Skip to content
Log in Sign up My account

Network Assurance Practice Questions

15 original questions covering ENCOR 4.1 to 4.6. Answer every one before opening any explanation. Target: 12 of 15 (80%). These questions do not repeat the 4.0 section of the question bank, so do both.

1. Refer to the exhibit. What does the result tell the engineer?

Blueprint 4.1

R1# ping 10.255.255.4 source Loopback0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.255.255.4, timeout is 2 seconds:
Packet sent with a source address of 10.255.255.1
U.U.U
Success rate is 0 percent (0/5)
  • A. The destination is reachable but the replies are delayed beyond the timeout
  • B. The packets are too large for a link on the path
  • C. The TTL expired because of a routing loop
  • D. A router on the path has no route to 10.255.255.4, or is filtering the packets, and is returning ICMP unreachable messages
Answer: D

U means an ICMP destination unreachable message came back, so some router actively rejected the packet. The alternating . is normal, because IOS rate-limits the unreachables it sends (by default one every 500 ms), so every other probe times out instead. A size problem with the DF bit shows M (B). A TTL problem shows & (C). Delayed replies show . only (A).

2. An engineer is connected to R1 by SSH and enables debug ip ospf adj. logging monitor debugging is configured, but no debug output appears in the session. What is missing?

Blueprint 4.1

  • A. logging console debugging
  • B. terminal monitor in the SSH session
  • C. service timestamps debug
  • D. logging buffered debugging
Answer: B

Log and debug messages are only copied to a VTY session after that session runs terminal monitor. logging monitor sets the level, but each session still has to opt in. Console logging (A) affects only the console port. The buffer (D) would store the output for show logging but would not display it live. Timestamps (C) change the format, not whether output is shown.

3. Which two statements about SNMP informs are true? (Choose two.)

Blueprint 4.1

  • A. The NMS acknowledges each inform
  • B. Informs are supported in SNMPv1
  • C. The agent retransmits an inform that is not acknowledged
  • D. Informs are sent to UDP port 161 on the NMS
  • E. Informs use less memory on the agent than traps
Answer: A, C

An inform is an acknowledged notification. The agent keeps it in memory and retransmits it until the NMS replies or the retries run out. That reliability costs memory, so E is the wrong way round. Informs arrived with SNMPv2c, not v1 (B). Notifications, traps and informs alike, go to UDP 162; 161 is for polling the agent (D).

4. Refer to the exhibit. The engineer wants to see OSPF adjacency events only for neighbor 10.1.12.2 on a router with 40 OSPF neighbors. Which statement is true?

Blueprint 4.1

R1# debug condition ip 10.1.12.2
Condition 1 set
R1# debug ip ospf adj
OSPF adjacency debugging is on
R1# no debug condition all
  • A. Removing all conditions while the debug is still running makes the debug unconditional, which can flood the router
  • B. Removing the condition also turns off debug ip ospf adj
  • C. Conditions only apply to debug ip packet
  • D. The output appears only on the console, regardless of logging settings
Answer: A

With no condition left, conditional-aware debugs run for everything, so the router starts reporting all 40 neighbors. IOS warns about this when you remove the last condition. The safe order is undebug all first, then remove the conditions. The debug itself stays on (B). Conditions apply to many debugs, not just packet debugs (C). Where output appears depends on the logging configuration (D).

5. Refer to the exhibit. Collectors report no data from R1. What is the problem?

Blueprint 4.2

flow record REC1
 match ipv4 source address
 match ipv4 destination address
 collect counter bytes long
!
flow exporter EXP1
 destination 192.168.100.50
 transport udp 2055
!
flow monitor MON1
 record REC1
!
interface GigabitEthernet2
 ip flow monitor MON1 input
  • A. The record needs at least one transport field
  • B. The monitor must be applied in both directions
  • C. The monitor does not reference the exporter
  • D. collect statements are not allowed with match statements in one record
Answer: C

The exporter is defined but unused. Flows are collected in the local cache (visible with show flow monitor MON1 cache), but nothing is exported until exporter EXP1 is added under the monitor. Records can use any combination of keys (A), input-only monitoring is normal (B), and every useful record has both match and collect lines (D).

Free account required for the rest

This page has 15 questions and the first 5 are shown here. You're seeing a free sample. A free account unlocks everything: every question bank, the timed exams, the cram sheets, the simulations and the lab files.

Create a free account Log in