Network Services CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   Two routers (R1 and R2) run HSRP for VLAN 10. R1 is the active router. You need to ensure that if R1's uplink to the WAN fails, R2 takes over as active. You have configured HSRP tracking on R1 to decrement priority when the uplink goes down. What additional configuration is required on R2 to ensure it becomes active?

   • AConfigure HSRP version 2 on both routers.
   • BSet the HSRP hello timer to 1 second on R2.
   • CEnable preemption on R2.
   • DIncrease R2's priority to 150.
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A network has multiple NTP servers with different stratum levels. The administrator wants to ensure that clients always synchronize to the most accurate server, but also wants to prevent a server with a lower stratum from being used if it is reachable. What should the administrator configure on the clients?

   • AConfigure only the most accurate server on the clients.
   • BUse the 'ntp server' command with the 'prefer' option on the most accurate server.
   • CUse NTP broadcast mode.
   • DSet the NTP stratum on the clients to a higher value.
   Reveal Solution Discussion Select an answer first
4. 8expert · medium · select all that apply

   You are implementing DHCP snooping on a switch to prevent rogue DHCP servers. Which of the following are correct configurations or behaviors? (Select all that apply.)

   • AUse DHCP snooping binding table to validate DHCP requests.
   • BEnable DHCP snooping globally and on the desired VLANs.
   • CSet the rate limit for DHCP packets on untrusted ports.
   • DConfigure uplink ports as trusted.
   • EConfigure all access ports as trusted.
   Check answers Discussion Select an answer first
5. 9expert · medium

   A router is configured with dynamic NAT using a pool of public IPs. Users report that some internal hosts cannot access the internet, but others can. 'show ip nat translations' shows that the pool is exhausted. What is the most likely cause and solution?

   • AThe access-list for NAT is blocking some hosts.
   • BThe inside and outside interfaces are incorrectly configured.
   • CThe NAT pool is too small; increase the pool size or use PAT.
   • DThe NAT translation timeout is too long; reduce the timeout.
   Reveal Solution Discussion Select an answer first
6. 10expert · medium

   A network uses VRRP for gateway redundancy. The master router (R1) has a higher priority than the backup (R2). You want to ensure that if R1 fails and later recovers, it becomes the master again. What must be configured?

   • AEnable preempt on R1.
   • BSet the VRRP advertisement interval to 1 second.
   • CUse VRRP version 3.
   • DEnable preempt on R2.
   Reveal Solution Discussion Select an answer first