Home > Multiple Choice Questions

Multiple Choice Questions

May 8th, 2018 in TSHOOT v2 Go to comments

Question 1

Question 2

Question 3


All of these can be modified: protocol, IP destination address, repeat count, Datagram size, Timeout, source address/interface, type of service, DF bit, Validate reply data, Data pattern, Loose, Strict, Record, Timestamp, Verbose, Sweep range of sizes.

Reference: https://www.cisco.com/c/en/us/support/docs/ip/routing-information-protocol-rip/13730-ext-ping-trace.html

Question 4

Question 5

Question 6

Comments (50) Comments
Comment pages
1 82 83 84 85 86 707
  1. Peyman
    October 7th, 2019

    The questions are valid.
    Just passed today

  2. Jaykop
    October 7th, 2019

    please share last update in naligowork gmail c

  3. CCNP07092019
    October 7th, 2019

    Cleared TSHOOT today :)
    All questions are valid 27TH SPET

  4. Sandman
    October 7th, 2019


    The download of link https://www.networktut.com/questions-and-answers is correct? I seeing a mediafire link to download TSHOOT_Aug_2019.pdf file. Is this the last update? It should be TSHOOT_Sep_2019.pdf or something like that?


  5. TheRealSlimShady
    October 7th, 2019

    Is it ok to just go over September and August questions? Going far back to march and others doesn’t seem too productive?

  6. Steve
    October 7th, 2019

    @CCNP07092019 – congratulations! Do you mean just the 12 MCQ questions from Sept 27th came up? Or did you get any older one’s too?

  7. Shaunthesheep
    October 7th, 2019

    This might help with the ping code questions:

    ! Each exclamation point indicates receipt of a reply.
    . Each period indicates the network server timed out while waiting for a reply.
    U A destination unreachable error PDU was received.
    Q Source quench (destination too busy).
    M Could not fragment.
    ? Unknown packet type.
    & Packet lifetime exceeded.

  8. TuPapi84
    October 7th, 2019

    show crypto ipsec sa | in indent
    local ident (addr/mask/prot/port): (
    local ident (addr/mask/prot/port): (
    local ident (addr/mask/prot/port): (
    local ident (addr/mask/prot/port): (
    local ident (addr/mask/prot/port): (

    Anyone know the correct response to this?

  9. Shaunthesheep
    October 7th, 2019

    @TuPapi84. The answer to this question depends upon the ACL and IP Sec configuration. You will be able to tell it from the ACL applied in crypto map configuration.

    1- If ACL says permit gre x.x.x.x, then answer will be local indent x.x.x.x/mask/47
    2- If ACL says permit any any, then answer will be be local indent

    Just look at the configuration of ACL.

  10. ChuchoRU
    October 7th, 2019

    Hey guys!!

    anyone could share share the last update of September please??

    tks so much!!

    jerodriguez @ hotmail com

  11. TuPapi84
    October 8th, 2019

    @Shaunthesheep, thanks! I don’t remember the beginning of the question but thanks now I know what to look for.

  12. Joker
    October 8th, 2019

    Hello team,

    They just updated the questions to TSHOOT_Oct_2019.pdf, please see https://www.networktut.com/questions-and-answers

    Please someone who took the exam and confirm they are correct.

  13. IPv6 ACL doubt
    October 8th, 2019

    Regarding the question of IPv6, I’ve seen 2 different answers for option A. Would it be always the same option, even if it’s written in a different way? Thanks!!!

    Refer to the exhibit.
    ipv6 access-list INTERNET
    permit ipv6 2001:DB8:AD59:BA21::/64 2001:DB8:C0AB:BA14::/64
    permit tcp 2001:DB8:AD59:BA21::/64 2001:DB8:C0AB:BA14::/64 eq telnet
    permit tcp 2001:DB8:AD59:BA21::/64 any eq http
    permit ipv6 2001:DB8:AD59::/48 any
    deny ipv6 any any log

    Which statement about the INTERNET ACL is true?

    ***A1. NPD is not working correctly because NS and NA messages are being denied***
    ***A2. The denied entries will be logged because of the explicit deny ipv6 any any log line***

  14. goodluckmas
    October 8th, 2019

    Hi @Joker
    i cannot see any update in premium account

  15. Hello2
    October 8th, 2019

    Joker posted in the last page the October questions PDF url, I 100% confirm these were on my exam, and same MCQ I have listed here with answers that I verified correct. This PDF is a 100% pass if taken immediately!

  16. Hello2
    October 8th, 2019

    @goodluckmas click on the URL, I just downloaded and it is 100% accurate full exam, thanks again Joker!!

  17. Hello2
    October 8th, 2019

    It does not have the BGP or HSRP simlet, though they are pretty easy I’d assume, I only had BGP simlet and confirmed 100% fixed by adding a Peer Group statement for iBGP Peers and adding ebgp-multip 255 to the eBGP neighbor.

    It would not let me copy run start or write mem, so I assume you just need to get them peered and that is that?

    Anyone familiar with HSRP simlet mentioned in the October PDF?

  18. Hello2
    October 8th, 2019

    Typo there, for the BGP simlet:

    “neighbor x.x.x.x ebg-multihop 255” to bring the eBGP neighbor up, and I believe it was something like “neighbor TSHOOT next-hop-self” was the Peer Group command for the iBGP peers to come up in the BGP simlet (or something very similar), it is something that needs to be added to the Peer Group specifically as all iBGP peers are part of a Peer Group and the eBGP Peer is not.

    No static route is needed as the eBGP is specified it must neighbor up using WAN interfaces rather than loopback, where iBGP peers must use loopback as “update-source loopback#”

  19. Hello2
    October 8th, 2019

    One last thing of the Oct pdf as with others, the ones that state “Removed” in trouble tickets both showed on my last exam in the last couple weeks, know the answer to those tickets!

  20. geni
    October 9th, 2019

    Not sure what Hello2 is talking about with the BGP sim but I had it on my test and it was nothing like what he is describing on here. So on the actual exam sort of like the sim on here, you do the iBGP part first where you go and correct the AS number of your neighbor with the “neighbor IBGP remote-as 64520” command. For the EBGP part you remove the neighborship and correct the ip address of that neighbor. After you are done you just compare what you have with what the sim has using the “show ip bgp summary” command I think. If they match then you have completed that sim. I tried to save with “wr mem” and copy run start and nothing would work so I don’t believe you can save that config.

  21. geni
    October 9th, 2019

    @Hello2, did they just change the BGP sim?

  22. Gypsy
    October 9th, 2019

    I failed last week, score 772, retaking on Oct 18th, got the following in the technologies:
    Network Principles = 100%
    Layer 2 Technologies = 75%
    Layer 3 Technologies = 86%
    VPN Technologies = 0%
    Infrastructure Security = 40%
    Infrastructure Services = 100%

    Question… what questions/sims/tickets were VPN for me to get 0%? I feel like i got all of the tickets correct, just want to know what questions to study up on. I also understand to work on Infrastructure Security as well. Honestly, didnt get to study the evening before exam, because the MCQ changed and i didnt have Premium account at the time. Thanks in advance everyone.

  23. geni
    October 9th, 2019

    @Gypsy, so for the VPN technologies it is only 5% and it has to do with GRE technologies so I would brush-up on your GRE stuff like DMVPN, NHRP, CEF, and things like that and anything related to those.

  24. Hello2
    October 9th, 2019

    There was one GRE question I still haven’t seen that was something like “Which one of the following would cause recursive routing?”

    A. Receiving route updates via the Tunnel interface
    B. Using a Loopback interface for a Tunnel source
    C. Something
    D. Something

    I remember I chose B and got 0% on VPN as well, as the routing update didn’t make sense, anyone recall getting this and what the real answer is?

    I figure now it must be the routing updates, the only answer that made sense to me after the exam was the routing updates answer, as I know a tunnel learning its destination via dynamic routing = recursive routing though the answer didn’t specifically state that.

  25. geni
    October 9th, 2019

    I don’t think I have that one but here is something that might help out:

    The %TUN-5-RECURDOWN: Tunnel0 temporarily disabled due to recursive routing error message means that the generic routing encapsulation (GRE) tunnel router has discovered a recursive routing problem. This condition is usually due to one of these causes:

    +A misconfiguration that causes the router to try to route to the tunnel destinationaddress using the tunnel interface itself (recursive routing) + A temporary instabilitycaused by route flapping elsewhere in the network So in this question if there is anoption with either of the conditions above please choose it. Otherwise answer D is thebest option.

  26. geni
    October 9th, 2019

    Ignore the last sentence but I think the answer from what I can see would be A. Receiving route updates via the Tunnel interface.

  27. geni
    October 9th, 2019

    @Hello2, when are you retaking it? I am taking it Thursday my time.

  28. Hello2
    October 9th, 2019


    I do remember that IBGP being the Peer Group now, and I tried making the eBGP Peer use the loopback via static IP route / configuring update-source loopback / ebgp-multigop 255 and it didn’t form, then I re-read the question and removed all my stupidity and confirmed they were all neighbors with “sh ip bgp summ” and confirming none were idle / all had 1 route table update from the peer / confirmed bgp routes in “sh ip route”

    Thank you for correcting that Geni! DISREGARD MY BGP POST ^^^ UP THERE GENI IS CORRECT!

    Anyone at all even get this HSRP Sim? I don’t see it talked about anywhere on here.

  29. Hello2
    October 9th, 2019

    Oh I just saw you commented last, you are 100% correct Geni, I remember that now including IBGP being the Peer Group name. Apologies for my misleading BGP Simlet statement there!

    I am taking it right around that same time, good luck to you! Hopefully we come back with TSHOOT done!!

  30. geni
    October 9th, 2019

    This is a renew for me so hopefully I will be all set. I heard the HSRP is actually on there but it is identical to here.

  31. Gypsy
    October 9th, 2019

    @Geni, thank you. Great community in here.

  32. Matty
    October 9th, 2019

    Hi NetworkTUT team, Any update so far for October?

    Please confirm.


  33. Hello2
    October 10th, 2019

    Not sure how to find / post Sept MCQ so will post here in a series of posts, pardon my spamming for about 10 posts here

  34. Hello2
    October 10th, 2019

    Which protocol can be added into MPP? (Choose 2)

    A. Telnet
    B. SCP
    C. TFTP
    D. SMTP

    Answers A and C, MPP Protocols = Telnet, SSHv1 and v2, FTP, TFTP, SNMP (all ver), HTTP, HTTPS, and BEEP (Block Extensible Exchange Protocol

  35. Hello2
    October 10th, 2019

    OSPF Neighbor not forming, Exhibit shows DBD packets are being re-transmitted, debug output shows Neighbor change from Exstart to Down. What is the reason?

    A. MTU Mismatch
    B. The router did not receive a Hello Packet
    C. OSPF is not running on all the routers
    D. The Packet does not have a RID

    Answer is A, EIGRP Neighbors stuck in Exstart / Exchange states in forming a relationship have detected an MTU mismatch between the neighbor interfaces

  36. Hello2
    October 10th, 2019

    Question about PPTP Tunnel not forming, there is a NAT Device in the middle, which two filters should be applied to capture all the tunnel traffic? (Choose 2)

    A. UDP Port 500
    B. Protocol ESP (Protocol 50)
    C. GRE
    D. Protocol 47
    E. TCP Port 1723

    Answers are D and E, long winded explanation but Proto 47 = GRE and TCP Port 1723 = PPTP

    I am not sure why C and D were both included on Sep MCQ as they are they same, if anyone wants to jump in on that explanation, Ill continue posting up the rest of the MCQ

  37. Hello2
    October 10th, 2019

    A network administrator was able to access router via VTY lines 5 mins ago but no longer can, no changes to the network, why can’t they log in?

    A. exec-timeout 0 0
    B. all vty line in use
    C. SSH is not configured
    D. Console line is in use by someone else

    Answer is B, SSH was not mentioned (C), Console line is not VTY line (D), no exec-t doesn’t lock out VTY lines (A)

  38. Hello2
    October 10th, 2019

    Drag and Drop for Debugging:

    standby —> HSRP
    glbp —-> virtual mac address
    aaa authentication —-> identify who
    aaa authorization —-> permission

  39. Hello2
    October 10th, 2019

    The command “ip verify unicast source reachable-via any” is configured on the interface. Router received with source IP address Routing table shows a valid route to is learned via OSPF. There is a null static route to

    Question is what the router will do that packet?

    A. The packet is dropped
    B. The packet is allowed to route to the destination

    Answer: B

    any = Loose mode, packets can reach destination out interfaces other than one received data received on

    rx = Strict Mode, packets can only leave out interface that they came in on if better route is in the IP Route Table

    allow-default = Extra command that will allow strict or loose mode to use default (all 0) routes, not on MCQ but wanted to throw it in here for knowledge

  40. geni
    October 10th, 2019

    So for those that don’t know, GRE and protocol 47 are the same thing. So if you see the question that Hello2 mentions here just go with the protocol number and not the protocol itself.

  41. Hello2
    October 10th, 2019

    After applying below config on one router, OTHER router started showing authentication errors (you will see output log with errors).

    Applied configuration:
    Standby 100
    Standby 100 vip 172.x.x.x
    Standby 100 md5 authentictaion cisco123!

    What is likely the cause?
    A. Configure “standby 100 authentication md5 keyword cisco123!”on both routers
    B. Configure “standby 100 authentication md5 keyword cisco123!” on all HSRP groups on both routers

    Answer is A

    (Some of these MCQ do not have great spelling / syntax, not sure if that is intentional, but leaving it in these posts as it appears on the Sep MCQ for you lot)

  42. Hello2
    October 10th, 2019

    High CPU utilization of the router. How to display the lines including a process name Or beginning with CPU from show proc cpu output?

    A. show proc cpu | include process_name | begin CPU
    B. show proc cpu | include process_name |$CPU
    C. show xxx | include process_name |^CPU

    Answer is C, In the above output we only see the pipe “^CPU” displays the “CPU utilization for five seconds …” line so this is the correct answer.

  43. Hello2
    October 10th, 2019

    @geni That is what I was thinking, use Protocol and Port #’s for answer on exam if available, not name of Protocol / Port #

  44. Hello2
    October 10th, 2019

    Someone has changed the password for a router and saved the configuration, anyway he forget the password and unable to access the router anymore. Which actions needed to solve the issue?

    A. Change configuration register to 0x2102
    B. Change configuration register to 0x2142
    C. Reboot the router

    Answer is B

  45. Hello2
    October 10th, 2019

    Refer to the exhibit about GRE tunnel0 interface:.
    R1#show ip interface brief Interface IP-Address OK? Method Status Protocol …
    Tunnel0 unassigned YES manual up down

    What is required to solve the issue?

    A. assign IP to the tunnel interface
    B. define tunnel source and destination IP

    Answer is B

    Interestingly my last exam sit for TSHOOT I don’t think “sh ip int brief” showed Tunnel interfaces in its output during Trouble Tickets

    (Sorry for mashed output there

  46. Hello2
    October 10th, 2019

    Router L ==== Router C ==== Router R

    L and R routers were showing GRE and IPSec configurations, questions is an ACL applied in router C is blocking all IP traffic, which protocol should be allowed in the ACL to allow traffic.

    A. ESP
    B. GRE
    C. ICMP
    D. UDP

    Answer is D, Tunnel will need UDP Ports 500 and 4500 unblocked to form an IPSec tunnel

  47. Hello2
    October 10th, 2019

    There is a time-range acl but the query is to resolve a ping issue from interface eth0/0 to a host on with an ACL line. The ACL is applied inbound of the router. The question asks what ACL line needs to be added in order to allow ping access from the local router to server

    (Exhibit shows Network A —(cloud)—-

    A. access-list 101 permit icmp host
    B. access-list 101 permit icmp host 10.1.1.x
    C. access-list 101 permit icmp
    D. access-list 101 permit icmp host
    E. access-list 101 permit icmp host

    Correct answer is E,

    This is sort of a trick question by Cisco, as the ACL will cover the host IP but won’t be the exact subnet / wildcard mask, so watch out for this question!

  48. Hello2
    October 10th, 2019

    That is all the MCQ and one Drag and Drop from Sep PDF as its now replaced by Oct, all Trouble Tickets are same on both, good luck!!!

  49. geni
    October 10th, 2019

    For anyone that is curious as to the MCQ updates. There is this website called braindump2go. They are legit and have there updates since October 2nd. They obviously do charge, I think it’s like 99 dollars but I think it is worth it. I have worked with them in the past and their answers are 99% solid. I used them the first time I got my CCNP and now I have to renew. My score for my TSHOOT was 1000/1000. If anyone wants to try them out and maybe post some of the questions that have changed on here that would be cool for the team here.

  50. Hello2
    October 10th, 2019

    One last point for the exam with the “sh crypto ipsec | inc ident” question, remember the format is ip address/protocol/port

    1723, 500, and 4500 are Port #’s and should be the last value in the output lines.

    GRE (protocol 47) should only appear in the second slot, and line showing 47 in the last slot is wrong.

    So the following line examples are wrong:

    local ident (
    local ident (
    local ident (

    IP / Protocol / Port, make sure the answer you choose makes sense in how it reads!

Comment pages
1 82 83 84 85 86 707