Network Operations CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A network engineer is troubleshooting a user's complaint that they cannot access a database server. The engineer runs a ping to the server and it succeeds, but when the engineer tries to connect using telnet to the database port (1521), the connection times out. The engineer checks the server's firewall and sees that port 1521 is allowed. What is the most likely cause?

   • AThe user's client is using a different port.
   • BThe database service is not listening on the expected port or interface.
   • CThe server is overloaded and not responding.
   • DThe network is blocking TCP port 1521.
   Reveal Solution Discussion Select an answer first
2. 42expert · hard · select all that apply

   A network engineer is analyzing a packet capture from a router that is experiencing high CPU utilization. The capture shows a large number of packets with the same source and destination IP addresses, but with varying TTL values. The engineer suspects a routing loop. Which of the following observations in the capture would confirm a routing loop? (Select all that apply.)

   • AThe packets are being sent to the same next-hop repeatedly.
   • BThe TTL values in the packets decrease by 1 at each hop, but the same packet appears multiple times.
   • CThe packets are being fragmented.
   • DThe packets are being forwarded out the same interface they arrived on.
   • EThe packets have a constant TTL value.
   Check answers Discussion Select an answer first
4. 43expert · hard

   A network admin is troubleshooting a problem where users in a branch office cannot access a web application hosted in the data center. The admin runs a traceroute from the branch office and sees that the path goes through a firewall that is not responding to ICMP. The traceroute shows timeouts at the firewall hop, but the final destination responds. What should the admin do to confirm that the firewall is not the issue?

   • ARun a traceroute with a different protocol, such as UDP.
   • BRun a ping to the web server's IP address to confirm end-to-end connectivity.
   • CCheck the firewall's syslog for dropped packets.
   • DTelnet to the firewall's management IP address.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A network engineer needs to capture traffic on a switch that is experiencing high CPU utilization due to a broadcast storm. The engineer wants to capture only broadcast traffic to analyze the source. Which capture method and filter would be most effective?

   • AUse a local SPAN session with the affected VLAN as the source, and apply a filter for broadcast traffic (e.g., Ethernet destination FF:FF:FF:FF:FF:FF).
   • BUse ERSPAN to send all traffic to a remote analyzer and filter there.
   • CUse tcpdump on the switch's CPU to capture all traffic and then filter for broadcasts.
   • DUse RSPAN with a dedicated VLAN and capture all traffic.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A network admin captured traffic on a user's access port during a reported slowdown. The capture shows many TCP packets with the SYN flag set, followed immediately by RST packets from the server. What is the most likely root cause of the user's issue?

   • AThe user's client is sending malformed packets.
   • BThere is a duplex mismatch on the access port.
   • CThe server is rejecting connection attempts, possibly due to a firewall rule or service not listening.
   • DThe network is dropping packets due to congestion.
   Reveal Solution Discussion Select an answer first