Free Designing and Implementing Cisco Service Provider Cloud Network Infrastructure Practice Questions

Sample Practice Questions

Try these 10 sample questions from the Designing and Implementing Cisco Service Provider Cloud Network Infrastructure practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1What is the conventional usable VLAN-count ceiling that constrains a single VLAN namespace in a large multi-tenant IaaS network?

   1. A. 1022 VLANs
   2. B. 4094 VLANs
   3. C. 8190 VLANs
   4. D. 16382 VLANs

   Answer: B

   Explanation: RFC 7348 identifies "the 4094 VLAN limit". This namespace ceiling constrains VLAN-based tenant segmentation; it is not the switch-specific configured VLAN capacity.

   Reference: RFC 7348: Virtual eXtensible Local Area Network (VXLAN) — Section 3.2, page 6

2. 2A customer and a cloud connectivity provider both have equipment in the same Equinix IBX. What does an Equinix Cross Connect provide between them?

   1. A. A routed VPN tunnel over the public internet
   2. B. A dedicated physical cabling link within the data center
   3. C. An automatically configured BGP session between their routers
   4. D. A virtual router deployed inside the customer's cloud account

   Answer: B

   Explanation: Equinix describes Cross Connects as "dedicated, physical cabling links". They provide physical interconnection; routing and VPN configuration are separate.

   Reference: Equinix Product Documentation — Cross Connect — Cross Connect — opening definition

3. 3Two redundant VNF instances on OpenStack Nova must run on separate compute hosts. Using the default one-member-per-host anti-affinity rule, which deployment enforces this host placement?

   1. A. Create an affinity server group and launch both instances with its group hint.
   2. B. Create a soft-affinity server group and launch both instances with its group hint.
   3. C. Create an anti-affinity server group and launch both instances with its group hint.
   4. D. Create a soft-anti-affinity group and allow fallback placement on one host.

   Answer: C

   Explanation: Nova describes anti-affinity as "Restricts instances belonging to the server group to separate hosts." Launching with the group hint applies that policy. This enforces host separation, not comprehensive service HA or availability-zone separation.

   Reference: OpenStack Nova 2024.1 — Server Groups — Policies — anti-affinity; Usage

4. 4An applied Cisco IOS extended ACL permits all IP traffic from 10.1.0.0/16 before an entry denying TCP port 22 from 10.1.2.0/24. What change makes the intended SSH denial effective while retaining other permitted traffic?

   1. A. Add the same SSH deny again after the broad permit.
   2. B. Remove the ACL's implicit deny behavior.
   3. C. Move the specific SSH deny before the broad permit.
   4. D. Replace the broad permit with another permit for 10.1.0.0/16.

   Answer: C

   Explanation: Cisco explains, "The router continues to look until it has a match." The broad permit matches first, so the specific deny must precede it to affect this SSH traffic.

   Reference: Cisco — Configure IP Access Lists — Process ACLs

5. 5What monitoring scope does Cisco NFVIMON provide for a Cisco VIM 3.4.2 deployment?

   1. A. Only the physical ToR switches, excluding virtual infrastructure
   2. B. Only tenant application payloads, excluding physical servers
   3. C. Physical and logical NFVI components across one or more pods
   4. D. Only service definitions in the NSO configuration database

   Answer: C

   Explanation: Cisco states, "This includes monitoring both the physical and logical components of one or multiple NFVI pods." NFVI assurance spans the underlying infrastructure and logical resources rather than a single isolated layer.

   Reference: Cisco VIM Installation Guide 3.4.2 — Overview to Cisco NFVI — Overview to Cisco NFVIMON

6. 6Why can a traditional STP-based Layer 2 design leave purchased IaaS fabric links unused for forwarding?

   1. A. STP assigns one physical link exclusively to each tenant.
   2. B. STP requires every alternate link to use a separate VLAN.
   3. C. STP reserves alternate links for MAC-address learning.
   4. D. STP blocks redundant paths to prevent forwarding loops.

   Answer: D

   Explanation: RFC 7348 states, "STP blocks the use of links to avoid the replication and looping of frames." Blocking redundant paths prevents loops but limits simultaneous use of those links.

   Reference: RFC 7348: Virtual eXtensible Local Area Network (VXLAN) — Section 3.1, page 5

7. 7Which connectivity scope describes the Equinix Metro Connect service?

   1. A. Passive patch cabling between ports within one equipment cabinet
   2. B. Physical cross-connect cabling restricted to parties inside one IBX
   3. C. Public-internet VPN connections between arbitrary worldwide customer sites
   4. D. Interconnection between deployments in different IBXs in supported metros

   Answer: D

   Explanation: Equinix states, "Use Metro Connect to connect a deployment in one IBX data center to a partner, customer, or your own infrastructure in another IBX data center." Its scope is inter-IBX connectivity in supported locations.

   Reference: Equinix Product Documentation — Metro Connect — Metro Connect — overview

8. 8For a Cisco VIM 3.4.2 Intel-NIC pod, a data-plane bond must survive failure of one physical NIC card. Which member placement provides card diversity?

   1. A. Use a data-plane port from each of the two physical NICs.
   2. B. Use two data-plane ports belonging to the same physical NIC.
   3. C. Create two VLAN subinterfaces on one physical data-plane port.
   4. D. Create two VM vNICs backed by one physical data-plane port.

   Answer: A

   Explanation: Cisco states, "An extra Intel NIC is added to provide card level redundancy." Members on different cards avoid the shared-card failure affecting same-card ports or subinterfaces.

   Reference: Cisco VIM Installation Guide 3.4.2 — Overview to Cisco NFVI — UCS C-Series Network Topologies — Intel NIC Details

9. 9A multihomed edge uses asymmetric routing. The requirement is to reject sources absent from the FIB without requiring arrival on the best return-path interface. No default route is present. Which uRPF behavior fits?

   1. A. Loose uRPF checking for source-route existence
   2. B. Strict uRPF checking the best reverse-path interface
   3. C. Destination-only filtering using the packet's destination route
   4. D. Disabling source validation on every external interface

   Answer: A

   Explanation: RFC 3704 says loose RPF "checks only for the existence of a route" rather than its outgoing interface. With no default route, this fits the required source-route-presence test while tolerating asymmetry.

   Reference: RFC 3704: Ingress Filtering for Multihomed Networks — Section 2.4, Loose Reverse Path Forwarding

10. 10Which NFVIS 3.12.x measurement directly indicates how heavily a running VNF is using its allocated CPU resources?

    1. A. The VM's runtime CPU-usage statistics
    2. B. The number of vCPUs assigned by its flavor
    3. C. The image's minimum supported vCPU count
    4. D. The image's maximum supported vCPU count

    Answer: A

    Explanation: Cisco documents VM statistics "such as CPU usage." Runtime utilization indicates consumption, whereas assigned, minimum and maximum vCPU counts describe allocation or supported capacity.

    Reference: Cisco Enterprise NFVIS 3.12.x — VM Life Cycle Management — Workflow of VM Life Cycle Management — Manage and Monitor a VM