1.

Which protocol does mGRE use to send packets

a) DMVPN
b) NHRP
c) OSPF
d) IPsec

2. Which protocols are supported with MPP (choose 3)

a) HTTP only
b) HTTP and HTTPS
c) SSH
d) FTP
e) SFTP
f) TFTP
Protocols: SSH, SNMP, Telnet, TFTP, HTTP, HTTPS

3. Which topologies are allowed with p2p GRE over IPsec

a) Hub and Spoke
b) Partial mesh
c) Point to multipoint
d) Bus
e) Star
Topologies: hub and spoke, partial mesh, full mesh

4. Drag and drop about uRPF strict and loose mode

a) Must have the source IP in routing table  loose mode
b) Must have the same path back  strict mode
c) Configured on L2 switches
d) Can be used on inside internet router interface  strict mode
e) Can be used on outside internet router interface  loose mode
f) Can use the default route for the source IP  loose mode

5. Drag and drop the sequence for configuring SSH in correct order
a) hostname Router
b) ip domain-name cisco.com
c) crypto key generate rsa
d) ip ssh version 2
e) line vty 0 4
transport input ssh

6. Which keywords can be used with debug condition to filter output (choose 2)
a) username
b) Interface ID
c) Port number
d) Protocol
e) Don’t remember

debug condition { called dial-string | caller dial-string | calling tidimsi string | domain domain-
name | interface interface-id | ip ip-address | mac-address hexadecimal-MAC-address |
portbundle ip ip-address bundle bundle-number | session-id session-number | username
username | vcid vc-id | vlan vlan-id }
7. Output of sh access-list, what can you do to correct ssh?

Extended IP access-list 100

Deny tcp any any eq 22
Permit ip any any

Extended IP access-list 150

Permit tcp any any eq 23
Deny tcp any any eq 22
Permit ip any any

Extended IP access-list 170

Permit tcp any any eq 22
Permit tcp any any eq 23

Line vty 0 4
Access-class 100 in
Transport input ssh

a) Change access-class 100 in with access-class 150 in

b) Change Transport input ssh with Change Transport input telnet
c) Change access-class 100 in with access-class 100 out
d) Change access-class 100 in with access-class 170 in
Answer: d

OSPF fails to establish a neighbor adjacency and how to debug?

debug ip ospf adjacency
debug ip ospf database-timer rate-limit
debug ip ospf events
debug ip ospf mpls traffic-eng advertisements
debug ip ospf nsf
debug ip ospf packet
debug ip ospf rib
debug ip ospf spf statistic

Question 11:
Scenario (Different question): output of ‘show ip eigrp’ was given and we need to find out the
error and troubleshoot based on given scenario (Choose two)
*Aug 1 13:09:38.896: EIGRP: received packet with MD5 authentication, key id = 1234
*Aug 1 13:09:38.896: EIGRP: Received HELLO on Gi0/0 – paklen 70 nbr 192.168.1.2
*Aug 1 13:09:38.897: AS 10, Flags 0x0:(NULL), Seq 0/0 interfaceQ 0/0
*Aug 1 13:09:38.898: EIGRP: Add Peer: Total 1 (3/0/0/0/0)
*Aug 1 13:09:38.898: K-value mismatch
*Aug 1 13:09:38.899: EIGRP: Sending TIDLIST on GigabitEthernet0/0 – 1 items0
*Aug 1 13:09:38.902: EIGRP: Sending HELLO on Gi0/0 – paklen 70
*Aug 1 13:09:38.903: AS 10, Flags 0x0:(NULL), Seq 0/0 interfaceQ 0/0 iidbQ un/rely 0/0
*Aug 1 13:09:38.904: %DUAL-5-NBRCHANGE: EIGRP-IPv4 10: Neighbor 192.168.1.2
(GigabitEthernet0/0) is down: K-value mismatch
*Aug 1 13:09:38.905: EIGRP: Lost Peer: Total 1 (2/0/0/0/0)
*Aug 1 13:09:39.894: EIGRP: Gi0/1: ignored packet from 192.168.2.3, opcode = 5 (missing
authentication)
*Aug 1 13:09:40.204: EIGRP: Sending HELLO on Gi0/1 – paklen 60
*Aug 1 13:09:40.204: AS 10, Flags 0x0:(NULL), Seq 0/0 interfaceQ 0/0 iidbQ un/rely 0/0

A. Hello timer mismatched

B. Hold timer mismatched
C. Process ID mismatched
D. AS mismatched
E. Metric calculations mismatched
F. Router ID mismatched
G. Authentication mismatched

Question 13:
Drag and Drop 2: How do you configure uRPF Strict and Loose mode
Option 1: An IPV4 source address at the receiving end must match routing entry for the
interface  strict
Option 2: Supports asymmetric routing feature
Option 3: Supports symmetric routing feature  strict
Option 4: Can be used to configure on the outside interface of the Internet router  loose
Option 5: Can be used to configure on the inside interface of the Internet router  strict
Option 6: IPV4 Source IP address must be the part of the routing table  loose

Question 16:
MCQ 5. How will you troubleshoot ospf adjacency issue?
A. Using ‘debug ospf adj’ command on a router
B. Process ID on the routers should match
C. Router IDs should match
D. Using ‘debug ospf nsf’ command
E. Hello timers mismatch

Question 18:
MCQ 6: What IP header option fields can you modify in an extended ping? (Choose three)
A. Value
B. Strict
C. Record
D. Timestamp
E. Timeout

Question 19: Which IPsec mode with least overhead

A. dynamic
B. transport
C. transparent
D. tunnel