Test your basic knowledge |

CCIE Lab Tasks

Instructions:

Answer 23 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. How do you prevent a router from switching to the shortest path tree once the data flow has begun. Where is the documentation?
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID
Negotiation conditions - Show interface switchport.
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI

2. How do you configure autorp when in sparse mode only?
Global Config - ip pim autorp listener
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
Control-plane transit - control-plane host - control-plane cef-exception

3. Define the neighbor matrix for OSPF network types. Which are unicast vs. multicast - and which needs the explicit neighbor commands.
The neighbor remove-private-as command.
Broadband Access - Aggregation
Global Config - ip pim autorp listener
...

4. What does the command 'show protocols' do
Priority - Link Cost - Router ID - Port Cost
It will show the IP addresses on the device with the subnet mask
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
...

5. Configure a reflexive access list to permit traffic out interface Fa0/0 that allows all tcp traffic.
The neighbor remove-private-as command.
Global Config - ip pim autorp listener
Priority - Link Cost - Router ID - Port Cost
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i

6. Where is PPPoE in the documentation
Broadband Access - Aggregation
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Transport preferred none

7. How can you match on closed ports on the router for the purpose of filtering
...
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter

8. What is the command to configure the CAM table timers for Vlan 88 to expire in 10 minutes. What is the verification command.
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
It will show the IP addresses on the device with the subnet mask
Negotiation conditions - Show interface switchport.
Terminal services / Appendix / Regexp.

9. How do you filter autorp multicast groups?

10. How do you prevent the console line from performing DNS resolution
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Control-plane transit - control-plane host - control-plane cef-exception
Transport preferred none
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20

11. What is the process for configuring Trunking and VTP. How do we check our work.
Transport preferred none
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g
Control-plane transit - control-plane host - control-plane cef-exception
Negotiation conditions - Show interface switchport.

12. How do you affect OSPF path selection
Change interface BW - Change Neighbor Cost - Change Interface ip ospf cost - Change OSPF process reference BW (all routers)
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Transport preferred none
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter

13. How do you configure a Multicast RP candidate?
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-announce loopback 0 scope 20
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
Terminal services / Appendix / Regexp.

14. Where in documentation is BGP regular expressions.
Terminal services / Appendix / Regexp.
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
It will show the IP addresses on the device with the subnet mask

15. How do you configure a Multicast RP mapping agent?
Interface config - int looopback 0 - ip pim sparse-dense-mode - Global Config - ip pim send-rp-discovery loopback 0 scope 20
Control-plane transit - control-plane host - control-plane cef-exception
Class-map type port-filter - policy-map type port-filter - service-policy type port-filter
Terminal services / Appendix / Regexp.

16. How do you change spanning tree path
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Negotiation conditions - Show interface switchport.
Broadband Access - Aggregation
Priority - Link Cost - Router ID - Port Cost

17. How do you filter administratively scoped groups from transiting a router?
Priority - Link Cost - Router ID - Port Cost
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Transport preferred none

18. How can you pass traffic sourced from the router that will not be reflected by the reflexive access list?
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
Terminal services / Appendix / Regexp.
Negotiation conditions - Show interface switchport.
Priority - Link Cost - Router ID - Port Cost

19. Move interface encapsulation - interface ip access-group - hostname and show run to level 2
Privilege exec level 2 show run - privilege configure level 2 hostname - privilege configure level 2 interface - privilege interface all level 2 encapsulation - privilege interface level 2 ip access-group
Global Config - Create reflexive access list: ip access-list extended OUTBOUND - permit tcp any any reflect REFLECTED - Create inbound access list that will evaluate reflected. - ip access-list extended INBOUND - evaluate REFLECTED - Apply to outer i
Transport preferred none
...

20. How do you penalize flapping BGP routes? Verification?
...
Router bgp100 - bgp dampening 15 500 3000 60 - (half life - re-use limit - suppress limit - maximum suppress time)
You can policy route the traffic through the Loopback interface and then it will hit the reflexive access list. Create access list to match traffic. - ip access-list extended ORIGINATED - permit icmp any any - permit tcp any any eq telnet - Create a
On the mapping agent: Create an access list to define the RP's - access-list 25 permit 150.1.3.3 - Create and access list to define the groups - access-list 26 permit 239.0.0.0 0.255.255.255 - Apply the filter - ip pim rp-announce-filter rp-list 25 g

21. What are the for control plane interfaces or modes?
Spf-threshold command: Global Config:Define the group with an access list: access-list 52 permit 239.0.0.0 0.255.255.255 - Change the shortest path tree threshold - ip pim spt-threshold infinity group-list 52 - This is documented under: Optimizing PI
Priority - Link Cost - Router ID - Port Cost
Control-plane transit - control-plane host - control-plane cef-exception
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer

22. How do you stop private AS numbers from being advertised
Mac address-table aging-timer 10 vlan 88 - show mac address-table aging-timer
The neighbor remove-private-as command.
Priority - Link Cost - Router ID - Port Cost
Multicast Boundary:On upstream router: Create Access List of group to deny - remember to allow others - access-list 51 deny 239.0.0.0 0.255.255.255 - access-list 51 permit 224.0.0.0 5.255.255.255 - Configure the boundary on the interface facing downs

23. List the BGP decision process
Control-plane transit - control-plane host - control-plane cef-exception
It will show the IP addresses on the device with the subnet mask
Terminal services / Appendix / Regexp.
Highest Weight - Highest Local Pref - Locally originated - Shortest AS-Path - Lowest origin type (IGP - EGP - Incomplete) - Lowest MED - EBGP over IBGP - Lowest IGP Metric - Oldest Route - Lowest Router ID