Cisco CCNP Service Provider 350-501 Questions & Answers

• Question 261:

  Refer to the exhibit.

  

  An engineer is securing a customer's network. Which command must the engineer use to complete this configuration to prevent a DoS attack?

  A. neighbor ttl-security

  B. ebgp-multihop

  C. neighbor ebgp-multihop

  D. ttl-security

  Correct Answer: D

• Question 262:

  Which CLI mode must be used to configure the BGP keychain in Cisco IOS XR Software?

  A. routing configuration mode

  B. BGP neighbor configuration mode

  C. global configuration mode

  D. BGP address-family configuration mode

  Correct Answer: C

• Question 263:

  A remote operation center is deploying a set of I-BGP and E-BGP connections for multiple IOS-XR platforms using the same template. The I-BGP sessions exchange prefixes with no apparent issues, but the E-BGP sessions do not exchange routes. What causes this issue?

  A. The I-BGP neighbors are mistyped and HELLO packets cannot be exchanged successfully between routers.

  B. The E-BGP neighbors are not allowed to exchange Information due to the customer platform's default policy.

  C. A PASS ALL policy has not been implemented for the I-BGP neighbors.

  D. The next-hop-self command is not implemented on both E-BGP neighbors.

  Correct Answer: B

  

  https://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k-r6- 2/routing/configuration/guide/b-routing-cg-asr9000-62x/b-routing-cg-asr9000- 62x_chapter_010.html

• Question 264:

  Refer to the exhibit.

  

  A network engineer notices that router R2 is failing to install network 172.16.33.1/32 in the routing table. Which configuration must the engineer apply to R2 to fix the problem?

  A. R2(config)# access-list 1 permit 172.16.33.0 0.0.0.255

  B. R2(config)# access-list 1 permit 172.16.33.0 255.255.0.0

  C. R2(config)# access-list 1 permit 172.16.33.0 255.255.255.0

  D. R2(config)# access-list 1 permit 172.16.33.0 255.0.0.0

  Correct Answer: A

• Question 265:

  Which two PHY modes are available to implement an IOS XR 10 Gigabit Ethernet interface? (Choose two.)

  A. LAN

  B. SONET

  C. MAN

  D. WAN

  E. WDWM

  Correct Answer: AD

  https://www.cisco.com/c/en/us/td/docs/routers/crs/software/crs_r4-1/interfaces/command/reference/interfaces_cr41crs_chapter19.html

• Question 266:

  Which QoS model allows hosts to report their QoS needs to the network?

  A. IntServ

  B. CB-WFQ

  C. DiffServ

  D. MQC

  Correct Answer: A

  IntServ follows the signaled-QoS model, where the end-hosts signal their QoS needs to the network.

  Reference: https://www.cisco.com/en/US/technologies/tk543/tk766/technologies_white_paper09186a00800a3e2f.html

• Question 267:

  Refer to the exhibit.

  

  Which show command shows statistics for the control plane policy and is used to troubleshoot?

  A. show control-plane CoPP

  B. show policy control-plane

  C. show control-plane

  D. show policy-map control-plane

  Correct Answer: D

• Question 268:

  Refer to the exhibit.

  

  An engineer has started to configure a router for secure remote access as shown. All users who require network access need to be authenticated by the SSH protocol. Which two actions must the engineer implement to complete the SSH configuration? (Choose two.)

  A. Configure an IP domain name.

  B. Configure ACL 100 to permit access to port 22.

  C. Configure a password under the vty lines.

  D. Configure crypto keys.

  E. Configure service password encryption.

  Correct Answer: AD

• Question 269:

  Refer to the exhibit.

  

  To protect in-band management access to CPE-R7, an engineer wants to allow only SSH management and provisioning traffic from management network 192.168.0.0/16. Which infrastructure ACL change must be applied to router PE-R9 to complete this task?

  A. ip access-list extended INFRA-ACL 15 permit tcp 192.168.0.0 0.0.255.255 range 49152 65535 100.64.0.0 0.31.255.255 eq 443

  B. ip access-list extended INFRA-ACL no 10 15 permit tcp 192.168.0.0 0.0.255.255 range 49152 65535 100.64.0.0 0.31.255.255 eq 22

  C. ip access-list extended INFRA-ACL 15 permit tcp 192.168.0.0 0.0.255.255 range 49152 65535 100.64.0.0 0.31.255.255 eq 22

  D. ip access-list extended INFRA-ACL no 10 15 permit tcp 192.168.0.0 0.0.255.255 range 22 100.64.0.0 0.31.255.255 eq 22

  Correct Answer: B

• Question 270:

  An engineer working for a private service provider with employee Id: 1234:56:789 is configuring a Cisco device to redistribute OSPF into BGP. Which task enables the device to filter routes?

  A. Configure an access list and reference it with the redistribute command.

  B. Configure a route map and reference it with the redistribute command.

  C. Configure a prefix list and associate it to the BGP peer interface.

  D. Configure a distribute list and associate it to the BGP peer interface.

  Correct Answer: B