SPCOR-Part5

Question 1

Under which circumstance does BGP ignore the best-path algorithm after receiving multiple routes to a destination?

Accepted Answer

when the route’s next hop is unreachable

Answer

when the routes have local-preference values less than 100

Answer

when the route’s first hop has a different AS number

Answer

when the routes are synchronized

Question 2

How do CSC VPN services use BGP to support connectivity between customer sites?

Accepted Answer

BGP sends labels to the CSG-PE router so that traffic can traverse the backbone carrier

Answer

BGP uses address families for IPv6 support in networks that use IPv4 and IPv6 between customers in different geographies

Answer

BGP eliminates the need for an IGP to run within the backbone earner core and provides more efficient label distribution

Answer

The BGP AS-Override feature allows the CSC network to use the same autonomous system number

Question 3

Refer to the exhibit. OSPF is configured within the core of the service provider network. Connectivity between CE1 and CE2 is provided through the core. An engineer is implementing MPLS to support traffic exchange between customer sites using Layer 3 VPNs. Which task must the engineer perform to secure VPN traffic to meet the SLA of continuous uptime?

Accepted Answer

Implement LDP sync to prevent packet loss

Answer

Implement OSPF stub routing to eliminate routes from being shared over the VPN

Answer

Implement BGP as the PE-CE routing protocol to support labels for faster data transfer

Answer

Implement IS-IS in the core to segregate critical traffic between different areas

Question 4

Refer to the exhibit. Company A is connected to multiple upstream ISPs, with ISP_A serving as the primary upstream ISP. The company A subnet 172.43.232.0 should be announced to the secondary ISP_B only when the FTP server with IP address 10.10.1.1 is not accessible via the primary ISP. Which configuration must be applied on R1?

Accepted Answer

neighbor 10.182.213.3 advertise-map Advertise-route non-exist-map Non-RIB

Answer

neighbor 10.182.213.3 prefix-map Non-RIB Condition-map Advertise-route

Answer

neighbor 10.182.213.3 route-map Advertise-route Condition-map Non-RIB

Answer

neighbor 10.182.213.2 Condition-map Non-RIB prefix-map Advertise-route

Question 5

Refer to the exhibit. Customer C-101 in ASN 65123 requested that the ISP blackholes a host route 198.19.44.195, to which the customer is receiving a significant amount of malicious traffic. Which configuration must the network engineer implement on the trigger router TR-1 to fulfill the request without affecting other IP destinations in the customer’s block?

Accepted Answer

configure terminal
ip prefix-list BLACKHOLE-PERMIT seq 5 permit 198.19.44.195/32 ip route 198.19.44.195 255.255.255.255 Null0 tag 9090 end

Answer

configure terminal
ip prefix-list BLACKHOLE-PERMIT seq 5 permit 198.19.44.0/24 le 32 ip route 198.19.44.195 255.255.255.255 Null0 tag 9090 end

Answer

configure terminal
ip prefix-list BLACKHOLE-PERMIT permit 198.19.44.0/24 le 32
ip route 198.19.44.195 255.255.255.255 Null0 tag 9090
end

Answer

configure terminal
ip prefix-list BLACKHOLE-PERMIT permit 198.19.44.195/24
ip route 198.19.44.195 255.255.255.255 Null0 tag 9090
end

Question 6

A service provider is in the process of implementing Unified MPLS on an enterprise network with many nodes. After the migration, several new customers will be added to the environment. RFC 3107 is used to build BGP LSPs across the domains. Which action must the networking team take to reduce the full-mesh requirement for iBGP?

Accepted Answer

Implement route reflectors on all ABRs.

Answer

Implement a confederation with each ABR serving as a gateway between secondary AS numbers.

Answer

Implement a confederation with the network segmented according to business units.

Answer

Implement route reflectors on all P routers.

Question 7

Refer to the exhibit. A network engineer is implementing iBGP and eBGP between AS 600 and AS 500 with these requirements:
• R2 must establish eBGP peering on 192.168.3,0/30 with R5 for sending unicast and multicast traffic.
• R2 must wait for 30 seconds before sending BGP updates to R5 for multicast traffic.

Which action must be taken on R2 to meet the requirement?

Accepted Answer

Configure advertisement-interval 30 in address-family ipv4 multicast.

Answer

Apply timers bgp 30 in address-family ipv4 unicast.

Answer

Apply timers bgp 30 in address-family ipv4 multicast.

Answer

Configure advertisement-interval 30 in address-family ipv4 unicast.

Question 8

How does TI-LFA reduce packet loss in segment routing?

Accepted Answer

It calculates loop-free backup paths that are rapidly implemented in case of a link failure.

Answer

It enables path selection in SR-ТЕ to support MPLS label allocation.

Answer

It establishes multiple labels per path using more than one IGP.

Answer

It determines which link to use when load balancing to prevent packet fragmentation loss.

Question 9

Refer to the exhibit. IS-IS is running as the IGP in the network, and the routers have established BGP peering relationships. Because the network carries mission-critical data, the routers must be able to operate with minimal downtime. The networking team decided to implement graceful restart to improve network stability. Which action must the team take so that all BGP peers can use their BGP routes during a failover?

Accepted Answer

Enable NSF globally on all BGP peers.

Answer

Deploy BGP with traffic steering to provide automated paths during a failover.

Answer

Mutually redistribute IS-IS and BGP.

Answer

Implement MPLS within the network with Cisco Express Forwarding enabled.

Question 10

What is the primary purpose of the flexible algorithm in a segment-routing environment?

Accepted Answer

to support adaptive path selection, optimizing network performance based on real-time network metrics

Answer

to distribute designated-path information for certain traffic classes to maintain routing information in accordance with current network-performance indicators

Answer

to integrate with legacy routing protocols to ensure backward compatibility and a smooth transition in mixed network environments

Answer

to determine and assign labels for specific types of traffic, ensuring that routes maintain a valid backup path as network conditions change

Question 11

Refer to the exhibit. MPLS is configured within the network. The routers use OSPF to exchange routing information. Hosts that are connected to routers R1 and R3 use routers R2 and R4 to access servers that run a variety of intranet applications. A network engineer must ensure that R1 and R3 maintain an LDP session between them to support the flow of traffic between hosts and servers. Which task should the engineer perform to provide LDP bindings in case of failure on the path between R1 and R3?

Accepted Answer

Implement session protection to send targeted hellos between R1 and R3.

Answer

Implement multicast in the network to share data between hosts and servers without targeted routing.

Answer

Implement BFD to monitor and detect link failures between R1 and R3.

Answer

Implement LDP sync on the four devices to give MPLS and OSPF the ability to maintain continuous uptime.

Question 12

Refer to the exhibit. MPLS is running in the network with OSPF as the IGP. Full routes are shared between the routers, and each connected link has an MPLS neighbor relationship. A network engineer must update the network configuration so that it will maintain LDP neighbor relationships if a directly connected link goes down. Which action must the engineer take as part of the process?

Accepted Answer

Implement LDP session protection on the network.

Answer

Implement LDP sync on links with a greater risk of faults.

Answer

Implement Unified MPLS to unify the OSPF areas.

Answer

Implement MPLS OAM with BFDP on the links.

Question 13

Refer to the exhibit. Routers R1 and R2 support traffic between multiple departments at a company's remote office and exchange routes using OSPF. The link between R1 and R2 has been providing inconsistent performance, particularly during times of peak usage. To help Identify the cause, an engineer was asked to implement BFD to detect failures on the link. Which task must the engineer perform?

Accepted Answer

Configure echo mode on both devices to support asymmetry.

Answer

Configure IS-IS to share routes between the routers.

Answer

Configure the session parameters individually on each interface.

Answer

Change the network between R1 and R2 to a /30 prefix.

Question 14

Refer to the exhibit. AS 65517 is running OSPF within the core. BGP is running between all four autonomous systems, interconnecting several ISPs that provide intranet and extranet services. All of the PE routers are connected, and eBGP peering relationships have been established. A network engineer also configured an IBGP peering between PE1 and P1, and the peering is up. However, P1 cannot reach routes outside of AS 65517. Which action must the engineer take so that P1 reaches external routes?

Accepted Answer

Configure P1 as a route-reflector-client to PE1.

Answer

Synchronize BGP and OSPF with AS 65517.

Answer

Install route targets on alt PE routers under the VRF configuration for intranet services.

Answer

Add the next-hop-self attribute under the BGP neighbor configuration for P1 on PE3.

Question 15

Refer to the exhibit. The NOC is configuring PE router R4 in the network for BGP-originated traffic. R4 is connected to a CE device at a customer location. The customer provided these requirements:
• BGP peers must establish a neighborship with NSR and NSF capability.
• BGP must maintain the state with the CE device and provide continuous packet forwarding during ISSU and RP switchover events.

Which action meets the NSR requirement on PE routers?

Accepted Answer

Set the BGP peering with ha-mode sso.

Answer

Set the BGP stalepath-time to 360 seconds.

Answer

Set the BGP administrative distance to 15 for BGP neighbors.

Answer

Set the BGP restart-time to 120 seconds.

Question 16

What is one of the main functions of 6RD?

Accepted Answer

It allows customers IPv6 traffic to be tunneled over IPv4 network infrastructure.

Answer

It provides stateful session translation with the 2002::/16 prefix.

Answer

It translates RFC 1918 IP addresses into public IP addresses.

Answer

It provides native reachability between IPv4-only hosts and 6RD-enabled IPv6 hosts.

Question 17

What should a network engineer consider before implementing segment routing?

Accepted Answer

It is a source-based routing technique.

Answer

It is an MPLS-based routing technique.

Answer

It is a multicast-based routing technique.

Answer

It is a destination-based routing technique.

Question 18

Refer to the exhibit. A growing company wants to ensure high availability and redundancy for its critical web servers, which are located in an offsite data center. The network architect decided to implement BGP so that the network can use redundant paths for outbound traffic toward the destination subnet 10.2.2.0/24. A network engineer already configured basic BGP settings on edge router R1, which is a Cisco ASR-1001X router. The engineer also confirmed loopback reachability to routers R2 and R3, and the AS path length toward the destination is the same via R2 and R3. Which action must the engineer take on R1 to complete the implementation?

Accepted Answer

Implement maximum-paths 2 under the BGP global configuration.

Answer

Implement as-path multipath under the BGP neighbor configuration.

Answer

Implement bestpath as-path multipath-relax under the BGP global configuration.

Answer

Implement maximum-paths multipath ibgp 2 under the BGP neighbor configuration.

Question 19

Refer to the exhibit. An engineer working for a private service provider with an employee ID: 1234:56:789 is configuring BGP in AS 400, AS 500, and AS 600 to set up BGP peering. The engineer reported that 172.16.10.0/24 is not installed in the R2 RIB. RI and R5 receive the prefix 172.16.10.0/24 in the BGP routing table. Which configuration must be implemented to stop receiving prefix 172.16.10.0/24 in the BGP table?

Accepted Answer

Configure route-map blockprefix in under BGP on R1 and R5.

Answer

Configure bgp suppress-inactive under BGP address-family ipv4 unicast on R2.

Answer

Configure bgp suppress-inactive under BGP address-family ipv4 unicast on R1 and R5.

Answer

Configure route-map blockprefix out under BGP on R2.

Question 20

What is the primary purpose of NAT64?

Accepted Answer

allow an IPv6-addressed device to communicate with an IPv4-addressed device

Answer

allow lPv4-addressed and IPv6-addressed devices to access cloud services using a VPN tunnel

Answer

allow an IPv4-addressed device to access the internet using an IPv6 address

Answer

allow IPv4-addressed and IPv6-addressed devices to communicate with each other only if they exist within the same geographic location

Question 21

Refer to the exhibit. The four PE routers in the network are connected and running OSPF to share routes. MPLS is enabled on the four routers. The routers are connected and configured to use /30 networks. A network engineer must implement Layer 3 VPN support for traffic between customer sites. Which task must the engineer perform?

Accepted Answer

Configure the devices to establish LDP neighbor relationships to share label information.

Answer

Deploy IGP in the network to exchange intranet data between the PEs.

Answer

Update the subnet between each router to a /24 prefix.

Answer

Implement MPLS ТЕ tunnels between each router to provide dedicated bandwidth for Layer 3 VPN traffic.

Question 22

What happens when a segment-routing TE tunnel loses the link and there is no secondary path in place?

Accepted Answer

The headend router generates a new path to the tail-end router using bandwidth to determine the best path.

Answer

The headend router starts the invalidation timer to bring the tunnel down.

Answer

The tail-end router sends an alert to the syslog server that the tunnel and the secondary route are inaccessible.

Answer

The headend and tail-end routers revalidate SID hops to determine the proper label stack to reroute the traffic.

Question 23

Refer to the exhibit. Routers R1 and R2 are part of a large enterprise network. The two devices are running BGP to advertise routes between them. The R1 Gi0/1 interface, which is connected to R2. is configured with the next hop for all advertised prefixes’ IP addresses. A network engineer noticed that R2 is not receiving certain routes from R1, which is causing connectivity issues. The engineer confirmed that the R2 IP address is reachable, and R2 is not filtering routes. Which action must the engineer take on R1 to resolve the issue?

Accepted Answer

Apply route-map DENY_ROUTES under the BGP configuration.

Answer

Add set metric 100 to the DENY_ROUTES route map.

Answer

Remove sequence 10 from the BLOCKED_ROUTES prefix list.

Answer

Change the sequence 10 action in the DENY_ROUTES route map to block.

Question 24

In MPLS traffic engineering, which FRR operation swaps the label and pushes the backup label?

Accepted Answer

Point of Local Repair

Answer

Mid-Point

Answer

Branch Point

Answer

Merge Point

Question 25

Refer to the exhibit. OSPF is running in the network, which is segmented into three areas. MPLS is enabled on all routers to support Layer 3 VPN. The network architect Is concerned about potential packet loss when new OSPF adjacencies form. Which two tasks should the architect perform to implement MPLS LDP synchronization? (Choose two.)

Accepted Answer

Enable LDP sync under the OSPF process.

Accepted Answer

Enable MPLS functionality on all interfaces that are involved in MPLS.

Answer

Establish MPLS targeted sessions for connected LDP neighbors only.

Answer

Configure OSPF to use the same router ID for each router that is involved in MPLS.

Answer

Establish a virtual link between the areas to support LDP sync between segments.

Question 26

Refer to the exhibit. A service provider is running MPLS in the core to support Layer 3 VPN. OSPF is configured to support dynamic routing, and BGP is enabled throughout the network. A network engineer is adding a new P router to the infrastructure and is connecting it to P1 and P3. Which task must the engineer perform on the new router to allow it to participate in the Layer 3 VPN?

Accepted Answer

Configure OSPF and BGP to support MPLS.

Answer

Establish an LDP neighbor relationship with P1 and P3.

Answer

Enable LDP sync under the OSPF routing process.

Answer

Enable LDP and establish an OSPF adjacency in a new area.

Question 27

Refer to the exhibit. Routers CE1 and CE2 support users in different locations, but the users require Layer 2 to operate within the company intranet. A pseudowire is configured between CE1 and CE2 to support these Layer 2 services. The connection is occasionally unstable, so an engineer has been asked to monitor it periodically. How should the engineer verify connectivity between sites over the Layer 2 connection?

Accepted Answer

Use MPLS OAM to perform an LSP traceroute over the connection.

Answer

Enable SNMP to send traps that verify traffic movement between sites.

Answer

Implement a graceful restart to verify that routes are shared between sites.

Answer

Configure NetFlow to monitor the control plane and confirm that traffic is passing.

Question 28

Refer to the exhibit. PE1 and PE2 provide backbone carrier support to CSC-CE1 and CSC-CE2. CSC-CE1 and CSC-CE2 provide internet access and interoffice communication for CE1 and CE2, which are located at two different offices of an international corporation. CSC-CE1 and CSC-CE2 were recently moved to different autonomous systems from PE1 and PE2, and they must provide Layer 3 services to CE1 and CE2. Which task must the engineering team perform to allow CE1 and CE2 to continue to communicate through the two service providers?

Accepted Answer

Implement Unified MPLS between the CSC and PE routers.

Answer

Implement multicast routing using the BGP MDT address family.

Answer

Implement a pseudowire to allow only broadcast traffic to pass between CE1 and CE2.

Answer

Implement OSPF end to end and use virtual links to make connections across areas.

Question 29

What is the primary capability of Inter-AS VPN?

Accepted Answer

providing end-to-end VPN services across multiple service-provider networks

Answer

providing end-to-end encryption for traffic passing through multiple AS networks

Answer

providing load balancing across multiple AS networks in the same VPN service

Answer

providing multicast support between different service-provider networks

Question 30

Refer to the exhibit. ISP_A is about to launch a new internet service. ISP_A is already providing MPLS VPN Layer 3 services to Customer_A and Customer_B, which are connected to ISP_A via OSPF. A network engineer completed the BGP and VRF configurations on R2 to support the new internet service. Which additional action completes the launch?

Accepted Answer

Import route-target 62:101 into the customer VRFs on R1 and R3

Answer

Implement the BGP routing protocol in the customer VRFs on R1 and R2

Answer

Enable the route-replicate command under the customer VRFs on R1 and R2

Answer

Activate NAT CE in the customer VRFs on R1, R2, and R3

Question 31

What is a characteristic of the Pipe model for MPLS QoS?

Accepted Answer

The same QoS policy is applied to all customer traffic on the egress PE

Answer

The MPLS EXP bits are set by the CE

Answer

If the outer EXP is changed it is copied to the DSCP value

Answer

The DSCP value determines how the packet is forwarded

Question 32

A network engineer must enable multicast on the network to support a new series of webcasts. The PIM protocol has been enabled on the LAN side, with PIM and MSDP capabilities on edge router R1. The multicast source has been configured with IP address FF3A::121, and IP protocol 58 has been enabled and successfully tested in the network. Due to the limitations of some devices on the network, the data flow should take the most efficient path. Which task must the engineer perform to achieve the goal?

Accepted Answer

Enable PIM-SSM across the network.

Answer

Enable PMI BSR on R1.

Answer

Implement Anycast RP on R1.

Answer

Implement PIM-SM in the LAN.

Question 33

How do PE routers operate with the MDT in a multicast VPN?

Accepted Answer

When the sending PE router recognizes that multicast data has exceeded the bandwidth threshold, it creates a data MDT and sends a UDP message to all routers using the default MDT.

Answer

When the source PE router establishes adjacency using PIM SM mode in the default MDT, the receiving PE requests information about the source PE for BGP advertisement.

Answer

The default MDT uses PIM sparse mode and PIM establishes adjacency over the shortest path tree toward the destination PE router.

Answer

After the default MDT and BGP VPNv4 neighbor is configured, a different PE neighbor in the IPv6 MDT address family Is configured automatically for migrating to MDT SAFI.

Question 34

A network engineer must implement an ACL-based solution to mitigate availability issues on a web service that is hosted on a server at IP address 172.16.15.18/23. Access to the web server should be allowed over HTTP from RFC 1918 addresses only. The network architect has already enabled PMTUD in the network. Which ACL configuration must the engineer implement to complete the task?

Accepted Answer

access-list 198 deny ip any host 172.16.15.18 fragments
access-list 198 permit 6 10.0.0.0 0.255.255.255 172.16.15.18 0.0.1.255 eq 80
access-list 198 permit 6 172.16.0.0 0.0.255.255 172.16.15.18 0.0.1.255 eq 80
access-list 198 permit 6 192.168.0.0 0.0.0.255 172.16.15.18 0.0.1.255 eq 80
access-list 198 deny ip any any

Answer

access-list 199 deny ip any host 172.16.15.18 tcp-fragments
access-list 199 permit tcp 10.0.0.0 255.255.255.255 172.16.15.18 0.254.0.255 eq 80 
access-list 199 permit tcp 172.16.0.0 0.0.255.255 172.16.15.18 0.0.254.255 eq 80 
access-list 199 permit tcp 192.168.0.0 0.0.0.255 172.16.15.18 0.0.254.255 eq 80
access-list 199 deny ip any any

Answer

access-list 199 deny tcp any host 172.16.15.18 http-fragments
access-list 199 permit 16 10.10.0.0 0.255.255.255 172.16.15.18 0.0.2.253 eq 80
access-list 199 permit 16 172.16.0.0 0.0.255.255 172.16.15.18 0.0.2.253 eq 80
access-list 199 permit 16 192.168.0.0 0.0.0.255 172.16.15.18 0.0.2.253 eq 80
access-list 199 deny tcp any any

Answer

access-list 198 deny ip any host 172.16.15.18 ip-fragments
access-list 198 permit 18 10.10.0.0 255.255.255.0 172.16.15.18 255.255.254.0
access-list 198 permit 18 172.16.0.0 255.255.0.0 172.16.15.18 255.255.254.0
access-list 198 permit 18 192.168.0.0 255.255.255.0 172.16.15.18 255.255.254.0
access-list 198 deny tcp any any

Question 35

Refer to the exhibit. A network engineer is configuring Ethernet Layer 2 service to connect CE2 and CE3 for video and data application sharing with these requirements:
• A point-to-point cross-connect services must be established between 10.10.10.10 and 20.20.20.20.
• PE1 and PE2 must learn neighbors dynamically in PW 10.

Which configuration must be implemented on PE1 to meet the requirements?

Accepted Answer

l2vpn
xconnect group XCON1
p2p XCON1_PE1PE2
interface GigE 0/1 neighbor 20.20.20.20
pw-id 10

Answer

l2vpn
xconnect group XCON1
p2p XCON1_PE1PE2
interface GigE 0/0
neighbor 20.20.20.20 pw-id 10
mpls static label local 699 remote 890

Answer

xconnect group XCON1
p2p XCON1_PE1PE2
interface GigE 0/0
pw-class Path1
backup neighbor 20.20.20.20
pw-id 10

Answer

l2vpn
xconnect group XCON1
interface GigE 0/0
interface GigE 0/1

Question 36

A network architect at tSP_A must implement a loop-avoidance mechanism in the organization's ring network topology. The architect decided to implement ITU-T G.8032. Intermittent link flaps within two seconds should be ignored. Which two configurations must the architect apply? (Choose two.)

Accepted Answer

ring-protection g8032 profile vlan port-channel none

Accepted Answer

timer hold-off 2

Answer

link-protection group management vlan 1

Answer

ethernet ring g8032 profile ethernet

Answer

continuity-check direction down 2

Question 37

Refer to the exhibit. Router R1 in the network has a GigabitEthernet interface supporting 1 Gbps of bandwidth, and R2 has a FastEthemet interface. Both devices are connected to a WAN network as shown. To ensure seamless data flow, both routers have BGP routing enabled with the WAN ISP. To better handle a recent increase in VoIP traffic, a network engineer must identify VoIP traffic and mark it with DSCP value EF to guarantee bandwidth of 500 Kbps. Which action must the engineer take to meet the requirements?

Accepted Answer

Implement Traffic Policing In the network to guarantee sufficient VoIP traffic throughput.

Answer

Implement Priority Queuing on R1 to reduce traffic latency for VoIP traffic.

Answer

Implement Weighted Fair Queuing on R2 to minimizing queuing delays for VoIP traffic.

Answer

Implement Class-Based Shaping in the network to ensure VoIP traffic quality.

Question 38

A mid-size service provider uses L2VPN as its standard for connectivity between offices. A small company wants the service provider to connect the company's two sites across the service provider core. To meet service requirements, the service provider must extend the Layer 2 domain between the company’s two locations. Which configuration must the engineer apply to implement an attachment circuit between the two sites using a VLAN tag of 12?

Accepted Answer

interface TenGigE0/0/0/1.0 l2transport
encapsulation dot1q 12

Answer

interface TenGigE0/0/0/1.0 l2transport
encapsulation dot1q 12
rewrite ingress tag pop 13

Answer

interface TenGigE0/0/0/1.0 l2transport
encapsulation dot1q 12
rewrite ingress tag translate 1-to-1 dot1q 2

Answer

interface TenGigE0/0/0/1.0 l2transport
encapsulation dot1q 12
rewrite ingress tag push dot1q 21 symmetric

Question 39

Refer to the exhibit. Company A’s network architect Is implementing the capabilities that are described In RFC 4379 to provide new options for troubleshooting the company’s MPLS network. MPLS LSPs are signaled via the BGP routing protocol with IPv4 unicast prefix FECs. Due to company security policies, access is controlled on the control plane and management plane. Which two tasks must the architect perform to achieve the goal? (Choose two.)

Accepted Answer

Open UDP port 3503.

Accepted Answer

Implement LSP Ping on PE routers only.

Answer

Open IMCP port 3505.

Answer

Implement VCCV on core routers only.

Answer

Implement OAM on all MPLS-enabled routers.

Question 40

Refer to the exhibit. A network engineer is configuring Ethernet Layer 2 service to connect CE2 and CE3 for video and data application sharing with these requirements:
• A point-to-point cross-connect services must be established between 10.10.10.10 and 20.20.20.20.
• PE1 and PE2 must learn neighbors dynamically in PW 10.

Which configuration must be implemented on PE1 to meet the requirements?

Accepted Answer

Enable PIM-DM across the network.

Answer

Implement PIM-SSM In the LAN segment.

Answer

Enable MSDP on SW_1.

Answer

Implement Auto RP on SW_1.

Question 41

A company uses PIM-SM multicast with IGMPv2 to stream training videos from a server in one network to hosts in a different network. As the company has grown, the networking team decided to Implement SSM to improve efficiency for multicast within Layer 2. Which action must the team take to begin the process?

Accepted Answer

Implement IGMPv3 and deprecate IGMPv2.

Answer

Implement IGMPv3 simultaneously with IGPMv2 on the individual links that must support SSM and PIM-DM.

Answer

Implement PIM-DM to enable the routers on the LAN to Identify SSM-capable multicast hosts.

Answer

Configure an IGMP querier and Implement Cisco Express Forwarding across the network.

Question 42

Refer to the exhibit. R1 and R3 have a pseudowire connection between them, which allows R2 and R4 to communicate via Layer 2. R2 uses VLAN 10. R4 also uses VLAN 10, but with a different subnet associated. Which configuration should the engineer apply to R3 to rewrite the VLAN on traffic from R2 to VLAN 15?

Accepted Answer

interface TenGigE0/0/0/0.2
l2transport encapsulation dot1q 10
rewrite ingress tag push dot1q 15 symmetric

Answer

interface TenGigE0/0/0/0.1 l2transport
encapsulation dot1q 10
rewrite ingress tag pop 1

Answer

interface TenGigE0/0/0/0.2 l2transport
encapsulation dot1q 15

Answer

interface TenGigE0/0/0/0.1 l2transport
encapsulation dot1q 10
rewrite ingress tag translate 1-to-2 dot1q 15 second-dot1q 20

Question 43

Refer to the exhibit. A multinational corporation with a Cisco-based network wants to leverage Cisco security features to enhance the security of their LAN and protect against eavesdropping and man-in-the-middle attacks. The solution must comply with the IEEE 802.1 AE standard. A network engineer must implement the new security configurations on a pair of interconnected Cisco switches. The engineer already completed the configuration to enable AAA new-model and set up a basic AAA configuration for user authentication. Management VLAN 10 is in place for network administration. Which action must the engineer lake to meet the requirements?

Accepted Answer

Implement MACsec on both switches with encryption mode GCM and a shared key.

Answer

Implement CTS for role-based access control on both switches.

Answer

Implement open authentication via the management VLAN on both switches.

Answer

Implement IPsec on both switches to secure data transmissions.

Question 44

How does TACACS+ facilitate secure connections for user access to network routers?

Accepted Answer

The network access server communicates securely with a TACACS+ daemon to authenticate the user.

Answer

The user provides a password over a secure connection to the TACACS+ server for authorization.

Answer

The network access server communicates securely with the router via the TACACS+ protocol to authorize Telnet access by the user to specific parts of a router.

Answer

The user’s end device uses CHAP to securely query the network access server to authenticate the user via the TACACS+ protocol.

Question 45

Refer to the exhibit. Which two features characterize remotely triggered black hole filtering? (Choose two.)

Accepted Answer

It is a technique that incorporates a set of well-coordinated configurations.

Accepted Answer

It provides a method for quickly dropping undesirable traffic at the edge of the network.

Answer

It requires running OSPF.

Answer

It requires running EIGRP.

Answer

It is a specific Cisco IOS Software feature.

Question 46

Company_A is implementing VoIP services across the company. The network architect designed a QoS policy to allow only specific IP subnets and mark the signaling flow with DSCP 36. The solution should be as secure as possible. Phones receive their IP addresses from the 172.184.12.0/24 pool and are assigned by the RADIUS server to VLAN 1021. Skinny Client Control Protocol is used as a signaling protocol in the network. For security reasons, switchport port security maximum 1 vlan voice has been preconfigured on the switch side. Which two tasks must an engineer perform on SW_1 to achieve this goal? (Choose two.)

Accepted Answer

Implement a class map with the set dscp af43 command.

Accepted Answer

Implement an ACL with the permit udp 172.184.12.0 0 0.0.0.255 any range 2000 2002 command.

Answer

Implement a class map with the set dscp af42 command.

Answer

Implement an ACL with the set dscp af4t command.

Answer

Implement an ACL with the permit tcp any 10.124.121.0 0 0.0.0.255 range 16384 32767 command.

Question 47

Refer to the exhibit. Two midsize service providers are connected to each other and share VPNv4 routes. The service providers support customers in several geographic regions. The two network-engineering teams have decided to protect against data plane attacks and secure traffic between the two providers Which task should toe teams perform as part of toe configuration?

Accepted Answer

Implement RTBH filtering to black-hole unwanted traffic to a null interface

Answer

Implement uRPF to match source IP addresses to the routing table

Answer

Implement control plane policing to prevent unwanted hosts from accessing the network.

Answer

Implement prefix lists to allow traffic only from known sources

Question 48

What is the primary purpose of Terraform in the network?

Accepted Answer

to manage the Cisco network infrastructure as code to ensure consistent configuration and scalability

Answer

to facilitate the integration of Cisco networking solutions with cloud platforms to improve scalability

Answer

to enable the seamless migration of Cisco network configurations between diverse network environments

Answer

to schedule and manage maintenance tasks on Cisco network devices to minimize errors and downtime

Question 49

An organization with big data requirements is implementing NETCONF as part of its migration to a new cloud-based environment. The organization has multiple offices across widespread geography. A network engineer is configuring NETCONF on one of the border routers. Which configuration must the engineer apply to save the running configuration?

Accepted Answer

<?xml version="1.0" encoding="utf-8"?>
<rpc xmlns="urn:letf:params:xml:ns:netconf:base:1.0" masage-id="">
<cisco-ia:save-config xmlns:cisco-ia="http://cisco.com/yang/cisco-ia"/>
</rpc>

Answer

<?xml version="1.0" encoding="utf-8"?>
<rpc xmlns="urn:letf:params:xml:ns:netconf:base:1.0 massage-id="">
<edit-config>
<target>
<running/>
</target>
<config>

Answer

snmp-server community public RW
snmp-server trap link letf
snmp-server enable traps snmp authentication linkdown linkup
snmp-server enable traps syslog
snmp-server manager

Answer

logging history
logging snmp-trap emergencies
logging snmp-trap alerts
logging snmp-trap critical
logging snmp-trap errors
logging snmp-trap warnings
logging snmp-trap notifications
logging snmp-trap informational
logging snmp-trap debugging

Question 50

A network engineer implements OSPF on the network and then notices frequent faults in traffic between two routers, particularly on interface TenGigE 0/0/0/1. The engineer decides to configure NetFlow to monitor the issue. Which configuration must the engineer apply to the router?

Accepted Answer

ip flow-export destination 192.168.2.1 2055
ip flow-export source loopback0
ip flow-export version 9
ip flow-cache timeout active 1
ip flow-cache timeout inactive 15
snmp-server ifindex
persist interface tenGigE 0/0/0/1
ip flow ingress

Answer

interface tenGigE 0/0/0/1
ip flow egress
snmp-server community public
snmp-server enable traps isdn
snmp-server host 192.168.1.27 version 2c public

Answer

interface tenGigE 0/0/0/1
ip flow ingress
ip flow-export version 9
ip flow-cache timeout active 1

Answer

ip flow-export destination 192.168.2.1 2055
ip flow-export source loopback0
ip flow-export version 9
ip flow-cache timeout active 1
ip flow-cache timeout inactive 15
snmp-server ifindex persist

Question 51

Which wildcard is used with programmable APIs to Identify the values Cisco, Ciscotest, and CiscoSystems?

Accepted Answer

Cisco__*__

Answer

Cis?o

Answer

*Cisco

Answer

?Cisco

Question 52

Refer to the exhibit. The networking team recently identified a folder of archived scripts in an internal repository. A junior engineer must determine whether any of the scripts are useful in the current network environment. What is the primary purpose of this script?

Accepted Answer

collecting information about network devices

Answer

provisioning a new device with a hostname and device ID

Answer

using a function loop to configure a group of network devices

Answer

storing a token to the local device repository

Question 53

Refer to the exhibit. To generate detailed insights about network health, the networking team must enable telemetry for memory and CPU on all network devices using the templating approach. The team currently uses Ansible. The log collector is configured with IP address 10.12.10.12, and the process is running on port 4512. The configuration grpc port 57462 has been added to the configuration template. For security reasons, only the log collector should be allowed to Initiate a session. Which two additional configurations must the team include in the configuration template? (Choose two.)

Accepted Answer

subscription Subs1
sensor-group-id Group_SEN_CPU_RAM sample-interval 3000

Accepted Answer

sensor-group Group_SEN_CPU_RAM
sensor-path Cisco-IOS-XE-wdsysmon:system-monitoring/cpu-utilization-summary sensor-path Cisco-IOS-XE-nto:memory-summary/nodes/node//nodes/summary-stats

Answer

destination-group Group_DS_1
address family ipv4 10.12.10.12 port 4512

Answer

destination-group Group_DS_1
protocol grpc no-tls

Answer

sensor-group Group_SEN_CPU_RAM
sensor-path Cisco-IOS-XR-wdsysmon-fd-oper:system-monitoring/cpu-utilization sensor-path Cisco-IOS-XR-nto-misc-oper:memory-summary/nodes/node/summary

Question 54

Which capability does Secure ZTP provide?

Accepted Answer

securely provisioning network devices during initial setup

Answer

enabling secure automatic discovery of neighboring devices

Answer

facilitating network device discovery with server authentication

Answer

leveraging plain-text configuration flies to simplify network setup and security

Question 55

Refer to the exhibit. A junior engineer must update a group of scripts to use on a newly deployed subnet. However, one of the scripts is not documented or commented. What are the two effects of this script? (Choose two.)

Accepted Answer

The script configures a loopback interface.

Accepted Answer

The script stores output in the cli.txt file.

Answer

The script stores output with leading or trailing spaces.

Answer

The script calls a Telnet process to connect to a network device.

Answer

The script configures a physical interface.

Question 56

Which function does orchestrated fulfillment perform under the Cisco Network Services Orchestrator model?

Accepted Answer

It translates the networking service high-level Intent Into device configurations, and pushes the configurations to physical and virtual devices.

Answer

It maintains the service topology in an inventory system to enable accurate assessment of service impact and support root-cause analysis.

Answer

It leverages open-source NFV components such as OpenStack virtual Infrastructure manager and Open vSwitch to create necessary service chains among VNFs.

Answer

It instantiates virtual test probes to perform activation testing and provide ongoing measurement of service KPIs against defined SLAs.

Question 57

Network devices in the core layer use different iGPs, and the network is split into several areas. The engineer must use a NETCONF operation to toad a full interface configuration on multiple Cisco devices to ensure that they meet company standards. The devices must work over SSH from the Linux jump server. Which action meets the configuration requirements?

Accepted Answer

Use the NETCONF operation to load the configuration and verify that TCP port 830 is open from the Linux server to the routers..

Answer

Use the NETCONF operation to load the configuration and verify that TCP port 830 is open from the Linux server to the routers.

Answer

Use the NETCONF operation to load the configuration and verify that TCP port 22 is open from the Linux server to the routers..

Answer

Use the NETCONF operation to load the configuration and verify that TCP port 22 is open from the Linux server to the routers.

Question 58

Why should a network administrator use YANG?

Accepted Answer

It uses NETCONF to perform network automation across the entire network Infrastructure by looking granularly at network deviations.

Answer

It can use automatically-configured and manually-configured OIDs to manage network devices.

Answer

It allows agents to run on individual network devices without centralized management.

Answer

It allows automated monitoring of network traffic on individual network devices without examining the entire network infrastructure.

Question 59

The networking team must create a golden configuration to monitor and discover network devices, and also support the capability to configure network devices in the future. Not all devices on the network are capable of gRPC or REST-API calls. The solution should use a username and password, and data in transit should be highly secured. The modem NMS system has been configured with IP address 172.14.15.1, and the snmp-server view view iso included command has already been added to the template. Which two commands should the team add to the configuration template to enable SNMPv3 on network devices? (Choose two.)

Accepted Answer

snmp-server user Cisco group v3 auth sha Cisco123 priv aes 256 Cisco1234

Accepted Answer

snmp-server group group v3 priv read view

Answer

snmp-server group group v3 authnopriv ro

Answer

snmp-server user Cisco group v3 auth she-aes Cisco123 authnopriv aes 128 Cisco1234

Answer

snmp-server user Cisco group v3 auth md5 Cisco123 authpriw aes 192 Cisco1234

Question 60

Refer to the exhibit. A regional company is implementing a network-health monitoring solution on their Cisco ISR routers to monitor network performance metrics and gather real time data. The router R1 Ethernet interface, GigabitEthemet0/0, is assigned IP address 192.168.1.1/24, and basic IP addressing and connectivity to the data-collection server have already been configured. A network engineer must update R1 to ensure secure and reliable data transmission to the monitoring server, which is located at IP address 192.168.50.50 on port 50051. To achieve secure communication, the configuration must comply with RPC 5246, and to ensure reliable data transmission, it must follow RFC 793. Which command must the engineer execute to configure data collection?