QUESTION 101
What is the role of LDP in MPLS networks?
A. It enables label binding that exchanges route descriptors.
B. It disables label binding information to exchange with peer LSRs.
C. It creates MPLS packet forwarding along with the IGP routes.
D. It enables label binding information to exchange with peer LSRs.
Correct Answer: D
QUESTION 102
While BGP internet routes are redistributed to a lower class of router via RIP, packets are being dropped and routes are failing to be distributed in RIP. Which action resolves the issue?
A. Use OSPF instead of RIP to accept all BGP routes.
B. Use RIP V2 to be able to use classless networks from BGP.
C. Use WFQ in the output queue of the high-performance router.
D. Use the input-queue command to prevent the loss of packets.
Correct Answer: A
QUESTION 103
Which two protocols use the label bindings information at the neighboring routers created by LSRs? (Choose two.)
A. RSVP
B. OSPF
C. IS-IS
D. MPLS OAM
E. BGP
Correct Answer: AD
QUESTION 104
A network administrator must optimize the segment size of the TCP packet on the DMVPN IPsec protected tunnel interface, which carries application traffic from the head office to a designated branch. The TCP segment size must not overwhelm the MTU of the outbound link. Which configuration must be applied to the router to improve the application performance?
A. interface tunnel30
ip mtu 1400
ip tcp packet-size 1360
!
crypto ipsec fragmentation after-encryption
B. interface tunnel30
ip mtu 1400
ip tcp adjust-mss 1360
!
crypto ipsec fragmentation after-encryption
C. interface tunnel30
ip mtu 1400
ip tcp max-segment 1360
!
crypto ipsec fragmentation before-encryption
D. interface tunnel30
ip mtu 1400
ip tcp payload-size 1360
!
crypto ipsec fragmentation before-encryption
Correct Answer: B
QUESTION 105
An engineer must override the normal routing behavior of a router for Telnet traffic that is destined to 10.10.10.10 from 10.10.1.0/24 via a next hop of 10.4.4.4, which is directly connected to the router that is connected to the 10.1.1.0/24 subnet. Which configuration reroutes traffic according to this requirement?
A. access-list 100 permit tcp 10.10.1.0 0.0.0.255 host 10.10.10.10 eq 23
!
route-map POLICY permit 10
match ip address 100
set ip next-hop 10.4.4.4
route-map POLICY permit 20
B. access-list 100 deny tcp 10.10.1.0 0.0.0.255 host 10.10.10.10 eq 23
!
route-map POLICY permit 10
match ip address 100
set ip next-hop 10.4.4.4
route-map POLICY permit 20
C. access-list 100 permit tcp 10.10.1.0 0.0.0.255 host 10.10.10.10 eq 23
!
route-map POLICY permit 10
match ip address 100
set ip next-hop recursive 10.4.4.4
route-map POLICY permit 20
D. access-list 100 permit tcp 10.10.1.0 0.0.0.255 host 10.10.10.10 eq 23
!
route-map POLICY permit 10
match ip address 100
set ip next-hop recursive 10.4.4.4
Correct Answer: D
QUESTION 106
In a DMVPN network, the Spoke 1 user observed that the voice traffic is coming to Spoke2 users via the hub router. Which command is required on both spoke routers to communicate directly to one another?
A. ip nhrp nhs multicast
B. ip nhrp redirect
C. ip nhrp map dynamic
D. ip nhrp shortcut
Correct Answer: D
QUESTION 107
What is the function of BFD?
A. It provides uniform failure detection regardless of media type.
B. It negotiates to the highest version if the neighbor version differs.
C. It provides uniform failure detection on the same media type.
D. It creates high CPU utilization on hardware deployments.
Correct Answer: A
QUESTION 108
An administrator attempts to download the .pack NBAR2 file using TFTP from the CPE router to another device over the Gi0/0 interface. The CPE is configured as below:
hostname CPE
!
ip access-list extended WAN
<…>
remark => All UDP rules below for WAN
permit udp any eq domain any
permit udp any any eq tftp
deny udp any any
!
interface GigabitEthernet0/0
<…>
ip access-group WAN in
<…>
!
tftp-server flash:pp-adv-csr1000v-1612.1a-37-53.0.0.pack
The transfer fails. Which action resolves this issue?
A. Change the WAN ACL to permit the UDP port 69 to allow TFTP
B. Shorten the file name to the 8+3 naming convention.
C. Change the WAN ACL to permit the entire UDP destination port range.
D. Make the permit udp any eq tftp any entry the last entry in the WAN ACL
Correct Answer: C
QUESTION 109
What is a function of IPv6 Source Guard?
A. It works with address glean or ND to find existing addresses.
B. It denies traffic from known sources and allocated addresses.
C. It inspects ND and DHCP packets to build an address binding table.
D. It notifies the ND protocol to inform hosts if the traffic is denied by it
Correct Answer: A
QUESTION 110
What is an MPLS LDP targeted session?
A. LDP session established between LSRs by exchanging TCP hello packets
B. label distribution session between non-directly connected neighbors
C. LDP session established by exchanging multicast hello packets
D. session between neighbors that are connected no more than one hop away
Correct Answer: B
QUESTION 111
The network administrator configured CoPP so that all routing protocol traflic toward the router CPU is limited to 1 mbps. All trafic that exceeds this limit must be dropped. The router is running BGP and OSPF. Management traffic for Telnet and SSH must be limited to 500 kbps.
access-list 100 permit tcp any any eq 179
access-list 100 permit tcp any any range 22 23
access-list 100 permit ospf any any
!
class-map CM-ROUTING
match access-group 100
class-map CM-MGMT
match access-group 100
!
policy-map PM-COPP
class CM-ROUTING
police 1000000 conform-action transmit
class CM-MGMT
police 500000 conform-action transmit
!
control-plane
service-policy output PM-COPP
No traffic is filtering through CoPP, which is resulting in high CPU utilization. Which configuration resolves the issue?
A. no access-list 100
access-list 100 permit tcp any any eq 179
access-list 100 permit ospf any any
access-list 101 permit tcp any any range 22 23
!
!
class-map CM-MGMT
no match access-group 100
match access-group 101
B. No access-list 100
access-list 100 permit tcp any any eq 179
access-list 100 permit tcp any any range eq 22
access-list 100 permit tcp any any range eq 23
access-list 100 permit ospf any any
C. no access-list 100
access-list 100 permit tcp any any eq 179
access-list 100 permit ospf any any
access-list 101 permit tcp any any range 22 23
!
!
class-map CM-MGMT
no match access-group 100
match access-group 101
!
control-plane
no service-policy output PM-COPP
service-policy input PM-COPP
D. control-plane
no service-policy output PM-COPP
service-policy input PM-COPP
Correct Answer: C
QUESTION 112
The network administrator must implement IPv6 in the network to allow only devices that not only have registered IP addresses but are also connecting from assigned locations. Which security feature must be implemented?
A. IPv6 Prefix Guard
B. IPv6 Router Advertisement Guard
C. IPv6 Destination Guard
D. IPv6 Snooping
Correct Answer: D
QUESTION 113
An engineer is implementing a coordinated change with a server team. As part of the change, the engineer must configure interface GigabitEthernet2 in an existing VRF “RED” then move the interface to an existing VRF “BLUE” when the server team is ready. The engineer configured interface GigabitEthernet2 in VRF “RED”:
interface GigabitEthernet2
vrf forwarding RED
ip address 10.0.0.0255.255.255.254
negotiation auto
Which configuration completes the change?
A. interface GigabitEthernet2
no ip address
ip address 10.0.0.0255.255.255.254
vrf forwarding BLUE
B. interface GigabitEthernet2
no vrf forwarding RED
vrf forwarding BLUE
ip address 10.0.0.0 255.255.255.254
C. interface GigabitEthernet2
no ip address
vrf forwarding BLUE
D. interface GigabitEthernet2
no vrf forwarding RED
vrf forwarding BLUE
Correct Answer: B
QUESTION 114
Which mechanism provides traffic segmentation within a DMVPN network?
A. BGP
B. IPSEC
C. MPLS
D. RSVP
Correct Answer: C
QUESTION 115
What is a characteristic of Layer 3 MPLS VPNs?
A. Authentication is performed by using digital certificates or preshared keys.
B. LSP signaling requires the use of unnumbered IP links for traffic engineering.
C. Traffic engineering supports multiple IGP instances.
D. Traffic engineering capabilities provide QoS and SLAs.
Correct Answer: D
QUESTION 116
What are two characteristics of IPv6 Source Guard? (Choose two.)
A. requires the user to configure a static binding
B. used in service provider deployments to protect DDoS attacks
C. requires that validate prefix be enabled
D. requires IPv6 snooping on Layer 2 access or trunk ports
E. recovers missing binding table entries
Correct Answer: CD
QUESTION 117
An engineer creates a Cisco DNA Center cluster with three nodes, but all the services are running on one host node. Which action resolves this issue?
A. Enable service distribution from the Systems 360 page.
B. Restore the link on the switch interface that is connected to a cluster link on the Cisco DNA Center.
C. Click the master host node with al the services and select services to be moved to other hosts.
D. Click system updates, and upgrade to the latest version of Cisco DNA Center.
Correct Answer: A
QUESTION 118
R1 and R2 are configured as eBGP neighbors. R1 is in AS100 and R2 is in AS200. R2 is advertising these networks to R1:
172.16.16.0/20
172.16.3.0/24
172.16.4.0/24
192.168.1.0/24
192.168.2.0/24
172.16.0.0/16
The network administrator on R1 must improve convergence by blocking all subnets of 172.16.0.0/16 major network with a mask lower than 23 from coming in.
Which set of configurations accomplishes the task on R1?
A. access-list 1 deny 172.16.0.0 0.0.254.255
access-list 1 permit any
!
router bgp 100
neighbor 192.168.100.2 remote-as 200
neighbor 192.168.100.2 distribute-list 1 in
B. ip prefix-list PL-1 deny 172.16.0.0/16
ip prefix-list PL-1 permit 0.0.0.0/0
!
router bgp 100
neighbor 192.168.100.2 remote-as 200
neighbor 192.168.100.2 prefix-list PL-1 in
C. ip prefix-list PL-1 deny 172.16.0.0/16 le 23
ip prefix-list PL-1 permit 0.0.0.0/0 le 32
!
router bgp 100
neighbor 192.168.100.2 remote-as 200
neighbor 192.168.100.2 prefix-list PL-1 in
D. ip prefix-list PL-1 deny 172.16.0.0/16 ge 23
ip prefix-list PL-1 permit 0.0.0.0/0 le 32
!
router bgp 100
neighbor 192.168.100.2 remote-as 200
neighbor 192.168.100.2 prefix-list PL-1 in
Correct Answer: C
QUESTION 119
Which OSI model is used to insert an MPLS label?
A. between Layer 3 and Layer 4
B. between Layer 1 and Layer 2
C. between Layer 2 and Layer 3
D. between Layer 5 and Layer 6
Correct Answer: C
QUESTION 120
How does an MPLS Layer 3 VPN differentiate the IP address space used between each VPN?
A. by MP-BGP
B. by address family
C. by RT
D. by RD
Correct Answer: D