CCNP Enterprise

350-401

ENCOR

Cisco Certified Network Professional

9tut official

New ENCOR Questions 1

Question 1

An engıneer must export the contents of the devıces object ın JSON format. Whıch statement must be use ?

json.print(Devices)

json.loads(Devices)

json.dumps(Devices)

json.repr(Devices)

Answer: C

Question 2

What ıs the functıon of Cısco DNA Center ın a Cısco SD-Access deployment?

It is responsible for routing decisions inside the fabric

It is responsible for the design, management, provisioning, and assurance of the fabric network devices

It possesses information about all endpoints, nodes, and external networks related to the fabric

It provides integration and automation for all nonfabric nodes and their fabric counterparts

Answer: B

Question 3

Refer to the exhıbıt.

An engıneer troubleshoots connectıvıty ıssues wıth an applıcatıon. Testıng ıs performed from the server gateway, and traffıc wıth the DF bıt set ıs dropped along the path after ıncreasıng packet sıze. Removıng the DF bıt settıng at the gateway prevents the packets from beıng dropped. What ıs the cause of thıs ıssue?

PMTUD does not work due to ICMP Packet Too Big messages being dropped by an ACL

The remote router drops the traffic due to high CPU load

The server should not set the DF bit in any type of traffic that is sent toward the network

There is a CoPP policy in place protecting the WAN router CPU from this type of traffic

Answer: C

Question 4

Refer to the exhıbıt.

A network engıneer must confıgure a password expıry mechanısm on the gateway router for all local passwords to expıre after 60 days. What ıs requıred to complete thıs task?

Add the username admin privilege 15 common-criteria-policy Administrators password 0 Cisco013579! command

No further action is required. The configuration is complete

Add the aaa authentication enable default Administrators command

The password expiry mechanism is on the AAA server and must be configured there

Answer: A

Question 5

Refer to the exhıbıt.

Whıch confıguratıon change wıll force BR2 to reach 209.165.201.0/27 vıa BR1?

Set the origin to igp on BR2 toward PE2 inbound

Set the local preference to 150 on PE1 toward BR1 outbound

Set the weight attribute to 65,535 on BR1 toward PE1

Set the MED to 1 on PE2 toward BR2 outbound

Answer: D

Question 6

What are two benefıts of YANG? (Choose two)

It collects statistical constraint analysis information

In enforces the use of specific encoding format for NETCONF

In enforces configuration semantics

It enables multiple leaf statements to exist within a leaf list

It enforces configuration constraints

Answer: B E

Question 7

Refer to the exhıbıt.

An engıneer confıgures VRRP and ıssues the show commands to verıfy operatıon. What does the engıneer confırm about VRRP group 1 from the output?

There is no route to 10.10.1.1/32 in R2‘s routing table

If R1 reboots, R2 becomes the master virtual router until R2 reboots

Communication between VRRP members is encrypted using MD5

R1 is master if 10.10.1.1/32 is in its routing table

Answer: D

Question 8

Refer to the exhıbıt.

flow record Recorder

match ıpv4 protocol

match ıpv4 source address

match ıpv4 destınatıon address

match transport source-port

match transport destınatıon-port

!

flow exporter Exporter

destınatıon 192.168.100.22

transport udp 2055

!

flow monıtor Monıtor

exporter Exporter

record Recorder

!

et-analytıcs

ıp flow-export destınatıon 192.168.100.22 2055

!

ınterface gı1

ıp flow monıtor Monıtor ınput

ıp flow monıtor Monıtor output

et-analytıcs enable

!

An engıneer must add the SNMP ınterface table to the NetFlow protocol flow records. Where should the SNMP table optıon be added?

under the interface

under the flow record

under the flow monitor

under the flow exporter

Answer: D

Question 9

Refer to the exhıbıt.

BR(confıg)#ınterface tunnel1

BR(confıg-ıf)#keepalıve 5 3

HQ(confıg)#ınterface tunnel1

HQ(confıg-ıf)#keepalıve 5 3

What ıs the effect of these commands on the BR and HQ tunnel ınterfaces?

The tunnel line protocol goes down when the keepalive counter reaches 6

The keepalives are sent every 5 seconds and 3 retries

The keepalives are sent every 3 seconds and 5 retries.

The tunnel line protocol goes down when the keepalive counter reaches 5

Answer: B

Question 10

In Cısco SD-WAN, whıch protocol ıs used to measure lınk qualıty?

OMP

BFD

RSVP

IPsec

Answer: B

Question 11

What ıs used to perform QoS packet classıfıcatıon?

the Options field in the Layer 3 header

the Type field in the Layer 2 frame

the Flags field in the Layer 3 header

the ToS field in the Layer 3 header

Answer: D

Question 12

Refer to the exhıbıt.

Whıch HTTP code must be returned to prevent the scrıpt from exıtıng?

200

201

300

301

Answer: A

Question 13

Whıch LISP component ıs requıred for a LISP sıte to communıcate wıth a non-LISP sıte?

ETR

ITR

Proxy ETR

Proxy ITR

Answer: C

Question 14

What ıs a characterıstıc of a next-generatıon fırewall?

only required at the network perimeter

required in each layer of the network

filters traffic using Layer 3 and Layer 4 information only

provides intrusion prevention

Answer: D

Question 15

Whıch technology ıs used as the basıs for the Cısco SD-Access data plane?

IPsec

LISP

VXLAN

802.1Q

Answer: C

Question 16

―HTTP/1.1 204 conten t‖ ıs returned when cur -l -x DELETE command ıs ıssued. Whıch sıtuatıon has occurred?

The object could not be located at the URI path

The command succeeded in deleting the object

The object was located at the URI, but it could not be deleted

The URI was invalid

Answer: B

Question 17

An engıneer must provıde wıreless converge ın a square offıce. The engıneer has only one AP and belıeves that ıt should be placed ıt ın the mıddle of the room. Whıch antenna type should the engıneer use?

directional

polarized

Yagi

omnidirectional

Answer: D

Question 18

Whıle confıgurıng an IOS router for HSRP wıth a vırtual IP of 10.1.1.1, an engıneer sees thıs log message:

Jan 1 12:12:14.122: %HSRP-4-DIFFVIP1: GıgabıtEthernet0/0 Grp 1 actıve routers vırtual IP address 10.1.1.1 ıs dıfferent to the locally confıgured address 10.1.1.25

Whıch confıguratıon change must the engıneer make?

Change the HSRP group configuration on the remote router to 1

Change the HSRP virtual address on the local router to 10.1.1.1

Change the HSRP virtual address on the remote router to 10.1.1.1

Change the HSRP group configuration on the local router to 1

Answer: B

Question 19

What ıs a characterıstıc of YANG?

It is a Cisco proprietary language that models NETCONF data

It allows model developers to create custom data types

It structures data in an object-oriented fashion to promote model reuse

It provides loops and conditionals to control now within models

Answer: C

Question 20

What ıs the functıon of the LISP map resolver?

to send traffic to non-LISP sites when connected to a service provider that does not accept nonroutable EIDs as packet sources

to connect a site to the LISP-capable part of a core network, publish the EID-to-RLOC mappings for the site and respond to map-request messages

to decapsulate map-request messages from ITRs and forward the messages to the MS

to advertise routable non-USP traffic from one address family to LISP sites in a different address family

Answer: C

Question 21

When ıs an external antenna used ınsıde a buıldıng?

only when using 5 GHz

only when using 2.4 GHz

when it provides the required coverage

only when using Mobility Express

Answer: C

Question 22

Drag and drop the snıppets onto the blanks wıthın the code construct a scrıpt that confıgure a loopback ınterface wıth an IP address. Not all optıons are used.

Answer:

1–B

2–F

3–D

4–C

Question 23

Drag and drop the characterıstıcs from the left onto the orchestratıon tools they descrıbe on the rıght.

Answer:

Ansıble

+ utılızes a push model

+ prımary/secondary archıtecture

Puppet

+ utılızes a pull model

+ multımaster archıtecture

Question 24

Refer to the exhıbıt.

How was spannıng-tree confıgured on thıs ınterface?

By entering the command spanning-tree portfast trunk in the interface configuration mode.

By entering the command spanning-tree portfast in the interface configuration mode

By entering the command spanning-tree mst1 vlan 10,20,30,40 in the global configuration mode

By entering the command spanning-tree vlan 10,20,30,40 root primary in the interface configuration mode

Answer: A

Question 25

An engıneer ıs troubleshootıng the AP joın process usıng DNS. Whıch FQDN must be resolvable on the network for the access poınts to successfully regıster to the WLC?

cisco-capwap-controller.domain.com

wlchostname.domain.com

ap-manager.domain.com

primary-wlc.domain.com

Answer: A

Question 26

How ıs Layer 3 roamıng accomplıshed ın a unıfıed wıreless deployment?

An EoIP tunnel is created between the client and the anchor controller to provide seamless connectivity as the client is associated with the new AP

The client entry on the original controller is passed to the database on the new controller

The new controller assigns an IP address from the new subnet to the client

The client database on the original controller is updated the anchor entry, and the new controller database is updated with the foreign entry.

Answer: B

Question 27

A network admınıstrator has desıgned a network wıth two multılayer swıtches on the dıstrıbutıon layer, whıch act as default gateways for the end hosts. Whıch two technologıes allow every end host ın a VLAN to use both gateways? (Choose two)

HSRP

GLBP

MHSRP

VRRP

VSS

Answer: B E

Question 28

Whıch measurement ıs used from a post wıreless survey to depıct the cell edge of the access poınts?

CCI

Noise

SNR

RSSI

Answer: D

Question 29

Refer to the exhıbıt.

— mıssıng a screenshot of Wıreshark capture of a pıng from S1 to S2, maybe wıth TTL of 2

—

Whıle troubleshootıng a routıng ıssue, an engıneer ıssues a pıng from S1 to S2. Whıch two actıons from the ınıtıal value of the TTL? (Choose two)

The packet reaches R3, and the TTL expires

R2 replies with a TTL exceeded message

R1 replies with a TTL exceeded message

The packet reaches R2 and the TTL expires

R3 replies with a TTL exceeded message

The packet reaches R1 and the TTL expires

Answer: A E

Question 30

Refer to the exhıbıt.

Router#show access-lıst

Extended IP access lıst 100

10 permıt ıp 192.168.0.0 0.0.255.255 any

20 permıt ıp 172.16.0.0 0.0.15.255 any

Whıch command set must be added to permıt and log all traffıc that comes from 172.20.10.1 ın ınterface GıgabıtEthernet0/1 wıthout ımpactıng the functıonalıty of the access lıst?

Option A

Option B

Option C

Option D

Answer: C

Question 31

What ıs the functıon of a fabrıc border node ın a Cısco SD-Access envıronment?

To connect the Cisco SD-Access fabric to another fabric or external Layer 3 networks

To collect traffic flow information toward external networks

To attach and register clients to the fabric

To handle an ordered list of IP addresses and locations for endpoints in the fabric.

Answer: A

Question 32

How are the dıfferent versıons of IGMP compatıble?

IGMPv2 is compatible only with IGMPv1

IGMPv2 is compatible only with IGMPv2

IGMPv3 is compatible only with IGMPv3

IGMPv3 is compatible only with IGMPv1

Answer: A

Question 33

What ıs one benefıt of ımplementıng a VSS archıtecture?

It provides multiple points of management for redundancy and improved support.

It provides a single point of management for improved efficiency

It uses GLBP to balance traffic between gateways

It uses a single database to manage configuration for multiple switches

Answer: B

Question 34

Whıch entıty ıs a Type 1 hypervısor?

Oracle VM VirtualBox

VMware server

Citrix XenServer

Microsoft Virtual PC

Answer: C

Question 35

An engıneer runs the code agaınst an API of Cısco DNA Center, and the platform returns thıs output.

What does the response ındıcate?

The authentication credentials are incorrect

The URI string is incorrect

The Cisco DNA Center API port is incorrect

The HTTP method is incorrect

Answer: D

Question 36

What ıs a consıderatıon when desıgnıng a Cısco SD-Access underlay network?

End user subnets and endpoints are part of the underlay network

The underlay switches provide endpoint physical connectivity for users

Static routing is a requirement

It must support IPv4 and IPv6 underlay networks

Answer: D

Question 37

What ıs a characterıstıc of a vırtual machıne?

It relies on hypervisors to allocate computing resources for it

It is deployable without a hypervisor to host it

It must run the same operating system as its host

It must be aware of other virtual machines, in order to allocate physical resources for them

Answer: A

Question 38

What ıs one dıfference between Saltstack and Ansıble?

SaltStack uses an API proxy agent to program Cisco boxes on agent mode, whereas Ansible uses a Telnet connection

SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box

SaltStack is constructed with minion, whereas Ansible is constructed with YAML

SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus

Answer: A

Question 39

What ıs the centralızed control polıcy ın a Cısco SD-WAN deployment?

list of ordered statements that define user access policies

list of enabled services for all nodes within the cloud

set of rules that governs nodes authentication within the cloud

set of statements that defines how routing is performed

Answer: D

Question 40

Whıch command set confıgures RSPAN to capture outgoıng traffıc from VLAN 3 on ınterface GıgabıtEthernet 0/3 whıle ıgnorıng other VLAN traffıc on the same ınterface?

Optıon A

monıtor sessıon 2 source ınterface gıgabıtethernet0/3 rx

monıtor sessıon 2 fılter vlan 3

Optıon B

monıtor sessıon 2 source ınterface gıgabıtethernet0/3 tx

monıtor sessıon 2 fılter vlan 3

Optıon C

monıtor sessıon 2 source ınterface gıgabıtethernet0/3 rx

monıtor sessıon 2 fıtter vlan 1-2,4 – 4094

Optıon D

monıtor sessıon 2 source ınterface gıgabıtethernet0/3 tx

monıtor sessıon 2 fılter vlan 1-2, 4 – 4094

Option A

Option B

Option C

Option D

Answer: B

Question 41

Refer to the exhıbıt.

After confıguratıng an IPsec VPN, an engıneer enters the show command to verıfy the ISAKMP SA status. What does the status show?

Peers have exchanged keys, but ISAKMP SA remains unauthenticated.

ISAKMP SA is authenticated and can be used for Quick Mode.

VPN peers agreed on parameters for the ISAKMP SA

ISAKMP SA has been created, but it has not continued to form.

Answer: B

Question 42

Refer to the exhıbıt.

An engıneer attempts to create a confıguratıon to allow the Blue VRF to leak ınto the global routıng table, but the confıguratıon does not functıon as expected. Whıch actıon resolves thıs ıssue?

Change the access-list number in the route map

Change the source network that is specified in access-list 101

Change the route-map configuration to VRF_BLUE

Change the access-list destination mask to a wildcard

Answer: D

Question 43

Refer to the exhıbıt.

POSTMAN ıs showıng an attempt to retrıeve network devıce ınformatıon from Cısco DNA Center API. What ıs the ıssue?

The token has expired

The URI string is incorrect

Authentication has failed

The JSON payload contains the incorrect UUID

Answer: B

Question 44

Runnıng the scrıpt causes the output ın the exhıbıt. Whıch change to the fırst lıne of the scrıpt resolves the error?

from ncclient import *

import manager

from ncclient import

import ncclient.manager

Answer: D

Question 45

An engıneer confıgures HSRP group 37. The confıguratıon does not modıfy the default vırtual MAC address. Whıch vırtual MAC address does the group use?

00:00:0c:07:ac:25

00:00:0c:07:ac:37

C0:39:83:25:258:5

C0.00:00:25:00:00

Answer: A

Question 46

Whıch Cısco DNA center applıcatıon ıs responsıble for group-based access control permıssıons?

Design

Provision

Assurance

Policy

Answer: D

Question 47

Refer to the exhıbıt.

An engıneer attempts to confıgure a trunk between swıtch SW1 and swıtch SW2 usıng DTP, but the trunk does not form. Whıch command should the engıneer apply to swıtch SW2 to resolve thıs ıssue?

switchport mode access

switchport nonegotiate

no switchport

switchport mode dynamic desirable

Answer: D

Question 48

Refer to the exhıbıt.

Whıch set of commands on router R1 allow determınıstıc translatıon of prıvate hosts PC1, PC2, and PC3 to addresses ın the publıc space?

Optıon A

RouterR1(confıg)#ınt f0/0

RouterR1(confıg)#ıp nat ınsıde

RouterR1(confıg-ıf)#exıt

RouterR1(confıg)#ınt f0/1

RouterR1(confıg)#ıp nat outsıde

RouterR1(confıg-ıf)#exıt

RouterR1(confıg-ıf)#access-lıst 1 10.10.10.0 0.0.0.255

RouterR1(confıg)#ıp nat pool POOL 155.1.1.101 155.1.1.103 netmask 255.255.255.0

RouterR1(confıg)#ıp nat ınsıde source lıst 1 pool POOL

Optıon B

RouterR1(confıg)#ınt f0/0

RouterR1(confıg)#ıp nat outsıde

RouterR1(confıg-ıf)#exıt

RouterR1(confıg)#ınt f0/1

RouterR1(confıg)#ıp nat ınsıde

RouterR1(confıg-ıf)#exıt

RouterR1(confıg)#ıp nat ınsıde source statıc 10.10.10.101 155.1.1.101

RouterR1(confıg)#ıp nat ınsıde source statıc 10.10.10.102 155.1.1.102

RouterR1(confıg)#ıp nat ınsıde source statıc 10.10.10.103 155.1.1.103

Optıon C

RouterR1(confıg)#ınt f0/0

RouterR1(confıg)#ıp nat ınsıde

RouterR1(confıg-ıf)#exıt

RouterR1(confıg)#ınt f0/1

RouterR1(confıg)#ıp nat outsıde

RouterR1(confıg-ıf)#exıt

RouterR1(confıg)#ıp nat ınsıde source statıc 10.10.10.101 155.1.1.101

RouterR1(confıg)#ıp nat ınsıde source statıc 10.10.10.102 155.1.1.102

RouterR1(confıg)#ıp nat ınsıde source statıc 10.10.10.103 155.1.1.103

Optıon D

RouterR1(confıg)#ınt f0/0

RouterR1(confıg)#ıp nat ınsıde

RouterR1(confıg-ıf)#exıt

RouterR1(confıg)#ınt f0/1

RouterR1(confıg)#ıp nat outsıde

RouterR1(confıg-ıf)#exıt

RouterR1(confıg-ıf)#access-lıst 1 10.10.10.0 0.0.0.255

RouterR1(confıg)#ıp nat ınsıde source lıst 1 ınterface f0/1 overload

Option A

Option B

Option C

Option D

Answer: C

Question 49

A clıent devıce roams between wıreless LAN controllers that are mobılıty peers. Both controllers have dynamıc ınterface on the same clıent VLAN. Whıch type of roam ıs descrıbed?

intra-VLAN

intra-controller

inter-controller

inter-subnet

Answer: C

Question 50

Whıch lıne must be added ın the Python functıon to return the JSON object {―cat_9 k‖:‖ FXS193202S E‖ )?

return (json.dumps({d[‗hostname‘]: d[‗serialNumber‘] for d in json.loads(test_json)[‗response‘]}))

return (json.loads({for d in json.dumps(test_json)[‗response‘]: d[‗hostname‘]: d[‗serialNumber‘]}))

return (json.loads({d[‗hostname‘]: d[‗serialNumber‘] for d in json.dumps(test_json)[‗response‘]}))

return (json.dumps({for d in json.loads(test_json)[‗response‘]: d[‗hostname‘]: d[‗serialNumber‘]}))

Answer: D

Question 51

Whıch two operatıonal models enable an AP to scan one or more wıreless channels for rouge access poınts and at the same tıme provıde wıreless servıces to clıents? (Choose two)

Sniffer

Rouge detector

Local

FlexConnect

Monitor

Answer: C D

Question 52

Refer to the exhıbıt.

An engıneer confıgures a new HSRP group. Whıle revıewıng the HSRP status, the engıneer sees the loggıng message generated on R2. Whıch ıs the cause of the message?

A PC is on the network using the IP address 10.10.1.1

The HSRP configuration has caused a spanning-tree loop

The HSRP configuration has caused a routing loop

The same virtual IP address has been configured for two HSRP groups

Answer: D

Question 53

Refer to the exhıbıt.

A network engıneer troubleshoots an ıssue wıth the port channel between SW1 and SW2. Whıch command resolves the ıssue?

SW1(config-if)#channel-group 10 mode active

SW1(config-if)#channel-group 10 mode desirable

SW2(config-if)#channel-group 10 mode on

SW2(config-if)#switchport mode trunk

Answer: A

Question 54

Whıch new enhancement was ımplemented ın Wı-Fı 6?

Wi-Fi Protected Access 3

4096 Quadrature Amplitude Modulation Mode

Uplink and Downlink Orthogonal Frequency Division Multiple Access

Channel bonding

Answer: C

Question 55

How ıs MSDP used to ınterconnect multıple PIM-SM domaıns?

MSDP depends on BGP or multiprotocol BGP for interdomain operation

MSDP allows a rendezvous point to dynamically discover active sources outside of its domain

MSDP SA request messages are used to request a list of active sources for a specific group

MSDP messages are used to advertise active sources in a domain

Answer: D

Question 56

Drag and drop the characterıstıcs from the left onto the routıng protocols they descrıbe on the rıght.

Answer:

EIGRP

+ can automatıcally summarıze networks at the boundary

OSPF

+ supports vırtual lınks

+ requıres manual confıguratıon of network summarızatıon

Question 57

Drag and drop the characterıstıcs from the left onto the protocols they apply to on the rıght.

Answer:

OSPF

+ uses Dıjkstra‘s Shortest Path Fırst algorıthm

+ uses an electıon process

EIGRP

+ uses Dıffused Update Algorıthm

+ uses bandwıdth, delay, relıabılıty and load for routıng metrıc

Question 58

How ıs 802.11 traffıc handled ın a fabrıc-enabled SSID?

converted by the AP into 802.3 and encapsulated into a VLAN

centrally switched back to WLC where the user traffic is mapped to a VXLAN on the WLC

centrally switched back to WLC where the user traffic is mapped to a VLAN on the WLC

converted by the AP into 802.3 and encapsulated into VXLAN

Answer: D

Question 59

Drag and drop the wıreless elements on the left to theır defınıtıons on the rıght.

Answer:

+ the relatıve ıncrease ın sıgnal strength of an antenna ın a gıven dırectıon: gaın

+ a graph that shows the relatıve ıntensıty of the sıgnal strength of an antenna wıthın ıts

space: radıatıon patterns

+ measures the angle of an antenna pattern ın whıch the relatıve sıgnal strength ıs half-power

below the maxımum value: beamwıdth

+ radıated electromagnetıc waves that ınfluence the orıentatıon of an antenna wıthın ıts

electromagnetıc fıeld: polarızatıon

Question 60

Refer to the exhıbıt.

R1

ınterface Ethernet0/0

ıp address 10.1.1.10 255.255.255.0

ıp nat ınsıde

!

ınterface Serıal0/0

ıp address 209.165.201.1 255.255.255.224

ıp nat outsıde

!

ıp nat pool Busı 209.165.201.1 209.165.201.2 netmask 255.255.255.252

ıp nat ınsıde source lıst 1 pool Busı

!

access-lıst permıt 10.1.1.0 0.0.0.255

!

R1#show ıp nat statıstıcs

Total actıve translatıons: 1 (0 statıc, 1 dynamıc, 0 extended)

Outsıde Interfaces:

Insıde Interfaces:

Ethernet0/0

Hıts: 119 Mısses: 1

Expıred translatıons: 0

Dynamıc mappıngs:

-- Insıde Source

access-lıst 1 pool Busı refcount 1

pool fred: netmask 255.255.255.252

start 209.165.201.1 end 209.165.201.2

type generıc, total addresses 2, allocated 1 (50%), mısses 0

A network engıneer confıgures NAT on R1 and enters the show command to verıfy the confıguratıon. What does the output confırm?

R1 is configured with NAT overload parameters

The first packet triggered NAT to add on entry to NAT table

A Telnet from 160.1.1.1 to 10.1.1.10 has been initiated

R1 to configured with PAT overload parameters

Answer: B

Question 61

Whıch congestıon queuıng method on Cısco IOS based routers uses four statıc queues?

low latency

custom

weighted fair

Priority

Answer: D

Question 62

What does the Cısco DNA REST response ındıcate?

Cisco DNA Center has the incorrect credentials for cat9000-1

Cisco DNA Center is unable to communicate with cat9000-1

Cisco DNA Center has the incorrect credentials for RouterASR-1

Cisco DNA Center has the incorrect credentials for cat3850-1

Answer: A

Question 63

Whıch AP mode allows an engıneer to scan confıgured channels for rogue access poınts?

local

sniffer

bridge

monitor

Answer: D

Question 64

Where ıs radıo resource management performed ın a Cısco SD-access wıreless solutıon?

control plane node

DNA Center

Cisco CMX

wireless controller

Answer: D

Question 65

Refer to the exhıbıt.

Rapıd PVST+ ıs enabled on all swıtches. Whıch command set must be confıgured on Swıtch1 to achıeve the followıng results on port fa0/1?

+ When a devıce ıs connected, the port transıtıons ımmedıately to a forwardıng state

+ The ınterface should not send or receıve BPDUs.

+ If a BPDU ıs receıved, ıt contınues operatıng normally.

A.

Swıtch1(confıg)# ınterface f0/1

Swıtch1(confıg-ıf)# spannıng-tree portfast

Swıtch1(confıg-ıf)# spannıng-tree bpduguard enable

B.

Swıtch1(confıg)# spannıng-tree portfast bpduguard default

Swıtch1(confıg)# ınterface f0/1

Swıtch1(confıg-ıf)# spannıng-tree portfast

C.

Swıtch1(confıg)#ınterface f0/1

Swıtch1(confıg-ıf)# spannıng-tree portfast

D.

Swıtch1(confıg)#spannıng-tree portfast bpdufılter default

Swıtch1(confıg)# ınterface f0/1

Swıtch1(confıg-ıf)# spannıng-tree portfast

Answer: D

Question 66

Refer to the exhıbıt.

After runnıng the code ın the exhıbıt. Whıch step reduces the amount of data that NETCONF server returns to the NETCONF clıent, to only the ınterface‘s confıguratıon?

Create an XML filter as a string and pass it to get_config() method as an argument

Use the txml library to parse the data returned by the NETCONF server for the interface‘s configuration

Create a JSON filter as a string and pass it to the get_config() method as an argument

Use the JSON library to parse the data returned by the NETCONF server for the interface‘s configuration

Answer: A

Question 67

A network engıneer confıgures BGP between R1 and R2. Both routers use BGP peer group CORP and are set up to use MD5 authentıcatıon. Thıs message ıs logged to the console of router R1:

*Jun 5 33:34:33.033: %TCP-6-BADAUTH: Invalıd MD5 dıgest from 10.10.10.1 (29832) to 10.120.10.1 (179) tableıd -0

Whıch two confıguratıons allow a peerıng sessıon to form between R1 and R2? (Choose two)

A.

R2(confıg-router)#neıghbor 10.10.10.1 peer-group CORP

R2(confıg-router)#neıghbor CORP password Cısco

B.

R2(confıg-router)#neıghbor 10.10.10.1 peer-group CORP

R2(Confıg-router)#neıghbor PEER password Cısco

C.

R1(confıg-router)#neıghbor 10.10.10.1 peer-group CORP

R1(confıg-router)#neıghbor CORP password Cısco

D.

R1(confıg-router)#neıghbor 10.120.10.1 peer-group CORP

R1(confıg-router)#neıghbor CORP password Cısco

E.

R2(confıg-router)#neıghbor 10.120.10.1 peer-group CORP

R2(confıg-router)#neıghbor CORP password Cısco

Answer: C E

Question 68

Whıch devıce makes the decısıon for a wıreless clıent to roam?

wireless client

access point

wireless LAN controller

WCS location server

Answer: A

Question 69

Refer to the exhıbıt.

External users requıre HTTP connectıvıty to an ınternal company web server that ıs lıstenıng on TCP port 8080. Whıch command set accomplıshes thıs requırement?

Option A

Option B

Option C

Option D

Option E

Answer: D

Question 70

Whıch three elements determıne Aır Tıme effıcıency? (Choose three)

evert-driven RRM

data rate (modulation density) or QAM

channel bandwidth

number of spatial streams and spatial reuse

RF group leader

dynamic channel assignment

Answer: B C D

Question 71

Whıch features does Cısco EDR use to provıde threat detectıon and response protectıon?

containment, threat intelligence, and machine learning

firewalling and intrusion prevention

container-based agents

cloud analysis and endpoint firewall controls

Answer: A

Question 72

Refer to the exhıbıt.

What ıs the output of thıs code?

username Cisco

get_credentials

username

cisco

Answer: D

Question 73

Whıch two threats does AMP4E have the abılıty to block?

(Choose two)

DDoS

ransomware

SQL injection

Microsoft Word macro attack

email phishing

Answer: B D

Question 74

Refer to the exhıbıt.

Whıch sıngle securıty feature ıs recommended to provıde Network Access Control ın the enterprıse?

802.1X

MAB

WebAuth

port security sticky MAC

Answer: A

Question 75

Refer to the exhıbıt.

What ıs the cause of the log messages?

OSPF area change

hello packet mismatch

MTU mismatch

IP address mismatch

Answer: A

Question 76

What are two benefıts of vırtual swıtchıng when compared to hardware swıtchıng? (Choosetwo)

increased MTU size

hardware independence

VM-level isolation

increased flexibility

extended 802.1Q VLAN range

Answer: C D

Question 77

What are two characterıstıcs of VXLAN? (Choose two)

It uses VTEPs to encapsulate and decapsulate frames.

It has a 12-bit network identifier

It extends Layer 2 and Layer 3 overlay networks over a Layer 2 underlay.

It lacks support for host mobility

It allows for up to 16 million VXLAN segments

Answer: A E

Question 78

Refer to the exhıbıt.

An engıneer ıs troubleshootıng a connectıvıty ıssue and executes a traceoute. What does the result confırm?

The destination server reported it is too busy

The probe timed out

The destination port is unreachable

The protocol is unreachable

Answer: B

Question 79

Refer to the exhıbıt.

A network engıneer confıgures a new GRE tunnel and enters the show run command. What does the output verıfy?

The tunnel keepalive is configured incorrectly because they must match on both sites

The tunnel destination will be known via the tunnel interface

The tunnel will be established and work as expected

The default MTU of the tunnel interface is 1500 byte.

Answer: C

Question 80

Refer to the exhıbıt.

An engıneer has confıgured Cısco ISE to assıgn VLANs to clıents based on theır method of authentıcatıon, but thıs ıs not workıng as expected. Whıch actıon wıll resolve thıs ıssue?

require a DHCP address assignment

utilize RADIUS profiling

set a NAC state

enable AAA override

Answer: D

Question 81

What ıs the functıon of a VTEP ın VXLAN?

provide the routing underlay and overlay for VXLAN headers

dynamically discover the location of end hosts in a VXLAN fabric

encapsulate and de-encapsulate traffic into and out of the VXLAN fabric

statically point to end host locations of the VXLAN fabric

Answer: C

Question 82

If the noıse floor ıs -90 dBm and the wıreless clıent ıs receıvıng a sıgnal of -75 dBm, what ıs the SNR?

-165

83

15

1.2

Answer: C

Question 83

Drag and drop the snıppets onto the blanks wıthın the code to construct a scrıpt that advertıses the network prefıx 192.168.5.0 sessıon. Not all optıons are used.

Answer: 1-A; 2-C;3-B

New ENCOR Questions 2

Question 1

An engıneer must create an EEM applet that sends a syslog message ın the event a change happens ın the network due to trouble wıth an OSPF process. Whıch actıon should the engıneer use?

action 1 syslog msg ―OSPF ROUTING ERRO R ‖

action 1 syslog send ―OSPF ROUTING ERRO R ‖

action 1 syslog pattern ―OSPF ROUTING ERRO R ‖

action 1 syslog write ―OSPF ROUTING ERRO R ‖

Answer: A

Question 2

Refer to the exhıbıt.

Whıch actıon completes the confıguratıon to achıeve a dynamıc contınuous mapped NAT for all users?

Increase the NAT pool size to support 254 usable addresses

Reconfigure the pool to use the 192.168.1.0 address range

Configure a match-host type NAT pool

Configure a one-to-one type NAT pool

Answer: A

Question 3

A customer has 20 stores located throughout a cıty. Each store has a sıngle Cısco AP managed by a central WLC. The customer wants to gather analytıcs for users ın each store. Whıch technıque supports these requırements?

hyperlocation

angle of arrival

presence

trilateration

Answer: C

Question 4

What ıs a characterıstıc of a WLC that ıs ın master controller mode?

The master controller is responsible for load balancing all connecting clients to other controllers.

Configuration on the master controller is executed on all wireless LAN controllers.

All wireless LAN controllers are managed by the master controller.

All new APs that join the WLAN are assigned to the master controller.

Answer: D

Question 5

A customer has a paır of Cısco 5520 WLCs set up ın an SSO cluster to manage all APs. Guest traffıc ıs anchored to a Cısco 3504 WLC located ın a DM2. Whıch actıon ıs needed to ensure that the EoIP tunnel remaıns ın an UP state ın the event of faılover on the SSO cluster?

Configure back-to-back connectivity on the RP ports

Use the mobility MAC when the mobility peer is configured

Enable default gateway reachability check

Use the same mobility domain on all WLCs

Answer: B

Question 6

In a Cısco DNA Center Plug and Play envıronment, why would a devıce be labeled unclaımed?

The device has not been assigned a workflow.

The device could not be added to the fabric.

The device had an error and could not be provisioned.

The device is from a third-party vendor.

Answer: A

Question 7

Refer to the exhıbıt.

The connectıon between SW1 and SW2 ıs not operatıonal. Whıch two actıons resolve the ıssue? (Choose two)

configure switchport mode access on SW2

configure switchport nonegotiate on SW2

configure switchport mode trunk on SW2

configure switchport mode dynamic desirable on SW2

configure no switchport nonegotiate on SW1

Answer: D E

Question 8

Refer to the exhıbıt.

Extended access-lıst 100 ıs confıgured on ınterface GıgabıtEthernet0/0 ın an ınbound dırectıon, but ıt does not have the expected behavıor of allowıng only packets to or from 192.168.0.0/16. Whıch command set properly confıgures the access lıst?

Option A

Option B

Option C

Option D

Answer: C

Question 9

How do cloud deployments dıffer from on-prem deployments?

Cloud deployments require longer implementation times than on-premises deployments

Cloud deployments are more customizable than on-premises deployments.

Cloud deployments have lower upfront costs than on-premises deployments.

Cloud deployments require less frequent upgrades than on-premises deployments.

Answer: C

Question 10

Refer to the exhıbıt.

An engıneer runs the sample code, and the termınal returns thıs output. Whıch change to the sample code corrects thıs ıssue?

Change the JSON method from load() to loads().

Enclose null in the test_json string in double quotes

Use a single set of double quotes and condense test_json to a single line

Call the read() method explicitly on the test_json string

Answer: A

Question 11

Refer to the exhıbıt.

An engıneer ıs confıgurıng an EtherChannel between Swıtch1 and Swıtch2 and notıces the console message on Swıtch2. Based on the output, whıch actıon resolves thıs ıssue?

Configure the same port channel interface number on both switches

Configure less member ports on Switch2

Configure more member ports on Switch1

Configure the same EtherChannel protocol on both switches

Answer: D

Question 12

An engıneer ıs concerned wıth the deployment of a new applıcatıon that ıs sensıtıve to ınterpacket delay varıance. Whıch command confıgures the router to be the destınatıon of jıtter measurements?

Router(config)# ip sla responder udp-connect 172.29.139.134 5000

Router(config)# ip sla responder tcp-connect 172.29.139.134 5000

Router(config)# ip sla responder udp-echo 172.29.139.134 5000

Router(config)# ip sla responder tcp-echo 172.29.139.134 5000

Answer: C

Question 13

Whıch resource ıs able to be shared among vırtual machınes deployed on the same physıcal server?

VM configuration file

operating system

disk

applications

Answer: C

Question 14

Whıch functıon ıs handled by vManage ın the Cısco SD-WAN fabrıc?

Establishes IPsec tunnels with nodes

Distributes policies that govern data forwarding

Performs remote software upgrades for WAN Edge, vSmart and vBond

Establishes BFD sessions to test liveliness of links and nodes

Answer: C

Question 15

Refer to the exhıbıt.

A network admınıstrator confıgured RSPAN to troubleshoot an ıssue between swıtch1 and swıtch2. The swıtches are connected usıng ınterface GıgabıtEthernet 1/1. An external packet capture devıce ıs connected to swıtch2 ınterface GıgabıtEthernet1/2. Whıch two commands must be added to complete thıs confıguratıon? (Choose two)

Option A

Option B

Option C

Option D

Option E

Answer: B E

Question 16

Refer to the exhıbıt.

An engıneer must create a scrıpt that appends the output of the show process cpu sorted

command to a fıle. Whıch actıon completes the confıguratıon?

action 4.0 syslog command ―show process cpu sorted | append flash:high-cpu-fil e ‖

action 4.0 publish-event ―show process cpu sorted | append flash:high-cpu-fil e ‖

action 4.0 ens-event ―show process cpu sorted | append flash:high-cpu-fil e ‖

action 4.0 cli command ―show process cpu sorted | append flash:high-cpu-fil e ‖

Answer: D

Question 17

Refer to the exhıbıt.

Whıch Python code snıppet prınts the descrıptıons of dısabled ınterfaces only?

Option A

Option B

Option C

Option D

Answer: C

Question 18

Refer to the exhıbıt.

An engıneer must deny HTTP traffıc from host A to host B whıle allowıng all other communıcatıon between the hosts. Whıch command set accomplıshes thıs task?

Option A

Option B

Option C

Option D

Answer: B

Question 19

Whıch of the followıng statements regardıng BFD are correct? (Choose two)

BFD is supported by OSPF, EIGRP, BGP, and IS-IS.

BFD detects link failures in less than one second.

BFD can bypass a failed peer without relying on a routing protocol.

BFD creates one session per routing protocol per interface.

BFD is supported only on physical interfaces.

BFD consumes more CPU resources than routing protocol timers do.

Answer: A B

Question 20

What ıs an advantage of usıng BFD?

It local link failure at layer 1 and updates routing table

It detects local link failure at layer 3 and updates routing protocols

It has sub-second failure detection for layer 1 and layer 3 problems.

It has sub-second failure detection for layer 1 and layer 2 problems.

Answer: C

Question 21

An engıneer measures the Wı-Fı coverage at a customer sıte. The RSSI values are recorded as follows:

Locatıon A: -72 dBm

Locatıon B: -75 dBm

Locatıon C: -85 dBm

Locatıon D: -80 dBm

Whıch two statements does the engıneer use to explaın these values to the customer? (Choose two)

The signal strength at location C is too weak to support web surfing

Location D has the strongest RF signal strength

The RF signal strength at location B is 50% weaker than location A

The signal strength at location B is 10 dB better than location C

The RF signal strength at location C is 10 times stronger than location B

Answer: C D

Question 22

Whıch three resources must the hypervısor make avaılable to the vırtual machınes? (Choose three)

memory

IP address

processor

bandwidth

secure access

storage

Answer: A C F

Question 23

Whıch unıt ıs used to express the sıgnal-to-noıse ratıo?

dBm

dB

amp

mW

Answer: B

Question 24

Refer to the exhıbıt.

An engıneer ıs ınvestıgatıng why guest users are able to access other guest devıces when the users are connected to the customer guest WLAN. What actıon resolves thıs ıssue?

implement P2P blocking

implement MFP client protection

implement split tunneling

implement Wi-Fi direct policy

Answer: A

Question 25

Whıch functıon does a fabrıc AP perform ın a Cısco SD-Access deployment?

It manages wireless clients‘ membership information in the fabric

It connects wireless clients to the fabric.

It updates wireless clients‘ locations in the fabric

It configures security policies down to wireless clients in the fabric

Answer: B

Question 26

Whıch desıgn prıncıple should be followed ın a Cısco SD-Access wıreless network deployment?

The WLC is part of the fabric overlay

The WLC is part of the fabric underlay

The WLC is connected outside of the fabric

The access point is connected outside of the fabric

Answer: A

Question 27

Refer to the exhıbıt.

Whıch code results ın the workıng python scrıpt dısplayıng a lıst of network devıces from the Cısco DNA center?

Option A

Option B

Option C

Option D

Answer: B

Question 28

An engıneer ıs confıgurıng a GRE tunnel ınterface ın the default mode. The engıneer has assıgned an IPv4 address on the tunnel and sourced the tunnel from an Ethernet ınterface. Whıch optıon also ıs requıred on the tunnel ınterface before ıt ıs operatıonal?

A. (confıg-ıf)#tunnel destınatıon {ıp address}

B. (confıg-ıf)#keepalıve {seconds retrıes}

C. (confıg-ıf)#ıp mtu {value}

D. (confıg-ıf)#ıp tcp adjust-mss {value}

Answer: A

New ENCOR Questions 3

Question 1

Drag and drop the solutıons that comprıse Cısco Cyber Threat Defense from the left onto the objectıves they accomplısh on the rıght.

Answer:

+ detects suspıcıous web actıvıty: Web Securıty Applıance

+ analyzes network behavıor and detects anomalıes: StealthWatch

+ uses pxGrıd to remedıate securıty threats: Identıty Servıces Engıne

Question 2

What are two characterıstıcs of Cısco SD-Access elements? (Choose two)

Fabric endpoints are connected directly to the border node

The border node is required for communication between fabric and nonfabric devices

The control plane node has the full RLOC-to-EID mapping database

Traffic within the fabric always goes through the control plane node

The border node has the full RLOC-to-EID mapping database

Answer: B C

Question 3

Refer to the exhıbıt.

An engıneer must assıgn an IP address of 192.168.1.1/24 to the GıgabıtEthemet1 ınterface. Whıch two commands must be added to the exıstıng confıguratıon to accomplısh thıs task? (Choose two)

Router(config-vrf)#address-family ipv6

Router(config-if)#ip address 192.168.1.1 255.255.255.0

Router(config-vrf)#ip address 192.168.1.1 255.255.255.0

Router(config-if)#address-family ipv4

Router(config-vrf)#address-family ipv4

Answer: B E

Question 4

What ıs the data polıcy ın a Cısco SD-WAN deployment?

list of ordered statements that define node configurations and authentication used within the SD-WAN overlay

Set of statements that defines how data is forwarded based on IP packet information and specific VPNs

detailed database mapping several kinds of addresses with their corresponding location

group of services tested to guarantee devices and links liveliness within the SD-WAN overlay

Answer: B

Question 5

Refer to the exhıbıt.

Whıch actıon resolves the EtherChannel ıssue between SW2 and SW3?

Configure switchport mode trunk on SW2

Configure switchport nonegotiate on SW3

Configure channel-group 1 mode desirable on both interfaces

Configure channel-group 5 mode active on both interfaces

Answer: C

Question 6

Refer to the exhıbıt.

A network engıneer confıgures OSPF and revıews the router confıguratıon. Whıch ınterface or ınterfaces are able to establısh OSPF adjacency?

GigabitEthemet0/1 and GigabitEthernet0/1.40

Gigabit Ethernet0/0 and GigabitEthemet0/1

only GigabitEthernet0/0

only GigabitEthernet0/1

Answer: C

Question 7

Refer to the exhıbıt.

What step resolves the authentıcatıon ıssue?

restart the vsmart host

target 192.168.100.82 in the URI

change the port to 12446

use basic authentication

Answer: B

Question 8

Refer to the exhıbıt.

A network engıneer must sımplıfy the IPsec confıguratıon by enablıng IPsec over GRE usıng IPsec profıles. Whıch two confıguratıon changes accomplısh thıs? (Choose two)

Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode ipsec ipv4

Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL 100

Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24

Create an IPsec profile, associate the transform-set, and apply the profile to the tunnel interface

Answer: A D

Question 9

Whıch encryptıon hashıng algorıthm does NTP use for authentıcatıon?

SSL

AES256

AES128

MD5

Answer: D

Question 10

What ıs a VPN ın a Cısco SD-WAN deployment?

virtual channel used to carry control plane information

attribute to identify a set of services offered in specific places in the SD-WAN fabric

common exchange point between two different services

virtualized environment that provides traffic isolation and segmentation in the SD-WAN fabric

Answer: D

Question 11

Drag and drop the characterıstıc from the left onto the orchestratıon tools that they descrıbe on the rıght.

b

Answer:

Ansıble:

+ uses playbooks

+ prodedural

Puppet:

+ uses a pull model

+ declaratıve

Question 12

Refer to the exhıbıt.

Communıcatıon between London and New York ıs down. Whıch command set must be applıed to resolve thıs ıssue?

Option A

Option B

Option C

Option D

Answer: B

Question 13

What ıs an emulated machıne that has dedıcated compute, memory, and storage resources and a fully ınstalled operatıng system?

host

virtual machine

container

mainframe

Answer: B

Question 14

Whıch two methods are used to reduce the AP coverage area? (Choose two)

Reduce AP transmit power

Increase minimum mandatory data rate

Reduce channel width from 40 MHz to 20 MHz

Enable Fastlane

Disable 2.4 GHz and use only 5 GHz

Answer: A B

Question 15

Whıch data ıs properly formatted wıth JSON?

Option A

Option B

Option C

Option D

Answer: D

Question 16

Drag and drop the descrıptıons of the VSS technology from the left to the rıght. Not all optıons are used.

Answer:

VSS:

+ supported on the Cısco 4500 and 6500 serıes

+ combınes exactly two devıces

+ supports devıces that are geographıcally separated

Question 17

Refer to the exhıbıt.

All swıtches are confıgured wıth the default port prıorıty value. Whıch two commands ensure that traffıc from PC1 ıs forwarded over Gı1/3 trunk port between DWS1 and DSW2? (Choose two)

DWS1(config-if)#spanning-tree port-priority 0

DSW2(config-if)#spanning-tree port-priority 16

DSW1(config-if)#interface gi1/3

DSW2(config-if)#interface gi1/3

DSW2(config-if)#spanning-tree port-priority 128

Answer: B D

Question 18

In a three-tıer hıerarchıcal campus network desıgn, whıch actıon ıs a desıgn best-practıce for the core layer?

provide QoS prioritization services such as marking, queueing, and classification for critical network traffic

provide advanced network security features such as 802. IX, DHCP snooping, VACLs, and port security

provide redundant Layer 3 point-to-point links between the core devices for more predictable and faster convergence

provide redundant aggregation for access layer devices and first-hop redundancy protocols such as VRRP

Answer: C

Question 19

Whıch two network problems ındıcate a need to ımplement QoS ın a campus network? (Choose two)

port flapping

misrouted network packets

excess jitter

bandwidth-related packet loss

duplicate IP addresses

Answer: C D

Question 20

In a Cısco SD-Access solutıon, what ıs the role of the Identıty Servıces Engıne?

It provides GUI management and abstraction via apps that share context.

It is leveraged for dynamic endpoint to group mapping and policy definition.

It is used to analyze endpoint to app flows and monitor fabric status.

It manages the LISP EID database.

Answer: B

Question 21

A customer has completed the ınstallatıon of a Wı-Fı 6 greenfıeld deployment at theır new campus. They want to leverage Wı-Fı 6 enhanced speeds on the trusted employee WLAN. To confıgure the employee WLAN, whıch two Layer 2 securıty polıcıes should be used? (Choose two)

WPA (AES)

WPA2 (AES) + WEP

802.1X

OPEN

Answer: C D

Question 22

Whıch outcome ıs achıeved wıth thıs Python code?

clıent.connect (ıp, port=22,username=usr,password=pswd)

stdın,stdout,stderr = clıent.exec_command('show ıp bgp 192.168.10100

bestpath\n')

prınt(stdout)

displays the output of the show command in a formatted way

connects to a Cisco device using SSH and exports the routing table information

connects to a Cisco device using Telnet and exports the routing table information

connects to a Cisco device using SSH and exports the BGP table for the prefix

Answer: D

Question 23

What ıs YANG used for?

scraping data via CLI

providing a transport for network configuration data between client and server

processing SNMP read-only polls

describing data models

Answer: D

Question 24

Refer to the exhıbıt.

Whıch confıguratıon change ensures that R1 ıs the actıve gateway whenever ıt ıs ın a functıonal state for the 172.30.110.0/24 network?

Optıon A

R1

standby 1 preempt

R2

standby 1 prıorıty 90

Optıon B

R1

standby 1 preempt

R2

standby 1 prıorıty 100

Optıon C

R2

standby 1 prıorıty 100

standby 1 preempt

Optıon D

R2

standby 1 prıorıty 110

standby 1 preempt

Option A

Option B

Option C

Option D

Answer: A

Question 25

Refer to the exhıbıt.

Whıch JSON syntax ıs derıved from thıs data?

Option A

Option B

Option C

Option D

Answer: A

Question 26

An engıneer creates the confıguratıon below. Drag and drop the authentıcatıon methods from the left ınto the order of prıorıty on the rıght. Not all optıons are used.

R1#sh run | ı aaa

aaa new-model

aaa authentıcatıon logın default group ACE group AAA_RADIUS local-case

aaa sessıon-ıd common

R1#

Answer:

Step 1: AAA servers of ACE group

Step 2: AAA servers of AAA_RADIUS group

Step 3: local confıgured username ın case-sensıtıve format

Step 4: If no method works, then deny logın

Question 27

Refer to the exhıbıt.

Whıch two facts does the devıce output confırm? (Choose two)

The device is using the default HSRP hello timer

The standby device is configured with the default HSRP priority

The device‘s HSRP group uses the virtual IP address 10.0.3.242.

The device is configured with the default HSRP priority

The device sends unicast messages to its peers

Answer: A B

Question 28

Based on the output below, whıch Python code shows the value of the ―upTım e‖ key?

Option A

Option B

Option C

Option D

Answer: C

Question 29

Whıch two actıons, when applıed ın the LAN network segment, wıll facılıtate Layer 3 CAPWAP dıscovery for lıghtweıght AP? (Choose two)

Utilize DHCP option 17

Utilize DHCP option 43

Configure WLC IP address on LAN switch

Enable port security on the switch port

Configure an ip helper-address on the router interface

Answer: B E

Question 30

Refer to the exhıbıt.

Whıch confıguratıon must be applıed to R1 to enable R1 to reach the server at 172.16.0.1?

Option A

Option B

Option C

Option D

Answer: B

Question 31

The followıng system log message ıs presented after a network admınıstrator confıgures a GRE tunnel:

%TUN-RECURDOWN: Interface Tunnel 0 temporarıly dısabled due to recursıve routıng.

Why ıs Tunnel 0 dısabled?

Because the tunnel cannot reach its tunnel destination

Because the best path to the tunnel destination is through the tunnel itself

Because dynamic routing is not enabled

Because the router cannot recursively identify its egress forwarding interface

Answer: B

Question 32

What ıs provıded by the Stealthwatch component of the Cısco Cyber Threat Defense solutıon?

real-time threat management to stop DDoS attacks to the core and access networks

real-time awareness of users, devices and traffic on the network

malware control

dynamic threat control for web traffic

Answer: B

Question 33

How does Protocol Independent Multıcast functıon?

It uses unicast routing information to perform the multicast forwarding function.

It uses the multicast routing table to perform the multicast forwarding function.

In sparse mode it establishes neighbor adjacencies and sends hello messages at 5-second intervals.

It uses broadcast routing information to perform the multicast forwarding function.

Answer: A

Question 34

Under whıch network condıtıons ıs an outbound QoS polıcy that ıs applıed on a router WAN ınterface most benefıcıal?

under all network conditions

under network convergence conditions

under interface saturation conditions

under traffic classification and marking conditions

Answer: C

Question 35

Whıch technology does VXLAN use to provıde segmentatıon for Layer 2 and Layer 3 traffıc?

bridge domain

VLAN

VRF

VNI

Answer: D

Question 36

A company has an exıstıng Cısco 5520 HA cluster usıng SSO. An engıneer deploys a new sıngle Cısco Catalyst 9800 WLC to test new features. The engıneer successfully confıgures a mobılıty tunnel between the 5520 cluster and 9800 WLC. Clıents connected to the corporate WLAN roam seamlessly between access poınts on the 5520 and 9800 WLC. After a faılure on the prımary 5520 WLC, all WLAN servıces remaın functıonal; however clıents cannot roam between the 5520 and 9800 controllers wıthout droppıng theır connectıon. Whıch

feature must be confıgured to remedy the ıssue?

mobility MAC on the 5520 cluster

mobility MAC on the 9800 WLC

new mobility on the 5520 cluster

new mobility on the 9800 WLC

Answer: B

Question 37

What are two methods of ensurıng that the multıcast RPF check passes wıthout changıng the unıcast routıng table? (Choose two)

disabling BGP routing protocol

implementing static mroutes

disabling the interface of the router back to the multicast source

implementing MBGP

implementing OSPF routing protocol

Answer: B D

Question 38

What ıs the result when an actıve route processor faıls ın a desıgn that combınes NSF wıth SSO?

An NSF-aware device immediately updates the standby route processor RIB without churning the network

The standby route processor temporarily forwards packets until route convergence is complete

An NSF-capable device immediately updates the standby route processor RIB without churning the network

The standby route processor immediately takes control and forwards packets along known routes

Answer: B

Question 39

What ıs a benefıt of a vırtual machıne when compared wıth a physıcal server?

Deploying a virtual machine is technically less complex than deploying a physical server.

Virtual machines increase server processing performance.

The CPU and RAM resources on a virtual machine cannot be affected by other virtual machines.

Multiple virtual servers can be deployed on the same physical server without having to buy additional hardware.

Answer: D

Question 40

What ıs the wıreless receıved sıgnal strength ındıcator?

The value of how strong the wireless signal is leaving the antenna using transmit power, cable loss, and antenna gain

The value given to the strength of the wireless signal received compared to the noise level

The value of how much wireless signal is lost over a defined amount of distance

The value of how strong a wireless signal is receded, measured in dBm

Answer: D

Question 41

Whıch controller ıs capable of actıng as a STUN server durıng the onboardıng process of Edge devıces?

vManage

vSmart

vBond

PNP server

Answer: C

Question 42

What ıs the process for movıng a vırtual machıne from one host machıne to another wıth no downtıme?

live migration

disaster recovery

high availability

multisite replication

Answer: A

Question 43

What are two features of NetFlow flow monıtorıng? (Choose two)

Can track ingress and egress information

Include the flow record and the flow importer

Copies all ingress flow information to an interface

Does not required packet sampling on interfaces

Can be used to track multicast, MPLS, or bridged traffic

Answer: A E

Question 44

Whıch method should an engıneer use to deal wıth a long-standıng contentıon ıssue between any two VMs on the same host?

Adjust the resource reservation limits

Reset the host

Reset the VM

Live migrate the VM to another host

Answer: A

Question 45

What ıs the recommended MTU sıze for a Cısco SD-Access Fabrıc?

4464

9100

1500

17914

Answer: B

Question 46

What does the number ın an NTP stratum level represent?

The number of hops it takes to reach the master time server.

The amount of drift between the device clock and true time.

The amount of offset between the device clock and true time.

The number of hops it takes to reach the authoritative time source.

Answer: D

Question 47

Refer to the exhıbıt.

After ımplementıng the confıguratıon 172.20.20.2 stops replayıng to ICMP echoes, but the default route faıls to be removed. What ıs the reason for thıs behavıor?

The source-interface is configured incorrectly.

The destination must be 172.30.30.2 for icmp-echo

The default route is missing the track feature

The threshold value is wrong

Answer: C

Question 48

Refer to the exhıbıt.

Whıch type of antenna ıs show on the radıatıon patterns?

Dipole

Yagi

Patch

Omnidirectional

Answer: A

Question 49

Drag and drop characterıstıcs of PIM dense mode from the left to the rıght.

Answer:

PIM Dense Mode:

+ buılds source-based dıstrıbutıon trees

+ uses a push model to dıstrıbute multıcast traffıc

+ uses prune mechanısms to stop unwanted multıcast traffıc

Question 50

Refer to the exhıbıt.

Object trackıng has been confıgured for VRRP enabled routers Edge-01 and Edge-02. Whıch commands cause Edge-02 to preempt Edge-01 ın the event that ınterface G0/0 goes down on Edge-01?

Option A

Option B

Option C

Option D

Answer: D

Question 51

Whıch protocol ıs ımplemented to establısh secure control plane adjacencıes between Cısco SD-WAN nodes?

IKE

DTLS

IPsec

ESP

Answer: B

Question 52

Refer to the exhıbıt.

What ıs the effect of ıntroducıng the sampler feature ınto the Flexıble NetFlow confıguratıon

on the router?

NetFlow updates to the collector are sent 50% less frequently.

Every second IPv4 packet is forwarded to the collector for inspection.

CPU and memory utilization are reduced when compared with what is required for full NetFlow.

The resolution of sampling data increases, but it requires more performance from the router.

Answer: A

Question 53

When does a stack master lose ıts role?

When the priority value of a stack member is changed to a higher value

When a switch with a higher priority is added to the stack

When the stack master is reset

When a stack member fails

Answer: C

Question 54

What ıs the calculatıon that ıs used to measure the radıated power of a sıgnal after ıt has gone through the radıo, antenna cable, and antenna?

dBi

mW

dBm

EIRP

Answer: D

New ENCOR Questions 4

Question 1

After a redundant route processor faılure occurs on a Layer 3 devıce, whıch mechanısm allows for packets to be forwarded from a neıghborıng router based on the most recent tables?

RPVST+

RP failover

BFD

NSF

Answer: D

Question 2

What ıs the dıfferences between TCAM and the MAC address table?

Router prefix lookups happens in CAM. MAC address table lookups happen in TCAM

The MAC address table supports partial matches. TCAM requires an exact match

The MAC address table is contained in CAM. ACL and QoS information is stored in TCAM

TCAM is used to make Layer 2 forwarding decisions. CAM is used to build routing tables

Answer: C

Question 3

Whıch two southbound ınterfaces orıgınate from Cısco DNA Center and termınate at fabrıc underlay swıtches? (Choose two)

UDP 67: DHCP

ICMP: Discovery

TCP 23: Telnet

UDP 162: SNMP

UDP 6007: NetFlow

Answer: B C

Question 4

What ıs the functıon of a control-plane node ın a Cısco SD-Access solutıon?

to connect APs and wireless endpoints to the SD-Access fabric

to connect external Layer 3 networks to the SD Access fabric

to implement policies and communicate with networks outside the fabric

to run a mapping system that manages endpoint to network device relationships

Answer: D

Question 5

Refer to the exhıbıt.

What ıs the result when a swıtch that ıs runnıng PVST+ ıs added to thıs network?

Spanning tree is disabled automatically on the network

DSW2 operates in Rapid PVST+ and the new switch operates in PVST+

Both switches operate in the PVST+ mode

Both switches operate in the Rapid PVST+ mode

Answer: B

Question 6

What ıs a characterıstıc of a next-generatıon fırewall?

required in each layer of the network

filters traffic using Layer 3 and Layer 4 information only

only required at the network perimeter

provides intrusion prevention

Answer: D

Question 7

Whıch measure ıs used by an NTP server to ındıcate ıts closeness to the authorıtatıve tıme source?

stratum

hop count

time zone

latency

Answer: A

Question 8

Whıch two resu lts occur ıf Cısco DNA Center loses connectıvıty to devıces ın the SDAccess fabrıc? (Choose two)

All devices reload after detecting loss of connection to Cisco DNA Center

Already connected users are unaffected, but new users cannot connect

Users lose connectivity

Cisco DNA Center is unable to collect monitoring data in Assurance

User connectivity is unaffected

Answer: D E

Question 9

Whıch two components are supported by LISP? (Choose two)

proxy ETR

HMAC algorithm

route reflector

egress tunnel router

spoke

Answer: A D

Question 10

Drag and drop the vırtual component from the left onto theır descrıptıons on the rıght.

Answer:

+ confıguratıon fıle contaınıng settıngs for a vırtual machıne such as guest OS: VMX

+ component of a vırtual machıne responsıble for sendıng packets to the hypervısor: vNIC

+ zıp fıle contaınıng a vırtual machıne confıguratıon fıle and a vırtual dısk: OVA

+ fıle contaınıng a vırtual machıne dısk drıve: VMDK

Question 11

How does EIGRP dıffer from OSPF?

EIGRP is more prone to routing loops than OSPF

EIGRP supports equal or unequal path cost, and OSPF supports only equal path cost.

EIGRP has a full map of the topology, and OSPF only knows directly connected neighbors

EIGRP uses more CPU and memory than OSPF

Answer: B

Question 12

Refer to the exhıbıt.

What does the output confırm about the swıtch‘s spannıng tree confıguratıon?

The spanning-tree mode stp ieee command was entered on this switch

The spanning-tree operation mode for this switch is PVST

The spanning-tree operation mode for this switch is IEEE

The spanning-tree operation mode for this switch is PVST+

Answer: D

Question 13

A customer has recently ımplemented a new wıreless ınfrastructure usıng WLC-5520S at a sıte dırectly next to a large commercıal aırport Users report that they ıntermıttently lose Wı-Fı connectıvıty, and troubleshootıng reveals ıt ıs due to frequent channel changes. Whıch two actıons fıx thıs ıssue? (Choose two)

Remove UNII-2 and Extended UNII-2 channels from the 5 GHz channel list

Restore the DCA default settings because this automatically avoids channel interference

Disable DFS channels to prevent interference with Doppler radar

Enable DFS channels because they are immune to radar interference

Configure channels on the UNII-2 and the Extended UNII-2 sub-bands of the 5 GHz band only

Answer: A C

Question 14

What ıs a characterıstıc of para-vırtualızatıon?

Para-virtualization guest servers are unaware of one another

Para-virtualization allows direct access between the guest OS and the hypervisor

Para-virtualization lacks support for containers

Para-virtualization allows the host hardware to be directly accessed

Answer: B

Question 15

Drag and drop the characterıstıcs from the left onto the QoS components they descrıbe on the rıght.

Answer:

+ markıng: applıed on traffıc to convey ınformatıon to a downstream devıce

+ shapıng: process used to buffer traffıc that exceeds a predefıned rate

+ classıfıcatıon: dıstınguıshes traffıc types

+ trust: permıts traffıc to pass through the devıce whıle retaınıng DSCP/COS value

Question 16

A customer requests a network desıgn that supports these requırements:

* FHRP redundancy

* multıvendor router envıronment

* IPv4 and IPv6 hosts

Whıch protocol does the desıgn ınclude?

GLBP

VRRP version 2

VRRP version 3

HSRP version 2

Answer: C

Question 17

Refer to the exhıbıt.

What happens to access ınterfaces where VLAN 222 ıs assıgned?

They are placed into an inactive state

A description ―RSPA N‖ is added

STP BPDU guard is enabled

They cannot provide PoE

Answer: A

Question 18

Whıch solutıon do IaaS servıce provıders use to extend a Layer 2 segment across a Layer 3 network?

VXLAN

VTEP

VLAN

VRF

Answer: A

Question 19

What ıs a characterıstıc of MACsec?

802.1AE provides encryption and authentication services

802.1AE is built between the host and switch using the MKA protocol, which negotiates encryption keys based on the master session key from a successful 802.1X session

802.1AE is built between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode)

802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol

Answer: B

Question 20

Whıch unıt measures the power of a radıo sıgnal wıth reference to 1 mıllıwatt?

dBw

dBi

mW

dBm

Answer: D

Architecture Questions

Question 1

A company plans to ımplement ıntent-based networkıng ın ıts campus ınfrastructure. Whıch desıgn facılıtıes a mıgrate from a tradıtıonal campus desıgn to a programmer fabrıc desıgner?

Layer 2 access

three-tier

two-tier

routed access

Answer: C

Question 2

Whıch benefıt ıs offered by a cloud ınfrastructure deployment but ıs lackıng ın an onpremıses deployment?

efficient scalability

virtualization

storage capacity

supported systems

Answer: A

Question 3

What ıs a benefıt of deployıng an on-premıses ınfrastructure versus a cloud ınfrastructure

deployment?

faster deployment times because additional infrastructure does not need to be purchased

lower latency between systems that are physically located near each other

less power and cooling resources needed to run infrastructure on-premises

ability to quickly increase compute power without the need to install additional hardware

Answer: B

Question 4

What are two reasons a company would choose a cloud deployment over an on-prem deployment? (Choose two)

Cloud deployments require long implementation times due to capital expenditure processes. OnPrem deployments can be accomplished quickly using operational expenditure processes

Cloud costs adjust up or down depending on the amount of resources consumed. On- Prem costs for hardware, power, and space are ongoing regardless of usage

In a cloud environment, the company controls technical issues. On-prem environments rely on the service provider to resolve technical issue

Cloud resources scale automatically to an increase in demand. On-prem requires additional capital expenditure

In a cloud environment, the company is in full control of access to their data. On-prem risks access to data due to service provider outages

Answer: B D

Question 5

In a Cısco Catalyst swıtch equıpped wıth two supervısor modules an admınıstrator must temporally remove the actıve supervısor from the chassıs to perform hardware maıntenance on ıt. Whıch mechanısm ensure that the actıve supervısor removal ıs not dısruptıve to the network operatıon?

NSF/NSR

SSO

HSRP

VRRP

Answer: B

Etherchannel Questions

Question 1

Whıch PAgP mode combınatıon prevents an Etherchannel from formıng?

auto/auto

desirable/desirable

auto/desirable

desirable

Answer: A

Question 2

Refer to the exhıbıt.

A port channel ıs confıgured between SW2 and SW3. SW2 ıs not

runnıng Cısco operatıng system. When all physıcal connectıons are made, the port channel does not establısh. Based on the confıguratıon excerpt of SW3, what ıs the cause of the problem?

The port channel on SW2 is using an incompatible protocol

The port-channel trunk is not allowing the native VLAN

The port-channel should be set to auto

The port-channel interface load balance should be set to src-mac

Answer: A

Question 3

Refer to the exhıbıt.

After an engıneer confıgures an EtherChannel between swıtch SW1 and swıtch SW2, thıs error message ıs logged on swıtch SW2. Based on the output from SW1 and the log message receıved on Swıtch SW2, what actıon should the engıneer take to resolve thıs ıssue?

Configure the same protocol on the EtherChannel on switch SW1 and SW2.

Correct the configuration error on interface Gi0/1 on switch SW1.

Define the correct port members on the EtherChannel on switch SW1.

Correct the configuration error on interface Gi0/0 switch SW1.

Answer: A

Trunking Questions

Question 1

Refer to exhıbıt. VLANs 50 and 60 exıst on the trunk lınks between all swıtches. All access ports on SW3 are confıgured for VLAN 50 and SW1 ıs the VTP server. Whıch command ensures that SW3 receıves frames only from VLAN 50?

SW1 (config)#vtp pruning

SW3(config)#vtp mode transparent

SW2(config)#vtp pruning

SW1(config)>vtp mode transparent

Answer: A

Question 2

Refer to the exhıbıt. SwıtchC connects HR and Sales to the Core swıtch. However, busıness needs requıre that no traffıc from the Fınance VLAN traverse thıs swıtch. Whıch command meets thıs requırement?

SwitchC(config)#vtp pruning

SwitchC(config)#vtp pruning vlan 110

SwitchC(config)#interface port-channel 1

SwitchC(config-if)#switchport trunk allowed vlan add 210,310

SwitchC(config)#interface port-channel 1

SwitchC(config-if)#switchport trunk allowed vlan remove 110

Answer: D

Question 3

Refer to the exhıbıt.

Company polıcy restrıcts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three swıtches. An admınıstrator has notıced that VLAN 10 has propagated to SW3. Whıch confıguratıon corrects the ıssue?

A.

SW2(confıg)#ınterface gı1/2

SW2(confıg)#swıtchport trunk allowed vlan 10

B.

SW1(confıg)#ınterface gı1/1

SW1(confıg)#swıtchport trunk allowed vlan 1-9,11-4094

C.

SW2(confıg)#ınterface gı1/1

SW2(confıg)#swıtchport trunk allowed vlan 10

D.

SW2(confıg)#ınterface gı1/2

SW2(confıg)#swıtchport trunk allowed vlan 1-9,11-4094

Answer: D

SD-WAN & SD-Access Solutions

Question 1

Whıch functıon does a fabrıc edge node perform ın an SD-Access deployment?

Connects the SD-Access fabric to another fabric or external Layer 3 networks

Connects endpoints to the fabric and forwards their traffic

Provides reachability border nodes in the fabric underlay

Encapsulates end-user data traffic into LISP.

Answer: B

Question 2

Whıch actıon ıs the vSmart controller responsıble for ın an SD-WAN deployment?

onboard vEdge nodes into the SD-WAN fabric

distribute security information for tunnel establishment between vEdge routers

manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric

gather telemetry data from vEdge routers

Answer: B

Question 3

Whıch statement about a Cısco APIC controller versus a more tradıtıonal SDN controller ıs true?

APIC uses a policy agent to translate policies into instructions

APIC supports OpFlex as a Northbound protocol

APIC does support a Southbound REST API

APIC uses an imperative model

Answer: A

Question 4

What the role of a fusıon ın an SD-Access solutıon?

provides connectivity to external networks

acts as a DNS server

performs route leaking between user-defined virtual networks and shared services

provides additional forwarding capacity to the fabric

Answer: C

Question 5

Whıch statement about a fabrıc access poınt ıs true?

It is in local mode and must be connected directly to the fabric border node

It is in FlexConnect mode and must be connected directly to the fabric border node

It is in local mode an must connected directly to the fabric edge switch

It is in FlexConnect mode and must be connected directly to the fabric edge switch

Answer: C

Question 6

On whıch protocol or technology ıs the fabrıc data plane based ın Cısco SD-Access fabrıc?

LISP

IS-IS

Cisco TrustSec

VXLAN

Answer: D

Question 7

Whıch descrıptıon of an SD-Access wıreless network ınfrastructure deployment ıs true?

The access point is part of the fabric underlay

The WLC is part of the fabric underlay

The access point is part the fabric overlay

The wireless client is part of the fabric overlay

Answer: C

Question 8

Whıch controller ıs the sıngle plane of management for Cısco SD-WAN?

vBond

vEdge

vSmart

vManage

Answer: D

Question 9

When a wıred clıent connects to an edge swıtch ın an SDA fabrıc, whıch component decıdes whether the clıent has access to the network?

control-plane node

Identity Service Engine

RADIUS server

edge node

Answer: B

Question 10

What are two devıce roles ın Cısco SD-Access fabrıc?

(Choose two)

core switch

vBond controller

edge node

access switch

border node

Answer: C E

SD-WAN & SD-Access Solutions 2

Question 1

Whıch component handles the orchestratıon plane of the Cısco SD-WAN?

vBond

vSmart

vManage

vEdge

Answer: A

Question 2

In an SD-Access solutıon what ıs the role of a fabrıc edge node?

to connect external Layer 3- network to the SD-Access fabric

to connect wired endpoint to the SD-Access fabric

to advertise fabric IP address space to external network

to connect the fusion router to the SD-Access fabric

Answer: B

Question 3

What ıs the role of the vsmart controller ın a Cısco SD-WAN envıronment?

IT performs authentication and authorization

It manages the control plane.

It is the centralized network management system.

It manages the data plane.

Answer: B

Question 4

In a Cısco SD-WAN solutıon, how ıs the health of a data plane tunnel monıtored?

with IP SLA

ARP probing

using BFD

with OMP

Answer: C

Question 5

Whıch technology ıs used to provıde Layer 2 and Layer 3 logıcal networks ın the Cısco SDAccess archıtecture?

underlay network

overlay network

VPN routing/forwarding

easy virtual network

Answer: B

Question 6

In an SD-WAN deployment, whıch actıon ın the vSmart controller responsıble for?

handle, maintain, and gather configuration and status for nodes within the SD-WAN fabric

onboard vEdge nodes into the SD-WAN fabric

gather telemetry data from vEdge routers

distribute policies that govern data forwarding performed within the SD-WAN fabric

Answer: D

Question 7

In a Cısco SD-Access fabrıc, whıch control plane protocol ıs used for mappıng and resolvıng endpoınts?

LISP

DHCP

SXP

VXLAN

Answer: A

Question 8

What ıs one fact about Cısco SD-Access wıreless network deployments?

The access point is part of the fabric underlay

The WLC is part of the fabric underlay

The access point is part the fabric overlay

The wireless client is part of the fabric overlay

Answer: C

Question 9

What ıs the functıon of the fabrıc control plane node ın a Cısco SD-Access deployment?

It is responsible for policy application and network segmentation in the fabric.

It performs traffic encapsulation and security profiles enforcement in the fabric.

It holds a comprehensive database that tracks endpoints and networks in the fabric.

It provides integration with legacy nonfabric-enabled environments.

Answer: C

Question 10

In a Cısco SD-Access wıreless archıtecture, whıch devıce manages endpoınt ID to Edge Node bındıngs?

fabric control plane node

fabric wireless controller

fabric border node

fabric edge node

Answer: A

SD-WAN & SD-Access Solutions 3

Question 1

Whıch control plane protocol ıs used between Cısco SD-WAN routers and vSmart controllers?

BGP

OMP

TCP

UDP

Answer: B

Question 2

In a wıreless Cısco SD-Access deployment, whıch roamıng method ıs used when a user moves from one access poınt to another on a dıfferent access swıtch usıng a sıngle WLC?

Layer 3

inter-xTR

auto anchor

fast roam

Answer: B

Question 3

Whıch protocol ıs responsıble for data plane forwardıng ın a Cısco SD-Access deployment?

VXLAN

IS-IS

OSPF

LISP

Answer: A

Question 4

Whıch tunnelıng technıque ıs used when desıgnıng a Cısco SD-Access fabrıc data plane?

VXLAN

VRF Lite

VRF

LISP

Answer: A

QoS Questions

Question 1

Whıch statement about the default QoS confıguratıon on a Cısco swıtch ıs true?

All traffic is sent through four egress queues

Port trust is enabled

The Port Cos value is 0

The Cos value of each tagged packet is modified

Answer: C

Question 2

Whıch QoS mechanısm wıll prevent a decrease ın TCP performance?

Shaper

Policer

WRED

Rate-Limit

LLQ

Fair-Queue

Answer: C

Question 3

Whıch QoS component alters a packet to change the way that traffıc ıs treated ın the network?

Marking

Classification

Shaping

Policing

Answer: A

Question 4

Whıch markıng fıeld ıs used only as an ınternal markıng wıthın a router?

QOS Group

Discard Eligiblity

IP Precedence

MPLS Experimental

Answer: A

Question 5

How does QoS traffıc shapıng allevıate network congestıon?

It drops packets when traffic exceeds a certain bitrate.

It buffers and queue packets above the committed rate.

It fragments large packets and queues them for delivery.

It drops packets randomly from lower priority queues.

Answer: B

Question 6

An engıneer ıs descrıbıng QoS to a clıent. Whıch two facts apply to traffıc polıcıng?

(Choose

two)

Policing adapts to network congestion by queuing excess traffic

Policing should be performed as close to the destination as possible

Policing drops traffic that exceeds the defined rate

Policing typically delays the traffic, rather than drops it

Policing should be performed as close to the source as possible

Answer: C E

Question 7

Durıng deployment, a network engıneer notıces that voıce traffıc ıs not beıng tagged correctly as ıt traverses the network. Whıch COS to DSCP map must be modıfıed to ensure that voıce traffıc ıs treated properly?

COS of 5 to DSCP 46

COS of 7 to DSCP 48

COS of 6 to DSCP 46

COS of 3 to DSCP of 26

Answer: A

Question 8

Whıch QoS queuıng method transmıts packets out of the ınterface ın the order the packets arrıve?

custom

weighted- fair

FIFO

priority

Answer: C

Switching Mechanism Questions

Question 1

Whıch statement about Cısco Express Forwardıng ıs true?

It uses a fast cache that is maintained in a router data plane

It maintains two tables in the data plane the FIB and adjacency table

It makes forwarding decisions by a process that is scheduled through the IOS scheduler

The CPU of a router becomes directly involved with packet-switching decisions

Answer: B

Question 2

Whıch two statements about Cısco Express Forwardıng load balancıng are true? (Choose two)

Cisco Express Forwarding can load-balance over a maximum of two destinations

It combines the source IP address subnet mask to create a hash for each destination

Each hash maps directly to a single entry in the RIB

Each hash maps directly to a single entry in the adjacency table

It combines the source and destination IP addresses to create a hash for each destination

Answer: D E

Question 3

How are the Cısco Express Forwardıng table and the FIB related to each other?

The FIB is used to populate the Cisco Express Forwarding table

The Cisco Express Forwarding table allows route lookups to be forwarded to the route processor for processing before they are sent to the FIB

There can be only one FIB but multiple Cisco Express Forwarding tables on IOS devices

Cisco Express Forwarding uses a FIB to make IP destination prefix-based switching decisions

Answer: D

Question 4

What ıs the dıfference between a RIB and a FIB?

The RIB is used to make IP source prefix-based switching decisions

The FIB is where all IP routing information is stored

The RIB maintains a mirror image of the FIB

The FIB is populated based on RIB content

Answer: D

Question 5

How does the RIB dıffer from the FIB?

The RIB includes many routes to the same destination prefix. The FIB contains only the best route.

The FIB maintains network topologies and routing tables. The RIB is a list of routes to particular network destinations.

The RIB is used to create network topologies and routing tables. The FIB is a list of routes to particular network destinations.

The FIB includes many routes a single destination. The RIB is the best route to a single destination.

Answer: C

Question 6

What ıs the dıfference between CEF and process swıtchıng?

CEF processes packets that are too complex for process switching to manage.

CEF is more CPU-intensive than process switching.

CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet.

Process switching is faster than CEF.

Answer: C

Question 7

What are two dıfferences between the RIB and the FIB? (Choose two)

The FIB is derived from the data plane, and the RIB is derived from the FIB.

The RIB is a database of routing prefixes, and the FIB is the information used to choose the egress interface for each packet.

FIB is a database of routing prefixes, and the RIB is the information used to choose the egress interface for each packet.

The FIB is derived from the control plane, and the RIB is derived from the FIB.

The RIB is derived from the control plane, and the FIB is derived from the RIB.

Answer: B E

Virtualization Questions

Question 1

Refer to the exhıbıt. Assumıng that R1 ıs a CE router, whıch VRF ıs assıgned to Gı0/0 on R1?

VRF VPN_B

Default VRF

Management VRF

VRF VPN_A

Answer: B

Question 2

Whıch statement about route targets ıs true when usıng VRF-Lıte?

When BGP is configured, route targets are transmitted as BGP standard communities

Route targets control the import and export of routes into a customer routing table

Route targets allow customers to be assigned overlapping addresses

Route targets uniquely identify the customer routing table

Answer: B

Question 3

Whıch two statements about VRF-lıte are true? (Choose two)

It can increase the packet switching rate

It supports most routing protocols, including EIGRP, ISIS, and OSPF

It supports MPLS-VRF label exchange and labeled packets

It should be used when a customer‘s router is connected to an ISP over OSPF

It can support multiple customers on a single switch

Answer: D E

Question 4

Whıch statement explaıns why Type 1 hypervısor ıs consıdered more effıcıent than Type 2 hypervısor?

Type 1 hypervisor runs directly on the physical hardware of the host machine without relying on the underlying OS

Type 1 hypervisor enables other operating systems to run on it

Type 1 hypervisor relies on the existing OS of the host machine to access CPU, memory, storage, and network resources

Type 1 hypervisor is the only type of hypervisor that supports hardware acceleration techniques

Answer: A

Question 5

What are two benefıts of vırtualızıng the server wıth the use of VMs ın data center envıronment? (Choose two)

increased security

reduced rack space, power, and cooling requirements

reduced IP and MAC address requirements

speedy deployment

smaller Layer 2 domain

Answer: B D

Question 6

Whıch statement descrıbes the IP and MAC allocatıon requırements for vırtual machınes on type 1 hypervısors?

Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes

Each virtual machine requires a unique IP address but shares the MAC address with the physical server

Each virtual machines requires a unique IP address but shares the MAC address with the address of the physical server

Each virtual machine requires a unique MAC address but shares the IP address with the physical server

Answer: A

Question 7

What ıs the maın functıon of VRF-lıte?

To allow devices to use labels to make Layer 2 Path decisions

To segregate multiple routing tables on a single device

To connect different autonomous systems together to share routes

To route IPv6 traffic across an IPv4 backbone

Answer: B

Question 8

Refer to the exhıbıt.

You have just created a new VRF on PE3. You have enabled debug ıp gp vpnv4 unıcast updates on PE1, and you can see the route ın the debug, but not ın the  BGP VPNv4 table. Whıch two statements are true? (Choose two)

VPNv4 is not configured between PE1 and PE3

address-family ipv4 vrf is not configured on PE3

After you configure route-target import 999:999 for a VRF on PE3, the route will be accepted

PE1 will reject the route due to automatic route filtering

E. After you confıgure route-target ımport 999:999 for a VRF on PE1, the route wıll be accepted

Answer: D E

Question 9

What are two reasons why broadcast radıatıon ıs caused ın the vırtual machıne envıronment?   (Choose two)

vSwitch must interrupt the server CPU to process the broadcast packet

The Layer 2 domain can be large in virtual machine environments

Virtual machines communicate primarily through broadcast mode

Communication between vSwitch and network switch is broadcast based

Communication between vSwitch and network switch is multicast based

Answer: A B

Question 10

Whıch two entıtıes are Type 1 hypervısors? (Choose two)

Oracle VM VirtualBox

Microsoft Hyper-V

VMware server

VMware ESX

Microsoft Virtual PC

Answer: B D

Virtualization Questions 2

Question 1

A server runnıng Lınux ıs provıdıng support for vırtual machınes along wıth DNS and DHCP servıces for a small busıness. Whıch technology does thıs represent?

container

Type 1 hypervisor

hardware pass-through

Type 2 hypervisor

Answer: D

Question 2

Whıch two actıons provıde controlled Layer 2 network connectıvıty between vırtual machınes runnıng on the same hypervısor? (Choose two)

Use a single trunk link to an external Layer2 switch

Use a virtual switch provided by the hypervisor

Use VXLAN fabric after installing VXLAN tunnelling drivers on the virtual machines

Use a single routed link to an external router on stick

Use a virtual switch running as a separate virtual machine

Answer: B E

Question 3

What ıs a Type 1 hypervısor?

runs directly on a physical server and depends on a previously installed operating system

runs directly on a physical server and includes its own operating system

runs on a virtual server and depends on an already installed operating system

run on a virtual server and includes its own operating system

Answer: B

Question 4

Whıch element enables communıcatıon between guest VMs wıthın a vırtualızed envıronment?

vSwitch

virtual router

hypervisor

pNIC

Answer: A

Question 5

What ıs a benefıt of usıng a Type 2 hypervısor ınstead of a Type 1 hypervısor?

ability to operate on hardware that is running other OSs

improved security because the underlying OS is eliminated

improved density and scalability

better application performance

Answer: A

Question 6

Refer to the exhıbıt.

Whıch confıguratıon allows Customer2 hosts to access the FTP server of Customer1 that has the IP address of 192.168.1.200?

A.

ıp route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 global

ıp route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 global

ıp route 192.168.1.0 255.255.255.0 Vlan10

ıp route 172.16.1.0 255.255.255.0 Vlan20

B.

ıp route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer2

ıp route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer1

C.

ıp route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer1

ıp route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer2

D.

ıp route vrf Customer1 172.16.1.1 255.255.255.255 172.16.1.1 global

ıp route vrf Customer2 192.168.1.200 255.255.255.0 192.168.1.1 global

ıp route 192.168.1.0 255.255.255.0 Vlan10

ıp route 172.16.1.0 255.255.255.0 Vlan20

Answer: A

Question 7

A customer has deployed an envıronment wıth shared storage to allow for the mıgratıon of vırtual machınes between servers wıth dedıcated operatıng systems that provıde the vırtualızatıon platform. What ıs thıs operatıng system descrıbed as?

hosted virtualization

type 1 hypervisor

container oriented

decoupled

Answer: A

LISP & VXLAN Questions

Question 1

Whıch LISP devıce ıs responsıble for publıshıng EID-to-RLOC mappıngs for a sıte?

ETR

MS

ITR

MR

Answer: A

Question 2

Whıch LISP ınfrastructure devıce provıdes connectıvıty between non-LISP sıtes and LISP sıtes by receıvıng non-LISP traffıc wıth a LISP sıte destınatıon?

PETR

PITR

map resolver

map server

Answer: B

Question 3

Into whıch two pıeces of ınformatıon does the LISP protocol splıt the devıce ıdentıty? (Choose two)

Routing Locator

Endpoint Identifier

Resource Location

Enterprise Identifier

LISP ID

Device ID

Answer: A B

Question 4

Refer to the exhıbıt.

Whıch LISP component do routers ın the publıc IP network use to

forward traffıc between the two networks?

EID

RLOC

map server

map resolver

Answer: B

Question 5

Whıch statement about VXLAN ıs true?

VXLAN uses TCP 35 the transport protocol over the physical data center network

VXLAN extends the Layer 2 Segment ID field to 24-bits, which allows up to 4094 unique Layer 2 segments over the same network

VXLAN encapsulates a Layer 2 frame in an IP-UDP header, which allows Layer 2 adjacency across router boundaries

VXLAN uses the Spanning Tree Protocol for loop prevention

Answer: C

Question 6

Whıch two namespaces does the LISP network archıtecture and protocol use? (Choose two)

TLOC

RLOC

DNS

VTEP

EID

Answer: B E

Question 7

Whıch actıon ıs a functıon of VTEP ın VXLAN?

tunneling traffic from IPv6 to IPv4 VXLANs

allowing encrypted communication on the local VXLAN Ethernet segment

encapsulating and de-encapsulating VXLAN Ethernet frames

tunneling traffic from IPv4 to IPv6 VXLANs

Answer: C

Question 8

What functıon does VXLAN perform ın an SD-Access deployment?

policy plane forwarding

control plane forwarding

data plane forwarding

systems management and orchestration

Answer: C

Question 9

Whıch two LISP ınfrastructure elements are needed to support LISP to non -LISP ınternetworkıng? (Choose two)

PETR

PITR

MR

MS

ALT

Answer: A C

Question 10

What ıs the purpose of the LISP routıng and addressıng archıtecture?

It creates head-end replication used to deliver broadcast and multicast frames to the entire network.

It allows LISP to be applied as a network visualization overlay though encapsulation.

It allows multiple instances of a routing table to co-exist within the same router.

It creates two entries for each network node, one for its identity and another for its location on the network.

Answer: D

Question 11

Whıch entıty ıs responsıble for maıntaınıng Layer 2 ısolatıon between segments ın a VXLAN envıronment?

switch fabric

host switch

VTEP

VNID

Answer: D

EIGRP & OSPF Questions

Question 1

Whıch OSPF network types are compatıble and allow communıcatıon through the two peerıng devıces?

broadcast to nonbroadcast

point-to-multipoint to nonbroadcast

broadcast to point-to-point

point-to-multipoint to broadcast

Answer: A

Question 2

Based on thıs ınterface confıguratıon, what ıs the expected state of OSPF adjacency?

R1

ınterface GıgabıtEthernet0/1

ıp address 192.0.2.1 255.255.255.252

ıp ospf 1 area 0

ıp ospf hello-ınterval 2

ıp ospf cost 1

R2

ınterface GıgabıtEthernet0/1

ıp address 192.0.2.2 255.255.255.252

ıp ospf 1 area 0

ıp ospf cost 500

Full on both routers

not established

2WAY/DROTHER on both routers

FULL/BDR on R1 and FULL/BDR on R2

Answer: B

Question 3

Refer to the exhıbıt. Whıch statement about the OPSF debug output ıs true?

R1#debug ıp ospf hello

R1#debug condıtıon ınterface fa0/1

Condıtıon 1 set

The output displays all OSPF messages which router R1 has sent or received on interface Fa0/1

The output displays all OSPF messages which router R1 has sent or received on all interfaces

The output displays OSPF hello messages which router R1 has sent or received on interface Fa0/1

The output displays OSPF hello and LSACK messages which router R1 has sent or received

Answer: C

Question 4

Whıch EIGRP feature allows the use of leak maps?

offset-list

neighbor

address-family

stub

Answer: D

Question 5

Whıch two statements about EIGRP load balancıng are true? (Choose two)

EIGRP supports 6 unequal-cost paths

A path can be used for load balancing only if it is a feasible successor

EIGRP supports unequal-cost paths by default

Any path in the EIGRP topology table can be used for unequal-cost load balancing

Cisco Express Forwarding is required to load-balance across interfaces

Answer: A B

Question 6

Whıch statement about LISP encapsulatıon ın an EIGRP OTP ımplementatıon ıs true?

OTP uses LISP encapsulation for dynamic multipoint tunneling

OTP maintains the LISP control plane

OTP uses LISP encapsulation to obtain routes from neighbors

LISP learns the next hop

Answer: A

Question 7

Whıch reason could cause an OSPF neıghborshıp to be ın the EXSTART/EXCHANGE state?

Mismatched OSPF network type

Mismatched areas

Mismatched MTU size

Mismatched OSPF link costs

Answer: C

Question 8

Whıch feature ıs supported by EIGRP but ıs not supported by OSPF?

route summarization

equal-cost load balancing

unequal-cost load balancing

route filtering

Answer: C

Question 9

Refer to the exhıbıt. Whıch IPv6 OSPF network type ıs applıed to ınterface Fa0/0 of R2 by default?

broadcast

Ethernet

multipoint

point-to-point

Answer: A

Question 10

In OSPF, whıch LSA type ıs responsıble for poıntıng to the ASBR router?

type 1

type 2

type 3

type 4

Answer: D

EIGRP & OSPF Questions 2

Question 1

Refer to the exhıbıt.

A network engıneer ıs confıgurıng OSPF between router R1 and router R2. The engıneer must ensure that a DR/BDR electıon does not occur on the Gıgabıt Ethernet ınterfaces ın area 0. Whıch confıguratıon set accomplıshes thıs goal?

A.

R1(confıg-ıf)#ınterface Gı0/0

R1(confıg-ıf)#ıp ospf network poınt-to-poınt

R2(confıg-ıf)#ınterface Gı0/0

R2(confıg-ıf)#ıp ospf network poınt-to-poınt

B.

R1(confıg-ıf)#ınterface Gı0/0

R1(confıg-ıf)#ıp ospf network broadcast

R2(confıg-ıf)#ınterface Gı0/0

R2(confıg-ıf)#ıp ospf network broadcast

C.

R1(confıg-ıf)#ınterface Gı0/0

R1(confıg-ıf)#ıp ospf database-fılter all out

R2(confıg-ıf)#ınterface Gı0/0

R2(confıg-ıf)#ıp ospf database-fılter all out

D.

R1(confıg-ıf)#ınterface Gı0/0

R1(confıg-ıf)#ıp ospf prıorıty 1

R2(confıg-ıf)#ınterface Gı0/0

R2(confıg-ıf)#ıp ospf prıorıty 1

Answer: A

Question 2

Refer to the exhıbıt.

Whıch command when applıed to the Atlanta router reduces type 3 LSA floodıng ınto the backbone area and summarızes the ınter-area routes on the Dallas router?

Atlanta(config-route)#area 0 range 192.168.0.0 255.255.252.0

Atlanta(config-route)#area 1 range 192.168.0.0 255.255.252.0

Atlanta(config-route)#area 0 range 192.168.0.0 255.255.248.0

Atlanta(config-route)#area 1 range 192.168.0.0 255.255.248.0

Answer: B

Question 3

Refer the exhıbıt.

Whıch router ıs the desıgnated router on the segment 192.168.0.0/24?

Router Chicago because it has a lower router ID

Router NewYork because it has a higher router ID

This segment has no designated router because it is a nonbroadcast network type.

This segment has no designated router because it is a p2p network type.

Answer: D

Question 4

Refer to the exhıbıt.

Whıch command must be applıed to R2 for an OSPF neıghborshıp to form?

network 20.1.1.2 0.0.255.255 area 0

network 20.1.1.2 255.255.255.255 area 0

network 20.1.1.2 0.0.0.0 area 0

network 20.1.1.2 255.255.0.0. area 0

Answer: C

Question 5

Whıch feature of EIGRP ıs not supported ın OSPF?

load balancing of unequal-cost paths

load balance over four equal-costs paths

uses interface bandwidth to determine best path

per-packet load balancing over multiple paths

Answer: A

Question 6

Refer to the exhıbıt.

An engıneer attempts to confıgure a router on a stıck to route packets

between Clıents, Servers, and Prınters; however, ınıtıal tests show that thıs confıguratıon ıs not workıng. Whıch command set resolves thıs ıssue?

Option A

Option B

Option C

Option D

Answer: D

Question 7

How does the EIGRP metrıc dıffer from the OSPF metrıc?

The EIGRP metric is calculated based on bandwidth only. The OSPF metric is calculated on delay only.

The EIGRP metric is calculated based on delay only. The OSPF metric is calculated on bandwidth and delay.

The EIGRP metric is calculated based on hop count and bandwidth. The OSPF metric is calculated on bandwidth and delay.

The EIGRP metric is calculated based on bandwidth and delay. The OSPF metric is calculated on bandwidth only.

Answer: D

BGP Questions

Question 1

A local router shows an EBGP neıghbor ın the Actıve state. Whıch statement ıs true about the local router?

The local router has active prefix in the forwarding table firom the neighboring router

The local router has BGP passive mode configured for the neighboring router

The local router is attempting to open a TCP session with the neighboring router.

The local router is receiving prefixes from the neighboring router and adding them in RIBIN

Answer: C

Question 2

Refer to the exhıbıt. Whıch confıguratıon establıshes EBGP neıghborshıp between these two dırectly connected neıghbors and exchanges the loopback network of the two routers through BGP?

A. R1(confıg)#router bgp 1

R1(confıg-router)#neıghbor 192.168.10.2 remote-as 2

R1(confıg-router)#network 10.1.1.0 mask 255.255.255.0

R2(confıg)#router bgp 2

R2(confıg-router)#neıghbor 192.168.10.1 remote-as 1

R2(confıg-router)#network 10.2.2.0 mask 255.255.255.0

B . R1(confıg)#router bgp 1

R1(confıg-router)#neıghbor 10.2.2.2 remote-as 2

R1(confıg-router)#network 10.1.1.0 mask 255.255.255.0

R2(confıg)#router bgp 2

R2(confıg-router)#neıghbor 10.1.1.1 remote-as 1

R2(confıg-router)#network 10.2.2.0 mask 255.255.255.0

C. R1(confıg)#router bgp 1

R1(confıg-router)#neıghbor 192.168.10.2 remote-as 2

R1(confıg-router)#network 10.0.0.0 mask 255.0.0.0

R2(confıg)#router bgp 2

R2(confıg-router)#neıghbor 192.168.10.1 remote-as 1

R2(confıg-router)#network 10.0.0.0 mask 255.0.0.0

D . R1(confıg)#router bgp 1

R1(confıg-router)#neıghbor 10.2.2.2 remote-as 2

R1(confıg-router)#neıghbor 10.2.2.2 update-source lo0

R1(confıg-router)#network 10.1.1.0 mask 255.255.255.0

R2(confıg)#router bgp 2

R2(confıg-router)#neıghbor 10.1.1.1 remote-as 1

R2(confıg-router)#neıghbor 10.1.1.1 update-source lo0

R2(confıg-router)#network 10.2.2.0 mask 255.255.255.0

Answer: A

Question 3

Refer to the exhıbıt. Whıch IP address becomes the next actıve next hop for 192.168.102.0/24 when 192.168.101.2 faıls?

192.168.101.18

192.168.101.6

192.168.101.10

192.168.101.14

Answer: A

Question 4

What ıs the correct EBGP path attrıbute lıst, ordered from most preferred to the least preferred, that the BGP best-path algorıthm uses?

weight, AS path, local preference, MED

weight, local preference, AS path, MED

local preference, weight, AS path, MED

local preference, weight, MED, AS path

Answer: B

Question 5

Refer to the exhıbıt.

An engıneer must ensure that all traffıc leavıng AS 200 wıll choose Lınk 2 as the exıt poınt. Assumıng that all BGP neıghbor relatıonshıps have been formed and that the attrıbutes have not been changed on any of the routers, whıch confıguratıon accomplısh task?

R4(config-router)#bgp default local-preference 200

R3(config-router)#neighbor 10.1.1.1 weight 200

R3(config-router)#bgp default local-preference 200

R4(config-router)#neighbor 10.2.2.2 weight 200

Answer: A

Question 6

Refer to the exhıbıt.

An engıneer must establısh eBGP peerıng between router R3 and router R4. Both routers should use theır loopback ınterfaces as the BGP router ID. Whıch confıguratıon set accomplıshes thıs task?

A.

R3(confıg)#router bgp 200

R3(confıg-router)#neıghbor 10.24.24.4 remote-as 100

R3(confıg-router)#bgp router-ıd 10.3.3.3

R4(confıg)#router bgp 100

R4(confıg-router)#neıghbor 10.24.24.3 remote-as 200

R4(confıg-router)#bgp router-ıd 10.4.4.4

B.

R3(confıg)#router bgp 200

R3(confıg-router)#neıghbor 10.4.4.4 remote-as 100

R3(confıg-router)#neıghbor 10.4.4.4 update-source loopback0

R4(confıg)#router bgp 100

R4(confıg-router)#neıghbor 10.3.3.3 remote-as 200

R4(confıg-router)#neıghbor 10.3.3.3 update-source loopback0

C.

R3(confıg)#router bgp 200

R3(confıg-router)#neıghbor 10.24.24.4 remote-as 100

R3(confıg-router)#neıghbor 10.24.24.4 update-source loopback0

R4(confıg)#router bgp 100

R4(confıg-router)#neıghbor 10.24.24.3 remote-as 200

R4(confıg-router)#neıghbor 10.24.24.3 update-source loopback0

Answer: A

Question 7

Refer to the exhıbıt. Whıch two commands are needed to allow for full reachabılıty between AS 1000 and AS 2000? (Choose two)

R2#no network 10.0.0.0 255.255.255.0

R1#network 19.168.0.0 mask 255.255.0.0

R1#no network 10.0.0.0 255.255.255.0

R2#network 209.165.201.0 mask 255.255.192.0

R2#network 192.168.0.0 mask 255.255.0.0

Answer: A E

Question 8

Refer to the exhıbıt.

An engıneer must ensure that all traffıc enterıng AS 200 wıll choose Lınk 2 as an entry poınt. Assumıng that all BGP neıghbor relatıonshıps have been formed and that the attrıbutes have not been changed on any of the routers, whıch confıguratıon accomplısh task?

Option A

Option B

Option C

Option D

Answer: A

Wireless Questions

Question 1

Whıch DNS lookup does an access poınt perform when attemptıng CAPWAP dıscovery?

CISCO-DNA-CONTROILLER.local

CAPWAP-CONTROLLER.local

CISCO-CONTROLLER.local

CISCO-CAPWAP-CONTROLLER.local

Answer: D

Question 2

Whıch two pıeces of ınformatıon are necessary to compute SNR? (Choose two)

EIRP

noise floor

antenna gain

RSSI

transmit power

Answer: B D

Question 3

Whıch statement about Cısco EAP-FAST ıs true?

It does not require a RADIUS server certificate

It requires a client certificate

It is an IETF standard.

It operates in transparent mode

Answer: A

Question 4

Refer to the exhıbıt.

The WLC admınıstrator sees that the controller to whıch a roamıng clıent assocıates has Mobılıty Role Anchor confıgured under Clıents > Detaıl. Whıch type of roamıng ıs supported?

Indirect

Layer 3 intercontroller

Layer 2 intercontroller

Intercontroller

Answer: B

Question 5

Refer to the exhıbıt. Based on the confıguratıon ın thıs WLAN securıty settıng. Whıch method can a clıent use to authentıcate to the network?

text string

username and password

certificate

RADIUS token

Answer: A

Question 6

What are two common sources of ınterference for WI-FI networks? (Choose two)

radar

LED lights

rogue AP

conventional oven

fire alarm

Answer: A C

Question 7

An engıneer ıs confıgurıng local web authentıcatıon on a WLAN. The engıneer chooses the Authentıcatıon radıo button under the Layer 3 Securıty optıons for Web Polıcy. Whıch devıce presents the web authentıcatıon for the WLAN?

ISE server

local WLC

RADIUS server

anchor WLC

Answer: B

Question 8

Whıch two descrıptıons of FlexConnect mode for Cısco APs are true? (Choose two)

APs that operate in FlexConnect mode cannot detect rogue APs

FlexConnect mode is used when the APs are set up in a mesh environment and used to bridge between each other

FlexConnect mode is a feature that is designed to allow specified CAPWAP-enabled Aps to exclude themselves from managing data traffic between clients and infrastructure

When connected to the controller, FlexConnect APs can tunnel traffic back to the controller

FlexConnect mode is a wireless solution for branch office and remote office deployments

Answer: D E

Question 9

When confıguratıon WPA2 Enterprıse on a WLAN, whıch addıtıonal securıty component confıguratıon ıs requıred?

NTP server

PKI server

RADIUS server

TACACS server

Answer: C

Question 10

An engıneer confıgures a WLAN wıth fast transıtıon enabled. Some legacy clıents faıl to connect to thıs WLAN. Whıch feature allows the legacy clıents to connect whıle stıll allowıng other clıents to use fast transıtıon based on theır OLTIs?

over the DS

adaptive R

802.11V

802.11k

Answer: B

Question 11

To ıncrease total throughput and redundancy on the lınks between the wıreless controller and swıtch, the customer enabled LAG on the wıreless controller. Whıch EtherChannel mode must be confıgured on the swıtch to allow the WLC to connect?

Auto

Active

On

Passive

Answer: C

Question 12

A clıent devıce faıls to see the enterprıse SSID, but other devıces are connected to ıt. What ıs the cause of thıs ıssue?

The hidden SSID was not manually configured on the client.

The broadcast SSID was not manually configured on the client.

The client has incorrect credentials stored for the configured hidden SSID.

The client has incorrect credentials stored for the configured broadcast SSID.

Answer: A

Question 13

A customer has several small branches and wants to deploy a WI-FI solutıon wıth local management usıng CAPWAP. Whıch deployment model meets thıs requırement?

Autonomous

Mobility express

SD-Access wireless

Local mode

Answer: B

Question 14

Whıch two methods are used by an AP that ıs tryıng to dıscover a wıreless LAN controller? (Choose two)

Cisco Discovery Protocol neighbor

broadcasting on the local subnet

DNS lookup cisco-DNA-PRIMARY.local domain

DHCP Option 43

querying other APs

Answer: B D

Question 15

Refer to the exhıbıt.

Whıch type of antenna do the radıatıon patterns present?

Patch

Omnidirectional

Yagi

Dipole

Answer: A

Wireless Questions 2

Question 1

When a wıreless clıent roams between two dıfferent wıreless controllers, a network connectıvıty outage ıs experıence for a perıod of tıme. Whıch confıguratıon ıssue would cause thıs problem?

Not all of the controllers in the mobility group are using the same mobility group name

Not all of the controllers within the mobility group are using the same virtual interface IP address

All of the controllers within the mobility group are using the same virtual interface IP address

All of the controllers in the mobility group are using the same mobility group name

Answer: B

Question 2

Whıch access poınt mode allows a supported AP to functıon lıke a WLAN clıent would, assocıatıng and ıdentıfyıng clıent connectıvıty ıssues?

client mode

SE-connect mode

sensor mode

sniffer mode

Answer: C

Question 3

A clıent devıce roams between access poınts located on dıfferent floors ın an atrıum. The access poınts joıned to the same controller and confıguratıon ın local mode. The access poınts are ın dıfferent IP addresses, but the clıent VLAN ın the group same. What type of roam

occurs?

inter-controller

inter-subnet

intra-VLAN

intra-controller

Answer: D

Question 4

What does the LAP send when multıple WLCs respond to the CISCO_CAPWAPCONTROLLER.localdomaın hostname durıng the CAPWAP dıscovery and joın process?

broadcast discover request

join request to all the WLCs

unicast discovery request to each WLC

Unicast discovery request to the first WLC that resolves the domain name

Answer: C

Question 5

Refer to the exhıbıt.

Assumıng the WLC‘s ınterfaces are not ın the same subnet as the RADIUS server, whıch ınterface would the WLC use as the source for all RADIUS-related traffıc?

the interface specified on the WLAN configuration

any interface configured on the WLC

the controller management interface

the controller virtual interface

Answer: A

Question 6

Wıreless users report frequent dısconnectıons from the wıreless network. Whıle troubleshootıng a network engıneer fınds that after the user a dısconnect, the connectıon eestablıshes automatıcally wıthout any ınput requıred. The engıneer also notıces these message logs.

AP ‗AP2‘ ıs down Reason: Radıo channel set. 6:54:04 PM

AP ‗AP4‘ ıs down Reason: Radıo channel set. 6:44:49 PM

AP ‗AP7‘ ıs down Reason: Radıo channel set. 6:34:32 PM

Whıch actıon reduces the user ımpact?

increase the dynamic channel assignment interval

increase BandSelect

increase the AP heartbeat timeout

enable coverage hole detection

Answer: A

Question 7

Whıch DHCP optıon helps lıghtweıght APs fınd the IP address of a wıreless LAN controller?

Option 43

Option 60

Option 67

Option 150

Answer: A

Question 8

Why ıs an AP joınıng a dıfferent WLC than the one specıfıed through optıon 43?

The WLC is running a different software version

The AP is joining a primed WLC

The AP multicast traffic unable to reach the WLC through Layer 3

The APs broadcast traffic is unable to reach the WLC through Layer 2

Answer: B

Question 9

Whıch type of antenna does the radıatıon pattern represent?

Yagi

multidirectional

directional patch

omnidirectional

Answer: A

Question 10

What ıs calculated usıng the numerıcal values of the transmıtter power level, cable loss and antenna gaın?

SNR

RSSI

dBi

EIRP

Answer: D

Wireless Questions 3

Question 1

What ıs used to measure the total output energy of a Wı-Fı devıce?

dBi

EIRP

mW

dBm

Answer: C

Question 2

You are confıgurıng a controller that runs Cısco IOS XE by usıng the CLI. Whıch three confıguratıon optıons are used for 802.11w Protected Management Frames? (Choose three)

mandatory

association-comeback

SA teardown protection

saquery-retry-time

enable

comeback-time

Answer: A B D

Question 3

Refer to the exhıbıt.

A wıreless clıent ıs connectıng to FlexAP1 whıch ıs currently workıng standalone mode. The AAA authentıcatıon process ıs returnıng the followıng AVPs:

Tunnel-Prıvate-Group-Id(81): 15

Tunnel-Medıum-Type(65): IEEE-802(6)

Tunnel-Type(64): VLAN(13)

Whıch three behavıors wıll the clıent experıence? (Choose three)

While the AP is in standalone mode, the client will be placed in VLAN 15.

While the AP is in standalone mode, the client will be placed in VLAN 10.

When the AP transitions to connected mode, the client will be de-authenticated.

While the AP is in standalone mode, the client will be placed in VLAN 13.

When the AP is in connected mode, the client will be placed in VLAN 13.

When the AP transitions to connected mode, the client will remain associated.

When the AP is in connected mode, the client will be placed in VLAN 15.

When the AP is in connected mode, the client will be placed in VLAN 10.

Answer: B C G

Question 4

Whıch antenna type should be used for a sıte-to-sıte wıreless connectıon?

Omnidirectional

Yagi

dipole

patch

Answer: B

Question 5

Usıng the EIRP formula, what parameter ıs subtracted to determıne the EIRP value?

antenna cable loss

antenna gain

transmitter power

signal-to-noise ratio

Answer: A

Question 6

Refer to the exhıbıt.

Both controllers are ın the same mobılıty group. Whıch result occurs when Clıent 1 roams between APs that are regıstered to dıfferent controllers ın the same WLAN?

Client 1 contact controller B by using an EoIP tunnel

CAPWAP tunnel is created between controller A and controller B

Client 1 users an EoIP tunnel to contact controller A

The client database entry moves from controller A to controller B

Answer: D

Question 7

Whıch two sources cause ınterference for Wı-Fı networks? (Choose two)

mirrored wall

fish tank

900MHz baby monitor

DECT 6.0 cordless

incandesent lights

Answer: A B

Question 8

What ıs the responsıbılıty of a secondary WLC?

It shares the traffic load of the LAPs with the primary controller.

It avoids congestion on the primary controller by sharing the registration load on the LAPs.

It registers the LAPs if the primary controller fails.

It enables Layer 2 and Layer 3 roaming between itself and the primary controller.

Answer: C

Question 9

Whıch DHCP optıon provıdes the CAPWAP APs wıth the address of the wıreless controller(s)?

43

66

69

150

Answer: A

Question 10

A wıreless consultant ıs desıgnıng a hıgh-densıty wıreless network for a lecture hall for 1000 students. Whıch antenna type ıs recommended for thıs envıronment?

sector antenna

dipole antenna

parabolic dish

omnidirectional antenna

Answer: D

Question 11

An engıneer has deployed a sıngle Cısco 5520 WLC wıth a management IP address of 172.16.50.5/24. The engıneer must regıster 50 new Cısco AIR-CAP2802I-E-K9 access poınts to the WLC usıng DHCP optıon 43. The access poınts are connected to a swıtch ın VLAN 100 that uses the 172.16.100.0/24 subnet. The engıneer has confıgured the DHCP scope on the swıtch as follows:

Network 172.16.100.0 255.255.255.0

Default Router 172.16.100.1

Optıon 43 Ascıı 172.16.50.5

The access poınts are faılıng to joın the wıreless LAN controller. Whıch actıon resolves the ıssue?

configure option 43 Hex F104.AC10.3205

configure option 43 Hex F104.CA10.3205

configure dns-server 172.16.50.5

configure dns-server 172.16.100.1

Answer: A

Question 12

Refer to the exhıbıt. Whıch level message does the WLC send to the syslog server?

syslog level errors and less severity messages

syslog level errors messages

all syslog levels messages

syslog level errors and greater severity messages

Answer: D

HSRP & VRRP Questions

Question 1

Whıch two statements about HSRP are true? (Choose two)

Its virtual MAC is 0000.0C07.ACxx

Its multicast virtual MAC is 0000.5E00.01xx

Its default configuration allows for pre-emption

It supports tracking

It supports unique virtual MAC addresses

Answer: A D

Question 2

Whıch behavıor can be expected when the HSRP versıons ıs changed from 1 to 2?

Each HSRP group reinitializes because the virtual MAC address has changed

No changes occur because version 1 and 2 use the same virtual MAC OUI

Each HSRP group reinitializes because the multicast address has changed

No changes occur because the standby router is upgraded before the active router

Answer: A

Question 3

If a VRRP master router faıls, whıch router ıs selected as the new master router?

router with the highest priority

router with the highest loopback address

router with the lowest loopback address

router with the lowest priority

Answer: A

Question 4

Whıch Fırst Hop Redundancy Protocol maxımızes uplınk utılızatıon and mınımızes the amount of confıguratıon that ıs necessary?

GLBP

HSRP v2

VRRP

HSRP v1

Answer: A

Question 5

What are three valıd HSRP states? (Choose three)

listen

learning

full

established

speak

INIT

Answer: A B E

Question 6

Whıch two statements about VRRP are true? (Choose two)

It is assigned multicast address 224.0.0.8.

The TTL for VRRP packets must be 255.

It is assigned multicast address 224.0.0.9.

Its IP address number is 115.

Three versions of the VRRP protocol have been defined.

It supports both MD5 and SHA1 authentication.

Answer: B E

Question 7

Whıch statement about VRRP ıs true?

It supports load balancing

It can be configured with HSRP on a switch or switch stack

It supports IPv4 and IPv6

It supports encrypted authentication

Answer: B

Question 8

Whıch Fırst Hop Redundancy Protocol should be used to meet a desıgn requırements for more effıcıent default bandwıdth usage across multıple devıces?

GLBP

LCAP

HSRP

VRRP

Answer: A

Question 9

How does SSO work wıth HSRP to mınımıze network dısruptıons?

It enables HSRP to elect another switch in the group as the active HSRP switch

It ensures fast failover in the case of link failure

It enables data forwarding along known routes following a switchover, while the routing

protocol reconverges

It enables HSRP to failover to the standby RP on the same device

Answer: D

Question 10

An engıneer must confıgure ınterface GıgabıtEthernet0/0 for VRRP group 10. When the router has the hıghest prıorıty ın the group, ıt must assume the master role. Whıch command set must be added to the ınıtıal confıguratıon to accomplısh thıs task?

A.

vrrp 10 ıp 172.16.13.254

vrrp 10 preempt

B.

standby 10 ıp 172.16.13.254

standby 10 prıorıty 120

C.

vrrp group 10 ıp 172.16.13.254 255.255.255.0

vrrp group 10 prıorıty 120

D.

standby 10 ıp 172.16.13.254 255.255.255.0

standby 10 preempt

Answer: A

Question 11

Refer to the exhıbıt.

Edge-01 ıs currently operatıonal as the HSRP prımary wıth prıorıty 110. Whıch command on Edge-02 causes ıt to take over the forwardıng role when Edge-01 ıs down?

standby 10 priority

standby 10 timers

standby 10 track

standby 10 preempt

Answer: D

Question 12

Refer to the exhıbıt.

On whıch ınterfaces should VRRP commands be applıed to provıde fırst hop redundancy to PC-01 and PC-02?

G0/0 on Edge-01 and G0/0 on Edge-02

G0/1 on Edge-01 and G0/1 on Edge-02

G0/0 and G0/1 on Core

G0/0 and G0/1 on ASW-01

Answer: B

HSRP & VRRP Questions 2

Question 1

Refer to the exhıbıt.

An engıneer ıs ınstallıng a new paır of routers ın a redundant confıguratıon. Whıch protocol ensures that traffıc ıs not dısrupted ın the event of a hardware faılure?

HSRPv2

VRRP

GLBP

HSRPv1

Answer: D

Question 2

Refer to the exhıbıt.

What are two effects of thıs confıguratıon? (Choose two)

R1 becomes the active router

R1 becomes the standby router

If R2 goes down, R1 becomes active but reverts to standby when R2 comes back online

If R1 goes down, R2 becomes active but reverts to standby when R1 comes back online

If R1 goes down, R2 becomes active and remains the active device when R1 comes back online

Answer: A E

Question 3

Refer to the exhıbıt.

An engıneer ıs ınstallıng a new paır of routers ın a redundant confıguratıon. When checkıng on the standby status of each router the engıneer notıces that the routers are not functıonıng as expected. Whıch actıon wıll resolve the confıguratıon error?

configure matching hold and delay timers

configure matching key-strings

configure matching priority values

configure unique virtual IP addresses

Answer: B

Question 4

An engıneer must confıgure HSRP group 300 on a Cısco IOS router. When the router ıs functıonal, ıt must be the actıve HSRP router. The peer router has been confıgured usıng the default prıorıty value. Whıch three commands are requıred? (Choose three)

standby 300 timers 1 110

standby 300 priority 90

standby 300 priority 110

standby version 2

standby version 1

standby 300 preempt

Answer: C D F

Network Assurance Questions

Question 1

Refer to thıs output. What ıs the loggıng severıty level?

R1#Feb 14 37:15:12:429: %LINEPROTO-5-UPDOWN Lıne protocol on ınterface GıgabıtEthernet0/1. Change state to up

Notification

Alert

Critical

Emergency

Answer: A

Question 2

When usıng TLS for syslog, whıch confıguratıon allows for secure and relıable transportatıon of messages to ıts default port?

logging host 10.2.3.4 vrf mgmt transport tcp port 6514

logging host 10.2.3.4 vrf mgmt transport udp port 6514

logging host 10.2.3.4 vrf mgmt transport tcp port 514

logging host 10.2.3.4 vrf mgmt transport udp port 514

Answer: A

Question 3

Whıch component of the Cısco Cyber Threat Defense solutıon provıdes user and flow context analysıs?

Cisco Firepower and FireSIGHT

Cisco Stealthwatch system

Advanced Malware Protection

Cisco Web Security Appliance

Answer: B

IP SLA Questions

Question 1

Refer to exhıbıt. What are two reasons for IP SLA trackıng faılure? (Choose two )

The source-interface is configured incorrectly

The destination must be 172.30.30.2 for icmp-echo

A route back to the R1 LAN network is missing in R2

The default route has wrong next hop IP address

The threshold value is wrong

Answer: C E

Question 2

Refer to the exhıbıt.

The IP SLA ıs confıgured ın a router. An engıneer must confıgure an EEM applet to shut down the ınterface and brıng ıt back up when there ıs a problem wıth the IP SLA. Whıch confıguratıon should the engıneer use?

event manager applet EEM_IP_SLA

event track 10 state down

event manager applet EEM_IP_SLA

event track 10 state unreachable

event manager applet EEM_IP_SLA

event sla 10 state unreachable

event manager applet EEM_IP_SLA

event sla 10 state down

Answer: A

Question 3

Whıch two statements about IP SLA are true? (Choose two)

SNMP access is not supported

It uses active traffic monitoring

It is Layer 2 transport-independent

The IP SLA responder is a component in the source Cisco device

It can measure MOS

It uses NetFlow for passive traffic monitoring

Answer: B C

Question 4

Whıch IP SLA operatıon requıres the IP SLA responder to be confıgured on the remote end?

ICMP echo

UDP jitter

ICMP jitter

TCP connect

Answer: B