QUESTION 121
What is an enhancement that Cisco IOS XE Software has over Cisco IOS Software?

A. It is built on a QNX Neutrino Microkernel.
B. It supports symmetric multiprocessing.
C. It allows all processes to use the same pool of memory.
D. It runs on a 32-bit operating system.

Correct Answer: B

QUESTION 122
An engineering team must implement Unified MPLS to scale an MPLS network. Devices in the core layer use different IGPs, so the team decided to split the network into different areas. The team plans to keep the MPLS services as they are and introduce greater scalability. Which additional action must the engineers take to implement the Unified MPLS?

A. Redistribute the IGP prefixes into another IGP to ensure end-to-end LSPs.
B. Move the IGP prefixes into IS-IS as the loopback prefixes of the PE routers to distribute the prefixes to other to other routers to create end-to-end-to other routers to create end-to-end LSPs.
C. Configure the ABR routers as route reflectors that redistribute IGP into BGP.
D. Redistribute the IGP prefixes from one IGP into the other routers to ensure end-to-end LSPs.

Correct Answer: C

QUESTION 123
How does Cisco DNA Center enhance network automation?

A. It allows network administrators to combine voice and data networks into a single topology without manual configuration.
B. It allows network administrators to reduce the number of VRFs in a multicustomer environment by automatically implementing a single VLAN per customer.
C. It allows network administrators to quickly deploy Cisco Layer 2 devices without requiring STP and broadcast transport
D. It allows network administrators to reduce inconsistencies when they deploy and validate network configurations.

Correct Answer: D

QUESTION 124
What is the function of Cisco NFV infrastructure platform?

A. It offers decentralized logging.
B. It offers consistent performance.
C. It does not have a security audit feature.
D. It does not offer high availability.

Correct Answer: B

QUESTION 125
Which type of attack is an application attack?

A. ping of death
B. SYN flood
C. ICMP (ping) flood
D. HTTP flood

Correct Answer: D

QUESTION 126
A network architect decides to expand the scope of the multicast deployment within the company network. The network is already using PIM-SM with a static RP that supports a high-bandwidth, video-based training application that is heavily used by the employees, but excessive bandwidth usage is a concern. How must the engineer update the network to provide a more efficient multicast implementation?

A. Implement BSR to support dynamic RP notification.
B. Deploy ICMP to improve multicast reachability across the network using static RP.
C. Configure IGMP to manage the multicast hosts on each LAN.
D. Implement STP to improve switching performance for multicast data.

Correct Answer: A

QUESTION 127
When Cisco IOS XE REST API uses HTTP request methods, what is the purpose of a PUT request?

A. retrieves the specified resource or representation
B. submits data to be processed to the specified resource
C. updates the specified resource with new information
D. creates a new resource

Correct Answer: C

QUESTION 128
A network administrator must monitor network usage to provide optimal performance to the network end users when the network is under heavy load. The administrator asked the engineer to install a new server to receive SNMP traps at destination 192.168.1.2. Which configuration must the engineer apply so that all traps are sent to the new server?

A. snmp-server enable traps isdn
snmp-server host 192.168.1.2 public
B. snmp-server enable traps
snmp-server host 192.168.1.2 public
C. snmp-server enable traps bgp
snmp-server host 192.168.1.2 public
D. snmp-server enable traps entity
snmp-server host 192.168.1.2 public

Correct Answer: B

QUESTION 129
Which function does RSVP perform in a Cisco MPLS TE environment?

A. It reserves the bandwidth along the path between the head-end and tail-end router.
B. It signals to LDP protocol along the path that a Cisco MPLS TE will be configured.
C. It reserves bandwidth for LDP sessions between routers participating in a Cisco MPLS TE.
D. It establishes targeted LDP sessions between neighbors that are directly connected.

Correct Answer: A

QUESTION 130
What are two features of stateful NAT64? (Choose two.)

A. It requires the lPv6 hosts to use either DHCPv6-based address assignments or manual address assignments.
B. It provides 1:N translations, so it supports an unlimited number of endpoints.
C. It provides 1:1 translation, so it supports a limited number of endpoints.
D. It requires IPv4-translatable IPv6 address assignments.
E. It uses address overloading.

Correct Answer: BE

QUESTION 131
A network engineer is implementing NetFlow to observe traffic patterns on the network The engineer is planning to review the patterns to help plan future strategies for monitoring and preventing congestion as the network grows. If the captures must include BGP next-hop flows, which configuration must the engineer apply to the router?

A. ip cef
ip flow-export version 5 bgp-nexthop
ip flow-export destination 192.168.1.1 9995
interface gigabitethernet 1/0/1
ip flow egress
B. ip cef
ip flow-export version 9 bgp-nexthop
ip flow-export destination 192.168.1.1 9996
interface gigabitethernet 1/0/1
ip flow ingress
C. no ip cef
ip flow-export version 9
ip flow-export destination 192.168.1.1 9996
interface gigabitethernet 1/0/1
ip flow ingress
ip flow egress
D. ip cef
ip flow-export version 5
ip flow-export destination 192.168.1.1 9995
interface gigabitethernet 1/0/1
ip flow ingress
cdp enable

Correct Answer: B

QUESTION 132
Which benefit is provided by FRR?

A. It provides performance data for the service provider network.
B. It provides rapid failure detection between forwarding engines.
C. It protects Cisco MPLS TE LSPs from link and node failures.
D. It provides fast forwarding path failure detection times for all media.

Correct Answer: C

QUESTION 133
An engineer must apply an 802.1ad-compliant configuration to a new switchport with these requirements:
1. The switchport must tag all traffic when it enters the port.
2. The switchport is expected to provide the same level of service to traffic from any customer VLAN.

Which configuration must the engineer use?

A. interface GigabitEthernet1/0/1
ethernet dot1ad uni s-port
service instance 12
encapsulation default
rewrite ingress tag push dot1ad 21 symmetric
bridge-domain 12
B. interface GigabitEthernet1/0/1
ethernet dot1ad uni c-port
service instance 12
encapsulation dot1q
rewrite ingress tag push dot1ad 21 symmetric
bridge-domain 12
C. interface GigabitEthernet1/0/1
switchport mode trunk
switchport trunk encapsulation dot1q
encapsulation ISL
bridge-domain 12
D. interface GigabitEthernet1/0/1
ethernet dot1ad nni
service instance 12
encapsulation dot1ad
bridge-domain 12

Correct Answer: A

QUESTION 134
What is a characteristic of MVPN?

A. It creates GRE tunnels to route multicast traffic over a service provider IP core.
B. It allows VRF traffic to use the service provider MPLS VPN to route multicast traffic.
C. It uses pseudowires to route unicast and broadcast traffic over either a service provider MPLS or IP core.
D. It bypasses the use of MPLS in the service provider core and transmits packets using IP only.

Correct Answer: B

QUESTION 135
How does SR policy operate in Segment Routing Traffic Engineering?

A. An active SR policy installs a BSID-keyed entry in the forwarding table to steer the packets that match the entry to the SR policy SID-list.
B. An SR policy for color and endpoint is deactivated at the headend as soon as the headend learns a valid candidate path for the policy.
C. When a set of SID lists is associated with the SR policy designated path, traffic steering is ECMP-based according to the qualified cost of each SID-list.
D. When “invalidation drop” behavior occurs, the SR policy forwarding entry is removed and the router drops all traffic that is steered into the SR policy.
Correct Answer: A

QUESTION 136
Which OS uses a distributed subsystem architecture?

A. CatOS
B. IOS XR
C. IOS XE
D. IOS

Correct Answer: B

QUESTION 137
A new PE router is configured to run OSPF as an IGP with LDP on all interfaces. The engineer is trying to prevent black holes after convergence when the PE device loses an LDP session with other PE routers. Which action must the engineer take to implement LDP session protection on a new PE router?

A. Configure the mpls ldp session protection and mpls label protocol ldp commands on the new PE router that connect to the CE routers.
B. Configure the new PE router with the mpls ldp session protection command on interfaces with directly connected neighbors.
C. Configure the new PE router with the mpls ldp session protection command and on neighboring routers that connect to this new PE router.
D. Configure the mpls ldp discovery targeted-hello accept and mpls ldp session protection commands on the interfaces on the new PE router that connect to the CE routers.

Correct Answer: C

QUESTION 138
An engineer must implement QoS to prioritize traffic that requires better service throughout the network. The engineer stated by configuring a class map to identify the high-priority traffic. Which additional tasks must the engineer perform to implement the new QoS policy?

A. Attach the class map to a policy map that designates the action to be taken on the classified traffic and then attach the policy map to an interface using a service policy.
B. Attach the class map to a policy map that sets the minimum bandwidth allocated to the classified traffic and designates the action to be taken on the traffic.
C. Attach the class map to a policy map within a VRF to segregate the high-priority traffic and then attach the policy map to an interface in another VRF.
D. Create a route map to manipulate the routes that are entered into the routing table and then attach the route map to an interface using a service policy.

Correct Answer: A

QUESTION 139
How does Inter-AS Option-A function when two PE routers in different autonomous systems are directly connected?

A. The two routers establish an MP-EBGP session to share their customers’ respective VPNv4 routes.
B. The two routers share all lnter-ASVPN4 routes and redistribute routes within an IBGP session to provide end-to-end reach.
C. The two routers share VPN4 routes over a multihop EBGP session and set up an Inter-AS tunnel using one another’s label.
D. The two routers treat one another as CE routers and advertise unlabeled Pv4 routes through an EBGP session.

Correct Answer: D

QUESTION 140
A network engineer is testing an automation platform that interacts with Cisco networking devices via NETCONF over SSH. In accordance with internal security requirements:
1. NETCONF sessions are permitted only from trusted sources in the 172.16.20.0/24 subnet
2. CLI SSH access is permitted from any source.

Which configuration must the engineer apply on R1?

A. configure terminal
hostname R1
ip domain-name mydomain.com
crypto key generate rsa
ip ssh version 2
access-list 1 permit 172.16.20.0 0.0.0.255
netconf ssh acl 1
line vty 0 4
transport input ssh
end
B. configure terminal
hostname R1
ip domain-name mydomain.com
crypto key generate rsa
ip ssh version 2
access-list 1 permit 172.16.20.0 0.0.0.255
access-list 1 permit any
netconf ssh
line vty 04
access-class 1 in
transport input ssh
end
C. configure terminal
hostname R1
ip domain-name mydomain.com
crypto key generate rsa
ip ssh version 1
access-list 1 permit 172.16.20.0 0.0.0.255
access-list 2 permit any
netconf ssh
line vty 0 4
access-class 2 in
transport input ssh
end
D. configure terminal
hostname R1
ip domain-name mydomain.com
crypto key generate rsa
ip ssh version 1
access-list 1 permit 172.16.20.0 0.0.0.255
netconf ssh acl 1
line vty 0 4
transport input ssh
end

Correct Answer: A