10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
The CCNP Enterprise exam has 100 questions and runs 2 hours.
These 10 free CCNP Enterprise questions are organized by exam domain, so you can see how each part of the Cisco Certified Network Professional Enterprise blueprint is tested. Reveal the answer and explanation under each question.
In a Cisco SD-Access fabric managed by Cisco Catalyst Center, which protocol provides the control plane that maps an endpoint's identity to its current location?
Correct answer: B - LISP, which resolves endpoint identifiers to locators
A GRE tunnel between two routers repeatedly transitions up and down, and the console logs %TUN-5-RECURDOWN messages. What is the cause?
Correct answer: B - The route to the tunnel destination is learned through the tunnel
Two directly connected routers form an OSPF adjacency that remains stuck in the EXSTART state. Both interfaces are in area 0, and the hello and dead timers match on both sides. Which condition is the MOST likely cause?
Correct answer: B - The MTU configured on the two interfaces does not match
A trunk link currently carries VLANs 10 and 20. An engineer must add VLAN 30 to that trunk without interrupting traffic for the VLANs already allowed. Which command accomplishes this?
Correct answer: B - switchport trunk allowed vlan add 30
Two switches are configured for an EtherChannel. The member interfaces on both switches use the command channel-group 1 mode passive. What is the result?
Correct answer: C - No EtherChannel forms because neither side starts negotiation
A router is configured with the command logging trap 4. Which messages does the router send to the syslog server?
Correct answer: A - Messages at severity levels 0 through 4
An access list is applied inbound on an interface to block Telnet from 10.1.1.0/24. Line 10 permits IP traffic from 10.1.1.0/24 to any destination, line 20 denies TCP from 10.1.1.0/24 to any destination on port 23, and line 30 permits IP from any to any. Telnet sessions from that subnet still succeed. What is the cause?
Correct answer: C - Line 10 matches the traffic first, so line 20 is never evaluated
Which statement correctly describes the difference between Cisco TrustSec and MACsec?
Correct answer: D - TrustSec enforces group-based policy; MACsec encrypts traffic on the link
A Python script that polls the Cisco Catalyst Center API has run successfully for the past hour. It now receives an HTTP 401 response on every request, yet the same requests succeed immediately after the script is restarted. What is the MOST likely cause?
Correct answer: A - The authentication token has expired and must be renewed
An EEM applet contains three actions labeled 2.0, 10.0, and 1.0, configured in that order. In what order does the applet execute them?
Correct answer: D - 1.0, 10.0, 2.0 - labels are sorted as ASCII strings
The full bank has 1,020 more CCNP Enterprise questions with explanations.
Continue in the free practice test →
View plans