Home > Multiple Choice Questions

Multiple Choice Questions

April 2nd, 2015 in TSHOOT v2 Go to comments

Question 1

Question 2

Question 3


This command send ICMP packets with DF bit set. If the ping fails then there is problem with the path MTU. Another way to test the MTU of the interface is using the “sweep” keyword in extended “ping” command.

Question 4

Question 5


R2 shows “FULL/-” which means that its neighbor is configured in non-broadcast network. This is usually the result of the “ip ospf point-to-…” command on interface E0/0 of R2.

R1 shows “FULL/DR” which means it is configured in broadcast network. So the network types of R1 and R2 are mismatched which makes the advertising router unreachable and no routes update can be sent to other router.

Question 6

Question 7


Question 1


First we need some basic knowledge about GRE tunnel:

GRE tunnels are designed to be completely stateless. This means that each tunnel endpoint does not keep any information about the state or availability of the remote tunnel endpoint. A consequence of this is that, by default, the local tunnel endpoint router does not have the ability to bring the line protocol of the GRE Tunnel interface down if the remote end of the tunnel is unreachable. The ability to mark an interface as down when the remote end of the link is not available is used in order to remove any routes (specifically static routes) in the routing table that use that interface as the outbound interface. Specifically, if the line protocol for an interface is changed to down, then any static routes that point out that interface are removed from the routing table. This allows for the installation of an alternate (floating) static route or for Policy Based Routing (PBR) in order to select an alternate next-hop or interface.

(Reference: http://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/118361-technote-gre-00.pdf)

An example of configuring a GRE tunnel:

interface Tunnel1
ip address
tunnel source Loopback1
tunnel destination

In order to make this interface up/up, a valid tunnel source and tunnel destination must be configured.
+ A valid tunnel source means any interface that is itself in the up/up state and has an IP address configured on it. For example, if the tunnel source was changed to Loopback0 (which has not been assigned an IP address), the tunnel interface would go down even though Loopback0 is in the up/up state.
+ A valid tunnel destination is one which is routable. However, it does not have to be reachable, which can be seen from this ping test:

Router# show ip route
% Network not in table
Router# show ip route | inc
Gateway of last resort is to network
S* [1/0] via
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:
Success rate is 0 percent (0/5)

In this case the tunnel1 is still up/up because it has a default route. From this we can deduce answer C is not correct but answer D is correct.

GRE tunnel keepalives timers on each side are independent and do not have to match (answer E is not correct). The problem with the configuration of keepalives only on one side of the tunnel is that only the router that has keepalives configured marks its tunnel interface as down if the keepalive timer expires. The GRE tunnel interface on the other side, where keepalives are not configured, remains up even if the other side of the tunnel is down. The tunnel can become a black-hole for packets directed into the tunnel from the side that did not have keepalives configured.

Answer A is not correct because normal GRE tunnel is always required to be in up/up state.

Question 2


OSPF routers go through the seven states while building neighbor relationship with other routers.

+ Down state: no Hellos have been received on the interface. All OSPF routers begin in this state. It begins by sending a hello packet through each of its interfaces participating in OSPF, even though it does not know the identity of the DR or of any other routers. The hello packet is sent out using the multicast address
+ Attempt/Init state: Hello packet received
+ 2-way state: the router received the Hello message and replied with a Hello message of his own. Receiving a Database Descriptor (DBD) packet from a neighbor in the init state will also a cause a transition to 2-way state.
+ Exstart state: beginning of the LSDB exchange between both routers. Routers will start to exchanging link state information. This state specifies that DR and BDR have been elected and master-slave relation is determined.
+ Exchange state: DBD packets are exchanged. DBDs contain LSAs headers. Routers will use this information to see what LSAs need to be exchanged.
+ Loading state: one neighbor sends LSRs (Link State Requests) for every network it doesn’t know about. The other neighbor replies with the LSUs (Link State Updates) which contain information about requested networks. After all the requested information have been received, other neighbor goes through the same process.
+ Full state: both routers have synchronized the link state database and are fully adjacent with each other. OSPF routing can now begin.

In the above output we see that R4 received the first DBD from (line 4) which cause it to move from INIT to 2-way state (line 5). Then it received the second DBD from That means it is in Exstart state and two OSPF routers are exchanging DBD packets. In fact the DBD packets are also exchanged in Exchange state but they have to pass the Exstart state first so Exstart state is the best answer in this case.

Question 3

Question 4


Two GRE tunnels ( & are considered directly connected so no routing protocol needs to be used so that they can see each other. But we have to configure a routing protocol (static routing in this case) so that they R1 can reach network via Tunnel1.

Note: The “U” letter (short for Unreachable) we see above when pinging typically means there is no available route to the destination.

Question 5


From the “show ip route ospf” output on R2 we notice that it does not know how to reach Lo0 of R5 ( Therefore we need to advertise this prefix on R5 to R2 via:
+ Redistribute connected routes (which includes Loopback’s IP addresses) to OSPF on R5
+ Advertise Lo0 interface to OSPF on R5 (via the “network” command under OSPF process on R5)

Question 6


From the outputs above we can imagine the topology of them

OSPF_Broadcast.jpgIn this topology:
+ There are only two routers and a loopback interface -> A is not correct.
+ R1 learn route to as O IA as they are in different OSPF area -> B is not correct, E is correct.
+ R2 is an OSPF ABR -> C is not correct
+ E0/0 of R1 is elected DR so it was configured as OSPF type broadcast, not point-to-point (which does not elect DR/BDR) -> D is not correct
+ R1 is DR and R2 is BDR as seen in “State” column of above outputs -> F is correct.

Comments (23) Comments
Comment pages
1 6 7 8 707
  1. sw
    June 21st, 2017

    @ Anonymous congrats! have you got any new questions?

  2. naruto1983
    June 21st, 2017

    Hello Guys,

    I just take the, exam and pass, I did review today in the morning the forum and went in the afternoon, found three new simlets, and one ticket ,
    The tikcet was nat misconfigured on R1 so no one could ping from 1.1.xx or 1.2.x.x.
    the new simlet was regarding how to minimize output of debug ppp, they will give you options of activate debug ppp but have the ouput of only two interfaces.

    next was regarding maximum allowed mtu of gre if interface was 1500.

  3. naruto1983
    June 22nd, 2017

    by the way the debug interface command plus the debug ppoe evens will do it.
    Also a couple of tickets have some small differences with the tickets posted here, well that was my case, so if you have practicing doing troubleshooting you will do just fine with the info posted here.
    Like the one referencing the route map for redistribution it was the opposite, do not answer by memory do the troublesoothing,

  4. iva
    June 22nd, 2017

    @naruto 1983 pleas explain more , writing the exam in some hours.

    The Ticket , what was the question and answer , the simlet please moreinfo

  5. Tamelir
    June 22nd, 2017

    @naruto1983 everything you’ve mentioned is already covered in SAM’s materials. New MCQ are in VCE quizz.
    @Iva the link for them is m e d i a f i r e. c o m / f i l e / l j 3 a f 0 9 8 u 3 i h q d y / S A M _ C C N P _ 3 0 0 – 1 3 5 _ f i n a l _ M a t e r i a l s . r a r
    And the tickets here are also (alt last) refreshed, #4, #11 and #13 (NAT, OSFP to EIGRP and DHCP)

  6. naruto1983
    June 22nd, 2017

    answer for the GRE stuff,

    1500-bytes from Ethernet – 24-bytes for the GRE encapsulation = 1476-Bytes

  7. naruto1983
    June 22nd, 2017

    @TAmelir if what i posted is covered well then is good, I did not have time to review the full forum, short history I book the examn from one day to next one and only review a litle in the morning before going to the test. was for re-certification I have been an NP since 2006, always took ccie written’s to recertify but this time did not have time to study i was in a rush
    Thanks to all of you guys in the forum you did help me a lot given me an idea of what to face. first time taken tshoot.

  8. Tamelir
    June 22nd, 2017

    @naruto1983 You can recertify NP level with IE written? That’s great! Only the same track (R&S) or also others (security, voice)?
    Until now I’ve thought that CCIE is completely separate from CCNx. For example, you can become CCIE without having CCNA and CCNP.

  9. roy
    June 22nd, 2017

    The first 5 question were spot on my June x 2017 test

  10. Anonymous
    June 22nd, 2017

    @SW, most of the questions were similar to here, I think one lab was slightly different but not to answer, basically if you understand the questions and do all the labs here you will pass.

  11. naruto1983
    June 23rd, 2017

    @Tamiler any CCIE written will do it.
    Yo can become CCIE without having to pass any CCNX, but taking the written will validate any other lower cert.

  12. Anonymous
    June 23rd, 2017

    Hey guys,

    I have been using only networktut to recertify my CCNP and just now i got out of the exam.

    I passed with 87x. All the tickets and simlet were same as they are presented here. However only majority of MCQ were new.

    I dont remember the questions exactly but i remember the topics:
    – GRE tunnels
    – MTU size of a GRE tunnel
    – debug ppp authentification (together with debug condition interface)
    – ping expansion usage to verify MTU over a GRE tunnel.

    a couple of MCQs presented here were also in the exam. So make sure you study the above mentioned topics before taking the exam.

  13. W
    June 23rd, 2017

    Hi Anonymous, Congrats for passing the exam and thanks for confirming that the site is still validate. Those majority of questions which you are talking about are already listed under Multiple Choice Questions tab on the right side of the page. Can you please have a look and confirm?

  14. Tamelir
    June 23rd, 2017

    @naruto1983 Thanks!

  15. Tamelir
    June 24th, 2017

    @W I can confirm that 6 MCQ that I’ve got are here, in new section on top the page. Incorrect answers are somewhat different, there are probably few subsets.

  16. W
    June 24th, 2017

    I have passed today with 95x marks. I had problem with only one ticket which i believe was a bug in the simulation and answers were same :( otherwise i would’ve got full marks.

    Anyhow the site is 100% up to date with all the new MCQ’s.

    Thanks tut and everyone who helped me passing my CCNP exam. Looking forward for my certificate.

    Good luck.

  17. wspereira
    June 24th, 2017


    At question 5 of the new ones, the correct answer should be “C. Router R1 is configured with ospf point-to-point command”, and not “Router R2”, because R2 sees R1.

    Also, you need to correct the explanations:

    “R2 shows “FULL/-” which means that its neighbor is configured in non-broadcast network. This is usually the result of the “ip ospf point-to-…” command on interface E0/0 of R1 (not R2).”

    “R1 shows “FULL/DR” which means its neighbor (not R1) is configured in broadcast network. So the network types of R1 and R2 are mismatched which makes the advertising router unreachable and no routes update can be sent to other router.”

    Another thing is that the question 7 of the new ones is the same that the question 5 of the old ones. Maybe you could copy the images of the old one to the new one.

    And a question: Will you prepare a flash simulator of the new ones MCQ to premium members?


  18. Tamelir
    June 25th, 2017

    @wspereira no, it really should be R2. Let me try to explain why once again:

    You have to understand the output of “show ip ospf neighbor” command.
    Most important part of it “State” doesn’t shows the state of neighbor, as you would think. It shows the state of adjancency on side of the router where command is given.

    So, when R2 shows that state of neighborhood with R1 “FULL/- ” this means 2 things:

    1.) Adjacency is in state FULL, databases are synced, we are neighbors. Both routers have passed through all states from INIT to FULL.
    2.) The “/-” marks the network type of interface of router ON WHICH IS COMMAND GIVEN, not its neighbor.

    So, state “FULL/-” on R2 means that R1 and R2 are neighbors, and that that the network type of interface Ethernet0/0 on _R2_ is point-to-point, point-to-multipoint or point-to-multipoint nonbroadcast
    State “FULL/DR ” on R1 means that the network type of its E0/0 is either broadcast (default) or NBMA. It _thinks_that R2 is DR, only because broadcast network is multi-access and R1 selected itself as BDR. But R2 doesn’t care, there was no DR/BDR selection on its side.

    Lab it, you’ll see for yourself.
    But @Networktut’s explanation is still not correct, as I wrote on page 7.

  19. Tamelir
    June 25th, 2017

    And to reinforce it, yesterday on my exam correct answer was “Interface Ethernet0/0 on R2 is configured with point-to-point command”

  20. W
    June 25th, 2017

    I agree with with Tamelir. The correct answer should be R2. If you have doubt try creating the same topology on GNS3 and make e0/0 point-to-point and you will see the same results as illustration.

  21. Turtle
    June 25th, 2017

    On Q7, should it say “no route filtering” instead of “no route tittering”….?

  22. wspereira
    June 26th, 2017


    You are right! My mistake, i made a confusion.

    Thanks for the explanation!

  23. Tamelir
    June 26th, 2017

    @wspereira No problem!

Comment pages
1 6 7 8 707