Essential CCIP Certification Interview Questions & Answers:

1. Explain What best describes the following configuration example of allowas-in? router bgp 100
address-family ipv4 vrf CustomerAneighbor 195.12.4.5 remote-as 123 neighbor 195.12.4.5
activateneighbor 195.12.4.5 allowas-in 2
A.permits incoming BGP updates defined by access-list 2
B.permits incoming BGP updates defined by class-map 2
C.permit incoming BGP updates defined by route-map 2
D.permits incoming BGP updates with no more than two occurrences of AS 100 in the AS path
E.permits incoming BGP updates with no more than two occurrences of AS 123 in the AS path

D.permits incoming BGP updates with no more than two occurrences of AS 100 in the AS path

2. Which three components comprise a Cisco NAC Appliance solution? (Choose three.)
A. a NAC-enabled Cisco router
B. a Linux server for in-band or out-of-band network admission control
C. a Linux server for centralized management of network admission servers
D. a Cisco router to provide VPN services
E. a read-only client operating on an endpoint device
F. a NAC-enabled Cisco switch

B. a Linux server for in-band or out-of-band network admission control
C. a Linux server for centralized management of network admission servers
E. a read-only client operating on an endpoint device

3. When configuring the Cisco NAM to implement Cisco NAA requirement
checking on client machines, what is the next step after configuring checks and rules?
A. retrieve updates
B. require the use of the Cisco NAA
C. configure session timeout and traffic policies
D. map rules to requirement
E. configure requirements

E. configure requirements

4. Explain What is a benefit of CEF switching?
A.CEF supports IP source prefix-based switching using the FIB.
B.CEF uses less memory than fast switching uses.
C.CEF is less CPU intensive than fast switching is.
D.CEF provides Netflow statistics with minimum CPU overhead.
E.CEF allows multiple data planes to share a common control plane.

C. CEF is less CPU intensive than fast switching is.

5. Explain What is a major drawback of using traditional IP routing over an ATM network when connecting
multiple sites?
A.Each ATM switch in the path has to perform Layer 3 routing lookup.
B.ATM virtual circuits have to be established between the different sites.
C.There is high ATM management overhead between the ATM switch and the router at each site.
D.Each ATM switch has to be manually configured to participate in Layer 3 routing.
E.There is high PNNI overhead.

B.ATM virtual circuits have to be established between the different sites.

6. Explain Which description is NOT a topology where a central services VPN would be used?
A.
A service provider offers services to all customers by allowing them access to a common
VPN.
B. Two or more companies want to exchange information by sharing a common set of
servers.
C. A security-conscious company separates its departments and allows them to access
only to common servers.
D. Several interconnected subsidiaries of a company require optimal communication
between many sites.

D.Several interconnected subsidiaries of a company require optimal communication between many sites.

7. Suppose A client has a network with wireless and wired users. The wired users run
mission-critical bandwidth-sensitive applications. The wireless users access web-based support portals
within the central office.
Given only this information, which Cisco NAC Appliance solution would provide the most fault-tolerant
option for this client?
A. one Cisco NAM and one in-band highly available Cisco NAS cluster
B. one load-balanced highly available Cisco NAM cluster and one out-of-band highly available Cisco NAS
cluster
C. one highly available Cisco NAM cluster, one out-of-band highly available Cisco NAS cluster, and one
in-band Cisco NAS
D. one highly available Cisco NAM cluster and one in-band highly available Cisco NAS cluster

C.one highly available Cisco NAM cluster, one out-of-band highly available Cisco NAS cluster, and one in-band Cisco NAS

8. Explain What condition must be met for the receiving PE router to install VPNv4 routes into
a VRF?
A. If at least one RD attached to the VPNv4 route matches at least one import RD
configured in the VRF
B. If at least one RT attached to the VPNv4 route matches at least one import RT
configured in the VRF
C. If at least one RD attached to the VPNv4 route matches at least one export RD
configured in the VRF
D. If at least one RT attached to the VPNv4 route matches at least one export RT
configured in the VRF

B.If at least one RT attached to the VPNv4 route matches at least one import RT configured in the VRF

9. Suppose After you implement a network scan and view the report, you notice that a
plug-in did not access any of its dependent plug-ins. What did you forget to do?
A. enable the Dependent Plug-in check box on the General Tab form
B. configure dependent plug-in support when you mapped the Nessus scan check to the Nessus plug-in rule
C. install dependent plug-ins when you updated the Cisco NAC Appliance plug-in library
D. load the dependent plug-ins for that plug-in in the Plug-in Updates form

C:In the SMS Administrator console, start Remote Assistance.

10. Explain Which three statements about MPLS VPNs are true? (Choose three.)
A. PE routers do not participate in customer routing.
B. MPLS VPN is similar to using the peer-to-peer dedicated PE router approach.
C. Customer can use overlapping addresses.
D. Each customer is assigned an independent routing table (virtual routing and
forwarding table VRF).
E. The P Routers routing table contains both the global IP routes and the customer
routes.
F. CE routers connect directly to the service providers P routers.

B&C&D:MPLS VPN is similar to using the peer-to-peer dedicated PE router approach./Customer can use overlapping addresses./Each customer is assigned an independent routing table (virtual routing and forwarding table VRF).