Cisco 350-501 Online Practice Questions and Exam Preparation

Cisco 350-501 Online Questions & Answers

• Question 1:

  Refer to the exhibit.

  

  Routers R1 through R5 are being deployed within the core of a service provider running BGP. The core supports distribution of VPNv4 routes using MPLS. R3 currently has multiple paths to reach R4. A network engineer must implement BGP attributes so that R3 can reach R4 via R1.

  Which action must the engineer take to meet the requirement?

  A. Configure R3 so the route to R4 through R1 will have a higher weight than the route from R2 or R5.
  B. Configure R2 to send the route from R4 to R1 using a higher metric than what is advertised to R3.
  C. Configure R3 so the route to R4 through R1 will have a lower local preference than the route from R2 or R5.
  D. Configure R5 to send the route from R4 to R1 using a longer AS path than the AS path that it receives from R1 or R2.
  A. Configure R3 so the route to R4 through R1 will have a higher weight than the route from R2 or R5.

  ---

  Explanation

  To direct traffic from R3 to R4 via R1, the weight attribute on R3 can be set higher for the route through R1 compared to other routes. Weight is a Cisco-specific BGP attribute that determines the preferred path when multiple routes to the same destination exist. It is local to the router on which it is configured and not advertised to other BGP peers.

  References:

  Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) course materials.

• Question 2:

  Refer to the exhibit.

  

  The engineering team wants to limit control traffic on router RX with the following IP address assignments:

  1. Accepted traffic for router: 10.0.0.0/24 2. NOC users IP allocation: 192.168.10.0/24

  Which additional configuration must be applied to RX to apply the policy for MSDP?

  A. RX(config)#access-list 151 permit tcp any gt 1024 10.10.0.0 0.0.0.255 eq 639RX(config)#access-list 151 permit tcp any eq 639 10.10.0.0 0.0.0.255 gt 1024 established
  B. RX(config)#access-list 150 permit tcp any gt 1024 10.0.0.0 0.0.0.255 eq 639RX(config)#access-list 150 permit tcp any eq 639 10.0.0.0 0.0.0.255 gt 1024 established
  C. RX(config)#access-list 151 permit tcp any 10.0.0.0 0.0.0.255 eq 639RX(config)#access-list 151 permit udp any 10.0.0.0 0.0.0.255 eq 639
  D. RX(config)#access-list 150 permit tcp any 10.0.0.0 0.0.0.255 eq 639RX(config)#access-list 150 permit udp any 10.0.0.0 0.0.0.255 eq 639
  B. RX(config)#access-list 150 permit tcp any gt 1024 10.0.0.0 0.0.0.255 eq 639RX(config)#access-list 150 permit tcp any eq 639 10.0.0.0 0.0.0.255 gt 1024 established

  ---

  Explanation

• Question 3:

  A network architect at ISP must implement a loop-avoidance mechanism in the organization's ring network topology. The architect decided to implement ITU-T G.8032. Intermittent link flaps within two seconds should be ignored.

  Which two configurations must the architect apply? (Choose two.)

  A. ring-protection g8032 profile vlan port-channel none
  B. link-protection group management vlan 1
  C. timer hold-off 2
  D. continuity-check direction down 2
  E. ethernet ring g8032 profile ethernet
  C. timer hold-off 2
  E. ethernet ring g8032 profile ethernet

  ---

  Explanation

• Question 4:

  Refer to the exhibit

  

  An engineer is preparing to implement data plane security configuration.

  Which statement about this configuration is true?

  A. Router 2 is the router receiving the DDoS attack.
  B. Router 1 must be configured with uRPF for the RTBH implementation to be effective.
  C. Router 1 is the trigger router in a RTBH implementation.
  D. Router 2 must configure a route to null 0 for network 192.168.1.0/24 for the RTBH implementation to be complete.
  C. Router 1 is the trigger router in a RTBH implementation.

  ---

  Explanation

  Router 1 is the trigger router in a Remote Triggered Black Hole (RTBH) implementation. In the configuration provided, Router 1 has a static route to null0 for network 192.168.1.0/24 with a tag of 1, which is used to drop traffic destined to this network, effectively mitigating DDoS attacks. The route-map "ddos" matches this tag and sets local preference and community accordingly. The BGP process redistributes this static route based on the "ddos" route-map, signaling other routers in the network to drop traffic destined for the attacked network.

• Question 5:

  What is a constraint of Cisco MPLS TE tunnel configurations?

  A. QoS-aware tunneling is not supported.
  B. Tunnels cannot be configured over IP unnumbered links.
  C. With ISIS as an IGP, only older-style metrics are used.
  D. Tunnels cannot span multiple OSPF areas.
  B. Tunnels cannot be configured over IP unnumbered links.

  ---

  Explanation

• Question 6:

  Refer to the exhibit.

  

  An engineer began to configure LDP between R1 and R2, but R1 and R2 cannot yet establish an LDP TCP connection.

  Which additional task must be completed to finish the implementation?

  A. Configure the mpls Idp neighbor 172.16.0.1 password command on R1
  B. Configure the mpls Idp neighbor 10.0.12.1 password command on R1
  C. Configure the no mpls Idp password option 1 command on R2
  D. Configure the no mpls Idp password option 1 command on R1
  C. Configure the no mpls Idp password option 1 command on R2

  ---

  Explanation

  The issue here is that R1 and R2 cannot yet establish an LDP TCP connection. From the exhibit, it's clear that the password is not required as it states "Password: not required, none, in use". So, option C "Configure the no mpls Idp password option 1 command on R2" would be the correct answer to allow the establishment of an LDP TCP connection without requiring a password. This aligns with Cisco's guidelines on configuring MPLS LDP where passwords might not be necessary for establishing connections between routers.

  Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) - Cisco SPCOR

• Question 7:

  Refer to the exhibit.

  

  A network engineer working for a telecommunication company with an employee ID: 4602:62:646 is configuring security controls for the IPv6 multicast group, which is used for video TV. The solution from the engineer should reduce network usage and minimize the leave latency for the user that is connected to VLAN 76.

  Which two configurations meet this goal? (Choose two.)

  A. Apply the following commands globally on SW1:ipv6 mld vlan 76 fast-leave vlan 76ipv6 mld security join vlan 76
  B. Configure an ACL to limit the IPv6 multicast group with the entry permit ipv6 any ff3a::2312:eaba:b/96
  C. Configure an ACL to limit the IPv6 multicast group with the entries ipv6 access-list security_access_list permit ipv6 ff3a::2312:eaba:b/96 any
  D. Apply the following commands globally on SW1:ipv6 mld vlan 76 immediate-leaveipv6 mld snooping
  E. Apply the following commands globally on SW1:ipv6 mld snooping multicast optimise-multicast-floodipv6 mld snooping fast-leave group security_access_list
  A. Apply the following commands globally on SW1:ipv6 mld vlan 76 fast-leave vlan 76ipv6 mld security join vlan 76
  C. Configure an ACL to limit the IPv6 multicast group with the entries ipv6 access-list security_access_list permit ipv6 ff3a::2312:eaba:b/96 any

  ---

  Explanation

  To reduce network usage and minimize leave latency for users connected to VLAN 76, the configurations should focus on efficient multicast traffic management. Option A likely involves enabling IPv6 MLD snooping, which restricts multicast traffic to only the ports that have members interested in receiving the traffic, thus reducing unnecessary network usage. Option C might include configuring fast-leave processing, which allows the switch to immediately stop forwarding multicast traffic to a port when the last member of a multicast group leaves, reducing leave latency.

  References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

• Question 8:

  What is a characteristics of the Pipe model for MPLS QoS?

  A. The same QoS policy is applied to all customer traffic on the egress PE.
  B. If the outer EXP is changed, it is copied to the DSCP value.
  C. The MPLS EXP bits are set by the CE.
  D. The DSCP value determines how the packet is forwarded
  A. The same QoS policy is applied to all customer traffic on the egress PE.

  ---

  Explanation

  In the Pipe model for MPLS QoS, the provider's core network ignores the customer's DSCP markings and instead uses the MPLS EXP bits to handle QoS. At the egress PE, all customer traffic is treated with the same QoS policy, independent of the original DSCP values.

• Question 9:

  Refer to the exhibit.

  

  Which statement about the status of the neighbor relationship between R1 and R2 is true?

  A. The neighbor relationship is down because the two routers are configured with different area types.
  B. The neighbor relationship is down because the two routers are in the same subnet.
  C. The neighbor relationship is up because R2 is level 1 and Ievel 2 router.
  D. The neighbor relationship is down because R2 is operating as a Level 1 router and the two routers are in different areas.
  D. The neighbor relationship is down because R2 is operating as a Level 1 router and the two routers are in different areas.

  ---

  Explanation

  For the answer A, we have 3 cases when they have same area type:

  1. both are in area type 1 -> it will not work because different area (0011 vs 0022) 2. both are in area type 2 -> it will work because area difference does not matter 3. both are in area type1-2 -> it will work because area difference does not matter So the logic tells us that case 1 will invalidate this answer.

  The remaining vaild answer is D

• Question 10:

  Which configuration mode do you use to apply the mpls Idp graceful-restart command in IOS XE Software? MPLS

  A. MPLS
  B. LDP neighbor
  C. global
  D. interface
  C. global

  ---

  Explanation