Home > Multiple Choice Questions

Multiple Choice Questions

May 8th, 2018 in TSHOOT v2 Go to comments

Question 1

Question 2

Question 3


All of these can be modified: protocol, IP destination address, repeat count, Datagram size, Timeout, source address/interface, type of service, DF bit, Validate reply data, Data pattern, Loose, Strict, Record, Timestamp, Verbose, Sweep range of sizes.

Reference: https://www.cisco.com/c/en/us/support/docs/ip/routing-information-protocol-rip/13730-ext-ping-trace.html

Question 4

Question 5

Question 6

Comments (50) Comments
Comment pages
1 73 74 75 76 77 90 707
  1. NextTSHOOT
    August 11th, 2019


    Someone can confirm that in the current exam there is any MCQ that is not from August update?


  2. Charlie
    August 11th, 2019

    @TTL, for that question about Ticket 11a, it’s option B 100% sure.

  3. CENGA
    August 11th, 2019

    Any pls share the THSOOT_Aug_2019 pdf, if any one have

    i n d u n i l d i s s a @ g m a i l .com

  4. CCNP_Tshoot
    August 11th, 2019

    Hello Everyone,

    I passed the TSHOOT exam with a score of 965/1000 yesterday.
    1) Both Simlet HSRP and BGP.
    2) All the MCQ came from August.
    And one more MCQ: router has an access-list configured and applied to the interface as “ip access-group xxx in”
    what should be added to the access-list so that the router can ping successfully a destination.
    I received 67% in VPN Technologies and 80% in Infrstructure Security, not sure which answers needs to be corrected.
    3) Tickets: 1,3,4,6,7,11(OSPF->EIGRP deny 20),13,15,16,17

    Premium membership is all worth it. :)

  5. TTL
    August 12th, 2019

    @Charlie.. Thank you for confirming. @Pounder thank you for the clue with access-group /27 and /28 so option is /25 or /24..

  6. TTL
    August 12th, 2019

    Done and dusted….

    @Pounder I got the same question about access-group, I have chosen one with the Host option which can fit 253 hosts…

    Premium members please check the configs on the switches and routers they are no identical in the exam.. Specially Port Security..

  7. roger
    August 12th, 2019

    which 1 did you choose your answer on the access-group question:

    A. permit ICMP host 170.x.x.x 10.x.x.x
    B. permit ICMP host 170.x.x.x 10.x.x.x
    C. permit ICMP 10.x.x.x 170.x.x.x
    D. permit ICMP 10.x.x.x host 170.x.x.x


  8. Tshoothelp
    August 12th, 2019

    @CCNP_Tshoot Congrats !!!
    Waht about this qiestion …Router L ==== Router C ==== Router R

    L and R routers were showing GRE and IPSec configurations, questions is an ACL applied in router C is blocking all IP traffic, which protocol should be allowed in the ACL to allow traffic.

    Do you remember the answer ?

  9. Tshoothelp
    August 12th, 2019

    @ALL About question which protocol should be allowed in the ACL to allow traffic.
    I could be UDP port the answer .
    UPD port 500 Official Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)[10]

  10. Tshoothelp
    August 12th, 2019

    @ALL sorry I reformulate the question
    About question which protocol should be allowed in the ACL to allow traffic to permit IPSE over GRE
    I could be UDP port the answer .
    UPD port 500 Official Internet Security Association and Key Management Protocol (ISAKMP) / Internet Key Exchange (IKE)[10]

  11. TTL
    August 12th, 2019

    @ Roger Permit icmp 10.x.x.255 host fits more in that address range.

  12. Tibi
    August 12th, 2019

    August Question 11 – Hi guys I think the Q11 is wrong it should be ESP allowed on the C router as the data packet is encapsulated into GRE and then another encapsulation occurs with IPsec to add another IP header ESP!!! Can you please check and UPDATE!

  13. windup
    August 12th, 2019

    From your question about ACL to permit IPSEC over GRE Tunnel.
    Please see detail from cisco website below:

    After the configuration on both routers firewall will detect some UDP port 500 (ISAKMP) followed by (if accepted) numerous ESP (Protocol number 50) packets over the link.

    The first activity is related to ISAKMP (over UDP 500):

    %PIX-2-106006: Deny inbound UDP from to on interface outside.

    The second one is related to ESP packets:

    %PIX-3-106010: Deny inbound protocol 50 src outside: dst inside: on interface outside

    So we need to permit ESP (IPsec) traffic to the inside to establish the GRE Tunnel by:

    access-list outin permit udp host eq 500 host eq 500
    access-list outin permit esp host host

    ref: https://learningnetwork.cisco.com/docs/DOC-2457

  14. CCNP_Tshoot
    August 12th, 2019

    about this qiestion …Router L ==== Router C ==== Router R
    I selected – GRE, not sure whether it`s correct or incorrect,
    Note: I received 67% in VPN Technologies , so possibly the answer I selected could be wrong.

  15. Tshoothelp
    August 12th, 2019

    @CCNP_Tshoot THX ! pls the last question in IPv6 LAB the ping ipv6 work or no …
    EX ping 2026::111:1 work or i must type ping ipv6 2026::111:1 ?


  16. CCNP_Tshoot
    August 13th, 2019

    I used Read`s technic,

    Do “show ipv6 ospf neig” on R2 and R3 always for the 3 IPV6 tickets
    If you get 1 neighbors each, 1+1=2 then its R2.
    If you get 2 on R2 and 1 neighbors on R3, 2+1=3 then its R3.
    If you get 2 neighbors each on both routers, 2+2=4 then its R4

  17. Cobra2217
    August 13th, 2019

    Question which protocol should be allowed in the ACL to allow traffic. Any update please.

  18. Tshoothelp
    August 13th, 2019

    I’m really undecided about this question
    the answers are both correct !!! maybe the GRE is the best answer

  19. Tshoothelp
    August 13th, 2019

    @ALL ( who have already take exam )
    the MCQs are mixed togheter Aug , june and April ?

  20. Charlie
    August 13th, 2019

    @Tshoothelp, according to recent ppl who took exam these past days, it seems that only August MCQ appeared.

  21. Tshoothelp
    August 13th, 2019

    @Charlie when your exam ?

  22. UPS
    August 13th, 2019

    Hi All,

    I took the exam again today, I passed with 98X, All 100% except VPN technologies, I still have a doubt regarding the Q. regarding to allow ESP or GRE…

    All MCQs from August (plus the access-list its been mentioned.
    DaD from August.
    Both simlets.
    No new tickets (all are in here in premium membership)

    Good Luck! ;)

  23. hello
    August 13th, 2019

    @UPS,, what was your answer with that access-list Q ?

  24. RB
    August 13th, 2019

    Hello Everyone,

    I retook the exam after one month on Friday, I passed with 890

    All MCQs from August/June (plus the access-list).
    DaD from August.
    HSRP and BGP simulator with different IP addresses.

    Although there was a new ticket!

    where the client didn’t have IP from DHCP so I did traceroute on
    dsw1: Traceroute source

    and it reaches the internet then I assume the problem might be in DSW1 (ip-helper,vlan-filter) which I already had VLAN filter ticket! it only leaves Ip-helper on DSW 1 but there was no issue on dsw1 VLAN for IP-helper!

    then I did (sh ip int brie) on Asw1 both ports was up/up so it wanst port-security and the fast interface were in access mode with VLAN 10

    the only thing that I found was the:

    Configuration of ASW1

    interface PortChannel13
    switchport mode trunk
    switchport trunk allowed VLAN 10,200
    interface PortChannel23
    switchport mode trunk

    which indicates that the port-channel 23 doesn’t have (switchport trunk allowed VLAN 10,200)
    then I chose

    Ans2)Switch to switch connectivity
    Ans3)Under interface Port-Channel 23, add vlan 10,200 and then no shutdown interface fa1/0/1

    believe me, I look for everything I did traceroute, Ping, show vlan… and this was the only thing that I found out

    plus I had 50 minutes left and I answer 16 questions out of 24 then I panic and I said I have to select an answer otherwise I have no time for the other labs but guest what the 8 question after that was McQand D&D :-) I finish my exam 3 minutes after that and I had 47 minutes to think

    I think that was the thicket I lose 110 points but then again maybe if I didn’t panic I could find the right answer.

    take care study hard and the premium help me a lot more than that people comment help me

    thank you networktut
    thank you every body

    Best of luck ;-)

  25. Tshoothelp
    August 13th, 2019

    @RB McQand D&D what does mean?

  26. Cobra2217
    August 13th, 2019

    Drop and Drag

  27. Tshoothelp
    August 13th, 2019

    @Cobra2217 ok
    @RB very strange ! for sure your answer is not correct because the Po13 let the comuncation with R4 …. anyway congrats!!

  28. djsonicdh
    August 13th, 2019

    13/08/19 my friend does the test today and tells me that 5 new mcq came out. The tickets are the same

  29. Trol
    August 13th, 2019

    my cousin told me that the exam will not change for the next 2 years !!! please shut up!

  30. Tshoot
    August 13th, 2019

    I am Premium member.
    As you said All MCQs from August/June
    From where I can get access-list MCQs. How many total access-list question are in MCQs

  31. TTL
    August 13th, 2019

    @RB & others congratulations, I can understand how painful it is to retake the exam. Join the club. I honestly thank guys who have chipped in with their comments exam experience and sharing their tickets and MCQs in this forum.
    @RB and others did you guys notice different MAC address for client 1 and 2 in two different tickets? Other guys who mentioned before were saying the same thing.. watch out..
    Above is a clue for exam takers. Practice well.. I mentioned couple of times above this site gets you up to 60-70 if you are in the same trade. Premium membership gets you 70-85 plus if you practice tickets and understand the issues and configs of the tickets. I lost my count how many times I practiced all these tickets.. soon I will stop checking this site.
    Thank you Networktut its been a great help for me and other members. The premium site is so nice and clean. Great job!

  32. Thanks
    August 14th, 2019

    Hello Everyone ,
    As PB described there is a new ticket which took most of my time to resolve . I did manged to Pass . Other than that 1 ticket all others are from Premium account . Many thanks to Network TUT !! .

  33. Charlie
    August 14th, 2019

    @Thanks, it seems that many of you thinks about ticket 7 is a “new” ticket. I just passed and i face it. This ticket nr.7 is some kind different from here as we exercised, we have more config content on ASW1 and DSW1. When you check ip int brief there is no interface down/down :D but if you check carefully on ASW1 there is no VLAN10 interface. When you do show int 0/1/0 you will see at the beginning something (err-disable) that means that you have to do with Port Security issues .

  34. Tshoothelp
    August 14th, 2019

    @Charlie , sorry but i don’t understand what do you mean ? In TT 7 if i put sh ip interface brief command i will see the interface fa1/0/1 e fa 1/0/2 in state up up ?! moreover the VLAN 10 it is not present ? this mean that the two interface are in vlan 1 ?
    unique way to view the problem is put the sh interface fa1/0/1 ? correct?
    THX and congrats !

  35. Anonymous
    August 14th, 2019

    @Tshoothelp @Charlie : true this question is very typical . When i looked into the R1 OSPF , Ospf authentication missing as well but that is not the answer for that ticket . This question will trick you very big time ,.

  36. Charlie
    August 14th, 2019

    @Tshoothelp, yes, you should go in that way.

  37. Anonymous
    August 14th, 2019

    I passed today with 965/1000. All tickets from networktut.


    Two simlets > BGP and HSRP
    All MCQ since august 4th
    Labs: Ip nat outside in serial 0/0/1 R1
    Ticket 11B has a difference in route map.

    I passed with 967 and I made 33% in vpn technologies.

  38. The Mask
    August 14th, 2019


    I passed my exam with 931. All MCQ are valid posted August 4th and some previous and lab questions too. 2 BGP lab (The first BGP neighborship issue examination and the second one was the IBGP config.) All HSRp questions were there, 2 IPv6 questions (R2 and R4) and the other LAB questions.
    2 Access Port (Vlan10 and Trunk-Access config error), 2 Route-map (route distributions),

    Thank you to all and good luck.

  39. Read
    August 14th, 2019

    @The Mask, what do mean by 2 BGP lab (The first BGP neighborship issue examination and the second one was the IBGP config.) do we have two simlets now ?

  40. CENGA
    August 14th, 2019

    What is the correct answer for this question?? pls help

    ip verify unicast source reachable-via any is configured on the interface. Router received with source ip address Routing table shows a valid route to is learned via ospf. There is a null static route to Question is what the router will do that packet?

  41. GUM
    August 14th, 2019

    @CENEGA answer the packet is allowed the reason is that you have a route more specific than the static to the null

  42. Ice Guevarra
    August 14th, 2019

    What is the ACL MCQ?

  43. Eng C
    August 14th, 2019

    Hi guys. Thank you for sharing your experiences. So which command do not work on the simulations. I will be writing on Friday

  44. The Mask
    August 14th, 2019


    No, we have one IBGP simlet and the other one is just examination and finding the problem.

  45. Will
    August 15th, 2019

    Just failed with 835..! disappointing of course.

    All MCQs and DaD from August (plus the access-list).
    DaD from August.
    HSRP and BGP simulator with different IP addresses.
    There were two ipv6 tickets in the tts.

    I ‘think’ I got them all correct, or almost all.

    There was a new ticket that sounds the same as RB’s description.
    Stumped me as well. It just didnt make any sense. Pretty sure the
    issue was on the switches, but beyond that it was very confusing.
    The Vlans on interface PortChannel13 and interface PortChannel23
    looked inconsistent, but not sure whether that’s the issue.

    There were two tickets that had port security. One which was the
    usual one with almost all 0s – pretty sure that was the issue there.
    Another had port security with a legit looking MAC, but I’m dont
    think that was the issue. The port itself was showing up, so something

    I’m guessing I got two ipv4 tts wrong.

    Main points were L2 tech 75%, VPN 67%, Infra Serv 0%
    Maybe that shows what I got wrong…?

  46. Read
    August 15th, 2019

    You mean there was a new ticket again ? haba Cisco should keep this exam stable na

  47. Will
    August 15th, 2019

    I dont think the usual TT strategies work on all the switch tickets now.

    The ipv6 ticket strategies seemed OK, particularly the new show ipv6 ospf neig
    one. The ipv4 router tickets also seem OK. With Switches there are two or
    three tickets now that are very confusing and unclear. The configurations are
    much more verbose than before, and show vlan and show ip interface brief are
    hard to diagnose from. The problems are deliberately obtuse. Also the results from
    pings are often inconsistent between the Clients and switches, though I think this
    has always been an issue with the buggy exam simulator.

    A lot of people get 67% on VPN, so I’m guessing that the question regarding allowing
    ESP or GRE or UDP etc.. is not in fact answered by GRE.

    I would like to know the real answer to the ticket RB detailed above. Even thinking about
    it afterwards, it’s not at all obvious.

  48. Read
    August 15th, 2019

    @Read you are very very correct. I just came out of the hall now and i saw that ticket yu explained and i spent over 30 min on it and could not get it.

    The rest were very okay as they are from this site.

    Please and please practice all SIms including HSRP cos i got dem and one answer here is wrong.

    Please i repeat, dont listen to people saying the HSRP has been phased out NONO NO NO

    I passed with 8***

  49. Charlie
    August 15th, 2019

    @TO ALL WHO HAS THESE NEXT DAYS THE EXAM. Do not hesitate or don’t fool yourself and thinking that its a “new ticket”. Please i explained above and i will explain again, this ‘new ticket’ is actually Ticket 7 (Port Security issues) please be carefully on which switch you are looking for this problem. Do not check on DSW1 but check in ASW1. Command ‘ show ip int brief’ will confuse you because you will not see none of interfaces “down/down” PLEASE do ” SHOW INTERFACE 1/0/1 and you will see at the beginning something that writes ===>FastEthernet1/0/1 is down, line protocol is down (err-disabled)<===== this means that you have to do with PortSecurity issues and its Ticket 7, and dont waste your time for checking commands like "show run" because this will take to much time to find the problem and also configuration on ASW1 will coufuse you as well.

    I hope i helped you all about this Ticket.

  50. CENGA
    August 15th, 2019

    I Passed Tshoot exam today..got 983/1000..All TT from this site. No new any TT tickets. but I didn’t used sam’s strategy..I used my own way according to tshoot tickets..But it’s depends tickets from tickets.

    As I remember I got All the IPv6 tickets, those are same as in this site. so don’t worry..practice all the Tickets using EveNg Emulator.

    Simlet- BGP & HSRP – without any changes.

    Mcqs- I had Auguest MCQ’s as well as Jun MCQ’s

    24 questions loaded for me.

    Pls do it. IF you are already practiced it..don’t be worry

    I did this without any membership…

    Thanks Certprepare & Community Guys.

Comment pages
1 73 74 75 76 77 90 707