Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) v1.2 practice questions

237 free questions with answers and explanations.

Practice test
  1. 51.A network engineer is deploying a new service that requires precise, deterministic measurements of end-to-end latency and jitter between two network devices. The measurements need to be active, synthetic, and able to simulate various types of network traffic (e.g., VoIP, video). The engineer wants to proactively monitor performance and trigger alerts if thresholds are exceeded. Which Cisco technology is best suited for this purpose?Infrastructure
  2. 52.A network engineer is troubleshooting an intermittent connectivity issue for several end-user devices connected to a Cisco Catalyst switch. Users report that their network access drops randomly for short periods, especially during peak hours. The engineer suspects that excessive broadcast traffic, possibly due to a misconfigured device or a loop, is overwhelming the switch ports. Which Layer 2 feature is designed to prevent service disruptions caused by excessive broadcast, multicast, or unknown unicast traffic on a switch port?Infrastructure
  3. 53.A network administrator is configuring a new Cisco Catalyst 9300 switch. The requirement is to ensure that when a new device connects to a port, it first authenticates with a RADIUS server before gaining network access. If authentication fails, the device should be placed in a restricted VLAN. Which feature should the administrator configure?Infrastructure
  4. 54.A network administrator needs to automate a recurring task on a Cisco router: every Monday at 3:00 AM, the router should clear its BGP neighbor statistics for a specific peer to ensure fresh data for analysis. The administrator wants to use a feature that resides directly on the router and can execute CLI commands based on a scheduled event. Which Cisco IOS feature should be used?Infrastructure
  5. 55.A network administrator is configuring a new Cisco Catalyst 9300 switch. The requirement is to ensure that only specific devices with known MAC addresses can connect to a particular port, and if an unknown device attempts to connect, the port should shut down immediately. Which feature should the administrator configure?Infrastructure
  6. 56.A network engineer is configuring a new Layer 3 switch to act as a default gateway for multiple VLANs. To provide redundancy and high availability for the default gateway, two Layer 3 switches will be used. The requirement is that one switch actively forwards traffic, while the other remains in a standby state, taking over seamlessly if the active switch fails. Which protocol should the engineer configure to achieve this?Infrastructure
  7. 57.A network security team needs to monitor incoming and outgoing traffic on a critical server connected to a Catalyst 9300 switch. The team wants to capture all traffic from the server's interface and send it to an intrusion detection system (IDS) connected to another port on the same switch without affecting the server's performance. Which feature should the engineer configure?Infrastructure
  8. 58.A network technician is configuring a Cisco router to provide Internet access for a small office. The office has a single public IP address (203.0.113.10) and an internal private network (192.168.1.0/24). All internal devices need to share the single public IP address for outbound Internet access. Which NAT configuration type should the technician implement?Infrastructure
  9. 59.A network operations team is implementing a new monitoring solution that requires detailed, real-time visibility into network traffic patterns, application usage, and potential security threats across their enterprise network. They need a protocol that can collect IP flow information, such as source/destination IP, ports, and protocols, from routers and switches without capturing the full packet payload. Which network service should be configured?Infrastructure
  10. 60.A network engineer needs to monitor traffic between a web server and its clients without disrupting the production network. The monitoring device is located on a different switch in a different VLAN from the web server. Which feature should the engineer configure to achieve this monitoring capability?Infrastructure
  11. 61.A network engineer is designing a multicast solution for a video conferencing system that uses a single source and multiple receivers spread across different subnets. The receivers dynamically join and leave the multicast groups. The network uses OSPF as its unicast routing protocol. Which multicast routing protocol is most appropriate for this scenario?Infrastructure
  12. 62.A network technician is configuring an access layer switch for a new office. Users connecting to this switch will receive their IP configuration from a DHCP server on a different VLAN. To prevent unauthorized or rogue DHCP servers from operating on the network, which feature should be enabled on the switch ports connected to end-user devices?Infrastructure
  13. 63.A network administrator is troubleshooting an intermittent connectivity issue between two devices on a Layer 2 network. The administrator suspects a unidirectional link failure, where traffic flows in one direction but not the other. This type of failure can lead to silent packet drops and unexpected behavior in protocols like Spanning Tree. Which Cisco proprietary feature helps detect and manage these unidirectional links?Infrastructure
  14. 64.A network engineer is configuring a new Layer 3 switch to support inter-VLAN routing. The engineer wants to ensure that the switch utilizes hardware-based forwarding for maximum performance and efficiency. Which Cisco technology must be enabled and properly configured for this hardware-based forwarding to occur?Infrastructure
  15. 65.A network administrator needs to ensure that all network devices in a large enterprise network are synchronized to a common, accurate time source. The administrator wants to configure the Cisco routers and switches to act as NTP clients and receive time from a central NTP server. Which command sequence would correctly configure a device as an NTP client, assuming the NTP server's IP address is 10.0.0.1?Infrastructure
  16. 66.A network engineer is configuring a Cisco router to provide Internet access for a small office. The office has a single public IP address, but multiple internal devices need to access the Internet simultaneously. Which NAT type allows multiple internal private IP addresses to share a single public IP address by using different port numbers?Infrastructure
  17. 67.A network engineer is configuring a Cisco router to automatically execute a series of commands if a specific event occurs, such as an interface going down or an SNMP trap being received. The engineer wants to avoid manual intervention for these routine tasks. Which feature should the engineer use?Infrastructure
  18. 68.A network architect is designing a multicast solution for a video streaming application in a large enterprise. The application requires efficient distribution of video streams to receivers that are sparsely distributed across different VLANs and subnets. The multicast routing protocol should minimize unnecessary traffic flooding and only forward streams to segments with active listeners. Which multicast routing protocol is best suited for this scenario?Infrastructure
  19. 69.A network engineer is configuring a Cisco Catalyst 9300 switch to support multiple VLANs. The requirement is for the switch to act as the default gateway for these VLANs, performing inter-VLAN routing. Which command is used to create a Layer 3 interface for each VLAN on the switch?Infrastructure
  20. 70.A network administrator needs to troubleshoot an intermittent connectivity issue between two switches. The issue randomly occurs and affects only a few devices. The administrator suspects a unidirectional link, where traffic flows in one direction but not the other. Which Cisco feature can help detect and prevent issues caused by such a link?Infrastructure
  21. 71.A network administrator is configuring a new Cisco Catalyst 9300 switch to support multiple VLANs. Each VLAN needs to have its own IP address and act as a default gateway for its respective subnet. Which type of interface should the administrator configure on the switch for this purpose?Infrastructure
  22. 72.A network security team needs to capture traffic from multiple VLANs traversing a core switch and send it to a centralized security appliance located in a different data center, several hops away. The security appliance only has a single network interface. Which SPAN variant is best suited for this requirement, considering the remote location and the need to encapsulate the mirrored traffic?Infrastructure
  23. 73.A network engineer is configuring a new Cisco router and needs to ensure that all internal hosts can access the internet using a single public IP address. The router should maintain a mapping of internal private IP addresses and source port numbers to the single public IP address and unique port numbers. Which NAT type should the engineer implement?Infrastructure
  24. 74.A network engineer is configuring a Cisco router to use NTP. The router needs to synchronize its time with a reliable external source, but also provide time synchronization services to other devices on its local network segment. Which NTP mode should be configured on the router's interface connected to the local network?Infrastructure
  25. 75.A network administrator is troubleshooting a Layer 2 loop in a complex enterprise network. The network uses Rapid PVST+ and has multiple redundant links. The administrator notices that some ports that should be blocking traffic are forwarding, leading to broadcast storms. Which STP enhancement is designed to prevent non-designated ports from transitioning to a forwarding state if they stop receiving BPDUs, thus protecting against loops?Infrastructure
  26. 76.A data center network uses multiple Layer 3 switches for routing between VLANs. Engineers observe that traffic for a specific destination is always forwarded through the same path, even when multiple equal-cost paths exist. They want to utilize all available bandwidth by distributing traffic across these equal-cost paths. Which Layer 3 feature should be enabled or verified to achieve this goal?Infrastructure
  27. 77.A network engineer is troubleshooting a multicast video distribution system. Users in different VLANs are reporting issues receiving the video stream. The multicast source is in one VLAN, and receivers are in several other VLANs. What protocol is responsible for allowing end devices to signal their interest in receiving a particular multicast stream to their local Layer 2 switch?Infrastructure
  28. 78.A network operations team is implementing a new monitoring solution that requires detailed information about traffic flows, including source/destination IP addresses, port numbers, protocols, and byte counts, for capacity planning and security analysis. Which network service should they enable on their routers and switches?Infrastructure
  29. 79.A network security team needs to capture traffic from multiple VLANs traversing a core switch and send it to a dedicated analysis server located on a different switch in a different building. The analysis server needs to receive a copy of the traffic from several source ports across these VLANs. Which SPAN feature should be implemented?Infrastructure
  30. 80.A network operations team needs to monitor the round-trip time (RTT) and jitter for a critical VoIP application between two branches. They want to use an active monitoring tool built into Cisco IOS devices that simulates application traffic. Which feature should they configure and deploy?Infrastructure
  31. 81.A network engineer is troubleshooting a Layer 2 loop in a complex enterprise network. The loop is causing broadcast storms and MAC address table instability. The network uses Rapid PVST+. Which STP feature is designed to prevent a port from becoming a root port or designated port if it receives its own BPDU or a superior BPDU, effectively protecting against accidental loops caused by misconfigurations?Infrastructure
  32. 82.A network engineer is troubleshooting a connection between two Catalyst 9300 switches that are configured for an EtherChannel. The EtherChannel is not forming, and both ends are configured to actively negotiate the bundle. After checking the physical connections, the engineer suspects a mismatch in the bundling protocol. Which protocol should be configured on both switches for active negotiation?Infrastructure
  33. 83.A network engineer is configuring a new Catalyst 9300 switch. The requirement is to ensure that when a critical server's network adapter fails, its backup adapter on a different switch port automatically takes over with minimal disruption, without relying on Spanning Tree Protocol convergence time. Which Layer 2 feature is designed for this fast failover scenario?Infrastructure
  34. 84.A network engineer wants to configure a Cisco router to automatically execute a series of commands if a specific condition is met, such as an interface going down or CPU utilization exceeding a threshold. This automation should help in proactive troubleshooting and self-healing. Which Cisco feature is designed for this event-driven automation?Infrastructure
  35. 85.A network engineer is configuring a new Layer 3 switch to act as a default gateway for multiple VLANs in a campus network. To ensure high availability, the engineer needs to implement a first-hop redundancy protocol that allows multiple switches to share the same virtual IP address and MAC address. Which protocol meets this requirement and is Cisco proprietary?Infrastructure
  36. 86.A network architect is designing a wireless network for a large university campus with thousands of users. The design requires centralized management, seamless roaming across a vast area, and robust security features at scale. Which wireless network architecture is best suited for this scenario?Infrastructure
  37. 87.A network administrator needs to ensure that all network devices in a large enterprise network have synchronized clocks to facilitate accurate log correlation and troubleshooting. The administrator wants to configure a central NTP server and have all other devices synchronize with it. Which NTP mode should be configured on the client devices to obtain time from the central server?Infrastructure
  38. 88.A network engineer is implementing a new DHCP server on a Cisco router for a segment of the network where VoIP phones are also present. The phones require specific DHCP options to register with the call manager. Which DHCP option is commonly used to provide the IP address of the TFTP server (Call Manager) to Cisco IP phones?Infrastructure
  39. 89.A network security team has detected suspicious traffic patterns originating from multiple internal hosts, suggesting a potential DDoS attack or malware infection. They need to capture and analyze all traffic traversing a specific core switch port that connects to a critical server farm, and send this captured traffic to an intrusion detection system (IDS) located on a different network segment. Which Cisco feature would allow this remote capture and forwarding of traffic?Infrastructure
  40. 90.A network engineer needs to configure a Cisco Catalyst 9300 switch to automatically detect and assign a specific VLAN for IP phones connected to access ports, ensuring they receive the correct voice QoS and DHCP options. Which feature enables this automatic VLAN assignment for IP phones?Infrastructure
  41. 91.A network engineer is troubleshooting a Layer 2 loop in a complex enterprise network. The loop is causing severe network instability, including broadcast storms and MAC address table instability. Which Cisco proprietary protocol can be implemented to detect and mitigate these Layer 2 loops while still allowing redundant paths for high availability?Infrastructure
  42. 92.A network administrator is configuring a Cisco router to automatically perform a series of commands if a specific event occurs, such as an interface going down or a high CPU utilization threshold being crossed. This automation should execute a predefined script on the router itself. Which Cisco IOS feature allows for this type of event-driven automation?Infrastructure
  43. 93.A network engineer is deploying a new service that requires precise, deterministic measurements of network performance metrics like jitter and packet loss between two critical points in the network. The measurements need to be active and on-demand. Which feature should the engineer implement?Infrastructure
  44. 94.A network administrator is troubleshooting an intermittent connectivity issue between two Cisco Catalyst switches. The issue manifests as periods of packet loss and flapping links, specifically on fiber optic connections. Both switches report 'UDLD_DISABLED' messages. Which feature should the administrator enable to detect and prevent such issues on these links?Infrastructure
  45. 95.A network engineer is configuring a new Cisco Catalyst 9300 switch. The switch needs to support multiple VLANs and provide inter-VLAN routing for these VLANs. Which of the following interface types must be configured to achieve inter-VLAN routing on the switch itself?Infrastructure
  46. 96.A network operations team is preparing for a major software upgrade on their core routing infrastructure. Before the upgrade, they want to establish a baseline of network performance, specifically focusing on end-to-end delay, jitter, and packet loss for critical voice traffic paths. Which feature can be used to generate synthetic traffic and measure these specific metrics?Infrastructure
  47. 97.A network engineer is designing a new wireless network for a large office building. The design requires centralized management, seamless roaming for users across floors, and efficient deployment of multiple SSIDs with consistent security policies. Which wireless architecture would best meet these requirements?Infrastructure
  48. 98.A network security team is designing a network segmentation strategy for a university campus. The goal is to isolate student, faculty, and guest networks, as well as critical research labs and administrative systems, to limit the blast radius of potential security breaches. The solution must allow for dynamic policy application based on user identity and device posture. Which network security architecture is best suited to meet these requirements?Architecture
  49. 99.A network architect is designing a new Wi-Fi 6 (802.11ax) network for a high-density office environment. The design requires optimal performance for a large number of concurrent users, supporting both legacy and new client devices. Which WLAN deployment model provides centralized control, simplified management, and advanced RF optimization capabilities necessary for this scenario?Architecture
  50. 100.A network architect is evaluating different virtualization technologies for expanding a data center. The goal is to isolate applications and services from each other at the network layer, allowing them to run independently on shared physical infrastructure. This isolation should extend beyond simple VLANs to provide complete separation of routing tables and forwarding instances. Which network virtualization technology is best suited for this requirement?Architecture