Cisco 350-029 Online Practice Questions and Exam Preparation

Cisco 350-029 Online Questions & Answers

• Question 381:

  Which of the following technologies can improve convergence time following a link failure in a service provider network? (Choose two.)

  A. RSVP
  B. MPLS TE FR
  C. MPLS VPN
  D. SNMP
  E. BFD
  F. VPLS
  B. MPLS TE FR
  E. BFD

• Question 382:

  Refer to the exhibit.

  

  Which IPv6 deployment feature is displayed?

  A. MPLS 6PE
  B. MPLS 6VPE
  C. 6 to 4 Replay Service
  D. native IPv6 over MPLS
  E. 6 to 4 Tunnel
  A. MPLS 6PE

• Question 383:

  What protocol does an IP phone use to learn the voice VLAN ID it should use for voice traffic?

  A. VTP
  B. 802.1q
  C. CDP
  D. Skinny Station Protocol
  C. CDP

• Question 384:

  In a frame, the MPLS label is imposed where?

  A. Before the layer 2 header
  B. Within the Layer 3 header
  C. After the Layer3 header and before Layer2 header
  D. After the Layer2 header and before Layer3 header
  D. After the Layer2 header and before Layer3 header

  ---

  Where will the label be imposed in a packet?

  A. The label is imposed between the data link layer (Layer 2) header and network layer (Layer 3) header. The top of the label stack appears first in the packet, and the bottom appears last. The network layer packet immediately follows the last label in the label stack.

• Question 385:

  In MVPN GRE, what is the limitation for unicast GRE tunnels?

  A. Support more than 500 GRE tunnels per system for multicast.
  B. Transport header support is limited to IPv4.
  C. Transport header support is limited to IPv6.
  D. IPV4 multicast for GRE unicast tunnels is not supported.
  B. Transport header support is limited to IPv4.

• Question 386:

  Which two things are correct about QinQ technology? (Choose two.)

  A. The Outer.1Q tag represents customer VLAN ID and inner.1Q tag represents Service Provider VLAN (PVLAN)
  B. It is an effective way to achieve VLAN transparency between Provider and enterprise customer by tunneling one ser of VLAN tags inside a second VLAN tag
  C. The Outer.1Q tag represents Service Provider VLAN (PVLAN) and inner.1Q tag represents customer VLAN
  D. QinQ is a way to hide native VLAN which can conflict with Provider native VLAN
  B. It is an effective way to achieve VLAN transparency between Provider and enterprise customer by tunneling one ser of VLAN tags inside a second VLAN tag
  C. The Outer.1Q tag represents Service Provider VLAN (PVLAN) and inner.1Q tag represents customer VLAN

  ---

  IEEE 802.1ad[note 1] is an Ethernet networking standard informally known as IEEE 802.1QinQ[by whom?] and is an amendment to IEEE standard IEEE 802.1Q- 1998. The technique is also known as provider bridging, Stacked VLANs, or simply QinQ or Q-in-Q. "Q- in-Q" can for supported devices apply to C-tag stacking on Ctag (Ethernet Type = 0x8100) but this has limited application in the modern methodology of network routing.

  The original 802.1Q specification allows a single Virtual Local Area Network (VLAN) header to be inserted into an Ethernet frame. QinQ allows multiple VLAN headers to be inserted into a single frame, an essential capability for implementing Metro Ethernet network topologies. Just as QinQ extends 802.1Q, QinQ itself is extended by other Metro Ethernet protocols.[specify] In a multiple VLAN header context, out of convenience the term "VLAN tag" or just "tag" for short is often used in place of "802.1Q VLAN header". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1Q headers (double-tagged). There is a mild confusion regarding the naming because the 802.1ad standard was grown out of the 802.1QinQ[citation needed] protocol (which was developed based the trademarked method 802.1Q, with capital "Q" as a distinction instead of the 802.1q as the standardised protocol) which originally used 0x8100 as ethernet type instead of 0x88a8. While the network industry usually mix the naming, the proper, standardized name is 802.1ad which sometimes gets appended by the other alternative names mentioned above; the plain "802.1QinQ"[citation needed] name usually refers to the old standard which is now[when?] considered obsolete.

• Question 387:

  Routes redistributed into an OSPF ASBR are which LSA type?

  A. LSA type 6
  B. LSA type 1
  C. LSA type 2
  D. LSA type 5
  E. LSA type 3
  F. LSA type 4
  D. LSA type 5

• Question 388:

  Which two actions of Cisco IOS Software prevent a DDOS attack? (Choose two.)

  A. Filter all source addresses from which traffic is not expected in the network, including RFC 1918 addresses.
  B. Filter all traffic for TCP ports in the range 1014-49151.
  C. Enable BFD to have links taken down when there is an attack.
  D. Enable the ip verify reverse-path command on the interface.
  E. Allow only static routes; dynamic routing protocols should not be allowed.
  A. Filter all source addresses from which traffic is not expected in the network, including RFC 1918 addresses.
  D. Enable the ip verify reverse-path command on the interface.

• Question 389:

  When configuring Multicast VPN (MVPN) over an MPLS core, both the Default and Data MDT is configured under which configuration mode?

  A. router(config-router)#
  B. router(config)#
  C. router(config-router-af)#
  D. router(config-if)#
  E. router(config-vrf)#
  E. router(config-vrf)#

• Question 390:

  Refer to the exhibit.

  

  Inbound Infrastructure ACLs are configured to protect the SP network. Which three types of traffic should be filtered in the infrastructure ACLs? (Choose three.)

  A. traffic from a source with an IP address that is within 239.255.0.0/16
  B. FTP traffic destined for internal routers
  C. IPsec traffic that at an internal router
  D. traffic from a source with an IP address that is within 162.238.0.0/16
  E. EBGP traffic that peers with edge routers
  A. traffic from a source with an IP address that is within 239.255.0.0/16
  B. FTP traffic destined for internal routers
  D. traffic from a source with an IP address that is within 162.238.0.0/16

  ---

  With the use of the protocols and addresses identified, the infrastructure ACL can be built to permit the protocols and protect the addresses. In addition to direct protection, the ACL also provides a first line of defense against certain types of invalid traffic on the Internet:

  -

  RFC 1918 space must be denied. (RFC1918 describes a set of network ranges set aside for so- called "private" use.)

  -

  Packets with a source address that fall under special-use address space, as defined in RFC 3330, must be denied.

  -

  Anti-spoof filters must be applied. (Your address space must never be the source of packets from outside your AS.)