A network architect must implement CSC VPN services for a new backbone carrier. Which two benefits does the architecture provide? (Choose two.)

It maintains.a single backbone, which simplifies the VPN implementation to customers.

It supports a scalable growth strategy that services multiple customers efficiently

It maintains.a single backbone, which simplifies the VPN implementation to customers.

It eliminates the need to maintain a centralized network-maintenance and operations strategy.

It leverages IPsec to establish connections within the backbone. which eliminates the need for BGP to distribute routes.

It supports a scalable growth strategy that services multiple customers efficiently

It relies on IP communications, which simplifies the network design.

Which set of facts must the network architect consider when deciding whether to implement SaltStack or Chef?

Chef is an agent-based on Ruby, and SaltStack is a module tool based on Python.

Chef refers to its automation instructions as manifests, and SaltStack refers to its instructions as a playbook.

Chef is written in Python, and SaltStack is written in Ruby.

Chef uses a message-based system, and SaltStack uses an agent to deliver messages

Which role does the Adjacency-SID sub-TLV extension perform in the IS-IS routing protocol?

It is advertised within TLV-22 (Extended IS Reachability) to label a specific link in a segment routing domain.

It is advertised within a TLV-24 (IS-IS Neighbor Adjacency Attribute) to label a specific adjacency between Level1 routers within one IS-IS area.

It is advertised within TLV-136 (Extended IP Reachability) to label a specific node n the network.

It is advertised within TLV-22 (Extended IS Reachability) to label a specific link in a segment routing domain.

It is advertised within TLV-145 (IS-IS Prefix Reachability Information) to label host prefixes on loopback interfaces on Level 2 routers within one

Refer to the exhibit. Refer to the exhibit. A network engineer is implementing BGP in AS 65101 and AS 65201. R3 sends data traffic to 192.168.1.1 /32 via the path R3-R2-R1. The traffic must travel via alternate path R6-R5 for prefix 192.168.1.1/32. Which action must be taken to meet the requirement?

Apply route-map HIGH-MED out on R2 for neighbor R3.

Apply route-map HIGH-LP in on R3 for neighbor R6

Apply route-map LOW-LP out on R2 for neighbor R3.

Apply route-map LOW-MED in on R5 for neighbor R2

Refer to the exhibit. Refer to the exhibit. Customer_A asked ISP_A to connect two offices via an MPLS L3 VPN. Customer_A is currently using only the default route toward ISP_A. The engineer at ISP_A already configured the ip route vrf Customer_A 172.16.10.0 255.255.255.0 10.10.10.1 command on R1. Which action completes the configuration?

Configure the route-target both 200:1 and route-replicate vrf Customer_A commands under the lp vrf configuration on R2.

The engineer at ISP_A already configured the ip route vrf Customer_A 172.16.10.0 255.255.255.0 10.10.10.1 command on R1. Which action completes the configuration?

Configure the network 172.16.10.0 and redistribute-internal static commands under the BGP address family for Customer_A in the global BGP configuration on R1.

Enable the bgp default route-target filter and default-Information originate commands under the global BGP configuration on R2.

Configure the route-target both 200:1 and route-replicate vrf Customer_A commands under the lp vrf configuration on R2.

Configure the redistribute static and redistribute connected commands on R1.

Refer to the exhibit. Refer to the exhibit. Routers R1 through R5 are being deployed within the core of a service provider running BGP The core supports distribution of VPNv4 routes using MPLS. R3 currently has multiple paths to reach R4. A network engineer must implement BGP attributes so that R3 can reach R4 via R1. Which action must the engineer take to meet the requirement?

Configure R3 so the route to R4 through R1 will have a lower local preference than the route from R2 or R5

Configure R3 so the route to R4 through R1 will have a higher weight than the route from R2 or R5.

Configure R2 to send the route from R4 to R1 using a higher metric than what is advertised to R3.

Configure R5 to send the route from R4 to R1 using a longer AS path than the AS path that it receives from R1 or R2.

Configure R3 so the route to R4 through R1 will have a lower local preference than the route from R2 or R5

Which capability does the MPLS TE FRR facility backup protection method provide?

creating a bypass LSP for each protected LSP at each point of local repair

defining the set of characteristics for the backup TE LSP

leveraging label stacking to protect selected TE LSPs using a single backup TE LSP

creating a bypass LSP for each protected LSP at each point of local repair

assigning a backup TE LSP tunnel to the protected node at the headend of the protected TE LSP

Which fact must a network engineer consider when planning to deploy RSVP-TE FRR?

PLR prefers FRR NNHOP backup tunnels over NHOP tunnels.

The FRR backup tunnel reserves the total bandwidth of all protected tunnels

FRR protects MPLS LDP and RSVP-TE LSPs.

PLR prefers FRR NHOP backup tunnels over NNHOP tunnels.

PLR prefers FRR NNHOP backup tunnels over NHOP tunnels.

What is an enhancement that Cisco IOS XE Software has over Cisco IOS Software?

It support symmetric multiprocessing

It allows all processes to use the same pool of memory.

It runs on a 32-bit operating system.

It is built on a GNX Neutrino Microkernel.

According to RFC5305 on IS-IS extensions for traffic engineering, what is the 4-octet sub-TLV type 10 of extended IS-IS reachability TLV type 22?

maximum reservable link bandwidth

Refer to the exhibit. Refer to the exhibit. ISP_A and ISP_B use AS numbers 38321 and 16213 respectively. After a network engineer reloaded router R1, the BGP session with R2 failed to establish. The engineer confirmed BGP next-hop availability with a connectivity test between the router loopback addresses 10.121.123.2 and 10.121.123.1, as well as between interfaces Gi1/1 and Gi1/2. EBGP multihop has been configured on both routers. Which action must the engineer take to resolve the issue?

Configure neighbor update-source lo0 on R2

Configure transport connection-mod passive on R2.

Configure neighbor 172.16.172.1 authentication on R1

Configure neighbor update-source lo0 on R2

Configure remote-as 16213 on R1.

Refer to the exhibit. Refer to the exhibit. ISP_A is about to launch a new internet service. ISP_A is already providing MPLS VPN Layer 3 services to Customer_A and Customer_B, which are connected to ISP_A via OSPF. A network engineer completed the BGP and VRF configurations on R2 to support the new internet service. Which additional action completed the launch?

Implement the BGP routing protocol in the customer VRFs on R1 and R2

Import route-target 62:101 into the customer VRFs on R1 and R3.

Enable the route-replicate command under the customer VRFs on R1 and R2

Activate NAT CE in the customer VRFs on R1. R2. and R3.

Refer to the exhibit. Refer to the exhibit. A network engineer is implementing iBGP and eBGP between AS 600 and AS 500 with these requirements:R2 must establish eBGP peering on 192.168.3.0/30 with R5 for sending unicast and multicast trafficR2 must wait for 30 seconds before sending BGP updates to R5 for multicast traffic.Which action must be taken on R2 to meet the requirements?

Configure advertisement-Interval 30 in address-family Ipv4 multicast

Configure advertisement-interval 30 In address-family ipv4 unicast

Configure advertisement-Interval 30 in address-family Ipv4 multicast

Apply timers bgp 30 in address-family ipv4 unicast

Apply timers bgp 30 in address-family ipv4 multicast.

ISP A has a BGP peering with ISP C with the maximum-prefix 150 configuration on R1. After a recent security breach on the ISP A network, a network engineer has been asked to enable a lightweight security mechanism to protect the R1 CPU and BGP membership from spoofing attacks. Which solution must ISP A implement?

Configure neighbor 10.163.83.55 ttl-stcurity hops 2 under the global BGP configuration.

Configure bgp maxas-limit 1 in the IPv4 address family urateUhe global BGP configuration.

Configure neighbor 10.163.83.54 enable-connected-check under the BGP IPv4 address family.

Configure neighbor 10.163.83.55 password Cisco under the global BGP IPv4 address family.

Configure neighbor 10.163.83.55 ttl-stcurity hops 2 under the global BGP configuration.

Refer to the exhibit. Refer to the exhibit. All BGP peering in AS 65101 and 65201 is enabled. The operations team is told that traffic destined to 192.168.1.1/32 from R4 does not use the path R3-R2-R1 as expected. An engineer debugs the issue and determines that 192.168.1.1/32 is advertised in the BGP routing table on R1. Which action resolves the issue?

Enable no synchronization on R2 m AS65101.

Apply route-map High-LP out for prefix 192.168.1.1/32 on R1 with R2 BGP peering.

Apply redistribute ospf 10 on R1 in BGP AS 65101.

Configure network 192.168.1.1 mask 255.255.255.255 in BGP AS 65101 on R2

Refer to the exhibit. Refer to the exhibit. A network engineer must deny access from spoofed addresses to the LAN. The edge router currently has two active BGP sessions established with Tier 1 ISP_

ip verify unicast source reachable-via under FA0/1

ip verify unicast source reachable-via both under FA0/0

Due to asymmetric routing, no ACL is configured on either interface. Which two configurations must the engineer perform on the edge router to complete the task? (Choose two.)

ip verify unicast source reachable-via tx under FA0/0

ip verify unicast source reachable-via under FA0/1

ip verify unicast source reachable-via any under FA0/1

ip verify unicast source reachable-via both under FA0/0

ip verify unicast source reachable-via any under FA0/0

Refer to the exhibit. Refer to the exhibit. Four midsize service providers provide access to different customers that use Layer 3 VPN services to enable communication across geographic regions. The service providers are connected as shown in the exhibit, and the PEs have established eBGP relationships. PE4 has an IBGP relationship with PE5. The routes that PE4 learns from PE5 must reach the other PE routers, but they are absent from the routing tables on the other PES. Which action should the engineers take to correct the problem?

Configure a peering between all five Pes.

Disable BGP synchronization on PE4.

Enable BOP IPv4 unicast on PE4 and PE5

Advertise the route targets for PE5 to the other PEs

Which feature describes the weight parameter for BGP path selection?

Its value is local to the router

Its value is set either locally or globally.

Its value is global to the router.

Refer to the exhibit. Refer to the exhibit. A company recently deployed a new network using OSPF in the core to share routes. The network administrator selected OSPF as the routing protocol because of its ability to maintain a route database. When the new network was started up, all routers booted normally, but the link between routers R1 and R2 failed to come up. The two routers are located in the same rack at the data center. Which task should an engineer perform to correct the problem?

Configure the MTUs on the interface to match.

Change one of the OSPF router IDs so that the router IDs are in different subnets

Change the OSPF process ID on one of the devices so that the two IDs match

Configure the MTUs on the interface to match.

What is a characteristics of the Pipe model for MPLS QoS?

The same QoS policy is applied to all customer traffic on the egress PE.

If the outer EXP is changed, it is copied to the DSCP value.

The MPLS EXP bits are set by the CE.

The DSCP value determines how the packet is forwarded

Refer to the exhibit. Refer to the exhibit. An engineer configured several network devices to run REST APIs. After testing, the organization plans to use REST APIs throughout the network to manage the network more efficiently. What is the effect if this script?

It returns an AAA users with the last name CiscoTest.

It creates a class map named aaauser with traffic tagged from AAA.

It queries the local database to find a user named aaaUser.Json

It adds the user CiscoTest to the AAA database located at 192.168.201.10.

Refer to the exhibit. Refer to the exhibit. The network operations team reported that the access site that is connected to R3 is not connecting to the application server in the data center and that all packets that are sent from the application server to the access site are dropped. The team verified that OSPF and BGP peerings are up in BGP AS 65101 and BGP AS 65201. R4 is expected to receive traffic from the application server route via OSPF. Which action resolves this issue?

Add the next-hop-self command on R6 to enable R3 iBGP peering.

Remove the route-map on R4 when advertising 172.16.20.1 in BGP to R3.

Advertise application server 172.16.20.1 in the OSPF routing table on R6.

Allow 172.16.20.1 in the BGP advertisement on R3 in the route-map.

Add the next-hop-self command on R6 to enable R3 iBGP peering.

Refer to the exhibit. Refer to the exhibit. A global company plans to implement BGP at its newest location to provide connectivity to other offices. The global infrastructure of the company is a multivendor environment. An engineer must review the BGP core configurations at headquarters to determine if they can be repurposed at the new location. The engineer copied this JSON script for review. What is the effect of the script?

It configures BGP with neighbor 192.168.1.2 residing in AS 65514.

It sets the BGP router-ID to 192.168.1.2 and sets the AS of the router to 65514.

It configures BGP on the device and inserts 192.168.1.0/24 into the BGP table using the origin AS 65514.

It configures a VRF named cisconode1 and a BGP instance using the VPNv4 address family.

Refer to the exhibit. Refer to the exhibit. An engineer must Implement a traceroute operation to verity the R1 point-to-multipoint LSP connections. The traceroute operation must return all labels and hop-by-hop IP addresses for destinations 10.20.0.1. 10.30.0.1, and 10.40.0.1. and the maximum number of hops is 4. Which command must be executed to meet the requirements?

traceroute mpls traffic-eng tunnel-mte 10 ttl 4

traceroute mpls traffic-eng tunnel-mte 10 responder-id 10.40.0.1

traceroute mpls ipv4 10.30.0.1/32 fee-type generic

traceroute mpls ipv4 10.20.0.1/32 ttl 4

Refer to the exhibit. Refer to the exhibit. Tier 1 ISP A purchased several Tier 2 ISPs to increase their customer base and provide more regional coverage. ISP A plans to implement MPLS services in the access layer, with scalability up to 100.000 devices In one packet network and service recovery up to 50 ms. The network architect decided to use different independent IGP and LDP domains and interconnect LSPs that are based on RFC 3107. Which two actions must the network engineer perform to meet the requirements? (Choose two.)

Implement BGP PIC core functionality on routers R2 and R3.

Implement BGP inline RR functionality with next-hop-self capabilities on routers R2 and R3.

Implement BGP PIC core functionality on routers R2 and R3.

Configure three OSPF areas, with Area 0 In the core domain, and Areas 2 and 3 in the aggregation domain.

Implement BGP connectivity between routers R1 and R4 with VPNv4 address family enabled.

Implement BGP inline RR functionality with next-hop-self capabilities on routers R2 and R3.

Implement the IS-IS routing protocol on the access domain.

Refer to the exhibit. Refer for the exhibit. To optimize network operations, the senior architect created this Python 3.9 script for network automation tasks and to leverage Ansible 4.0 playbooks. Devices In the network support only RFC 2617-based authentication What does the script do?

The script parses the JSON response from the router at IP address 172 168.211.65 and checks If the interface GigaWtEthernet0/1 with IP address 10.1.131.112 exists on the router.

The script logs in via SSH and configures interface GigabitEthernetO/1 with IP address 10.1.131.112/30.

The script leverages REST API calls and configures Interface GlgabilEthemet0/1 with IP address 10.1.131.112/30.

The script performs a configuration sanity check on the device with IP address 172.168.211.65 via HTTP and returns an alert If the payload field falls to match.

The script parses the JSON response from the router at IP address 172 168.211.65 and checks If the interface GigaWtEthernet0/1 with IP address 10.1.131.112 exists on the router.

Cisco 350-501 Practice Test 11 - Free Online Exam Prep & Questions

Which action occurs during the traceback phase of the six-phase approach to service provider security?

Become a Premium Member for full access

Unlock Premium Member

Cisco 350-501 Practice Test 11

Question

Cisco 350-501 Practice Tests

Practice Tests