QUESTION 41
A company wants servers that are located outside of a firewall to be accessible from the internet for specific customers. What must be used?
A. DNS
B. dynamic NAT with a route map
C. PAT
D. static NAT with a route map
Correct Answer: D
QUESTION 42
What is a key purpose of the Cisco Catalyst SD-WAN security design?
A. leveraging a comprehensive set of security features, such as next-generation firewalls and advanced threat protection, to safeguard the network from malicious activities and unauthorized access
B. detecting suspicious activities and potential security threats in real-time via network-based anomaly detection and behavior analytics, allowing proactive threat mitigation and incident response
C. enforcing RBAC mechanisms to maximize user privileges, allowing unauthorized access to sensitive network resources and configuration changes
D. facilitating secure access to cloud resources by implementing SWGs and CASBs for traffic inspection and policy enforcement
Correct Answer: A
QUESTION 43
An architect must design a plan to manage the enterprise network devices. The design must accommodate that:
1. not all network devices have a dedicated management interface
2. all IP-enabled interfaces on all devices must be reachable
3. encryption must be used with all devices which have support
Which solution must the architect choose?
A. out-of-band
B. terminal server
C. in-band
D. KVM server
Correct Answer: C
QUESTION 44
Which protocol is the Cisco SD-Access control plane based on?
A. OMP
B. LISP
C. VXLAN
D. NHRP
Correct Answer: B
QUESTION 45
An engineer must configure a Cisco router by using the EIGRP stub command to ensure that adjacent neighbors receive all the necessary prefixes. Which EIGRP stub mode must be used to meet this requirement?
A. leak-map
B. connected
C. redistribute
D. receive-only
Correct Answer: B
QUESTION 46
A customer plans to deploy WoL in the enterprise with these high-level design requirements:
1. DHCP services must be available.
2. Clients BIOS settings must be set for WoL.
3. Clients get IP addresses once online.
4. Spanning-tree PortFast is enabled on the Layer 2 switches.
Which two solutions must the customer select to have a successful deployment? (Choose two.)
A. IP helper-addresses for the client ranges must be enabled on the SVI or routed interface where the WoL server subnet resides.
B. IP helper-addresses for the WoL server must be enabled on the SVI or routed interface where the client subnets reside.
C. IP helper-addresses for the client ranges must be disabled on the SVI or routed interface where the WoL server subnet resides.
D. IP directed broadcast and forward-protocol must be enabled on all the SVI or routed interfaces where the client subnets reside.
E. IP directed broadcast and forward-protocol must be disabled on all the SVI or routed interfaces where the client subnets reside.
Correct Answer: BD
QUESTION 47
Which AES mode should be used in a Cisco SD-WAN environment that includes multicast applications?
A. Cipher Feedback (CFB)
B. Electronic Code Book (ECB)
C. Galois/Counter Mode (GCM)
D. Cipher Block Chaining (CBC)
Correct Answer: C
QUESTION 48
An engineer is designing a QoS solution for a campus. The design must guarantee real-time traffic delivery during congestion, minimize the bandwidth consumption for possible virus or worm attacks, and reduce flooding of excessive traffic during times of congestion. Which two solutions must the engineer select? (Choose two.)
A. Create a scavenger queue for excessive traffic and a strict queue for real-time traffic.
B. Create a policing policy to drop excessive traffic and a strict queue for real-time traffic.
C. Apply queuing on the distribution to core links.
D. Create a shaping pollcy to drop excessive traffic and a strict queue for real-time traffic.
E. Apply queuing on the access to distribution links.
Correct Answer: AE
QUESTION 49
A company’s branch location uses redundant routers and links for connectivity to the headquarters. Also, to use the entire available bandwidth, the branch uses a dynamic routing protocol. An architect must design a multicast streaming solution to avoid RPF check failures because of the current network design. Which deployment model must the architect choose?
A. PIM-SSM
B. BIDIR-PIM
C. PIM-SM
D. PIM-BSR
Correct Answer: C
QUESTION 50
A customer requires QoS to support multimedia conferencing over MPLS. The network architect chooses to use per-hop behavior. Which solution must the architect use to classify and mark traffic traveling between branch sites?
A. BW Queue with DSCP AF3
B. BW Queue and DSCP WRED with DSCP AF4
C. BW Queue and DSCP WRED with DSCP AF3
D. BW Queue with DSCP AF4
Correct Answer: B
QUESTION 51
Which two LISP components are required in the Cisco SD-Access fabric control plane node? (Choose two.)
A. Proxy ETR
B. Map-Server
C. Engress Tunnel Router
D. Map-Resolver
E. Ingres Tunnel Router
Correct Answer: BD
QUESTION 52
An engineer must establish a direct connection between two remote offices. The new connection must be established using a logical path, share a common broadcast domain, connect over private WAN, and have as little overhead as possible. Which technology must the engineer choose?
A. IPsec
B. GET VPN
C. L2VPN
D. GRE
Correct Answer: C
QUESTION 53
A network engineer must design a multicast solution based on these requirements:
1. interactive communication
2. must not use source trees
3. users must register
4. 100 multicast sources
Which solution must the company choose?
A. MSDP
B. any-source multicast
C. PIM-DM
D. BIDIR-PIM
Correct Answer: D
QUESTION 54
A customer is undergoing a WAN re-architecture and wants to design QoS policies for remote sites that have low bandwidth. What must be considered to have CBWFQ configured in the parent and child policies in an end-to-end QoS design?
A. Traffic shaping is required in the parent policy.
B. Traffic policing is required in the child policy.
C. CBWFQ is only supported in the parent policy.
D. CBWFQ is only supported in the child policy.
Correct Answer: A
QUESTION 55
What is the purpose of the fabric control plane in a Cisco SD-Access architecture?
A. extend multiple subnets to one RLOC
B. create, propagate, and enforce GBAC policies in the fabric
C. create and resolve endpoint-to-location mapping
D. create a transit node with BGP route reflector functionality
Correct Answer: C
QUESTION 56
A company requires a private WAN design that allows remote sites to connect to HQ. The design must ensure that:
1. traffic is always encrypted
2. forwarding overhead is reduced
3. management of security is centralized
4. multicast traffic is supported
Which technology must the company select?
A. DMVPN Phase 3
B. mGRE
C. IPsec P2P
D. GET VPN
Correct Answer: D
QUESTION 57
In Cisco SD-Access, virtual networks create segmentation that allows for separation of users and resources. How is this type of segmentation described?
A. stretched
B. inter-VN
C. micro
D. macro
Correct Answer: D
QUESTION 58
An architect must design a QoS model for a business-critical application that is delay-sensitive and requires high bandwidth. The company’s head office hosts the application, and DMVPN tunnels protected with IPsec provide connectivity between the head office and branches. Which solution must the architect choose?
A. IntServ
B. RSVP
C. DiffServ
D. WRED
Correct Answer: A
QUESTION 59
What is the purpose of service routes in OMP updates?
A. define the remote management information
B. describe underlay transport information
C. indicate services that are enabled for service insertion
D. specify routes toward a centralized orchestration plane
Correct Answer: C
QUESTION 60
An architect must design a topology for a WAN network that satisfies these requirements:
1. Devices must be able to make informed decisions.
2. Suboptimal paths are allowed only in case of a failure.
3. Backup paths must always be available.
Which topology must the architect select?
A. full mesh
B. partial mesh
C. Clos
D. hub and spoke
Correct Answer: A