Certification793 problems· 22 reviewed

CCNA

793 incident response problems that help with CCNA prep.

All problems (793)

NETWORK-1329A firewall path breaks oversized DNSSEC answersA security hardening change is followed by selective failures against DNSSEC-enabled domains while ordinary resolution remains fine.NetworkIntermediate14 minPro NETWORK-1324A Palo Alto decryption exception covers HTTPS and the mobile client still...A Palo Alto decryption exception covers HTTPS and the mobile client still... focuses on protocol-interoperability and asks the reader to isolate the key signal in palo-alto. Protocol preference differences between clients can make one...NetworkIntermediate14 minPro NETWORK-1344A Palo Alto SSL decryption bypass fixes browsers and OCSP stapling still failsA Palo Alto SSL decryption bypass fixes browsers and OCSP stapling still fails focuses on Identity And Access and asks the reader to isolate the key signal in palo-alto. TLS validation often depends on supporting service domains beyond the pri...NetworkIntermediate14 minPro NETWORK-1316A Palo Alto URL override fixes one domain and another subpath still...A Palo Alto URL override fixes one domain and another subpath still... focuses on firewall-policy-basics and asks the reader to isolate the key signal in palo-alto. URL categorization can vary within a site enough to make a single broad-loo...NetworkIntermediate14 minPro NETWORK-1309A QoS rollout preserves DSCP markings on access ports but still ruins voiceA QoS rollout preserves DSCP markings on access ports but still ruins voice focuses on l2-switching and asks the reader to isolate the key signal in Cisco. QoS breaks quietly when the trust boundary no longer aligns with the device that marks packets.NetworkIntermediate14 minPro NETWORK-1350A reverse proxy fronting OpenSearch stays green and bulk ingest times outAn OpenSearch proxy is reorganized for route clarity and later only bulk ingest begins timing out under load.NetworkIntermediate14 minPro NETWORK-1298A voice rollout fails in one buildingA standardized access template rollout degrades voice in one location even though bandwidth and VLANs look normal.NetworkIntermediate14 minPro NETWORK-1327A VRF route leak seems symmetric and return traffic still diesA segmentation change appears correct during one-way tests and later breaks reply traffic or stateful sessions across VRFs.NetworkIntermediate14 minPro NETWORK-1303An OSPF adjacency sticks in ExStart after a subinterface template rolloutA routing change template is applied broadly and one VLAN interface alone stops forming OSPF neighbors.NetworkIntermediate14 minPro NETWORK-1275DHCP relay looks healthy but leases still failA new segment can reach the DHCP server and still never receives an address after rollout.NetworkIntermediate14 minPro NETWORK-1307HSRP failover moves the VIP but users still hit the dead nodeA failover test looks good on the routers and still leaves clients blackholed for an unexpected interval.NetworkIntermediate14 minPro NETWORK-1265Manual DNS tests over TCP succeed but real users still failNetwork incident scenario used for structured troubleshooting practice.NetworkIntermediate14 minPro NETWORK-1270Manual DNS tests over TCP succeed but real users still failA DNS outage seems cleared after a successful test command, but applications continue failing because they never use the same transport that the operator tested.NetworkIntermediate14 minPro NETWORK-1294A DHCP relay works for data VLANs but not the guest VLANA switch upgrade lands and only one VLAN stops leasing addresses while relay traffic still reaches the server.NetworkIntermediate15 minPro NETWORK-1286A DHCP snooping deployment blocks one floor onlyA switch replacement introduces DHCP failures only on one access block even though the DHCP server and helper still receive the discover traffic.NetworkIntermediate15 minPro NETWORK-1300A load balancer health check passes on TCP and still fails on HTTPA backend seems reachable at the port level and remains unhealthy behind a load balancer's application probe.NetworkIntermediate15 minPro NETWORK-1249A manual DNS test succeeds over TCP but real clients still failAn operator proves DNS with one command and later finds the application still cannot resolve names in production.NetworkIntermediate15 minPro NETWORK-1254A manual TCP DNS test succeeds but real clients still failAn operator proves DNS with one command and later finds that the application still cannot resolve names in production.NetworkIntermediate15 minPro NETWORK-130A NetFlow exporter uses a source interface in the management VRF, and the collector never receives records from production pathsTraffic forwarding is fine, but telemetry is dark because the export packets live in a different routing domain than the collector path.NetworkIntermediate15 minPro NETWORK-1282A route-map intended only for outbound traffic also alters locally originated routesA BGP policy tweak aimed at one peer suddenly changes the behavior of more routes than anyone expected.NetworkIntermediate15 minPro