A network engineer is diagnosing a problem where users in one VLAN cannot reach a server in another VLAN. The engineer suspects a routing issue. Which combination of tools would best confirm the routing path and identify where packets are being dropped?

Use syslog to check for error messages on the server.

Use SNMP to query the server's interface counters.

Use ping to test reachability, then traceroute to see the path and identify the last responding hop.

Use telnet to the server's IP address on port 23.

While analyzing a packet capture from a user's workstation, you notice that the TCP window size is consistently set to 0 for several packets, and the sender stops transmitting. What is the most likely cause?

The network is experiencing packet loss.

There is a duplex mismatch on the link.

The sender is using a small MSS.

The receiver's buffer is full, and it is applying flow control.

A network admin is troubleshooting a user's inability to SSH to a server. The admin can ping the server, but the SSH connection times out. The admin checks the server's firewall and sees that port 22 is allowed. What should the admin do next?

Check if the SSH service is running and listening on the server.

Replace the user's network cable.

CCIE Enterprise Infrastructure

Domain 4Objective 7

Network Operations CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 11)

Part of the Infrastructure Security and Services domain, which accounts for 15% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

7concepts

15%of the exam

Questions 51–53

51application · medium
A network engineer is diagnosing a problem where users in one VLAN cannot reach a server in another VLAN. The engineer suspects a routing issue. Which combination of tools would best confirm the routing path and identify where packets are being dropped?
Select an answer first
52application · medium
While analyzing a packet capture from a user's workstation, you notice that the TCP window size is consistently set to 0 for several packets, and the sender stops transmitting. What is the most likely cause?
Select an answer first
53application · medium
A network admin is troubleshooting a user's inability to SSH to a server. The admin can ping the server, but the SSH connection times out. The admin checks the server's firewall and sees that port 22 is allowed. What should the admin do next?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.

Network Operations CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 11)

Questions 51–53

A network engineer is diagnosing a problem where users in one VLAN cannot reach a server in another VLAN. The engineer suspects a routing issue. Which combination of tools would best confirm the routing path and identify where packets are being dropped?

While analyzing a packet capture from a user's workstation, you notice that the TCP window size is consistently set to 0 for several packets, and the sender stops transmitting. What is the most likely cause?

A network admin is troubleshooting a user's inability to SSH to a server. The admin can ping the server, but the SSH connection times out. The admin checks the server's firewall and sees that port 22 is allowed. What should the admin do next?

Keep studying — Infrastructure Security and Services