Certification795 problems· 7 reviewed

CCNP Enterprise

795 incident response problems that help with CCNP Enterprise prep.

All problems (795)

NETWORK-1614An OSPF adjacency stays downOne adjacency stays down after an OSPF area cleanup.NetworkBeginner7 minFree NETWORK-002Port exhaustion in a high-request segment and kernel tuningCovers how ephemeral ports, TIME_WAIT, and sysctl parameters connect to a service failure.ReviewedNetworkAdvanced30 minPro NETWORK-019After a BGP route change, only certain ASNs take a detour pathA network operations problem where the global route is alive but only certain carrier networks get an inefficient detour.NetworkAdvanced30 minPro NETWORK-1205Proxy health page is green but user traffic still failsA proxy health endpoint looks fine, but actual user traffic still fails because the TLS hostname path chooses a different upstream certificate or route than the simple health check.NetworkIntermediate19 minPro NETWORK-1559A WAN failover drill succeeds and one branch still blackholes return trafficOne branch blackholes return traffic only after a failover drill.NetworkAdvanced12 minPro NETWORK-1351A Cloudflare Tunnel app stays reachable and WebSocket upgrades failA Cloudflare Tunnel app stays reachable and WebSocket upgrades fail focuses on protocol-interoperability and asks the reader to isolate the key signal in NGINX. Realtime failures behind proxies often come from route-specific header handling r...NetworkAdvanced15 minPro NETWORK-1328A Cloudflare Tunnel WebSocket path flakes only on one serviceA service behind Tunnel is healthy for ordinary requests and only its real-time channel fails intermittently after a proxy change.NetworkAdvanced15 minPro NETWORK-1339A Tunnel and WARP path look healthy and one internal app still failsA Tunnel and WARP path look healthy and one internal app still fails focuses on Identity And Access and asks the reader to isolate the key signal in NGINX. Identity headers can be lost after the edge if internal proxy routing is not exp...NetworkAdvanced15 minPro NETWORK-1397An MLAG pair carries normal traffic and a disaster-recovery test failsAn MLAG pair carries normal traffic and a disaster-recovery test fails focuses on cluster-maintenance and asks the reader to isolate the key signal in Cisco. Recovery paths can drift silently because they are invisible during steady-state operation.NetworkAdvanced15 minPro NETWORK-1387An MLAG pair looks stable and one VLAN blackholes east-west trafficAn MLAG pair looks stable and one VLAN blackholes east-west traffic focuses on incident-response and asks the reader to isolate the key signal in Cisco. Native VLAN drift hides until an untagged recovery path is the only path left.NetworkAdvanced15 minPro NETWORK-1349An NGINX auth flow works for normal pages and Cloudflare Access headers...An NGINX auth flow works for normal pages and Cloudflare Access headers... focuses on Identity And Access and asks the reader to isolate the key signal in NGINX. Identity loss behind a proxy often happens on local rewrites long after...NetworkAdvanced15 minPro NETWORK-154A management VRF can reach the TACACS server, but the source interface changed after a chassis swap and the AAA server rejects the unknown client addressReachability exists, yet trust is anchored to a previous device identity.NetworkAdvanced16 minPro NETWORK-1287A BFD-assisted routing failover flaps repeatedlyFast failover becomes unstable after a QoS change even though throughput tests show the path is otherwise healthy.NetworkAdvanced17 minPro NETWORK-1271A BGP session stays Established but traffic preference changesA provider-facing BGP session remains healthy while traffic suddenly shifts to another path after an upstream policy change.NetworkAdvanced17 minPro NETWORK-1283A VRRP or HSRP pair appears healthy but east-west traffic breaksA first-hop redundancy event finishes and only some segments continue blackholing traffic toward the old gateway MAC.NetworkAdvanced17 minPro NETWORK-133An IP SLA object track recovers immediately, but without hysteresis the WAN edge oscillates on every brief probe successThe failover design is correct in principle, yet recovery logic is too eager for the quality of the circuit.NetworkAdvanced17 minPro NETWORK-1258An IS-IS adjacency never formsA backbone link carries traffic normally but IS-IS adjacencies never come up across it.NetworkAdvanced17 minPro NETWORK-096HSRP preempt delay is shorter than upstream route convergence and gateway flaps twice on recoveryFailover succeeds initially, but recovery creates another outage because the active gateway returns before its upstream dependencies are ready.NetworkAdvanced17 minPro NETWORK-1264A backup Layer 2 path wakes up during maintenance and spanning tree instantly blocks itNetwork incident scenario used for structured troubleshooting practice.NetworkAdvanced18 minPro NETWORK-1269A backup Layer 2 path wakes up during maintenance and spanning tree instantly blocks itA maintenance change activates a backup trunk that has not forwarded in months and an access segment immediately becomes unstable.NetworkAdvanced18 minPro