QUESTION 61
Which network design principle should be followed to improve Layer 2 stability in an enterprise campus design?

A. Extend all user VLANs throughout the core layer.
B. Extend all user VLANs throughout the access layer.
C. Extend only required user VLANs throughout the aggregation layer.
D. Extend only required user VLANs throughout the access layer.

Correct Answer: D

QUESTION 62
Which two advanced security features are available in next-generation firewalls but were not provided by standard firewalls? (Choose two.)

A. stateful traffic inspection
B. intrusion prevention
C. remote access VPN
D. application control
E. network telemetry

Correct Answer: BD

QUESTION 63
In a three-tier hierarchical campus network design, which action is a design best-practice for the core layer?

A. provide QoS prioritization services such as marking, queueing, and classification for critical network traffic
B. provide redundant Layer 3 point-to-point links between the core devices for more predictable and faster convergence
C. provide advanced network security features such as 802.1X, DHCP snooping, VACLs, and port security
D. provide redundant aggregation for access layer devices and first-hop redundancy protocols such as VRRP

Correct Answer: B

QUESTION 64
Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

A. all devices integrating with ISE
B. selected individual devices
C. all devices in selected sites
D. all wired devices

Correct Answer: C

QUESTION 65
Which configuration enables a Cisco router to send information to a TACACS+ server for individual EXEC commands associated with privilege level 15?

A. Router(config)# aaa authorization commands 15 default group tacacs+
B. Router(config)# aaa accounting commands 15 default start-stop group tacacs+
C. Router(config)# aaa accounting exec default start-stop group tacacs+
D. Router(config)# aaa authorization exec default group tacacs+

Correct Answer: B

QUESTION 66
What is the data policy in a Cisco Catalyst SD-WAN deployment?

A. list of ordered statements that define node configurations and authentication used within the SD-WAN overlay
B. set of statements that defines how data is forwarded based on IP packet information and specific VPNs
C. detailed database mapping several kinds of addresses with their corresponding location
D. group of services tested to guarantee devices and links liveliness within the SD-WAN overlay

Correct Answer: B

QUESTION 67
In a campus network design, what are two benefits of using BFD for failure detection? (Choose two.)

A. BFD enables network peers to continue forwarding packets in the event of a restart.
B. BFD speeds up routing convergence time.
C. BFD provides fault tolerance by enabling multiple routers to appear as a single virtual router.
D. BFD is an efficient way to reduce memory and CPU usage.
E. BFD provides path failure detection in less than a second.

Correct Answer: BE

QUESTION 68
Where is radio resource management performed in a cisco SD-access wireless solution?

A. DNA Center
B. control plane node
C. wireless controller
D. Cisco CMX

Correct Answer: C

QUESTION 69
A customer requests a design that includes GLBP as the FHRP. The network architect discovers that the members of the GLBP group have different throughput
capabilities. Which GLBP load balancing method supports this environment?

A. round robin
B. least connection
C. weighted
D. host dependent

Correct Answer: C

QUESTION 70
What is the purpose of an integration API in Cisco Catalyst Center (formerly DNA Center)?

A. Enable external systems to take actions in response to an event
B. Enable discovery and control of the network by using HTTPS verbs.
C. Obtain information about clients, sites, and topology from Cisco Catalyst Center (formerly DNA Center).
D. Allow the platform into approval chains in ITSM.

Correct Answer: D

QUESTION 71
Which function does a fabric edge node perform in an Cisco SD-Access deployment?

A. encapsulates end-user data traffic into LISP
B. provides reachability between border nodes in the fabric underlay
C. connects endpoints to the fabric and forwards their traffic
D. connects the SD-Access fabric to another fabric or external Layer 3 networks

Correct Answer: C

QUESTION 72
When a wired client connects to an edge switch in an SDA fabric, which component decides whether the client has access to the network?

A. RADIUS server
B. edge node
C. control-plane node
D. Identity Services Engine

Correct Answer: D

QUESTION 73
What are two benefits of implementing a traditional WAN instead of an SD-WAN solution? (Choose two.)

A. faster fault detection
B. lower data plane overhead
C. simplified troubleshooting
D. lower control plane abstraction
E. comprehensive configuration standardization

Correct Answer: BD

QUESTION 74
Which component handles the orchestration plane of the Cisco SD-WAN?

A. vBond
B. vSmart
C. vManage
D. vEdge

Correct Answer: A

QUESTION 75
Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address
10.10.10.1?

A. ip access-list extended 100
deny tcp host 10.10.10.1 any eq 80
permit ip any any
B. ip access-list extended 200
deny tcp host 10.10.10.1 eq 80 any
permit ip any any
C. ip access-list extended 10
deny tcp host 10.10.10.1 any eq 80
permit ip any any
D. ip access-list extended NO_HTTP
deny tcp host 10.10.10.1 any eq 80

Correct Answer: A

QUESTION 76
In Cisco SD-WAN, which protocol is used to measure link quality?

A. RSVP
B. IPsec
C. BFD
D. OMP

Correct Answer: C

QUESTION 77
Which function does a fabric wireless LAN controller perform in a Cisco SD-Access deployment?

A. manages fabric-enabled APs and forwards client registration and roaming information to the Control Plane Node
B. coordinated configuration of autonomous non fabric access points within the fabric
C. performs the assurance engine role for both wired and wireless clients
D. is dedicated to onboard clients in fabric-enabled and nonfabric-enabled APs within the fabric

Correct Answer: A

QUESTION 78
Which two features does the Cisco SD-Access architecture add to a traditional campus network? (Choose two.)

A. SD-WAN
B. modular QoS
C. software-defined segmentation
D. private VLANs
E. identity services

Correct Answer: CE

QUESTION 79
Which two prerequisites must be met before Cisco DNA Center can provision a device? (Choose two.)
A. Cisco DNA Center must have the software image for the provisioned device in its image repository.
B. Cisco DNA Center must have IP connectivity to the provisioned device.
C. The provisioned device must be configured with CLI and SNMP credentials that are known to Cisco DNA Center.
D. The provisioned device must recognize Cisco DNA Center as its LLDP neighbor.
E. The provisioned device must be put into bootloader mode.

Correct Answer: BC

QUESTION 80
Which protocol is responsible for data plane forwarding in a Cisco SD-Access deployment?

A. VXLAN
B. LISP
C. IS-IS
D. OSPF

Correct Answer: A