350-501 Cisco Exam Questions and Free Practice Test

Jonnie Karnath2023-05-09T20:10:44+00:00

If you’re looking to pass the Cisco 350-501 exam, Certspot 350-501 Cisco exam questions and free practice test are an excellent choice. These 350-501 questions and answers are designed to help you prepare for the exam by providing you with up-to-date and accurate information on the exam topics. One of the best things about Certspot 350-501 Cisco exam questions and free practice test is that it’s designed to be user-friendly and easy to understand. Whether you’re a beginner or an experienced professional, their preparation material will help you gain a better understanding of the subject matter and allow you to test your knowledge before the actual exam.

Page 1 of 12

1. Refer to the exhibit.

What does the number 2 mean in the configuration?

It dictates the number of sessions that will be open with the SNMP manager

It represents the version of SNMP running.

It indicates two SNMP managers are able to read and write with the agent using community string ciscotest.

It is the numeric name of the ACL that contains the list of SNMP managers with access to the agent.

2. Refer to the exhibit.

A network engineer is implementing OSPF multiarea.

Which command on interface GO/1 resolves adjacency issues in the new area?

ip ospf network broadcast

ip ospf network point-to-point

ip ospf network non-broadcast

ip ospf network point-to-multipoint

3. What is the role of NSO in network automation?

It is GUI used to manage wireless devices in a campus infrastructure.

It Is a type of REST API used to configure an API

It is a tool that uses CLl only to configure virtual network devices.

It is a tool used to bridge automation to the physical network infrastructure.

4. Refer to the exhibit.

A network engineer with an employee id: 3812:12:993 has started to configure router R1 for IS-IS as shown.

Which additional configuration must be applied to configure the IS-IS instance to advertise only network prefixes associated to passive interfaces?

Option A

Option B

Option C

Option D

5. An engineer is developing a configuration script to enable dial-out telemetry streams using gRPC on several new devices. TLS must be disabled on the devices.

Which configuration must the engineer apply on the network?

A)

Option A

Option B

Option C

Option D

6. Which additional feature does MPLS DiffServ tunneling support?

matching EXP and DSCP values

interaction between MPLS and IGP

using GRE tunnels to hide markings

PHB layer management

7. A network engineer Is implementing a QoS policy for outbound management traffic classification and marking on a CPE device with these requirements:

• Management protocols must be marked with DSCP AF class 2 w4h low drop probability.

• Monitoring protocols must be marked with DSCP AF class 1 with low drop probability.

• All remaining traffic must be marked with a DSCP value of 0.

Which configuration must the engineer implement to satisfy the requirements?

A)

Option A

Option B

Option C

Option D

8. Refer to the exhibit:

What is the URL used for with REST API?

It is used to contact a URL filter to determine the efficacy of a web address

It is used to send a TACACS+ authentication request to a server

It is used to send a message to the APIC to perform an operation on a managed object or class operator

It is used to initiate an FTP session to save a running configuration of a device.

9. Refer to the exhibit:

Export statistics received do not include the BGP next hop.

Which statement about the NetFlow export statistics is true?

Only the origin AS of the source router will be included in the export statistics.

Loopback 0 must be participating in BGP for it to be included in the export statistics.

The origin AS and the peer-as will be included in the export statistics.

To include the BGP next hop in the export statistics, those keywords must be included with the version 9 entry.

10. Refer to the exhibit.

An engineer is updating this network to meet these conditions:

• Area 10 will receive inter-area routes and support mutual redistribution of external routes with the extranet.

• The ::/0 route is prohibited in Area 10.

• Area 11 will receive only the ::/0 route from the ABR.

• External route redistribution is not supported in Area 11.

• The ABR in Area 11 will advertise no interarea routes.

Which two configurations must be performed to meet the requirements? (Choose two.)

Configure area 11 as nssa no-summary on R7 and as nssa on XR31.

Configure area 10 as stub on R9 and XR32.

Configure area 11 as stub no-summary on R7 and as stub on XR31.

Configure area 11 as nssa default-information-originate on R7 and as nssa on XR31.

Configure area 10 as nssa on R9 and XR32.

Page 2 of 12

11. How can a network administrator secure rest APIs?

They can allow read and write privileges to all users

They can ensure that user sessions are authenticated using TACACS+ only

They can have a general administrator login for multiple users to access that has command entries logged

They can authenticate user sessions and provide the appropriate privilege level

12. Refer to the exhibit.

A network engineer wants to monitor traffic from the application server and send the output to the external monitoring device at 172.16.20.5. Application server traffic should pass through the R1 Eth2/1 interface for further analysis after it is monitored.

Which configuration must be applied on the R1 router?

Configure the FLOW-MONITOR-20 command.

Configure the flow exporter EXPORTER-10 destination 192.168.20.4 command.

Configure the ip flow monitor FLOW-MONITOR-10 input command on the Ethernet1/0 interface.

Configure the ip flow monitor FLOW-MONITOR-10 output command on the Ethernet 2/1 interface.

13. Refer to the exhibit:

What does the REST API command do?

It retrieves the information requested by Descriptions xml

It removes the information identified by Descriptions xml

It executes the commands specified in Descriptions xml

It displays the information identified by Descriptions xml

14. A network engineer is configuring RIP as the routing protocol between multiple PEs and CEs. The engineer must avoid advertising the same routes back to their sources.

Which action should be performed on the routers to accomplish this task?

Configure a different route distinguisher for each prefix.

Define the site of origin on each interface.

Define VRFs on each device to separate the traffic.

Enable bidirectional forwarding detection on each device.

15. Refer to the exhibit:

Which statement about the neighbor statements for 192.168.1.1 is true?

The router must have TDP configured for the send-label command to operate

The neighbor router receives at least four labels from this router

The router sends BGP labels for its prefixes to this peer

The router sends only a label for the prefix for Loopback

16. Which component is similar to an EVPN instance?

MPLS label

IGP router ID

VRF

router distinguisher

17. Refer to the exhibit.

An engineer is configuring IS-IS on ISP network.

Which IS-IS configuration must an engineer implement on router AGG1 so that it establishes connectivity to router AGG6 via the BB3 core router?

router isis 100 metric-style narrow interface GigabitEthernet 3 isis metric 10 level-2

router isis 100 metric-style wide interface GigabitEthernet 3 isis metric 1500 level-2

router isis 100 metric-style narrow interface GigabitEthernet 3 isis metric 10 level-1

router isis 100 metric-style wide interface GigabitEthernet 3 isis metric 1500 level-1

18. Which service is a VNF role?

Compute

Network

Firewall

Storage

19. A network administrator must monitor network usage to provide optimal performance to the network end users when the network is under heavy load. The administrator asked the engineer to install a new server to receive SNMP traps at destination 192.168.1.2.

Which configuration must the engineer apply so that all traps are sent to the new server?

snmp-server enable traps entity snmp-server host 192.168.1.2 public

snmp-server enable traps bgp snmp-server host 192.168.1.2 public

snmp-server enable traps isdn snmp-server host 192.168.1.2 public

snmp-server enable traps snmp-server host 192.168.1.2 public

20. You are writing an RPL script to accept routes only from certain autonomous systems Consider this code.

If you apply this code to BGP filters, Which effect does the code have on your router?

denies routes from AS 7070

allows routes from AS 7077

denies routes from AS 7007

allows routes from AS 770

Page 3 of 12

21. Refer to the exhibit.

A network engineer is deploying SNMP configuration on client's routers. Encrypted authentication must be included on router 1 to provide security and protect message confidentially.

Which action should the engineer perform on the routers to accomplish this task?

snmp-server host 192.168.0.254 informs version 3 auth testuser config.

snmp-server user testuser group 1 remote 192.168.0.254 v3 auth md5 testpassword

snmp-server group group 1 v3 auth.

snmp-server community public

22. The NOC team must update the BGP forwarding configuration on the network with these requirements:

BGP peers must establish a neighborship with NSF capability and restart the session for the capability to be exchanged after 120 seconds.

BGP peers must delete routes after 360 seconds of inactivity.

Which action meets these requirements?

Set the BGP restart-time to 120 seconds and the BGP ha-mode sso to 360 seconds.

Set the stalepath-time to 120 seconds and the BGP restart-time to 360 seconds.

Set the BGP ha-mode sso to 120 seconds and the BGP restart-time to 360 seconds.

Set the BGP restart-time to 120 seconds and the stalepath-time to 360 seconds.

23. FRR is configured on a network.

What occurs when the headend router on the path is alerted to a link failure over IGP?

LSP attempts fast switching on the backup path until the primary path returns to the active state.

The headend router uses a presignaled LSP to bypass the failure point.

A new backup tunnel is established past the PLR to pass through the protected nodes

Backup tunnel is established and intersects with the primary tunnel at the headend.

24. Which benefit is provided by FRR?

It provides fast forwarding path failure detection times for all media.

It provides rapid failure detection between forwarding engines.

It provides performance data for the service provider network.

It protects Cisco MPLS TE LSPs from link and node failures.

25. Refer to the exhibit.

Routers R2 and R3 are Level 1/Level 2 IS-IS routers that redistribute 198 18.x.x/24 prefixes to routers R5 and R6 In the Level 1 area R2 Is to be the preferred router for all redistributed prefixes in the Level 1 area.

Which configuration sets this preference?

Option A

Option B

Option C

Option D

26. Refer to the exhibit.

Which configuration must be implemented on router R8 so that it will establish OSPF adjacency with R5?

A)

Option A

Option B

Option C

Option D

27. Refer to the exhibit.

What is the result of this configuration?

Router 1 opens and closes a TCP connection to the TACACS+ server every time a user requires authorization.

Router 1 and the TACACS+ server maintain one open connection between them only when network administrator is accessing the router with password ciscotest.

Router 1 and the TACACS+ server maintain one open connection between them.

Router 1 opens and closes a TCP connection to the TACACS+ server every time a user requires authentication.

28. What must a network engineer consider when designing a Cisco MPLS TE solution with OSPF?

The OSPF extensions and RSVP-TE must be enabled on all routers in the network.

OSPF extensions for RSVP-TE are supported in Area 1.

The OSPF extensions and RSVP-TE must be enabled on the egress routers.

OSPF extensions for RSVP-TE are implemented in Type 6, 7, and 8 LSAs.

29. Refer to the exhibit.

An administrator working for large ISP must connect its two POP sites to provide internet connectivity to its customers.

Which configuration must the administrator perform to establish an iBGP session between routers PE1 on POP site 1 and PE2 on POP site 2?

PE2#configure terminal PE2(config)#router bgp 65111 PE2(config-router)#no neighbor 172.18.10.1 shutdown PE2(config-router)#end

PE1#configure terminal PE1(config)#router bgp 65111 PE1(config-router)#no neighbor 172.19.10.10 shutdown PE1(config-router)#end

PE1#configure terminal PE1(config)#router bgp 65111 PE1(config-router)#address-family ipv4 unicast PE1(config-router-af)#neighbor 172.19.10.10 activate PE1(config-router-af)#end

PE2#configure terminal PE2(config)#router bgp 65111 PE2(config-router)#address-family ipv4 unicast PE2(config-router-af)#neighbor 172.18.10.1 activate PE2(config-router-af)#end

30. You are testing the capabilities of MPLS OAM ping.

Which statement is true?

MPLS OAM ping works solely with Cisco MPLS TE

MPLS OAM ping works solely with P2P LSPs

An LSP breakage results in the ingress MPLS router never receiving any reply

An LSP is not required for the reply to reach the ingress MPLS router

Page 4 of 12

31. Which type of attack is a Protocol attack?

HTTP flood

TFTP flood

SYN flood

Slowlorls

32. Refer To the exhibit.

Which BGP attribute should be manipulated to have CE1 use PE1 as the primary path to the Internet?

The weight attribute should be manipulated on PE1 on outbound routes advertised to CE1.

The MED should be manipulated on CE1 on inbound routes from PE1.

The local preference attribute should be manipulated on PE2 on inbound routes advertised to CE1.

The origin of all routes should be modified on each router on inbound and outbound routes advertised to CE1.

33. Which two tasks must an engineer perform when implementing LDP NSF on the network? (Choose two.)

Disable Cisco Express Forwarding.

Enable NSF for EIGR

Enable NSF for the link-state routing protocol that is in use on the network.

Implement direct connections for LDP peers.

Enable NSF for BG

34. Refer to the exhibit.

An engineer configured R6 as the headend LSR of an RSVP-TE LSP to router XR2, with the dynamic path signaled as R6-R2-R5-XR2. and set the OSPF cost of all links to 1. MPLS autotunnel backup Is enabled on all routers to protect the LSP.

Which two NNHOP backup tunnels should the engineer use to complete the implementation? (Choose two.)

The R6 backup tunnel path R6-R1-R4-R5.

The R2 backup tunnel path R2-R5 across the alternate link.

The R2 backup tunnel path R2-R1-R4-XR1-XR2.

The R6 backup tunnel path R6-R2-R5

The R6 backup tunnel path R6-R1-R2.

35. Refer to the exhibit.

ISP A provides MPLS L3VPN service to customer A with BGP as the external routing protocol. Customer A has just opened a new branch office in London and requested the service provider to implement lossless service between its two offices. The LDP is enabled over the MPLS backbone and label exchange is working normally.

Which action must the ISP engineering team take to enable the service?

Configure LDP and redistribute the route from EIGR

Configure BGP address family VPNv4.

Configure IGP and redistribute the route from BG

Configure IGP LDP synchronization

36. Refer to the exhibit:

What does this value mean when it is received in XML?

It shows the ending of the script

It indicates a break in a sequence

It indicates a value assigned by a network administrator to tag a route

It means a data field is blank

37. Refer to the exhibit.

An engineer is implementing Auto-RP and reviewing the configuration of the PE-A.

Which configuration permits Auto-RP messages to be forwarded over this interface?

PE-A(config-if)#ip pim sparse-mode

PE-A(config-if)#no ip pim bsr-border

PE-A(config-if)#ip igmp version 3

PE-A(config-if)#ip pim sparse-dense-mode

38. A network engineer is configuring a router to send multicast traffic for the 239.10.10.10 group.

Which configuration must an .... forward the traffic?

Cisco(config)# interface ethernet 1/0 Cisco(config-if)# ip igmp max-groups action replace

Cisco(config)# interface ethernet 1/0 Cisco(config-if)# ip igmp filter

Cisco(config)# interface ethernet 1/0 Cisco(config-if)# ip igmp access-group 239.10.10.10

Cisco(config)# interface ethernet 1/0 Cisco(config-if)# ip igmp join-group 239.10.10.10

39. What causes multicast traffic to permanently stay on the shared tree and not switch to the source tree?

The SPT threshold is set to infinity.

The RP IP address is configured incorrectly.

The RP announcements are being filtered.

SSM range is being used.

40. An engineer a cisco MPLS tunnel to improve the streaming experience for the clients of a video -on-demand server.

Which action must the engineer perform to configure extended discovery to support the MPLS LDP session between the headend and tailend routers?

Option A

Option B

Option C

Option D

Page 5 of 12

41. Refer to the exhibit.

A network engineer is configuring router RB to secure BGP advertisements against route hijacking activity. RB must validate all prefixes that it receives from origin AS 200 before installing them in the BGP route table.

Which configuration meets the requirement?

RB(config)# router bgp 100 RB(config-router)# address-family ipv4 unicast RB(config-router-af)# bgp bestpath origin-as use validity

RB(config-bgp)# router bgp 100 RB(config-bgp)# bgp origin-as validation signal ibgp RB(config-bgp)# bgp bestpath origin-as allow invalid

RB(config-bgp)# router bgp 100 RB(config-bgp)# bgp origin-as validation time off

RB(config)# router bgp 100 RB(config-router)# address-family ipv4 unicast PB(config-router-af)# bgp origin-as validation enable

42. Refer to the exhibit:

Which purpose of implementing NSF with this configuration is true?

The router uses NSF to load balance traffic between two links, with the primary link alternating every 90 seconds

The router uses NSF to reduce neighbor-relationship downtime during RP switchover

The router uses NSF to load balance traffic on a routed EtherChannel

The router uses NSF to handle RP switchover while allowing neighbor relationships to remain up

43. Refer to the exhibit.

An ISP provides shared VoIP Extranet services to a customer in VRF-100 with these settings:

✑ The VoIP services are hosted in the 198.19.1000/24 space.

✑ The customer has been assigned the 198.18.10/29 IP address bloc*.

✑ VRF-100 is assigned Import and export route target 85010:100.

Which configuration must the engineer Apply to PE-1 to provision VRF-100 and provide access to the shared services?

vrf definition VRF-100 rd 172.17.255.1:100 ! address-family ipv4 export map VRF-100-EXPORT import map VRF-100-IMPORT exit-address-family ! route-map VRF-100-EXPORT permit 10 match ip address prefix-list VRF-100-ALLOWED-EXPORT set extcommunity rt 65010:100 65010:2999 route-map VRF-100-EXPORT permit 20 set extcommunity rt 65010:100 ! route-map VRF-100-IMPORT permit 10 match extcommunity VRF-100-RT SHARED-SERVICES ! ip extcommunity-list standard SHARED-SERVICES permit rt 65010:1999 ip extcommunity-list standard VRF-100-RT permit rt 65010:100 ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29

vrf definition VRF-100 rd 172.17.255.1:100 ! address-family ipv4 export map VRF-100-EXPORT route-target import 65010:100 route-target import 65010:2999 exit-address-family ! route-map VRF-100-EXPORT permit 10 match ip address prefix-list VRF-100-ALLOWED-EXPORT set extcommunity rt 65010:100 65010:1999 route-map VRF-100-EXPORT permit 20 set extcommunity rt 65010:100 ! ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29

vrf definition VRF-100 rd 172.17.255.1:100 ! address-family ipv4 export map VRF-100-EXPORT route-target import 65010:100 route-target import 65010:1999 exit address-family ! route-map VRF-100-EXPORT permit 10 match ip address prefix-list VRF-100-ALLOWED-EXPORT set extcommunity rt 65010:100 65010:2999 route-map VRF-100-EXPORT permit 20 set extcommunity r 65010:100 ! ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29

vrf definition VRF-100 rd 172.17.255.1:100 ! address-family ipv4 route-target export 65010:100 route-target export 65010:1999 route-target import 65010:100 route-target import 65010:2999 exit-address-family

44. Which MPLS design attribute can you use to provide Internet access to a major customer through a separate dedicated VPN?

The customer that needs the Internet access service is assigned to the same RTs as the Internet gateway

The Internet gateway inserts the full Internet BGP routing table into the Internet access VPN

The Internet gateway router is connected as a PE router to the MPLS backbone.

The CE router supports VRF-Ute and the full BGP routing table.

45. Refer to the exhibit:

An engineer is preparing to implement data plane security configuration.

Which statement about this configuration is true?

Router 1 drops all traffic with a local-preference set to 150

All traffic is dropped

All traffic to 192.168.1.0/24 is dropped

Router 1 and Router 2 advertise the route to 192.0.2.0/24 to all BGFD peers.

46. Refer to the exhibit an engineer working for a private telecommunication company with an employee Id: 4065:96:080 upgrades the WAN link between routers ASBR-101 and ASBR-201 to 1Gb by Installing a new physical connection between the Gi3 Interfaces.

Which BGP attribute must the engineer configure on ASBR-201 so that the existing WAN link on Gi2 Is maintained as a backup?

Option A

Option B

Option C

Option D

47. What Is one of the differences between Ansible and Chef?

Ansible uses YAML and Chef uses Ruby.

Chef requires the use of Windows in the environment and Ansible requires Linux.

Chef is highly scalable and Ansible is highly secure.

Ansible uses Ruby and Chef uses Python.

48. Refer to the exhibit:

An engineer is preparing to implement data plane security configuration.

Which statement about this configuration is true?

Router 2 must configure a route to null 0 for network 192 168.1 0/24 for the RTBH implementation to be complete.

Router 1 is the trigger router in a RTBH implementation.

Router 1 must be configured with uRPF for the RTBH implementation to be effective.

Router 2 is the router receiving the DDoS attack

49. Refer to the exhibit.

AN engineer is configuring segment routing on an ISP to simplify traffic engineering and management across network domains.

What should the engineer do to complete the implementation of segment routing?

OSPF must be configured with wide area metrics to support routing.

The segment will run without any further configuration.

Area authentication must be enable before segment routing will run.

Area Authentication must be enable before segment routing will run.

50. Refer to the exhibit

A network engineer is in the process of implementing IS-IS Area 1 and Area 2 on this network to segregate traffic between different segments of the network. The hosts in the two new areas must maintain the ability to communicate with one another In both directions.

Which additional change must be applied?

Reconfigure either R3 or R4 as a Level 1/Level 2 router.

Reconfigure routers R1, R2 R5. and R6 as Level 1/Level 2 routers.

Reconfigure routers R2 and R5 as Level 1/Level 2 routers.

Reconfigure routers R4, R5 and R6 as Level 1 routers

Page 6 of 12

51. A network engineer must implement SNMPv2 with these parameters

✑ Enable SNMP community string C1sc0 with read-only permissions.

✑ Enable interface index persistence.

✑ Restrict the SNMP community to only the monitoring server with IP address 198.18 19 100/32.

✑ Provide view-only access to ospflfEntry and ospfNbrEntry.

Which configuration must the engineer apply?

A)

Option A

Option B

Option C

Option D

52. Refer to the exhibit.

A Cisco engineer is implementing gRPC dial-out on an ASR. Receiver 192.168 1.1 will be assigned one of the subscriptions, and it will manage the ASR.

Which command is needed to complete the router configuration?

protocol grpc

protocol all

protocol tcp

protocol any

53. An engineer is trying to implement BGP in a multihomed architecture.

What must the engineer configure to influence inbound path selection?

A route map with WEIGHT attribute to control the inbound traffic.

An offset list to set the metric for routes received from neighboring autonomous systems.

An access list to identify traffic and enable it on both of the provider-facing interfaces.

A route map with AS_PATH attribute to control the inbound traffic.

54. Refer to the exhibit.

An engineer started to configure a router for OSPF.

Which configuration must the engineer perform on the router without changing any interface configuration so that the router establishes an OSPF neighbor relationship with its peer?

router(config)# router ospf 11router(config-if)# no passive-interface ethernet 1/1

router(config)# interface ethernet 1/1router(config-if)# no shutdown

router(config)# interface ethernet 1/1router(config-if)# ip ospf hello-interval

router(config)# interface ethernet 1/1router(config-if)# ip ospf priority 0

55. While implementing TTL security, an engineer issues the PE(config-router-af)#neighbor 2.2.2.2 ttl-security hops 2 command. After issuing this command.

Which BGP packets does the PE accept?

from 2.2.2.2, with a TTL of less than 2

to 2.2.2.2, with a TTL of less than 253

from 2.2.2.2, with a TTL of 253 or more

to 2.2.2.2, with a TTL of 2 or more

56. The service provider is serving hosts with two different multicast streams from source X and source Y. Source X is multicast group 224.0.0.0/8, and source Y is multicast group 226.0.0.0/8. Multicast source X should send its stream through bidirectional RP address 10.20.1.1, and multicast source Y should send its stream through RP address 10.20.2.1.

Which configuration meets these requirements?

Enable ip pim ssm default on RA and R

Add ip pim bidir-enable in global mode on R

Permit the source X and source Y IP addresses in the access list on R

Set PIM sparse mode with a static RP address of 10.20.2.1 on RA and R

57. Refer to the exhibit.

Which show command should be implemented to display per-interface statistics about uRPF drops and suppressed drops?

show ip traffic

showip interface

show cef interface

show ip interface brief

58. Refer to the exhibit.

ASN 64501 currently reaches the networks under the 10.0.0.0/8 prefix via the North_B router.

Which is a slow backup link. The administrator of ASN 64502 wants traffic from ASN 64501 to 10.0.0.0/8 to travel via the primary link North_A.

Which change to the network configuration accomplishes this task?

Set a higher local preference between North_A and South_A

Advertise the 10.0.0.0/8 prefix through North_B and specific subnets through North_A

Set a Lower Weight value for incoming traffic on North_A

Set a lower MED between North_B and South_B

59. DRAG DROP

Drag and drop the OSs from the left onto the correct deceptions on the right.

60. Why do Cisco MPLS TE tunnels require a link-state routing protocol?

Link-state routing protocols use SPF calculations that the tunnel endpoints leverage to implement the tunnel

The link-state database provides a data repository from. Which the tunnel endpoints can dynamically select a source ID

The tunnel endpoints can use the link-state database to evaluate the entire topology and determine the best path

The link state database provides segmentation by area. Which improves the path-selection process

Page 7 of 12

61. Form the neighbor relationship using a BGP multihop mechanism. Use minimal values to solve the issue.

62. Refer to the exhibit.

EIGRP a running across the core lo exchange Internal routes, and each router maintains 6GP adjacency with the other routers on the network. An operator has configured static routes on the edge routers R1 and R2 for IP address 10.0.1.1..

Which is used as a black hole route as shown.

Which configuration should the operator Implement to me management rouler to create a route map that will redistribute lagged static routes into BGP and create a static route to blackhole traffic with tag 777 that Is destined to server at 192.168.10.100?

Option A

Option B

Option C

Option D

63. DRAG DROP

Drag and drop the functionalities from the left onto the target fields on the right.

64. An engineer is implementing IGMP with SSM on a multicampus network that supports video streaming.

Which task must the engineer perform as part of the process?

Configure the network to use IGMPv3.

Configure the network to use bidirectional PI

Configure an RP that uses static assignments only.

Configure the network to use the PIM bsr-candidate

65. After implement MPLS protocol for multiple VRFs on a single Cisco device, the engineer notices all VRFs on the router still do to not LDP session protection feature enabled.

Which configuration must the engineer apply to enable the LDP session protection feature FOR LDP neighbors within each VRF?

Configure LDP session protection globally on the device only.

Configure LDP session protection globally on the device and on each neighbor that requires session protection.

Configure LDP session authentication on the device to enable LDP session protection on each VRF automatically.

Configure LDP session protection within the individual VRFs.

66. Refer to the exhibit.

While troubleshooting the OSPF adjacency between routers R1 and R2 an engineer noticed that both routers are stuck in the EXCHANGE/EXSTART state.

What should the engineer fix to solve the ongoing issue?

match IPv4 addresses

match OSPF areas

match OSPF network types

match MTU values

67. DRAG DROP

Drag and drop the characteristics from the left onto the automation tool on the right.

68. Refer the exhibit.

Users on a network connected to router R3 report slow speeds when they connect to the server connected to R2. After analyzing traffic on the network, a network engineer identified congestion on the link between R2 and R3 as the cause.

Which QoS service must the engineer implement to drop traffic on the link when it exceeds a configured threshold?

first-in, first-out

traffic shaping

class-based weighted fair queueing

traffic policing

69. ASN 65001 is peering with ASN 65002 to exchange IPv6 BGP routes. All routes that originate in ASN 65001 have a standard community value of 65001:100, and ASN 65002 is allowed to advertise only 2001 :db8:aaaa::/48.

An engineer needs to update the ASN 65001 route-filtering configuration to meet these conditions:

* Looped routes into ASN 65001 and routes that have traversed 10 or more ASNs must be denied.

* Routes accepted into ASN 65001 must be assigned a community value of 65001:200.

Which configuration must the engineer apply to the ASN 65001 border router?

A)

Option A

Option B

Option C

Option D

Option E

70. A network engineer has configured TE tunnels in the MPLS provider core.

Which two steps ensure traffic traverse? (Choose two.)

Static routes is the only option for directing traffic into a tunnel.

ECMP between tunnels allows RSVP to function correctly.

Forwarding adjacency features allows a tunnel to be Installed in the IGP table as a link.

The IGP metric of a tunnel is configured to prefer a certain path

A tunnel weight is configured in SPF database the same way as a native link.

Page 8 of 12

71. DRAG DROP

Drag and drop the methods of Cisco MPLS TE tunnel traffic assignment from the left onto their characteristics on the right.

72. DRAG DROP

Drag and drop the multicast concepts from the left onto the correct descriptions on the right.

73. An engineer working for a private service provider with employee id: 3994 37 650 is configuring a Cisco device to redistribute OSPF into BGP.

Which task enables the device to filter routes?

Configure a distribute list and associate it to the BGP peer interface

Configure a prefix list and associate it to the BGP peer interface

Configure a route map and reference it with the redistribute command

Configure an access list and reference it with the redistribute command

74. Refer to the exhibit.

What reestablishes the OSPF neighbor relationship between Router 1 and Router 2?

authentication is added to the configuration

correct wildcard mask is used on Router 2

OSPF process IDs match

hello intervals match

75. Refer to the exhibit:

Which effect of this configuration is true?

it creates a pseudowire class named Cisco

It enables tagging for VLAN 12 on the interface

It enables MPLS on the interface

It enables AToM on interface gigabitethemet1/0

76. A network engineer is testing an automation platform that interacts with Cisco networking devices via NETCONF over SSH.

In accordance with internal security requirements:

NETCONF sessions are permitted only from trusted sources in the 172.16.20.0/24 subnet.

CLI SSH access is permitted from any source.

Which configuration must the engineer apply on R1?

configure terminal hostname R1 ip domain-name mydomain.com crypto key generate rsa ip ssh version 1 access-list 1 permit 172.16.20.0 0.0.0.255 netconf ssh acl 1 line vty 0 4 transport input ssh end

configure terminal hostname R1 ip domain-name mydomain.com crypto key generate rsa ip ssh version 2 access-list 1 permit 172.16.20.0 0.0.0.255 access-list 1 permit any netconf ssh line vty 0 4 access-class 1 in transport input ssh end

configure terminal hostname R1 ip domain-name mydomain.com crypto key generate rsa ip ssh version 1 access-list 1 permit 172.16.20.0 0.0.0.255 access-list 2 permit any netconf ssh line vty 0 4 access-class 2 in transport input ssh end

configure terminal hostname R1 ip domain-name mydomain.com crypto key generate rsa ip ssh version 2 access-list 1 permit 172.16.20.0 0.0.0.255 netconf ssh acl 1 line vty 0 4 transport input ssh end

77. A network architect décides to expand the scope of the multicast deployment within the company network the network is already using PlM-SM with a static RP that supports a high-bandwidth. video-based training application that s heavily used by the employees, but excessive bandwidth usage is a concern.

How must the engineer update the network to provide a more efficient multicast implementation'?

Configure IGMP to manage the multicast hosts on each LAN

implement BSR to support dynamic RP notification.

Deploy ICMP to Improve multicast reachability across the network using static R

Implement STP to improve switching performance for multicast data.

78. Which two IS-IS parameters must match before two Level 2 peers can form an adjacency? (Choose two)

authentication settings

area ID

system ID

MTU

hello timer setting

79. A new PE router is configured to run OSPF as an IGP with LDP on all interfaces. The engineer is trying to prevent black holes after convergence when the PERSON device loses an LDP session with other PE routers.

Which action must the engineer take to implement LDP session protection on a new PE router?

Configure the mpls ldp session protection and mpls label protocol ldp commands on the interfaces on the new PE router that connect to the CENTER routers.

Configure the mpls ldp discovery targeted-hello accept and mpls ldp session protection commands on the interfaces on the new PE router that connect to the CE routers.

Configure the new PE router with the mpls ldp session protection command and on neighboring routers that connect to this new PE router.

Configure the new PE router with the mpls ldp session protection command on interfaces with directly connected neighbors.

80. A network operator working for a private outsourcing company with an employee id: 4261:72:778 needs to limit the malicious traffic on their network.

Which configuration must the engineer use to implement URPF loose mode on the GigabitEthernet0/1 interface?

router(config)# interface gigabitethernet0/1 router(config-if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify unicast source reachable-via any router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via any

router(config)# interface gigabitethernet0/1 router(config-if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify unicast source reachable-via rx router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via rx

router(config)# interface gigabitethernet0/1 router(config if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify unicast source reachable-via rx router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via any

Page 9 of 12

81. Refer to the exhibit:

Assume all other configurations are correct and the network is otherwise operating normally.

Which conclusion can you draw about the neighbor relationship between routers R1 and R2?

The neighbor relationship will be up only if the two devices have activated the correct neighbor relationships under the IPv4 address family

The neighbor relationship is down because R1 believes R2 is in AS 65012.

The neighbor relationship is up

The neighbor relationship is down because the loco I-as value for R2 is missing in the R1 neighbor statement

82. Which type of attack is an application attack?

ping of death

ICMP (ping) flood

HTTP flood

SYN flood

83. DRAG DROP

Drag and drop the OSPF area types from the left onto the correct statements on the right

84. Refer to the exhibit.

Users in AS 65010 are connected with the application server in AS 65050 with these requirements:

AS 65010 users are experiencing latency and congestion to connect with application server 172.16.50.10.

AS 65030 must be restricted to become Transient Autonomous System for traffic flow.

Links connected to AS 65020 and AS 65040 are underutilized and must be used efficiently for traffic.

Which two configurations must be implemented to meet these requirements? (Choose two.)

Apply the AS-Path route-map policy for traffic received from R3.

Configure the route map to prepend the AS-Path attribute for R5-R3 BGP peering.

Apply the MED route-map policy for traffic received from R4.

Configure a higher Local preference for R5-R4 BGP peering.

Configure the route map to set the MED 50 attribute for R5-R4 BGP peering.

85. Which two actions describe ISP delegation to PCE servers? (Choose two)

adding a new PCE server with lower precedence than the primary PCE

changing the precedence of any of the PCE servers

removing TE re-optimization timer timeouts

entering the mpls traffic-eng reoptimize command

adding a new PCE server with higher precedence than the primary PCE

86. Refer to the exhibit:

When implementing an LDP protocol, an engineer experienced an issue between two directly connected routers and noticed that no LDP neighbor exists for 1.1.1.1.

Which factor should be the reason for this situation?

LDP needs to be enabled on the R2 physical interface

R2 does not see any hellos from R1

LDP needs to be enabled on the R2 loopback interface

R2 sees the wrong type of hellos from R1

87. Refer to the exhibit.

What does this REST API script configure?

application profile

VRF

public community string for SNMP

interface with IP address 192.168.0.1

88. What are two factors to consider when implementing NSR High Availability on an MPLS PE router? (Choose two.)

It consumes more memory and CPU resources than NSF

It operates normally without NSR support on the PE peers.

It requires all PE-CE sessions to support NSR

It requires routing protocol extensions

It cannot sync state information across redundant RPs

89. Which configuration enables BGP FlowSpec client function and installation of policies on all local interfaces?

A)

Option A

Option B

Option C

Option D

90. Which two routing protocols support Cisco MPLS TE tunnels? (Choose two.)

IS-IS

RIP

BGP

OSPF

EIGRP

Page 10 of 12

91. How does Inter-AS Option-A function when two PE routers in different autonomous systems are directly connected?

The two routers share all Inter-AS VPNv4 routes and redistribute routes within an IBGP session to provide end-to-end reach.

The two routers establish an MP-EBGP session to share their customers' respective VPNv4 routes.

The two routers treat one another as CE routers and advertise unlabeled IPv4 routes through an EBGP session.

The two routers share VPNv4 routes over a multihop EBGP session and set up an Inter-AS tunnel using one another's label.

92. When Cisco lOS XE REST API uses HTTP request methods what is the purpose of a PUT request?

retrieves the specified resource or representation

submits data to be processed to the specified resource

updates the specified resource with new information

creates a new resource

93. Refer to the exhibit.

ISP ASN 65100 provides Internet services to router CE-1 and receives customer prefix 198.18.18.0/24 via eBGP. An administrator for the ISP is now provisioning RTBH services to provide on-demand data-plane security for the customer’s IP space.

Which route-map configuration must the administrator apply to router RTBH-1 to complete the implementation of RTBH services to CE-1?

route-map RTBH-CUSTOMER-IN permit 10 description AS65001 match ip address prefix-list AS65001-PREFIXES match community 99 set local-preference 200 set community no-export additive set ip next-hop 192.168.255.255 route-map RTBH-CUSTOMER-IN deny 65535 description DEFAULT DENY

route-map RTBH-CUSTOMER-IN permit 10 description AS65001 match ip address prefix-list AS65001-PREFIXES match community 99 set local-preference 200 set community local-as additive set ip next-hop 192.168.255.255 route-map RTBH-CUSTOMER-IN deny 65535 description DEFAULT DENY

route-map RTBH-CUSTOMER-IN permit 10 description AS65001 match ip address prefixlist AS65001-PREFIXES match community 99 set local-preference 200 set community no-advertise additive set ip next-hop local-address route-map RTBH-CUSTOMER-IN deny 65535 description DEFAULT DENY

route-map RTBH-CUSTOMER-IN permit 10 description AS65001 match ip address prefix-list AS65001-PREFIXES match community 99 set local-preference 200 set community no-advertise additive set ip next-hop 192.168.255.255 route-map RTBH-CUSTOMER-IN deny 65535 description DEFAULT DENY

94. Which two features describe TI-LFA? (Choose two.)

TI-LFA uses PQ or P and Q nodes on the post-convergence path to compute the backup path.

Post-convergence, TI-LFA considers the next-hop neighbor to calculate the backup repair path.

TI-LFA works with point of local repair when the PQ node supports only LDP capability.

Unlike RLFA, TI-LFA works without the PQ node and provides double segment failure protection.

TI-LFA leverages the post-convergence path that carries data traffic after a failure.

95. Refer to the exhibit:

Which statement describes the effect of this configuration?

It applies a service policy to all interfaces remarking HTTP traffic

It creates an ACL named WEB that filters HTTP traffic.

It matches HTTP traffic for use in a policy map

It modifies the default policy map to allow all HTTP traffic through the router

96. Which technology enables the addition of new wavelengths in a fiber-optic network?

IPoDWDM

CWDM

DWDM

ROADM

97. Refer to the exhibit.

A network operator working for a private telecommunication company with an employee id: 7138: 13:414 just added new users to the network.

Which resides in VLANs connected to routers R1 and R4. The engineer now must configure the network so that routers R1 and R4 share routes to the VLANs, but routers R2 and R3 are prevented from including the routes in their routing tables.

Which configuration must the engineer apply to R4 to begin implementing the request?

pseudowire -class ciscotest encapsulation mpls interface gigabitethernet 1/0/1 connect neighbor 192.168.1.1 101 pw-class cisco

pseudowire -class ciscotest encapsulation mpls interface gigabitethernet 1/0/1 xconnect 192.168.1.1 101 pw-class ciscotest

pseudowire-class ciscotest encapsulation mpls service-policy output ciscotest

interface serial 2/0/0 frame-relay encapsulation ip address 192.168.1.4 255.255.255.0 service-policy output ciscotest

98. Refer to the exhibit:

Which statement supports QPPB implementation?

QoS policies are identified in the MPLS forwarding table

QoS policies rely exclusively on BGP attributes to manipulate traffic

QoS policies use BGP to gain full coverage on the network.

QPPB policies affect only egress traffic

99. Refer to the exhibit.

What is the purpose of this JSON script?

It changes the existing password.

It updates a user authentication record.

It deletes a user’s authentication record.

It confirms a user’s login credentials.

100. Refer to the exhibit.

An engineer is implementing BGP selective prefix suppression. The router must advertise only 10.16.4.0/24,10.16.5.0/24. and summarized route 10.16.0.0/21. and suppress 10.16.6.0/24.

Which configuration must the engineer apply to the router?

A)

Option A

Option B

Option C

Option D

Page 11 of 12

101. Which utility must be used to locate MPLS faults?

QoS

MPLS LSP ping

MPLStraceroute

EEM

102. Refer to the exhibit.

A network engineer must meet these requirements to provide a connects, solution:

✑ The customer connected to Area 2 needs to access the application in Area 1 on the 10.10.10.0/24 subnet

✑ The Customer must not have access to the 20.10 30.0/24 subnet.

✑ The service provider must make sure that the Area 2 routing database limits the number of IP addresses in the routing table

Which two configurations must be implemented to meet the requirements? (Choose two)

Set a tag value of 200 to match the summary address 10.0.0/16 on R2.

Set a tag value of 200 to match the summary address 10.0.0.0/16 on R3.

Apply the route map for tag 200 and leak Level 2 routes into Level 1 Area 2 on R3

Apply the route map for tag 200 and teak Level 2 routes into Level 1 Area 2 on R4.

Set a tag value of 200 to match the summary address 10.0.0./16 on R1.

103. How do intent APIs make it easier for network engineers to deploy and manage networks?

Option A

Option B

Option C

Option D

104. An engineer must apply an 802.1ad-compliant configuration to a new switchport with these requirements:

✑ The switchport must tag all trame when it enters the port

✑ The switchport Is expected to provide the same level of service to traffic from any customer VLAN

Which configuration must the engineer use?

interface GigabitEthernet1/0/1 switchport mode trunk switchport trunk encapsulation dot1q encapsulation ISL bridge-domain 12

interface GigabitEthernet1/0/1 ethernet dot1ad uni c-port service instance 12 encapsulation dot1q rewrite ingress tag push dot1ad 21 symmetric bridge-domain 12

interface GigabitEthernet1/0/1 ethernet dot1ad uni s-port service instance 12 encapsulation default rewrite ingress tag push dot1ad 21 symmetric bridge-domain 12

interface GigabitEthernet1/0/1 ethernet dot1ad nni service instance 12 encapsulation dot1ad bridge-domain 12

105. Refer to the exhibit:

If router RA is configured as shown, Which IPv4 multicast address space does it use?

224.0. 0.0/8

225.0. 0.0/8

232.0. 0.0/8

239.0. 0.0/8

106. Refer to the exhibit:

A network operator working for service provider with an employee id 3715 15:021 applied this configuration to a router.

Which additional step should the engineer use to enable LDP?

Disable Cisco Express Forwarding globally

Delete the static router ID

Enable MPLS LDP on the interface

Configure the both keyword to enable LDP globally

107. Refer to the exhibit.

A network administrator implemented MPLS routing between routers R1, R2, R3, and R4. AToM is configured between R1 and R4 to allow Layer 2 traffic from hosts on RA1 and RA2. A targeted MPLS session is established between R1 and R4.

Which additional action must the administrator take on all routers so that LDP synchronization occurs between connected LDP sessions?

Disable the MPLS LDP IGP sync holddown.

Configure OSPF or IS-IS as the routing protocol.

Configure EIGRP as the routing protocol using stub areas only.

Enable MPLS LDP sync delay timers.

108. DRAG DROP

Drag and drop the functions from the left onto the correct Path Computation Element Protocol roles on the right

109. TION NO: 91

Refer to the exhibit:

R1 and R2 are directly connected with Fast Ethernet interfaces and have the above configuration applied OSPF adjacency is not formed. When the debug ip ospf hello command is issued on R1. these log messages are seen.

Which command can be configured on routers R1 and R2 on fO/O interfaces to form OSPF adjacency?

ip ospf network non-broadcast

ip ospf network point-to- multipoint non-broadcast

ip ospf network point-to-point

ip ospf network broadcast

110. Which statement about Network Services Orchestrator (NSO) is true?

It is used only in service provider environments

It can be used only with XML coding

It uses YANG modeling language to automate devices

It must use SDN as an overlay for addressing

Page 12 of 12

111. How much must the MTU be increased when configuring the 802.1q VLAN tag?

2 bytes

4 bytes

8 bytes

12 bytes

112. An engineer working for a private telecommunication company with an employe id:3948:613 needs to limit the malicious traffic on their network.

Which configuration must the engineer use to implement URPF loose mode on the GigabitEthernet0/1 interface?

A)

Option A

Option B

Option C

Option D

113. After troubleshooting multiple outages on the network due to repeated configuration errors, the network architect asked an engineer to enable NETCONF to facilitate future configurations. The configuration must enable syslog messaging to record NETCONF notifications from each of the numerous devices on the network.

Which configuration must the engineer apply?

username cisco test taker privilege 15 password 0 cisco test aaa new-model aaa authorization exec default local snmp-server community cisco test RW netconf-yang cisco-ia snmp-community-string ciscotest logging history warnings

username cisco test taker privilege 15 password 0 ciscotest aaa new-model aaa authorization exec default local snmp-server community ciscotest RW netconf-yang cisco logging history critical

netconf-yang username ciscotesttaker privilege 15 password 0 ciscotest aaa new-model aaa authorization exec default local snmp-server community ciscotest RW netconf-yang cisco-ia snmp-community-string ciscotest logging history debugging

netconf-yang username ciscotesttaker privilege 15 password 0 ciscotest snmp-server community ciscotest RW netconf-yang cisco-ia snmp-community-string ciscotest logging history informational

Facebook Twitter LinkedIn Google + Email