QUESTION 161
What is a characteristic of RSA?

A. It uses preshared keys for encryption.
B. It is a private-key encryption algorithm.
C. It is a public-key cryptosystem.
D. It requires both sides to have identical keys.

Correct Answer: C

QUESTION 162
A network engineer is upgrading a small data center to host several new applications, including server backups that are expected to account for up to 90% of the
bandwidth during peak times. The data center connects to the MPLS network provider via a primary circuit and a secondary circuit. How does the engineer
inexpensively update the data center to avoid saturation of the primary circuit by traffic associated with the backups?

A. Configure a dedicated circuit for the backup traffic.
B. Place the backup servers in a dedicated VLAN.
C. Assign traffic from the backup servers to a dedicated switch.
D. Advertise a more specific route for the backup traffic via the secondary circuit.

Correct Answer: D

QUESTION 163
Which standard is required when more than one distribution system port and only one IP address are configured for a Cisco WLC?

A. 802.1d
B. 802.1af
C. 802.1q
D. 802.3ad

Correct Answer: D

QUESTION 164
What is the primary purpose of the HSRP protocol?

A. to exchange MAC and ARP tables between two routers that are acting as a single default gateway
B. to establish a fault-tolerant default gateway when a router group loses a member
C. to synchronize the routing table of two routers that are acting as a single default gateway
D. to discover the link-layer address associated with a given internet-layer address

Correct Answer: B

QUESTION 165
Which statement best describes the IPsec site-to-site VPN?

A. The VPN gateway encapsulates and encrypts outbound traffic and transmits it through a VPN tunnel over the internet to other end devices.
B. The VPN gateway performs Network Address Translation and then transmits outbound traffic destined for the internet through a VPN tunnel.
C. The VPN provides remote access and connects individual users to the headquarter network.
D. The VPN provides access to roaming users and establishes connection with corporate IT resources.

Correct Answer: A

QUESTION 166
What is a characteristic of an SSID in wireless networks?

A. may contain letters, numbers, and special characters
B. allows easy file sharing between endpoints
C. requires the use of PoE for functionality
D. prevents network sniffing tools from obtaining data

Correct Answer: A

QUESTION 167
Which management-access connection allows the Cisco WLC to generate an SSL certificate for the GUI interface?

A. Web Mode
B. Secure Web Mode
C. Telnet
D. HΤΤP

Correct Answer: B

QUESTION 168
Which two command sequences must be configured on a switch to establish a Layer 3 EtherChannel with an open-standard protocol? (Choose two.)
A. interface GigabitEthernet0/0/1
channel-group 10 mode active
B. interface GigabitEthernet0/0/1
channel-group 10 mode auto
C. interface port-channel 10
switchport
switchport mode trunk
D. interface GigabitEthernet0/0/1
channel-group 10 mode on
E. interface port-channel 10
no switchport
ip address 172.16.0.1 255.255.255.0

Correct Answer: AE

QUESTION 169
In QoS, which prioritization method is appropriate for interactive voice and video?

A. low-latency queuing
B. expedited forwarding
C. round-robin scheduling
D. traffic policing

Correct Answer: A

QUESTION 170
Which HTTP status code is returned after a successful REST API request?

A. 200
B. 301
C. 404
D. 500

Correct Answer: A

QUESTION 171
Which action prevents debug messages from being sent via syslog while allowing other messages when an abnormally high number of syslog messages are
generated by a device with the debug process turned on?
A. Turn off the logging monitor in global configuration mode.
B. Set the logging trap severity level to informational.
C. Disable logging to the console.
D. Use an access list to filter out the syslog messages.

Correct Answer: B

QUESTION 172
When the active router in an HSRP group fails, what router assumes the role and forwards packets?

A. Backup
B. Standby
C. Listening
D. Forwarding

Correct Answer: B

QUESTION 173
Which two QoS tools provide congestion management? (Choose two.)

A. CBWFQ
B. PQ
C. PB
D. CAR
E. FRTS

Correct Answer: AB

QUESTION 174
What is the main purpose of SSH management access?

A. to enable secured access to the inbound management interface
B. to validate management access with username and domain name only
C. to allow passwords protected with HTTPS encryption to be sent
D. to support DES 56-bit and 3DES (168-bit) ciphers

Correct Answer: A

QUESTION 175
An engineering team asks an implementer to configure syslog for warning conditions and error conditions. Which command does the implementer configure to
achieve the desired result?

A. logging trap 2
B. logging trap 3
C. logging trap 4
D. logging trap 5

Correct Answer: C

QUESTION 176
Which two components comprise part of a PKI? (Choose two.)

A. clear-text password that authenticates connections
B. one or more CRLs
C. CA that grants certificates
D. RSA token
E. preshared key that authenticates connections

Correct Answer: BC

QUESTION 177
How does automation leverage data models to reduce the operational complexity of a managed network?

A. streamlines monitoring using SNMP and other polling tools
B. categorizes traffic and provides insights
C. allows the controller to be vendor-agnostic
D. reduces the response time for specific requests to devices with many interfaces

Correct Answer: C

QUESTION 178
Why would a network administrator choose to implement RFC 1918 address space?

A. to provide overlapping address space with another network
B. to provide flexibility in the IP network design
C. to limit the number of hosts on the network
D. to route traffic on the internet

Correct Answer: A

QUESTION 179
Which enhancements were implemented as part of WPA3?

A. TKIP encryption improving WEP and per-packet keying
B. 802.1x authentication and AES-128 encryption
C. AES-64 in personal mode and AES-128 in enterprise mode
D. forward secrecy and SAE in personal mode for secure initial key exchange

Correct Answer: D

QUESTION 180
How does frame switching function on a switch?

A. modifies frames that contain a known source VLAN
B. forwards known destinations to the destination port
C. inspects and drops frames from unknown destinations
D. forwards frames to a neighbor port using CDP

Correct Answer: B