Test your basic knowledge |

CCIE Lab Tasks

Instructions:

Answer 23 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. How can you match on closed ports on the router for the purpose of filtering
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
It will show the IP addresses on the device with the subnet mask
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs

2. How do you filter autorp multicast groups?

3. How do you prevent the console line from performing DNS resolution
Transport preferred none
...
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI

4. What is the command to configure the CAM table timers for Vlan 88 to expire in 10 minutes. What is the verification command.
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer

5. Move interface encapsulation - interface ip access-group - hostname and show run to level 2
It will show the IP addresses on the device with the subnet mask
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group

6. How do you penalize flapping BGP routes? Verification?
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Broadband Access - Aggregation
Terminal services / Appendix / Regexp.
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)

7. Configure a reflexive access list to permit traffic out interface Fa0/0 that allows all tcp traffic.
Negotiation conditions - Show interface switchport.
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
It will show the IP addresses on the device with the subnet mask
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g

8. Where in documentation is BGP regular expressions.
Terminal services / Appendix / Regexp.
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)

9. Where is PPPoE in the documentation
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
Transport preferred none
Broadband Access - Aggregation
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20

10. List the BGP decision process
The neighbor remove-private-as command.
Terminal services / Appendix / Regexp.
Broadband Access - Aggregation
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID

11. What are the for control plane interfaces or modes?
Global Config - ip pim autorp listener
Transport preferred none
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
Control-plane transit - control-plane host - control-plane cef-exception

12. How can you pass traffic sourced from the router that will not be reflected by the reflexive access list?
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)

13. How do you prevent a router from switching to the shortest path tree once the data flow has begun. Where is the documentation?
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI

14. How do you configure autorp when in sparse mode only?
...
Terminal services / Appendix / Regexp.
Global Config - ip pim autorp listener
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group

15. How do you affect OSPF path selection
The neighbor remove-private-as command.
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20

16. How do you change spanning tree path
Broadband Access - Aggregation
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Priority - Link Cost - Router ID - Port Cost
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter

17. How do you stop private AS numbers from being advertised
...
Terminal services / Appendix / Regexp.
The neighbor remove-private-as command.
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i

18. How do you configure a Multicast RP mapping agent?
Control-plane transit - control-plane host - control-plane cef-exception
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a

19. What does the command 'show protocols' do
It will show the IP addresses on the device with the subnet mask
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Global Config - ip pim autorp listener

20. What is the process for configuring Trunking and VTP. How do we check our work.
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Negotiation conditions - Show interface switchport.
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
Control-plane transit - control-plane host - control-plane cef-exception

21. How do you configure a Multicast RP candidate?
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
The neighbor remove-private-as command.
...

22. Define the neighbor matrix for OSPF network types. Which are unicast vs. multicast - and which needs the explicit neighbor commands.
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Control-plane transit - control-plane host - control-plane cef-exception
...

23. How do you filter administratively scoped groups from transiting a router?
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
Broadband Access - Aggregation
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI