Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 161:

  Which three types of address-family configurations are supported in EIGRP named mode? (Choose three.)

  A. address-family ipv4 unicast
  B. address-family vpnv4
  C. address-family ipv6 unicast
  D. address-family ipv6 multicast
  E. address-family vpnv6
  F. address-family ipv4 multicast
  A. address-family ipv4 unicast
  C. address-family ipv6 unicast
  F. address-family ipv4 multicast

• Question 162:

  Which three statements about the differences between Cisco IOS and IOS-XE functionality are true? (Choose three.)

  A. Only IOS-XE Software can host applications outside of the IOS context.
  B. Only the IOS-XE Services Plane has multiple cores.
  C. Only the IOS-XE Data Plane has multiple cores.
  D. Only the IOS-XE Control Plane has multiple cores.
  E. Only IOS-XE module management integrates with packet processing.
  F. Only IOS-XE configuration and control is integrated with the kernel.
  A. Only IOS-XE Software can host applications outside of the IOS context.
  B. Only the IOS-XE Services Plane has multiple cores.
  C. Only the IOS-XE Data Plane has multiple cores.

• Question 163:

  Which three statements about GLBP are true? (Choose three.)

  A. It uses a virtual MAC address that starts with 0007.b4.
  B. It elects a single active virtual gateway to appoint and manage multiple active virtual forwarders.
  C. It allows the configured virtual IP address to be used on a physical interface as well.
  D. It uses a virtual MAC address that starts with 0070.4b.
  E. It elects multiple active virtual gateways to appoint and manage a single active virtual forwarder.
  F. Preemption is enabled for the configured active virtual gateway by default.
  A. It uses a virtual MAC address that starts with 0007.b4.
  B. It elects a single active virtual gateway to appoint and manage multiple active virtual forwarders.
  C. It allows the configured virtual IP address to be used on a physical interface as well.

  ---

  The virtual MAC address in GLBP is 0007.b400.xxyy where xx is the GLBP group number and yy is the different number of each gateway (01, 02, 03...). One of the routers in a GLBP group is elected as an AVG ?Active Virtual Gateway. There is only one active AVG in a group, and its task is to respond to ARP requests sent to the virtual gateway IP address replying different virtual MAC addresses in response packets. GLBP allows the configured virtual IP address to be used on a physical interface. By default, the GLBP gateway preemptive scheme is disabled. A backup virtual gateway can become the AVG only if the current AVG fails, regardless of the priorities assigned to the virtual gateways.

• Question 164:

  Refer to the exhibit.

  

  Which two statements about the device configuration are true? (Choose two)

  A. The device has control-plane protection enabled.
  B. The device implicitly allows Telnet connections.
  C. The GigabitEthernet0/1 interface of the device allows incoming SSH and SNMP connections.
  D. The device has management-plane protection enabled.
  E. The device allows SSH connections to its loopback interface.
  C. The GigabitEthernet0/1 interface of the device allows incoming SSH and SNMP connections.
  D. The device has management-plane protection enabled.

• Question 165:

  Refer to the exhibit.

  

  Which two configuration changes enable the user admin to log in to the device? (Choose two.)

  A. Configure the login authentication to be case-insensitive.
  B. Configure the user admin with a password and appropriate privileges.
  C. Configure the login authentication to be case-sensitive.
  D. Modify the configuration to use a named group.
  E. Configure additional login authentication under the terminal lines.
  A. Configure the login authentication to be case-insensitive.
  B. Configure the user admin with a password and appropriate privileges.

  ---

  Usernames and passwords are case-sensitive. Users attempting to log in with an incorrectly cased username or password will be rejected. If users are unable to log into the router with their specific passwords, reconfigure the username and password on the router.

  Reference: http://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-software- releases-110/45843-configpasswords.html

• Question 166:

  Which two statements about MAC Authentication Bypass are true? (Choose two.)

  A. Traffic from an endpoint is authorized to pass after MAB authenticates the MAC address of the endpoint.
  B. During the learning stage, the switch examines multiple packets from the endpoint to determine the MAC address of the endpoint.
  C. After the switch learns the MAC address of the endpoint, it uses TACACS+ to authenticate it.
  D. After learning a source MAC address, it sends the host a RADIUS Account-Request message to validate the address.
  E. The MAC address of a device serves as its user name and password to authenticate with a RADIUS server.
  A. Traffic from an endpoint is authorized to pass after MAB authenticates the MAC address of the endpoint.
  E. The MAC address of a device serves as its user name and password to authenticate with a RADIUS server.

• Question 167:

  Refer to the exhibit.

  

  Which statement is true about the downward bit?

  A. It forces the CE router to use a backup link instead of sending traffic via MPLS VPN.
  B. It informs the PE router that the LSA metric has been recently decreased to 1 and that partial SPF calculation cannot be delayed.
  C. It forces the CE router to install the LSA with the downward bit set into its routing table as a discard route.
  D. It informs the PE router that the LSA was already redistributed into BGP by another PE router and that the LSA must not be redistributed into BGP again.
  D. It informs the PE router that the LSA was already redistributed into BGP by another PE router and that the LSA must not be redistributed into BGP again.

  ---

  From RFC 4577, specifically section 4.2.5.1 When a type 3 LSA is sent from a PE router to a CE router, the DN bit [OSPF-DN] in the LSA Options field MUST be set. This is used to ensure that if any CE router sends this type 3 LSA to a PE router, the PE router will not redistribute it further. When a PE router needs to distribute to a CE router a route that comes from a site outside the latter's OSPF domain, the PE router presents itself as an ASBR (Autonomous System Border Router), and distributes the route in a type 5 LSA. The DN bit [OSPF-DN] MUST be set in these LSAs to ensure that they will be ignored by any other PE routers that receive them.

• Question 168:

  Which AS_PATH attribute can you use to prevent loops when implementing BGP confederations?

  A. AS_CONFED_SET
  B. AS_SEQUENCE
  C. AS_CONFED_SEQUENCE
  D. AS_SET
  C. AS_CONFED_SEQUENCE

• Question 169:

  Which BGP feature allows a router to maintain its current BGP configuration while it advertises a different AS number to new connections?

  A. local-AS
  B. next-hop-self
  C. allow-AS in
  D. soft reset
  A. local-AS

  ---

  The local-AS feature allows a router to appear to be a member of a second autonomous system (AS), in addition to its real AS. This feature can only be used for true eBGP peers. The local-AS feature is useful if ISP-A purchases ISP-B, but ISP-B's customers do not want to modify any peering arrangements or configurations. The local-AS feature allows routers in ISP-B to become members of ISP-A's AS. At the same time, these routers appear to their customers to retain their ISP-B AS number.

  Reference: http://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol- bgp/13761-39.html

• Question 170:

  Which two statements about the passive-interface command are true? (Choose two.)

  A. A RIP router listens to multicast updates from its neighbor but stops sending multicast updates on the passive interface.
  B. In OSPF, configuring passive-interface at the interface level suppresses hello packets for the interface and all sub interfaces.
  C. An EIGRP router can form neighbor relationship on the passive interface, but incoming and outgoing multicast updates are disabled on the interface.
  D. A RIP router disables all incoming and outgoing multicast updates in the passive interface.
  E. In EIGRP, the passive interface stops sending hello packets.
  F. In OSPF, the passive interface can receive incoming routing updates and update the device routing table.
  A. A RIP router listens to multicast updates from its neighbor but stops sending multicast updates on the passive interface.
  E. In EIGRP, the passive interface stops sending hello packets.