QUESTION 101
In an LISP environment, which namespace is applied to devices that comprise the global routing system?
A. EID
B. RLOC
C. BGP
D. TLOC
Correct Answer: B
QUESTION 102
Which security mechanism is offered on a next-generation firewall but not on a traditional firewall?
A. NAT
B. SSL VPN
C. integrated IPS
D. stateful firewall policies
Correct Answer: C
QUESTION 103
What are two device roles in the Cisco SD-Access fabric? (Choose two.)
A. onramp node
B. control plane node
C. intermediate node
D. vEdge router
E. cEdge router
Correct Answer: BC
QUESTION 104
How do FHRPs differ from SSO?
A. FHRPs maintain state information within a single device, and SSO manages state information across multiple devices.
B. FHRPs provide gateway redundancy, and SSO provides failover within a single device.
C. FHRPs influence bandwidth allocation, and SSO influences routing decisions.
D. FHRPs use OTV for redundancy, and SSO uses VXLAN for state synchronization.
Correct Answer: B
QUESTION 105
An engineer must configure HSRP for VLAN 1200 on SW1. The second switch is configured by using the first usable IP address in the network as the virtual IP.
Which command set accomplishes this task?
A. SW1(config)# interface vlan 1200
SW1(config-if)# ip address 172.12.0.1 255.255.255.0
SW1(config-if)# standby 1200 ip 172.12.0.2
SW1(config-if)# standby 1200 timers 515
SW1(config-if)# standby 1200 preempt
B. SW1(config)# interface vlan 1200
SW1(config-if)# ip address 172.12.0.1 255.255.255.0
SW1(config-if)# standby version 2
SW1(config-if)# standby 1200 ip 172.12.0.2
SW1(config-if)# standby 1200 timers 515
C. SW1(config)# interface vlan 1200
SW1(config-if)# ip address 172.12.0.2 255.255.255.0
SW1(config-if)# standby 1200 ip 172.12.0.1
SW1(config-if)# standby 1200 timers 515
SW1(config-if)# standby 1200 preempt
D. SW1(config)# interface vlan 1200
SW1(config-if)# ip address 172.12.0.2 255.255.255.0
SW1(config-if)# standby version 2
SW1(config-if)# standby 1200 ip 172.12.0.1
SW1(config-if)# standby 1200 preempt
Correct Answer: D
QUESTION 106
Which two elements are defined by a YANG module? (Choose two.)
A. data model from the data of the device
B. RESTCONF API allowing a user to receive or modify network configurations
C. hierarchical organization and restrictions on data from a device
D. which transport protocols can interact with YANG
E. NETCONF API allowing a user to receive or modify network configurations
Correct Answer: AC
QUESTION 107
How is traffic through a route map processed when the “deny ip any any” within the ACL is matched by a permit line within the route map?
A. Traffic is filtered in accordance with the ACL and discarded.
B. Traffic is returned to the normal forwarding behavior of the router.
C. Traffic is processed by the following line within the route map.
D. Traffic is routed to the null 0 interface of the router and discarded.
Correct Answer: C
QUESTION 108
What is one difference between Ansible and Puppet?
A. Ansible provides automated provisioning, and Puppet provides cloud automation.
B. Ansible uses a proprietary scripting language, and Puppet uses YAML for its configurations.
C. Ansible excels in simplicity and flexibility, and Puppet is designed for managing complex, large-scale environments.
D. Ansible requires agents to be installed on managed nodes, and Puppet is agentless.
Correct Answer: C
QUESTION 109
Which AP mode analyzes the spectrum to detect sources of interference?
A. Monitor
B. SE-Connect
C. Rogue detector
D. Sniffer
Correct Answer: B
QUESTION 110
What is one benefit of adopting a data modeling language?
A. augmenting the use of management protocols like SNMP for status subscriptions
B. refactoring vendor and platform specific configurations with widely compatible configurations
C. augmenting management process using vendor centric actions around models
D. deploying machine-friendly codes to manage a high number of devices
Correct Answer: B
QUESTION 111
Which Cisco SD-WAN component is responsible for distributing data plane traffic policies?
A. vBond
B. vManage
C. vSmart
D. WAN edge
Correct Answer: C
QUESTION 112
What is a benefit of implementing stateful switchover?
A. resiliency
B. flexibility
C. modularity
D. scalability
Correct Answer: A
QUESTION 113
Which protocol is implemented to establish secure control plane adjacencies between Cisco SD-WAN nodes?
A. IKE
B. TLS
C. IPsec
D. ESP
Correct Answer: B
QUESTION 114
A system must validate access rights to all its resources and must not rely on a cached permission matrix. If the access level to a given resource is revoked but is
not reflected in the permission matrix, the security is violated. Which term refers to this REST security design principle?
A. economy of mechanism
B. complete mediation
C. separation of privilege
D. least common mechanism
Correct Answer: B
QUESTION 115
Which two actions are recommended as security best practices to protect REST API? (Choose two.)
A. Use TACACS+ authentication.
B. Enable dual authentication of the session.
C. Use SSL for encryption.
D. Enable out-of-band authentication.
E. Use a password hash.
Correct Answer: CE
QUESTION 116
What is the role of the vSmart controller in a Cisco SD-WAN environment?
A. It performs authentication and authorization
B. It manages the control plane
C. It is the centralized network management system
D. It manages the data plane
Correct Answer: B
QUESTION 117
Which two components are needed when a Cisco SD-Access fabric is designed? (Choose two.)
A. Cisco Prime Infrastructure
B. Cisco DNA Center application
C. Firepower Threat Defense
D. Cisco Data Center Network Manager
E. Identity Service Engine
Correct Answer: BE
QUESTION 118
What is one advantage of using a data modeling language to develop an API client application?
A. increase in compatibility
B. easier feature extensibility
C. stronger security properties
D. lower resource requirements
Correct Answer: B
QUESTION 119
Which NGFW mode blocks flows crossing the firewall?
A. passive
B. inline tap
C. tap
D. inline
Correct Answer: D
QUESTION 120
What mechanism does PIM use to forward multicast traffic?
A. PIM sparse mode uses a pull model to deliver multicast traffic.
B. PIM dense mode uses a pull model to deliver multicast traffic.
C. PIM sparse mode uses receivers to register with the RP.
D. PIM sparse mode uses a flood and prune model to deliver multicast traffic.
Correct Answer: A