Cisco 350-501 Online Practice Questions and Exam Preparation

Cisco 350-501 Online Questions & Answers

• Question 391:

  Which option is the main goal of the OSPF SPF Prefix Prioritization feature?

  A. to provide capability of computing a network path or route based on a network graph and applying computational constraints for traffic engineering
  B. to only prioritize host prefixes to be installed into the RIB during SPF calculations, /32 for IPv4 and /128 for IPv6
  C. to provide fast rerouting capability by using IP forwarding and routing
  D. to provide ability of prioritizing important prefixes to be installed into the RIB during SPF calculations
  D. to provide ability of prioritizing important prefixes to be installed into the RIB during SPF calculations

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r4-2/routing/ configuration/guide/b_routing_cg42asr9k/b_routing_cg42asr9k_chapter_011.html

• Question 392:

  Which programmable API allows the service provider to plan and optimize the automation of network operations and achieve dosed-loop operations?

  A. Network Services Orchestrator
  B. WAN Automation Engine
  C. Crosswork Network Automation
  D. Evolved Programmable Network Manager
  C. Crosswork Network Automation

  ---

  Explanation

  The Network Services Orchestrator (NSO) is designed to allow service providers to automate network operations efficiently. It provides a single, well-defined API that enables integration across various network environments. NSO's capabilities include zero-touch telemetry, machine learning intuition, open APIs, and automated actions, which facilitate a simpler and more efficient network operation experience. This makes it an ideal choice for service providers looking to plan, optimize, and achieve closed-loop operations within their networks.

  References: The information is based on the Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) training and certification resources, which offer a deep dive into service provider technologies, including core architecture, services, networking, automation, quality of services, security, and network assurance.

• Question 393:

  What is one of the main functions of 6RD?

  A. It provides stateful session translation with the 2002::/16 prefix.
  B. It translates RFC 1918 IP addresses into public IP addresses.
  C. It provides native reachability between IPv4-only hosts and 6RD-enabled IPv6 hosts.
  D. It allows customers IPv6 traffic to be tunneled over IPv4 network infrastructure.
  D. It allows customers IPv6 traffic to be tunneled over IPv4 network infrastructure.

  ---

  Explanation

• Question 394:

  Refer to the exhibit.

  

  With which router does IOSXRV-1 have LDP session protection capability enabled but session hold up is not active?

  A. 192.168.0.4
  B. 192.168.0.5
  C. 192.168.0.1
  D. 192.168.0.3
  D. 192.168.0.3

  ---

  Explanation

  LDP session protection capability is a feature that maintains LDP bindings when a link fails, using LDP Targeted Hellos to protect LDP sessions. Without the specific exhibit, it's not possible to determine which router has LDP session protection enabled but session hold up is not active.

  Information about MPLS LDP Session Protection can be found in Cisco documentation, such as the Cisco IOS MPLS Configuration Guide.

• Question 395:

  ASN 65001 is peering with ASN 65002 to exchange IPv6 BGP routes. All routes that originate in ASN 65001 have a standard community value of 65001:100, and ASN 65002 is allowed to advertise only 2001 :db8:aaaa::/48. An engineer needs to update the ASN 65001 route-filtering configuration to meet these conditions:

  1. Looped routes into ASN 65001 and routes that have traversed 10 or more ASNs must be denied.

  2. Routes accepted into ASN 65001 must be assigned a community value of 65001:200.

  Which configuration must the engineer apply to the ASN 65001 border router?

  A. router-policy PEER-AS65002-INif as-path length ge 10 and as-path passes-through '65001' or community matches-any (65001:100) thendropendifif destination in (2001:db8:aaaa::/48) thendoneelsedropendifset community (65001:200)end-policy
  B. router-policy PEER-AS65002-INif as-path length ge 10 and as-path passes-through '65001' or community matches-any (65001:100) thendropendifif destination in (2001:db8:aaaa::/48) thenpassendifset community (65001:200)end-policy
  C. router-policy PEER-AS65002-INif as-path length ge 10 thendropendifif as-path passes-through '65001' or community matches-any (65001:100) thendropendifif destination in (2001:db8:aaaa::/48) thenpassendifset community (65001:200)end-policy
  D. router-policy PEER-AS65002-INif as-path length ge 10 thendropendifif as-path passes-through '65001' or community matches-any (65001:100) thendropendifif destination in (2001:db8:aaaa::/48) thenset community (65001:200)
  E. router-policy PEER-AS65002-INif as-path length ge 10 thendropendifif as-path passes-through '65001' or community matches-any (65001:100) thendropendifif destination in (2001:db8:aaaa::/48) thenset community (65001:200)elsedropendifend-policy
  C. router-policy PEER-AS65002-INif as-path length ge 10 thendropendifif as-path passes-through '65001' or community matches-any (65001:100) thendropendifif destination in (2001:db8:aaaa::/48) thenpassendifset community (65001:200)end-policy

  ---

  Explanation

• Question 396:

  Egress PE NAT is being used via a single centralized router to provide Internet access to L3VPN customers.

  Which description of the NAT operation is true?

  A. The NAT table contains a field to identify the inside VRF of a translation.
  B. Multiple address pools are needed for the same L3VPN because each site has a separate NAT.
  C. The different L3VPNs using the Internet access must not have IP overlaps internally.
  D. Users in different VRFs cannot share the same outside global IP address.
  A. The NAT table contains a field to identify the inside VRF of a translation.

  ---

  Explanation

  Egress PE NAT via a single centralized router allows L3VPN customers to access the internet. The NAT operation maintains a table that includes a field to identify the inside VRF of a translation. This is crucial for distinguishing between different customer VPNs that may use overlapping IP address spaces. By having this field, the NAT process can correctly associate each internal IP with its respective VRF and outside global IP address.

  Centralized egress to internet, Egress PE NAT single centralized router.

  https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/112084-ios-nat-mpls-vpn-00.html

• Question 397:

  The NOC team must update the BGP forwarding configuration on the network with these requirements:

  1. BGP peers must establish a neighborship with NSF capability and restart the session for the capability to be exchanged after 120 seconds.

  2. BGP peers must delete routes after 360 seconds of inactivity.

  Which action meets these requirements?

  A. Set the BGP restart-time to 120 seconds and the BGP ha-mode sso to 360 seconds.
  B. Set the stalepath-time to 120 seconds and the BGP restart-time to 360 seconds.
  C. Set the BGP ha-mode sso to 120 seconds and the BGP restart-time to 360 seconds.
  D. Set the BGP restart-time to 120 seconds and the stalepath-time to 360 seconds.
  D. Set the BGP restart-time to 120 seconds and the stalepath-time to 360 seconds.

  ---

  Explanation

• Question 398:

  An engineer working for a private telecommunication company with an employ id:3948:613 needs to limit the malicious traffic on their network.

  Which configuration must the engineer use to implement URPF loose mode on the GigabitEthernet0/1 interface?

  A. router(config)# interface gigabitethernet0/1router(config-if)# ip address 192.168.200.1 255.255.255.0router(config-if)# ip verify unicast source reachable-via anyrouter(config-if)# ipv6 address 2001:DB8:1::1/96router(config-if)# ipv6 verify unicast source reachable-via any
  B. router(config)# interface gigabitethernet0/1router(config-if)# ip address 192.168.200.1 255.255.255.0router(config-if)# ip verify unicast source reachable-via rxrouter(config-if)# ipv6 address 2001:DB8:1::1/96router(config-if)# ipv6 verify unicast source reachable-via rx
  C. router(config)# interface gigabitethernet0/1router(config if)# ip address 192.168.200.1 255.255.255.0router(config-if)# ip verify unicast source reachable-via rxrouter(config-if)# ipv6 address 2001:DB8:1::1/96router(config-if)# ipv6 verify unicast source reachable-via any
  D. router(config)# interface gigabitethernet0/1router(config-if)# ip address 192.168.200.1 255.255.255.0router(config-if)# ip verify unicast source reachable-via anyrouter(config-if)# ipv6 address 2001:DB8:1::1/96router(config-if)# ipv6 verify unicast source reachable-via rx
  A. router(config)# interface gigabitethernet0/1router(config-if)# ip address 192.168.200.1 255.255.255.0router(config-if)# ip verify unicast source reachable-via anyrouter(config-if)# ipv6 address 2001:DB8:1::1/96router(config-if)# ipv6 verify unicast source reachable-via any

  ---

  Explanation

  "reachable-via any" must be configured for Loose mode on both IPv4 and IPv6.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_urpf/configuration/xe-3s/sec-data-urpf-xe-3s-book/sec-unicast-rpf-loose-mode.html

• Question 399:

  Refer to the exhibit.

  

  What does the script configure?

  A. a VLAN namespace
  B. selectors for the in-band management
  C. a physical domain
  D. a static VLAN
  A. a VLAN namespace

  ---

  Explanation

• Question 400:

  Refer to the exhibit.

  

  ISP ASN 65100 provides internet services to router CE-1 and receives customer prefix 198.18 18.0/24 via EBGP. An administrator for the ISP Is now provisioning RTBH services to provide on-demand data-plane security for the customer s IP space.

  Which route-map configuration must the administrator apply to router RTBH-1 to complete the implementation of RTBH services to CE-1?

  A. route-map RTBH-CUSTOMER-IN permit 10description AS65001match ip address prefix-list AS65001-PREFIXESmatch community 99set local-preference 200set community no-export additiveset ip next-hop 192.168.255.255route-map RTBH-CUSTOMER-IN deny 65535description DEFAULT DENY
  B. route-map RTBH-CUSTOMER-IN permit 10description AS65001match ip address prefix-list AS65001-PREFIXESmatch community 99set local-preference 200set community local-as additiveset ip next-hop 192.168.255.255route-map RTBH-CUSTOMER-IN deny 65535description DEFAULT DENY
  C. route-map RTBH-CUSTOMER-IN permit 10description AS65001match ip address prefixlist AS65001-PREFIXESmatch community 99set local-preference 200set community no-advertise additiveset ip next-hop local-addressroute-map RTBH-CUSTOMER-IN deny 65535description DEFAULT DENY
  D. route-map RTBH-CUSTOMER-IN permit 10description AS65001match ip address prefix-list AS65001-PREFIXESmatch community 99set local-preference 200set community no-advertise additiveset ip next-hop 192.168.255.255route-map RTBH-CUSTOMER-IN deny 65535description DEFAULT DENY
  A. route-map RTBH-CUSTOMER-IN permit 10description AS65001match ip address prefix-list AS65001-PREFIXESmatch community 99set local-preference 200set community no-export additiveset ip next-hop 192.168.255.255route-map RTBH-CUSTOMER-IN deny 65535description DEFAULT DENY

  ---

  Explanation