Question 470
HSRP's active router loses its upstream provider link but its user LAN interface remains up, leaving hosts on a blackholed gateway. The incident evidence is: Clients keep forwarding through an HSRP Active router with no WAN path. Which targeted configuration or design change best addresses the failure?
- Configure the same correct virtual gateway IP and group parameters on both HSRP members.
- Assign consistent HSRP group virtual IP and set suitable priority/preempt policy on the intended primary.
- Follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface.
- Configure supported interface/object tracking to reduce HSRP priority on upstream failure.
Explanation
Correct Answer
D:The required correction is: Configure supported interface/object tracking to reduce HSRP priority on upstream failure. The underlying failure mechanism is: HSRP tracked-object policy does not detect or penalize upstream loss. Verify success by carrying out this direct test: disable the upstream link and confirm the healthy standby takes over the virtual gateway.
Incorrect Answers
A:Configuring the same correct virtual gateway IP and grouping parameters on both HSRP members would not configure supported interface/object tracking to reduce HSRP priority on upstream failure.
B:Assigning consistent HSRP group virtual IP and setting suitable priority/preempt policy on the intended primary would not configure supported interface/object tracking to reduce HSRP priority on upstream failure.
C:Follow RPF checks by ensuring unicast routing toward the multicast source identifies the receiving interface would not configure supported interface/object tracking to reduce HSRP priority on upstream failure.
Question 471
HSRP's active router loses its upstream provider link but its user LAN interface remains up, leaving hosts on a blackholed gateway. The proposed remedy is: Configure supported interface/object tracking to reduce HSRP priority on upstream failure. Which observation would most directly confirm that remedy works as intended?
- Check group virtual IP, authentication and hello settings at both routers.
- Inspect multicast RPF interface, source route and drop counters for the (S,G) stream.
- Check HSRP group Active/Standby roles and virtual address ARP after a controlled failover.
- Disable the upstream link and confirm the healthy standby takes over the virtual gateway.
Explanation
Correct Answer
D:The decisive acceptance observation is: Disable the upstream link and confirm the healthy standby takes over the virtual gateway. This tests the working mechanism, while the original incident was: clients keep forwarding through an HSRP Active router with no WAN path.
Incorrect Answers
A:This test measures a different behavior: Check group virtual IP, authentication and hello settings at both routers. It does not establish the target outcome. For the documented fault, the direct acceptance test is: disable the upstream link and confirm the healthy standby takes over the virtual gateway.
B:This test measures a different behavior: Inspect multicast RPF interface, source route and drop counters for the (S,G) stream. It does not establish the target outcome. For the documented fault, the direct acceptance test is: disable the upstream link and confirm the healthy standby takes over the virtual gateway.
C:This test measures a different behavior: Check HSRP group Active/Standby roles and virtual address ARP after a controlled failover. It does not establish the target outcome. For the documented fault, the direct acceptance test is: disable the upstream link and confirm the healthy standby takes over the virtual gateway.
Question 472
HSRP's active router loses its upstream provider link but its user LAN interface remains up, leaving hosts on a blackholed gateway. During troubleshooting: Clients keep forwarding through an HSRP Active router with no WAN path. Which underlying cause best explains the recorded behavior?
- The preferred HSRP peer lacks the intended preempt behavior or priority policy.
- Peers disagree on virtual address/group configuration and cannot provide coherent redundancy.
- Incoming multicast violates reverse-path forwarding against the unicast route to the source.
- HSRP tracked-object policy does not detect or penalize upstream loss.
Explanation
Correct Answer
D:The actual technical cause is: HSRP tracked-object policy does not detect or penalize upstream loss. It specifically explains the observation: clients keep forwarding through an HSRP Active router with no WAN path. The correcting configuration is: configure supported interface/object tracking to reduce HSRP priority on upstream failure.
Incorrect Answers
A:That diagnosis is supported by a different symptom: The lower-priority router stays Active after the preferred router recovers although preemption was required. Here the recorded observation is: clients keep forwarding through an HSRP Active router with no WAN path. The applicable cause is: hSRP tracked-object policy does not detect or penalize upstream loss.
B:That diagnosis is supported by a different symptom: Each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. Here the recorded observation is: clients keep forwarding through an HSRP Active router with no WAN path. The applicable cause is: hSRP tracked-object policy does not detect or penalize upstream loss.
C:That diagnosis is supported by a different symptom: Multicast traffic is dropped even though the receiver has joined the group. Here the recorded observation is: clients keep forwarding through an HSRP Active router with no WAN path. The applicable cause is: hSRP tracked-object policy does not detect or penalize upstream loss.
Question 473
HSRP's active router loses its upstream provider link but its user LAN interface remains up, leaving hosts on a blackholed gateway. Select TWO complementary decisions: the direct technical remedy and a safeguard against recurrence. A verification-only step cannot substitute for either action.
- Assign consistent HSRP group virtual IP and set suitable priority/preempt policy on the intended primary.
- Account for VRRP address-owner and priority behavior when assigning the intended master.
- Configure supported interface/object tracking to reduce HSRP priority on upstream failure.
- Use side-by-side HSRP peer configuration diffs after subnet migrations.
- Monitor tracked uplinks and dynamic FHRP priority changes during provider incidents.
Explanation
Correct Answers
C:The required correction is: Configure supported interface/object tracking to reduce HSRP priority on upstream failure. The underlying failure mechanism is: HSRP tracked-object policy does not detect or penalize upstream loss. Verify success by carrying out this direct test: disable the upstream link and confirm the healthy standby takes over the virtual gateway.
E:The continuing protective control is: Monitor tracked uplinks and dynamic FHRP priority changes during provider incidents. This addresses the underlying failure mechanism: hSRP tracked-object policy does not detect or penalize upstream loss. The corresponding operational check is: disable the upstream link and confirm the healthy standby takes over the virtual gateway.
Incorrect Answers
A:Setting HSRP priority and preemption does not detect the upstream failure while the LAN interface remains up; tracking must lower priority.
B:VRRP master-election behavior belongs to a different redundancy protocol and does not fix the HSRP upstream-tracking failure.
D:That control reduces a separate risk: Peers disagree on virtual address/group configuration and cannot provide coherent redundancy. For the described design, the recurring risk arises from: hSRP tracked-object policy does not detect or penalize upstream loss. The specific required safeguard is: monitor tracked uplinks and dynamic FHRP priority changes during provider incidents.
Question 474
Two VRRP routers share a virtual default gateway, and an operator expects the higher priority backup to win despite one peer owning the virtual IP. The incident evidence is: A router configured as the IP address owner remains VRRP Master against a non-owner with nominally high priority. Which targeted configuration or design change best addresses the failure?
- Assign consistent HSRP group virtual IP and set suitable priority/preempt policy on the intended primary.
- Configure the same correct virtual gateway IP and group parameters on both HSRP members.
- Configure static inside-source NAT mapping the exact internal host to the approved routable address.
- Account for VRRP address-owner and priority behavior when assigning the intended master.
Explanation
Correct Answer
D:The required correction is: Account for VRRP address-owner and priority behavior when assigning the intended master. The underlying failure mechanism is: VRRP address ownership carries special priority behavior not captured by ordinary non-owner settings. Verify success by carrying out this direct test: inspect VRRP virtual IP ownership and master/backup election state.
Incorrect Answers
A:Assigning consistent HSRP group virtual IP and setting suitable priority/preempt policy on the intended primary would not address the need for account for VRRP address-owner and priority behavior when assigning the intended master.
B:Configuring the same correct virtual gateway IP and grouping parameters on both HSRP members would not address the need for account for VRRP address-owner and priority behavior when assigning the intended master.
C:Configuring static inside-source NAT mapping the exact internal host to the approved routable address would not address the need for account for VRRP address-owner and priority behavior when assigning the intended master.
Question 475
Two VRRP routers share a virtual default gateway, and an operator expects the higher priority backup to win despite one peer owning the virtual IP. The proposed remedy is: Account for VRRP address-owner and priority behavior when assigning the intended master. Which observation would most directly confirm that remedy works as intended?
- Check HSRP group Active/Standby roles and virtual address ARP after a controlled failover.
- Check group virtual IP, authentication and hello settings at both routers.
- Inspect VRRP virtual IP ownership and master/backup election state.
- Inspect NAT translations and verify the partner sees the required external source address.
Explanation
Correct Answer
C:The decisive acceptance observation is: Inspect VRRP virtual IP ownership and master/backup election state. This tests the working mechanism, while the original incident was: a router configured as the IP address owner remains VRRP Master against a non-owner with nominally high priority.
Incorrect Answers
A:This test measures a different behavior: Check HSRP group Active/Standby roles and virtual address ARP after a controlled failover. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect VRRP virtual IP ownership and master/backup election state.
B:This test measures a different behavior: Check group virtual IP, authentication and hello settings at both routers. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect VRRP virtual IP ownership and master/backup election state.
D:This test measures a different behavior: Inspect NAT translations and verify the partner sees the required external source address. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect VRRP virtual IP ownership and master/backup election state.
Question 476
Two VRRP routers share a virtual default gateway, and an operator expects the higher priority backup to win despite one peer owning the virtual IP. During troubleshooting: A router configured as the IP address owner remains VRRP Master against a non-owner with nominally high priority. Which underlying cause best explains the recorded behavior?
- VRRP address ownership carries special priority behavior not captured by ordinary non-owner settings.
- Dynamic PAT was used where a stable one-to-one NAT identity was required.
- The preferred HSRP peer lacks the intended preempt behavior or priority policy.
- Peers disagree on virtual address/group configuration and cannot provide coherent redundancy.
Explanation
Correct Answer
A:The actual technical cause is: VRRP address ownership carries special priority behavior not captured by ordinary non-owner settings. It specifically explains the observation: a router configured as the IP address owner remains VRRP Master against a non-owner with nominally high priority. The correcting configuration is: account for VRRP address-owner and priority behavior when assigning the intended master.
Incorrect Answers
B:That diagnosis is supported by a different symptom: The partner denies the host because its outbound session uses a shared PAT address rather than the fixed mapped address. Here the recorded observation is: a router configured as the IP address owner remains VRRP Master against a non-owner with nominally high priority. The applicable cause is: vRRP address ownership carries special priority behavior not captured by ordinary non-owner settings.
C:That diagnosis is supported by a different symptom: The lower-priority router stays Active after the preferred router recovers although preemption was required. Here the recorded observation is: a router configured as the IP address owner remains VRRP Master against a non-owner with nominally high priority. The applicable cause is: vRRP address ownership carries special priority behavior not captured by ordinary non-owner settings.
D:That diagnosis is supported by a different symptom: Each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. Here the recorded observation is: a router configured as the IP address owner remains VRRP Master against a non-owner with nominally high priority. The applicable cause is: vRRP address ownership carries special priority behavior not captured by ordinary non-owner settings.
Question 477
Two VRRP routers share a virtual default gateway, and an operator expects the higher priority backup to win despite one peer owning the virtual IP. The initial change is: Account for VRRP address-owner and priority behavior when assigning the intended master. Which continuing control most directly prevents a recurrence of the documented problem: A router configured as the IP address owner remains VRRP Master against a non-owner with nominally high priority.
- Document VRRP owner roles before priority and preemption changes.
- Test recovery as well as failure when changing FHRP settings.
- Document static mappings and restrict their exposure through firewall policy.
- Use side-by-side HSRP peer configuration diffs after subnet migrations.
Explanation
Correct Answer
A:The continuing protective control is: Document VRRP owner roles before priority and preemption changes. This addresses the underlying failure mechanism: vRRP address ownership carries special priority behavior not captured by ordinary non-owner settings. The corresponding operational check is: inspect VRRP virtual IP ownership and master/backup election state.
Incorrect Answers
B:That control reduces a separate risk: The preferred HSRP peer lacks the intended preempt behavior or priority policy. For the described design, the recurring risk arises from: vRRP address ownership carries special priority behavior not captured by ordinary non-owner settings. The specific required safeguard is: document VRRP owner roles before priority and preemption changes.
C:That control reduces a separate risk: Dynamic PAT was used where a stable one-to-one NAT identity was required. For the described design, the recurring risk arises from: vRRP address ownership carries special priority behavior not captured by ordinary non-owner settings. The specific required safeguard is: document VRRP owner roles before priority and preemption changes.
D:That control reduces a separate risk: Peers disagree on virtual address/group configuration and cannot provide coherent redundancy. For the described design, the recurring risk arises from: vRRP address ownership carries special priority behavior not captured by ordinary non-owner settings. The specific required safeguard is: document VRRP owner roles before priority and preemption changes.
Question 478
A gateway migration changes VLAN subnet addresses but leaves HSRP peers configured with different virtual IPs. The incident evidence is: Each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. Which targeted configuration or design change best addresses the failure?
- Configure the same correct virtual gateway IP and group parameters on both HSRP members.
- Configure supported interface/object tracking to reduce HSRP priority on upstream failure.
- Mark the appropriate LAN and ISP interfaces with correct NAT inside/outside roles.
- Assign consistent HSRP group virtual IP and set suitable priority/preempt policy on the intended primary.
Explanation
Correct Answer
A:The required correction is: Configure the same correct virtual gateway IP and group parameters on both HSRP members. The underlying failure mechanism is: Peers disagree on virtual address/group configuration and cannot provide coherent redundancy. Verify success by carrying out this direct test: check group virtual IP, authentication and hello settings at both routers.
Incorrect Answers
B:Configuring supported interface/object tracking to reduce HSRP priority on upstream failure would not configure the same correct virtual gateway IP and group parameters on both HSRP members.
C:Marking the appropriate LAN and ISP interfaces with correct NAT inside/outside roles would not configure the same correct virtual gateway IP and group parameters on both HSRP members.
D:Assigning consistent HSRP group virtual IP and setting suitable priority/preempt policy on the intended primary would not configure the same correct virtual gateway IP and group parameters on both HSRP members.
Question 479
A gateway migration changes VLAN subnet addresses but leaves HSRP peers configured with different virtual IPs. The proposed remedy is: Configure the same correct virtual gateway IP and group parameters on both HSRP members. Which observation would most directly confirm that remedy works as intended?
- Disable the upstream link and confirm the healthy standby takes over the virtual gateway.
- Check HSRP group Active/Standby roles and virtual address ARP after a controlled failover.
- Check per-interface NAT role and dynamic translation hits for a test LAN connection.
- Check group virtual IP, authentication and hello settings at both routers.
Explanation
Correct Answer
D:The decisive acceptance observation is: Check group virtual IP, authentication and hello settings at both routers. This tests the working mechanism, while the original incident was: each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior.
Incorrect Answers
A:This test measures a different behavior: Disable the upstream link and confirm the healthy standby takes over the virtual gateway. It does not establish the target outcome. For the documented fault, the direct acceptance test is: check group virtual IP, authentication and hello settings at both routers.
B:This test measures a different behavior: Check HSRP group Active/Standby roles and virtual address ARP after a controlled failover. It does not establish the target outcome. For the documented fault, the direct acceptance test is: check group virtual IP, authentication and hello settings at both routers.
C:This test measures a different behavior: Check per-interface NAT role and dynamic translation hits for a test LAN connection. It does not establish the target outcome. For the documented fault, the direct acceptance test is: check group virtual IP, authentication and hello settings at both routers.
Question 480
A gateway migration changes VLAN subnet addresses but leaves HSRP peers configured with different virtual IPs. During troubleshooting: Each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. Which underlying cause best explains the recorded behavior?
- Peers disagree on virtual address/group configuration and cannot provide coherent redundancy.
- The NAT inside/outside interface roles are absent or reversed for packet direction.
- HSRP tracked-object policy does not detect or penalize upstream loss.
- The preferred HSRP peer lacks the intended preempt behavior or priority policy.
Explanation
Correct Answer
A:The actual technical cause is: Peers disagree on virtual address/group configuration and cannot provide coherent redundancy. It specifically explains the observation: each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. The correcting configuration is: configure the same correct virtual gateway IP and group parameters on both HSRP members.
Incorrect Answers
B:That diagnosis is supported by a different symptom: No translations are created for packets that otherwise match the source ACL. Here the recorded observation is: each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. The applicable cause is: peers disagree on virtual address/group configuration and cannot provide coherent redundancy.
C:That diagnosis is supported by a different symptom: Clients keep forwarding through an HSRP Active router with no WAN path. Here the recorded observation is: each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. The applicable cause is: peers disagree on virtual address/group configuration and cannot provide coherent redundancy.
D:That diagnosis is supported by a different symptom: The lower-priority router stays Active after the preferred router recovers although preemption was required. Here the recorded observation is: each router reports local HSRP state but hosts see intermittent default-gateway ARP behavior. The applicable cause is: peers disagree on virtual address/group configuration and cannot provide coherent redundancy.
Implementing Cisco Enterprise Network Core Technologies (ENCOR) (350-401) Practice Tests