Certification795 problems· 7 reviewed

CCNP Enterprise

795 incident response problems that help with CCNP Enterprise prep.

All problems (795)

NETWORK-1448A WAF health monitor stays green and real uploads failMonitoring stays green while a new client rollout makes uploads fail behind the WAF.NetworkIntermediate10 minPro NETWORK-1518A WireGuard tunnel handshakes and one subnet never returnsA WireGuard subnet is reachable only one way after split-egress policy routing.NetworkIntermediate10 minPro NETWORK-1528A WireGuard tunnel handshakes and one subnet never returnsA WireGuard subnet is reachable only one way after split-egress routing.NetworkIntermediate10 minPro NETWORK-1498A WireGuard tunnel shows handshakes and one subnet never returnsA WireGuard subnet is reachable in one direction only after policy routing is introduced for split egress.NetworkIntermediate10 minPro NETWORK-1508A WireGuard tunnel shows handshakes and one subnet never returnsA WireGuard subnet is reachable only one way after policy routing is introduced for split egress.NetworkIntermediate10 minPro NETWORK-1558An Envoy route update lands and one cluster still fails health checksA cluster stays unhealthy only in one Envoy fleet after SAN cleanup.NetworkIntermediate10 minPro NETWORK-1465An MLAG pair carries traffic and still drops one orphan hostA single orphan host loses connectivity after peer-link maintenance while the MLAG pair stays established.NetworkIntermediate10 minPro NETWORK-1475An MLAG pair keeps forwarding and one orphan host loses return trafficAn orphan host works one way after a migration while the pair otherwise looks healthy.NetworkIntermediate10 minPro NETWORK-1468An NGINX stream route stops matching long SNI namesOnly newly branded hostnames fall through to the default upstream on the stream ingress tier.NetworkIntermediate10 minPro NETWORK-1478An NGINX stream SNI route works for short names and misroutes long tenant namesOnly long tenant hostnames on high-latency links fall through to the default upstream.NetworkIntermediate10 minPro NETWORK-1484An NGINX upstream DNS update is correct and one pool still serves dead backendsTraffic continues hitting dead backend IPs after a DNS cutover behind NGINX.NetworkIntermediate10 minPro NETWORK-1459A branch office policy route works inbound and fails outboundReturn traffic from one branch office ignores the expected path after a NAT cleanup.NetworkIntermediate11 minPro NETWORK-1483A Cisco GRE tunnel forms and OSPF still flapsAn OSPF over GRE path flaps only when larger updates cross after a tunnel template merge.NetworkIntermediate11 minPro NETWORK-1386A Cloudflare page rule or transform looks correct and one admin path still bypasses authA transform rules rollout simplifies URLs and later only one protected path begins bypassing the expected edge auth behavior.NetworkIntermediate11 minPro NETWORK-1404A load balancer health check passes and real clients are deniedA load balancer health check passes and real clients are denied focuses on edge-routing and asks the reader to isolate the key signal in Cloudflare. Health checks often take a simpler network path than user traffic and can miss...NetworkIntermediate11 minPro NETWORK-1453A pfSense policy route looks correct and traffic still exits the default WANTraffic ignores a policy route only on one firewall path after a floating rule pack was added.NetworkIntermediate11 minPro NETWORK-1444A proxy protocol health check passes and real traffic failsLoad balancer checks stay green while production requests fail after enabling Proxy Protocol features.NetworkIntermediate11 minPro NETWORK-1410A service discovery cutover finishes and clients keep dialing the old backendA service discovery cutover finishes and clients keep dialing the old backend focuses on Service Discovery and asks the reader to isolate the key signal in ubuntu. Negative caches can outlive the moment a record appears and make a correct...NetworkIntermediate11 minPro NETWORK-1420A service discovery SRV cutover looks correct in dig and fails in appsA service discovery SRV cutover looks correct in dig and fails in apps focuses on Service Discovery and asks the reader to isolate the key signal in ubuntu. SRV migrations can fail on target-label caches even when the top-level SRV record a...NetworkIntermediate11 minPro NETWORK-1430A service discovery SRV cutover looks correct in dig and still fails in appsA service discovery SRV cutover looks correct in dig and still fails in apps focuses on Service Discovery and asks the reader to isolate the key signal in ubuntu. SRV migrations can fail at the target-label layer even when the top-level SRV reco...NetworkIntermediate11 minPro