ccnp test Practice Exam 2025: Latest Questions

A network engineer is designing a campus network and needs to ensure that Layer 2 loops are prevented while allowing for fast convergence in case of link failure. Which spanning tree protocol should be implemented for optimal performance?

An organization wants to implement network automation using Python scripts to configure multiple devices. Which Python library is specifically designed for managing network devices using SSH and supports Cisco IOS devices?

A network administrator notices that OSPF neighbor relationships are not forming between two directly connected routers. The administrator verifies that the interfaces are up and IP connectivity exists. Which command should be used first to identify the OSPF-specific issue?

A company is deploying SD-Access fabric and needs to understand the role of different nodes. Which device serves as the control plane node that maintains the endpoint-to-location mapping database?

A network engineer is implementing QoS and needs to classify voice traffic for priority treatment. The VoIP phones are using DSCP marking. Which DSCP value is the industry standard for voice bearer traffic?

An enterprise is implementing a network security solution and needs to prevent lateral movement of threats within the network while maintaining microsegmentation capabilities. Which Cisco security technology provides identity-based segmentation enforcement across the network infrastructure?

A data center is implementing overlays using VXLAN technology. The network team needs to understand the encapsulation. What is the role of the VTEP (VXLAN Tunnel Endpoint) in a VXLAN deployment?

A network administrator is troubleshooting intermittent connectivity issues and suspects duplicate IP addresses. After reviewing logs, the administrator wants to implement a feature that prevents devices with duplicate IP addresses from communicating on the network. Which feature should be configured?

An enterprise network uses DMVPN Phase 3 with dual-hub redundancy for branch connectivity. After a hub failure, spoke-to-spoke tunnels are not forming dynamically, and traffic is routing through the remaining hub instead of directly between spokes. Assuming NHRP is configured correctly, what is the most likely cause of this behavior?

A network architect is designing a solution for service insertion in a data center using Cisco ACI. The requirement is to redirect specific traffic flows through a firewall appliance without changing the existing EPG structure. The firewall is not ACI-aware and cannot participate in the fabric. Which ACI construct should be implemented to achieve this requirement?

A network engineer is implementing Python scripts to automate device configuration using RESTCONF. Which data encoding format is mandatory for RESTCONF API communication?

An organization needs to monitor network device CPU utilization in real-time across 500 devices. Traditional SNMP polling is causing excessive management traffic. Which technology should be implemented to reduce network overhead while providing telemetry data?

A network administrator notices that OSPF adjacency keeps flipping between UP and DOWN states on a point-to-point link. The output shows 'Dead timer expired' messages. Physical layer connectivity tests pass. What is the most likely cause?

What is the primary advantage of using VXLAN for network segmentation in a data center environment compared to traditional VLANs?

A company is deploying SD-Access fabric and needs to understand traffic flow patterns. When an endpoint in one Virtual Network (VN) needs to communicate with an endpoint in a different VN, which component is responsible for enforcing segmentation and applying security policies?

An engineer is configuring MACsec on links between distribution and access switches. After configuration, the link fails to come up. Which requirement must be verified to ensure MACsec adjacency forms successfully?

A network team wants to use Ansible for network automation. What is the primary advantage of using Ansible's agentless architecture for network device management?

A large enterprise is experiencing performance issues with wireless clients roaming between access points. The network uses centralized WLC architecture with multiple controllers. Which feature should be implemented to optimize Layer 2 roaming performance?

An organization implements DNA Center for network management. Which southbound protocol does DNA Center primarily use to communicate with and configure network devices?

A security architect is designing a zero-trust network access solution using Cisco ISE with TrustSec. The requirement is to apply security policies based on user identity and device posture regardless of network location or IP address. Which TrustSec component provides this capability by tagging traffic with security group information?

A network engineer is implementing QoS on a Cisco enterprise network and needs to ensure voice traffic receives priority treatment with minimal delay and jitter. Which QoS mechanism should be configured on the router interfaces to achieve this requirement?

An organization is deploying SD-Access fabric and needs to understand the role of different node types. A network administrator observes that certain nodes are responsible for connecting external Layer 3 networks to the SD-Access fabric and handling route redistribution. Which SD-Access fabric node type performs this function?

A network engineer is troubleshooting connectivity issues in a multi-area OSPF network. Routers in Area 10 cannot reach networks in Area 20, but both areas can reach Area 0. The engineer discovers that Area 10 is not directly connected to Area 0 and is connected through Area 5. What is the most likely cause of this connectivity issue?

A security team is implementing network segmentation using Cisco TrustSec and wants to enforce security policies based on user identity and device type rather than IP addresses. After authentication, endpoints are assigned Security Group Tags (SGTs). Where in the network should Security Group Access Control Lists (SGACLs) be enforced to provide the most scalable and efficient policy enforcement?

A network automation engineer needs to write a Python script using RESTCONF to retrieve the running configuration of interface GigabitEthernet0/0/1 from a Cisco IOS XE device. Which HTTP method and content-type header combination should be used for this operation?