350-501 SPCOR:Implementing and Operating Cisco Service Provider Network Core Technologies

Update Date:2026年4月18日

Questions and Answers: 432 Q&As

Name

The administrator of a small company network notices that intermittent network issues occasionally cause inbound notifications to its SNMP servers to be lost. Which configuration must the administrator apply so that the SNMP servers acknowledge the notifications that they receive?

A. snmp-server community ciscotest rw 10

B. snmp-server host tests.cisco.com public snmp-server community ciscotest rw 10

C. snmp-server enable traps bgp snmp-server host 192.169.2.1 Informs

D. snmp-server enable traps snmp

None

Which show command should be implemented to display per-interface statistics about uRPF drops and suppressed drops?

!
configure terminal
ip cef distributed

interface gigabitethernet 1/0
!
ip cef distributedip verify unicast reverse-path 12
!

A. show ip traffic

B. showip interface

C. show cef interface

D. show ip interface brief

None

A network engineer is implementing multicast services on CPE-1 and CPE-2. CPE-1 must be configured as the preferred IGMP querier for the LAN segment. PIM-SM must be implemented on the LAN interfaces with an IGMP version that supports (*, G) joins only. Which configurations must the engineer implement on CPE-1 and CPE-2?

On CPE-1:

interface GigabitEthernet0/1

ip address 10.0.12.129 255.255.255.128

ip pim sparse-mode

ip igmp version 2

On CPE-2:

interface GigabitEthernet0/1

ip address 10.0.12.130 255.255.255.128

ip pim sparse-mode

ip igmp version 2

On CPE-1:

interface GigabitEthernet0/1

ip address 10.0.12.130 255.255.255.128

ip pim sparse-mode

ip igmp version 3

On CPE-2:

interface GigabitEthernet0/1

ip address 10.0.12.129 255.255.255. 128

ip pim sparse-mode

ip igmp version 3

On CPE-1:

interface GigabitEthernet0/1

ip address 10.0.12.130 255.255.255.128

ip pim sparse-mode

ip igmp version 2

On CPE-2:

interface GigabitEthernet0/1

ip address 10.0.12.129 255.255.255.128

ip pim sparse-mode

ip igmp version 2

On CPE-1:

interface GigabitEthernet0/1

ip address 10.0.12.129 255.255.255.128

ip pim sparse-mode

ip igmp version 3

On CPE-2:

interface GigabitEthernet0/1

ip address 10.0.12.130 255.255.255.128

ip pim sparse-mode

ip igmp version 3

None

How does Inter-AS Option-A function when two PE routers in different autonomous systems are directly connected?

A. The two routers share all Inter-AS VPNv4 routes and redistribute routes within an IBGP session to provide end-to-end reach.

B. The two routers establish an MP-EBGP session to share their customers' respective VPNv4 routes.

C. The two routers treat one another as CE routers and advertise unlabeled IPv4 routes through an EBGP session.

D. The two routers share VPNv4 routes over a multihop EBGP session and set up an Inter-AS tunnel using one another's label.

None

After troubleshooting multiple outages on the network due to repeated configuration errors, the network architect asked an engineer to enable NETCONF to facilitate future configurations. The configuration must enable syslog messaging to record NETCONF notifications from each of the numerous devices on the network. Which configuration must the engineer apply?

username cisco test taker privilege 15 password 0 cisco test

aaa new-model

aaa authorization exec default local

snmp-server community cisco test RW

netconf-yang cisco-ia snmp-community-string ciscotest

logging history warnings

username cisco test taker privilege 15 password 0 ciscotest

aaa new-model

aaa authorization exec default local

snmp-server community ciscotest RW

netconf-yang cisco

logging history critica

netconf-yang

username ciscotesttaker privilege 15 password 0 ciscotest

aaa new-model

aaa authorization exec default local

snmp-server community ciscotest RW

netconf-yang cisco-ia snmp-community-string ciscotest

logging history debugging

netconf-yang

username ciscotesttaker privilege 15 password 0 ciscotest

snmp-server community ciscotest RW

netconf-yang cisco-ia snmp-community-string ciscotest

logging history informationa

None

What is a constraint of Cisco MPLS TE tunnel configurations?

A. Tunnels cannot span multiple OSPF areas.

B. With ISIS as an IGP. only older-style metrics are used.

C. Tunnels cannot be configured over IP unnumbered links.

D. QoS-aware tunneling is not supported.

None

Which statement about this configuration is true"?

A. It requires an explicit Cisco MPLS TE path to be configured for the tunnel to run

B. It requires OSPF to also be running to have optimized Cisco MPLS TE tunnels

C. It requires a dynamic Cisco MPLS TE path to be configured for the tunnel to run

D. It is the configuration for the head-end router of a Cisco MPLS TE tunnel with segment routing

None

An engineer at a new ISP must configure many Cisco devices in the data center. To make the process more efficient, the engineer decides to automate the task with a REST API. Which action does this JSON script automate?

A. Configure the IP address for the existing loopback interface

B. Configure a physical interface on the router with an IP address and then create a loopback interface.

C. Configure a physical interface on the router with an IP address.

None

The network engineer who manages ASN 65001 is troubleshooting suboptimal routing to the 198.18.15.0/24 prefix. According to the network requirements: Routing to IP destinations in the 198.18.15.0/25 block must be preferred via the EDGE-1 PE. Routing to IP destinations in the 198.18.15.128/25 block must be preferred via the EDGE-2 PE. More specific prefixes of the 198.18.15.0/24 block must not be advertised beyond the boundaries of ASN 64611. Routing to 198.18.15.0/24 must be redundant in case one of the uplinks on INT-R1 fails. Which configuration must the network engineer implement on INT-R1 to correct the suboptimal routing and fix the issue?

configure terminal

route-policy ASN65001-SPECIFIC-OUT

if destination in (198.18.15.0/25) then

set community (no-export, peeras:65001)

done

endif

if destination in (198.18.15.0/24) then

prepend as-path 65001 3

done

endif

drop

end-policy

router bgp 65001

neighbor 100.65.0.1

address-family ipv4 unicast

route-policy ASN65001-SPECIFIC-OUT out

end

configure terminal

route-policy ASN65001-SPECIFIC-OUT

if destination in (198.18.15.0/25) then

set community (internal, peeras:65001)

done

endif

if destination in (198.18.15.0/24) then

done

endif

drop

end-policy

router bgp 65001

neighbor 100.65.0.1

address-family ipv4 unicast

route-policy ASN65001-SPECIFIC-OUT out

end

configure terminal

route-policy ASN65001-SPECIFIC-OUT

if destination in (198.18.15.0/25) then

set community (no-advertise, peeras:65001)

done

endif

if destination in (198.18.15.128/25) then

prepend as-path 65001 3

done

endif

drop

end-policy

router bgp 65001

neighbor 100.65.0.1

address-family ipv4 unicast

route-policy ASN65001-SPECIFIC-OUT out

end

configure terminal

route-policy ASN65001-SPECIFIC-OUT

if destination in (198.18.15.0/25) then

set community (no-export, peeras:65001)

done

endif

if destination in (198.18.15.128/25) then

prepend as-path 65001 3

done

endif

drop

end-policy

router bgp 65001

neighbor 100.65.0.1

address-family ipv4 unicast

route-policy ASN65001-SPECIFIC-OUT in

end

None

10.

Simulation 6

See the solution below:

router bgp 100

address-family ipv4

nei 172.16.0.2 route-map R1-TO-R2 in

network 10.1.1.1 mask 255.255.255.255

copy run start

router bgp 200

address-family ipv4

network 10.2.2.2 mask 255.255.255.255

nei 172.16.0.1 route-map R2-TO-R1 in

copy run start

None

11.

What does the number 2 mean in the configuration?

snmp-server community ciscotest ro 2

A. It dictates the number of sessions that will be open with the SNMP manager

B. It represents the version of SNMP running.

C. It indicates two SNMP managers are able to read and write with the agent using community string ciscotest.

D. It is the numeric name of the ACL that contains the list of SNMP managers with access to the agent.

None

12.

Drag and drop the functionalities from the left onto the target fields on the right.

Answer:

NAT64

6RD

NAT 44

MAP-T

DS Lte

NAT 44

NAT64

DS Lte

MAP-T

6RD

13.

Which CLI mode must be used to configure the BGP keychain in Cisco IOS XR software?

A. global configuration mode

B. routing configuration mode

C. BGP neighbor configuration

D. mode BGP address-family configuration mode

None

14.

Tier 1 ISP A is connected to small Tier 3 ISP B. The EBGP routing protocol is used for route exchange. The networking team at ISP A noticed the flapping of BGP sessions with ISP B. The team decides to Improve stability on the network by suppressing the subnet for 30 minutes when a session begins to flap. Which action must the team perform to meet this goal?

A. Implement a BGP route-penalty timer on ISP A router R1 with the bgp penalty-timer 30 250 750 15 command.

B. Implement BGP route dampening on ISP A router R1 with the bgp dampening 15 700 1500 30 command.

C. Implement BGP route suppression on ISP A router R2 with the bgp suppression 30 600 1200 30 command.

D. Implement a BGP route withdraw-delay timer on ISP B router R3 with the bgp withdraw-delay 30 15 90 30 command

None

15.

After implementing a new design for the network, a technician reviews the pictured CLI output as part of the MOP. Which two statements describe what the technician can ascertain from the ImpNull output? (Choose two.)

A. Label 0 is used for the prefix displayed but will not be part of the MPLS label stack for packets destined for 192 168.10.10.

B. Ultimate Hop Popping is in use for the prefix displayed.

C. Label 0 is used for the prefix displayed and will be part of the MPLS label stack for packets destined for 192.168.10.10

D. Penultimate Hop Popping is in use for the prefix displayed

E. Label 3 is in use for the prefix displayed and will be part of the MPLS label stack for packets destined for 192.168.10.10

16.

Routers R2 and R3 are Level 1/Level 2 IS-IS routers that redistribute 198 18.x.x/24 prefixes to routers R5 and R6 In the Level 1 area R2 Is to be the preferred router for all redistributed prefixes in the Level 1 area. Which configuration sets this preference?

A.
On R2:
configure terminal
route-map LVL2_TO_LVL1 permit 10
set metric 5
end

B.
On R2:
configure terminal
route-map LVL2_TO_LVL¹permit 10
set metric 25
end

C.
On R3:
configure terminal
route-map LVL2_TO_LVL1 permit 10
set metric 5
end

D.
On R3:
configure terminal
route-map LVL2_TO_LVL1 permit 10
set metric 25
end

None

17.

A network engineer observed congestion between routers R1 and R4, which are connected on a point-to-point link. Two servers that reside on networks on R1 and R4 generate heavy traffic between them with most traffic going from R4 to R1. To improve overall performance, the engineer wants to drop inbound packets that exceed a configured threshold,without disrupting traffic that passes from R4 to R3. Which action must the engineer take to resolve the issue?

A. Implement traffic policing to drop packets that exceed the given threshold.

B. Implement FIFO to queue excess traffic for transmission when bandwidth is available.

C. Implement traffic shaping to drop excess packets.

D. Implement a service policy in the outbound direction on each interface on the link to tag traffic exiting each router.

None

18.

What is the characteristic of the Tl-LFA?

A. It guarantees a loop-free path for all interfaces in the OSPf- super backbone .

B. It applies on each area and instance and makes all the interfaces inherit the configuration

C. It guarantees a loop-free path for all areas configured m OSPF

D. It applies only on the instance and makes at the interfaces inherit the configuration

None

19.

Which three outcomes occur if the prefix list is added to the neighbor? (Choose three)

A. 192.168 0.0/19 is denied.

B. 192.168 0.0/17 is denied.

C. 192.168 0.0/17 is permitted

D. 192.168.0.0/16 is denied

E. 192.168 0.0/16 is permitted

F. 192.168 0.0/19 is permitted

20.

A NOC engineer is configuring label-based forwarding from CSR to the EPC gateway. Cell-site operation and maintenance for IPv4 traffic between 10.20.10.1 and 192.168.10.10 is already up. CR1 and CR2 are configured as route reflectors for AG1 and AG2. Which action completes the configuration?

A. Remove address-family labeled-unicast from the BGP session-group infra on AG1 for neighborgroup core

B. Apply the BGP_Egress_Filter route policy to the BGP neighbor-group packet core on AG1.

C. Configure AG1 to allocate a label to the BGP routes that are received in the BGP session group transport.

D. Configure AG1 to allow the 300:100 and 200:100 communities in the BGP_Egress_Filter route policy

None

21.

The USER mat is connecting an application on an Internet connection in AS 100 is facing these issues:

The USER lost the connection to the application during a failure Between IG and R2.
Router R2 configuration a lost due to a power outage.
The application the USER is connecting to a hosted behind CE2.

What action resolves the issues on R3 and R4 routers?

A. Set R4 as a route reflector for R3 and CE2

B. Apply high Local Preference on R3 toward R1

C. Set R3 as a route reflector for R4 and CE1

D. Apply low Local Preference on R4 toward R2.

None

22.

Which service is a VNF role?

A. Compute

B. Network

C. Firewall

D. Storage

None

23.

Drag and drop the OSs from the left onto the correct deceptions on the right.

Answer:

IOS XR

IOS

IOS XE

IOS

IOS XE

IOS XR

提示

24.

How do intent APIs make it easier for network engineers to deploy and manage networks?

A.They alow the engineer to use a single interace as the enty point forcortol access to the entre device.

B.They pul stored SNMP data from asingle network locaton to mutpie monitong tools

C.They extend the Layer 2 intastructureand reouce the necessary number of witual connections to Layer 3 devices

D.They streamine repetove worklows and suport more efcient implementaton

None

25.

ASN 64501 currently reaches the networks under the 10.0.0.0/8 prefix via the North_B router,which is a slow backup link. The administrator of ASN 64502 wants traffic from ASN 64501 to 10.0.0.0/8 to travel via the primary link North_A. Which change to the network configuration accomplishes this task?

A. Set a higher local preference between North_A and South_A

B. Advertise the 10.0.0.0/8 prefix through North_B and specific subnets through North_A

C. Set a Lower Weight value for incoming traffic on North_A

D. Set a lower MED between North_B and South_B

None

26.

An engineer is implementing IGMP with SSM on a multicampus network that supports video streaming. Which task must the engineer perform as part of the process?

A. Configure the network to use IGMPv3.

B. Configure the network to use bidirectional PIM.

C. Configure an RP that uses static assignments only.

D. Configure the network to use the PIM bsr-candidate

None

27.

A network engineer must enable the helper router to terminate the OSPF graceful restart process if it detects any changes in the LSA. Which command enables this feature?

A. nsf ietf helper disable

B. nsf cisco enforce global

C. nsf ietf helper strict-lsa-checking

D. nsf Cisco helper disable

None

28.

an engineer working for a private telecommunication company with an employee Id: 4065:96:080 upgrades the WAN link between routers ASBR-101 and ASBR-201 to 1Gb by Installing a new physical connection between the Gi3 Interfaces. Which BGP attribute must the engineer configure on ASBR-201 so that the existing WAN link on Gi2 Is maintained as a backup?

A.
onfigure terminal
ip prefix-list ALLOWED_PREFIXES seq5 pemit 198.18.15.0/24
route-map AS65101-OUT permit 10
match ip address prefix-list ALLOWED_PREFIXES
set as-path prepend 6510165101
router bgp 65201
address-family ipv4
neighbor 10.142.20.1 route-map AS65101-OUT out
end

B.
configure terminal
ip prefix-list ALLOWED_PREFIXES seq5 permit 198.18.15.0/24
route-map AS65101-0UT permit 10
match ip address prefixlist ALLOWED_PREFIXES
set as-path prepend 6510165101

C.
Configure terminal
ip prefix-list ALLOWED_PREFIXES seq 5 permit 198.18.15.0/24
route-map AS65101-OUT permit 10
match ip address prefix-list ALLOWED_PREFIXE
Sset metric 100
router bgp 65201
address-family ipv4
neighbor 10.142.20.1 route-map AS65101-OUT out
end

D.
configure terminal
ip prefix-list ALLOWED_PREFIXES seq5 permit 198.18.15.0/24
route-map AS65101-0UT permit 10
match ip address prefix-list ALLOWED_PREFIXE
Sset metric 100
router bgp 65201
address-family ipv4
neighbor 10.142.20.5 route-map AS65101-OUT out
End

None

29.

Which the link aggregation configuration router is running on Cisco IOS XR software, which LACP interface configuration is needed to add the interface to the bundle?

!
interface Bundle-Ether1
description link-aggregation
mtu 9216
bundle minimum-active links 2
load interval 30

None

30.

Four midsize service providers provide access to different customers that use Layer 3 VPN services to enable communication across geographic regions. The service providers are connected as shown in the exhibit, and the PEs have established eBGP relationships. PE4 has an IBGP relationship with PE5. The routes that PE4 learns from PE5 must reach the other PE routers, but they are absent from the routing tables on the other PES. Which action should the engineers take to correct the problem?

A. Configure a peering between all five Pes.

B. Disable BGP synchronization on PE4.

C. Enable BOP IPv4 unicast on PE4 and PE5

D. Advertise the route targets for PE5 to the other PEs

None

31.

What causes multicast traffic to permanently stay on the shared tree and not switch to the source tree?

A. The SPT threshold is set to infinity.

B. The RP IP address is configured incorrectly.

C. The RP announcements are being filtered.

D. SSM range is being used.

None

32.

A network engineer is configuring router RB to secure BGP advertisements against route hijacking activity. RB must validate all prefixes that it receives from origin AS 200 before installing them in the BGP route table. Which configuration meets the requirement?

RB(config)# router bgp 100

RB(config-router)# address-family ipv4 unicast

RB(config-router-af)# bgp bestpath origin-as use validity

RB(config-bgp)# router bgp 100

RB(config-bgp)# bgp origin-as validation signal ibgp

RB(config-bgp)# bgp bestpath origin-as allow invalid

RB(config-bgp)# router bgp 100

RB(config-bgp)# bgp origin-as validation time off

RB(config)# router bgp 100

RB(config-router)# address-family ipv4 unicast

PB(config-router-af)# bgp origin-as validation enable

None

33.

Drag and drop the characteristics from the left onto the automation tool on the right.

ANSWER:

It is a standard data modeling language.

It sets and reads configuration data.

It develops data models.

It is the standard transport protocol forcommunicating with network devices.

It shapes state data.

It retrieves operational data.

It is a standard data modeling language.

It sets and reads configuration data.

It retrieves operational data.

34.

While an engineer deploys a new Cisco device to redistribute routes from OSPF to BGP, they notice that not all OSPF routes are getting advertised into BGP. Which action must the engineer perform so that the device allows O, OIA, OE1, and OE2 OSPF routes into other protocols?

A. Configure the device to pass only O and E2 routes through it.

B. Configure the synchronization keyword in the global BGP configuration.

C. Configure the keyword nssa in the redistribution entry.

D. Configure the keywords internal and external in the redistribution entry.

None

35.

What is a characteristics of the Pipe model for MPLS QoS?

A. The same QoS policy is applied to all customer traffic on the egress PE.

B. If the outer EXP is changed, it is copied to the DSCP value.

C. The MPLS EXP bits are set by the CE.

D. The DSCP value determines how the packet is forwarded

None

36.

With which router does IOSXRV-1 have LDP session protection capability enabled but session hold up is not active?

A. 192.168.0.1

B. 192.168.0.3

C. 192.168.0.4

D. 192.168.0.5

None

37.

A network team has failed to implement IS-IS multitopology. What is the reason for it?

A. The router did not support VRFs.

B. The routing process did not support extended metrics.

C. The router did not have Cisco Discovery Protocol and Cisco Express Forwarding disabled.

D. The routing process supported Level 1 only.

None

38.

What is the function of Cisco NFV infrastructure platform?

A. It does not have a security audit feature.

B. It does not offer high availability.

C. It offers consistent performance.

D. It offers decentralized logging.

None

39.

A network engineer is implementing a standard customer route-policy on ASBR1 with these requirements:

It must accept only customer-assigned prefixes
It must preserve customer advertised BGP communities
It must set the local-preference to 110 for all prefixes
It must attach the ORIGINATION-PE and LOCAL-CITY communities to all accepted prefixes.

Which route policy must the engineer implement on ASBR1 to satisfy the requirements?

A.
route-policy BGP-CUSTOMER-IN(SCUSTOMER_PREFIX)
if destination in $CUSTOMER_PREFIX then
done
else
drop
end if
set local-preference 110
set community ORIGINATION-PE
set community LOCAL-CITY additive
end-policy

B.
route-policy BGP-CUSTOMER-IN(SCUSTOMER_PREFIX)
if destination in $CUSTOMER_PREFIX then
pass
else
drop
end if
set local-preference 110
set community ORIGINATION-PE
set community LOCAL-CITY additive
end-policy

C.
route-policy BGP-CUSTOMER-IN(SCUSTOMER_PREFIX)
if destination in $CUSTOMER_PREFIX then
done
else
drop
end if
set local-preference 110
set community ORIGINATION-PE ADDITIVE
set community LOCAL-CITY additive
end-policy

C.
route-policy BGP-CUSTOMER-IN(SCUSTOMER_PREFIX)
if destination in $CUSTOMER_PREFIX then
pass
else
drop
end if
set local-preference 110
set community ORIGINATION-PE ADDITIVE
set community LOCAL-CITY additive
end-policy

None

40.

What is the role of NFVI?

A. domain name service

B. intrusion detection

C. monitor

D. network address translation

None

41.

A network operator must configure CSR1 interlaces GigabitEihernet2 and GigabitEthemet to rewrite VLAN tags 12 and 21 for traffic between R1 and R2 respectively. Which configurator accomplishes this task?

None

42.

A network engineer at a large ISP Is configuring telemetry streams to monitor the health status of PE routers on the network using gRPC dial-out. The PE routers are located at several data centers in different physical locations, and they are using IS-IS and BGP for routing. Which additional configuration must the engineer implement on the PE routers to meet the goal?

A.
sensor-group SGroup2
sensor-path openconfig-interfaces:interfaces/interface
!
subscription Sub3
sensor-group-id SGroup3 sample-interval 30000

B.
sensor-group SGroup2
sensor-path Cisco-IOS-XR-plat-chas-invmgr-oper:platform-inventorylracks/rack
!
subscription Sub1
sensor-group-id SGroup1 sample-interval 30000destination-id DGroup1

C.
sensor-group SGroup2
sensor-path Cisco-OS-XR-infra-statsd-oper:infra-statistics/interfacesinterface/latest/generic-counters
subscription Sub1
sensor-group-id SGroup1 sample-interval 30000destination-id DGroup1

D.
sensor-group SGroup2
sensor-path Cisco-IOS-XR-nto-misc-oper:memory-summary/nodes/node/summary
!
subscription Sub2
sensor-group-id SGroup2 sample-interval 30000destination-id DGroup2

None

43.

Drag and drop the LDP features from the left onto the correct usages on the right.

Answer：

graceful restart

IGP synchronization

session protection

targeted-hello accept

IGP synchronization

targeted-hello accept

session protection

graceful restart

提示

44.

A network engineer must implement SNMPv2 with these parameters

Enable interface index persistence.
Restrict the SNMP community to only the monitoring server with IP address 198.18 19 100/32.
Provide view-only access to ospflfEntry and ospfNbrEntry.

Which configuration must the engineer apply?

A.
Oconfigure terminal
access-list 5 permit 198.18.19.1000.0.0.0
snmp-server view BLOCKED_VIEW internet excluded
snmp-server view BLOCKED_VIEW ospflfEntry included
snmp-server view BLOCKED_VIEW ospfNbrEntry included
snmp-server community c1scO view BLOCKED_VIEW RO 5
snmp ifmib ifindex persist
end

configure terminal
access-list 5 permit 198.18.19.1000.0.0.0
snmp-server view BLOCKED_VIEW internet excluded
snmp-server view BLOCKED_VIEW ospflfEntry included
snmp-server view BLOCKED_VIEW ospfNbrEntry included
snmp-server community c1sc0 view BLOCKED_VIEW RW5
snmp ifmib ifindex persist
end

C.
configure terminal
access-list 5 permit 198.18.19.1000.0.0.0
snmp-server view BLOCKED_VIEW internet included
snmp-server view BLOCKED_VIEW ospfNbrEntry included
snmp-server community c1sc0 view BLOCKED_VIEW RO
snmp ifmib ifindex persist
end

D.
configure terminal
access-list 5 permit 198.18.19.1000.0.0.0
snmp-server view BLOCKED_VIEW internet excluded
snmp-server view BLOCKED_VIEW ospflfEntry included
snmp-server view BLOCKED_VIEW ospfNbrEntry included
snmp-server community c1sc0 view BLOCKED_VIEW ROsnmp ifmib ifindex persist
end

None

45.

Which MPLS design attribute can you use to provide Internet access to a major customer through a separate dedicated VPN?

A. The customer that needs the Internet access service is assigned to the same RTs as the Internet gateway

B. The Internet gateway inserts the full Internet BGP routing table into the Internet access VPN

C. The Internet gateway router is connected as a PE router to the MPLS backbone.

D. The CE router supports VRF-Ute and the full BGP routing table.

None

46.

Which command is used to complete this configuration for QoS class-based marking?

A. PE-A(config-pmap-c)#set dscp ef

B. PE-A(config-pmap-c)#fair-queue

C. PE-A(config-pmap-c)#random-detect

D. PE-A(config -pmap-c)#priority

None

47.

An engineer is implementing BGP selective prefix suppression. The router must advertise only 10.16.4.0/24,10.16.5.0/24. and summarized route 10.16.0.0/21. and suppress 10.16.6.0/24. Which configuration must the engineer apply to the router?

Router(config)#ip access-list standard Suppressed
Router(config-std-nacl)#permit 10.16.6.00.0.0.255
Router(config)#route-map SuppressMap
Router(config-route-map)#match ip address Suppressed

A.
Router (config)#router bgp 300
Router(config-router)#aggregate-address 10.16.6.0255.255.252.0 as-set suppress-map SuppressMap

B.
Router (config)#router bgp 300
Routerl(config-router)#aggregate-address10.16.0.0255.255.248.0aset suppress-map SuppressMap

C.
Router (config)#router bgp 300
Router(config-router)#aggregate-address 10.16.6.0255.255.255.0 as-set suppress-map SuppressMap

D.
Router (config)#outer bgp 300
Router(confgrouter)#agregate-adress10.16.0.0255.25.255.0 as-set suppress-map unSuppressMap

None

48.

What is the purpose of this JSON script?

A. It changes the existing password.

B. It updates a user authentication record.

C. It deletes a user’s authentication record.

D. It confirms a user’s login credentials.

None

49.

Router R1 and its peer R2 reside on the same subnet in the network, If does it make connections to R27

A. R1 establishes UDP connections that are authenticated with an MD5 password

B. R1 establishes TCP connections that are authenticated with a clear-text password

C. R1 establishes UDP connections that are authenticated with a clear-text password

D. R1 establishes TCP connections that are authenticated with an MD5 password

None

50.

Based on the show/ command output, which result m true after BGP session is established?

A. The IOS XR router advertises all routes to the neighbor 192.168.2.2, but it does not accept any routes from 192.168.2.2

B. The IOS XR router advertises and accepts all routes to and from eBGP neighbor 192.168.2.2

C. No routes are accepted from the neighbor 192.168.2.2, nor are any routes advertised to it

C. The IOS XR router does not advertise any routes to the neighbor 192.168.2.2,but it accepts all routes from 192.168.2.2.

None

51.

A network engineer must collect traffic statistics for an internal LAN toward the internet The sample must include the source and destination IP addresses, the destination ports, the total number of bytes from each flow using a 64-bit counter, and all transport flag information. Because of CPU limits, the flow collector processes samples that are a maximum of 20 seconds long.Which two configurations must the network engineer apply to the router? (Choose two.)

A.
collect ipy4 tcp protocol
collect ipv4 destination address
collect tcp destination-port
collect application name
collect interface output
collect ipv4 cos
match ipv4 destination
match ipv4 port
match counter packets
match flow direction
match transport tcp-flags

B.
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport destination-port
match interface output
collect ipv4 source mask
collect ipv4 source prefix
collect ipv4 destination prefix
collect ipv4 destination mask
collect transport tcp destination-port
collect counter bytes long
collect flow direction
collect transport tcp flags

C.
collect ipv4 protocol
collect ipv4 source address
collect ipv4 destination address
collect application name
collect interface output
match ipv4 source-prefixmatch ipv4 destination-prefix
match counter bytes
match flow direction
match transport tcp-flags

D.
cache-period timer active 20
data export timeout 2

E.
cache timeout active 20
template data timeout 120

52.

Which two statements about the ISIS topology are true? (Choose two.)

A. All four routers are operating as Level 1 routers only.

B. All four routers are operating as Level 2 routers only

C. All four routers are operating as Level 1-2 routers.

D. R1 and R2 are Level 2 neighbors.

E. R1 and R4 are Level 2 neighbors

53.

. A network engineer is configuring a new router for iBGP to improve the capacity of a growing network. The router must establish an iBGP peer relationship with its neighbor. The underlay network is already configured with the correct IP addresses. Which step should the engineer apply to complete this task?

A. Implement multicast routing on the router to support BGP hellos.

B. Configure the AS number for the router to share with its iBGP peers.

C. Configure the new router as an iBGP route reflector to support multiple iBGP peers.

D. Activate the BGP peers under the correct address family on the router.

None

54.

Which purpose of implementing NSF with this configuration is true?

router ospr 1
nsf ietf restart interval 90

A. The router uses NSF to load balance traffic between two links, with the primary link alternating every 90 seconds

B. The router uses NSF to reduce neighbor-relationship downtime during RP switchover

C. The router uses NSF to load balance traffic on a routed EtherChannel

D. The router uses NSF to handle RP switchover while allowing neighbor relationships to remain up

None

55.

R1 is connected to two service providers and is under a DDoS attack Which statement about this design is true if uRPF in strict mode is configured on both interfaces'?

A. R1 accepts source addresses on interface gigabitethernet0/1 that are private addresses

B. R1 permits asymmetric routing as long as the AS-RATH attribute entry matches the connected AS

C. R1 drops destination addresses that are routed to a null interface on the router

D. R1 drops all traffic that ingresses either interface that has a FIB entry that exits a different interface

None

56.

A router is configured to perform MPLS LDP graceful restart. Which three steps are included when the RP sends an LDP initialization to a neighbor to establish an LDP session? (Choose three)

A. Reconnect Timeout field

B. Learn from Neighbor (N) flag, set to 1

C. Graceful restart capability in OPEN message

D. Recovery Time field

E. Learn from Network (L.) flage, set to 1

F. Type-9 LSA

57.

The operations team for a service provider network is implementing a route map policy. OSPF area 0 should originate the default route with a type 2 metric of 2 when the application server on the connected interface (192.168.1.1) is up. Routers RL and RM have set up OSPF peering with other adjacent routers. Which action meets this requirement?

A. Apply default-information originate route-map ospf-default-route on router RL.

B. Configure distribute-list route-map ospf-default-route out on router RM.

C. Configure distribute-list route-map ospf-default-route out on router RL.

D. Apply default-information originate route-map ospf-default-route on router RM.

None

58.

An engineer must configure router R2 as the new P router in the network. Which configuration must be applied to R2 to enable LDP-IGP Sync on its L2 IS-IS adjacencies?

A. Option A

B. Option B

C. Option C

D. Option D

None

59.

What do Ansible and Salt Stack have in common?

A. They both use DSL configuration language

B. They both use YAML configuration language

C. They both have agents running on the client machine

D. They both can be designed with more than one master server

None

60.

None

61.

Which feature will an operator use while implementing MPLS TE on customer's network, to prevent an LSP from using any overseas inks?

A. bandwidth

B. affinity

C. explicit path

D. SLRG

None

62.

A network engineer is implementing BGP in AS 65101 and AS 65201. R3 sends data traffic to 192.168.1.1 /32 via the path R3-R2-R1. The traffic must travel via alternate path R6-R5 for prefix 192.168.1.1/32. Which action must be taken to meet the requirement?

A. Apply route-map HIGH-MED out on R2 for neighbor R3.

B. Apply route-map HIGH-LP in on R3 for neighbor R6

C. Apply route-map LOW-LP out on R2 for neighbor R3.

D. Apply route-map LOW-MED in on R5 for neighbor R2

None

63.

This configuration is being applied on an IOS XR router. Which statement about this configuration is true?

telemetry model-driven
sensor-group cisco
sensor-path Cisco-I0S-XR-infra-statsd-oper:infra-statistics/interfaces/interface/latest/generic-counters
commit

A. It is used to create a subscription to specify the streaming interval

B. It is used to identify traps for SNMP polling

C. It is used to identify MIB entries and has a list of YANG models

D. It is used to create a sensor-group and has a list of YANG models for streaming

None

64.

A network engineer is implementing iBGP and eBGP between AS 600 and AS 500 with these requirements:

R2 must establish eBGP peering on 192.168.3.0/30 with R5 for sending unicast and multicast traffic
R2 must wait for 30 seconds before sending BGP updates to R5 for multicast traffic.

Which action must be taken on R2 to meet the requirements?

A. Configure advertisement-interval 30 In address-family ipv4 unicast

B. Configure advertisement-Interval 30 in address-family Ipv4 multicast

C. Apply timers bgp 30 in address-family ipv4 unicast

D. Apply timers bgp 30 in address-family ipv4 multicast.

None

65.

A network operator working for service provider with an employee id 3715 15:021 applied this configuration to a router

mpls label protocol idp
mpls 1dp router-id 1oopback 0
mpls ip
ip cet

Which additional step should the engineer use to enable LDP?

A. Disable Cisco Express Forwarding globally

B. Delete the static router ID

C. Enable MPLS LDP on the interface

D. Configure the both keyword to enable LDP globally

None

66.

Drag and drop the OSPF area types from the left onto the correct statements on the right

Answer:

stub

backbone

not-so-stubby

totally stubby

not-so-stubby

totally stubby

stub

backbone

提示

67.

An engineer is preparing to implement link aggregation configuration. Which statement al about this configuration is true?

A. The switch port actively sends packets to negotiate an EtherChannel using PAgP

B. The switch port accepts LACP and PAgP packets from a connected peer and negotiate an EtherChannel using the common EtherChannel mode.

C. The switch port passively negotiates an EtherChannel if it receives PAgP packets from a connected peer

D. The switch port negotiates an EtherChannel if it receives LACP packets from a connected peer

None

68.

What Is the primary role of Ansible In a network?

A. It is used as a debugging tool for connectivity issues between the DMZ and an enterprise intranet

B. It Is used to diagnose Layer 11ssues In data centers that span more than one city block.

C. It is used to deploy IPv6 configuration is networks That are dual slack.

D. It is used as a network automation provisioning and configuration tool.

None

69.

Which two routing protocols support Cisco MPLS TE tunnels? (Choose two.)

A. IS-IS

B. RIP

C. BGP

D. OSPF

E. EIGRP

70.

Which module refers to the network automation using Ansible?

A. the iosxr_system module to collect facts from remote devices

B. the iosxr_user module to manage banners for users in the local database

C. the losxr_logging module to run debugging for seventy levels 2 to 5

D. the iosxr_command module to issue run commands on remote devices

None

71.

. An ISP provides shared VoIP Extranet services to a customer in VRF-100 with these settings:

The VoIP services are hosted in the 198.19.100.0/24 space.

The customer has been assigned the 198.18.1.0/29 IP address block.

VRF-100 is assigned import and export route target 65010:100.

Which configuration must the engineer apply to PE-1 to provision VRF-100 and provide access to

the shared services?

A.
vrf definition VRF-100

rd 172.17.255.1:100

address-family ipv4

export map VRF-100-EXPORT

import map VRF-100-IMPORT

exit-address-family

route-map VRF-100-EXPORT permit 10

match ip address prefix-list VRF-100-ALLOWED-EXPORT

set extcommunity rt 65010:100 65010:2999

route-map VRF-100-EXPORT permit 20

set extcommunity rt 65010:100

route-map VRF-100-IMPORT permit 10

match extcommunity VRF-100-RT SHARED-SERVICES

ip extcommunity-list standard SHARED-SERVICES permit rt 65010:1999

ip extcommunity-list standard VRF-100-RT permit rt 65010:100

ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29

vrf definition VRF-100

rd 172.17.255.1:100

address-family ipv4

export map VRF-100-EXPORT

route-target import 65010:100

route-target import 65010:2999

exit-address-family

route-map VRF-100-EXPORT permit 10

match ip address prefix-list VRF-100-ALLOWED-EXPORT

set extcommunity rt 65010:100 65010:1999

route-map VRF-100-EXPORT permit 20

set extcommunity rt 65010:100

ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29

vrf definition VRF-100

rd 172.17.255.1:100

address-family ipv4

export map VRF-100-EXPORT

route-target import 65010:100

route-target import 65010:1999

exit address-family

route-map VRF-100-EXPORT permit 10

match ip address prefix-list VRF-100-ALLOWED-EXPORT

set extcommunity rt 65010:100 65010:2999

route-map VRF-100-EXPORT permit 20

set extcommunity r 65010:100

ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29

vrf definition VRF-100

rd 172.17.255.1:100

address-family ipv4

route-target export 65010:100

route-target export 65010:1999

route-target import 65010:100

route-target import 65010:2999

exit-address-family

None

72.

An engineer working for private Service Provider with employee id: 3948:11:613 is configuring the BGPsec framework. Which two conditions must the engineer take into account? (Choose two.)

A. BGPsec uses IPsec tunnel for security.

B. The BGPsec framework secures the AS path.

C. In BGPsec. all route advertisements are given an expiry time by the originator of the route.

D. Private keys are part of the router key pair used to sign route updates.

E. In BGPsec. route advertisements are not given an expiration time by the originator of the route.

73.

An engineer is configuring two routers to support MPLS LDP sessions between them. The R1 configuration is complete, and work has started on R2 as shown. Which additional configuration must the engineer apply to R2 to complete the task?

R2#configure terminal
R2(config)#interface Ethernet1/0
R2(config-if)#ip address 10.1.1.1255.255.255.255

An engineer is configuring two routers to support MPLS LDP sessions between them. The R1 configuration is complete, and work has started on R2 as shown. Which additional configuration must the engineer apply to R2 to complete the task?

None

74.

The operations team is implementing an LDP-based configuration in the service provider core network with these requirements:

R1 must establish LDP peering with the loopback IP address as its Router-ID.

Session protection must be enabled on R2.

How must the team update the network configuration to successfully enable LDP peering between

R1 and R2?

A. Change the LDP password on R2 to Cisco.

B. Configure mpls ldp router-id loopback0 on R1 and R2.

C. Configure LDP session protection on R1.

D. Change the discover hello hold time and interval to their default values.

None

75.

Which effect of this configuration is true?

A. it creates a pseudowire class named Cisco

B. It enables tagging for VLAN 12 on the interface

C. It enables MPLS on the interface

D. It enables AToM on interface gigabitethemet1/0

None

76.

What is the role of NSO?

A. Provides public cloud services for customers that need Internet access.

B. Controls the turn-up of a device.

C. Provides network monitoring services for Layer 3 devices.

D. Maintains data storage.

None

77.

Why do Cisco MPLS TE tunnels require a link-state routing protocol?

A. Link-state routing protocols use SPF calculations that the tunnel endpoints leverage to implement the tunnel

B. The link-state database provides a data repository from which the tunnel endpoints can dynamically select a source ID

C. The tunnel endpoints can use the link-state database to evaluate the entire topology and determine the best path

D. The link state database provides segmentation by area, which improves the path-selection process

None

78.

Router 4 is added to the network and must be in the same area as router 1. Which NET should the engineer assign?

Router 1:
router isis
net 49.0011.0000.0000.0001.00
Router 2:router isis
net 49.0001.0000.0000.0001.00
Router 3:
router isis
net 49.0011.0000.0000.0002.00

A. 49.0001.0000.0000.0004.00

B. 49.0111.0000.0000.0001.00

C. 49.0011.0000.0000.0003.00

D. 49.0011.0000.0000.0002.00

None

79.

This output is included at the end of an output that was provided by a device using NETCONF. What does the code show?

A. It shows the hostname of the device as rpc-reply

B. It shows that the running configuration is blank

C. It shows NETCONF uses remote procedure calls.

D. It shows that the full configuration is being modeled by VANG

None

80.

A network engineer is deploying SNMP configuration on client's routers. Encrypted authentication must be included on router 1 to provide security and protect message confidentially. Which action should the engineer perform on the routers to accomplish this task?

Router 1:
snmp-server group group1v3 noauth
snmp-server user testuser group¹remote 192.168.0.254
snmp-server host192.168.0.254 Informs version 3 noauth testuser config

A. snmp-server host 192.168.0.254 informs version 3 auth testuser config.

B. snmp-server user testuser group 1 remote 192.168.0.254 v3 auth md5 testpassword

C. snmp-server group group 1 v3 auth.

D. snmp-server community public

None

81.

Drag and drop the OSPF and IS-IS Cisco MPLS TE extensions from the left to their functional descriptions on the right.

Answer：

TLV Type 134

TLV Type 2

Type 10 Opaque LSA

TLV Type 135

TLV Type 22

TLV Type 134

TLV Type 2

Type 10 Opaque LSA

TLV Type 22

TLV Type 135

82.

How is a telemetry session established for data analytics?

A. A router initiates a session using the dial-out to a destination.

B. A destination initiate a session to a router.

C. The destination initiate a session using the dial-out more to the router.

D. A router requests the data using Teinet.

None

83.

Simulation1

Solutions：

SOLUTION:-

Config t

router isis 1

net 49.0001.0010.0001.0101.00

area-password C1sc0!

int et0/0

ip router isis 1

isis authen mode text level-2

isis circuit-type level-2

isis tag 1

int et1/0

ip router isis 1

isis authen mode text level-2

isis circuit-type level-2

isis tag 1

router isis 2

net 49.0001.0010.0002.0202.00

area-password C1sc0!

int et0/0

ip router isis 2

isis authen mode text level-2

isis circuit-type level-2

isis tag 2

int et1/0

ip router isis 2

isis authen mode text level-1

isis circuit-type level-1

isis tag 2

router isis 3

net 49.0001.0010.0003.0303.00

area-password C1sc0!

int et0/0

ip router isis 3

isis authen mode text level-1

isis circuit-type level-1

isis tag 3

int et1/0

ip router isis 3

isis authen mode text level-2

isis circuit-type level-2

isis tag 3

R1 Verification:

Config t

Ipv6 unicast-routing

Router isis 1

Metric-style wide

Address-family ipv6 unicast

Multi-topology

Int loop0

Ip router isis 1

Ipv6 router isis 1

Isis tag 1

Int et0/0

Ipv6 router isis 1

Int et1/0

Ipv6 router isis 1

Config t

Ipv6 unicast-routing

Router isis 2

Metric-style wide

Address-family ipv6 unicast

Multi-topology

Int loop0

Ip router isis 2

Ipv6 router isis 2

Isis tag 2

Int et0/0

Ipv6 router isis 2

Int et1/0

Ipv6 router isis 2

Config t

Ipv6 unicast-routing

Router isis 3

Metric-style wide

Address-family ipv6 unicast

Multi-topology

Int loop0

Ip router isis 3

Ipv6 router isis 3

Isis tag 3

Int et0/0

Ipv6 router isis 3

Int et1/0

Ipv6 router isis 3

R1 Ipv6 Verification: -

Copy run start

None

84.

An engineer has started to configure a router for secure remote access as shown. All users who require network access need to be authenticated by the SSH Protocol.Which two actions must the engineer implement to complete the SSH configuration? (Choose two.)

Line vty 0 4
access-class 100 in
transport input ssh
login local

line vty 5 15
access-class 100 in
transport input ssh
login local

A. Configure an IP domain name.

B. Configure service password encryption.

C. Configure crypto keys

D. Configure ACL 100 to permit access to port 22

E. Configure a password under the vty lines.

85.

A network engineer is configuring customer edge routers to finalize a L2VPN over MPLS deployment Assume that the AToM L2VPN service that connects the two CEs is configured correctly on the service provider network Which action causes the solution to fail?

A. A loopback with a /32 IP address has not been used

B. OSPF does not work with L2VPN services

C. The xconnect statement has not been defined

D. The routing protocol network types are not compatible

None

86.

Router R1 is reporting that its BGP neighbor adjacency to router R2 is down, but its state is Active as shown. Which configuration must be applied to routers R1 and R2 to fix the problem?

A.
R1
router bgp 5400
neighbor 2.2.2.2 remote-as 5400
R2
router bgp 5400
neighbor 1.1.1.1 remote-as 5400

B.
R1
router bgp 5400
neighbor 11.11.11.11 remote-as 5400
neighbor 11.11.11.11 update-source Loopback0

R2
router bgp 5400
neighbor 11.11.11.12 remote-as 5400
neighbor 11.11.11.12 update-source Loopback0

C.
R1
router bgp 5400
neighbor 1.1.1.1 remote-as 5400
neighbor 1.1.1.1 update-source Loopback0

R2
router bgp 5400
neighbor 2.2.2.2 remote-as 5400
neighbor 2.2.2.2 update-source Loopback0

D.
R1
router bgp 5400
neighbor 2.2.2.2 remote-as 5400
neighbor 2.2.2.2 update-source Loopback0

R2
router bgp 5400
neighbor 1.1.1.1 remote-as 5400
neighbor 1.1.1.1 update-source Loopback0

None

87.

Simulation 7

See the solution below:

key chain AUTH_ISIS

key 2

key-string C1sco!

exit

int range et0/0 , et1/0

isis authen key-chain AUTH_ISIS

ip isis

isis metric 15

Copy run start

key chain AUTH_ISIS

key 2

key-string C1sco!

exit

int range et0/0 , et1/0

isis authen key-chain AUTH_ISIS

ip isis

isis metric 20

Copy run start

key chain AUTH_ISIS

key 2

key-string C1sco!

exit

int range et0/0 , et1/0

isis authen key-chain AUTH_ISIS

ip isis

isis metric 25

Copy run start

None

88.

While troubleshooting a connectivity issue on router R2, a network engineer with an employee id:3876.13.497 notices that although it detects three OSPF links from R1, the OSPF prefixes are missing from the routing table. What is the reason for the problem?

A. The serial interfaces have different MTUs

B. Both loopback interfaces on R1 are configured as stub

C. The R2 Serial 1/0 interface is configured with an IP address, but the R1 Serial R1 Serial 1/0 interface in unnumbered.

D. The subnet masks on the serial interfaces are mismatched.

None

89.

Drag and drop the LDP features from the left onto their usages on the right.

ANSWER:

IGP synchronization

graceful restart

targeted-helo acept

session protection

targeted-helo acept

session protection

graceful restart

IGP synchronization

提示

90.

What is the URL used for with REST API?

https://192.168.1.100/api/mo/uni/tn-ciscotest.xml

A. It is used to contact a URL filter to determine the efficacy of a web address

B. It is used to send a TACACS+ authentication request to a server

C. It is used to send a message to the APIC to perform an operation on a managed object or class operator

D. It is used to initiate an FTP session to save a running configuration of a device.

None

91.

Tier 1 ISP A purchased several Tier 2 ISPs to increase their customer base and provide more regional coverage. ISP A plans to implement MPLS services in the access layer, with scalability up to 100.000 devices In one packet network and service recovery up to 50 ms.The network architect decided to use different independent IGP and LDP domains and interconnect LSPs that are based on RFC 3107. Which two actions must the network engineer perform to meet the requirements? (Choose two.)

A. Implement BGP PIC core functionality on routers R2 and R3.

B. Configure three OSPF areas, with Area 0 In the core domain, and Areas 2 and 3 in the aggregation domain.

C. Implement BGP connectivity between routers R1 and R4 with VPNv4 address family enabled.

D. Implement BGP inline RR functionality with next-hop-self capabilities on routers R2 and R3.

E. Implement the IS-IS routing protocol on the access domain.

92.

None

93.

An Ethernet access provider is configuring routers PE-1 and PE-2 to provide E-Access EVPL service between UNI and ENNI. ENNI service multiplexing is based on 802.1ad tag 150, and service-multiplexed UNI is based on 802.1q tag 10. Which EFP configurations must the provider implement on PE-1 and PE-2 to establish end-to-end connectivity between CE-1 and CE-2?

On PE-1:

interface GigabitEthernet2

service instance 100 ethernet

encapsulation dot1ad 150

rewrite ingress tag pop 1 symmetric

On PE-2:

interface GigabitEthernet2

service instance 2 ethernet

encapsulation dot1q 10

On PE-1:

interface GigabitEthernet2

service instance 100 ethernet

encapsulation dot1q 150

rewrite ingress tag pop 1 symmetric

On PE-2:

interface GigabitEthernet2

service instance 2 ethernet

encapsulation dot1q 10

On PE-1:

interface GigabitEthernet2

service instance 100 ethernet

encapsulation dot1ad 150 dot1q 10

rewrite ingress tag pop 2 symmetric

On PE-2:

interface GigabitEthernet2

service instance 2 ethernet

encapsulation dot1q 10

On PE-1:

interface GigabitEthernet2

service instance 100 ethernet

encapsulation dot1ad 150

rewrite ingress tag pop 1 symmetric

On PE-2:

interface GigabitEthernet2

service instance 2 ethernet

encapsulation dot1q 10

rewrite ingress tag pop 1 symmetric

None

94.

Drag and drop the message types from the left onto the target field of the message originator on the right.

ANSWER:

Path Computation Request

Path Computation Reply

Error

Path Computation Reply

Path Computation Request

95.

What are two characteristics of MPLS TE turrets? (Choose two)

A. They require EIGRP to be running in the core.

B. They use RSVP to provide bandwidth for the tunnel.

C. They are run over Ethernet cores only.

D. The headend and tailend routes of the tunnel must have a BGP relationship

E. They are unidirectional

96.

A network engineer is implementing QoS services. Which two statements about the QoS-group keyword on Cisco IOS XR 3re true? (Choose two )

class-map match-any class 1
match protocol ipv4
matchqos-group 4

A. The QoS group numbering corresponds to priority level

B. QoS group marking occurs on the ingress

C. It marks packets for end to end QoS pokey enforcement across the network

D. QoS group can be used in fabric QoS policy as a match criteria

E. It cannot be used with priority traffic class

97.

What is a characteristic of MVPN?

A. It bypasses the use of MPLS in the service provider core and transmits packets using IP only.

B. It uses pseudowires to route unicast and broadcast traffic over either a service provider MPLS or IP core.

C. It allows VRF traffic to use the service provider MPLS VPN to route multicast traffic.

D. It creates GRE tunnels to route multicast traffic over a service provider IP core.

None

98.

The network engineer who manages ASN 65010 is provisioning a customer VRF named CUSTOMER-ABC on PE-2. The PE-CE routing protocol is OSPF Internet reachability is available via the OSPF 0 0 0.0/0 route advertised by CE-1 to PE-1 In the customer VRF Which configuration must the network engineer Implement on PE-2 so that CE-2 has connectivity to the Internet?

A.
vrf definition CUSTOMER-ABC
rd 65010:1
address-family ipv4
route-target both 65010:1
!
router ospf100 vrf CUSTOMER-ABC
network 100.65.0.40.0.0.3 area0
redistribute bgp 65010 subnets
default-information originate
router bgp 65010
address-family ipv4 unicast vrf cUSTOMER-ABC
redistribute ospf 100 match internal external

B.
vrf definition CUSTOMER-ABC
rd 65010:2
address-family ipv4
route-target both 65010:100200
!
router ospf100 vrf CUSTOMER-ABC
network 100.65.0.40.0.0.3 area0
redistribute bgp 65010 subnets
router bgp 65010
address-family ipv4 unicast vrf cUSTOMER-ABC
redistribute ospf 100 match internal external

C.
vrf definition CUSTOMER-ABC
rd 65010:1
address-family ipv4
route-target both 65010:100200
!
router ospf100 vrf CUSTOMER-ABC
network 100.65.0.40.0.0.3 area0
redistribute bgp 65010 subnets
default-information originate
!
router bgp 65010
address-family ipv4 unicast vrf cUSTOMER-ABC
redistribute ospf 100 match internal external

D.
vrf definition CUSTOMER-ABC
rd 65010:2
address-family ipv4
route-target both 65010:1
!
router ospf100 vrf CUSTOMER-ABC
network 100.65.0.40.0.0.3 area0
redistribute bgp 65010 subnets
default-information originate
!
router bgp 65010
address-family ipv4 unicast vrf cUSTOMER-ABC
redistribute ospf 100 match internal external

None

99.

Which OoS model allows hosts to report their QoS needs to the network?

A. DiffServ

B. CB-WFQ

C. IntServ

D. MQC

None

100.

A network engineer is testing an automation platform that interacts with Cisco networking devices via NETCONF over SSH. In accordance with internal security requirements: NETCONF sessions are permitted only from trusted sources in the 172.16.20.0/24 subnet. CLI SSH access is permitted from any source. Which configuration must the engineer apply on R1?

configure terminal

hostname R1

ip domain-name mydomain.com

crypto key generate rsa

ip ssh version 1

access-list 1 permit 172.16.20.0 0.0.0.255

netconf ssh acl 1

line vty 0 4

transport input ssh

end

configure terminal

hostname R1

ip domain-name mydomain.com

crypto key generate rsa

ip ssh version 2

access-list 1 permit 172.16.20.0 0.0.0.255

access-list 1 permit any

netconf ssh

line vty 0 4

access-class 1 in

transport input ssh

end

configure terminal

hostname R1

ip domain-name mydomain.com

crypto key generate rsa

ip ssh version 1

access-list 1 permit 172.16.20.0 0.0.0.255

access-list 2 permit any

netconf ssh

line vty 0 4

access-class 2 in

transport input ssh

end

configure terminal

hostname R1

ip domain-name mydomain.com

crypto key generate rsa

ip ssh version 2

access-list 1 permit 172.16.20.0 0.0.0.255

netconf ssh acl 1

line vty 0 4

transport input ssh

end

None

101.

How does an untrusted interface at the boundary of an administrative domain handle incoming packets?

A. It remarks all values to a CoS of 0.

B. It forwards only traffic with a DSCP value of 48.

C. It translates the IP precedence value to the corresponding DSCP value.

D. It drops all traffic ingressing the network.

None

102.

Why is the keyword none needed when implementing management plane security using TACACS?

A. It aItovSWMB6ter to query a RADIUS server when the TACACS+ server is unreachable.

B. It allows the local database to authenticate when the TACACS^ server is unreachable.

C. It allows authentication to succeed when the TACACS+ server is unreachable.

D. It prevents all users from accessing router 1 unless the TACACS+ server is reachable,

None

1 out of 102

Time is Up!