Free OCSE Practice Questions

Question 1

A branch needs more WAN capacity as well as protection against appliance failure. The proposal uses two matching Meraki MX appliances in a traditional active/passive warm-spare pair and adds their throughput figures together. How should the capacity commitment be corrected?

Accepted Answer

Size each appliance for the full load; the second provides failover.

Answer

Size each appliance for half the peak load and distribute sessions between them.

Answer

Size the pair from the combined WAN-link rates, regardless of appliance capacity.

Answer

Size the primary for the peak load and choose a lower-capacity MX model as spare.

Question 2

During commissioning, a Catalyst 9166 joins its controller and responds over Ethernet, but all client radios remain off. The radios are administratively enabled. The switch reports 802.3af power negotiation, and no USB accessory is required. What should the engineer change first?

Accepted Answer

Provide supported 802.3at PoE+ power and verify negotiation.

Answer

Move the AP to a quieter channel and increase its transmit power.

Answer

Replace the AP because controller registration proves sufficient radio power.

Answer

Increase the switch's aggregate PoE budget but retain the port's 802.3af limit.

Question 3

Review a branch-switch proposal with 24 PoE+ ports, a 30-W per-port maximum, and a 370-W total PoE budget. Six APs each reserve 30 W and eight phones each reserve 15 W at the switch. Measured device-side power draw is 25.5 W per AP and 12 W per phone. The customer requires 20% of the installed PoE budget to remain unallocated; no other devices use PoE. Does the proposal meet that requirement?

Accepted Answer

Reject: the 300-W allocation exceeds the 296-W usable budget.

Answer

Approve: the 300-W allocation is below the 370-W installed budget.

Answer

Approve: the 249-W device draw is below the 296-W usable budget.

Answer

Reject: all 14 occupied ports must each reserve the full 30 W.

Question 4

Voice on a Catalyst SD-WAN branch must meet all three customer limits: latency no greater than 100 ms, jitter no greater than 20 ms, and loss no greater than 1%. Path A measures 20 ms latency, 40 ms jitter, and 0.2% loss. Path B measures 70 ms, 10 ms, and 0.3%, respectively. Nonvoice applications perform acceptably on A. Which forwarding decision satisfies the voice requirement without disrupting those applications?

Accepted Answer

Steer voice to B with the application-aware routing policy.

Answer

Keep voice on A because its latency is lower.

Answer

Use both paths for voice because both links are operational.

Answer

Disable A for all applications until its jitter improves.

Question 5

Staff using a new MR SSID must obtain addresses from corporate DHCP and appear individually to an upstream policy device. The SSID currently uses Meraki DHCP in NAT mode; the staff VLAN is already supported by the AP and its uplink. How should client addressing be changed?

Accepted Answer

Bridge the SSID to the staff VLAN and use the upstream DHCP service.

Answer

Assign the corporate DHCP scope to the SSID's NAT address pool for wireless clients.

Answer

Place the AP's management interface in the staff VLAN so it uses corporate DHCP.

Answer

Route the corporate subnet toward the AP while retaining NAT for wireless client traffic.

Question 6

The security team wants to examine file contents in HTTPS downloads from business websites that employees must continue to use. The branch currently uses Umbrella for DNS-layer filtering. Managed laptops trust the inspection certificate, and the necessary web-security licenses have been purchased. What must the design add?

Accepted Answer

Traffic steering through a secure web gateway with HTTPS decryption and file inspection.

Answer

Additional blocked-domain categories in the existing Umbrella DNS policy.

Answer

An IPsec tunnel that encrypts the branch's traffic to headquarters.

Answer

Stateful firewall inspection of permitted connections using TCP port 443.

Question 7

Catalyst Center displays 83% in the wireless Client Health Summary for a selected population of active clients with computed health scores. What does the percentage describe?

Accepted Answer

83% of the selected clients were healthy, with individual scores of 8-10.

Answer

83% of clients completed association, even if their subsequent connectivity was poor.

Answer

83% of the available wireless airtime was in use during the measurement period.

Answer

The mean of the individual client health scores was 8.3 on a 10-point scale.

Question 8

The optical transceiver in a branch-switch proposal has the right connector and advertised speed. Support for the exact switch and line card is still unverified. Before placing the order, which Cisco resource most directly resolves that question?

Accepted Answer

Optics-to-Device Compatibility Matrix

Answer

Feature Navigator

Answer

Cisco Commerce Workspace

Answer

Cisco Business Dashboard

Question 9

An MX customer will retain co-termination licensing and now requires intrusion prevention, content filtering, and malware protection. The appliance has sufficient capacity. What is the lowest co-term tier that includes all three controls?

Accepted Answer

Advanced Security

Answer

Enterprise

Answer

Essentials

Answer

Secure SD-WAN Plus

Question 10

Application servers are moving to a supported public cloud. The WAN design calls for a Cisco SD-WAN edge inside that virtual network, while physical routers remain at the branches. Which platform belongs in the cloud-side proposal?

Accepted Answer

Cisco Catalyst 8000V

Answer

Cisco Catalyst 8200

Answer

Cisco Catalyst 8300

Answer

Cisco Catalyst 8500

Free OCSE Practice Questions

Domain 1: Switching Overview and Features

Question 1

Question 2

Domain 2: Routing Overview and Features

Question 3

Question 4

Domain 3: Wireless Overview and Features

Question 5

Question 6

Domain 4: Meraki Overview and Products

Question 7

Question 8

Question 9

Domain 5: Security Overview and Features

Question 10

That's 10 of 1,030