Cisco 350-501 Online Practice Questions and Exam Preparation

Cisco 350-501 Online Questions & Answers

• Question 421:

  Refer to the exhibit.

  

  A network engineer must deny access from spoofed addresses to the LAN. The edge router currently has two active BGP sessions established with Tier 1 ISP_A. Due to asymmetric routing, no ACL is configured on either interface.

  Which two configurations must the engineer perform on the edge router to complete the task? (Choose two.)

  A. ip verify unicast source reachable-via tx under FA0/0
  B. ip verify unicast source reachable-via under FA0/1
  C. ip verify unicast source reachable-via any under FA0/1
  D. ip verify unicast source reachable-via both under FA0/0
  E. ip verify unicast source reachable-via any under FA0/0
  C. ip verify unicast source reachable-via any under FA0/1
  E. ip verify unicast source reachable-via any under FA0/0

  ---

  Explanation

• Question 422:

  Refer to the exhibit.

  

  A network engineer observed congestion between routers R1 and R4, which are connected on a point-to-point link. Two servers that reside on networks on R1 and R4 generate heavy traffic between them with most traffic going from R4 to R1. To improve overall performance, the engineer wants to drop inbound packets that exceed a configured threshold, without disrupting traffic that passes from R4 to R3. Which action must the engineer take to resolve the issue?

  A. Implement traffic policing to drop packets that exceed the given threshold.
  B. Implement FIFO to queue excess traffic for transmission when bandwidth is available.
  C. Implement traffic shaping to drop excess packets.
  D. Implement a service policy in the outbound direction on each interface on the link to tag traffic exiting each router.
  A. Implement traffic policing to drop packets that exceed the given threshold.

  ---

  Explanation

• Question 423:

  DRAG DROP

  Drag and drop the characteristics from the left onto the automation tool on the right.

  Select and Place:

  

  

  Explanation

  Explanation/Reference:

• Question 424:

  Refer to the exhibit.

  

  The network manager asked a network engineer to increase data-plane security on an Edge router connected to the internet with these requirements:

  1. Allow incoming HTTP traffic from any source to the Web server with IP address 192.168.1.10.

  2. Allow incoming SSH traffic from the management host with IP address 10.0.0.10.

  3. Block incoming Telnet traffic from all sources.

  Which action must the engineer take to meet the requirements?

  A. Implement port security under the Gi0/0 interface.
  B. Implement uRPF under the Gi1/0 interface.
  C. Implement an access control list under the Gi1/0 interface.
  D. Implement Network Address Translation under the Gi0/0 interface.
  C. Implement an access control list under the Gi1/0 interface.

  ---

  Explanation

• Question 425:

  An engineer implemented LDP protocol on the ISP network. The engineer must ensure that there are no packet loss issues when IGP and LDP protocols are not synchronized.

  Which configuration must the engineer implement so that the IGP routing protocol will wait until LDP convergence is completed?

  A. Disable MPLS LDP IGP synchronization on the network.
  B. Configure LDP sessions protection on the network.
  C. Disable IP CEF on routers running LDP and enable LDP protocol.
  D. Configure MPLS LDP IGP synchronization on the network.
  D. Configure MPLS LDP IGP synchronization on the network.

  ---

  Explanation

  To prevent packet loss when IGP (Interior Gateway Protocol) and LDP (Label Distribution Protocol) are not synchronized, enabling MPLS LDP IGP synchronization is crucial. This synchronization ensures that the IGP routing protocol (such as OSPF or IS-IS) waits until LDP convergence is completed before advertising labels for MPLS traffic. It helps maintain consistency between the IGP and LDP databases.

  Implementing and Operating Cisco Service Provider Network Core Technologies course materials.

• Question 426:

  Company A must increase throughput between two non-IEEE 802.3ad switches located in the access and distribution layers. A network engineer must create a link group with the same speed and duplex. The STP protocol must not block any of the group ports.

  Which action completes the implementation?

  A. Group Ethernet interfaces with mode desirable under the physical interfaces.
  B. Enable Port Aggregation Protocol with mode auto under the logical group interface.
  C. Configure a group logical interface with mode active enabled.
  D. Bundle the physical interfaces with mode lacp configured on each of them.
  A. Group Ethernet interfaces with mode desirable under the physical interfaces.

  ---

  Explanation

• Question 427:

  Why do Cisco MPLS TE tunnels require a link-state routing protocol?

  A. The link-state database provides segmentation by area, which improves the path-selection process.
  B. The link-state database provides a data repository from which the tunnel endpoints can dynamically select a source ID.
  C. Link-state routing protocols use SPF calculations that the tunnel endpoints leverage to implement the tunnel.
  D. The tunnel endpoints use the link-state database to evaluate the entire topology and determine the best path.
  D. The tunnel endpoints use the link-state database to evaluate the entire topology and determine the best path.

  ---

  Explanation

• Question 428:

  Refer to the exhibit.

  R10(config)# interface G0/1 R10(config-if)# ip address 172.16.0.1 255.255.255.0 R10(config-if)# ip ospf 1 area 0 R10(config-if)# ip ospf multi-area 10 R10(config-if)# ip ospf multi-area 10 cost 5

  

  A network engineer is implementing OSPF multiarea.

  Which command on interface GO/1 resolves adjacency issues in the new area?

  A. ip ospf network broadcast
  B. ip ospf network point-to-point
  C. ip ospf network non-broadcast
  D. ip ospf network point-to-multipoint
  B. ip ospf network point-to-point

  ---

  Explanation

  In the context of OSPF multiarea implementation, adjacency issues can arise due to network type mismatches or area boundary discrepancies. The command "ip ospf network point-to-point" is used on interface G0/1 to specify the OSPF network type as point-to-point. This configuration facilitates OSPF neighbor establishment over a direct connection between two routers, eliminating the need for a designated router (DR) or backup designated router (BDR), and resolving adjacency issues in the new area.

  References: Implementing and Operating Cisco Service Provider Network Core Technologies source documents or study guide https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/xe-16/iro-xe-16-book/iro-multi- area-adj-xe.html

• Question 429:

  Which statement about LDP Session Protection and LDP-IGP sync is true?

  A. Both LDP features cannot be used at the same time in a MPLS LDP enabled network
  B. LDP Session Protection re-exchanges label information when a down-up event occurs; LDP-IGP sync keeps the adjacency and label information in a down-up event
  C. LDP-IGP sync re-exchanges label information when a down-up event occurs; LDP Session Protection keeps the adjacency and label information in a down-up event
  D. Both LDP features must be used together to increase fast convergence on an MPLS LDP-enabled network
  A. Both LDP features cannot be used at the same time in a MPLS LDP enabled network

  ---

  Explanation

• Question 430:

  How much must the MTU be increased when configuring the 802.1q VLAN tag?

  A. 2 bytes
  B. 4 bytes
  C. 8 bytes
  D. 12 bytes
  B. 4 bytes

  ---

  Explanation

  When configuring the 802.1q VLAN tag, the MTU must be increased by 4 bytes. This is because the 802.1Q tag adds an additional header to the Ethernet frame, which includes information such as the VLAN ID and priority. To accommodate this extra header without fragmenting the packet, the MTU must be increased accordingly. Reference: https://www.cisco.com/c/en/us/support/docs/lan-switching/8021q/17056-741-4.html