I hear the question in Live Bootcamps, and I see it on our forums all the time -  What kind of questions can I expect to come across in the Core Knowledge section of the Lab Exam, and how should I answer them?

Here are some examples of the various question types I believe you can encounter, and my sample responses. I also provide some tips on surviving these buggers.

Question Type 1 - Memorization Type Questions

Q: Your Cisco router has learned a prefix from RIP version 2 and ODR. Which will your router prefer and why?

A: Your Cisco router will prefer the route from RIP version 2 as it possesses the preferable Administrative Distance.

Tip: For questions like this, we need to get back to basics and do some good old fashioned memorization. I suggest making Flash Cards for potential questions of this nature.

Question Type 2 - “Trick” Questions

Q: Examine the output below - what version of VTP is running on the device and how can you tell?

Switch# show vtp status
VTP Version : 2
Configuration Revision          : 247
Maximum VLANs supported locally : 1005
Number of existing VLANs        : 33
VTP Operating Mode              : Server
VTP Domain Name                 : Lab_Network
VTP Pruning Mode                : Enabled
VTP V2 Mode                     : Disabled
VTP Traps Generation            : Disabled
MD5 digest                      : 0x45 0x52 0xB6 0xFD 0x63 0xC8 0x49 0x80
Configuration last modified by at 8-12-99 15:04:49
Local updater ID is on interface Gi1/1 (first interface found)

A: This device is running VTP Version 1. This is reflected by the VTP V2 Mode disabled output.

Tip: Be sure to examine the questions fully. Here, if you are examining the output too quickly, you might report that it is VTP Version 2 based on the output in the first field.

Question Type 3 - Short Answer Theory/Technology Questions

Q: Examine the output shown below. What is the purpose of the ff02::1:ffee:6a82 address?

ipv6interface is down, line protocol is down
IPv6 is enabled, link-local address is fe80::20d:88ff:feee:6a82 [TENTATIVE]
No global unicast address is configured
Joined group address(es):
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ND DAD is enabled, number of DAD attempts: 1

A: This address is the solicited-node multicast IPv6 address. It is used in the Neighbor Discovery process.

Question Type 4 - True Open Ended - “The Good, the Vague, and the Ugly”

Q: What is the impact on a device when you use the AutoSecure feature?

A: The AutoSecure feature allows you to disable common IP services that can be exploited for network attacks. The feature also enables IP services and features that defend against an attack. It is enabled with a single command.

Question Type 5 - Did You Read Your Cisco Docs?

Q: Examine the output shown below. What feature is in use?

S3-3640#show ip rip database    auto-summary
[1] via, 00:02:44 (permanent), Serial1/0

A: This output shows that the IP RIP TRIGGERED feature is in use.

Tip: The exam authors are using the Cisco Docs as the primary source for questions. It only makes sense that they should be our primary study tool.

About INE

INE is the premier provider of technical training for the IT industry. INE is revolutionizing the digital learning industry through the implementation of adaptive technologies and a proven method of hands on training experiences. Our portfolio of trainings is built for all levels of technical learning, specializing in advanced networking technologies, next generation security and infrastructure programming and development. Want to talk to a training advisor about our course offerings and training plans? Give us a call at 877-224-8987 or email us at

Subscribe to INE Blog Updates

New Blog Posts!