Certification795 problems· 7 reviewed

CCNP Enterprise

795 incident response problems that help with CCNP Enterprise prep.

All problems (795)

NETWORK-1299A route reflector cluster stays healthy but one edge blackholes trafficA route policy cleanup on a reflector changes forwarding behavior without dropping any BGP sessions.NetworkAdvanced17 minPro NETWORK-330A route summary survives while every specific path behind it is now gone and traffic keeps choosing the black hole during a failover rehearsalAggregation stays healthy after the real forwarding options disappeared. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.NetworkIntermediate17 minPro NETWORK-221A route-map matches the right prefix set while one additive community action is replaced instead of appended after a maintenance template changeThe route is still policy-matched, yet a downstream signal disappears because one action semantics was misunderstood. The path looked healthy before the template changed, but one inherited assumption no longer matches the live environment.NetworkAdvanced17 minPro NETWORK-225A route-map matches the right prefix set while one additive community action is replaced instead of appended after a retention policy refreshThe route is still policy-matched, yet a downstream signal disappears because one action semantics was misunderstood. The operational object still exists somewhere in the system, but the lifecycle policy around its supporting state no longer matches reality.NetworkAdvanced17 minPro NETWORK-223A route-map matches the right prefix set while one additive community action is replaced instead of appended after an environment identity renameThe route is still policy-matched, yet a downstream signal disappears because one action semantics was misunderstood. The functional path still exists, but one identity, namespace, or naming assumption still points at the previous environment contract.NetworkAdvanced17 minPro NETWORK-141A route-policy preserves MED during normal operation, but a maintenance template strips it on the backup edge and inbound traffic never returns after failoverPaths exist both ways, yet partner preference signals vanish only on the standby path.NetworkAdvanced17 minPro NETWORK-119A route-policy regex matches the AS path set too broadly and blackholes partner prefixes that should stay externalTraffic loss starts after a policy cleanup because the new pattern captures more paths than the operator intended.NetworkAdvanced17 minPro NETWORK-121A transit interface was left out of passive-interface default exceptions, and a rogue OSPF adjacency forms during an access switch replacementThe underlay works until maintenance introduces a neighbor on a segment that should never have participated in routing.NetworkAdvanced17 minPro NETWORK-1227A trunk passes most VLANs but one voice segment still failsA cross-vendor trunk migration leaves data VLANs healthy while one voice or management path becomes unstable.NetworkIntermediate17 minPro NETWORK-270A VRRP pair shares the gateway IP while one downstream ACL still permits only the previous virtual MAC during a failover rehearsalRedundancy is healthy and the dependent security policy remains bound to yesterday's identity. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.NetworkAdvanced17 minPro NETWORK-144A VXLAN flood-and-learn segment still receives BUM traffic, but ARP suppression on one VTEP keeps a stale host mapping and east-west packets disappearThe overlay fabric is generally healthy, yet one stale optimization prevents correct endpoint learning.NetworkAdvanced17 minPro NETWORK-146An MPLS TE tunnel comes up, but autoroute announce is disabled on one node and normal traffic never uses the engineered pathThe tunnel exists, yet forwarding behavior does not change because one control flag was left off.NetworkAdvanced17 minPro NETWORK-129BFD minimum receive timers do not align between vendors, and only one side believes the session is stableBoth devices show partial liveliness, but the negotiated timing reality differs enough to keep the path flapping.NetworkAdvanced17 minPro NETWORK-115BGP confederation sub-AS policy strips the community needed to choose the correct exit pathThe routes arrive everywhere, but exit selection is wrong because a transit policy removed the signal the edge uses for preference.NetworkAdvanced17 minPro NETWORK-111Consistent hashing is disabled during a line-card replacement and long-lived sessions reset across ECMP membersRedundancy remains, but user sessions drop because path stickiness disappeared during the hardware swap window.NetworkAdvanced17 minPro NETWORK-122eBGP TTL security is configured on one side only after the provider path gains an extra hop, and the session drops permanentlyBoth peers still have the right neighbors configured, yet the control-plane hardening assumption no longer matches reality.NetworkAdvanced17 minPro NETWORK-1207Native VLAN assumptions hide the real issueA multi-vendor trunk stays healthy on paper, but one service VLAN never crosses it.NetworkIntermediate17 minPro NETWORK-1274OSPF neighbors form but one network never appearsAn operator proves OSPF is up and still cannot explain why only one important network is absent downstream.NetworkAdvanced17 minPro NETWORK-137VRRP advertisements pass, but the mixed-vendor pair uses different packet version expectations and both routers think they are masterLayer-3 reachability exists, yet first-hop symmetry collapses because redundancy control messages are interpreted differently.NetworkAdvanced17 minPro NETWORK-143A BGP blackhole community is set correctly, but the route reflector policy strips it before it reaches the transit edge and mitigation never activatesMitigation signaling exists at the source, yet it vanishes in the core policy path.NetworkAdvanced18 minPro