CCNP - Cisco Certified Network Professional Practice Questions: Network Troubleshooting Domain

Published: July 31, 2025 | 20 min read

Test your CCNP - Cisco Certified Network Professional knowledge with 10 practice questions from the Network Troubleshooting domain. Includes detailed explanations and answers.

CCNP - Cisco Certified Network Professional Practice Questions

Master the Network Troubleshooting Domain

Test your knowledge in the Network Troubleshooting domain with these 10 practice questions. Each question is designed to help you prepare for the CCNP - Cisco Certified Network Professional certification exam with detailed explanations to reinforce your learning.

Question 1

A network performance issue is suspected to be due to excessive broadcast traffic. Which tool or command would best confirm this suspicion?

A) show interfaces

B) show ip route

C) Wireshark packet capture

D) show ip arp

Show Answer & Explanation

Correct Answer: C

Explanation: Wireshark can capture and analyze traffic to confirm excessive broadcasts.

Question 2

While troubleshooting an IPv6 network, you notice that IPv6 addresses are not being assigned via DHCPv6. The DHCPv6 server is reachable, and the configuration seems correct. What could be the reason?

A) The clients are configured for SLAAC only.

B) The DHCPv6 server is using an incorrect prefix.

C) The link-local address is not configured on the server.

D) The DHCPv6 relay agent is not configured.

Show Answer & Explanation

Correct Answer: A

Explanation: CORRECT: If clients are configured for SLAAC only, they will not request addresses from a DHCPv6 server. An incorrect prefix would cause address assignment errors but not prevent DHCPv6 entirely. Link-local addresses are automatically configured and do not affect DHCPv6 operation. A missing DHCPv6 relay agent would affect clients on different subnets but not prevent all assignments.

Question 3

Your team implemented a new firewall policy, and certain applications are no longer reachable. Which troubleshooting step should be taken first?

A) Check the firewall logs

B) Reboot the firewall

C) Apply a default permit policy

D) Disable the firewall

Show Answer & Explanation

Correct Answer: A

Explanation: Checking the firewall logs provides insights into what traffic is being blocked, allowing for targeted troubleshooting.

Question 4

A network engineer is configuring BGP on a router, but the BGP session is not establishing. The configuration appears correct. What could be a potential issue?

A) The BGP neighbor is using a different router ID.

B) The BGP neighbor's IP address is incorrect.

C) The BGP session is using an unsupported authentication method.

D) The BGP timers are not synchronized between neighbors.

Show Answer & Explanation

Correct Answer: B

Explanation: CORRECT: An incorrect neighbor IP address would prevent the BGP session from establishing. Different router IDs do not prevent session establishment. Unsupported authentication would cause session failure but not prevent establishment. BGP timers do not need to be synchronized for session establishment.

Question 5

Your SD-WAN network is experiencing latency issues. Which tool or command would provide detailed path information to help diagnose this?

A) SD-WAN Orchestrator monitoring

B) show ip route

C) show bfd neighbors

D) NetFlow analytics

Show Answer & Explanation

Correct Answer: A

Explanation: SD-WAN Orchestrator monitoring provides visibility into path selection and performance metrics.

Question 6

In a network using advanced STP features, you notice that one of the switches is consistently becoming the root bridge, causing suboptimal traffic flows. What is a potential solution to this problem?

A) Increase the bridge priority of the unwanted root bridge.

B) Enable BPDU guard on all ports of the unwanted root bridge.

C) Manually set the bridge priority of the desired root bridge lower.

D) Implement root guard on all ports of the unwanted root bridge.

Show Answer & Explanation

Correct Answer: C

Explanation: CORRECT: Manually setting a lower bridge priority on the desired root bridge ensures it becomes the root bridge. Increasing the bridge priority on the unwanted root bridge would make it less likely to become the root but does not control which bridge will become root. BPDU guard protects against rogue devices but does not influence root bridge selection. Setting a lower priority on the desired root bridge ensures it becomes the root. Root guard prevents the specified ports from becoming root ports but does not influence the root bridge.

Question 7

A network engineer is troubleshooting a VLAN hopping attack in a switched network. Which of the following configurations can help mitigate this issue?

A) Set all unused ports to trunk mode.

B) Disable DTP on all ports.

C) Enable PortFast on all ports.

D) Configure BPDU Guard on all ports.

Show Answer & Explanation

Correct Answer: B

Explanation: CORRECT: Disabling DTP on all ports prevents automatic trunk negotiation, mitigating VLAN hopping attacks. Setting unused ports to trunk mode can facilitate VLAN hopping. PortFast is used to speed up port activation, not prevent VLAN hopping. BPDU Guard protects against rogue switches, not VLAN hopping.

Question 8

A network engineer is analyzing a BGP network where some routes are flapping. The BGP session is stable. What could be a reason for this route flapping?

A) The BGP keepalive timer is too high.

B) The BGP route dampening is not configured.

C) The BGP AS path is too long.

D) The BGP MED values are inconsistent.

Show Answer & Explanation

Correct Answer: B

Explanation: CORRECT: The BGP route dampening is not configured, which can lead to route flapping being propagated without suppression. High keepalive timer affects session stability, not route flapping. Lack of route dampening allows flapping routes to affect the network. Long AS path affects route preference, not flapping. Inconsistent MED affects path selection, not route stability.

Question 9

A recent cloud integration has led to increased latency for applications hosted in the cloud. Which tool can help determine where the latency is occurring?

A) Ping

B) NetFlow

C) Traceroute

D) SNMP

Show Answer & Explanation

Correct Answer: C

Explanation: Traceroute is used to map the path packets take to the destination and identify where latency is introduced.

Question 10

In a network implementing 802.1X, users are unable to authenticate. The RADIUS server is reachable, and the configuration on the switch appears correct. What could be the issue?

A) The RADIUS server is using an incorrect shared secret.

B) The switch is not configured with the correct VLAN.

C) The authentication method is not supported by the client.

D) The switch's certificate has expired.

Show Answer & Explanation

Correct Answer: A

Explanation: CORRECT: An incorrect shared secret between the switch and RADIUS server will prevent successful authentication. VLAN configuration affects network access post-authentication, not the authentication process itself. Unsupported authentication methods would typically result in client-side errors, not prevent the server from responding. An expired switch certificate affects SSL/TLS connections, not RADIUS authentication directly.

Ready to Accelerate Your CCNP - Cisco Certified Network Professional Preparation?

Join thousands of professionals who are advancing their careers through expert certification preparation with FlashGenius.

✅ Unlimited practice questions across all CCNP - Cisco Certified Network Professional domains
✅ Full-length exam simulations with real-time scoring
✅ AI-powered performance tracking and weak area identification
✅ Personalized study plans with adaptive learning
✅ Mobile-friendly platform for studying anywhere, anytime
✅ Expert explanations and study resources

Start Free Practice Now

Already have an account? Sign in here

About CCNP - Cisco Certified Network Professional Certification

The CCNP - Cisco Certified Network Professional certification validates your expertise in network troubleshooting and other critical domains. Our comprehensive practice questions are carefully crafted to mirror the actual exam experience and help you identify knowledge gaps before test day.