ccnp test Intermediate Practice Exam: Medium Difficulty 2025

A network architect is designing a campus network that requires high availability and rapid convergence. The design includes a core layer with two switches and a distribution layer with four switches. Which architecture design principle should be implemented to prevent Layer 2 loops while maintaining all links active for load balancing?

An organization has deployed VXLAN overlay network in their data center. The network engineer needs to configure the VTEP to support Layer 2 extension across the IP fabric. Which two components must be configured on the VTEP to establish VXLAN tunnels? (Choose the best answer that includes both necessary components)

A network administrator configured OSPF on a router but notices that a neighbor adjacency is stuck in the EXSTART state. The administrator verifies that IP connectivity exists between the routers and OSPF hello packets are being exchanged. What is the most likely cause of this issue?

An enterprise network uses EIGRP as the routing protocol. A network engineer needs to implement route summarization on a router to reduce routing table size and improve network stability. The router has the following networks in its routing table: 172.16.16.0/24, 172.16.17.0/24, 172.16.18.0/24, and 172.16.19.0/24. Which summary address should be configured to include all four networks with minimal waste of address space?

A company implements a WAN solution connecting multiple branch offices to headquarters. The network team configured DMVPN Phase 3 with dual hubs for redundancy. After implementation, branch-to-branch traffic is not taking the optimal spoke-to-spoke tunnel path and instead is routing through the hub. What configuration is missing to enable direct spoke-to-spoke communication?

An IT team is troubleshooting intermittent connectivity issues in their network. They want to use IP SLA to monitor the reachability of a critical server and track response times. Which IP SLA operation type combined with tracking would be most appropriate for triggering a static floating route failover when the primary path experiences latency above 100ms?

A security administrator needs to implement 802.1X authentication on switch access ports connecting employee workstations. Some legacy printers that don't support 802.1X also need to connect. The requirement is to allow authenticated devices full access while restricting unauthenticated devices to a limited guest VLAN. Which configuration approach satisfies these requirements?

A company's security policy requires implementing dynamic segmentation using Cisco TrustSec. The network has a mix of TrustSec-capable and non-capable devices. Which two components are essential for SGT propagation in an inline tagging deployment across the network infrastructure?

A network automation engineer is developing a Python script using NETCONF to configure multiple Cisco IOS XE devices. The script needs to retrieve the current running configuration from a device. Which combination of NETCONF operation and data encoding should be used for this task?

An organization wants to automate network configuration management using a model-driven approach. The team is evaluating YANG models for configuring interfaces on Cisco devices. What is the primary advantage of using YANG models with NETCONF or RESTCONF compared to traditional CLI-based automation?