Cisco 350-501 Online Practice Questions and Exam Preparation

Cisco 350-501 Online Questions & Answers

• Question 251:

  Refer to the exhibit.

  

  RIP network 192.168.1.0/24 is redistributed in OSPF Area 1; both Area 1 and Area 2 are configured as NSSAs.

  Which three statements describe the OSPF behavior in this scenario? (Choose three.)

  A. Area 2 does not see the network 192.168.1.0/24 in its link-state database.
  B. Network 192.168.1.0/24 is advertised in a Type 7 LSA in Area 1.
  C. Network 192.168.1.0/24 is advertised in a Type 5 LSA in Area 0.
  D. Network 192.168.1.0/24 is advertised in a Type 7 LSA in Area 0.
  E. ABR between Area 0 and Area 2 converts network 192.168.1.0/24 to a Type 7 LSA.
  F. Network 192.168.1.0/24 is advertised in a Type 5 LSA in Area 2.
  A. Area 2 does not see the network 192.168.1.0/24 in its link-state database.
  B. Network 192.168.1.0/24 is advertised in a Type 7 LSA in Area 1.
  C. Network 192.168.1.0/24 is advertised in a Type 5 LSA in Area 0.

  ---

  Explanation

• Question 252:

  An engineer working for a private service provider with employee Id: 1234:56:789 is configuring a Cisco device to redistribute OSPF into BGP. Which task enables the device to filter routes?

  A. Configure an access list and reference it with the redistribute command.
  B. Configure a route map and reference it with the redistribute command.
  C. Configure a prefix list and associate it to the BGP peer interface.
  D. Configure a distribute list and associate it to the BGP peer interface.
  B. Configure a route map and reference it with the redistribute command.

  ---

  Explanation

  To filter routes when redistributing OSPF into BGP, you should configure a route map and reference it with the redistribute command.

  The route map allows you to apply filtering criteria to the routes being redistributed.

  Example configuration:

  router bgp 65000 redistribute ospf 1 route-map OSPF-TO-BGP !

  route-map OSPF-TO-BGP permit 10 match ip address prefix-list OSPF-TO-BGP-FILTER !

  ip prefix-list OSPF-TO-BGP-FILTER seq 10 deny 192.168.0.0/24 ip prefix-list OSPF-TO-BGP-FILTER seq 20 permit any

• Question 253:

  You are creating new Cisco MPLS TE tunnels. Which type of RSVP message does the headend router send to reserve bandwidth on the path to the tailend router?

  A. path
  B. tear
  C. error
  D. reservation
  A. path

  ---

  Explanation

  When creating new Cisco MPLS TE tunnels, the headend router sends a Path message to reserve bandwidth on the path to the tunnel's tailend router. The Path message is part of the RSVP (Resource Reservation Protocol) used in signaling and establishing MPLS TE tunnels. It carries information about the requested resources and desired parameters for the tunnel.

  References: Configuring MPLS TE RSVP, MPLS TE RSVP-TE, MPLS TE Theory.

• Question 254:

  A regional operation center deployed SQL servers that were synchronized with the company's backend storage servers by using a 768 Kbps link. Although network congestion is not a frequent issue, the VoIP service suffers a serious degradation. Which two technologies can be implemented to improve the quality of the customer's VoIP traffic? (Choose two)

  A. A decrease in the wan interface buffer size
  B. LLQ for management traffic
  C. cRTP
  D. TCP/UDP filtering based on NBAR
  E. TCP traffic prioritization
  F. LFI
  G. TCP starvation
  C. cRTP
  F. LFI

  ---

  Explanation

• Question 255:

  Refer to the exhbit.

  

  

  ISP A has a BGP peering with ISP C with the maximum-prefix 150 configuration on R1. After a recent security breach on the ISP A network, a network engineer has been asked to enable a lightweight security mechanism to protect the R1 CPU and BGP membership from spoofing attacks. Which solution must ISP A implement?

  A. Configure bgp maxas-limit 1 in the IPv4 address family urateUhe global BGP configuration.
  B. Configure neighbor 10.163.83.54 enable-connected-check under the BGP IPv4 address family.
  C. Configure neighbor 10.163.83.55 password Cisco under the global BGP IPv4 address family.
  D. Configure neighbor 10.163.83.55 ttl-stcurity hops 2 under the global BGP configuration.
  D. Configure neighbor 10.163.83.55 ttl-stcurity hops 2 under the global BGP configuration.

  ---

  Explanation

  The Time to Live (TTL) security mechanism is a lightweight security feature that can protect against CPU and memory resource exhaustion due to a denial-of-service (DoS) attack. It works by setting a limit on the number of hops (TTL value) that BGP packets can traverse. By configuring neighbor 10.163.83.55 ttl-security hops 2, ISP A ensures that BGP packets received from ISP C must have a TTL value of at least 254 when they reach R1, as BGP packets decrement the TTL by 1 with each hop. This effectively prevents spoofing attacks from outside the directly connected network because any packets spoofed from further away would have a TTL that drops below the threshold before reaching R1.

  This explanation is based on the security features described in the Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

• Question 256:

  Refer to the exhibit.

  

  What does this value mean when it is received in XML?

  A. It indicates a value assigned by a network administrator to tag a route.
  B. It indicates a break in a sequence.
  C. It means a data field is blank.
  D. It shows the ending of the script.
  C. It means a data field is blank.

  ---

  Explanation

  In XML, a self-closing tag such as indicates that the element does not contain any data, hence the data field is considered blank. This is a common way to represent empty elements in XML documents.

  For further details, you can refer to XML-related sections in the Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) materials, which explain the structure and usage of XML in network configurations.

• Question 257:

  A service provider requires continuous real-time network monitoring to provide reliable SLAs to its customers. To satisfy this requirement, a network administrator is implementing gRPC dial out on an ASR with TLS. Receiver 192.168.10.2 will be assigned one of the subscriptions, and it will manage the ASR. Which configuration must the engineer apply to the router as part of the configuration process?

  A. snmp-server community publicsnmp-server enable trapssnmp-server host 192.168.10.2 version 2c public.
  B. telemetry model-drivendestination-group DGroup1address family ipv4 192.168.10.2 1 port 10encoding self-describing-gpb
  C. snmp-server community publicsnmp-server enable trapssnmp-server enable traps snmp authenticationsnmp-server managersnmp-server manager session-timeout 1000
  D. telemetry model-drivendestination-group ciscotestaddress family ipv4 192.168.10.2 port 10encoding self-describing-gpbprotocol grpc tis-hostname ciscotest.com
  D. telemetry model-drivendestination-group ciscotestaddress family ipv4 192.168.10.2 port 10encoding self-describing-gpbprotocol grpc tis-hostname ciscotest.com

  ---

  Explanation

• Question 258:

  Refer to the exhibit.

  

  A company uses PIM-SM multicast with IGMPv2 to stream training videos from a server in network 192.168.1.2/24 to hosts that reside in 192.168.4.0/24. The company is implementing SSM to improve efficiency within Layer 2.

  Which task should the engineer perform to allow hosts to dynamically register to a multicast group when reaching the server at 192.168.1.2?

  A. Implement PIM-DM on the interface between R2 and R3.
  B. Implement IGMPv3 on all routers.
  C. Configure bidirectional PIM on R2.
  D. Configure an IGMP querier on R3.
  B. Implement IGMPv3 on all routers.

  ---

  Explanation

• Question 259:

  

  Refer to the exhibit. A network engineer is configuring an SNMP community on router RB with these requirements:

  Allow read-only access for all objects to members of Access-List 10 that use the comaccess community string.

  Other SNMP managers must not have access to objects. SNMP authentication failure traps must be sent to SNMPv2c and then to the host using SNMPv2c with the public community string.

  Which configuration meets these requirements?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  Explanation

• Question 260:

  Refer to the exhibit

  

  A network engineer is implementing a BGP protocol. Which effect of the local-as keyword in this configuration is true?

  A. It enables peer 192.168.1.2 to establish a BGP relationship with R1 using AS 65012 without additional configuration.
  B. It enables peer 192.168.1.2 to establish a BGP relationship with R1 using AS 65112 and the VPNv4 address family.
  C. It enables peer 192.168.1.2 to establish a BGP relationship with R1 using AS 65012 and the VPNv4 address family.
  D. It enables peer 192.168.1.2 to establish a BGP relationship with R1 using AS 65112 without additional configuration.
  D. It enables peer 192.168.1.2 to establish a BGP relationship with R1 using AS 65112 without additional configuration.

  ---

  Explanation

  The local-as keyword is used in BGP configurations to change the local AS number that is used in the BGP OPEN message when establishing a BGP session with a specific neighbor. In this case, even though the router is configured with AS 65000, it will use AS 65112 when establishing a connection with neighbor 192.168.1.2 due to the local-as keyword configuration.

  References: https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/13761-39.html