300-410: Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) Part 2
Question #: 61
Topic #: 1
Refer to the exhibit.
Which set of commands restore reachability to loopback0?
A. interface loopback0 ip address 4.4.4.4 255.255.255.0 ip ospf network point-to-point
B. interface loopback0 ip address 4.4.4.4 255.255.255.0 ip ospf interface area 10
C. interface loopback0 ip address 4.4.4.4 255.255.255.0 ip ospf network broadcast
D. interface loopback0 ip address 4.4.4.4 255.255.255.0 ip ospf interface type network
Selected Answer: A
Question #: 62
Topic #: 1
AS 111 wanted to use AS 200 as the preferred path for 172.20.5.0/24 and AS 100 as the backup. After the configuration, AS 100 is not used for any other routes.
Which configuration resolves the issue?
A. route-map SETLP permit 10 match ip address prefix-list PLIST1 set local-preference 99 route-map SETLP permit 20
B. router bgp 111 no neighbor 192.168.10.1 route-map SETLP in neighbor 192.168.20.2 route-map SETLP in
C. route-map SETLP permit 10 match ip address prefix-list PLIST1 set local-preference 110 route-map SETLP permit 20
D. router bgp 111 no neighbor 192.168.10.1 route-map SETLP in neighbor 192.168.10.1 route-map SETLP out
Selected Answer: A
Question #: 63
Topic #: 1
Refer to the exhibit. The ISP router is fully configured for customer A and customer B using the VRF-Lite feature.
What is the minimum configuration required for customer A to communicate between routers A1 and A2?
A. A1 interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0
B. A1 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 vrf A net 172.31.200.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 vrf A net 172.31.200.1 0.0.0.255 area 0
C. A1 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0
D. A1 interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0
Selected Answer: A
Question #: 64
Topic #: 1
An engineer is implementing a coordinated change with a server team. As part of the change, the engineer must configure interface GigabitEthernet2 in an existing VRF “RED” then move the interface to an existing VRF “BLUE” when the server team is ready. The engineer configured interface GigabitEthernet2 in VRF
“RED”:
interface GigabitEthernet2
description Migration ID: B410A82D0935G35
vrf forwarding RED
ip address 10.0.0.0 255.255.255.254
negotiation auto
Which configuration completes the change?
A. interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE ip address 10.0.0.0 255.255.255.254
B. interface GigabitEthernet2 no ip address vrf forwarding BLUE
C. interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE
D. interface GigabitEthernet2 no ip address ip address 10.0.0.0 255.255.255.254 vrf forwarding BLUE
Selected Answer: A
Question #: 65
Topic #: 1
Refer to the exhibit. R5 should not receive any routes originated in the EIGRP domain. Which set of configuration changes removes the EIGRP routes from the R5 routing table to fix the issue?
A. R4 route-map O2R deny 10 match tag 111 route-map O2R permit 20 ! router rip redistribute ospf 1 route-map O2R metric 1
B. R2 route-map E20 deny 20 R4 route-map O2R deny 10 match tag 111 ! router rip redistribute ospf 1 route-map O2R metric 1
C. R4 route-map O2R permit 10 match tag 111 route-map O2R deny 20 ! router rip redistribute ospf 1 route-map O2R metric 1
D. R4 route-map O2R deny 10 match tag 111 ! router rip redistribute ospf 1 route-map O2R metric 1
Selected Answer: A
Question #: 66
Topic #: 1
Refer to the exhibit. The network administrator configured the network to connect two disjointed networks and all the connectivity is up except the virtual link, which causes area 250 to be unreachable.
Which two configurations resolve this issue? (Choose two.)
A. R2 router ospf 1 no area 234 virtual-link 10.34.34.4 area 234 virtual-link 0.0.0.44
B. R2 router ospf 1 no area 234 virtual-link 10.34.34.4 area 0 virtual-link 0.0.0.44
C. R4 router ospf 1 no area 234 virtual-link 10.23.23.2 area 0 virtual-link 0.0.0.22
D. R2 router ospf 1 router-id 10.23.23.2
E. R4 router ospf 1 no area 234 virtual-link 10.23.23.2 area 234 virtual-link 0.0.0.22
Selected Answer: AE
Question #: 67
Topic #: 1
Refer to the exhibit. A network administrator sets up an OSPF routing protocol for a DMVPN network on the hub router.
Which configuration command is required to establish a DMVPN tunnel with multiple spokes?
A. ip ospf network point-to-point on the hub router
B. ip ospf network point-to-multipoint on one spoke router
C. ip ospf network point-to-multipoint on both spoke routers
D. ip ospf network point-to-point on both spoke routers
Selected Answer: C
Question #: 68
Topic #: 1
Refer to the exhibit. The Internet traffic should always prefer Site-A ISP-1 if the link and BGP connection are up; otherwise, all Internet traffic should go to ISP-2.
Redistribution is configured between BGP and OSPF routing protocols, and it is not working as expected.
What action resolves the issue?
A. Set OSPF Cost 200 at Site-A RTR1, and set OSPF Cost 100 at Site-B RTR2.
B. Set metric-type 2 at Site-A RTR1, and set metric-type 1 at Site-B RTR2.
C. Set metric-type 1 at Site-A RTR1, and set metric-type 2 at Site-B RTR2.
D. Set OSPF Cost 100 at Site-A RTR1, and set OSPF Cost 200 at Site-B RTR2.
Selected Answer: C
Question #: 69
Topic #: 1
Refer to the exhibit. An engineer has configured R1 as EIGRP stub router. After the configuration, router R3 failed to reach to R2 loopback address.
Which action advertises R2 loopback back into the R3 routing table?
A. Add a static route for R2 loopback address in R1 and redistribute it to advertise to R3.
B. Use a leak map on R1 that matches the required prefix and apply it with the distribute list command toward R3.
C. Use a leak map on R3 that matches the required prefix and apply it with the EIGRP stub feature.
D. Add a static null route for R2 loopback address in R1 and redistribute it to advertise to R3.
Selected Answer: B
Question #: 70
Topic #: 1
Refer to the exhibit. The branch router is configured with a default route toward the Internet and has no routes configured for the HQ site that is connected through interface G2/0. The HQ router is fully configured and does not require changes.
Which configuration on the branch router makes the intranet website (TCP port 80) available to the branch office users?
A.
B.
C.
D.
Selected Answer: D
Question #: 71
Topic #: 1
R1 and R2 are configured as eBGP neighbors. R1 is in AS100 and R2 is in AS200. R2 is advertising these networks to R1:
172.16.16.0/20
172.16.3.0/24
172.16.4.0/24
192.168.1.0/24
192.168.2.0/24
172.16.0.0/16
The network administrator on R1 must improve convergence by blocking all subnets of 172.16.0.0/16 major network with a mask lower than 23 from coming in.
Which set of configurations accomplishes the task on R1?
A. ip prefix-list PL-1 deny 172.16.0.0/16 ge 23 ip prefix-list PL-1 permit 0.0.0.0/0 le 32 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in
B. ip prefix-list PL-1 deny 172.16.0.0/16 le 23 ip prefix-list PL-1 permit 0.0.0.0/0 le 32 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in
C. ip prefix-list PL-1 deny 172.16.0.0/16 ip prefix-list PL-1 permit 0.0.0.0/0 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in
D. access-list 1 deny 172.16.0.0 0.0.254.255 access-list 1 permit any ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 distribute-list 1 in
Selected Answer: A
Question #: 72
Topic #: 1
Refer to the exhibit. An engineer configures the router 10.1.100.10 for EIGRP autosummarization so that R1 should receive the summary route of 10.0.0.0/8.
However, R1 receives more specific /24 routes.
Which action resolves this issue?
A. Router R1 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.
B. Router R1 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are received on R1.
C. Router 10.1.100.10 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are summarized toward R1.
D. Router 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.
Selected Answer: D
Question #: 73
Topic #: 1
Refer to the exhibit. Which command must be configured to make VRF CCNP work?
A. interface Loopback0 ip address 10.1.1.1 255.255.255.0 vrf forwarding CCNP
B. interface Loopback0 ip address 10.1.1.1 255.255.255.0
C. interface Loopback0 vrf forwarding CCNP
D. interface Loopback0 ip address 10.1.1.1 255.255.255.0 ip vrf forwarding CCNP
Selected Answer: B
Question #: 74
Topic #: 1
Refer to the exhibits. An engineer investigates a routing issue on R1 and finds that traffic destined to 5.5.5.0/24 does not take all of the paths.
Which action resolves the issue?
A. Increase the variance value in EIGRP.
B. Decrease the variance value in EIGRP.
C. Remove the adjacency of R3 from EIGRP.
D. Stop advertising 192.168.13.0/24 in EIGRP.
Selected Answer: A
Question #: 75
Topic #: 1
DRAG DROP –
Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.
Select and Place:
Suggestion Answer:
Question #: 76
Topic #: 1
Refer to the exhibits. Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN.
Which two commands are missing? (Choose two.)
A. The ip nhrp redirect command is missing on the spoke routers.
B. The ip nhrp shortcut command is missing on the spoke routers.
C. The ip nhrp redirect command is missing on the hub router.
D. The ip nhrp shortcut command is missing on the hub router.
E. The ip nhrp map command is missing on the hub router.
Selected Answer: BC
Question #: 77
Topic #: 1
Which protocol is used to determine the NBMA address on the other end of a tunnel when mGRE is used?
A. NHRP
B. IPsec
C. MP-BGP
D. OSPF
Selected Answer: A
Question #: 78
Topic #: 1
A DMVPN single hub topology is using IPsec + mGRE with OSPF.
What should be configured on the hub to ensure it will be the designated router?
A. route map to set the metrics of learned routes to 110
B. tunnel interface of the hub with ip nhrp ospf dr
C. OSPF priority to 0
D. OSPF priority greater than 1
Selected Answer: D
Question #: 79
Topic #: 1
What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)
A. RD is prepended to the IPv4 route to make it unique.
B. The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4 prefix.
C. MP-BGP is used to allow overlapping IPv4 addresses between customers to advertise through the network.
D. The IPv4 address is needed to tag the MPLS label.
E. The VPNv4 address is used to advertise the MPLS VPN label.
Selected Answer: AE
Question #: 80
Topic #: 1
What are two functions of MPLS Layer 3 VPNs? (Choose two.)
A. It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.
B. A packet with node segment ID is forwarded along with shortest path to destination.
C. Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.
D. BGP is used for signaling customer VPNv4 routes between PE nodes.
E. LDP and BGP can be used for Pseudowire signaling.
Selected Answer: CD
Question #: 81
Topic #: 1
What are two MPLS label characteristics? (Choose two.)
A. The label edge router swaps labels on the received packets.
B. Labels are imposed in packets after the Layer 3 header.
C. LDP uses TCP for reliable delivery of information.
D. An MPLS label is a short identifier that identifies a forwarding equivalence class.
E. A maximum of two labels can be imposed on an MPLS packet.
Selected Answer: CD
Question #: 82
Topic #: 1
Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?
A. multi-paths eibgp 2
B. maximum-paths 2
C. maximum-paths ibgp 2
D. multi-paths 2
Selected Answer: C
Question #: 83
Topic #: 1
Refer to the exhibit. After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and hub were not establishing.
Which two actions resolve the issue? (Choose two.)
A. Change the mode from mode tunnel to mode transport on R3.
B. Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3.
C. Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3.
D. Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.
E. Change the mode from mode transport to mode tunnel on R2.
Selected Answer: AD
Question #: 84
Topic #: 1
Which statement about route distinguishers in an MPLS network is true?
A. Route distinguishers allow multiple instances of a routing table to coexist within the edge router.
B. Route distinguishers are used for label bindings.
C. Route distinguishers make a unique VPNv4 address across the MPLS network.
D. Route distinguishers define which prefixes are imported and exported on the edge router.
Selected Answer: C
Question #: 85
Topic #: 1
Which statement about MPLS LDP router ID is true?
A. If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.
B. The loopback with the highest IP address is selected as the router ID.
C. The MPLS LDP router ID must match the IGP router ID.
D. The force keyword changes the router ID to the specified address without causing any impact.
Selected Answer: B
Question #: 86
Topic #: 1
Which list defines the contents of an MPLS label?
A. 20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL
B. 32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL
C. 20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit
D. 32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit
Selected Answer: A
Question #: 87
Topic #: 1
Refer to the exhibit. What does the imp-null tag represent in the MPLS VPN cloud?
A. Pop the label
B. Impose the label
C. Include the EXP bit
D. Exclude the EXP bit
Selected Answer: A
Question #: 88
Topic #: 1
DRAG DROP –
Drag and drop the MPLS terms from the left onto the correct definitions on the right.
Select and Place:
Suggestion Answer:
Question #: 89
Topic #: 1
Which transport layer protocol is used to form LDP sessions?
A. UDP
B. SCTP
C. TCP
D. RDP
Selected Answer: C
Question #: 90
Topic #: 1
Refer to the exhibits.
Which configuration allows spoke-to-spoke communication using loopback as a tunnel source?
A. Configure crypto isakmp key cisco address 0.0.0.0 on the hub
B. Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the hub
C. Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes
D. Configure crypto isakmp key cisco address 0.0.0.0 on the spokes
Selected Answer: D
Question #: 91
Topic #: 1
How does an MPLS Layer 3 VPN function?
A. multiple customer sites interconnect through service provider network to create secure tunnels between customer edge devices
B. multiple customer sites interconnect through a service provider network using customer edge to provider edge connectivity
C. set of sites interconnect privately over the Internet for security
D. set of sites use multiprotocol BGP at the customer site for aggregation
Selected Answer: B
Question #: 92
Topic #: 1
DRAG DROP –
Drag and drop the LDP features from the left onto the descriptions on the right.
Select and Place:
Suggestion Answer:
Question #: 93
Topic #: 1
Which two protocols work in the control plane of P routers across the MPLS cloud? (Choose two.)
A. ECMP
B. LDP
C. RSVP
D. MPLS OAM
E. LSP
Selected Answer: BC
Question #: 94
Topic #: 1
Refer to the exhibit. An engineer has configured DMVPN on a spoke router.
What is the WAN IP address of another spoke router within the DMVPN network?
A. 172.18.46.2
B. 172.18.16.2
C. 192.168.1.1
D. 192.168.1.4
Selected Answer: D
Question #: 95
Topic #: 1
What are two functions of LDP? (Choose two.)
A. It advertises labels per Forwarding Equivalence Class.
B. It uses Forwarding Equivalence Class.
C. It is defined in RFC 3038 and 3039.
D. It requires MPLS Traffic Engineering.
E. It must use Resource Reservation Protocol.
Selected Answer: AB
Question #: 96
Topic #: 1
DRAG DROP –
Drag and drop the operations from the left onto the locations where the operations are performed on the right.
Select and Place:
Suggestion Answer:
Question #: 97
Topic #: 1
Which protocol does MPLS use to support traffic engineering?
A. TDP
B. RSVP
C. LDP
D. BGP
Selected Answer: B
Question #: 98
Topic #: 1
An engineer configured a company’s multiple area OSPF Head Office router and Site A Cisco routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone:
Head Office & Site A –
ip cef
ip vrf abc
rd 101:101
!
interface FastEthernet0/0
ip vrf forwarding abc
ip address 172.16.16.X 255.255.255.252
!
router ospf 1 vrf abc
log-adjacency-changes
network 172.16.16.0 0.0.0.255 area 1
After finishing both site router configurations, none of the LSA 3, 4, 5, and 7 are installed at Site A router.
Which configuration resolves this issue?
A. configure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc
B. configure capability vrf-lite on both PE routers connected to Head Office and Site A routers under router ospf 1 vrf abc
C. configure capability vrf-lite on Head Office and its connected PE router under router ospf 1 abc
D. configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc
Selected Answer: D
Question #: 99
Topic #: 1
Refer to the exhibit. The Los Angeles and New York routers are receiving routers from Chicago but not from each other.
Which configuration fixes the issue?
A. interface Tunnel1 no ip split-horizon eigrp 111
B. interface Tunnel1 ip next-hop-self eigrp 111
C. interface Tunnel1 tunnel mode ipsec ipv4
D. interface Tunnel1 tunnel protection ipsec profile IPSec-PROFILE
Selected Answer: A
Question #: 100
Topic #: 1
DRAG DROP –
Drag and drop the MPLS VPN device types from the left onto the definitions on the right.
Select and Place:
Suggestion Answer:
Question #: 101
Topic #: 1
What does the PE router convert the IPv4 prefix to within an MPLS VPN?
A. eBGP path association between the PE and CE sessions
B. prefix that combines the ASN, PE router-id, and IP prefix
C. 48-bit route combining the IP and PE router-id
D. VPN-IPv4 prefix combined with the 64-bit route distinguisher
Selected Answer: D
Question #: 102
Topic #: 1
Refer to the exhibit. Which interface configuration must be configured on the HUB router to enable MVPN with mGRE mode?
A. interface Tunnel0 description mGRE – DMVPN Tunnel ip address 10.1.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 172.17.0.1 ip nhrp map 10.0.0.11 172.17.0.2 ip nhrp map 10.0.0.12 172.17.0.3 tunnel mode gre
B. interface Tunnel0 description mGRE – DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel mode gre multipoint
C. interface Tunnel0 description mGRE – DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 1 tunnel source 172.17.0.1 tunnel mode gre multipoint
D. interface Tunnel0 description mGRE – DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel destination 172.17.0.2 tunnel mode gre multipoint
Selected Answer: C
Question #: 103
Topic #: 1
How are MPLS Layer 3 VPN services deployed?
A. The RD and RT values must match under the VRF.
B. The import and export RT values under a VRF must always be the same.
C. The label switch path must be available between the local and remote PE routers.
D. The RD and RT values under a VRF must match on the remote PE router.
Selected Answer: B
Question #: 104
Topic #: 1
Which IGPs are supported by the MPLS LDP autoconfiguration feature?
A. IS-IS and RIPv2
B. RIPv2 and OSPF
C. OSPF and EIGRP
D. OSPF and IS-IS
Selected Answer: D
Question #: 105
Topic #: 1
Refer to the exhibit.
An engineer must establish multipoint GRE tunnels between hub router R6 and branch routers R1, R2, and R3.
Which configuration accomplishes this task on R1?
A. interface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e0/0 tunnel mode gre multipoint ip nhrp nhs 192.168.1.6 ip nhrp map 192.168.1.6 192.1.10.1 ip nhrp map 192.168.1.2 192.1.20.2 ip nhrp map 192.168.1.3 192.1.30.3
B. interface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e0/1 tunnel mode gre multipoint ip nhrp nhs 192.168.1.6 ip nhrp map 192. 168.1.6 192.1.10.6
C. interface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e0/0 tunnel mode gre multipoint ip nhrp network-id 1 ip nhrp nhs 192.168.1.6 ip nhrp map 192.168.1.6 192.1.10.6
D. interface Tunnel 1 ip address 192.168.1.1 255. 255.255.0 tunnel source e0/1 tunnel mode gre multipoint ip nhrp network-id 1 ip nhrp nhs 192.168.1.6 ip nhrp map 192.168.1.6 192.1.10.1 ip nhrp map 192.168.1.2 192.1.20.2 ip nhrp map 192.168.1.3 192.1.30.3
Selected Answer: C
Question #: 106
Topic #: 1
How is VPN routing information distributed in an MPLS network?
A. The top level of the customer data packet directs it to the correct CE device.
B. It is established using VPN IPsec peers.
C. It is controlled through the use of RD.
D. It is controlled using of VPN target communities.
Selected Answer: D
Question #: 107
Topic #: 1
IPv6 is enabled in the infrastructure to support customers with an IPv6 network over WAN and to connect the head office to branch offices in the local network.
One of the customers is already running IPv6 and wants to enable IPv6 over the DMVPN network infrastructure between the headend and branch sites.
Which configuration command must be applied to establish an mGRE IPv6 tunnel neighborship?
A. ipv6 nhrp holdtime 30
B. tunnel mode gre multipoint ipv6
C. ipv6 unicast-routing
D. tunnel protection mode ipv6
Selected Answer: B
Question #: 108
Topic #: 1
What is a characteristic of Layer 3 MPLS VPNs?
A. Traffic engineering capabilities provide QoS and SLAs.
B. Traffic engineering supports multiple IGP instances.
C. LSP signaling requires the use of unnumbered IP links for traffic engineering.
D. Authentication is performed by using digital certificates or preshared keys.
Selected Answer: A
Question #: 109
Topic #: 1
How does an MPLS Layer 3 VPN differentiate the IP address space used between each VPN?
A. by RT
B. by address family
C. by RD
D. by MP-BGP
Selected Answer: C
Question #: 110
Topic #: 1
Which OSI model is used to insert an MPLS label?
A. between Layer 2 and Layer 3
B. between Layer 5 and Layer 6
C. between Layer 1 and Layer 2
D. between Layer 3 and Layer 4
Selected Answer: A
Question #: 111
Topic #: 1
Which function does LDP provide in an MPLS topology?
A. It enables a MPLS topology to connect multiple VPNs to P routers.
B. It provides hop-by-hop forwarding in an MPLS topology for LSRs.
C. It exchanges routes for MPLS VPNs across different VRFs.
D. It provides a means for LSRs to exchange IP routes.
Selected Answer: B
Question #: 112
Topic #: 1
Which mechanism provides traffic segmentation within a DMVPN network?
A. BGP
B. IPsec
C. MPLS
D. RSVP
Selected Answer: B
Question #: 113
Topic #: 1
Refer to the exhibit. During troubleshooting it was discovered that the device is not reachable using a secure web browser.
What is needed to fix the problem?
A. permit tcp port 443
B. permit udp port 465
C. permit tcp port 465
D. permit tcp port 22
Selected Answer: A
Question #: 114
Topic #: 1
DRAG DROP –
Drag and drop the packet types from the left onto the correct descriptions on the right.
Select and Place:
Suggestion Answer:
Question #: 115
Topic #: 1
DRAG DROP –
Drag and drop the addresses from the left onto the correct IPv6 filter purposes on the right.
Select and Place:
Suggestion Answer:
Question #: 116
Topic #: 1
Refer to the exhibit. An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+.
Which action produces the desired configuration?
A. Add the aaa authentication login default none command to the global configuration.
B. Replace the capital ג€Cג€ with a lowercase ג€cג€ in the aaa authentication login Console local command.
C. Add the aaa authentication login default group tacacs+ local-case command to the global configuration.
D. Add the login authentication Console command to the line configuration
Selected Answer: D
Question #: 117
Topic #: 1
Refer to the exhibit. An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting.
Which command must be used in configuration mode to enable SSH on the device?
A. no ip ssh disable
B. ip ssh enable
C. ip ssh version 2
D. crypto key generate rsa
Selected Answer: D
Question #: 118
Topic #: 1
Which statement about IPv6 ND inspection is true?
A. It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.
B. It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.
C. It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.
D. It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.
Selected Answer: B
Question #: 119
Topic #: 1
While troubleshooting connectivity issues to a router, these details are noticed:
✑ Standard pings to all router interfaces, including loopbacks, are successful.
✑ Data traffic is unaffected.
✑ SNMP connectivity is intermittent.
✑ SSH is either slow or disconnects frequently.
Which command must be configured first to troubleshoot this issue?
A. show policy-map control-plane
B. show policy-map
C. show interface | inc drop
D. show ip route
Selected Answer: A
Question #: 120
Topic #: 1
Refer to the exhibit. Why is user authentication being rejected?
A. The TACACS+ server expects ג€userג€, but the NT client sends ג€domain/userג€.
B. The TACACS+ server refuses the user because the user is set up for CHAP.
C. The TACACS+ server is down, and the user is in the local database.
D. The TACACS+ server is down, and the user is not in the local database.
Selected Answer: D
