Test your basic knowledge |

CCIE Lab Tasks

Instructions:

Answer 23 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. How can you match on closed ports on the router for the purpose of filtering
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Negotiation conditions - Show interface switchport.
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter

2. What does the command 'show protocols' do
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
It will show the IP addresses on the device with the subnet mask
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs

3. How do you stop private AS numbers from being advertised
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
The neighbor remove-private-as command.
Broadband Access - Aggregation

4. What is the process for configuring Trunking and VTP. How do we check our work.
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Negotiation conditions - Show interface switchport.
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
Control-plane transit - control-plane host - control-plane cef-exception

5. Where is PPPoE in the documentation
Terminal services / Appendix / Regexp.
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Broadband Access - Aggregation
Priority - Link Cost - Router ID - Port Cost

6. How do you penalize flapping BGP routes? Verification?
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)

7. Where in documentation is BGP regular expressions.
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
Global Config - ip pim autorp listener
Terminal services / Appendix / Regexp.
It will show the IP addresses on the device with the subnet mask

8. How do you configure a Multicast RP candidate?
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Global Config - ip pim autorp listener

9. How do you filter administratively scoped groups from transiting a router?
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
The neighbor remove-private-as command.
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs

10. Configure a reflexive access list to permit traffic out interface Fa0/0 that allows all tcp traffic.
Broadband Access - Aggregation
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
It will show the IP addresses on the device with the subnet mask

11. Define the neighbor matrix for OSPF network types. Which are unicast vs. multicast - and which needs the explicit neighbor commands.
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
...

12. How do you filter autorp multicast groups?

13. List the BGP decision process
...
Control-plane transit - control-plane host - control-plane cef-exception
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer

14. Move interface encapsulation - interface ip access-group - hostname and show run to level 2
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)

15. What is the command to configure the CAM table timers for Vlan 88 to expire in 10 minutes. What is the verification command.
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs

16. How do you prevent a router from switching to the shortest path tree once the data flow has begun. Where is the documentation?
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Priority - Link Cost - Router ID - Port Cost
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20

17. How do you change spanning tree path
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Priority - Link Cost - Router ID - Port Cost
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Terminal services / Appendix / Regexp.

18. How can you pass traffic sourced from the router that will not be reflected by the reflexive access list?
...
Control-plane transit - control-plane host - control-plane cef-exception
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
The neighbor remove-private-as command.

19. How do you affect OSPF path selection
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
The neighbor remove-private-as command.
Priority - Link Cost - Router ID - Port Cost

20. How do you configure a Multicast RP mapping agent?
Broadband Access - Aggregation
...
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Control-plane transit - control-plane host - control-plane cef-exception

21. How do you configure autorp when in sparse mode only?
Global Config - ip pim autorp listener
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer

22. What are the for control plane interfaces or modes?
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Control-plane transit - control-plane host - control-plane cef-exception
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs

23. How do you prevent the console line from performing DNS resolution
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
The neighbor remove-private-as command.
...
Transport preferred none