N10-009 Sample Questions & Answers

BGP (Border Gateway Protocol) is the standard and most suitable routing protocol for large-scale SD-WAN overlays. It is an open standard (ensuring multi-vendor compatibility) and is designed for scalability and complex policy implementation, which are key requirements for managing traffic across many branch offices and data centers. BGP's path attributes allow for granular, policy-based routing decisions, making it ideal for the intelligent path selection capabilities of SD-WAN. While OSPF is an open standard, it is an IGP not designed for the policy-rich, large-scale nature of WAN overlays. EIGRP is historically Cisco-proprietary and less suited for multi-vendor policy enforcement. RIP is outdated and lacks the required scalability and features.

In a VxLAN environment, the VxLAN Network Identifier (VNI) is used to segment traffic in the overlay network, similar to how a VLAN ID works in a traditional network. For two VMs to communicate within the same logical Layer 2 segment, their traffic must be mapped to the same VNI by their respective VxLAN Tunnel Endpoints (VTEPs). A misconfigured VNI on one VTEP would cause it to encapsulate or decapsulate traffic into the wrong logical segment, preventing communication even if the underlying VLANs and IP settings are correct. Since VxLAN operates over a Layer 3 underlay, STP on the physical switches is not directly involved in the overlay forwarding path. A mismatched VLAN ID was ruled out in the scenario.

The Main Distribution Frame (MDF) is the central point of a structured cabling system where external connections (like the ISP) terminate and connect to the internal network's core equipment. In this scenario, the main telecommunications room on the second floor serves this function.

Intermediate Distribution Frames (IDFs) are secondary wiring closets that connect to the MDF and distribute network access to end-users in a specific area, such as a single floor. The wiring closets on each floor fit this description perfectly.

Idempotence is a core principle of declarative IaC tools like Terraform and Ansible. It means that an operation can be applied multiple times without changing the result beyond the initial application. In this scenario, the IaC tool ensures that running the configuration script repeatedly will only configure the firewall rules once to match the desired state. Subsequent runs will detect that the state is already correct and will make no further changes. This makes automation safe and predictable. Immutability refers to creating new resources instead of changing existing ones. Orchestration is the broader coordination of automated tasks. Abstraction hides underlying complexity.

The statement is false. A core principle of SASE is the convergence of networking and security into a single, cloud-delivered service model. In a SASE architecture, traffic is directed to a cloud-based point of presence (PoP) where security inspections (like SWG, CASB, FWaaS, ZTNA) and optimized routing decisions are made. This is the opposite of the traditional model of deploying and managing separate on-premises appliances at each branch office.

The primary benefit of Wi-Fi 6E is its operation in the 6 GHz frequency band. This band provides a large amount of new, contiguous spectrum (up to 1200 MHz in the US) which allows for many more non-overlapping channels (e.g., up to seven 160 MHz channels). Crucially, this band is only accessible to Wi-Fi 6E capable devices, meaning there is no interference from older Wi-Fi standards. This clean, wide-open spectrum dramatically reduces congestion and improves real-world performance in high-density environments like a university campus. While WPA3 is mandatory for 6 GHz, it's a feature of Wi-Fi 6 in general, not the primary benefit of 6E itself.

The rapid appearance of the same MAC address on different switch ports is known as MAC flapping. This is a tell-tale sign of a Layer 2 switching loop. A loop creates redundant paths in the network, causing frames to be forwarded indefinitely. As the switch sees frames from the same source MAC arriving on different ports, it constantly updates its MAC address table, leading to instability and high CPU utilization. This problem is typically prevented by the Spanning Tree Protocol (STP), so MAC flapping often indicates an STP failure or misconfiguration.

LACP (Link Aggregation Control Protocol), defined in IEEE standard 802.3ad, is the correct choice. It allows multiple physical ports to be bundled together to form a single logical channel, known as a Port-Channel or EtherChannel. This provides both load balancing across the links to increase aggregate bandwidth and high availability through automatic failover. Because it is a standard (unlike Cisco's proprietary PAgP), it ensures interoperability between different vendors' equipment. STP is for loop prevention, HSRP is for first-hop redundancy at Layer 3, and OSPF is a Layer 3 routing protocol.

The symptoms point directly to a DNS issue. The ability to access resources by IP address confirms that Layer 3 connectivity is working. However, the inability to resolve hostnames indicates a problem with DNS. The technician confirmed the client is configured to use DNS server 192.168.1.254, but the ping to that address fails. This demonstrates that there is no network path between the client and the DNS server, or the server itself is down. This lack of reachability is the root cause of the name resolution failure.

Differentiated Services Code Point (DSCP) values are part of the Differentiated Services (DiffServ) field in the IP header. The IP header operates at Layer 3 (the Network layer) of the OSI model. Therefore, marking packets with a DSCP value is a Layer 3 QoS mechanism. Routers and other Layer 3 devices can read this marking to apply appropriate queuing and forwarding policies. Layer 2 QoS uses Class of Service (CoS) markings in the 802.1Q VLAN tag.