (STP)
• BVirtual Port Channel (vPC)
• CUniDirectional Link Detection (UDLD)
• DPortFast

What is the primary function of Cisco Catalyst Center (formerly DNA Center) in an enterprise network?

• AIt replaces the need for physical switches and routers
• BIt provides centralized network management, automation, and assurance
• CIt functions only as a wireless LAN controller
• DIt only monitors network traffic for security threats

Which design principle recommends placing services such as load balancers and firewalls close to the applications they serve rather than in a central location?

• AHierarchical design
• BCollapsed core design
• CService-centric design
• DEnd-to-end design

What is the main difference between traditional campus design and Cisco SD-Access fabric?

• ASD-Access eliminates the need for physical switches
• BSD-Access separates the control plane from the data plane using LISP and VXLAN
• CSD-Access only supports wireless networks
• DTraditional campus design provides better security than SD-Access

In a three-tier hierarchical network design, which layer typically provides Layer 3 routing boundaries and policy enforcement?

• ACore layer only
• BDistribution layer
• CAccess layer
• DBoth core and access layers

What is the primary purpose of VRF (Virtual Routing and Forwarding) in enterprise networks?

• ATo eliminate the need for routing protocols
• BTo create multiple independent routing instances within a single physical router
• CTo replace VLANs completely
• DTo encrypt all traffic automatically

In LISP (Locator/ID Separation Protocol), what does the EID represent?

• AEdge Identifier used for data center routing
• BEndpoint Identifier representing the device identity regardless of location
• CEncapsulation ID for VXLAN tunnels
• DExternal Interface Descriptor

Which protocol is used as the data plane encapsulation mechanism in Cisco SD-Access fabric?

• AMPLS
• BGRE
• CVXLAN-GPO
• DLISP

What is EVPN (Ethernet VPN) used for in enterprise networks?

• ATo encrypt all Ethernet traffic
• BTo provide Layer 2 VPN services with multi-homing and aliasing capabilities
• CTo replace spanning tree protocol
• DTo provide wireless network access

In network virtualization, what is the purpose of VNI (VXLAN Network Identifier)?

• ATo encrypt VXLAN traffic
• BTo identify different virtual networks or segments within a VXLAN fabric
• CTo authenticate endpoints joining the VXLAN
• DTo determine the physical location of endpoints

Which OSPF LSA type describes routes to external destinations when redistributing from another routing protocol?

• AType 1 (Router LSA)
• BType 3 (Summary LSA)
• CType 5 (External LSA)
• DType 7 (NSSA External LSA)

What is the purpose of the BGP NEXT_HOP attribute?

• ATo define the next autonomous system in the path
• BTo specify the IP address to reach the next-hop router toward the destination
• CTo determine the preferred exit point from the local AS
• DTo encrypt BGP updates

In EIGRP, what does the composite metric consist of by default?

• ABandwidth and delay only
• BBandwidth, delay, load, and reliability
• CHop count only
• DBandwidth and MTU

Which Spanning Tree Protocol variant should be used to achieve sub-second convergence on a per-VLAN basis?

• ASTP (802.1D)
• BRSTP (802.1W)
• CPVRST+ (Per-VLAN Rapid Spanning Tree Plus)
• DMST (Multiple Spanning Tree)

What is the function of the PIM Designated Router (DR) in multicast routing?

• ATo forward all multicast traffic to all subnets
• BTo prevent multicast loops using RPF checks
• CTo send PIM Join/Prune messages toward the RP on behalf of directly connected receivers
• DTo encrypt multicast streams

Which BGP path attribute is used to prevent routing loops between autonomous systems?

• ANEXT_HOP
• BAS_PATH
• CLOCAL_PREF
• DMED

In IS-IS routing, what is the purpose of the System ID?

• ATo identify the routing process
• BTo uniquely identify each router in the IS-IS domain
• CTo define the IS-IS area number
• DTo encrypt IS-IS messages

What is the purpose of OSPF virtual links?

• ATo create redundant paths between areas
• BTo connect a non-backbone area to the backbone when direct physical connection is not pos…
• CTo encrypt OSPF traffic between routers
• DTo establish neighbor relationships without multicast

In MPLS networks, what is the function of the LFIB (Label Forwarding Information Base)?

• ATo store all IP routes in the network
• BTo map incoming labels to outgoing labels and interfaces for forwarding decisions
• CTo encrypt MPLS traffic
• DTo authenticate MPLS neighbors

Which EtherChannel protocol is Cisco proprietary and supports only 8 active links?

• ALACP (Link Aggregation Control Protocol)
• BPAgP (Port Aggregation Protocol)
• CVTP (VLAN Trunking Protocol)
• DDTP (Dynamic Trunking Protocol)

What is the default OSPF network type on a Cisco router Ethernet interface?

• APoint-to-point
• BBroadcast
• CNon-broadcast
• DPoint-to-multipoint

In BGP route selection, which attribute is evaluated first when all other attributes are equal?

• ALOCAL_PREF
• BAS_PATH length
• CWeight (Cisco proprietary)
• DMED

What is the purpose of HSRP (Hot Standby Router Protocol)?

• ATo aggregate multiple links into a single logical link
• BTo provide default gateway redundancy for end devices
• CTo encrypt traffic between routers
• DTo prevent Layer 2 loops

Which command is used to verify the interfaces participating in an EtherChannel bundle?

• Ashow etherchannel summary
• Bshow etherchannel status
• Cshow interface port-channel
• Dshow etherchannel port-channel

In 802.1Q trunking, what is the purpose of the native VLAN?

• ATo encrypt traffic on the trunk
• BTo carry untagged traffic across the trunk link
• CTo prevent VLAN hopping attacks
• DTo establish trunk negotiation

What is the primary function of SNMP (Simple Network Management Protocol) traps?

• ATo poll device statistics at regular intervals
• BTo allow network devices to asynchronously send alerts to an NMS when events occur
• CTo encrypt management traffic
• DTo authenticate management sessions

Which feature allows a network administrator to capture and analyze packets on a switch interface without affecting production traffic?

• ASPAN (Switched Port Analyzer)
• BPortFast
• CBPDU Guard
• DRoot Guard

What is IP SLA (Service Level Agreement) used for in network monitoring?

• ATo negotiate service contracts with ISPs
• BTo generate synthetic traffic for measuring network performance metrics like delay, jitte…
• CTo encrypt management traffic
• DTo authenticate users accessing network devices

What information does NetFlow typically collect about network traffic?

• AOnly the total bandwidth usage per interface
• BSource/destination IP addresses, ports, protocol, and byte/packet counts for each flow
• CThe actual payload content of each packet
• DOnly Layer 2 MAC address information

Which syslog severity level indicates that the system is unusable?

• ALevel 0 (Emergency)
• BLevel 3 (Error)
• CLevel 5 (Notification)
• DLevel 7 (Debug)

What is the primary function of DHCP Snooping in a switched network?

• ATo encrypt DHCP messages between clients and servers
• BTo prevent rogue DHCP servers from assigning incorrect IP addresses
• CTo speed up the DHCP lease process
• DTo monitor DHCP traffic for QoS purposes

In 802.1X port-based authentication, what is the role of the Authenticator?

• AIt stores user credentials and validates authentication requests
• BIt acts as an intermediary between the Supplicant and Authentication Server
• CIt is the end device requesting network access
• DIt encrypts all traffic on the authenticated port

What is Dynamic ARP Inspection (DAI) designed to prevent?

• ASpanning Tree Protocol manipulation
• BARP spoofing and man-in-the-middle attacks
• CDHCP starvation attacks
• DVLAN hopping

Which AAA protocol is commonly used for authenticating network device administrators?

• ALDAP
• BTACACS+
• CNTP
• DSNMP

What does the "established" keyword do in an extended ACL when applied to TCP traffic?

• AEncrypts established connections only
• BAllows TCP traffic only if the connection was initiated from the trusted side
• CDenies all new TCP connections
• DLogs only established connections