Cisco 350-029 Online Practice Questions and Exam Preparation

Cisco 350-029 Online Questions & Answers

• Question 451:

  Pick the 4 valid ATM Cell Header fields:

  A. GFC-4 bits of generic flow control
  B. Forward-explicit congestion notification(FECN)
  C. VCI-16 bits of virtual channel identifier
  D. CLP-1 bit of congestion loss
  E. HEC-8 bit of header error control
  F. ATM Discard Eligibility(DE) bit
  A. GFC-4 bits of generic flow control
  C. VCI-16 bits of virtual channel identifier
  D. CLP-1 bit of congestion loss
  E. HEC-8 bit of header error control

  ---

  The ATM cell header consists of the following fields: generic flow control (GFC), virtual path identifier (VPI), virtual channel identifier (VCI), payload type (PT), cell loss priority (CLP) and header error control (HEC).

• Question 452:

  Which three options are restrictions for MPLS VPN BGP Local Convergence? (Choose three.)

  A. The MPLS VPN BGP Local Convergence feature affects only traffic that is exiting the VPN. Therefore, it cannot fully protect traffic end-to-end by itself.
  B. This link protection can be initiated during a HA SSO. But links that were configured with this protection before the switchover begins remain protected after the switchover.
  C. The MPLS VPN BGP Local Convergence feature for IPv4/IPV6 supports the eBGP, RIP, EIGRP,OSPF, and dynamic routing protocols.
  D. Any next-hop core tunneling technology that is supported by BGP is also supported for protection, including MPLS, L2TPv3, and IP/GRE. CSC protocol between the PE and CE is also supported. Interautonomous system option A (backto-back VRF) is supported because it is essentially the same as performing the PE-CE link protection in both autonomous systems. However, interautonomous system options B and C protection are not supported.
  E. If you perform an in-service software downgrade from an image that does include this link protection to an image that does not support this feature, active protection is halted when BGP routes are refreshed.
  A. The MPLS VPN BGP Local Convergence feature affects only traffic that is exiting the VPN. Therefore, it cannot fully protect traffic end-to-end by itself.
  D. Any next-hop core tunneling technology that is supported by BGP is also supported for protection, including MPLS, L2TPv3, and IP/GRE. CSC protocol between the PE and CE is also supported. Interautonomous system option A (backto-back VRF) is supported because it is essentially the same as performing the PE-CE link protection in both autonomous systems. However, interautonomous system options B and C protection are not supported.
  E. If you perform an in-service software downgrade from an image that does include this link protection to an image that does not support this feature, active protection is halted when BGP routes are refreshed.

• Question 453:

  Which two statements are correct with regard to route distinguisher as defined in RFC 4364 AKA IP-VPN (MPLS-VPN)? (Choose two.)

  A. The configuration to define Route-Distinguisher is ip vrf CNT rd 1:1
  B. A route distinguisher can be imported and exported to and from a VRF
  C. Route-Distinguisher is an 8 byte BGP attribute value used in influencing BGP best path algorithm.
  D. Route-Distinguisher is an 8 byte value used in creating unique VPNv4 address.
  A. The configuration to define Route-Distinguisher is ip vrf CNT rd 1:1
  D. Route-Distinguisher is an 8 byte value used in creating unique VPNv4 address.

• Question 454:

  Which three statements about the Cisco MPLS TE Fast Reroute (FRR) process are true? (Choose three.)

  A. TE tunnels that are configured with the FRR option cannot be used as backup tunnels.
  B. TE tunnels that are configured with the FRR option can be used as backup tunnels.
  C. The backup tunnel that is used to protect a physical interface must have a valid IP address configured.
  D. Interfaces must use MPLS global label allocation.
  E. The source IP address of use backup tunnel and the merge point (MP) should not be reachable.
  A. TE tunnels that are configured with the FRR option cannot be used as backup tunnels.
  C. The backup tunnel that is used to protect a physical interface must have a valid IP address configured.
  D. Interfaces must use MPLS global label allocation.

  ---

  Restrictions for MPLS Traffic Engineering--Fast Reroute Link and Node Protection 稩nterfaces must use MPLS Global Label Allocation. Backup tunnel headend and tailend routers must implement FRR as described in draft-pan-rsvpfastreroute-00.txt.

  

  Backup tunnels are not protected. If an LSP is actively using a backup tunnel and the backup tunnel fails, the LSP is torn down.

  

  LSPs that are actively using backup tunnels are not considered for promotion. If an LSP is actively using a backup tunnel and a better backup tunnel becomes

  

  available, the active LSP is not switched to the better backup tunnel.

  You cannot enable FRR Hellos on a router that also has Resource Reservation Protocol (RSVP) Graceful Restart enabled.

  

  (Applicable only to Release 12.2.) You cannot enable primary one-hop autotunnels, backup autotunnels, or autotunnel mesh groups on a router that is also

  

  configured with stateful switchover (SSO) redundancy. This restriction does not prevent an MPLS TE tunnel that is automatically configured by TE autotunnel from being successfully recovered by any midpoint router along the LSP's path if the

  router experiences an SSO switchover. 稭PLS TE LSPs that are fast reroutable cannot be successfully recovered if the LSPs are FRR active and the Point of Local Repair (PLR) router experiences an SSO. 稺hen SSO (stateful switchover)

  occurs on a router, the switchover process must complete before FRR (fast reroute) can complete successfully. In a testing environment, allow approximately 2 minutes for TE SSO recovery to complete before manually triggering FRR. To

  check the TE SSO status, use the show ip rsvp high availability summary command. Note the status of the HA state field.

  When SSO is in the process of completing, this field will display 'Recovering'. When the SSO process has completed, this field will display 'Active'.

• Question 455:

  Which statement about the requirements of eBGP multipath is true?

  A. The path should be learned from an external or confederation-external neighbor.
  B. The path should be learned from an internal neighbor.
  C. The IGP metric to the BGP next hop should be equal to the best-path IGP metric, unless the router is configured for unequal-cost iBGP multipath.
  D. The path should be learned from an IGP protocol.
  A. The path should be learned from an external or confederation-external neighbor.

• Question 456:

  Cisco IOS XR has implemented a nonstop routing feature so that when RP failover occurs, the routing information can be recovered locally. Which protocol does not support the NSR feature?

  A. OSPF
  B. LDP
  C. BGP
  D. IS-IS
  E. RSVP
  E. RSVP

• Question 457:

  According to RFC 3931, L2TPv3 utilizes the IANA assigned IP protocol ID of:

  A. 110
  B. 101
  C. 121
  D. 51
  E. 151
  F. 115
  F. 115

  ---

  IP Protocol 115 (L2TPv3)

• Question 458:

  Which mode does PPP interface use for peer authentication?

  A. in-band
  B. semi-in-band
  C. out-band
  D. semi-out-band
  E. in-band and out-band
  C. out-band

• Question 459:

  How many messages does Internet Key Exchange (IKE) use to negotiate SA characteristics when running in aggressive mode?

  A. 3 messages
  B. 4 messages
  C. 5 messages
  D. 2 messages
  E. 6 messages
  A. 3 messages

  ---

  The Aggressive Mode is an exchange in the first phase of IKE/ISAKMP (The ISAKMP Aggressive Exchange) is like the Main Mode, but some messages are embedded to the others. The first message proposes the policy, and passes data for key-exchange, the nonce and some information for identification. The second message is a response which authenticates the responder and concludes the policy and key-exchange. At this point all the information for encryption key for the ISAKMP SA is exchanged and last the message could be encrypted, but doesn't have to be. The last message is used for authenticating the initiator and provides a proof of participation in the exchange. The identity of the responder could not be protected, but by encrypting the last message the identity of the initiator is protected.

• Question 460:

  Select two valid administratively scoped multicast addresses in networks running Interior Gateway protocols like EIGRP and OSPF (Choose two).

  A. 239.255.255.255
  B. 224.0.0.10
  C. 239.0.0.1
  D. 224.0.0.5
  A. 239.255.255.255
  C. 239.0.0.1