CCIE Lab Tasks

Instructions:

• Answer 23 questions in 15 minutes.
• If you are not ready to take this test, you can study here.
• Match each statement with the correct term.
• Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. How do you prevent the console line from performing DNS resolution
Transport preferred none
The neighbor remove-private-as command.
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter


2. How can you pass traffic sourced from the router that will not be reflected by the reflexive access list?
Global Config - ip pim autorp listener
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Negotiation conditions - Show interface switchport.


3. Move interface encapsulation - interface ip access-group - hostname and show run to level 2
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Terminal services / Appendix / Regexp.
Priority - Link Cost - Router ID - Port Cost
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)


4. How do you prevent a router from switching to the shortest path tree once the data flow has begun. Where is the documentation?
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI


5. How do you filter administratively scoped groups from transiting a router?
Control-plane transit - control-plane host - control-plane cef-exception
Broadband Access - Aggregation
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20


6. Configure a reflexive access list to permit traffic out interface Fa0/0 that allows all tcp traffic.
Broadband Access - Aggregation
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI


7. What is the process for configuring Trunking and VTP. How do we check our work.
Negotiation conditions - Show interface switchport.
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
Broadband Access - Aggregation


8. Where in documentation is BGP regular expressions.
Negotiation conditions - Show interface switchport.
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Terminal services / Appendix / Regexp.
...


9. How do you configure a Multicast RP mapping agent?
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)


10. How do you change spanning tree path
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
Priority - Link Cost - Router ID - Port Cost
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter


11. How can you match on closed ports on the router for the purpose of filtering
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Negotiation conditions - Show interface switchport.
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g


12. How do you affect OSPF path selection
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Negotiation conditions - Show interface switchport.
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)


13. Define the neighbor matrix for OSPF network types. Which are unicast vs. multicast - and which needs the explicit neighbor commands.
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
...
Control-plane transit - control-plane host - control-plane cef-exception


14. What are the for control plane interfaces or modes?
...
Control-plane transit - control-plane host - control-plane cef-exception
It will show the IP addresses on the device with the subnet mask
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a


15. How do you penalize flapping BGP routes? Verification?
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Terminal services / Appendix / Regexp.


16. How do you stop private AS numbers from being advertised
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
The neighbor remove-private-as command.


17. What is the command to configure the CAM table timers for Vlan 88 to expire in 10 minutes. What is the verification command.
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
Broadband Access - Aggregation
Control-plane transit - control-plane host - control-plane cef-exception


18. How do you configure autorp when in sparse mode only?
Global Config - ip pim autorp listener
Negotiation conditions - Show interface switchport.
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20


19. Where is PPPoE in the documentation
Negotiation conditions - Show interface switchport.
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Broadband Access - Aggregation


20. How do you configure a Multicast RP candidate?
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
Global Config - ip pim autorp listener
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20


21. List the BGP decision process
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Transport preferred none
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Terminal services / Appendix / Regexp.


22. How do you filter autorp multicast groups?


23. What does the command 'show protocols' do
The neighbor remove-private-as command.
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
It will show the IP addresses on the device with the subnet mask
Global Config - ip pim autorp listener