Cisco 350-501 Online Practice Questions and Exam Preparation

Cisco 350-501 Online Questions & Answers

• Question 431:

  Refer to the exhibit.

  

  A large enterprise has multiple branch offices that span several geographic regions. The enterprise runs MPLS within the core to propagate VPNv4 routes using BGP. After a recent series of DDoS attacks disrupted the network, a network engineer has been asked to reconfigure BGP to help mitigate future attacks.

  Which configuration must the engineer apply?

  A. router bgp 100address-family ipv4 flowspecneighbor 192.168.1.1 activate
  B. router bgp 100address-family ipv4 mdtneighbor 192.168.1.1 activate
  C. router bgp 100address-family ipv4neighbor 192.168.1.1 activate
  D. router bgp 100address-family vpnv4neighbor 192.168.1.1 activate
  B. router bgp 100address-family ipv4 mdtneighbor 192.168.1.1 activate

  ---

  Explanation

  To mitigate DDoS attacks in a BGP environment, an engineer can apply BGP FlowSpec, which allows for the creation of traffic filtering policies that can be distributed across the network. This configuration enables the network to respond quickly to DDoS attacks by filtering or redirecting malicious traffic based on predefined criteria, such as source IP, destination IP, and port numbers.

• Question 432:

  Which two routing protocols support Cisco MPLS TE tunnels? (Choose two.)

  A. RIP
  B. EIGRP
  C. BGP
  D. IS-IS
  E. OSPF
  D. IS-IS
  E. OSPF

  ---

  Explanation

  Cisco MPLS TE tunnels can be established using IS-IS and OSPF as the routing protocols. These protocols allow the creation of traffic-engineered paths within the MPLS network.

• Question 433:

  Refer to the exhibit.

  

  Customer Y reported that internet traffic stopped for a few minute. The ISP ABC operation engineer identified that this occurred when ASBR1 router reloaded OSPF coverage faster than BGP. Which command prevent this happening?

  A. Graceful restart
  B. set-overload-bit on startup wait-for-bgp
  C. bfd min_rx 100 max_rx 100 multiplier 3
  D. max-metric router-lsa on startup 300
  D. max-metric router-lsa on startup 300

  ---

  Explanation

• Question 434:

  An engineer is implementing a Cisco MPLS TE tunnel to improve the streaming experience for the clients of a video-on-demand server. Which action must the engineer perform to configure extended discovery to support the MPLS LDP session between the headend and tailend routers?

  A. Configure a targeted neighbor session.
  B. Configure an access list on the interface to permit TCP and UDP traffic.
  C. Configure a Cisco MPLS TE tunnel on both ends of the session.
  D. Configure the interface bandwidth to handle TCP and UDP traffic between the LDP peers.
  A. Configure a targeted neighbor session.

  ---

  Explanation

  To configure extended discovery to support the MPLS LDP session between the headend and tailend routers, the engineer must configure a targeted neighbor session. This action allows for the establishment of LDP sessions between routers that are not directly connected, which is necessary for setting up MPLS tunnels that span multiple hops in the network.

  The concept of targeted LDP sessions is covered in the Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) curriculum, which explains how these sessions are used to establish LDP relationships over a non-directly connected interface, facilitating MPLS tunneling for applications like video streaming.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_ldp/configuration/12-4m/mp-ldp-12-4m-book.pdf

• Question 435:

  Refer to the exhibit.

  

  What is the purpose of this JSON script?

  A. It changes the existing password.
  B. It updates a user authentication record.
  C. It deletes a user's authentication record.
  D. It confirms a user's login credentials.
  A. It changes the existing password.

  ---

  Explanation

• Question 436:

  Which two features describe TI-LFA? (Choose two.)

  A. TI-LFA uses PQ or P and Q nodes on the post-convergence path to compute the backup path.
  B. Post-convergence, TI-LFA considers the next-hop neighbor to calculate the backup repair path.
  C. TI-LFA works with point of local repair when the PQ node supports only LDP capability.
  D. Unlike RLFA, TI-LFA works without the PQ node and provides double segment failure protection.
  E. TI-LFA leverages the post-convergence path that carries data traffic after a failure.
  A. TI-LFA uses PQ or P and Q nodes on the post-convergence path to compute the backup path.
  E. TI-LFA leverages the post-convergence path that carries data traffic after a failure.

  ---

  Explanation

• Question 437:

  Company A is implementing VoIP services across the company.

  The network architect designed a QoS policy to allow only specific IP subnets and mark the signaling flow with DSCP 36.

  The solution should be as secure as possible. Phones receive their IP addresses from the 172.184.12.0/24 pool and are assigned by the RADIUS server to VLAN 1021. Skinny Client Control Protocol is used as a signaling protocol in the network. For security reasons, switchport port-security maximum 1 vlan voice has been preconfigured on the switch side.

  Which two tasks must an engineer perform on SW_1 to achieve this goal? (Choose two.)

  A. Implement a class map with the set dscp af42 command.
  B. Implement a class map with the set dscp af43 command.
  C. Implement an ACL with the set dscp af41 command.
  D. Implement an ACL with the permit udp 172.184.12.0 0.0.0.255 any range 2000 2002 command.
  E. Implement an ACL with the permit tcp 10.124.121.0 0.0.0.255 range 16384 32767 command.
  C. Implement an ACL with the set dscp af41 command.
  E. Implement an ACL with the permit tcp 10.124.121.0 0.0.0.255 range 16384 32767 command.

  ---

  Explanation

• Question 438:

  Refer to the exhibit.

  

  On R1, which output does the show isis neighbors command generate?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  Explanation

• Question 439:

  Which two IS-IS parameters must match before two Level 2 peers can form an adjacency? (Choose two.)

  A. hello timer setting
  B. authentication settings
  C. area ID
  D. system ID
  E. MTU
  B. authentication settings
  E. MTU

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/ip/integrated-intermediate-system-to-intermediate-system-is-is/200293-IS-IS-Adjacency-and-Area-Types.html

• Question 440:

  Refer to the exhibit.

  R1# show run

  interface Loopback0 ip address 10.1.1.1 255.255.255.255

  interface GigabitEthernet0/0 ip address 192.168.1.1 255.255.255.0 negotiation auto

  ip route 0.0.0.0 0.0.0.0 192.168.1.254

  telemetry ietf subscription 1 encoding gpb filter xpath /interfaces/interface/state stream yang-push A regional company is implementing a network-health monitoring solution on their Cisco ISR routers to monitor network performance metrics and gather real-time data. The router R1 Ethernet interface, GigabitEthernet0/0, is assigned IP address 192.168.1.1/24, and basic IP addressing and connectivity to the data-collection server have already been configured. A network engineer must update R1 to ensure secure and reliable data transmission to the monitoring server, which is located at IP address 192.168.50.50 on port 50051. To achieve secure communication, the configuration must comply with RFC 5246, and to ensure reliable data transmission, it must follow RFC 793.

  Which command must the engineer execute to configure data collection?

  A. telemetry ietf subscription 1 receiver ip address 192.168.50.50 50051 protocol grpc-tcp
  B. gnmi dialout address 192.168.50.50 port 50051
  C. telemetry ietf subscription 1 source-address 10.1.1.1 50051 protocol grpc-ucmp
  A. telemetry ietf subscription 1 receiver ip address 192.168.50.50 50051 protocol grpc-tcp

  ---

  Explanation