Cisco CCNP 350-501 Questions & Answers

• Question 31:

  Refer to the exhibit.

  R1 interface gigabitethernet1/0/0ipv6 enable ipv6 ospf 1 area 1interface gigabitethernet2/0/0ipv6 enable ipv6 ospf 1 area 2

  An engineer implemented OSPF neighbor relationship on an IOS device. Which configuration must be applied to get the OR/BOR election removed from interfaces running OSPF?

  A. ip ospf network broadcast on interfaces running OSPF

  B. ip ospf network point-to-point on interfaces running OSPF

  C. ip ospf network multipoint-point on interfaces running OSPF

  D. ip ospf network non-broadcast on n:erfaces running OSPF

  Correct Answer: B

• Question 32:

  A network engineer must implement SNMPv2 with these parameters

  1.

  Enable SNMP community string C1sc0 with read-only permissions.

  2.

  Enable interface index persistence.

  3.

  Restrict the SNMP community to only the monitoring server with IP address 198.18 19 100/32.

  4.

  Provide view-only access to ospflfEntry and ospfNbrEntry.

  Which configuration must the engineer apply?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 33:

  Refer to the exhibit.

  R1# configure terminalR1(config)# router isis area2R1(config-router)# metric-style wide level-1

  An engineer is configuring multitiopology IS-IS for IPv6 on router R1. Which additional configuration must be applied to complete the task?

  A. R1# configure terminal R1(config)# router isis area2 R1(config-router)# address-family ipv6 R1(config-router-af)# multi-topology

  B. R1# configure terminal R1(config)# router isis area1 R1(config-router)# metric-style wide level-2 R1(config-router)# address-family ipv6 R1(config-router-af)# multi-topology

  C. R1# configure terminal R1(config)# router isis area2 R1(config-router)# metric-style wide R1(config-router)# address-family ipv6 R1(config-router-af)# multi topology

  D. R1# configure terminal R1(config)# router isis area1 R1(config-router)# metric-style wide level-1 R1(config-router)# address-family ipv6 R1(config-router-af)# multi topology

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_isis/configuration/15-mt/irs-15-mt-book/ip6-route-multi-isis.html

• Question 34:

  Which type of attack is a Protocol attack?

  A. HTTP flood

  B. TFTP flood

  C. SYN flood

  D. Slowlorls

  Correct Answer: C

  Protocol Attacks Includes SYN floods, fragmented packet attacks, Ping of Death, Smurf DDoS and more. This type of attack consumes actual server resources

• Question 35:

  Refer to the exhibit.

  

  An engineer configured BGP summarization on a customer's network. Which route is advertised to BGP peers?

  A. 192.0.0.0/16

  B. 192168.0.0/16

  C. 192.168.1.0/24

  D. 192168.0.5/30

  Correct Answer: B

• Question 36:

  A company needs to improve the use of the network resources that is used to deploy internet access service to customers on separate backbone and internet access network. Which two major design models should be used to configure MPLS L3VPNs and internet service in the same MPLS backbone? (Choose two.)

  A. Carriage of full internet routes in a VPN, in the case of internet access VPNS

  B. Internet routing through global routing on a PE router.

  C. Internet access routing as another VPN in the ISP network.

  D. Internet access through leaking of internet routed from the global table into the L3VPN VRF

  E. Internet access for global routing via a separate interface in a VRF

  Correct Answer: CE

  http://etutorials.org/Networking/MPLS+VPN+security/Part+II+Advanced+MPLS+VPN+Secu rity+Issues/Chapter+4+Secure+MPLS+VPN+Designs/Internet+Access/

• Question 37:

  An engineer working for a private telecommunication company with an employ id:3948:613 needs to limit the malicious traffic on their network.

  Which configuration must the engineer use to implement URPF loose mode on the GigabitEthernet0/1 interface?

  A. router(config)# interface gigabitethernet0/1 router(config-if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify unicast source reachable-via any router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via any

  B. router(config)# interface gigabitethernet0/1 router(config-if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify unicast source reachable-via rx router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via rx

  C. router(config)# interface gigabitethernet0/1 router(config if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify unicast source reachable-via rx router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via any

  D. router(config)# interface gigabitethernet0/1 router(config-if)# ip address 192.168.200.1 255.255.255.0 router(config-if)# ip verify unicast source reachable-via any router(config-if)# ipv6 address 2001:DB8:1::1/96 router(config-if)# ipv6 verify unicast source reachable-via rx

  Correct Answer: A

  "reachable-via any" must be configured for Loose mode on both IPv4 and IPv6. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_urpf/configuration/xe-3s/sec-data-urpf-xe-3s-book/sec-unicast-rpf-loose-mode.html

• Question 38:

  Refer to the exhibit.

  

  AN engineer is configuring segment routing on an ISP to simplify traffic engineering and management across network domains. What should the engineer do to complete the implementation of segment routing?

  A. OSPF must be configured with wide area metrics to support routing.

  B. The segment will run without any further configuration.

  C. Area authentication must be enable before segment routing will run.

  D. Area Authentication must be enable before segment routing will run.

  Correct Answer: C

• Question 39:

  Refer to the exhibit.

  

  An engineer working for private Service Provider with employee id: 3948:11:613 is configuring the BGPsec framework. Which two conditions must the engineer take into account? (Choose two.)

  A. BGPsec uses IPsec tunnel for security.

  B. The BGPsec framework secures the AS path.

  C. In BGPsec. all route advertisements are given an expiry time by the originator of the route.

  D. Private keys are part of the router key pair used to sign route updates.

  E. In BGPsec. route advertisements are not given an expiration time by the originator of the route.

  Correct Answer: BC

  https://tools.ietf.org/html/rfc8374#section-3.2

• Question 40:

  How is a telemetry session established for data analytics?

  A. A router initiates a session using the dial-out to a destination.

  B. A destination initiate a session to a router.

  C. The destination initiate a session using the dial-out more to the router.

  D. A router requests the data using Teinet.

  Correct Answer: A