QUESTION 1
Which Cisco Software OS uses microkernel architecture?

A. IOS 12.2
B. IOS 15.1
C. IOS
D. IOS XR

Correct Answer: D

QUESTION 2
What is the purpose of OSPF-TE extensions to MPLS traffic engineering functionality?

A. advertising the TE tunnel routes to the OSPF domain
B. carrying OSPF routing information for TE tunnels
C. calculating and establishing TE tunnels in accordance with network constraints
D. calculating fast reroute to provide a backup path for TE tunnels

Correct Answer: C

QUESTION 3
When implementing a REST API, how does an engineer mitigate security risks?

A. by configuring the system to authenticate the client’s identity and avoid broken authentication
B. by configuring separate authorization schemes to securely compartmentalize different areas of the business
C. by configuring rate limiting to reduce the risk of DOS and DDOS attacks against the system
D. by configuring object properties to protect data

Correct Answer: A

QUESTION 4
What is the purpose of microsegments in the SRv6 architecture?

A. They ensure that routers in the path sufficiently examine the indexed mapping tables.
B. They allow for configuration changes in the SRv6 data plane without requiring the device to reboot.
C. They reduce fragmentation as packets traverse the network.
D. They support a scalable control plane.

Correct Answer: D

QUESTION 5
What are the four primary components of an API?

A. GET, PUT, DELETE, and SET
B. running config, startup config, VLAN database, and routing database
C. methods, actions, objects, and formats
D. Modularity, Abstraction, Stability, and Resources

Correct Answer: C

QUESTION 6
An ISP that provides private network services across the country has recently migrated their infrastructure to support MPLS technology. A network engineer configured mpls ip on all routers and implemented the OSPF routing protocol with TE extensions in the backbone area. The ISP wants to ensure that label exchange is performed only on MPLS-enabled interfaces that are associated with the IGP instance. Which action must the engineer take to accomplish the goal?

A. Implement mpls Idp sync on all routers in the segment.
B. Update the routers in the segment to use RSVP-TE for label distribution.
C. Enable Cisco Express Forwarding on all routers in the backbone area.
D. Implement mpls ldp autoconfig on all routers in the segment.

Correct Answer: D

QUESTION 7
What is the primary purpose of Secure ZTP?

A. to automate the secure provisioning of network devices during initial deployment
B. to provide secure remote access to network devices for management and troubleshooting
C. to provide real-time threat detection and mitigation for devices in the network
D. to securely and seamlessly encrypt traffic across the entire network

Correct Answer: A

QUESTION 8
What is the main purpose of EVPN?

A. to provide application-aware networking capabilities in a cloud environment
B. to provide simplified and flexible underlay connectivity for private VPN services
C. to provide advanced security features for IoT devices
D. to provide scalable, interoperable multitenancy in data center and cloud networks

Correct Answer: D

QUESTION 9
What is the purpose of DS-Lite technology?
A. It allows network administrators to implement shared IPv4 addresses between the ISP and its customers.
B. It allows an ISP to service lPv6 networks over an lPv4-enabled ISP backbone.
C. It enables networks to pass encapsulated lPv4-in-lPv6 traffic over the ISP backbone.
D. It allows network administrators to transition a network to lPv6 while maintaining lPv4 support.

Correct Answer: C

QUESTION 10
A regional company is planning to bolster the security of their LAN infrastructure by implementing advanced encryption techniques between their core switch and their distribution switch. The solution must leverage hardware-accelerated encryption capabilities to transparently encrypt all traffic between the two switches at the data-link layer to safeguard against unauthorized access. However, it is important for the solution to have minimal impact on network performance and latency. Which action must the engineer take to meet the requirements?

A. Implement MACsec with AES-256 encryption on both switches.
B. Enable SSL VPN with SHA-256 encryption on all interfaces on both switches.
C. Deploy an IPsec tunnel with MD5 hashing between the two switches.
D. Enable L2TP with RSA encryption on both switches.

Correct Answer: A

QUESTION 11
The network-engineering team at a midsize company recently received reports of poor network performance. The performance issues are irregular, but the company suspects that heavy traffic associated with the streaming of internal training applications to users in multiple departments may be responsible. The team plans to deploy model-driven telemetry with gRPC in the network, and they have decided to periodically push data to a telegraf receiver so that they can observe and identify these traffic bottlenecks. What is the first configuration that the team should apply to the core routers?

A. controller:grpc$ more xr-interfaces-lo0-cfg.json
{
“Cisco-IOS-XR-ifmgr-cfg:interface-configurations”
{“interface-configuration”: [
{
“active”: “acr”,
“interface-name”: “Loopback0”,
“description”: “LOCAL TERMINATION ADDRESs”,
“interface-virtual”: [
null
],
“Cisco-IOS-XR-ipv4-io-cfg:ipv4-network”: {
“addresses”: {
“primary”: {
“address”: “192.168.1.0”,
“netmask”:”255.255.255.0″
B. telemetry model-driven
destination-group ciscotest
address family ipv4192.168.1.0 port 57500
encoding self-describing-gpb
protocol tcp
C. telemetry model-driven
subscription CPU-Utilization
sensor-group-Id Monitor-CPU sample-interval 30000
destination-id ciscotest
D. <rpc xmIns=”urn:ietf:params:xml:ns:netconf:base:1.0″ message-id=”101″>
<edit-config>
<target>
<candidatel>
</target>

Correct Answer: B

QUESTION 12
What is the main purpose of DS Lite?

A. serving as a transition mechanism to support IPv6 connectivity for IPv4 networks
B. securing communication between IPv4 and IPv6 networks
C. translating IPv4 addresses to IPv6 addresses to facilitate communication between different networks
D. optimizing IPv4 routing by using IPv6 tunneling

Correct Answer: A

QUESTION 13
A global company has several offices worldwide, with data centers in Europe and North America. Employees in each geographic region access servers within the data center. With network traffic expected to increase significantly in the future, a network engineer decided to implement SNMP to more closely monitor network devices and status. Which configuration must the engineer apply to enable SNMPv2c at the authNoPriv level?

A. snmp-server group cisco1 v2c auth
snmp-server user AuthUser cisco1 remote 192.168.1.1 v2c auth md5 password1
B. snmp-server community public
snmp-server user remoteuser1 cisco1 remote 192.168.1.1
C. snmp-server group cisco1 v2c noauth
snmp-server user remoteuser1 cisco1 remote 192.168.1.1
snmp-server host 192.168.1.1 informs version 2c noauth remoteuser config
D. snmp-server group cisco1 v2c priv
snmp-server user PrivateUser cisco1 remote 192.168.1.1 v2c auth md5 ciscotest priv access des56

Correct Answer: A

QUESTION 14
A growing company has a large headquarters facility with employees located across several floors of the same building. Employees on each floor require frequent access to file servers located within the data center, which is also onsite. To mitigate network performance issues as traffic increases, the network team decided to implement SNMPv2c at the noAuthNoPriv level. Which configuration must the team use?

A. snmp-server community public
snmp-server user remoteuser1 cisco1 remote 192.168.1.1
B. snmp-server group cisco1 v2c auth
snmp-server user AuthUser cisco1 remote 192.168.1.1 v2c auth md5 password1
C. snmp-server group cisco1 v2c noauth
snmp-server user remoteuser1 cisco1 remote 192.168.1.1
snmp-server host 192.168.1.1 informs version 2c noauth remoteuser config
D. snmp-server group cisco1 v2c priv
snmp-server user PrivateUser cisco1 remote 192.168.1.1 v2c auth md5 ciscotest priv access des56

Correct Answer: C

QUESTION 15
What are two characteristics of Cisco IOS software? (Choose two.)

A. It has a shared memory pool.
B. It runs on a 64-bit operating system.
C. It is built on a Linux Kernel.
D. It supports symmetric multiprocessing.
E. It is a monolithic operating system.

Correct Answer: AE

QUESTION 16
What is the primary purpose of the BGP path selection algorithm?

A. to maximize fault tolerance by selecting the most recently learned path for new traffic
B. to minimize the number of hops a packet takes to reach its destination
C. to select the optimal route to a destination network based on predefined attributes
D. to prioritize paths based on the source of the BGP advertisement

Correct Answer: C

QUESTION 17
Which two features describe the workload type of virtual network functions? (Choose two.)

A. high delay and jitter
B. mostly IO bound
C. packet drops
D. low performance (<10G)
E. high performance (>10G)

Correct Answer: BE

QUESTION 18
Which condition must be met in the network if an MPLS VPN-based service provider wants to allow other service providers to segment its backbone to provide VPN services to customers?

A. Multipath load sharing must be enabled on the PE and CSC-PE.
B. CEF must be disabled on all CSC-PE routers.
C. Individual interfaces can be configured for BGP with labels or LDP, but not both.
D. EBGP must be enabled between all CSC-PE and CSC-CE devices.

Correct Answer: D

QUESTION 19
How is network configuration simplified in an Inter-AS VPN Option AB?

A. Route targets are used only to import routes.
B. The number of BGP sessions is reduced to one per VRF.
C. MPLS is reserved for inter-AS communication.
D. Only IGP routes are added to the routing table.

Correct Answer: B

QUESTION 20
Which role does Secure ZTP play in network automation?

A. It serves as the file-transfer protocol between the headend and tail end routers in a tunnel configuration.
B. It secures HTTP traffic within the network to protect device configurations as they are deployed.
C. It provides authentication and encrypted communication channels during device onboarding.
D. It protects against the duplication of device IDs by providing a method to label each device with a unique serial ID.

Correct Answer: C