I hear the question in Live Bootcamps, and I see it on our forums all the time -  What kind of questions can I expect to come across in the Core Knowledge section of the Lab Exam, and how should I answer them?

Here are some examples of the various question types I believe you can encounter, and my sample responses. I also provide some tips on surviving these buggers.

Question Type 1 - Memorization Type Questions

Q: Your Cisco router has learned a prefix from RIP version 2 and ODR. Which will your router prefer and why?

A: Your Cisco router will prefer the route from RIP version 2 as it possesses the preferable Administrative Distance.

Tip: For questions like this, we need to get back to basics and do some good old fashioned memorization. I suggest making Flash Cards for potential questions of this nature.

Question Type 2 - “Trick” Questions

Q: Examine the output below - what version of VTP is running on the device and how can you tell?

Switch# show vtp status

VTP Version                     : 2

Configuration Revision          : 247

Maximum VLANs supported locally : 1005

Number of existing VLANs        : 33

VTP Operating Mode              : Server

VTP Domain Name                 : Lab_Network

VTP Pruning Mode                : Enabled

VTP V2 Mode                     : Disabled

VTP Traps Generation            : Disabled

MD5 digest                      : 0x45 0x52 0xB6 0xFD 0x63 0xC8 0x49 0x80

Configuration last modified by 0.0.0.0 at 8-12-99 15:04:49

Local updater ID is 172.20.52.34 on interface Gi1/1 (first interface found)

A: This device is running VTP Version 1. This is reflected by the VTP V2 Mode disabled output.

Tip: Be sure to examine the questions fully. Here, if you are examining the output too quickly, you might report that it is VTP Version 2 based on the output in the first field.

Question Type 3 - Short Answer Theory/Technology Questions

Q: Examine the output shown below. What is the purpose of the ff02::1:ffee:6a82 address?

ipv6interface is down, line protocol is down

IPv6 is enabled, link-local address is fe80::20d:88ff:feee:6a82 [TENTATIVE]

No global unicast address is configured

Joined group address(es):

ff02::1

ff02::1:ffee:6a82

ICMP error messages limited to one every 100 milliseconds

ICMP redirects are enabled

ND DAD is enabled, number of DAD attempts: 1

A: This address is the solicited-node multicast IPv6 address. It is used in the Neighbor Discovery process.

Question Type 4 - True Open Ended - “The Good, the Vague, and the Ugly”

Q: What is the impact on a device when you use the AutoSecure feature?

A: The AutoSecure feature allows you to disable common IP services that can be exploited for network attacks. The feature also enables IP services and features that defend against an attack. It is enabled with a single command.

Question Type 5 - Did You Read Your Cisco Docs?

Q: Examine the output shown below. What feature is in use?

S3-3640#show ip rip database

172.18.0.0/16    auto-summary

172.18.0.0/16

[1] via 172.16.1.2, 00:02:44 (permanent), Serial1/0

A: This output shows that the IP RIP TRIGGERED feature is in use.

Tip: The exam authors are using the Cisco Docs as the primary source for questions. It only makes sense that they should be our primary study tool.