Mixed Deck — All CCIE Topics Flashcards

What is the main advantage of using Cisco Fabric Path in a data center?

Answer: Layer 2 multipath Ethernet fabric

Cisco Fabric Path provides a scalable, high-performance Layer 2 multipath Ethernet fabric for data center networks.

Which Cisco WLC feature automatically adjusts AP transmit power and channel assignment to optimize RF coverage?

Answer: RRM (Radio Resource Management)

Radio Resource Management (RRM) dynamically adjusts AP transmit power and channel assignments based on RF environment analysis.

When redistributing rip into OSPF what routes get redistributed into OSPF(choose all that apply)

Answer: Rip routes

When redistributing RIP into OSPF, the routes that get redistributed into OSPF are RIP routes and directly connected interfaces running RIP. RIP routes are the routes learned through the RIP routing protocol, while directly connected interfaces running RIP are the interfaces that are directly connected to the router and are running the RIP protocol. The other options, static routes, floating routes, and null routes, are not included in the redistribution process.

What transport protocol and port does NETCONF use by default?

Answer: SSH/830

NETCONF uses SSH as its transport with the IANA-assigned port 830, providing secure encrypted communication for network configuration.

What is the primary difference between stateful and stateless firewalls?

Answer: Stateful firewalls track connection state; stateless only inspect individual packets

Stateful firewalls maintain a connection table to track session state, allowing return traffic automatically; stateless firewalls inspect each packet in isolation.

What is the primary function of Cisco Application Centric Infrastructure (ACI) in a data center?

Answer: Automate and manage network infrastructure

Cisco ACI is designed to automate and manage the network infrastructure within data centers, making it more efficient and scalable.

In MPLS, what is the label imposed at the ingress PE router called?

Answer: Transport label

The transport (outer) label is imposed at the ingress PE and used by the MPLS core (P routers) for forwarding decisions.

In Cisco ASA failover, which unit actively processes traffic while the standby unit monitors health?

Answer: Active unit

In ASA Active/Standby failover, the active unit processes all traffic; the standby unit monitors via failover link and takes over if the active unit fails.

In a Cisco UCS environment, what component is responsible for managing server profiles and configurations?

Answer: UCS Manager

UCS Manager is the component responsible for managing server profiles, configurations, and policies in a Cisco UCS environment.

What is Penultimate Hop Popping (PHP) in MPLS?

Answer: Removing the transport label at the second-to-last hop

PHP removes the outer transport label at the penultimate (second-to-last) hop, reducing processing at the egress PE router.

Which Cisco feature detects and blocks attempts to spoof ARP replies to redirect traffic?

Answer: Dynamic ARP Inspection (DAI)

Dynamic ARP Inspection (DAI) validates ARP packets against the DHCP snooping binding table, dropping spoofed ARP replies.

In MPLS L2VPN VPLS, what is a VSI (Virtual Switching Instance)?

Answer: A virtual bridge that emulates a LAN across the MPLS backbone

A VSI (Virtual Switching Instance) in VPLS emulates a multi-point Ethernet LAN across the MPLS backbone by maintaining MAC address tables per service.

In OSPF, which LSA type is generated by ABRs to summarize routes between areas?

Answer: Type 3

Type 3 LSAs (Summary LSAs) are generated by ABRs to advertise networks from one area into another area.

What protocol does Cisco SD-WAN use to exchange routing information between vSmart controllers and WAN Edge routers?

Answer: OMP

Overlay Management Protocol (OMP) is the routing protocol used within Cisco SD-WAN between vSmart controllers and WAN Edge devices.

Which 802.1Q feature allows traffic from multiple VLANs to traverse a single physical link between switches?

Answer: Trunk port

Trunk ports use 802.1Q encapsulation to tag frames with VLAN IDs, allowing multiple VLANs to traverse a single inter-switch link.

In Ansible network automation, which connection plugin is used for NETCONF-based device management?

Answer: ansible.netcommon.netconf

The 'ansible.netcommon.netconf' connection plugin enables Ansible to communicate with network devices using the NETCONF protocol over SSH.

Which spanning-tree feature provides rapid convergence by pre-assigning port roles before a topology change occurs?

Answer: RSTP

Rapid Spanning Tree Protocol (RSTP) achieves fast convergence through pre-assigned port roles (alternate and backup) and rapid state transitions.

Which design principle should be prioritized when sizing redundant power supplies and cooling in a network equipment room to meet 'five nines' (99.999%) availability?

Answer: 2N redundancy (fully duplicated systems)

2N redundancy provides a fully independent duplicate of every power and cooling component, ensuring no single failure — including entire PSU or cooling unit failure — causes downtime.

In a Cisco Unified Communications cluster, what is the purpose of the TFTP service?

Answer: Providing phone configuration files and firmware to IP phones

The TFTP service in CUCM delivers phone configuration XML files and firmware images to Cisco IP phones during registration and boot.

What type of attack does DHCP snooping protect against?

Answer: Rogue DHCP servers offering malicious IP configurations

DHCP snooping validates DHCP messages and blocks rogue DHCP servers on untrusted ports, preventing malicious IP address assignment.