Cisco 350-501 Online Practice Questions and Exam Preparation

Cisco 350-501 Online Questions & Answers

• Question 31:

  Which option describes a benefit of IPv6 VPN Provider Edge?

  A. Uses separate signaling plane, which provides more security than IPv4
  B. No requirement for a separate signaling plane
  C. Provides support for intra-AS and CSC scenarios
  D. BGP is the preferred routing protocol for connecting two SPs.
  B. No requirement for a separate signaling plane

  ---

  Explanation

• Question 32:

  Which two actions describe ISP delegation to PCE servers? (Choose two)

  A. adding a new PCE server with lower precedence than the primary PCE
  B. changing the precedence of any of the PCE servers
  C. removing TE re-optimization timer timeouts
  D. entering the mpls traffic-eng reoptimize command
  E. adding a new PCE server with higher precedence than the primary PCE
  A. adding a new PCE server with lower precedence than the primary PCE
  D. entering the mpls traffic-eng reoptimize command

  ---

  Explanation

  In the above code snippet, 100 is a lower precedence than 255, which is the default precedence. Therefore, the device with IP address 192.0.2.2 becomes the primary PCE and the device with 192.0.2.1 becomes the standby PCE.

  Triggering PCE server precedence re-evaluation A change in a PCE server's precedence is not considered a PCE server failure. So, the change in precedence does not trigger a redelegation timeout or a re-evaluation of LSP delegation to the PCE server at a PCC.

  Re-evaluation of LSP delegation to PCE servers after CLI reconfiguration is controlled by the TE reoptimisation timer. By default, the TE reoptimisation timer is set to 3600 seconds.

  You can accelerate the re-evaluation of LSP delegation from a PCC to PCE servers after you have changed the precedence of PCE servers or added new PCE servers. To do so, manually trigger TE reoptimisation using the following command in privileged EXEC mode:

  mpls traffic-eng reoptimize

• Question 33:

  Refer to the exhibit.

  

  A network operator must configure CSR1 interlaces GigabitEihernet2 and GigabitEthemet to rewrite VLAN tags 12 and 21 for traffic between R1 and R2 respectively.

  Which configurator accomplishes this task?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

  IF bridge domain on both interfaces are 10

• Question 34:

  Refer to the exhibit.

  import requests import json

  device_ip = '10.0.0.1' username = 'cisco' password = 'cisco'

  api_endpoint = f'https://{device_ip}/restconf/data/native/interface'

  api_data = { "Cisco-IOS-XE-native:Loopback": [

  { "name": "1", "ip": { "address": { "primary": { "address": "10.1.1.1", "mask": "255.255.255.0"

  }

  }

  }

  } ]

  }

  api_headers = { 'Accept': 'application/yang-data+json', 'Content-Type': 'application/yang-data+json'

  }

  response = requests.patch(api_endpoint, headers=api_headers, auth=(username, password), data=json.dumps(api_data), verify=False)

  if response.status_code == 204:

  print('Loopback interface was configured successfully.') else:

  print(f'Request failed with code {response.status_code}.') print(response.text)

  An operations team recently located an archive of scripts for deploying routine network changes with an error-free approach. A junior network engineer, who is working to modify the scripts to support RESTCONF, has been asked to document the purpose of each updated script.

  Which two actions does the given script take? (Choose two.)

  A. Send a patch request to the API endpoint.
  B. Print a fail message when the response code is 204.
  C. Pass an XML data-format request in the API header.
  D. Print a success message when the device receives a full-content response code.
  E. Ignore SSL certificate verification.
  A. Send a patch request to the API endpoint.
  D. Print a success message when the device receives a full-content response code.

  ---

  Explanation

• Question 35:

  Refer to the exhibit.

  

  An engineer is scripting ACLs to handle traffic on the given network. The engineer must block users on the network between R1 and R2 from leaving the network through R5, but these users must still be able to access all resources within the administrative domain. How must the engineer implement the ACL configuration?

  A. Configure a permit any ACL on the R1 interface to R2 in the egress direction, and a deny any ACL on the interface in the ingress direction
  B. Configure an ACL that permits traffic to any internal address, and apply it to the R5 interfaces to R3 and R4 in the egress direction
  C. Configure an ACL that denies traffic to any internal address and denies traffic to any external address, and apply it to the R5 interfaces to R3 and R4 in the ingress direction
  D. Configure an ACL that permits traffic to all internal networks and denies traffic to any external address, and apply it to the R2 interface to R1 in the ingress direction
  D. Configure an ACL that permits traffic to all internal networks and denies traffic to any external address, and apply it to the R2 interface to R1 in the ingress direction

  ---

  Explanation

  In the given scenario, the goal is to restrict users on the network between R1 and R2 from accessing the external network through R5, while still allowing them access to all resources within the administrative domain. The correct approach is to configure an Access Control List (ACL) that permits traffic to all internal networks and denies traffic to any external address. This ACL should be applied to the R2 interface that connects to R1 in the ingress direction. By doing so, traffic originating from users between R1 and R2 destined for external networks will be blocked, while internal traffic will be allowed.

  This explanation is derived from the Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) study materials, which cover the configuration and application of ACLs in a service provider network environment.

• Question 36:

  Refer to the exhibit.

  

  What is the URL used for with REST API?

  A. It is used to initiate an FTP session to save a running configuration of a device.
  B. It is used to send a message to the APIC to perform an operation on a managed object or class operator.
  C. It is used to contact a URL filter to determine the efficacy of a web address.
  D. It is used to send a TACACS + authentication request to a server.
  B. It is used to send a message to the APIC to perform an operation on a managed object or class operator.

  ---

  Explanation

  The URL in the exhibit is used with REST API to send a message to the APIC (Application Policy Infrastructure Controller) to perform an operation on a managed object or class operator. In Cisco's ACI (Application Centric Infrastructure), REST API requests are used for managing, configuring, and retrieving data from the APIC. The URL structure typically includes the IP address of the APIC and specific paths that refer to objects or classes within the ACI fabric.

  References: Implementing and Operating Cisco Service Provider Network Core Technologies source documents or study guide

• Question 37:

  Which protocol does a Cisco MPLS TE tunnel use to maintain paths within the core?

  A. RSVP
  B. VTP
  C. STP
  D. RPF
  A. RSVP

  ---

  Explanation

  RSVP (Resource Reservation Protocol) is used in MPLS Traffic Engineering (TE) tunnels to establish and maintain paths within the core network. It helps in reserving resources across an IP network and plays a crucial role in ensuring that the network can handle the traffic load efficiently, providing optimal data transfer paths while maximizing network resource utilization and quality of service.

  References: Implementing and Operating Cisco Service Provider Network Core Technologies source documents or study guide

• Question 38:

  Refer to the exhibit.

  

  A network engineer is implementing an LDP-based MPLS solution to enable packet flow between the two bank sites. The engineer was given two requirements:

  1. LDP peering must stay up when there is a link failure between R3 and R6 2. LDP peering must not flap when there is a link failure between R5 and R6

  Which action meets these requirement?

  A. Reset the LDP session between R4 and R6.
  B. Implement an LDP targeted session with R4 on R6.
  C. Enable Link LDP on R4 and R6.
  D. Configure LDP Session Protection on R4.
  D. Configure LDP Session Protection on R4.

  ---

  Explanation

• Question 39:

  Which protocol functions as the transfer protocol between the Cisco Open SDN Controller and forwarding devices?

  A. OSPF or IS-IS
  B. BGP-LS
  C. OpenFlow
  D. PCEP
  C. OpenFlow

  ---

  Explanation

• Question 40:

  Refer to the exhibit.

  

  The ISP is implementing a new hosting-as-a-service solution for its business customers. Service accessibility must be unique and separate for each customer. The network architect must ensure that multiple paths toward the hosting-as-a- service solution are always available. Basic protection against traffic black-holing on the MPLS network is required in case of link failure.

  Which two actions must the engineering team perform to meet the requirements? (Choose two.)

  A. Configure the fast-hello command under the IS-IS routing protocol with the BGP multipath 2 option enabled.
  B. Enable the VRF-Lite feature on router R4 and enable BGP address-family VPNv4.
  C. Create the hosting-as-a-service VRF on router R4 and configure it with the route target both 65123:88 command.
  D. Configure the fast-reroute per-prefix command for the IS-IS protocol in the MPLS network and enable the BGP route-reflector feature on R2.
  E. Configure the mpls ldp sync command in the MPLS network with the BGP additional-paths receive and additional-paths send options.
  C. Create the hosting-as-a-service VRF on router R4 and configure it with the route target both 65123:88 command.
  E. Configure the mpls ldp sync command in the MPLS network with the BGP additional-paths receive and additional-paths send options.

  ---

  Explanation