Test your basic knowledge |

CCIE Lab Tasks

Instructions:

Answer 23 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Configure a reflexive access list to permit traffic out interface Fa0/0 that allows all tcp traffic.
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Global Config - ip pim autorp listener
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20

2. Define the neighbor matrix for OSPF network types. Which are unicast vs. multicast - and which needs the explicit neighbor commands.
Negotiation conditions - Show interface switchport.
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
...

3. Where is PPPoE in the documentation
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Terminal services / Appendix / Regexp.
Broadband Access - Aggregation
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer

4. List the BGP decision process
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID

5. What does the command 'show protocols' do
The neighbor remove-private-as command.
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
It will show the IP addresses on the device with the subnet mask

6. How do you change spanning tree path
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Terminal services / Appendix / Regexp.
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Priority - Link Cost - Router ID - Port Cost

7. How can you match on closed ports on the router for the purpose of filtering
...
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Global Config - ip pim autorp listener

8. How do you filter administratively scoped groups from transiting a router?
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i

9. How do you filter autorp multicast groups?

10. How do you configure a Multicast RP mapping agent?
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Broadband Access - Aggregation

11. How do you prevent the console line from performing DNS resolution
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Transport preferred none

12. How do you stop private AS numbers from being advertised
Terminal services / Appendix / Regexp.
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
The neighbor remove-private-as command.

13. What are the for control plane interfaces or modes?
...
Terminal services / Appendix / Regexp.
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Control-plane transit - control-plane host - control-plane cef-exception

14. How do you configure a Multicast RP candidate?
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
...
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs

15. Where in documentation is BGP regular expressions.
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Terminal services / Appendix / Regexp.

16. How do you affect OSPF path selection
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
Priority - Link Cost - Router ID - Port Cost

17. How do you prevent a router from switching to the shortest path tree once the data flow has begun. Where is the documentation?
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI

18. What is the process for configuring Trunking and VTP. How do we check our work.
Priority - Link Cost - Router ID - Port Cost
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Negotiation conditions - Show interface switchport.
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)

19. What is the command to configure the CAM table timers for Vlan 88 to expire in 10 minutes. What is the verification command.
Terminal services / Appendix / Regexp.
It will show the IP addresses on the device with the subnet mask
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer

20. How do you configure autorp when in sparse mode only?
Broadband Access - Aggregation
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Global Config - ip pim autorp listener
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i

21. How do you penalize flapping BGP routes? Verification?
...
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Priority - Link Cost - Router ID - Port Cost

22. How can you pass traffic sourced from the router that will not be reflected by the reflexive access list?
It will show the IP addresses on the device with the subnet mask
Terminal services / Appendix / Regexp.
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)

23. Move interface encapsulation - interface ip access-group - hostname and show run to level 2
It will show the IP addresses on the device with the subnet mask
The neighbor remove-private-as command.
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group