A network administrator is concerned about rogue DHCP servers on the access layer. They want to prevent unauthorized DHCP servers from offering addresses to clients. Which feature should be enabled on the access switches?

DHCP snooping with trusted ports configured on uplink ports.

Port security on all access ports.

A small office has a single public IP address and multiple internal servers that need to be accessible from the internet. Which NAT type should you configure to allow all internal devices to share the single public IP for outbound traffic while also mapping specific internal servers to different public ports?

Port Address Translation (PAT) with static port mappings for servers

Dynamic NAT with a pool of public addresses

Static NAT for each server and PAT for outbound traffic

NAT overload with a pool of public addresses

Users report that they cannot access a web server from the internet. The NAT configuration on the router looks correct. Which command would you use to verify that the NAT translation is active and see the current mappings?

show running-config | include nat

A network engineer is setting up NTP for a corporate network. They have a GPS clock connected to a router that will act as the time source for all other devices. The engineer wants to ensure that the GPS clock is the authoritative source and that other devices synchronize to it. What should the engineer configure on the router connected to the GPS?

Set the router's NTP stratum to 1 and configure it as an NTP server.

Configure the router as an NTP client to the GPS clock.

Use PTP instead of NTP for better accuracy.

Set the router's NTP stratum to 16 to indicate it is unsynchronized.

CCIE Enterprise Infrastructure

Domain 4Objective 5

Network Services CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 4)

Part of the Infrastructure Security and Services domain, which accounts for 15% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

13concepts

15%of the exam

Questions 16–20

16application · medium
A network administrator is concerned about rogue DHCP servers on the access layer. They want to prevent unauthorized DHCP servers from offering addresses to clients. Which feature should be enabled on the access switches?
Select an answer first
17application · medium
A small office has a single public IP address and multiple internal servers that need to be accessible from the internet. Which NAT type should you configure to allow all internal devices to share the single public IP for outbound traffic while also mapping specific internal servers to different public ports?
Select an answer first
18application · easy
Users report that they cannot access a web server from the internet. The NAT configuration on the router looks correct. Which command would you use to verify that the NAT translation is active and see the current mappings?
Select an answer first
19application · medium
A network engineer is setting up NTP for a corporate network. They have a GPS clock connected to a router that will act as the time source for all other devices. The engineer wants to ensure that the GPS clock is the authoritative source and that other devices synchronize to it. What should the engineer configure on the router connected to the GPS?
Select an answer first
20application · easy
A router is configured as a DHCP client on its WAN interface. The ISP provides IP address, default gateway, and DNS server information via DHCP. Which command will display the IP address and other parameters learned from the ISP?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.

Network Services CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 4)

Questions 16–20

A network administrator is concerned about rogue DHCP servers on the access layer. They want to prevent unauthorized DHCP servers from offering addresses to clients. Which feature should be enabled on the access switches?

Users report that they cannot access a web server from the internet. The NAT configuration on the router looks correct. Which command would you use to verify that the NAT translation is active and see the current mappings?

A router is configured as a DHCP client on its WAN interface. The ISP provides IP address, default gateway, and DNS server information via DHCP. Which command will display the IP address and other parameters learned from the ISP?

Keep studying — Infrastructure Security and Services