All NVIDIA exams
Free NCP-AIN practice test: 30 questions with answers
30 original questions for NVIDIA-Certified Professional: AI Networking, drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.
- Free questions
- 30
- Full bank
- 100 questions
- Real exam
- 120 min
- Passing score
- Pass/fail
All 30 NCP-AIN questions with answers
The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.
Network telemetry and operations (6 questions)
Question 1
A training job runs slower than expected, and the team suspects a single congested uplink. Which metric should be checked first?
- AThe model's training accuracy and validation loss curve over the last 50 epochs
- BThe number of GPU CUDA cores and tensor cores installed on each compute node
- CThe switch's warranty expiry date and the vendor support contract end date
- DPer-port utilization and queue or buffer occupancy on the uplinks
Show answer and explanationHide answer
Correct answer: DPer-port utilization and queue occupancy show whether a specific uplink is congested. Training accuracy, GPU core counts and warranty dates do not identify a congested link.
Question 2
Operators want to be alerted when packet loss on a RoCE link exceeds a threshold during a training run. Which practice supports this?
- ARely on users to report slowness or dropped jobs during the run
- BCheck the interface counters after the job has already failed overnight
- CDisable interface counters on busy links to free up CPU cycles
- DDefine thresholds on loss counters in the telemetry platform with alerting
Show answer and explanationHide answer
Correct answer: DThresholds with alerts on loss counters give early warning during the run. Checking after failure, disabling counters and relying on user reports detect problems too late.
Question 3
A team wants to check whether two GPU nodes can communicate at full bandwidth over the RDMA fabric before a training run. Which tool is typically used for this bandwidth test?
- AA web browser speed test run against a public CDN endpoint over WAN
- BA DNS lookup tool querying the cluster resolver
- CA perftest-style RDMA bandwidth test between the nodes
- DA lossless file compression tool such as gzip for model checkpoints
Show answer and explanationHide answer
Correct answer: CRDMA bandwidth tests measure achievable throughput over the RDMA fabric between nodes, which is the relevant check. Browser speed tests, DNS lookups and compression tools do not measure the RDMA path.
Question 4
A link shows a steadily increasing count of CRC errors. Which cause should be checked first?
- AThe physical layer, such as a damaged cable or a faulty optic
- BThe DNS search suffix configured on the compute nodes' resolver entries
- CThe GPU firmware version and NVIDIA driver release installed on the host
- DThe length and character set of the hostnames assigned to each compute node
Show answer and explanationHide answer
Correct answer: ACRC errors usually point to the physical layer, so checking the cable and optic is the logical first step. Firmware versions, DNS suffixes and hostname lengths do not produce CRC errors.
Question 5
A new leaf switch is added to the AI fabric. Which step keeps its configuration consistent with the rest of the fabric?
- AApply the validated configuration template and verify it against the fabric baseline
- BConfigure it by hand from memory using CLI commands typed directly in
- CLeave the factory defaults in place on every port until fabric review
- DCopy the configuration from a consumer home router and its DHCP leases
Show answer and explanationHide answer
Correct answer: AApplying a validated template and checking it against the baseline keeps the new device consistent. Manual configuration from memory, factory defaults and copying a home router's configuration create inconsistencies.
Question 6
Which two practices help validate an AI network before a large training run? (Choose two.)
- ARun bandwidth and latency tests between representative nodes
- BStart the training job first and tune the network afterwards
- CSkip validation for networks that worked last month
- DConfirm consistent MTU and flow control settings along the path
- EDisable telemetry during the test
Show answer and explanationHide answer
Correct answer: A, DBandwidth and latency tests between representative nodes and checks of consistent MTU and flow control along the path reveal problems before a run. Starting the job first, skipping validation and disabling telemetry all make failures harder to prevent or diagnose.
AI fabric fundamentals (6 questions)
Question 7
An AI training cluster runs large all-reduce operations across hundreds of GPUs. Which network characteristic matters most for the collective communication performance?
- ALow and predictable latency with high bandwidth and minimal packet loss
- BThe number of unrelated tenant services sharing the fabric
- CThe size and font of the switch's front-panel label printed on the chassis faceplate
- DMaximum routing table size for internet routes carried by the border routers
Show answer and explanationHide answer
Correct answer: ACollective operations are sensitive to latency variation and loss, because every GPU waits on the slowest transfer. Shared unrelated services, panel labels and internet route tables do not determine collective performance.
Question 8
A designer must choose between a back-end network dedicated to GPU-to-GPU traffic and a converged network that also carries storage and management traffic. For large AI training, which approach is recommended?
- AA converged network carrying storage and management traffic with no isolation
- BUsing the out-of-band management network to carry GPU collective traffic between nodes at scale
- CSending GPU collective traffic over the public internet through shared upstream transit providers
- DA dedicated back-end compute fabric separated from storage and management networks
Show answer and explanationHide answer
Correct answer: DA dedicated compute fabric keeps GPU traffic free from interference by other traffic types and allows tuning for collectives. Converged networks, management networks and internet paths do not meet the performance and isolation needs.
Question 9
A cluster uses a leaf-spine topology. The designer wants to keep the number of hops between any two GPUs consistent. Which design property does this describe?
- AAn unbalanced ring with variable hop counts between nodes
- BA single top-of-rack switch serving every GPU in the cluster with no spine tier
- CA hub-and-spoke WAN design connecting remote sites over leased MPLS circuits
- DNon-blocking, balanced topology with uniform hop count between endpoints
Show answer and explanationHide answer
Correct answer: DA balanced leaf-spine fabric gives uniform hop counts and non-blocking capacity, which keeps performance predictable. Unbalanced rings, a single switch with no scaling and WAN hub designs do not provide that property.
Question 10
Which term describes a fabric in which the uplink capacity from leaf switches to spine switches equals the total capacity of the server-facing ports?
- AOversubscription of 10 to 1 on 4 leaf uplinks per rack
- BA single-link design with no redundancy
- CNon-blocking oversubscription ratio of 1 to 1
- DA flat broadcast domain with no uplinks
Show answer and explanationHide answer
Correct answer: CA 1 to 1 ratio means uplink capacity matches server-facing capacity, so the fabric is non-blocking. A 10 to 1 ratio is oversubscribed, a single link has no redundancy, and a broadcast domain without uplinks cannot connect the fabric.
Question 11
Which two factors most affect the performance of collective operations across an AI cluster? (Choose two.)
- APacket loss and retransmission behaviour on the fabric
- BThe colour of the rack doors
- CLatency and jitter between GPU nodes
- DThe software licence name of the operating system
- EThe number of printers on the same subnet
Show answer and explanationHide answer
Correct answer: A, CLatency, jitter, packet loss and retransmissions directly affect how long collective operations take. Rack door colours, licence names and printers on the subnet do not affect fabric performance.
Question 12
What does GPUDirect RDMA allow a GPU to do?
- AReplace the network driver with a web server that serves model weights to the CUDA runtime over HTTP/1.1
- BSend display output over the network to remote desktop clients using vGPU profiles
- CExchange data directly with another device's memory without staging the data through host CPU memory
- DStore data in the switch's flash memory and on the NIC's onboard eMMC volume for persistent packet capture logs
Show answer and explanationHide answer
Correct answer: CGPUDirect RDMA moves data directly between GPU and network memory, which reduces copies and latency. The other options do not describe the function of GPUDirect RDMA.
InfiniBand and RoCE (6 questions)
Question 13
A cluster requires RDMA over Ethernet with lossless behaviour for AI traffic. Which technology provides RDMA over converged Ethernet?
- AICMP echo requests and replies used as a bulk data transfer path
- BStandard TCP over the kernel stack with no RDMA offload
- CRoCE, with congestion control and lossless configuration on the switches
- DARP address resolution broadcasts reused as a data transport
Show answer and explanationHide answer
Correct answer: CRoCE carries RDMA over Ethernet and requires lossless behaviour and congestion control, which are configured on the switches and NICs. Standard TCP, ICMP and ARP are not RDMA transports.
Question 14
InfiniBand is used in a training cluster. Which component is responsible for managing the subnet, including address assignment and routing paths?
- AThe subnet manager
- BThe DNS zone server
- CThe NTP time server
- DThe printer job queue
Show answer and explanationHide answer
Correct answer: AThe InfiniBand subnet manager discovers the topology, assigns local identifiers and computes forwarding paths. DNS, NTP and printer queues do not manage an InfiniBand subnet.
Question 15
A RoCE deployment shows packet drops during bursts of collective traffic. Which mechanism prevents drops by pausing traffic before buffers overflow?
- ATurning off priority and link-level flow control on the RDMA switch ports
- BPriority flow control (PFC) on the traffic class used by RDMA
- CIncreasing the DNS TTL on the cluster's internal resolver records
- DChanging the switch's hostname and SNMP location string
Show answer and explanationHide answer
Correct answer: BPFC pauses the RDMA traffic class before buffers overflow, which makes the traffic lossless. Disabling flow control allows drops, and DNS TTLs and hostnames have no effect on drops.
Question 16
A network engineer uses ECN marking together with congestion control on a RoCE fabric. What does ECN enable the sender to do?
- AReduce its sending rate when congestion is signalled before drops occur
- BRoute GPU collective traffic through the out-of-band management network at scale
- CDisable the RDMA transport on each node and fall back to kernel TCP sockets
- DSend more packets at line rate to fill every switch buffer and queue before the sender
Show answer and explanationHide answer
Correct answer: AECN marks packets when queues build up, and the sender uses congestion control to slow down before loss occurs. Sending more packets, disabling RDMA and rerouting through management networks do not address congestion.
Question 17
Which two configuration requirements matter for a lossless RoCE deployment? (Choose two.)
- AMismatched MTU values across the path
- BConsistent priority and flow control settings across the switches and NICs
- CPriority flow control enabled for the RDMA traffic class
- DDisabling congestion notification entirely
- EUsing different traffic classes for every single packet
Show answer and explanationHide answer
Correct answer: B, CConsistent priority and flow control settings across all devices, and PFC on the RDMA class, are needed for lossless behaviour. Mismatched MTU values cause problems, disabling congestion notification removes a control, and per-packet traffic classes are not a design requirement.
Question 18
Within an InfiniBand subnet, which identifier do switches use to forward packets to a port?
- AA VLAN tag
- BA MAC address table entry
- CLocal identifier (LID)
- DA domain name
Show answer and explanationHide answer
Correct answer: CThe LID is the subnet-local address that switches use for forwarding in InfiniBand. Domain names, MAC table entries and VLAN tags belong to other network technologies.
Spectrum-X and Ethernet for AI (6 questions)
Question 19
A data centre designer wants Ethernet to carry AI traffic with performance close to a purpose-built fabric. Which approach is typically used with NVIDIA Spectrum-X?
- AStandard Ethernet switches with factory default settings, static ECMP hashing and no telemetry export
- BEthernet switches with adaptive routing and congestion control tuned for AI workloads
- CLegacy shared-medium Ethernet hubs connected in a daisy chain across the rack with half-duplex links
- DPoint-to-point serial connections between GPUs over RS-232 style links with no switching fabric
Show answer and explanationHide answer
Correct answer: BSpectrum-X combines Ethernet switches with adaptive routing and congestion control designed for AI traffic. Default switches lack that tuning, hubs cannot switch traffic at scale, and serial links do not provide cluster-scale fabrics.
Question 20
In a multi-tenant AI cloud, two tenants share the same physical fabric. The operator must keep their traffic and performance isolated. Which mechanism provides logical separation on the fabric?
- AUsing the same IP address space for both tenants with no segmentation
- BNetwork segmentation with VLAN or VXLAN overlays and tenant-specific policies
- CGiving every tenant access to every port on the shared leaf switches
- DSharing a single egress queue across every tenant flow with no traffic classification
Show answer and explanationHide answer
Correct answer: BSegmentation with VLAN or VXLAN overlays and tenant policies separates traffic and enables isolation. Shared address spaces, a single unclassified queue and open port access remove isolation between tenants.
Question 21
A network administrator wants a view of link utilization, congestion and errors across the AI fabric in real time for troubleshooting. Which capability provides this?
- AA monthly paper report mailed to the network operations team
- BManually logging into each switch over SSH once a week by an engineer
- CA printed topology diagram pinned to the wall of the network room
- DStreaming telemetry from the switches to a monitoring platform
Show answer and explanationHide answer
Correct answer: DStreaming telemetry provides real-time counters for utilization, congestion and errors, which supports fast troubleshooting. Monthly reports, weekly manual logins and printed diagrams are too slow or static.
Question 22
Which link speed is commonly used for server-facing connections in modern AI fabrics?
- A400 Gb/s or 800 Gb/s
- B10 Mb/s or 100 Mb/s
- C1 Gb/s or 2.5 Gb/s
- D56 kb/s or 1.544 Mb/s
Show answer and explanationHide answer
Correct answer: AHigh-bandwidth server links at 400 or 800 Gb/s are common in AI fabrics to move large model data. The lower speeds listed are far below what AI clusters need.
Question 23
Which two statements about adaptive routing in AI fabrics are correct? (Choose two.)
- AIt requires a single fixed path for every flow to work
- BIt can help balance uneven load across spine switches
- CIt removes the need for congestion control
- DIt can spread traffic across multiple equal paths to reduce hot spots
- EIt is used only on management networks
Show answer and explanationHide answer
Correct answer: B, DAdaptive routing can spread flows across equal-cost paths and balance load across spines, which reduces hot spots. It does not require a single fixed path, does not remove congestion control, and is used on the data fabric rather than only on management networks.
Question 24
A designer wants to route AI traffic to avoid congested spine links without manual intervention. Which feature supports this?
- AManual traffic engineering adjusted once per year by hand
- BSpanning Tree blocking redundant uplinks to keep one path
- CStatic routes pinned to fixed spine uplinks regardless of load
- DAdaptive routing with congestion-aware path selection
Show answer and explanationHide answer
Correct answer: DAdaptive routing with congestion-aware path selection chooses paths based on load, which avoids congested spines automatically. Static routes, spanning tree blocking and yearly manual changes do not respond to congestion.
Security and multi-tenancy (6 questions)
Question 25
A security team needs to prevent a compromised GPU node from reaching other tenants' nodes on the fabric. Which control limits this lateral movement?
- AAllowing every node to reach each other freely across the fabric
- BAccess control lists or policies that restrict traffic between tenant segments
- CTurning off stateful firewalls on the fabric edge and tenant gateways during maintenance
- DGiving every node the shared administrator password and SSH key
Show answer and explanationHide answer
Correct answer: BACLs and policies restrict traffic between segments and limit what a compromised node can reach. Open reachability, disabled firewalls and shared administrator passwords enable lateral movement.
Question 26
Which practice reduces the risk that a misconfigured tenant network exposes traffic to another tenant?
- AAdding tenants to a shared VLAN trunk spanning every leaf for easy reachability
- BAutomated validation of tenant policies before changes are applied
- CTurning off logging for tenant policy hits and changes
- DAllowing every port on the leaf switches for convenience
Show answer and explanationHide answer
Correct answer: BAutomated validation catches policy errors before they reach production and prevents accidental cross-tenant exposure. Shared VLANs, disabled logging and open ports all increase the chance of exposure.
Question 27
A cloud operator must isolate the management plane of the AI fabric from tenant traffic. Which design achieves this?
- AA separate out-of-band management network with access restricted to administrators
- BGiving each tenant root access on every switch so they can change routing and QoS policies
- CManaging switches through the tenants' data VLAN with shared SSH sessions on the fabric
- DUsing public internet access with open SSH and SNMP ports for switch management from outside
Show answer and explanationHide answer
Correct answer: AAn out-of-band management network isolates management traffic from tenant data and restricts access to administrators. Managing through tenant VLANs, root access for tenants and public internet management all expose the control plane.
Question 28
A security review finds that switch management interfaces use default credentials. What is the most appropriate remediation?
- AChange to unique strong credentials, enforce centralized authentication and disable unused services
- BShare the default credentials across every tenant team and keep them in a shared vault for easy access by contractors
- CMake the management interface publicly reachable on the internet with HTTP enabled
- DLeave the factory defaults in place because the vendor documents them and they are easy for staff to find online
Show answer and explanationHide answer
Correct answer: AUnique strong credentials with centralized authentication remove the widely known defaults, and disabling unused services reduces exposure. Keeping defaults, sharing them and making the interface public all increase risk.
Question 29
Which two controls help protect an AI fabric against misuse by a compromised tenant? (Choose two.)
- AUnlimited access to every switch port for every tenant
- BPer-tenant quotas and rate limits on the traffic and resources they consume
- CShared credentials across tenants for simpler support
- DLogging and alerting on abnormal flows between tenant segments
- EDisabling access-list enforcement for performance
Show answer and explanationHide answer
Correct answer: B, DQuotas and rate limits contain the impact of a compromised tenant, and logging with alerting reveals abnormal cross-segment flows. Unlimited access, shared credentials and disabled access lists all widen the impact.
Question 30
Which practice protects switch configuration files from unauthorized changes?
- AStoring configuration files on a shared desktop folder
- BEmailing configuration files to the team as attachments
- CVersion control with restricted write access and change approval
- DLeaving the files world-writable on a shared network path
Show answer and explanationHide answer
Correct answer: CVersion control with restricted write access and approval keeps configurations auditable and protected. Shared desktops, email and world-writable files expose configurations to unauthorized change.
Want more NCP-AIN questions?
The full bank has 100 questions with answers and explanations, as a PDF, an online practice exam, or both.
Both formats together. The best value.
Instant access after payment, with 90 days of updates. Checkout is on our store, AIExamCerts.