Certification795 problems· 7 reviewed

CCNP Enterprise

795 incident response problems that help with CCNP Enterprise prep.

All problems (795)

NETWORK-1458A recursive resolver over TLS stays healthy and validation still failsOne encrypted resolver path stops validating after an upstream key roll while ordinary DNS still works.NetworkAdvanced12 minPro NETWORK-1460A segmented campus path works for HTTP and breaks WebSocketsA segmented campus path works for HTTP and breaks WebSockets focuses on edge-routing and asks the reader to isolate the key signal in NGINX. Proxy behavior for upgrade headers can change by negotiated protocol branch, not only by route.NetworkAdvanced12 minPro NETWORK-1466A split-horizon DNS design works for browsers and fails for one API clientOnly one API client type reports certificate mismatch after moving to DoH.NetworkAdvanced12 minPro NETWORK-1527An Anycast DNS node advertises and one POP misses probesAnycast DNS health checks fail only from one POP after cleanup.NetworkAdvanced12 minPro NETWORK-1497An Anycast DNS node advertises normally and health checks still miss one POPAnycast DNS health checks fail only from one POP after a route-reflector maintenance VRF cleanup.NetworkAdvanced12 minPro NETWORK-1517An Anycast DNS node advertises normally and one POP misses probesAnycast DNS health checks fail only from one POP after route-reflector cleanup.NetworkAdvanced12 minPro NETWORK-1507An Anycast DNS node advertises normally and one POP still misses health checksAnycast DNS health checks fail only from one POP after a route-reflector cleanup.NetworkAdvanced12 minPro NETWORK-1469An App-ID bypass is hit on the handshake and later traffic is blockedLarge API uploads fail after a proxy change even though the initial handshake still matches the bypass.NetworkAdvanced12 minPro NETWORK-1482An Arista MLAG peer-link recovers and one VLAN still blackholesOne VLAN stays blackholed after MLAG recovery even though the peer-link and control plane are healthy.NetworkAdvanced12 minPro NETWORK-1490An EVPN type-5 route is present and traffic still missesOnly one tenant VRF misses a newly advertised external prefix during a staged EVPN rollout.NetworkAdvanced12 minPro NETWORK-1463An LACP bundle stays up and still blackholes one VLANOnly one VLAN experiences packet loss after a peer maintenance event while the bundle stays up.NetworkAdvanced12 minPro NETWORK-1405A branch office resolver sends a suffix zone to the wrong upstreamA branch office resolver sends a suffix zone to the wrong upstream focuses on dns and asks the reader to isolate the key signal in ubuntu. Resolver shortcuts can skip the one place where special-case validation behavior...NetworkAdvanced13 minPro NETWORK-1415A branch resolver forwards a private suffix correctly and DNSSEC failures...A branch resolver forwards a private suffix correctly and DNSSEC failures... focuses on dns and asks the reader to isolate the key signal in ubuntu. Resolver simplification can remove local exceptions that were silently making a broken u...NetworkAdvanced13 minPro NETWORK-1425A branch resolver forwards a private suffix correctly and DNSSEC failures...A branch resolver forwards a private suffix correctly and DNSSEC failures... focuses on dns and asks the reader to isolate the key signal in ubuntu. Resolver simplification can remove local exceptions that were masking upstream signature pr...NetworkAdvanced13 minPro NETWORK-1435A branch resolver forwards a private suffix correctly and DNSSEC failures...A branch resolver forwards a private suffix correctly and DNSSEC failures... focuses on dns and asks the reader to isolate the key signal in ubuntu. Resolver simplification can remove local exception logic that was silently masking u...NetworkAdvanced13 minPro NETWORK-1462A Cloudflare origin route stays green and one region still failsOne region sees random gRPC failures after an underlay tunnel change while global health stays green.NetworkAdvanced13 minPro NETWORK-1456A decryption bypass rule looks correct and still misses trafficTLS decryption bypass works for connection setup and later payloads start failing inspection on the same flow family.NetworkAdvanced13 minPro NETWORK-1445A DNS split-horizon migration works in direct queries and fails in appsInternal service names resolve in diagnostics and fail only behind one validating resolver chain.NetworkAdvanced13 minPro NETWORK-1429A new SaaS hostname is onboarded and only one campus failsA new SaaS hostname is onboarded and only one campus fails focuses on edge-routing and asks the reader to isolate the key signal in Cloudflare. New hostnames on shared CDNs can inherit old policy bundles long after DNS onboarding looks f...NetworkAdvanced13 minPro NETWORK-1419A new SaaS subdomain is onboarded to a shared CDN and only one campus failsA new SaaS subdomain is onboarded to a shared CDN and only one campus fails focuses on edge-routing and asks the reader to isolate the key signal in Cloudflare. On shared CDN platforms, a hostname can inherit an older policy bundle long after...NetworkAdvanced13 minPro