CCNP Nettut Flashcards

1
Q

FCAPS is a network maintenance model defined by ISO. FCAPS stands for:

A

Fault Management ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ F
Configuration Management ‐‐‐‐‐‐‐ C
Accounting Management ‐‐‐‐‐‐‐‐‐‐ A

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

There are many Network Maintenance models. Match the model names on the left to the options on the right:

A

FCAPS: Fault, Configuration, Accounting, Performance and Security
ITIL: A collection of best practice recommendations
Cisco Lifecycle: Often referred to as the PPDIOO model
TNM: Telecommunications Management Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Match the items on the left to their purpose on the right:

A

EEM: CLI based for Management and Monitoring
SDM: Provides a GUI for Administration
FTP: Used for Backup and Restore

Explanation

EEM offers the ability to monitor events and take informational or corrective action when the monitored events occur or a threshold is reached. An EEM policy is an entity that defines an event and the actions to be taken when that event occurs. There are two types of EEM policies: an applet or a script. An applet is a simple form of policy that is defined within the CLI configuration. A script is a form of policy that is written in Tool Command Language (Tcl).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

FCAPS is a network maintenance model defined by ISO. What does it stand for?

A. Action Management
B. Fault Management
C. Configuration Management
D. Protocol Management
E. Security Management

A

Answer: B C E (Fault, Configuration & Security Management). Notice that “A” in FCAPS stands for Accounting, not Action. “P” stands for Performance, not Protocol.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which alerts will be seen on the console when running the command: logging console warnings.

A. warnings only
B. warnings, notifications, error, debugging, informational
C. warnings, errors, critical, alerts, emergencies
D. notifications, warnings, errors
E. warnings, errors, critical, alerts

A

Answer: C

Explanation

The Message Logging is divided into 8 levels as listed below

Level Keyword Description0 emergencies System is unusable1 alerts Immediate action is needed2 critical Critical conditions exist3 errors Error conditions exist4 warnings Warning conditions exist5 notification Normal, but significant, conditions exist6 informational Informational messages7 debugging Debugging messages

The highest level is level 0 (emergencies). The lowest level is level 7. If you specify a level with the “logging console level” command, that level and all the higher levels will be displayed. For example, by using the “logging console warnings” command, all the logging of emergencies, alerts, critical, errors, warnings will be displayed.

In this question, E is also correct but it is less information -> C is the best answer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

You have the following commands used for ftp:
ip ftp username admin
ip ftp password backup

You have been asked to switch from FTP to HTTP. Which two commands will you use to replace the existing commands?

A. ip http username admin
B. ip http client username admin
C. ip http password backup
D. ip http client password backup
E. ip http server username admin
F. ip http server password backup

A

Answer: B D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which two of the following options are categories of Network Maintenance tasks?

A. Firefighting
B. Interrupt-driven
C. Policy-based
D. Structured
E. Foundational

A

Answer: B D

Explanation

Interrupt-driven tasks are helpdesk tasks (fix problems as reported by users) while Structured tasks are tasks performed by a predefined plan. Advantages of a structured network maintenance model over interrupt-driven include:

+ Proactive vs. reactive
+ Reduced network downtime
+ More cost effective
+ Better alignment with business objectives
+ Improved network security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

The following commands are issued on a Cisco router:

Router(config)#access-list 199 permit tcp host 10.1.1.1 host 172.16.1.1
Router(config)#access-list 199 permit tcp host 172.16.1.1 host 10.1.1.1
Router(config)#exit
Router#debug ip packet 199

What would be the output shown on the console?

A. All IP packets passing through the router
B. Only IP packets with the source address of 10.1.1.1
C. All IP packets from 10.1.1.1 to 172.16.1.1
D. All IP packets between 10.1.1.1 to 172.16.1.1

A

Answer: D

Explanation

The two access-list statements allow two-way communication between two hosts 10.1.1.1 and 172.16.1.1. Although answer D is not totally correct as only TCP traffic is allowed but we don’t have a better choice so D is the best answer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

You have two NTP servers 10.1.1.1 & 10.1.1.2 and want to configure a router to use 10.1.1.2 as its NTP server before falling back to 10.1.1.1. Which command will you use?

A. ntp server 10.1.1.1
ntp server 10.1.1.2
B. ntp server 10.1.1.1
ntp server 10.1.1.2 primary
C. ntp server 10.1.1.1
ntp server 10.1.1.2 prefer
D. ntp server 10.1.1.1 fallback
ntp server 10.1.1.2

A

Answer:

ntp server 10.1.1.1
ntp server 10.1.1.2 prefer

(notice the answer with the word “prefer”)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What level of logging is enabled on a router when the following logs are seen?

%LINK-3‐UPDOWN: Interface FastEthernet0/1, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up

A. alerts
B. errors
C. critical
D. notifications

A

Answer: D

Explanation

The first log message is an error message with a severity level of 3 (%LINK-3‐UPDOWN) while the second one is with a severity level of 5. From the table in the explanation part of Question 2 we learn that we need to use the “logging console 5″ command (notification level) so that emergencies, alerts, critical, errors, warnings and notifications will be displayed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

You enabled CDP on two Cisco Routers which are connected to each other. The Line and Protocol status for the interfaces on both routers show as UP but the routers do not see each other a CDP neighbors. Which layer of the OSI model does the problem most likely exist?

A. Physical
B. Session
C. Application
D. Data-Link
E. Network

A

Answer: D

Explanation

CDP runs over Data Link layer (although it can collect some Layer 3 information) so the problem most likely exists in Layer 2.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

% LINK-3-UPDOWN: Interface Serial0/0, change state to up
% LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up

Choose the correct answer.

A. These two log messages will not have severity level. They are not errors but are just informational messages.
B. The first log message is categorized as a warning message.
C. These messages regarding interface status are normal output and will always be displayed when you exit config mode.
D. The first log message is an error message with a severity level of 3.
E. The second message would be shown if the logging console warning command had been issued.

A

Answer: D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Client is unable to ping R1’s serial interface.

Why?

What command will fix it and where?

A

R1 does not have OSPF authentication enabled.

On R1 on the S/0/0/0 interface add the command:

“ip ospf authentication message-digest”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

HSRP was configured on DSW1 & DSW2. DSW1 is configured to be active, but it does not become active.

Why?

What command(s) where will fix it?

A

On DSW1 the wrong interface is being tracked by the track command.

In vlan 10 interface configuration mode you must use the commands:

no standby 10 track 1 decrement 60
standby 10 track 10 decrement 60

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Client is able to ping 209.65.200.226 but can’t ping the web server at 209.65.200.241.

Why?

What commands will fix it?

A

R1 has the incorrect BGP neighbor IP address.

Enter the following commands in bgp router configuration mode:

no network *incorrect ip* remote-as 65002

network 209.65.200.226 255.255.255.252 remote-as 65002

Other indicating commands:

‘sh ip route BGP’, you will not see any BGP route.
‘sh ip bgp neighbor’ on R1, you will not see any active BGP neighbor.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Client 1 & 2 are not able to ping the web server 209.65.200.241, but all the routers & DSW1,2 can ping the server.

Why?

What command(s) where will fix the problem?

A

R1 has the incorrect NAT configuration. The access list for matching the inside source IP addresses doesn’t permit the 10.2.0.0 network.

Under the ip access list add the command “permit 10.2.0.0 0.0.255.255”

17
Q

No one is able to ping the web server at 209.65.200.241.

Why?

What command(s) where will fix the problem?

A

The web server cannot be pinged because of the access list on R1. R1’s access list denies everything, but traffic sourced as 209.65.200.241. This would cause the BGP relationship between R1 and the router serving AS 64002 to fail.

Under the ip access list configuration mode for R1 add the line:

permit ip 209.65.200.224 0.0.0.3 any

18
Q

Client 1 is getting the correct IP address from DHCP, but client 1 is not able to ping the server. Unable to ping DSW1 or FTP server from client 1.

Why?

What commands where will fix the problem?

A

A VLAN access map on DSW1 is blocking the client IP address 10.2.1.3.

In global configuration mode enter the command “no vlan filter [name] vlan-list [line number of drop]”

Additional symptoms:

1- Client 1 is getting the correct IP address from DHCP (i.e 10.2.1.3)
2- But Client 1 is unable to ping DSW1.
3- Client 1 is unable to ping FTP Server (10.2.2.10)

19
Q

Client 1 is getting a 169.x.x.x IP address & is unable to ping client 2 as well as DSW1. On ASW1 the command “show interfaces fa1/0/1” will show the following line “FastEthernet1/0/1 is down, line protocol is down (err-disabled)”

Why?

What command where will fix the problem?

A

Port security on the inteface of ASW1 has the incorrect mac-address configured.

Disable port security on the interface by moving to each interface’s configuration on ASW1 and entering “no switchport port-security” followed by “shut” and then finally “no shut”.

20
Q

Client 1 & 2 are getting 169.x.x.x ip addresses and can’t ping DSW1 or FTP server. However, they are able to ping each other.

Why?

What commands where will fix the problem?

A

It could be either of the below problems:

They have the incorrect access VLAN configured on ASW1.

Fix the problem by moving to each interface on ASW1 and removing them from the incorrect VLAN and using the command “switchport access vlan 10”

Alternatively, it could also be that the correct trunks are not being allowed outbound from ASW1.

The problem is rectified by moving to the appropriate port channels and adding the command “switchport trunk allowed vlan none” followed by “switchport trunk allowed vlan 200.10”

21
Q

Client 1 is not able to ping the webserver. However, DSW1 can ping fa0/1 of R4, but can’t ping s0/0/0.34.

Why?

What commands where will fix the problem?

A

The problem could be one of the following.

The neighborship relationship between DSW1 and R4 has failed because the AS on R4 is 1 and it is 10 on DSW1 and 2.

On R4 re-enter all of the router information under AS 10.

R4 may have the incorrect name configured for its route map in the redistribute statement. Change the route-map name appropriately in the redistribute statement.

22
Q

DSW1 & R4 can’t ping R2’s loopback interface or s0/0/0.12. R2 is not an OSPFv3 neighbor on R3.

Why?

What command where will fix the problem?

A

IPv6 OSPF was not enabled on R2’s serial interface connecting to R3.

On the serial interface of R2 enter the command “ipv6 ospf 6 area 0”.

23
Q

Clients 1 & 2 are receiving 169.x.x.x addresses.

Why?

What commands where will fix the problem?

A

They have been excluded in the DHCP range on R4.

On R4 delete the line “ip dhcp excluded-address 10.2.1.1 10.2.1.253” and apply “ip dhcp excluded-address 10.2.1.1 10.2.1.2”

24
Q

The neighborship between R4 and DSW1 wasn’t established. Client 1 can’t ping R4.

Why?

What commands where will fix the problem?

A

Under the EIGRP configuration interfaces are passive by default.

Under the interfaces connected to DSW1 enter the “no passive interface” command

25
Q

List the potential problems in order.

A

1) OSPF authentication problem
2) HSRP track statement is incorrect
3) BGP neighbor IP is incorrect
4) NAT ACL doesn’t include 10.2.0.0 network
5) R1 access list doesn’t permit inbound traffic from ISP. BGP neighbor relationship fails.
6) VLAN access map on DSW1 blocks the client 10.2.1.x
7) Port security on ASW1’s interface has the incorrect MAC configured
8) Incorrect access VLAN configured on ASW1
9) VLANs not being permitted out ASW1
10) R4 is configured with the incorrect EIGRP AS
11) R4 has the incorrect name configured for its route-map redistribution statement
12) IPv6 OSPF not enabled on R2’s serial interface connecting to R3
13) R4 is excluding client 1 and 2’s ip addresses from the DHCP pool
14) R4 has a passive interface connecting to DSW1