QUESTION 21
How are LDP neighbors discovered?

A. Broadcasts hellos are sent to the 255.255.255.255 broadcast address.
B. Multicast hellos are sent to the 224.0.0.2 group address.
C. Multicast hellos are sent to the 224.0.0.5 group address.
D. Unicast hellos are sent to directly connected neighbors IP addresses.

Correct Answer: B

QUESTION 22
What are the two goals of micro BFD sessions? (Choose two.)

A. The high bandwidth member link of a link aggregation group must run BFD.
B. Each member link of a link aggregation group must run BFD
C. Run the BFD session with 3×3 ms hello timer.
D. Continuity for each member link of a link aggregation group must be verified.
E. Eny member link on a link aggregation group must run BFD.

Correct Answer: BD

QUESTION 23
What is LDP used for in an LSR?

A. to create a database of label bindings that allow for hop-by-hop forwarding
B. to allow for a system-wide exchange of labels across MPLS network
C. to create a label across the PE routers for end-to-end path assignment
D. to communicate the routes known for a specific interface

Correct Answer: A

QUESTION 24
What is a characteristic of an MPLS LSP tunnel?

A. unidirectional tunnel
B. hop-by-hop tunnel
C. secured bidirectional tunnel
D. bidirectional tunnel

Correct Answer: A

QUESTION 25
Which technique removes the outermost label of an MPLS-tagged packet before the packet is forwarded to an adjacent LER?

A. PHP
B. label imposition
C. explicit-null
D. label swap

Correct Answer: A

QUESTION 26
Network operations report issues with receiving too many external routes, which caused CPU spike on routers with smaller memories. Which action resolves the issue?

A. Configure the summary-address command when redistributing on ASBR.
B. Configure the summary-address command when redistributing on ABR.
C. Configure the area range command when redistributing on ABR.
D. Configure the area range command when redistributing on ASBR.

Correct Answer: A

QUESTION 27
A network engineer must permit /25 advertisements but block /27 prefixes for 192.168.0.0 network. Which configuration meets this requirement?

A. ip prefix-list A seq 5 permit 192.168.0.0/16 ge 25 le 25
!
route-map filtering
match ip address prefix-list A
B. ip prefix-list A seq 5 permit 192.168.0.0/16 ge 25 le 25
ip prefix-list B seq 5 permit 192.168.0.0/16 ge 27 le 27
!
route-map filtering
match ip address prefix-list B
!
route-map filtering deny 20
match ip address prefix-list A
C. access-list 1 permit 192.168.3.0 0.0.0.31
access-list 2 permit 192.168.2.0 0.0.0.63

route-map filtering deny 10
match ip address 2

route-map filtering permit 15
match ip address 1
D. ip prefix-list A seq 5 permit 192.168.0.0/16 ge 25 le 25
!
route-map filtering deny 10
match ip address prefix-list A

Correct Answer: B

QUESTION 28
A policy is required that overrides normal routing behavior. If the web traffic is sent to a destination of 10.200.200.0/24 and the route is withdrawn from the routing table of a router under this condition, the policy that is applied in the ingress direction on the interface must direct traffic to a next hop of 10.2.2.2. If the route is present in the routing table, then normal forwarding must occur for web traffic. Which configuration meets the requirements?

A. access-list 100 permit ip any any
!
route-map POLICY permit 10
match ip address 100
set ip next-hop recursive 10.2.2.2
!
ip local policy route-map POLICY
B. access-list 100 permit tcp any 10.200.200.0 0.0.0.255 eq http
!
route-map POLICY permit 10
match ip address 100
set ip next-hop recursive 10.2.2.2
!
route-map POLICY permit 20
C. access-list 100 permit tcp any 10.200.200.0 0.0.0.255 eq http
!
route-map POLICY permit 10
match in address 100
set ip default next-hop 10.2.2.2
D. access-list 100 permit ip any 10.100.100.0 0.0.0.255
!
route-map POLICY permit 10
match ip address 100
set ip next-hop 10.2.2.2
!
route-map POLICY permit 20
!
ip local policy route-map POLICY

Correct Answer: D

QUESTION 29
In an IPv6 network, the network administrator restricted remote access of the core router to a single user. The administrator configured the IPv6 access list and applied it on the WAN interface of the core router. The administrator also wanted to investigate who else is trying to access the router and added a permit host entry with log statement in the access list but could not find any details. Which action does the network administrator take to resolve the issue?

A. Apply the access list on the WAN interface using the ipv6 traffic-filter out command.
B. Apply the access list on line vty using the ipv6 access-class out command.
C. Apply the access list on line vty using the ipv6 access-class in command.
D. Apply the access list on all interfaces using the ipv6 access-class in command.

Correct Answer: C

QUESTION 30
Which type of ports are protected by IPv6 Source Guard?

A. Layer 2 ports
B. access ports
C. trunk ports
D. Layer 3 ports

Correct Answer: A

QUESTION 31
The network administrator configured CoPP so that EIGRP traffic toward the device is limited to 2 mbps. Any traffic that exceeds this limit must also be allowed at this point for traffic analysis.

access-list 100 permit EIGRP any any
!
class-map CM-EIGRP
match access-group 100
!
policy-map PM-COPP
class CM-EIGRP
police 2000000 conform-action transmit
!
control-plane
service-policy output PM-COPP

No EIGRP traffic is going through CoPP. Which configuration resolves the issue?

A. policy-map PM-COPP
class CM-EIGRP
police 2000000 conform-action transmit exceed-action transmit
B. control-plane
no service-policy output PM-COPP
service-policy input PM-COPP
C. policy-map PM-COPP
class CM-EIGRP
police 2000000 conform-action transmit exceed-action transmit
!
control-plane
no service-policy output PM-COPP
service-policy input PM-COPP
D. policy-map PM-COPP
class CM-EIGRP
police 2000000 conform-action drop exceed-action drop
!
control-plane
no service-policy output PM-COPP
service-policy input PM-COPP

Correct Answer: C

QUESTION 32
Which type of BFD session is created on a broadcast Ethernet interface with OSPF?

A. with all OSPF routers
B. only on P2P Ethernet interfaces
C. with the DR and BDR, but not any DROTHER routers
D. only with the DR

Correct Answer: C

QUESTION 33
What are the two benefits of using BFD? (Choose two.)

A. forwarding path failure detection
B. supports all routing protocols
C. subsecond failure detection
D. synchronous path determination
E. supports UDLD failure

Correct Answer: AC

QUESTION 34
An engineer configured a router with this configuration:
ip access-list DENY_TELNET
10 deny tcp any any eq 23 log-input

The router console starts receiving log message %SEC-6-IPACCESSLOGP: list DENY TELNET denied tcp 192 168.1.10(1022) (FastEthemet1/0) -> 192 168.2.20 (23), 1 packet’. Which action stops messages on the console while still denying Telnet?

A. Configure a 20 permit ip any any command.
B. Configure a 20 permit ip any any log-input command.
C. Remove log-input keyword from the access list.
D. Replace log-input keyword with the log keyword in the access list.

Correct Answer: C

QUESTION 35
Which feature drops packets if the source address is not found in the snooping table?

A. IPv6 Source Guard
B. IPv6 Destination Guard
C. Binding Table Recovery
D. IPv6 Prefix Guard

Correct Answer: A

QUESTION 36
Which collection contains the resources to obtain a list of fabric nodes through the vManage API?

A. device management
B. monitoring
C. device inventory
D. administration

Correct Answer: C

QUESTION 37
Which IPv6 feature enables a device to reject traffic when it is originated from an address that is not stored in the device binding table?

A. IPv6 Snooping
B. IPv6 DAD Proxy
C. IPv6 Source Guard
D. IPv6 RA Guard

Correct Answer: C

QUESTION 38
Which two NLRI attributes are used by an MPLS Layer 3 VPN network to exchange VPNv4 routes between MPLS routers via MP-BGP? (Choose two.)

A. IPv4 Prefix
B. RT
C. Next Hop
D. VPNv4 Prefix
E. Extended-Community

Correct Answer: AC

QUESTION 39
Which two label distribution methods are used by routers in MPLS? (Choose two.)

A. LDP session protection message
B. downstream unsolicited
C. LDP discovery hello message
D. downstream on demand
E. targeted hello message

Correct Answer: BD

QUESTION 40
A network engineer must configure an EIGRP stub router at a site that advertises only connected and summary routes. Which configuration performs this task?

A. router eigrp 100
eigrp stub
B. router eigrp 100
eigrp stub summary
C. router eigrp 100
eigrp stub redistribute
D. router eigrp 100
eigrp stub connected

Correct Answer: A