QUESTION 161
Which action is performed by Link Management Protocol in a Cisco StackWise Virtual domain?
A. It rejects any unidirectional link traffic forwarding.
B. It determines which switch becomes active or standby.
C. It determines if the hardware is compatible to form the StackWise Virtual domain.
D. It discovers the StackWise domain and brings up SVL interfaces.
Correct Answer: A
QUESTION 162
What are two characteristics of Cisco SD-Access elements? (Choose two )
A. The border node is required for communication between fabric and nonfabric devices.
B. Fabric endpoints are connected directly to the border node
C. Traffic within the fabric always goes through the control plane node
D. The control plane node has the full RLOC-to-EID mapping database
E. The border node has the full RLOC-to-EID mapping database
Correct Answer: AD
QUESTION 163
What is the result when an active route processor fails in a design that combines NSF with SSO?
A. An NSF-aware device immediately updates the standby route processor RIB without churning the network
B. An NSF-capable device immediately updates the standby route processor RIB without churning the network
C. The standby route processor temporarily forwards packets until route convergence is complete
D. The standby router processor immediately takes control and forwards packets along known routes
Correct Answer: D
QUESTION 164
What is the role of vSmart in a Cisco SD-WAN environment?
A. to provide secure data plane connectivity over WAN links
B. to perform initial authentication of devices
C. to establish secure control plane connections
D. to monitor, configure, and maintain SD-WAN devices
Correct Answer: C
QUESTION 165
Which two Cisco SD-WAN components exchange OMP information?
A. vManage
B. vSmart
C. vBond
D. vAnalytics
E. WAN Edge
Correct Answer: BE
QUESTION 166
Which activity requires access to Cisco DNA Center CLI?
A. creating a configuration template
B. graceful shutdown of Cisco DNA Center
C. provisioning a wireless LAN controller
D. upgrading the Cisco DNA Center software
Correct Answer: B
QUESTION 167
How is traffic classified when using Cisco TrustSec technology?
A. with the security group tag
B. with the IP address
C. with the VLAN
D. with the MAC address
Correct Answer: A
QUESTION 168
Why does the vBond orchestrator have a public IP?
A. to provide access to Cisco Smart Licensing servers for license enablement
B. to facilitate downloading and distribution of operational and security patches
C. to enable vBond to learn the public IP of WAN Edge devices that are behind NAT gateways or in private address space
D. to allow for global reachability from all WAN Edges in the Cisco SD-WAN and to facilitate NAT traversal
Correct Answer: D
QUESTION 169
What is a command-line tool for consuming REST APIs?
A. Firefox
B. Python requests
C. Postman
D. cURL
Correct Answer: D
QUESTION 170
What is one difference between SaltStack and Ansible?
A. SaltStack uses an API proxy agent to program Cisco boxes in agent mode, whereas Ansible uses a Telnet connection.
B. SaltStack is constructed with minion, whereas Ansible is constructed with YAML.
C. SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box.
D. SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus.
Correct Answer: B
QUESTION 171
Which technology provides an overlay fabric to connect remote locations utilizing commodity data paths and improves network performance, boosts security, and
reduces costs?
A. SD-WAN
B. VTEP
C. VXLAN
D. InfiniBand
Correct Answer: A
QUESTION 172
What is the function of an intermediate node in a Cisco SD-Access fabric?
A. to route packets within the fabric based on the Layer 3 information in the header
B. to provide an entry and exit point between the fabric and external resources
C. to encapsulate and de-encapsulate packets with a VXLAN header
D. to provide reachability between fabric clients and nonfabric clients on the same subnet
Correct Answer: A
QUESTION 173
In a Cisco SD-Access wireless environment, which device is responsible for hosting the anycast gateway?
A. fusion router
B. control plane node
C. fabric border node
D. fabric edge node
Correct Answer: D
QUESTION 174
Which mechanism does OAuth use to strengthen REST API security when compared to BasicAuth?
A. SSL
B. TLS
C. Authentication
D. Token
Correct Answer: D
QUESTION 175
When the “deny” statement is used within a route map that is used for policy-based routing, how is the traffic that matches the deny route-map line treated?
A. An additional sequential route-map line is needed to divert the traffic to the router’s normal forwarding behavior.
B. Traffic is returned to the normal forwarding behavior of the router.
C. An additional sequential route-map line is needed to policy route this traffic.
D. Traffic is routed to the null 0 interface of the router and discarded.
Correct Answer: B
QUESTION 176
What is stateful switchover?
A. cluster protocol used to facilitate switch failover
B. mechanism to take control from a failed RP while maintaining connectivity
C. mechanism used to prevent routing protocol loops during an RP switchover
D. First Hop Redundancy Protocol for host gateway connectivity
Correct Answer: B
QUESTION 177
Which technology is the Cisco SD-Access control plane based on?
A. VRF
B. LISP
C. CTS
D. SGT
Correct Answer: B
QUESTION 178
What are two of benefits of using VXLAN? (Choose two.)
A. It uses all available Layer 3 paths in the underlying network.
B. It allows multi-tenanted segmentation.
C. It allows for an unlimited number of segments.
D. It uses a MAC in IP/TCP encapsulation technique.
E. It has fewer devices to manage.
Correct Answer: AB
QUESTION 179
Which solution should be used in a high-density wireless environment to increase bandwidth for each user?
A. Increase the cell size of each AP.
B. Increase TX power.
C. Increase antenna size.
D. Increase the mandatory minimum data rate.
Correct Answer: D
QUESTION 180
Which unit measures the power of a radio signal with reference to 1 milliwatt?
A. dBw
B. dBm
C. mW
D. dBi
Correct Answer: B