QUESTION 21
An architect is designing a network solution for a customer. The network is IPv6 only with 1000 hosts. The design must provide external access to up to 10 concurrent IPv6 hosts to allow communication with legacy IPv4 devices on an adjacent network. The customer set aside 10 IPv4 addresses to allow for one-to-one communication between hosts. Which solution must the architect select?

A. stateful NAT64
B. static NAT-PT
C. dynamic NPTv6
D. dynamic NAT-PT

Correct Answer: A

QUESTION 22
Currently, inter-VRF routing between the global routing table and VRF-A is accomplished on the client firewall, but the customer wants to do this on the core network layer, The customer does not want to run BGP, VRF-Lite, or static routing, Which mechanism meets the requirements?

A. policy-based routing with the global set statement in a route map
B. route map that matches access lists and prefix lists with the import feature
C. VRF receive feature under the global routing interfaces
D. inter-VRF can only be used on an external device with a link in each VRF

Correct Answer: B

QUESTION 23
What is the main purpose of the Cisco SD-Access underlay design?

A. to provide network segmentation and isolation for security
B. to enable automated network provisioning and configuration
C. to optimize network traffic routing and load balancing
D. to support advanced firewall and IPS features

Correct Answer: B

QUESTION 24
What is the purpose of Cisco Catalyst SD-WAN Cloud OnRamp?

A. It creates Cisco Catalyst SD-WAN application-aware polices and route-critical applications.
B. It brings secure and private connectivity agnostics to all types of links and providers.
C. It simplifies and automates the process of connecting on-premises environments to the cloud.
D. It delivers secure access to business-critical applications across a multicloud environment.

Correct Answer: C

QUESTION 25
An engineer must choose a strategy to provide IPv6 connectivity for the ISP’s IPv4 customers. The ISP has a medium-size IT support team, so the deployment process must be simple and quick. In addition, the ISP wants to ensure the correct level of QoS and the reduction of potential security threats. Which strategy must the engineer choose?

A. DS-Lite
B. 6RD
C. 6VPE
D. NAT64

Correct Answer: D

QUESTION 26
Which resource is required for the vBond orchestrator to onboard a WAN Edge router via manual configuration?

A. organization name
B. vSmart hostname
C. NAT
D. domain name

Correct Answer: A

QUESTION 27
An architect is designing an IPv4 plan for a branch office using 10.224.4.0/23. The design must maximize the number of subnets and allow for the doubling of hosts. The solution has these requirements:
1. 40 hosts for the data subnet
2. 24 hosts for the camera subnet
3. 15 hosts for the voice subnet

Which plan meets these requirements?

A. Data subnet – 10.224.5.0/25
Camera subnet – 10.224.5.128/26
Voice subnet – 10.224.5.192/27
B. Data subnet – 10.224.4.0/25
Camera subnet – 10.224.4.128/26
Voice subnet – 10.224.4.160/27
C. Data subnet – 10.224.5.0/26
Camera subnet – 10.224.5.64/27
Voice subnet – 10.224.5.96/28
D. Data subnet – 10.224.4.0/26
Camera subnet – 10.224.4.64/27
Voice subnet – 10.224.4.96/28

Correct Answer: A

QUESTION 28
An architect is designing an IPv6 plan using the 2001:adb8:8086:265::/64 network for three branch locations. The design must maximize the number of subnets and minimize the number of wasted IP addresses. The plan must allocate a subnet to these branches:
1. Branch A, which supports 1,000 hosts
2. Branch B, which supports 256 hosts
3. Branch C, which supports 60 hosts

Which configuration set meets these requirements?

A. Branch A – 2001:adb8:8086:265::1:0/112
Branch B – 2001:adb8:8086:265::2:200/119
Branch C – 2001:adb8:8086:265::2:440/122
B. Branch A – 2001:adb8:8086:265::400/118
Branch B – 2001:adb8:8086:265::900/120
Branch C – 2001:adb8:8086:265::940/122
C. Branch A – 2001:adb8:8086:265::200/119
Branch B – 2001:adb8:8086:265::480/121
Branch C – 2001:adb8:8086:265::520/123
D. Branch A – 2001:adb8:8086:265::800/117
Branch B – 2001:adb8:8086:265::1200/119
Branch C – 2001:adb8:8086:265::1480/121

Correct Answer: D

QUESTION 29
A customer wants to migrate from an on-premises solution to a cloud-based solution. The customer’s new design requires:
1. secure access across the public internet
2. simple point-to-point connection
3. multi-vendor interoperability

Which solution must the engineer choose?

A. GRE
B. DMVPN
C. IPsec
D. VPLS

Correct Answer: C

QUESTION 30
A company plans to deploy a new application across the campus network and asks an engineer to create a QoS policy. The application has these characteristics:
1. UDP-based
2. inelastic flows
3. sensitive to delay over 100 milliseconds
4. sensitive to jitter over 50 milliseconds

The appropriate bandwidth is allocated and assigned to the queues. Which mechanism must the engineer use to manage the flows that exceed the configured threshold?d

A. shaping
B. scheduling
C. policing
D. remarking

Correct Answer: C

QUESTION 31
A network engineer discovers that an alternate or root port on a Cisco Layer 2 switch intermittently becomes the designated port, which causes an STP loop. What must be configured to resolve the issue?

A. STP loop guard
B. STP root guard
C. PortFast BPDU guard
D. UDLD

Correct Answer: A

QUESTION 32
A company must run a pilot project for an IPv6 application within the network on existing servers and is investigating migration strategies. Contained within a single VLAN, the pilot must span a dual-site data center environment that is formed of Layer 2 and Layer 3 switches. What is a primary consideration for the pilot?

A. Hosts within each data center that participates in the pilot must support dual stacking.
B. Layer 2 switches within each data center that provisions the VLAN must support dual stacking.
C. Layer 2 and Layer 3 switches within each data center that provisions the data center network must support dual stacking.
D. Layer 3 switches within each data center that provisions the network must support dual stacking.

Correct Answer: A

QUESTION 33
An architect is designing a network solution for a customer. The customer wants a design with redundancy at the distribution layer and the fastest convergence time possible during a failover. In addition, the company has a small IT support team, so the deployment process must be simple and quick. Which solution must the architect select?

A. VRRP
B. HSRP
C. VSS
D. GLBP

Correct Answer: C

QUESTION 34
How does OMP behave in a Cisco Catalyst SD-WAN architecture if no policy is defined?

A. to allow a hub and spoke topology for WAN Edge routers to communicate via the central location
B. to allow a point-to-point topology for WAN Edge routers to communicate from the central location to remote locations
C. to block all communication between WAN Edge routers
D. to allow all WAN Edge routers to communicate using a full mesh topology

Correct Answer: D

QUESTION 35
An engineer needs to design a management network for the company. The solution has these requirements:
1. overlay network does not cause routing issues
2. ease of troubleshooting for the operations team
3. devices are accessed securely

Which solution meets these requirements?

A. VLANs for management traffic and RADIUS for device access
B. private VLANs for management traffic and TACACS+ for device access
C. VRF for management traffic and SSH keys for device access
D. separate physical interfaces for management traffic and TACACS+ for device access

Correct Answer: C

QUESTION 36
An ISP is going to offer premium broadcast services to its clients. Services will be marked with CS5 and will be using 10% of the link bandwidth. All links are at 10 Gbps in the backbone and 1 Gbps toward end clients with GPON technology. The ISP wants to use the minimum required resources on the network nodes and for it to be easily scalable.
Which QoS strategy model must the ISP select to offer the premium service?

A. 12-class QoS strategy
B. 4-class QoS strategy
C. 8-class QoS strategy
D. 6-class QoS strategy

Correct Answer: A

QUESTION 37
What is a feature of the IaaS model?

A. ability to respond immediately to spikes in demand
B. simple integration of applications and data
C. autonomy and control over hardware
D. improved remote application performance

Correct Answer: C

QUESTION 38
What is the main purpose of the Cisco SD-Access control and data plane?
A. to ensure that devices within the network can communicate effectively with one another
B. to ensure high availability by supporting redundancy and failover mechanisms
C. to support network growth by accommodating additional devices and endpoints
D. to optimize network performance by controlling data flow and routing decisions

Correct Answer: D

QUESTION 39
An engineer working for a private enterprise is designing a QoS solution to prioritize WebEx calls from users’ laptops. The company allows guests to use third-party voice solutions, which should not have any prioritization. The current solution prevents using AF31 to classify the traffic. Which solution must the engineer select?

A. Use ACLs on distribution layer devices for classification
B. Use NBAR on core routers for classification.
C. Use NBAR on access layer devices for classification.
D. Use GPO and set the DSCP tags on endpoint devices.

Correct Answer: C

QUESTION 40
What is a primary capability of the cloud-based services model in an IaaS deployment?

A. It leverages advanced orchestration and automation tools to streamline resource provisioning and management, which reduces manual effort and improves operational efficiency.
B. It provides the ability to scale resources up or down based on demand, which enables an organization to adjust its computing capacity dynamically.
C. It reduces operational costs and increases flexibility by allowing organizations to pay for only the resources they consume.
D. It provides workload-migration capabilities, which allows seamless movement of virtual machines and applications between on-premises infrastructure and the cloud.

Correct Answer: B