Cisco CCNP Cisco CCNP Practice Test 2025
This is the official Cisco CCNP Cisco CCNP question paper for 2025, as set in the Model questions examination. It carries 90 full marks and a time allowance of 120 minutes, across 10 questions. On Kekkei you can attempt this Cisco CCNP past paper online with a timer, get instant AI feedback and step-by-step solutions, and track the topics where you lose marks — completely free. Whether you are revising for your Cisco CCNP Cisco CCNP exam or solving previous years' question papers, this 2025 paper is a great way to practise under real exam conditions.
| Level | Cisco CCNP |
|---|---|
| Subject | Cisco CCNP |
| Year | 2025 BS |
| Exam session | Model questions |
| Full marks | 90 |
| Time allowed | 120 minutes |
| Questions | 10, all with step-by-step solutions |
Cisco CCNP Enterprise Core
Select the best answer.
In BGP, which attribute is used first in the best-path selection algorithm when multiple paths exist to the same destination prefix?
Weight (Cisco-specific)
In Cisco BGP best-path selection algorithm, Weight is evaluated first because it is a Cisco-proprietary attribute local to the router. The order is: Weight > LOCAL_PREF > locally originated > AS_PATH > ORIGIN > MED > eBGP over iBGP > IGP metric > Router ID.
An OSPF router is showing a neighbor stuck in the EXSTART/EXCHANGE state. What is the MOST likely cause?
MTU mismatch between the two interfaces
An OSPF adjacency stuck in EXSTART/EXCHANGE state is most commonly caused by an MTU mismatch. During the Database Description (DBD) exchange, if the MTU values differ, the routers cannot agree on the DBD packet size and the adjacency fails to progress to FULL state.
On a Cisco switch, which command correctly configures interface GigabitEthernet0/1 as a trunk port using 802.1Q encapsulation?
switchport trunk encapsulation dot1q followed by switchport mode trunk
To configure a trunk port on a Cisco switch that supports multiple encapsulation types, you must first set the encapsulation to dot1q (802.1Q) and then set the port mode to trunk. On switches that only support 802.1Q, the encapsulation command may be unnecessary.
A network engineer is using RESTCONF to configure a Cisco IOS-XE router. Which data encoding formats does RESTCONF support?
XML and JSON
RESTCONF is an HTTP-based protocol defined in RFC 8040 that uses YANG data models. It supports both XML (application/yang-data+xml) and JSON (application/yang-data+json) encoding for configuration and operational data.
In a three-tier campus network architecture (core, distribution, access), which layer is primarily responsible for implementing routing policies, access control lists, and inter-VLAN routing?
Distribution layer
The distribution layer sits between the access and core layers and is responsible for policy-based connectivity, including routing between VLANs, ACL filtering, QoS marking, and summarizing routes before passing them to the core.
Which command on a Cisco router displays the contents of the Routing Information Base (RIB) including all learned routes, their sources, and administrative distances?
show ip route
The show ip route command displays the RIB, showing all routes with their source protocol, administrative distance, metric, next hop, and outgoing interface. It is the primary command for verifying the routing table on Cisco routers.
A network engineer wants to prevent DHCP spoofing attacks on a Cisco switch. Which feature should be enabled?
DHCP Snooping
DHCP Snooping creates a trusted/untrusted port model where only designated trusted ports (uplinks to legitimate DHCP servers) can send DHCP server messages. It builds a binding table of MAC-to-IP associations and drops spoofed DHCP responses on untrusted ports.
What is the purpose of the Spanning Tree Protocol (STP) Root Guard feature on a Cisco switch?
To prevent a port from becoming a root port by blocking superior BPDUs received on that port
Root Guard prevents a designated port from becoming a root port. If superior BPDUs are received on a Root Guard-enabled port (indicating a potentially rogue switch claiming to be root), the port is placed in a root-inconsistent (blocked) state.
A network engineer is writing an Ansible playbook to configure Cisco IOS devices. Which Ansible module is specifically designed for running commands on Cisco IOS devices?
cisco.ios.ios_command
The cisco.ios.ios_command module (from the cisco.ios Ansible collection) is specifically designed to send commands to Cisco IOS devices over SSH. It handles connection management, privilege escalation, and output parsing for IOS platforms.
In a Cisco QoS implementation, which queuing mechanism provides a minimum guaranteed bandwidth to each traffic class while allowing classes to use excess bandwidth when available?
Class-Based Weighted Fair Queuing (CBWFQ)
CBWFQ allocates a minimum bandwidth guarantee to each defined traffic class. When a class does not use its allocated bandwidth, the excess is shared among other classes. WRED is a congestion avoidance mechanism, PQ uses strict priority, and FIFO offers no QoS differentiation.
Frequently asked questions
- Where can I find the Cisco CCNP Cisco CCNP question paper 2025?
- The full Cisco CCNP Cisco CCNP 2025 (Model questions) question paper is available free on Kekkei. You can read every question online and attempt the paper under timed exam conditions.
- Does the Cisco CCNP 2025 paper come with solutions?
- Yes. Every question on this Cisco CCNP past paper includes a step-by-step solution, plus instant AI feedback when you attempt it on Kekkei.
- How many marks is the Cisco CCNP Cisco CCNP 2025 paper?
- The Cisco CCNP Cisco CCNP 2025 paper carries 90 full marks and is meant to be completed in 120 minutes, across 10 questions.
- Is practising this Cisco CCNP past paper free?
- Yes — reading and attempting this Cisco CCNP past paper on Kekkei is completely free.