ENSLD practice questions
Cisco · ENSLD · 300 questions
Original practice questions for the Designing Cisco Enterprise Networks exam, covering every domain of the official exam outline.
This course contains the use of artificial intelligence.
About the ENSLD exam
- Questions
- not published
- Passing score
- not published
- Format
- 90-minute exam associated with the CCNP Enterprise certification
Schedule this exam The certification this earns
Exam details published by the vendor, checked 3 November 2026. Vendors change fees and formats without notice — confirm on the vendor's own page before you book.
Practice Quizzes
Test your knowledge with standard 20-question practice sets.
Quiz 1
Quiz 2
Quiz 3
Quiz 4
Quiz 5
Quiz 6
Quiz 7
Quiz 8
Quiz 9
Quiz 10
Quiz 11
Quiz 12
Quiz 13
Quiz 14
Quiz 15
Browse by Domain
Study specific topics at your own pace.
Advanced Addressing and Routing Solutions (25%) · 75 questions
- A large hospital runs IS-IS as the sole IGP across four areas with frequent maintenance windows and strict change control. Adjacencies must reject spoofed hellos and LSPs must survive brief link flaps without flooding churn. Which IS-IS authentication and stability tuning approach best meets these goals?
- An enterprise OSPF backbone with 800 routers suffers CPU spikes during flapping of edge links, causing repeated full SPF runs and flooding of unstable LSAs. Stability must improve without hiding needed topology changes. Which OSPF scaling design using timers and suppression best stabilizes the network?
- A multihomed enterprise receives full Internet routes from two ISPs and must block private prefixes inbound, limit peer advertisements to its own aggregate, and deny routes with an unwanted transit AS in the path. Which basic BGP route filtering design applies the right tool to each goal?
- A university has four regional hubs each serving dozens of closets, and the core routing table is growing with flapping access prefixes that destabilize the backbone. The goal is clean summarization at each hub and stable core updates. Which hierarchical IPv4 plan should the designer create to enable summarization at distribution boundaries?
- A logistics firm with 30 sites on private IPv4 behind NAT is acquiring two companies, adding IoT sensors, and struggling with overlapping addresses and NAT troubleshooting. It needs scalable growth for five years, simple mergers, and reduced translation complexity. Which addressing strategy best supports long-term growth and operational simplicity?
- A retail chain runs EIGRP across 600 stores with slow WAN links where a single branch flap triggers queries that stall convergence network-wide. The design must limit query range and keep branch routers from transiting traffic. Which EIGRP query scoping approach using stub and summarization best contains this problem?
- A logistics firm must connect new IPv6-only sensors across regional sites, but the core remains IPv4-only with no upgrade window and limited MTU headroom. Routing changes must stay minimal at the core. Which overlay tunneling approach for IPv6 across IPv4 infrastructure best fits this migration?
- A manufacturing site has 60 point-to-point router links, 12 server VLANs needing about 40 hosts each, and a tight /22 enterprise allocation with audit pressure to reduce waste. Growth on links is minimal but servers may double. Which VLSM planning approach should the designer use to avoid address waste on links?
- A manufacturing firm is dual-homed to one ISP with two links and must make all internal routers prefer the primary exit for outbound traffic, while asking the ISP to prefer the primary ingress path without changing the local AS path length. Which BGP path-preference attribute design achieves that outbound and inbound influence?
- A bank is planning native dual-stack on its campus and data center where most switches and firewalls already support IPv6. Operations worries about doubling troubleshooting load, security gaps, and inconsistent feature support. Which native dual-stack design consideration best addresses long-term operability?
- A national bank runs IS-IS across 80 routers with a stable core and many regional branches, needing loop-free hierarchy, summarized branch prefixes, and minimal link-state flooding to branches. Designers must choose router roles and adjacency types that enforce a two-tier boundary. Which IS-IS level design creates a stable and scalable hierarchy?
- A regional utility runs OSPF between substations over private MPLS and a multipoint Ethernet service linking three control centers that keeps electing an unstable DR. Security audit requires authentication of all OSPF exchanges. Which OSPF authentication and network type design should the designer select for stability and security?
- A hotel chain operates IPv4 for legacy property systems, IPv6 for new guest Wi-Fi, and needs to keep staff, guest, and building-automation traffic isolated while extending routes to an MPLS provider. Which BGP address family design should the designer adopt for multiprotocol and VPN isolation?
- A national retailer runs one autonomous system across 30 WAN routers in a single IGP domain. iBGP full-mesh sessions are growing sharply, CPU is spiking during best-path churn, and the team must keep one externally visible ASN with minimal administrative split. Which BGP iBGP scaling design reduces sessions while preserving a single autonomous system?
- A regional retailer runs EIGRP named mode with dual hub links where the backup path has a higher feasible distance and stays idle, wasting capacity during peak sales. Design requires hierarchical address families, preserved metrics, and controlled use of the slower path. Which EIGRP metric design enables unequal-cost load sharing in named mode?
- A regional hospital runs IPv6-only tablets on new wards that must reach an IPv4-only patient records server the vendor will not upgrade, DNS is centrally managed, and dual-stack on the endpoints is prohibited by security policy. Which IPv4/IPv6 translation approach fits these boundary constraints?
- A freight operator runs IS-IS with Level-1 warehouse areas and Level-1-2 core routers connecting to two data centers. Area prefixes are flooding into the backbone unsummarized, narrow metrics cap path costs, and remote sites lack a return route to a shared services summary. Which IS-IS route leaking, summarization and metric style design meets all requirements?
- A university has a global /32 from its RIR, four large campuses, and hundreds of VLANs for classrooms, labs, and housing needing stable addresses plus room for research growth. The design must keep routing summaries clean and preserve standard subnet sizing. Which IPv6 address allocation with prefix hierarchy best meets the structured addressing requirement?
- A regional ISP peers with two upstreams and a customer AS 64500. Requirements are to accept only the customer aggregate, block private AS numbers inbound, and prevent your AS from becoming transit between upstreams. Which BGP route-filtering approach enforces prefix scope, AS-path sanity, and transit protection together?
- A bank expands EIGRP to remote branches over unstable links and sees stuck-in-active events, rogue route injection risk, and branch routers transiting core traffic. Security mandates neighbor authentication using per-interface credentials rather than one shared secret for the whole network. Which EIGRP authentication and stability design hardens and stabilizes the deployment?
- A logistics company runs a multi-area IS-IS backbone, sees neighbor flaps after congestion, faces spoofed hello risk on a metro link, and needs faster failure detection without creating instability. Which IS-IS authentication and stability tuning design provides secure and stable adjacencies?
- A multihomed enterprise has two equally capable eBGP transit links and needs both links active for the same prefixes, plus consideration of unequal provider capacities on future links. Which BGP load-sharing design provides active-active use with support for weighted distribution?
- A retailer with 300 stores uses overlapping 10.0.0.0/8 private IPv4, complex NAT at every merger, and is exhausting addresses for IoT sensors and cameras with cloud migration planned. Growth requires simpler routing and end-to-end reachability. Which addressing strategy using private IPv4, NAT, and IPv6 best supports scalable growth?
- A logistics company has four regions with 25 branches each, each branch needs three subnets, the WAN must stay stable as sites are added, and the design must minimize routing table size. Which hierarchical IPv4 addressing method enables clean route summarization at distribution boundaries?
- A retail enterprise has OSPF Area 0 at headquarters, 80 small stores with only a default route need, and one acquisition site redistributing external routes that must reach headquarters without leaking everywhere. Which OSPF multi-area design contains LSAs while preserving required external reachability?
- A logistics firm must connect isolated IPv6 sensor islands across a large IPv4-only core that cannot be upgraded this year, with deterministic endpoints managed by the network team. Which overlay tunneling approach carries IPv6 across the IPv4 infrastructure in this environment?
- An enterprise has two edge routers to different providers, needing all outbound Internet traffic to exit via Router-A, return traffic for its public prefix to enter via Router-A, with Router-B strictly backup. Which BGP attribute design should the designer apply for coordinated path preference?
- A large campus EIGRP network suffers SIA events and slow convergence because every remote site receives queries for every lost route, has many low-speed spoke routers, and needs to preserve optimal summarization at distribution. Which EIGRP query scoping design with stub routers and summarization best limits the impact?
- An enterprise has a central data-center core and six regional campuses that must limit link-state flooding, keep campus failures from destabilizing the core, and allow controlled route leaking for shared services. Which IS-IS level 1 versus level 2 design best creates a stable hierarchy?
- A school district must address 40 new point-to-point WAN links and 10 server farm subnets expecting up to 50 hosts each, public space is limited, and future growth must be supported without renumbering. Which VLSM planning choice avoids waste while preserving usability?
- A national retailer runs a single AS with 60 iBGP routers across four regions and full-mesh peering is becoming unmanageable. Leadership requires keeping one AS number, centralizing routing policy, and minimizing reconfiguration on every router. Which iBGP scaling approach should the designer select to meet these scaling goals?
- A regional hospital is refreshing core, distribution, and access switches and wants IPv6 end-to-end where possible. Printers and an old imaging system remain IPv4-only, and the team wants one operational model plus consistent ACLs and monitoring. Which native dual-stack design best meets the IPv6 migration requirement?
- A regional bank has OSPF Area 0 at headquarters, Area 10/20 at branches with 200 LAN prefixes, and a data-center router redistributing 300 acquired-company routes. Leadership wants smaller branch tables, faster convergence, and contained redistribution faults. Which OSPF summarization placement best meets the requirements?
- A regional bank runs EIGRP named mode with dual MPLS paths where the backup path has higher delay, wants loop-free unequal-cost sharing from feasible successors, and must keep metric calculation consistent. Which EIGRP metric and unequal-cost design achieves this load-sharing goal?
- A multinational enterprise has a registered global prefix, five large campuses, and plans for hundreds of VLANs, point-to-point links, and loopbacks with easy summarization and future growth. The team wants consistent subnetting without address scarcity. Which IPv6 prefix hierarchy with site and subnet sizing should the addressing plan adopt?
- A bank runs IS-IS with Level-1 access areas in each city and a Level-2 backbone, needing to limit Level-1 database size, advertise only a default plus summaries upward, and keep metrics comparable across old and new routers. Which IS-IS route leaking, summarization and metric design should the designer specify to meet scale and compatibility?
- A regional enterprise has two eBGP links from one border router to the same neighbor AS, one 1 Gbps and one 10 Gbps, and wants both links to carry traffic proportionally without manual route tuning. CPU and memory headroom is sufficient for extra paths. Which BGP load-sharing design should the designer select to achieve proportional use of these links?
- A hotel chain now offers IPv6-only guest Wi-Fi to simplify addressing, yet guests still need legacy IPv4-only booking and streaming sites. The design must require no client software and must preserve DNS behavior for address selection. Which IPv4/IPv6 translation at the boundary best fits this scenario?
- A large OSPF campus with 800 routers sees CPU spikes when access-layer links flap, flooding many transit LSAs and triggering repeated full SPF runs. The design must dampen churn while keeping loop-free convergence. Which OSPF scaling tuning with LSA throttling, SPF timers, and prefix suppression fits?
- A logistics IS-IS backbone flaps when warehouse links bounce, unauthenticated adjacencies were spoofed in a lab test, and LSP floods cause CPU spikes. Stability must improve without hiding real failures. Which IS-IS authentication and stability tuning approach should the designer specify for secure steady operation?
- A growing logistics firm has exhausted its 10.0.0.0/8 plan after acquisitions, with overlapping addresses, complex NAT on WAN edges, and new IoT networks demanding thousands of subnets. Leadership wants simpler routing and sustainable growth. Which private IPv4, NAT, and IPv6 strategy should the designer recommend for scalable expansion?
- A manufacturing campus runs EIGRP across 80 sites with flapping remote links causing core queries, needs encrypted neighbor authentication, and must limit query scope from unstable branches. Which EIGRP authentication and stability design best contains this query problem?
- A county government has 12 buildings aggregated by two distribution switches per region, with frequent moves and new subnets straining routing tables. The design must limit updates and simplify growth while preserving resiliency. Which hierarchical IPv4 plan best enables route summarization at distribution and region boundaries?
- A hospital campus redesign uses OSPF over Ethernet with redundant broadcast segments, point-to-point fiber links, and strict HIPAA adjacency spoofing concerns. Convergence must be fast and neighbor formation predictable. Which OSPF authentication and network type choice best fits the design?
- A regional healthcare system runs dual-stack IPv6 in its two data centers but leases an IPv4-only private WAN that the carrier will not upgrade this year. Radiology imaging must flow over IPv6 between the data centers with fixed endpoints, predictable routing, and simple packet captures for compliance audits. Which overlay tunneling approach for IPv6 across IPv4 infrastructure best meets these needs?
- A regional retailer has a hub router in Chicago with 180 EIGRP spokes across slow DSL links. Route flaps at one store cause SIA events and CPU spikes at the hub, and the design must keep spoke routing tables small while allowing spokes to reach headquarters only. Which EIGRP query-scoping design best contains queries and meets summarization needs?
- A regional bank connects a headquarters campus to 25 branches on one flat IS-IS domain today, with dual core routers linking to a data center backbone. Each branch becomes its own area and branches should hide their LAN prefixes from each other and forward inter-branch traffic through the cores. Which IS-IS level design achieves hierarchical scaling for this topology?
- A manufacturer has a backbone Area 0 and a remote plant in Area 10 with one ABR, low-memory routers, and flapping WAN prefixes causing churn. The plant must redistribute one local partner static route while hiding backbone interarea routes and outside externals. Which OSPF area type design gives stable, minimal tables with local redistribution?
- An enterprise runs IPv4 internally, is adding IPv6 for new buildings, and connects to a provider MPLS VPN that carries customer routes as VPNv4. Route policies must stay separate per protocol. Which BGP address-family design best supports this IPv4, IPv6, and VPN requirement?
- A large university runs IPv4 everywhere with modern switches, routers and Windows clients and wants to add IPv6 for research labs without tunneling or translation. The team can upgrade routing, DHCP, DNS and monitoring, but worries about doubling troubleshooting and security workload. Which native dual-stack design addresses its operational considerations?
- A regional retailer received 10.20.16.0/22 and must address 12 WAN point-to-point links plus four stores each needing a 120-host server VLAN while preserving space for growth. Which VLSM allocation prevents address waste on point-to-point and server links for this IPv4 plan?
- An enterprise OSPF domain has Area 5 with 200 branch subnets behind one ABR and a data-center ASBR redistributing 300 external routes. Tables are large and flaps in branches ripple into Area 0. Which OSPF summarization design at ABRs and ASBRs best improves stability and scale?
- A university links its main and research campuses with 10-Gbps fiber and a 2-Gbps microwave backup running EIGRP named mode. The design must use both paths in proportion to capacity, remain loop-free, and keep metrics stable during congestion. Which EIGRP named-mode metric design enables proportional unequal-cost load sharing?
- An enterprise received 2001:db8:1000::/40 from its RIR and must serve eight regional sites with room for growth, each site needing many user and data center subnets. The design standard is a uniform /64 for every VLAN and every router-to-router link. Which IPv6 allocation implements prefix hierarchy with /48 sites and /64 subnets for this enterprise?
- An enterprise IS-IS backbone connects four areas through Level 1-2 routers, with hundreds of branch LANs causing large Level 2 tables and suboptimal paths for shared services. Which IS-IS route leaking, summarization and metric style design stabilizes and optimizes inter-area routing?
- An enterprise dual-homed to two ISPs receives full BGP tables and must accept only its allocated aggregate, block bogons and overly specific prefixes, and drop routes with an unwanted transit AS in the path. Which basic BGP filtering design best enforces this policy requirement?
- A campus has thousands of IPv6-only IoT sensors that must reach an IPv4-only building management platform and public IPv4 DNS names, with no plan to dual-stack the sensors. The team needs automatic address synthesis and name resolution without per-device static mappings. Which translation design at the boundary fits, and which pairing applies?
- A bank backbone runs IS-IS with strict compliance requiring neighbor authentication, plus frequent access-layer flaps that trigger unwanted backbone SPF runs and slow convergence on link failures. Which IS-IS authentication and stability tuning approach secures and stabilizes this backbone?
- A regional bank connects 80 branches over private MPLS with frequent edge flaps and an audit finding of unauthenticated EIGRP updates. The design must verify every neighbor, contain query scope on flaps, and hide branch instability from the core. Which EIGRP stability and authentication design meets all three needs?
- A retail enterprise runs OSPF across 300 stores with a flapping IoT VLAN causing repeated SPF calculations and high CPU, plus hundreds of unneeded transit link addresses bloating the RIB. Convergence must stay fast for real failures while damping instability and hiding infrastructure prefixes. Which OSPF LSA throttling, SPF timer and prefix suppression design meets all requirements?
- A regional hospital group has 180 clinics using 10.0.0.0/16 with overlapping subnets from mergers, heavy NAT at each site, and a five-year plan to add 300 IoT subnets and direct cloud connectivity. Growth is blocked by address conflicts and NAT troubleshooting. Which addressing strategy best supports scalable growth with simplified routing?
- A regional bank is dual-homed to ISP-A as primary and ISP-B as backup with two border routers sharing iBGP. Outbound traffic from all internal sites must prefer ISP-A, while inbound Internet traffic should also prefer ISP-A without affecting internal router decisions. Which BGP path-preference attribute design best meets both requirements?
- A retailer has four regions with 30 stores each and dual distribution switches per region back to a campus core. Growth requires adding stores without renumbering and keeping core tables small. Which hierarchical IPv4 allocation enables clean route summarization at distribution boundaries?
- A national bank runs IS-IS across 120 routers with a core mesh and 25 branch areas that must stay isolated from core churn, hide branch prefixes, and allow controlled expansion without full mesh flooding. The architects need clear hierarchy. Which IS-IS level 1 versus level 2 design creates a stable hierarchy for this network?
- A university network will grow from 8 to 28 iBGP routers in one AS with multiple points of presence, and full-mesh peering is becoming operationally heavy with churn and configuration burden. Designers need stable loop-free scaling without splitting the AS or renumbering. Which iBGP scaling design for route reflectors and confederations best fits this requirement?
- A bank campus expands OSPF across new fiber links that include broadcast Ethernet segments and point-to-point dark fiber, with strict requirements to block spoofed adjacency formation and to reduce DR election delays on stable links. Which OSPF authentication and network type combination secures and stabilizes the design?
- A hospital has a central campus with data center external routes and 40 small clinics with single ABRs, stub routers and no local ASBRs, where clinic routers have limited memory and need minimal LSAs plus a default exit. Which OSPF multi-area design with area types best scales the clinics while preserving data center reachability?
- A retail chain has a single 10.20.0.0/16 block to number 80 point-to-point WAN links and 30 store server VLANs with up to 45 hosts each, and must reserve room for growth without requesting more space. The design must minimize waste on links while keeping server broadcast domains efficient. Which VLSM plan for point-to-point and server links best conserves addresses?
- An enterprise runs IPv4 Internet peering, new IPv6 internal reachability, and MPLS VPNs to isolate finance and engineering across the backbone, needing separate policy and next-hop handling per traffic class. A single BGP session per peer is preferred. Which BGP address family design supports IPv4, IPv6 and VPN isolation?
- An EIGRP WAN has 300 remote spokes behind slow links, with SIA events after core link flaps and excessive queries reaching every branch. Stability requires bounded query domains while keeping branch configs simple. Which EIGRP query-scoping design meets the stability requirement?
- A distribution design uses EIGRP over mixed 10G fiber and 1G backup links, requiring controlled use of the backup without equalizing path costs and simplified config across address families. Which EIGRP named mode design with metrics and load-sharing behavior satisfies the requirement?
- An e-commerce firm has two eBGP exit links from one border router to the same ISP, one 1 Gbps and one 400 Mbps, and needs both links to carry egress traffic roughly proportional to capacity without complex policies. Which BGP load-sharing design best achieves efficient use of unequal links?
- A bank plans IPv6 for 12 large sites with 300 VLANs each, needing aggregation at the WAN core and room for future sites and technologies. Which IPv6 prefix hierarchy with /48 sites and /64 subnets provides scalable allocation?
- A university runs multi-area OSPF with a backbone data center that redistributes Internet routes, while campus ABRs see hundreds of building /24s that churn during maintenance. The design must shrink tables and hide churn without hiding external policy. Which OSPF summarization at ABRs and ASBRs best achieves stable scaling?
- A retail IS-IS network has Level 1 stores, Level 2 core, excessive leaking causing large store tables, inconsistent metrics after migration, and need for 10 aggregate routes at borders. Stability is the goal. Which IS-IS route leaking, summarization and metric style combination best stabilizes this hierarchy?
Advanced Enterprise Campus Networks (25%) · 75 questions
- A university is deploying SD-Access across three buildings with 800 wired users. Endpoints must connect inside virtual networks, external and DC traffic must exit efficiently, and endpoint location must resolve centrally. Which SD-Access fabric role assignment best meets these requirements?
- A retailer connects three large campuses in a metro area, each with dual core routers and a requirement for sub-second convergence, clear failure domains, and summarized routes between sites. Links are dark fiber with ample bandwidth. Which multicampus Layer 3 topology design best satisfies fast convergence and containment?
- A two-building enterprise campus uses Cisco distribution switches as default gateways, and hosts in the same VLAN report one uplink idles while the other congests during peak backups. The manager requires active use of both gateways with automatic failover and prefers a Cisco-proprietary first-hop protocol. Which first-hop redundancy choice should the designer select to balance load and resilience?
- A hospital is deploying SD-Access with wireless infusion pumps roaming between floors, a fusion router to the data center, and a need for a central host database. The design must keep endpoints on the fabric while handling external connectivity and endpoint location. Which SD-Access fabric role assignment satisfies those needs?
- A university core uses dual-supervisor Catalyst switches carrying voice and research traffic that cannot tolerate control-plane resets during an active supervisor failure. The design requires continuous forwarding and peer routers to retain adjacencies. Which graceful restart and NSF/SSO mechanism best delivers hitless supervisor failover?
- A university core uses two chassis switches with dual supervisors and dual power, but failover testing shows brief gateway outages when the first-hop redundancy protocol reconverges. The design team wants deterministic gateway behavior and simpler spanning-tree topology without changing end-host addressing. Which platform abstraction approach removes the need for a separate first-hop redundancy protocol?
- A healthcare system deploys SD-Access across a hospital and two clinics, requiring wired endpoints to authenticate at access switches, reach servers in the data center, and resolve endpoint locations for roaming users. Which SD-Access fabric role assignment should the designer document for edge, border, and control plane functions?
- A logistics campus uses routed access with OSPF to distribution where voice and scanners need sub-second rerouting around a failed fiber link. Hello timers alone react too slowly and create false positives when tuned aggressively. Which BFD design for fast failure detection best satisfies rapid yet stable detection?
- A financial campus core with dual supervisors needs software upgrades and supervisor failures to occur without dropping BGP and OSPF adjacencies or interrupting trading traffic. The operations team requires continuous forwarding during control-plane switchover and peer cooperation for route recovery. Which high-availability mechanism enables hitless supervisor failover for routing protocols?
- A downtown headquarters has dual distribution switches with HSRP today, but failover tuning and dual control planes cause spanning-tree complexity. The refresh offers switch virtualization so the pair can operate as one logical node with one control plane. Which platform abstraction should the designer choose to simplify high availability and remove the FHRP need?
- A manufacturer built an SD-Access fabric where roaming scanners keep their IP addresses while moving between warehouses, but large video flows must stay on efficient paths. The design must use the native SD-Access control and data planes and separate endpoint location from packet forwarding. Which LISP control plane and VXLAN data plane interaction best delivers mobility?
- A retail chain deploys SD-Access across stores and needs endpoint mobility without changing IP addresses, plus large Layer 2 extension across the campus without flooding everywhere. Which statement correctly describes the LISP control plane and VXLAN data plane roles in that fabric?
- A large campus is migrating distribution-to-access links to Layer 3 with ECMP, but OSPF timers take over a second to detect neighbor loss, causing voice drops during fiber cuts. The team needs sub-second detection without excessive hello overhead and seamless integration with routing reconvergence. Which failure detection design accelerates recovery in this routed access network?
- A large campus core has dual supervisors per chassis and cannot tolerate multi-second outages or routing reconvergence during a supervisor switch, yet maintenance windows are shrinking. The design must keep forwarding and neighbor adjacencies intact across failover. Which high-availability mechanism should the designer select for hitless supervisor failover?
- A hospital campus expands to 12 buildings with 180 VLANs where a single spanning-tree instance causes large failure domains and suboptimal roots. Uplinks need deterministic forwarding and faster recovery. Which STP scalability and root placement design using RSTP versus MST best optimizes convergence?
- A healthcare system is choosing an SD-Access underlay for a new hospital with 1,500 ports, tight timelines, and a small operations team. The underlay must provide routed reachability for the fabric overlay with minimal manual tuning. Which underlay choice best balances automation and control?
- A university campus is deploying SD-Access across five buildings with mobile users who roam between switches. The design requires a single IP subnet to span sites, host mobility without changing IP addresses, and separation of endpoint identity from location. Which SD-Access fabric mechanism provides host tracking and mobility with overlay tunneling?
- A university is building a new 6-building campus with identical fiber links and no legacy routing to preserve, and the team wants Cisco Catalyst Center to discover switches and bring up the routed foundation with minimal CLI. Which underlay choice achieves rapid automated LAN provisioning for the SD-Access fabric?
- A university is moving residence halls to SD-Access, students roam between APs, IT wants wireless clients in the same fabric virtual networks as wired users, and operations must stay centralized. Which fabric wireless design role for Cisco Catalyst Center meets these mobility requirements?
- A 600-bed hospital is extending its SD-Access campus to clinical mobile carts that roam between floors. Policy must follow each wireless client, roaming must stay seamless inside the fabric, and IT wants centralized lifecycle control for switches, routers, and wireless. Which fabric wireless design aligns with Cisco Catalyst Center's role?
- A university campus has 80 access switches in one STP domain, experiences slow convergence and high BPDU load, needs deterministic root placement at the distribution layer and wants fewer instances than per-VLAN spanning tree. Which STP scalability and root placement design with RSTP versus MST best fits the requirement?
- A large campus uses routed access with dual EIGRP uplinks from each access switch to distribution, and video conferencing drops for seconds when a fiber fails because hello timers detect loss slowly. The links are point-to-point fiber with sub-second convergence required. Which BFD design for fast failure detection in routed access best meets the convergence goal?
- A university access layer has frequent student moves, unmanaged hubs causing unidirectional link issues, and edge ports taking 30 seconds to forward after reboots. Uplinks need sub-second failover without Layer 2 loops. Which fast-convergence design stabilizes edge access while preserving loop protection?
- A hospital network team is designing SD-Access underlay for a new campus with limited routing expertise, a greenfield IP transport need, and a desire for fast automated bring-up managed from the controller. The core must still allow custom MTU and protocols if needed later. Which underlay choice balances automation with future flexibility?
- A manufacturing floor has frequent endpoint moves, redundant uplinks from access to distribution, and a history of outages from accidental loops when contractors connect unmanaged switches. Which fast convergence design using PortFast, uplink equivalents and loop guard best balances speed and safety?
- A financial firm on SD-Access must separate retail banking, trading, and guest access, enforce distinct policies for contractors within banking, and keep segmentation scalable without adding VLANs per group. Which macrosegmentation approach with scalable groups meets these isolation needs?
- A university campus has 180 VLANs across five distribution blocks, slow convergence after uplink flaps, and heavy BPDU processing with PVST running a spanning tree per VLAN. CPU is high and root placement is inconsistent. Which STP scalability and root placement design using RSTP versus MST best stabilizes the campus?
- A resort expands SD-Access to outdoor pools and villas, needing wireless clients to roam without reauthentication, enforce the same segmentation as wired guests, and let staff provision SSIDs centrally. Which fabric wireless and Catalyst Center design should the designer propose for policy and automation?
- A hospital campus suffers STP reconvergence outages where a single distribution link failure isolates VLANs, and dual-homed servers flap during upgrades. Cabling cannot be fully recabled to routed links everywhere. Which loop-free campus design minimizes STP scope while keeping dual-homing resilience?
- A university campus must isolate student, faculty, research, and IoT traffic into separate policy domains while allowing granular access between labs and printers inside each domain. Which scalable group and virtual network design achieves macro- and microsegmentation together?
- An automotive supplier has a 4000-endpoint headquarters campus plus two factories that must keep switching locally if the WAN fails, keep OT and IT policies independent, and share only select VNs between locations while preserving SGT-based policy end to end. Which SD-Access fabric site design addresses multisite scale and transit needs?
- A university is refreshing 40 access closets with dual uplinks to distribution, 800 user ports for PCs and IP phones, and a history of outages when a fiber uplink flap caused loops. Edge ports must come up fast without waiting for STP, while uplinks must block loops if BPDUs stop arriving. Which Layer 2 convergence safeguard should the designer specify to satisfy fast edge bring-up and loop protection?
- A university is rebuilding a three-tier campus with 40 closets, VLANs confined to each closet, dual-homed access switches, and a mandate for no STP-blocked uplinks with subsecond failover using ECMP. Which loop-free campus topology best meets these routed-access goals?
- A manufacturer operates a headquarters plus three distant plants connected over private WAN. Each plant has local IT, unique security policy, 2,500 endpoints, and must survive WAN outages with local forwarding while sharing select services. Which SD-Access fabric site design handles autonomous sites with shared transit?
- A logistics company builds one SD-Access fabric in its headquarters with only two border routers, needing to hand off corporate VNs to its data center, provide Internet and MPLS exits, and advertise a default route into the fabric. Which border node design fits this consolidated edge requirement?
- A school refreshes 48-port access switches for classrooms with VoIP phones, 30W pan-tilt cameras, and PCs needing after-hours Wake-on-LAN from a management VLAN. Power circuits are limited and night power-save is desired. Which PoE budget and Wake-on-LAN switch design fits the constraints?
- A hospital SD-Access design must keep clinical devices, staff IT, and building automation strictly separated with distinct address pools and policies, while still allowing granular user roles within each area. Leadership wants minimal policy sprawl and clear macro boundaries. Which scalable group and virtual network approach should the designer propose for this segmentation goal?
- A hospital campus suffers STP reconvergence delays and blocked redundant links between access and core, requiring active-active uplinks, sub-second failover for imaging traffic, and no spanning-tree loops across buildings. Which loop-free campus topology should the designer specify to remove STP blocking while keeping redundancy?
- A university is refreshing a 48-port access floor for 28 PoE+ IP phones, 10 PoE+ cameras and 24 overnight PCs needing Wake-on-LAN after power outages. The design must power all endpoints concurrently, keep sleeping PCs reachable for magic packets, and restore power quickly after a switch reload. Which PoE budget and Wake-on-LAN switch design meets all requirements?
- A regional headquarters has 1,500 endpoints, an on-premises server farm with internal subnets, and a single Internet edge needing a default route. Only two high-end switches are budgeted for border duties and both must survive a single failure. Which border node design delivers internal and external connectivity on resilient devices?
- A financial trading floor adds unmanaged conference-room switches and public-facing kiosks, with risks of rogue STP roots, accidental loops, MAC flooding, and VLAN hopping. Strict uptime and auditability are required. Which Layer 2 security mix best hardens the access edge?
- A large campus SD-Access deployment will support 8000 endpoints, 40 virtual networks, roaming wireless users, and two data-center exits. The design must keep host tracking responsive and survive a node failure without fabric-wide outage. Which control plane node placement and scale approach should the designer recommend?
- A university runs a 4000-user main campus in Austin, a 500-user research park 40 km away with its own policy domain, and a small European office over Internet VPN with high latency. Each location must survive control-plane isolation while keeping consistent access policy. Which fabric site and transit design best meets scalability and survivability needs?
- A financial campus has open lobby ports, a strict core-as-root STP hierarchy, contractors plugging unmanaged switches, and a need to contain lateral traffic between departments. Which Layer 2 security control set best enforces this switched-access protection goal?
- A high school plans 48-port access switches for classrooms with 30 PoE phones and cameras per closet, future density growth, and nightly Wake-on-LAN to power lab PCs for patching. Budget limits power supplies and heat load matters. Which PoE and Wake-on-LAN design should the designer specify for reliable power and night operations?
- A regional hospital is deploying SD-Access across two buildings with an on-site data center hosting known EHR subnets and a separate internet and merger partner link with unknown routes. The design must keep internal subnet handoff separate from default-route internet handoff for policy control. Which border node design supports this internal and external separation requirement?
- A university with 6,000 endpoints plans a two-site SD-Access fabric with redundant border and edge nodes, requiring fast endpoint roaming and resilient host tracking database lookups if a site link fails. Which control plane node placement supports resilient host tracking for this SD-Access fabric design?
- A university has two large campus blocks linked to a routed core over dual 10G fibers. The design must keep sub-second failure detection, use both links for traffic at all times, and avoid spanning-tree or FHRP dependency between blocks. Which convergence and load-sharing design best meets these inter-block requirements?
- Two university campus blocks connect over diverse 10G routed links with similar delay, carrying voice and research traffic that must survive a single fiber cut in under a second and use both links. Which convergence and load-sharing design between campus blocks best meets both resiliency and utilization?
- A university opens library study halls where students plug personal switches into wall jacks. The network team reports rogue STP elections, MAC flooding alarms, and a need to block lateral worm traffic between infected laptops in the same VLAN without changing the IP gateway. Which Layer 2 security design best addresses rogue STP and intra-VLAN threats?
- A hospital is adding SD-Access in a building with an existing autonomous wireless controller, strict medical-device roaming requirements, and a desire to keep current APs and controller config while phasing fabric migration. Which wireless integration trade-off guides the choice between over-the-top and fabric wireless for this phased rollout?
- A healthcare campus plans SD-Access for 400 edge switches and 8000 endpoints across a main hospital and two clinics, with redundant data centers and strict uptime for clinical devices. Latency is low, but control signaling must survive a data center loss without re-architecting, and control plane load must be isolated from border forwarding. Which control plane node placement and scale approach meets these resilience needs?
- A university research park uses SD-Access to send lab telemetry multicast to receivers on only four edge nodes a few times per day, with no PIM in the underlay and a desire to avoid enabling multicast routing there. Which multicast-in-fabric design suits this sparse, low-scale requirement?
- A three-campus enterprise sees OSPF instability because every access VLAN is advertised across the core, exposing failures and inflating tables. The design must hide access specifics, advertise only aggregates between campuses, and block rogue routes at borders. Which summarization and filtering design best meets this boundary requirement?
- A manufacturing campus runs SD-Access fabric for wired policy and must add Wi-Fi in warehouses with roaming handled by the existing controllers, fabric policy for corporate SSIDs, and minimal new WLC integration work. Which wireless integration choice balances over-the-top versus fabric wireless trade-offs for this campus?
- A retailer connects three regional campuses to a core over Layer 3, sees full /24 churn from stores leaking everywhere, and needs smaller tables plus loop-free regional isolation. Which route summarization and filtering design at campus boundaries best stabilizes the core?
- A retail chain links two campus blocks via dual Layer 3 core switches with equal fiber paths. Requirements demand subsecond failover if a core link drops, active use of both uplinks for throughput, and no STP dependency between blocks. Which multicampus Layer 3 convergence and load-sharing design best meets resilience goals?
- A hospital group must keep clinical, guest, and research traffic isolated across two campuses with common switches and a shared WAN, while allowing controlled guest Internet breakout only. Which VRF segmentation design best meets this multi-campus isolation requirement?
- A stadium with 15,000 fans needs efficient IPTV delivery in an SD-Access fabric where the zones are separate fabric sites, some of which lack underlay multicast support, and RP reachability varies by zone. Which multicast design chooses head-end versus native forwarding for this fabric?
- A convention center has high-density auditoriums needing seamless roaming and location analytics, plus historic halls where controllers cannot be rewired and guest turnover is extreme. Budget favors reuse where possible but performance cannot suffer in auditoriums. Which wireless choice weighs over-the-top versus fabric wireless trade-offs?
- A university distribution block has two Layer 3 switches serving 400 wired hosts in one VLAN, both with equal-cost uplinks to the core. The design requires automatic gateway failover, continued use of both uplinks during normal operation, and no host-side changes. Which first-hop redundancy choice meets the load-sharing requirement?
- A university has three large campuses linked over Layer 3 cores with OSPF, and a link flap in one building currently floods LSAs everywhere and destabilizes all campuses. Each campus must hide internal topology and advertise only aggregates while blocking rogue subnets at borders. Which route summarization and filtering design best stabilizes the multicampus boundaries?
- A healthcare group connects three campuses over MPLS with shared IT services in the data center. Guest traffic must stay isolated, clinical devices need separate routing tables, and shared services require controlled leaking between tables. Which VRF design achieves campus segmentation with shared services access?
- A university distribution block has two Catalyst gateways serving 800 hosts in one VLAN, requiring subsecond failover and active load sharing across both uplinks. Multivendor firewalls in the VLAN act only as hosts using the virtual gateway address, so only the Catalyst pair participates in first-hop redundancy. Which first-hop redundancy choice best balances load sharing and failover for this VLAN?
- A university SD-Access fabric delivers lecture video to many buildings, with large numbers of concurrent receivers spread across most fabric edge nodes. The routed underlay supports multicast with PIM-SSM, and the design must offload packet replication from the fabric edge and border nodes. Which SD-Access multicast design should the designer choose?
- Two campuses merge after an acquisition, with OSPF on one side and EIGRP on the other, plus two mutual redistribution points for resilience that already created a routing loop for shared data center prefixes. Metrics are incompatible and filtering is absent. Which redistribution design prevents loops while preserving backup paths?
- A two-tier campus core uses two Catalyst chassis with dual 40G interconnects, requiring sub-second gateway and link failover for 1,000 users without tuning FHRP timers. Complexity and dual control planes must be reduced. Which platform abstraction choice removes the need for an FHRP in this design?
- Two hospital campuses connect via a shared WAN where Campus-A runs OSPF and Campus-B runs EIGRP, with mutual redistribution planned on two border routers for resilience. Designers fear loops and suboptimal paths when prefixes are learned from both sides. Which redistribution design best prevents loops while preserving metrics and filtering?
- A manufacturing enterprise has corporate, guest and building-automation traffic across two campuses that must stay segmented end to end with isolated routing tables, controlled route leaking only at a shared firewall, and scalable expansion to a third campus. Which VRF design for segmentation across campuses best meets isolation and growth needs?
- A retail chain will interconnect four large multicampus sites across a metro area requiring subsecond failover, bounded latency for voice, and clean summarization boundaries as new stores are added. Existing daisy-chained links cause cascading outages and unpredictable hop counts. Which multicampus Layer 3 interconnect topology best meets resilience and scaling needs?
- A campus core with dual supervisors must survive a supervisor switchover without dropping OSPF and BGP neighbors or triggering reconvergence during business hours. Stateful failover and protocol continuity are mandatory. Which graceful restart with NSF and SSO design meets the hitless failover requirement?
- A hospital merged networks where Campus A runs OSPF and Building B runs EIGRP, with two distribution switches doing mutual redistribution that recently caused route feedback, suboptimal paths and flapping. Metrics must translate sensibly and loops must be prevented while keeping both protocols. Which redistribution design with loops, metrics and filtering best stabilizes the boundary?
- A manufacturing campus uses all-Cisco Catalyst distribution pairs for office VLANs where one uplink idles in standby, and wired phones need deterministic gateway failover without host changes or multivendor support. Hosts within every VLAN should be spread across both switches behind one virtual IP per VLAN, and tuning for subsecond timers is approved. Which first-hop redundancy choice balances load sharing and simplicity?
- A manufacturing enterprise links four campuses in a metro area with latency-sensitive automation, requiring two-hour repair tolerance, balanced hop counts, and room to add two more sites without redesign. A single hub creates congestion and fate sharing. Which multi-campus interconnect topology optimizes resilience and scale?
- A two-tier campus has dual distribution switches per closet with HSRP timers tuned, but failover still causes voice gaps and STP complexity. Budget allows chassis consolidation. Which platform abstraction choice using StackWise or VSS best simplifies high availability and gateway handling?
WAN for Enterprise Networks (20%) · 60 questions
- A regional bank branch has primary MPLS and backup Internet VPN with a floating static route. The business needs sub-second failure detection on the primary path and automatic failover only when the remote data-center prefix becomes unreachable. Which backup connectivity and failover trigger design meets both timing and reachability goals?
- A regional bank connects two data centers 80 km apart with sustained 40 Gbps replication, low latency, and full control of encryption keys. It leases dark fiber and needs deterministic performance without sharing bandwidth. Which DWDM-based leased optical connectivity use case best fits these requirements?
- A retailer is rolling out 200 SD-WAN branches with zero-touch onboarding, centralized templates and monitoring, secure device authentication, and distributed routing decisions. Which mapping of Cisco SD-WAN orchestration, management, control and data plane functions achieves this design?
- A retail chain with 40 stores needs any-to-any inventory traffic between stores and two data centers, plus a separate low-latency point-to-point link for payment processing between the primary data center and a bank cage. The carrier offers Metro Ethernet services with different forwarding and isolation options. Which Metro Ethernet design best fits these connectivity requirements?
- A retail chain is adding 40 small stores and wants the provider to carry routing between sites so the small IT team avoids managing a full mesh of tunnels or a large enterprise routing domain. Overlapping private addresses are not required, but simple adds and provider-managed path selection matter. Which WAN service should the designer recommend to meet the routing ownership and scaling need?
- A retailer dual-homes its headquarters to ISP-A and ISP-B with its own public /22, hosting e-commerce that must stay reachable if one ISP fails. Management wants outbound browsing to prefer ISP-A and inbound customers to enter via ISP-A when healthy. Which BGP multihoming path-control design should the designer propose for inbound and outbound preference?
- A city government needs to connect five downtown offices in one bridged domain for legacy applications, plus a separate isolated point-to-point link for data-center replication between two sites. Carrier offerings list E-Line and E-LAN options. Which Metro Ethernet design should the designer select to satisfy both connectivity patterns?
- A port operator runs primary fiber to a terminal and a 5G backup, needing sub-second detection of gateway loss to trigger floating static failover, but must ignore momentary jitter that causes flapping. Which backup connectivity and failover trigger design should the designer propose for fast yet stable detection?
- A utility operates remote substations where trenching fiber is cost-prohibitive and wired outages last days. Sites need backup connectivity for SCADA telemetry and occasional primary use for new locations. Which 4G/5G transport design as primary or backup best meets resilient requirements?
- A research university needs to transport 200 Gbps between two campuses 60 km apart for genomics replication, with strict loss and latency budgets, dedicated fiber control, and future growth to 400 Gbps. Carrier packet services cannot guarantee the optical performance and upgrade path required. Which optical connectivity approach best satisfies capacity and control needs?
- A logistics company is rolling out 60 SD-WAN branches with zero-touch provisioning, centralized configuration, loop-free route distribution, and encrypted site-to-site transport. The design must assign each task to the right plane. Which SD-WAN function mapping correctly places orchestration, management, control and data duties?
- An energy company must onboard 120 remote substations with limited local IT skills, strict certificate-based identity, and staged rollout by region. Templates should minimize per-site CLI. Which SD-WAN onboarding and provisioning approach best meets rapid secure deployment?
- A regional bank connects two data centers 70 km apart and needs 40 Gbps of low-latency replication, full control of encryption keys, and capacity to add wavelengths later without ordering new carrier circuits. The carrier offers dark fiber between sites and managed MPLS VPN. Which DWDM connectivity approach best meets the low-latency scaling requirement?
- A retailer with 80 stores is evaluating Cisco SD-WAN to replace costly MPLS, payment data must stay encrypted across broadband, stores need basic Internet protection, and IT wants integrated threat functions without adding appliances. Which SD-WAN built-in security capability best addresses this distributed retail need?
- A retail chain with 40 small stores needs backup connectivity for POS traffic when wired broadband fails, has limited IT staff, requires rapid deployment, and must maintain encrypted transport over the carrier network. Which WAN connectivity design using 4G/5G best meets the resiliency requirement?
- A retail chain with 200 stores is planning Cisco SD-WAN and the architect must assign Validator for initial authentication, Manager for configuration, Controller for route distribution, and WAN Edge for forwarding. The rollout needs zero-touch onboarding and centralized policy. Which SD-WAN plane assignment correctly aligns each component with its primary function?
- An enterprise has a headquarters campus, three large hybrid branches needing voice and ERP, plus small sales offices and bursty cloud analytics. Budget is tight and MPLS renewals are expensive. Which WAN connectivity selection balances performance, cost, and cloud agility across on-premises, hybrid, and cloud sites?
- A retailer must bring up 80 new branch SD-WAN routers with limited on-site skill, centralized templates, and secure identity verification before they join the overlay. Which SD-WAN onboarding and provisioning approach meets zero-touch deployment with authentication requirements?
- A retail chain with 120 small stores needs connectivity where wired broadband takes 60 days to install, POS traffic is low bandwidth but critical, and outages must fail over automatically with centralized policy. Which 4G/5G transport design as primary or backup best meets the retail requirement?
- A logistics company must onboard 150 WAN Edge routers to Cisco SD-WAN with minimal site visits, strict serial-number authorization, and centralized templates applied after authentication. Some sites sit behind NAT with no public reachability. Which SD-WAN onboarding and provisioning approach meets zero-touch, authorization, and NAT needs?
- A multinational manufacturer has factories in three continents, most traffic flows to two regional data centers, inter-factory traffic is rare, and IT wants simple control with predictable failover. Which SD-WAN control plane and overlay design best matches this traffic pattern?
- A logistics company runs DMVPN over broadband with a hub in each region and 200 spokes needing direct spoke-to-spoke voice without hairpinning through hubs. Future summarization at hubs is planned. Which DMVPN phase design provides spoke-to-spoke behavior with route summarization support?
- A bank is adopting SD-WAN across branches and must ensure controller authentication, encrypted overlay traffic, and integrity validation even if underlay networks are untrusted. Which SD-WAN built-in security design provides control, data, and device protection together?
- An enterprise runs a headquarters data center, two regional hubs, and new SaaS-heavy branches that need direct cloud access with low latency, while legacy client-server apps remain centralized and require predictable performance. Which WAN connectivity design for on-premises, hybrid and cloud sites best balances the needs?
- A bank is designing Cisco SD-WAN for 80 branches over public internet to carry cardholder data, requiring authenticated devices, encrypted transport, and isolated payment traffic from guest traffic. The board wants native overlay protections before adding perimeter firewalls. Which built-in SD-WAN security capability should the designer specify to satisfy these transport needs?
- A retailer has a hub in Dallas and 120 small stores needing direct voice traffic between stores, dynamic spoke addresses on broadband, and no permanent spoke-to-spoke tunnels to save router memory. Which DMVPN phase and spoke-to-spoke behavior best fits these dynamic-mesh requirements?
- A retailer connects 40 stores to headquarters over the Internet, needing EIGRP routing updates and multicast inventory feeds over encrypted paths while accepting extra overhead. A second project needs simple site-to-site encryption for unicast file transfer only. Which IPsec versus GRE-over-IPsec tradeoff guides the design?
- A retailer has a headquarters data center, 30 branch stores needing direct cloud SaaS access, and a new AWS-hosted inventory app that must scale for holiday bursts. Branches suffer backhaul delay, the data center needs stable high capacity, and cloud workloads must burst without new circuits. Which WAN connectivity mix should the designer recommend for on-premises, hybrid and cloud needs?
- A 300-user branch uses two Cisco SD-WAN routers sharing one LAN switch block, with voice, data, and guest VLANs, dual Internet transports, and a need for seamless gateway failover without host reconfiguration. Routing must stay simple and loop-free toward the overlay. Which LAN-side design with VRRP and routing should the designer select?
- A global manufacturer has headquarters in Chicago, regional hubs in London and Singapore, and 150 branches needing direct branch-to-branch collaboration, including between branches in different regions. Leadership wants resilient control, localized breakouts, and efficient overlay paths without hairpinning everything. Which SD-WAN control-plane and overlay design best fits these considerations?
- A retailer plans SD-WAN for 500 stores with dual transports per store, centralized policy, and no single failure taking down management or overlay establishment. Growth to 1000 sites is expected within two years. Which SD-WAN high availability and scale design should the architect propose to sustain resilient growth?
- A bank runs a private MPLS core to 60 branches with low-latency voice needing any-to-any encryption without per-tunnel overhead and centralized key policy. Internet backhaul is prohibited for this traffic. Which GET VPN group key model fits the private transport requirement?
- A retail bank is adding SD-WAN routers in parallel to existing branch routers at 80 sites. Tellers need sub-second failover between LAN gateways, and branch prefixes must fail over without redistribution loops. Which LAN-side design at SD-WAN sites meets these routing needs?
- A logistics firm connects two data centers over the Internet, needs encrypted voice plus dynamic routing with multicast for RP discovery, and must minimize overhead for small packets. Which IPsec versus GRE-over-IPsec tradeoff best meets this secure transport need?
- A multinational has headquarters in three continents, each with dual data centers and hundreds of branches that mostly access regional resources but occasionally need inter-region collaboration. The WAN must limit control overhead, keep latency low, and avoid hairpinning all traffic centrally. Which SD-WAN control-plane and overlay design should the designer propose for these regional traffic patterns?
- A manufacturer with 80 spokes on DMVPN needs hub-routed traffic today but wants direct spoke-to-spoke voice for new plants without permanent full mesh, using multipoint GRE and NHRP. Which DMVPN phase behavior should the designer specify to enable on-demand direct spoke tunnels?
- A retail chain with 120 stores needs any-to-any inventory traffic with provider-managed routing, guaranteed latency, and isolation from Internet threats. The provider offers MPLS L3VPN and the team also considered Internet IPsec overlay. Which enterprise VPN choice best fits this MPLS versus overlay requirement?
- A bank runs any-to-any voice between branches over private MPLS, must encrypt without new tunnel headers or routing changes, and needs scalable rekey to all encryptors at once. Which site-to-site VPN group key design fits the private transport constraint?
- A manufacturing firm connects a Detroit plant to a Monterrey plant over the public internet. Engineers must carry EIGRP routing updates plus legacy non-IP protocols for shop-floor controllers, while security mandates encrypted transport for all inter-site traffic. Which site-to-site VPN tradeoff decision correctly balances multiprotocol support with encryption overhead?
- A regional retail chain connects 45 stores with Cisco SD-WAN over broadband and LTE using centralized control and IPsec overlay tunnels. Stores need prioritized voice for POS support, fair sharing for inventory and guest Wi-Fi, and weekly training video that headquarters sources as IP multicast. Underlay loss and latency vary by site. Which SD-WAN QoS and multicast design consideration best fits this fabric?
- A retail chain is deploying SD-WAN at 80 stores, each with two edge routers connecting to a single LAN switch stack for POS and staff VLANs. The stores need sub-second gateway failover without routing flaps, plus loop-free handoff toward the overlay. Which LAN-side design using VRRP and routing best fits these store requirements?
- A national logistics firm with 250 branches needs dual-transport SD-WAN with no single controller failure isolating sites and room to add 150 more sites without redesign. Which SD-WAN high availability and scale design meets dual-transport redundancy for these branches?
- A bank operates 60 MPLS branches carrying voice that cannot tolerate tunnel overhead or added latency. Security policy requires any-to-any encryption without spoke-to-hub tunnels, and the WAN provider guarantees no packets ever traverse the public internet. Which GET VPN group key design best satisfies low-overhead encryption over trusted private transport?
- A logistics firm with 60 sites on private carrier links needs isolated routing for voice, inventory, and guest, wants the carrier to manage VPN membership and QoS, and lacks staff to run overlay tunnels. Which enterprise VPN design best matches private transport and outsourcing?
- A branch clinic depends on a single router and ISP link for telehealth and loses all connectivity during any access failure. The redesign must survive a device, link, or provider failure without extending fate-sharing. Which high-availability branch design best limits this failure-domain requirement?
- A media company connects three studios over SD-WAN and must prioritize live video, limit file-transfer bandwidth during shows, and deliver one-to-many streams efficiently across the overlay. Which SD-WAN QoS and multicast design serves prioritized video over the fabric for these studios?
- A logistics firm with 80 sites wants any-to-any connectivity, minimal internal routing burden, and easy addition of new warehouses without reconfiguring every router. The carrier offers point-to-point Ethernet and a shared MPLS backbone with per-customer tables. Which WAN service choice best addresses routing ownership and scaling for this growth?
- A bank is rolling SD-WAN to 300 branches with dual transports, needing controller survival during outages, deterministic failover for edge tunnels and a clear plan for device and site growth. The design must avoid single points of failure without oversubscribing control capacity. Which high availability, redundancy and scale approach fits?
- A regional bank connects a headquarters and five branches in one metro area, requiring any-to-any Layer 2 connectivity for clustered servers and seamless VLAN extension. The carrier offers E-Line and E-LAN services with strict storm-control needs. Which Metro Ethernet service type fits the multipoint bridging requirement?
- A bank with 120 branches needs any-to-any connectivity and strict traffic separation for branches and partners, and security policy mandates customer-controlled end-to-end encryption and direct Internet backup. The carrier offers a managed MPLS L3VPN with its own routing and no encryption. Which enterprise VPN comparison best guides the choice between MPLS L3VPN and overlay VPN?
- A manufacturer connects its data center to two different ISPs for high availability and must keep voice and ERP outbound on the low-latency ISP during normal operation while allowing inbound customers to reach its public prefix through either ISP if one fails. Which multihomed BGP inbound and outbound path control design provides resilient high availability?
- A manufacturer uses Cisco SD-WAN across MPLS and Internet underlays with voice, ERP, and regional video feeds needing prioritization and efficient delivery. Which QoS and multicast design suits traffic treatment over the SD-WAN fabric?
- A retail chain has 80 small stores on a single ISP link with LTE backup, while two distribution centers use two ISPs and dual routers to sustain outages and maintenance. Store outages remain isolated but cost must stay low. Which WAN resilience comparison guides single-homed versus dual-homed branch design for failure domains?
- A logistics firm with 60 sites needs any-to-any branch routing, centralized Internet breakout, and minimal in-house routing operations. The carrier offers a managed MPLS Layer 3 VPN and a Layer 2 VPLS service. Scale and staffing drive the decision. Which WAN choice correctly reflects routing ownership and scaling for this enterprise?
- A city government must connect a data center to three service yards for a shared permit system needing multipoint bridging, plus a separate point-to-point backup link for nightly replication between two sites. The carrier proposes Metro Ethernet options. Which Metro Ethernet service design fits the bridging and point-to-point needs?
- A regional retailer has 60 small branches with one MPLS link and one router, where a recent carrier cut isolated six stores for hours and the business now wants bounded failure domains and sub-minute recovery for high-revenue sites while keeping small sites cheap. Which single-homed versus dual-homed branch design best balances resilience and cost?
- A healthcare system must interconnect two data centers 80 km apart with sustained 100 Gbps encrypted replication, deterministic latency, and full control of wavelengths for future growth. Packet services share fate and oversubscribe at peak. Which DWDM and leased optical design choice addresses the capacity requirement?
- A branch office uses a primary MPLS path and a backup Internet VPN with dynamic routing, and tellers cannot tolerate long blackholes when the primary degrades silently without interface down. Designers need fast failure detection and automatic path switchover. Which backup connectivity and failover trigger design best meets availability needs?
- A regional headquarters multihomes to two ISPs with its own public ASN, needing primary outbound use of ISP-A and inbound preference for critical application prefixes via ISP-A while keeping ISP-B as backup without causing transit between providers. Which BGP path control design balances inbound and outbound traffic?
- A logistics firm with 60 sites needs any-to-any connectivity, fast new-site turn-up, and minimal in-house routing operations while retaining control of internal address planning. Which Layer 2 VPN versus MPLS Layer 3 VPN choice fits routing ownership and scaling?
Network Services (20%) · 60 questions
- A regional hospital runs an eight-class enterprise QoS model with voice, video, clinical apps, and bulk backup, but its MPLS provider supports only four classes with DSCP-based ingress policing that re-marks out-of-profile traffic. Voice must stay priority and clinical apps must beat bulk backup after handoff. Which enterprise-to-provider mapping approach preserves intent across the WAN?
- A regional hospital campus supports 3,000 endpoints with voice, video, and data sharing a converged core, and ICU phones need low latency during congestion without tracking every call across the network. The design must scale simply as new clinics are added next year. Which QoS model should the designer select to meet the scalability requirement?
- A university campus supports 8,000 endpoints with voice, video and bulk data across many switches, and IT staff want scalable classification without per-flow signaling or reserved bandwidth on every hop. A small telepresence suite needs guaranteed admission in one building. Which QoS model choice best fits the campus-wide scale requirement?
- A regional bank streams market data via PIM sparse-mode to trading floors in three sites. During failover testing, a core router receives the same source packet on two interfaces and designers worry about a routing loop amplifying traffic. Which RPF check behavior should the designer validate to ensure loop-free multicast forwarding?
- A manufacturing firm uses six campus QoS classes for voice, interactive video, plant control, transactional data, bulk transfer, and scavenger traffic. Its new MPLS provider supports only a three-class model with fixed DSCP for real-time, business-critical, and default, and re-marks nonconforming values. The firm must keep voice latency low and protect control transactions without starving default. Which enterprise-to-SP DSCP aggregation strategy best preserves the end-to-end QoS policy intent?
- An enterprise video team reports duplicate multicast streams looping between two distribution routers during a PIM deployment with redundant paths. Engineers need loop-free forwarding without relying on TTL. Which RPF check behavior for multicast loop prevention should they validate in the design?
- A call center migrates to IP telephony with voice bearer, interactive video, transactional CRM and best-effort browsing sharing a congested WAN. The design must guarantee low latency for voice, assured forwarding for video and CRM, and fair treatment for browsing. Which PHB mapping meets those traffic-class requirements?
- A financial firm is redesigning management access for 150 branches where configuration backups cross the production WAN, auditors demand access during outages, and budget limits extra circuits. Which in-band versus out-of-band management trade-off best guides the design decision?
- A hospital network must support remote monitoring, configuration backup, and emergency access during a major routing outage that saturates production links. Clinical systems cannot tolerate management traffic competing with patient data, and auditors require isolated administrative paths for privileged access. Which network management design best meets resilience and isolation needs?
- A state university runs PIM sparse-mode for lecture capture across a main campus and two remote sites, needing automatic RP failover without manual config on every router and without depending on a single advertisement source. Which rendezvous point discovery design should the designer choose for resilient operation?
- A media company deploys PIM-SM across campus and WAN with many new groups weekly and no tolerance for single Auto-RP mapping failure. Engineers need dynamic discovery with resilience. Which rendezvous point discovery method using static, Auto-RP, or BSR best provides scalable redundancy?
- An insurance contact center runs voice, interactive video, call signaling, and bulk backup over a congested WAN, and agents complain of choppy audio during nightly backups. The design must protect voice latency, prioritize video, and relegate backups to leftover best-effort bandwidth. Which traffic-class to PHB mapping should the designer select to meet the QoS requirements?
- A 1200-user manufacturing campus connects Cisco phones with PCs daisy-chained behind them, plus guest laptops and printers in the same closets, and voice quality suffers when users copy large files. Which classification and marking approach establishes a correct trust boundary for end-to-end QoS?
- A hospital is redesigning management access for switches, wireless controllers and firewalls, must separate clinical traffic from management, restrict administrator access by role, and ensure management remains reachable during congestion or link failure. Which segmented management network and secure management plane design should be selected?
- A hospital campus deploys IP phones that mark voice with DSCP EF, user PCs daisy-chained through phones, and wireless guest traffic arriving at access switches. Nurses report choppy voice during backup windows and guest bursts. Which classification and marking design at the trust boundary best protects voice quality?
- A financial firm streams market data from two well-known sources to 500 trading desks. Requirements are one-to-many delivery without shared-tree complexity, receivers specify the exact source they want, and bandwidth is saved by dropping unwanted sources. Which multicast design supports explicit source selection by receivers?
- A seaport terminal operator runs 120 switches and routers across piers and warehouses on one campus core. Operations requires SSH and SNMP to stay reachable during a broadcast storm, syslog to never mix with cargo Wi-Fi, and TACACS+ authentication for all device logins. Which secure management plane design meets all three needs?
- A financial firm streams market data from a single well-known source to hundreds of trading desks that must explicitly request that source, with minimal RP setup and no shared-tree overhead. Receivers run modern stacks supporting source filtering. Which multicast design serves this source-specific multicast use case with IGMPv3?
- A regional office connects to an MPLS provider with a 100-Mbps contracted rate but a 1-Gbps physical handoff, and voice suffers drops during bursts while the provider discards out-of-profile traffic. Which WAN edge and handoff design controls bursts while preserving priority traffic?
- A hospital network carries life-critical monitoring alongside SNMP, syslog, and backup traffic, management sessions drop during congestion, and auditors require reliable device visibility at all times. Which QoS treatment for network management traffic ensures resilient monitoring?
- A global bank runs trader voice squawk boxes where every desk both sends and receives bursty group traffic, creating many senders, sparse receivers, and heavy source-registration churn with PIM-SM. How should bidirectional PIM be designed for this many-to-many application?
- A national broadcaster reports lost SNMP polls and delayed syslog during prime-time congestion on congested WAN edge links, while video contribution traffic dominates bandwidth and management sessions compete as best effort. Which design for prioritizing network management traffic with QoS restores reliable telemetry?
- A branch has a 200 Mbps Ethernet handoff but contracts a 50 Mbps MPLS CIR, and bulk file transfers are dropping interactive voice during peaks because excess traffic is discarded at the provider edge. Which shaping versus policing design at the WAN edge and provider handoff best protects voice?
- A university wants to deploy interactive virtual classrooms with hundreds of senders and receivers exchanging video across all campuses without heavy source-specific state. The design must minimize multicast state, avoid per-source trees, and use a shared root for all flows. Which PIM design best supports many-to-many communication?
- A university streams lectures in two PIM-SM domains joined over an inter-domain link, requiring local RP failover in each campus and shared active sources across domains without a single global RP. Which MSDP and anycast RP design supports RP redundancy and inter-domain sourcing?
- An enterprise video team streams quarterly town halls from one data-center source to 400 branch receivers, with sparse participation between events and a need for efficient paths during streams. PIM sparse mode with a rendezvous point is deployed. Which PIM sparse mode operation with source and shared trees should the designer describe to meet efficient delivery?
- A 500-seat contact center runs voice, video meetings, and bulk CRM sync over a 200-Mbps WAN that congests at quarter-end. Voice needs strict low delay, video needs guaranteed bandwidth without starving data, and TCP bulk traffic needs early drops before queues fill. Which queuing and congestion-avoidance combination should the designer specify for the WAN edge?
- A 2,000-seat contact center runs voice, agent video, and bulk data backups over a congested 1-Gbps WAN edge. Voice needs strict latency bounds, video needs guaranteed bandwidth, and backups must not starve during bursts. Which queuing and congestion-avoidance design meets the end-to-end QoS policy goal?
- A university runs PIM-SM in two campuses with separate RPs and needs RP redundancy inside each campus plus discovery of active multicast sources between campuses for inter-domain streaming. Failover must be automatic without static RP reconfiguration. Which RP redundancy and inter-domain design should the designer choose for this multicast requirement?
- A media company streams one-to-many 4K video to 500 branch receivers with bursty joins, needs shortest-path forwarding after discovery, and must limit initial flood. Which source-tree versus shared-tree PIM sparse-mode design best satisfies this multicast distribution requirement?
- A global enterprise with 500 sites needs voice, video, and bulk data treatment across a large MPLS core, with thousands of flows per second and no per-flow signaling overhead on core routers. A small telehealth pilot separately needs strict per-flow admission control. Which QoS model choice should the designer recommend for the large enterprise core to meet its scaling need?
- A service provider multicast network sees duplicate packets looping after a new link turned up, with PIM neighbors established on parallel paths toward the source. Which RPF-check multicast loop-prevention behavior best explains the correct forwarding decision on each router?
- An enterprise with an 8-class campus QoS model buys an MPLS VPN that offers only four provider classes with DSCP remarking at the PE. Voice must stay low-latency, video must not mix with bulk data, and markings must survive across the WAN. Which enterprise-to-provider mapping strategy should the designer specify for consistent end-to-end treatment?
- A global enterprise carries voice, video, and bulk data across a 500-site WAN needing scalable class-based treatment without per-flow setup, while two data-center clusters need guaranteed bandwidth for replication. Which DiffServ versus IntServ with RSVP design meets the scale properties?
- A regional health system marks voice, video, clinical apps, general data, and scavenger traffic internally, but its MPLS provider offers only strict-priority voice, business-critical, and default classes. Traffic must keep low latency for voice across the WAN without starving other apps. Which enterprise-to-provider QoS mapping preserves voice while fitting the provider class model?
- A financial campus uses PIM sparse mode for market data, but engineers see duplicate packets and intermittent loops after a unicast routing change altered path costs. Multicast now arrives on an unexpected router interface. Which RPF check behavior should the designer verify to restore loop-free forwarding?
- A 400-bed hospital needs to monitor switches and collect NetFlow during normal operations but must still reach device consoles when a core routing fault isolates production VLANs. Which management access design addresses in-band versus out-of-band trade-offs for this hospital network?
- A financial firm runs voice trading turrets, interactive video, transactional trading apps and bulk file replication over a congested WAN. Voice needs minimal delay and loss, video needs assured bandwidth, trading needs better-than-best-effort assurance, and replication can use spare capacity. Which PHB mapping strategy correctly reflects EF, AF, CS and default behavior?
- A university with mixed Cisco and third-party routers needs dynamic rendezvous point election across a new multivendor multicast core, with no manual RP addresses on every router and resilience if the primary candidate fails. Which rendezvous point discovery method supports multivendor dynamic election for this network?
- A 40-person startup manages six switches and two routers with no separate management cabling budget. The founder requires SSH and SNMP access to continue during normal operations while accepting that a major outage may block management, and wants minimal cost and complexity. Which network management access design best fits the budget and availability tradeoff?
- A hospital must prioritize voice, video consults, clinical signaling, and normal data across a congested WAN. Voice needs minimal delay, interactive video needs assured bandwidth, signaling needs preservation, and data uses remaining capacity. Which PHB mapping best meets this traffic-class requirement?
- A hospital is deploying PIM sparse mode across Cisco and non-Cisco switches, needs automatic RP failover without manual mapping on every router, and requires open-standards operation. Which rendezvous point discovery method should the multicast design specify?
- A university connects IP phones, lab PCs and guest kiosks through access switches to a distribution layer, with voice needing priority and guest traffic rate-limited. Markings from PCs and kiosks cannot be trusted, but phone markings can if verified. Which classification and marking approach at trust boundaries enforces this policy?
- A hospital must isolate device administration for switches, wireless controllers and firewalls after an audit found SSH open from patient Wi-Fi. The design needs role-based access, logged sessions, and reachability that survives a campus core link failure, with management traffic never mixed with clinical data. Which segmented management design best secures the management plane?
- A financial firm with separate trading and back-office VRFs must isolate SSH and SNMP access, enforce authentication, and log management changes to meet audit requirements. Which management plane design creates a segmented and secure management network for this firm?
- A sports league streams one 4K camera feed to thousands of receivers, must forward only from that known encoder, minimize RP state, and let receivers request the exact channel. Which multicast service design with host signaling best fits the single-source need?
- A media company streams CEO town halls from one known studio encoder to 5,000 wired desktops, wants shortest-path delivery without rendezvous point complexity, and endpoints support modern host signaling. Which source-specific multicast design with host signaling fits this one-to-many use case?
- A logistics firm runs headquarters plus 30 distribution centers over MPLS. Cisco phones on voice VLAN advertise via CDP, scanners and BYOD share data VLANs with random markings, and the provider honors only four DSCP classes on ingress. Which classification and marking design establishes correct trust boundaries for end-to-end QoS?
- A university runs interactive video collaboration with many senders and receivers in every building, with sparse participation per group and a need to minimize source-specific state in the core. RP load must stay balanced without registering each source. Which multicast design supports many-to-many delivery for this application?
- A 2000-site retail WAN runs SNMP polling, syslog, NetFlow and SSH over the same MPLS QoS profile as point-of-sale traffic. During congestion, polling timeouts and log gaps hide outages. Management must remain reachable without starving sales traffic. Which QoS design for network management traffic ensures reliable monitoring during congestion?
- A retailer polls 800 stores over a congested MPLS WAN where SNMP polls, syslog and NetFlow compete with point-of-sale traffic during peak hours and polls time out. Monitoring must stay reliable without starving sales traffic or taking priority over voice. Which QoS design for network management traffic best protects manageability during congestion?
- A branch connects with 100 Mbps Ethernet to a provider policing voice and data to a 50 Mbps contracted rate, with morning bursts dropping critical traffic at handoff. Which shaping versus policing design controls outbound bursts at the WAN edge handoff?
- A manufacturing campus runs a sensor collaboration app where 80 endpoints in multiple VLANs both send and receive the same multicast groups, creating many small flows. RP registration overhead and source-tree state must stay low. Which Bidirectional PIM design choice addresses the many-to-many requirement?
- A logistics firm has a 200 Mbps WAN edge handing off to a 100 Mbps provider policer for its hub site carrying voice, video, and bulk file transfers. Bursty file traffic causes provider drops and voice jitter during peaks. Which shaping versus policing design at the WAN edge and provider handoff best protects real-time traffic?
- A headquarters edge carries voice, video conferencing, and bulk backup sharing a congested 200 Mbps link with TCP starvation during backups. Which queuing and congestion avoidance design protects real-time traffic while keeping TCP efficient?
- A media company streams a CEO broadcast from one encoder to 500 branch receivers with sparse membership, plus a few dense trading-floor feeds needing shortest-path delivery. Bandwidth and join latency matter. Which multicast design using source versus shared trees and PIM sparse mode fits these flows?
- A media firm streams live events to two data centers with Anycast RP inside each site and needs RP redundancy plus shared active sources between sites for fast failover without a single point of failure. PIM domains must stay interconnected. Which design provides RP redundancy with inter-domain source sharing?
- A global enterprise runs PIM-SM in two regions with separate RPs, needing RP redundancy inside each region and shared group sources across regions without single-point failure. Interdomain source discovery must remain loop-free. Which MSDP with anycast RP design meets the redundancy requirement?
- A campus WAN edge carries voice, interactive video, and bulk data with recurring congestion at peak hours causing voice choppiness and video freezes while bulk transfers fill buffers. Which queuing and congestion-avoidance design best protects real-time media while fairly sharing remaining bandwidth?
- A media enterprise streams studio video to 200 receivers across a PIM sparse-mode campus where most groups have few active sources and RP load is rising, and engineers debate shared-tree efficiency versus optimal paths. Which source-tree versus shared-tree and PIM sparse-mode operation best balances RP load and path optimality?
Automation (10%) · 30 questions
- A 500-person manufacturer is moving email to a hosted suite, building custom logistics code on a hosted platform, and keeping legacy ERP on virtual machines it manages in a public cloud. Leadership wants clear ownership for patching, scaling, and WAN capacity planning. Which cloud responsibility mapping guides network design for these three workloads?
- A network designer reviews a YANG module that shows a container interfaces with a list interface, leaf name as key, and leaf enabled as boolean. The team must automate multi-vendor campus switches without vendor extensions. Which interpretation of this YANG-based data model guides the correct tooling choice?
- A logistics company monitors 800 distribution-center switches for interface errors and buffer drops that spike for seconds during sortation peaks. SNMP polling every five minutes misses events and creates CPU spikes on collectors. Which model-driven telemetry publication choice should the designer recommend to reduce load impact while catching events?
- A network team automates Cisco IOS XE switches and must choose a management interface that uses standard HTTP operations on a hierarchical data model with JSON encoding. They need to retrieve and modify specific configuration resources by URL path. Which RESTCONF characteristic justifies selecting RESTCONF for this use case?
- A manufacturer runs data centers with MPLS VPN and needs predictable performance to cloud workloads for ERP, plus rapid turn-up of new regions without new circuits. Architects must compare dedicated and virtual connectivity models. Which cloud connectivity option using direct and on-ramp constructs best addresses both needs?
- A bank automates Cisco campus switches plus third-party routers with NETCONF, needing common interface models where possible but also full access to Cisco-only platform knobs. The team debates which YANG sources to consume for portable versus platform-specific automation. Which differentiation of YANG models should the architect apply to guide model selection?
- A manufacturer uses Cisco SD-WAN to connect factories and now needs predictable performance to workloads in two public cloud regions with rapid VPC expansion and centralized policy. Internet VPN to cloud gateways is operationally heavy and inconsistent. Which cloud connectivity design integrates WAN with public cloud regions for scalable automated attachment?
- A network automation engineer opens a YANG model for interface configuration and sees a container interfaces, a list interface keyed by name, and leaves for description, enabled, and mtu. The team uses Cisco, Juniper, and Arista devices. Which interpretation of the YANG-based data model best guides correct vendor-neutral automation design?
- A service provider automation team must push consistent MPLS configs with error checking, validate changes before committing, and operate over a secure session using structured remote calls instead of web URLs. Which NETCONF characteristic supports this transactional automation requirement?
- A data-center operations team polls 800 switches with SNMP every five minutes but misses microbursts and high CPU during polling gaps. They need continuous streaming of interface counters, sub-minute visibility, and push-based delivery to multiple tools. Which telemetry approach delivers streaming visibility beyond periodic SNMP polling?
- A financial firm must keep trading databases on premises for compliance, use public cloud for elastic web front ends, share identity between sites, and manage both environments under unified policy. Which cloud-based service model description guides the private, public and hybrid deployment choice?
- A tooling team needs both one-time retrieval of switch inventory over HTTPS and long-lived configuration change subscriptions with transactional rollback on failure. Which protocol selection matches programmatic management requirements for these distinct use cases?
- A service provider automation team needs sub-second streaming telemetry plus programmatic configuration on IOS XE with strongly typed data models and efficient binary transport. They are comparing SNMP polling, REST APIs, and model-driven telemetry. Which description correctly captures gRPC and gNMI roles and benefits for this telemetry and configuration need?
- A 400-site retailer uses model-driven telemetry to a central collector over limited WAN links. Engineers need interface counters every five minutes but want immediate notice of link flaps without flooding the WAN. Which periodic versus on-change telemetry publication design best controls network load impact?
- An enterprise automation team must choose YANG models to push BGP config across Cisco IOS XE plus third-party devices, collect interface counters vendor-neutrally, and access Cisco-specific hardware telemetry. Which IETF, OpenConfig, and Cisco native YANG model mix best addresses this multivendor automation need?
- A hospital will keep patient-record VMs on its own hypervisors, build care-coordination apps on a managed database and app platform, and adopt cloud email with no server patching. Which SaaS, PaaS and IaaS responsibility mapping best informs the network design?
- A campus automation team must choose a management protocol to push VLAN changes with transactional safety, validate configs before commit, and distinguish running versus candidate views on switches. The team asks how NETCONF differs operationally from ad-hoc REST calls. Which NETCONF characteristic should the designer cite to justify transactional configuration management?
- A NetOps engineer must automate VLAN changes on IOS XE using a model-driven API over HTTPS, retrieving configs as structured resources and applying partial updates without replacing whole files. The script should use standard verbs against predictable URIs. Which RESTCONF characteristic with HTTP methods and resource model should the engineer apply?
- A campus automation team must pull interface counters and push VLAN changes on IOS-XE switches using programmable interfaces. Scripts already use HTTPS with JSON payloads, and the team wants resource-oriented URIs with standard GET, PUT, PATCH, POST and DELETE operations against a YANG-defined datastore. Which RESTCONF characteristic design best matches the HTTPS and resource-model requirement?
- A manufacturing company runs factories with MPLS VPN and internet, plus growing IaaS workloads that need predictable performance for replication and burst internet offload for dev teams. Security wants private paths for production and flexible paths for dev. Which cloud connectivity option aligns Direct Connect, MPLS direct connect and cloud on-ramp to these needs?
- A bank must keep trading systems in its own data centers for compliance, run its public website on shared provider capacity for elasticity, and burst analytics into both during quarter-end. Leadership asks for the cloud model labels. Which private, public, and hybrid description best fits this deployment requirement?
- A NetOps team reads a YANG module advertising interface config with containers, lists, leafs, and a namespace showing a vendor-specific path for a new Cisco feature. They must automate consistently across Cisco and Juniper. Which YANG-based data model interpretation should guide their design choice?
- A network team automates weekly VLAN audits with ad-hoc queries from scripts, plus a real-time interface monitor that must receive pushed change notifications with transactional rollback on failure. Which NETCONF or RESTCONF selection fits the audit and streaming telemetry use case?
- A cloud provider with 800 routers needs second-level interface counters and BGP state streaming without overloading managers during peak congestion events. Which telemetry design leverages model-driven telemetry subscriptions and collectors versus SNMP polling for this provider?
- A large retailer uses Cisco and non-Cisco switches and routers and wants model-driven automation for VLANs and interfaces plus Cisco-specific telemetry and QoS features. Engineers debate IETF, OpenConfig, and Cisco native YANG models for NETCONF and gNMI playbooks. Which YANG model strategy best supports interoperable automation while preserving Cisco-specific features?
- A large enterprise polls 2,000 interfaces every 30 seconds via SNMP and now sees CPU spikes and delayed alarms for link flaps and BGP changes. The team wants timely event detection with lower steady-state load. Which model-driven telemetry publication choice addresses the network load impact?
- An enterprise automation team must push complex multi-device VLAN and OSPF changes nightly with validation, rollback on error, and locking to prevent concurrent edits across a 500-switch campus. A lightweight dashboard also needs simple read-write calls. Which NETCONF versus RESTCONF selection best fits the nightly transactional use case?
- A NetOps team must automate consistent VLAN and interface changes on IOS XE with transactional rollback, clear separation of candidate and running state, and structured RPC operations over a secure channel. REST calls feel stateless and lack datastore concepts. Which NETCONF characteristic meets these controller requirements?
- A retailer connects data centers and 80 branches to workloads in two public cloud regions with steady ERP traffic plus bursty analytics and strict segmentation. Which WAN integration with public cloud regions meets performance and isolation needs?
- A DevOps team polls 400 routers with CLI scraping and SNMP every five minutes, causing high CPU, delayed alarms, and fragile scripts when output changes. They need real-time streaming and vendor-neutral configuration. Which gRPC and gNMI approach best modernizes telemetry and configuration for this estate?
These questions are original practice material and are NOT actual exam questions or brain-dump content. Cisco Systems, Inc. and related marks are trademarks of their respective owners. This material is not affiliated with, endorsed by, or sponsored by Cisco Systems, Inc..