QUESTION 141
Why are stateless calls executed by REST API useful in cloud applications?

A. They use HTTPS to implement all calls.
B. They rely on data stored on the server for calls.
C. They control URL decoding.
D. They are easy to redeploy and to scale.

Correct Answer: D

QUESTION 142
What is a characteristic of VXLAN?

A. It uses TCP for transport.
B. It extends Layer 2 and Layer 3 overlay networks over a Layer 2 underlay.
C. It is a multi-tenant solution.
D. It has a 12-byte packet header.

Correct Answer: C

QUESTION 143
What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?

A. real-time threat management to stop DDoS attacks to the core and access networks
B. real-time awareness of users, devices, and traffic on the network
C. malware control
D. dynamic threat control for web traffic

Correct Answer: B

QUESTION 144
The login method is configured on the VTY lines of a router with these parameters.
1. The first method for authentication is TACACS
2. If TACACS is unavailable, login is allowed without any provided credentials

Which configuration accomplishes this task?

A. R1#sh run | include aaa
aaa new-model
aaa authentication login telnet group tacacs+ none
aaa session-id common

R1#sh run | section vty
line vty 0 4

R1#sh run | include username
R1#
B. R1#sh run | include aaa
aaa new-model
aaa authentication login default group tacacs+
aaa session-id common

R1#sh run | section vty
line vty 0 4
transport input none
R1#
C. R1#sh run | include aaa
aaa new-model
aaa authentication login default group tacacs+ none
aaa session-id common

R1#sh run | section vty
line vty 0 4
password 7 02050D400809

R1#sh run | include username
R1#
D. R1#sh run | include aaa
aaa new-model
aaa authentication login VTY group tacacs+ none
aaa session-id common

R1#sh run | section vty
line vty 0 4
password 7 02050D400809

R1#sh run | include username
R1#

Correct Answer: C

QUESTION 145
Which exhibit displays a valid JSON file?

A. {
“hostname”: “edge_router_1”
“interfaces”: [
“GiqabitEthernet1/1”
“GigabitEthernet1/2”
“GigabitEthernet1/3”
]
}
B. {
“hostname”: “edge_router_1”,
“interfaces”: [
“GiqabitEthernet1/1”,
“GigabitEthernet1/2”,
“GigabitEthernet1/3”
]
}
C. {
“hostname”: “edge_router_1”
“interfaces”: {
“GiqabitEthernet1/1”
“GigabitEthernet1/2”
“GigabitEthernet1/3”
}
}
D. {
“hostname”: “edge_router_1”,
“interfaces”: {
“GiqabitEthernet1/1”,
“GigabitEthernet1/2”,
“GigabitEthernet1/3”,
},
}

Correct Answer: B

QUESTION 146
Which outcome is achieved with this Python code?

client.connect (ip, port=22, username=usr, password=pswd)
stdin, stdout, stderr = client.exec_command (‘show ip bgp 192.168.101.0 bestpathn’)
print (stdout)

A. connects to a Cisco device using SSH and exports the BGP table for the prefix
B. connects to a Cisco device using Telnet and exports the routing table information
C. connects to a Cisco device using SSH and exports the routing table information
D. displays the output of the show command in a formatted way

Correct Answer: A

QUESTION 147
Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?

A. vBond
B. vSmart
C. vManage
D. PNP Server

Correct Answer: A

QUESTION 148
What is the function of Cisco DNA Center in a Cisco SD-Access deployment?

A. It is responsible for routing decisions inside the fabric.
B. It is responsible for the design, management, deployment, provisioning, and assurance of the fabric network devices.
C. It possesses information about all endpoints, nodes, and extremal networks related to the fabric.
D. It provides integration and automation for al nonfabric nodes and their fabric counterparts.

Correct Answer: B

QUESTION 149
In a Cisco SD-WAN solution, which two functions are performed by OMP? (Choose two.)

A. advertisement of network prefixes and their attributes
B. configuration of control and data policies
C. gathering of underlay infrastructure data
D. delivery of crypto keys
E. segmentation and differentiation of traffic

Correct Answer: AD

QUESTION 150
When is the Design workflow used in Cisco DNA Center?

A. in a greenfield deployment, with no existing infrastructure
B. in a greenfield or brownfield deployment, to wipe out existing data
C. in a brownfield deployment, to modify configuration of existing devices in the network
D. in a brownfield deployment, to provision and onboard new network devices

Correct Answer: A

QUESTION 151
A network monitoring system uses SNMP polling to record the statistics of router interfaces. The SNMP queries work as expected until an engineer installs a new
interface and reloads the router. After this action, all SNMP queries for the router fail. What is the cause of this issue?

A. The SNMP server traps are disabled for the interface index.
B. The SNMP community is configured incorrectly.
C. The SNMP interface index changed after reboot
D. The SNMP server traps are disabled for the link state.

Correct Answer: C

QUESTION 152
How is CAPWAP data traffic encapsulated when running an Over the Top WLAN in a Cisco SD-Access wireless environment?

A. LISP
B. VXLAN
C. GRE
D. IPsec

Correct Answer: B

QUESTION 153
What is a benefit of YANG?

A. It enables multiple leaf statements to exist within a leaf list.
B. It enforces the use of a specific encoding format for NETCONF.
C. It collects statistical constraint analysis information.
D. It enforces configuration semantics.

Correct Answer: D

QUESTION 154
What is one characteristic of the Cisco SD-Access control plane?

A. It stores remote routes in a centralized database server.
B. Each router processes every possible destination and route.
C. It allows host mobility only in the wireless network.
D. It is based on VXLAN technology.

Correct Answer: A

QUESTION 155
What are two benefits of using Cisco TrustSec? (Choose two.)

A. end-to-end traffic encryption
B. consistent network segmentation
C. simplified management of network access
D. advanced endpoint protection against malware
E. unknown file analysis using sandboxing

Correct Answer: BC

QUESTION 156
What is the intent API in Cisco Catalyst Center (formerly DNA Center)?

A. southbound consumer-facing RESTful API, which enables network discovery and configuration management
B. westbound interface, which allows the exchange of data to be used by ITSM, IPAM and reporting
C. an interface between the controller and the network devices, which enables network discovery and configuration management
D. northbound consumer-facing RESTful API, which enables network discovery and configuration management

Correct Answer: D

QUESTION 157
Which characteristic applies to the endpoint security aspect of the Cisco Threat Defense architecture?

A. detect and block ransomware in email attachments
B. cloud-based analysis of threats
C. user context analysis
D. outbound URL analysis and data transfer controls

Correct Answer: B

QUESTION 158
Which feature does Cisco TrustSec use to provide scalable, secure communication throughout a network?

A. security group tag number assigned to each port on a network
B. security group tag number assigned to each user on a switch
C. security group tag ACL assigned to each port on a switch
D. security group tag ACL assigned to each router on a network

Correct Answer: B

QUESTION 159
Which HTTP status code is the correct response for a request with an incorrect password applied to a REST API session?

A. HTTP Status Code:200
B. HTTP Status Code:302
C. HTTP Status Code:401
D. HTTP Status Code:504

Correct Answer: C

QUESTION 160
What is the role of the RP in PIM sparse mode?

A. The RP acts as a control-plane node only and does not receive or forward multicast packets.
B. The RP responds to the PIM join messages with the source of a requested multicast group.
C. The RP maintains default aging timeouts for all multicast streams requested by the receivers.
D. The RP is the multicast router that is the root of the PIM-SM shared multicast distribution tree.

Correct Answer: D