QUESTION 101
Which fact must a network engineer consider when planning to deploy RSVP-TE FRR?

A. PLR prefers FRR NNHOP backup tunnels over NHOP tunnels.
B. PLR prefers FRR NHOP backup tunnels over NNHOP tunnels.
C. FRR protects MPLS LDP and RSVP-TE LSPs.
D. The FRR backup tunnel reserves the total bandwidth of all protected tunnels.

Correct Answer: A

QUESTION 102
A network architect must implement CSC VPN services for a new backbone carrier. Which two benefits does the architecture provide? (Choose two.)

A. It eliminates the need to maintain a centralized network-maintenance and operations strategy.
B. It supports a scalable growth strategy that services multiple customers efficiently.
C. It leverages IPsec to establish connections within the backbone, which eliminates the need for BGP to distribute routes.
D. It relies on IP communications, which simplifies the network design.
E. It maintains a single backbone, which simplifies the VPN implementation to customers.

Correct Answer: BE

QUESTION 103
Which action occurs during the traceback phase of the six-phase approach to service provider security?

A. Mitigate the attack that flows using various mechanisms.
B. Trace the attack that flows from the attacked sections of the network toward the network edges
C. Detect unusual activity or behavior and activate appropriate measures after an alert is raised.
D. Review the whole attack-handling process.

Correct Answer: B

QUESTION 104
What is a feature of mVPN?

A. It requires the no ip mroute-cache command to be configured on the loopback interface of each BGP peer.
B. It provides the ability to support multicast over a Layer 3 VPN.
C. It establishes multiple static MDTs for each multicast domain.
D. It requires unicast to be disabled on the multicast domain.

Correct Answer: B

QUESTION 105
Which set of facts must the network architect consider when deciding whether to implement SaltStack or Chef?

A. Chef refers to its automation instructions as manifests, and SaltStack refers to its instructions as a playbook.
B. Chef is written in Python, and SaltStack is written in Ruby.
C. Chef is an agent-based tool based on Ruby, and SaltStack is a module tool based on Python.
D. Chef uses a message-based system, and SaltStack uses an agent to deliver messages.

Correct Answer: C

QUESTION 106
What is a feature of model-driven telemetry?

A. It uses the pull model to send requested data to a client when polled.
B. It uses the push model to stream data to desired destinations.
C. It is less secure because it uses community strings.
D. It occasionally streams to multiple servers in the network.

Correct Answer: B

QUESTION 107
What is a characteristic of the YANG model?

A. Associate types are optional for each leaf.
B. It uses containers to categorize related nodes.
C. It is a distributed model of nodes.
D. Spines are used to represent individual attributes of nodes.

Correct Answer: B

QUESTION 108
An ISP is implementing end-to-end fault monitoring for a customer based on the IEEE 802.3ah standard. The solution must detect when 15 or more corrupted Ethernet packets arrive within 10 ms and stop propagating traffic through the ISP backbone network or to the customer side. Which configuration must the ISP engineer apply?

A. ethernet oam link-monitoring
ethernet oam link-monitor receive-crc window 15
ethernet oam link-monitor receive-crc threshold high 10
ethernet oam link-monitor high-threshold action disable-interface
B. ethernet oam
ethernet oam link-monitor receive-crc window 10
ethernet oam link-monitor receive-crc threshold high 15
ethernet oam link-monitor transmit-crc window 10
ethernet oam link-monitor transmit-crc threshold high 15
ethernet oam link-monitor high-threshold action errordisable-interface
C. ethernet oam link-monitoring enable
ethernet oam link-monitor crc-errors ingress time-window 10
ethernet oam link-monitor crc-errors ingress threshold high 15
ethernet oam link-monitor crc-errors egress time-window 10
ethernet oam link-monitor crc-errors egress threshold high 15
ethernet oam link-monitor high-threshold action shutdown-interface
D. ethernet oam link-monitoring global enable
ethernet oam link-monitor receive crc-errors period 15
ethernet oam link-monitor receive crc-errors limit 15
ethernet oam link-monitor transmit crc-errors period 10
ethernet oam link-monitor transmit crc-errors limit 15
ethernet oam link-monitor limit action error-disable interface

Correct Answer: B

QUESTION 109
What is one of the differences between Ansible and Chef?

A. Ansible uses YAML and Chef uses Ruby.
B. Ansible uses Ruby and Chef uses Python.
C. Chef is highly scalable and Ansible is highly secure.
D. Chef requires the use of Windows in the environment and Ansible requires Linux.

Correct Answer: A

QUESTION 110
The NOC team must update the BGP forwarding configuration on the network with these requirements:
1. BGP peers must establish a neighborship with NSF capability and restart the session for the capability to be exchanged after 120 seconds.
2. BGP peers must delete routes after 360 seconds of inactivity.

Which action meets these requirements?

A. Set the BGP restart-time to 120 seconds and the BGP ha-mode sso to 360 seconds.
B. Set the BGP restart-time to 120 seconds and the stalepath-time to 360 seconds.
C. Set the stalepath-time to 120 seconds and the BGP restart-time to 360 seconds.
D. Set the BGP ha-mode sso to 120 seconds and the BGP restart-time to 360 seconds.

Correct Answer: B

QUESTION 111
In an EVPN operation, how does the PE determine and advertise Ethernet segment reachability?

A. The PE discovers the remote PEs in the EVI and builds a flood list linked with the EVI.
B. The PE discovers other PEs in the same Ethernet segment and elects a DF.
C. The PE discovers and shares routing information for the B-MAC addresses associated with local Ethernet segments.
D. The PE discovers remote ESIs and determines their redundancy mode.

Correct Answer: D

QUESTION 112
Which programmable API allows the service provider to plan and optimize the automation of network operations and achieve closed-loop operations?

A. Crosswork Network Automation
B. WAN Automation Engine
C. Evolved Programmable Network Manager
D. Network Services Orchestrator

Correct Answer: B

QUESTION 113
Which core component of MDT describes the data that an MDT-capable device streams to a collector?

A. subscription
B. encoder
C. sensor path
D. transport protocol

Correct Answer: C

QUESTION 114
A customer site is being connected to a Frame Relay network via a T1 link. The customer has a contract for 512 kbps service with a Tc value of 125 ms. Under peak line conditions, customer traffic can reach four times the contracted speed. Which QoS configuration must the service provider implement to limit the customer to the contracted values?

A. policy-map policy_map
class class_map
police cir 512000 bc 64000 pir 20480000 be 192000
conform-action transmit
exceed-action drop
B. policy-map policy_map
class class_ map
police cir 512000 bc 32000 pir 64000 be 6400
conform-action transmit
violate-action set-dscp-transmit default
exceed-action drop
C. policy-map policy_map
class class_map
police cir 512000 bc 128000 pir 256000 be 32000
conform-action transmit
exceed-action set-be-bit transmit
exceed-action drop
D. policy-map policy_map
class class_map
police cir 512kbps bc 256kbps pir 2Mbps be 9600 kbps
conform-action transmit
exceed-action set-de-bit transmit
violate-action drop

Correct Answer: A

QUESTION 115
What is the purpose of RSVP tear messages?

A. to confirm successful end-to-end resource allocation
B. to inform the headend router of LSP issues
C. to reuse router resources for other reservation requests
D. to notify the tail-end router of resource unavailability on the transit router

Correct Answer: C

QUESTION 116
Why is the keyword none needed when implementing management plane security using TACACS+?

A. It allows the local database to authenticate when the TACACS+ server is unreachable.
B. It allows the router to query a RADIUS server when the TACACS+ server is unreachable.
C. It allows authentication to succeed when the TACACS+ server is unreachable.
D. It prevents all users from accessing router 1 unless the TACACS+ server is reachable.

Correct Answer: D

QUESTION 117
A network operator must implement a PIM-SSM multicast configuration on the customer’s network so that users in different domains are able to access and stream live traffic. The IMP version must be enabled to support the SSM implementation. Which action must the engineer perform on R1 to complete the SSM implementation?

A. R1 (config)# ip multicast-routing
R1 (config)# ip pim ssm default
R1 (config)# interface ethernet 1/0
R1 (config-if)# ip pim sparse-mode
R1 (config-if)# ip igmp version 3
B. R1 (config)# ip pim ssm range 1
R1 (config)# interface ethernet 1/0
R1 (config-if)# ip lam sparse-dense-mode
R1 (config-if)# ip igmp version 2
C. R1 (config)# ip pim bidir-enable
R1 (config)# ip multicast-routing
R1 (config)# ip pim autorp listener
R1 (config-if)# ip igmp version 2
D. R1 (config)# ip routing multicast
R1 (config)# ip pim ssm range 1
R1 (config)# ip pim passive
R1 (config)# ip pim dense-mode
R1 (config-if)# ip igmp version 3

Correct Answer: A

QUESTION 118
The NOC engineer in a service provider network must configure an SNMP community on switch SW with these security attributes:
1. Event messages must be authenticated with the MD5 algorithm and encrypted.
2. The remote user name for the SNMP server at 172.16.10.1 is AuthNocUser.

Which configuration must the engineer apply to the switch?

A. SW(config)# snmp-server group group2 v3 auth
SW(config)# snmp-server user AuthNocUser group2 remote 172.16.10.1 v3 auth md5 password1
B. SW(config)# snmp-server community comaccess ro 4
SW(config)# snmp-server enable traps snmp authentication
SW(config)# snmp-server host cisco.com version 2c public
C. SW(config)# snmp-server group group1 v3 noauth
SW(config)# srimp-server user AuthNocUser group1 remote 172.16.10.1
SW(config)# srump-server host 172.16.10.1 informs version 3 noauth remoteuser config
D. SW(config)# snmp-server group group3 v3 priv
SW(config)# snmp-server user AuthNocUser group3 remote 172.16.10.1 v3 auth md5 Cisco@123 priv des 56

Correct Answer: D

QUESTION 119
Which role does the Adjacency-SID sub-TLV extension perform in the IS-IS routing protocol?

A. It is advertised within TLV-22 (Extended IS Reachability) to label a specific link in a segment routing domain.
B. It is advertised within TLV-24 (IS-IS Neighbor Adjacency Attribute) to label a specific adjacency between Level 1 routers within one IS-IS area.
C. It is advertised within TLV-145 (IS-IS Prefix Reachability Information) to label host prefixes on loopback interfaces on Level 2 routers within one IS-IS area.
D. It is advertised within TLV-136 (Extended IP Reachability) to label a specific node in the network.

Correct Answer: A

QUESTION 120
Which capability does the MPLS TE FRR facility backup protection method provide?

A. assigning a backup TE LSP tunnel to the protected node at the headend of the protected TE LSP
B. defining the set of characteristics for the backup TE LSP
C. leveraging label stacking to protect selected TE LSPs using a single backup TE LSP
D. creating a bypass LSP for each protected LSP at each point of local repair

Correct Answer: D