Network Operations CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A network admin is troubleshooting a user's inability to access a file server. The admin runs a ping to the server and it succeeds. The admin then runs a traceroute and sees that the path goes through a router that is not responding to ICMP, but the final destination responds. The admin then tries to connect to the file server using SMB (port 445) and it times out. What is the most likely cause?

   • AThe file server's SMB service is not running or is blocked by a firewall.
   • BThe router that is not responding to ICMP is dropping SMB traffic.
   • CThe user's client is using a different SMB version.
   • DThe file server is overloaded.
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A network engineer is troubleshooting a user's inability to reach a web server at 10.10.10.5. The user can ping the server's IP address successfully, but the browser times out. The engineer runs traceroute and sees that all hops respond, but the final hop shows high latency. What should the engineer do next?

   • AReboot the user's computer.
   • BReplace the user's network cable.
   • CIncrease the MTU on the user's interface.
   • DCheck if the web server is listening on TCP port 80/443 and if a firewall is blocking those ports.
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   An enterprise has a distributed data center with multiple switches. The network team needs to capture traffic from a specific server VLAN to a central analysis appliance located in a different building. The capture must include traffic from multiple switches. Which capture method should be used?

   • AUse local SPAN on each switch and connect a separate analyzer to each.
   • BUse RSPAN with a dedicated VLAN extended across all switches.
   • CPlace a TAP on the server's uplink and connect it to the analyzer.
   • DConfigure ERSPAN on each switch to send encapsulated copies to the central appliance.
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A network engineer runs a traceroute to a remote server and sees the following output: hop 1 (10.0.0.1) 1ms, hop 2 (192.168.1.1) 50ms, hop 3 (203.0.113.10) 50ms, hop 4 (198.51.100.1) 50ms. The final destination responds. What does the latency at hop 2 indicate?

   • AThere is likely a high-latency link or a slow router at hop 2, but the path is still functional.
   • BThe router at hop 2 is dropping packets.
   • CThe destination server is overloaded.
   • DThere is a routing loop between hop 2 and hop 3.
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A network admin needs to capture only HTTP traffic from a specific host (192.168.1.10) on a switch using SPAN. The switch supports ACL-based filtering for SPAN sessions. What is the most efficient way to configure the capture?

   • AUse tcpdump on the host to capture its own traffic.
   • BCreate a SPAN session with the uplink as the source and filter later in Wireshark.
   • CCreate a SPAN session with all ports as the source, and capture everything.
   • DCreate a SPAN session with the host's port as the source, and apply an ACL that permits only TCP port 80 traffic from that host.
   Reveal Solution Discussion Select an answer first