Network Optimization CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard · select all that apply

   A network engineer is configuring Flexible NetFlow to monitor traffic on a core router. The requirements are: capture source and destination IP addresses, source and destination ports, protocol, and byte counts; export to a collector at 192.168.1.100; and apply to the inbound direction of a specific interface. Which of the following configuration steps are required? (Select all that apply.)

   • ADefine a flow record with the required fields
   • BCreate a tracking object to monitor the collector's reachability
   • CConfigure an IP SLA operation to test the collector
   • DDefine a flow monitor that references the flow record and exporter
   • EDefine a flow exporter with the collector IP address
   • FApply the flow monitor to the interface in the inbound direction
   Check answers Discussion Select an answer first
2. 22expert · hard

   A network engineer is designing a failover mechanism for a remote site. The site has a primary MPLS link and a backup broadband link. The requirement is to use the backup link only if the MPLS link's interface is down OR the IP SLA to the MPLS provider's gateway fails. The engineer has configured an IP SLA ICMP echo to the gateway and a tracking object for the interface. What is the correct way to combine these conditions?

   • AUse the interface tracking object directly in the static route
   • BUse the IP SLA tracking object directly in the static route
   • CCreate a tracking list with boolean AND that references both tracking objects, and use it in the static route
   • DCreate a tracking list with boolean OR that references both tracking objects, and use it in the static route
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company has a critical application that uses TCP port 8080. The network team wants to ensure that if the application server becomes unavailable, traffic is rerouted to a secondary server. They have configured an IP SLA TCP connect operation to the primary server. However, the failover is not happening when the application service stops responding, even though the server is still reachable via ICMP. What is the most likely reason?

   • AThe tracking object is monitoring the wrong SLA operation
   • BThe IP SLA TCP connect operation is not configured with a timeout
   • CThe secondary server is not reachable
   • DThe static route is not configured with the tracking object
   Reveal Solution Discussion Select an answer first
5. 24expert · hard · select all that apply

   A network administrator is using Flexible NetFlow to troubleshoot a security incident. They need to identify which hosts are communicating with a known malicious IP address. The NetFlow collector has data for the past week. Which of the following queries would be effective? (Select all that apply.)

   • AFilter flows where either source or destination IP equals the malicious IP
   • BFilter flows where destination IP equals the malicious IP
   • CFilter flows where the byte count is greater than 1000
   • DFilter flows where the protocol is UDP
   • EFilter flows where source IP equals the malicious IP
   Check answers Discussion Select an answer first
6. 25expert · hard

   A network engineer is configuring a tracked static route for a backup link. The primary link is monitored by an IP SLA ICMP echo. The engineer wants the backup route to be installed only when the primary link is down. However, the backup route is being installed even when the primary link is up. What is the most likely cause?

   • AThe IP SLA operation is configured with a too-short frequency
   • BThe tracking object is referencing the wrong IP SLA operation
   • CThe tracking object is configured with the wrong threshold
   • DThe static route is configured with the tracking object in the wrong direction
   Reveal Solution Discussion Select an answer first