Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 11:

  Which three statements about BGP soft reconfiguration are true?

  A. Outbound soft reconfiguration stores an additional copy of the routes advertised to a neighbor before routing policies take effect.
  B. Inbound soft reconfiguration stores an additional copy of the routes received from a neighbor before routing policies take effect.
  C. Outbound soft reconfiguration requires additional configuration on the BGP neighbor.
  D. Inbound soft reconfiguration requires additional configuration on the BGP neighbor.
  E. Outbound soft reconfiguration requires additional memory.
  F. Inbound soft reconfiguration requires additional memory.
  B. Inbound soft reconfiguration stores an additional copy of the routes received from a neighbor before routing policies take effect.
  D. Inbound soft reconfiguration requires additional configuration on the BGP neighbor.
  F. Inbound soft reconfiguration requires additional memory.

• Question 12:

  Which two statements about the function of the stub feature in EIGRP are true? (Choose two.)

  A. It stops the stub router from sending queries to peers.
  B. It stops the hub router from sending queries to the stub router.
  C. It stops the stub router from propagating dynamically learned EIGRP prefixes to the hub routers.
  D. It stops the hub router from propagating dynamically learned EIGRP prefixes to the stub routers.
  B. It stops the hub router from sending queries to the stub router.
  C. It stops the stub router from propagating dynamically learned EIGRP prefixes to the hub routers.

  ---

  When using the EIGRP Stub Routing feature, you need to configure the distribution and remote routers to use EIGRP, and to configure only the remote router as a stub. Only specified routes are propagated from the remote (stub) router. The router responds to queries for summaries, connected routes, redistributed static routes, external routes, and internal routes with the message "inaccessible." A router that is configured as a stub will send a special peer information packet to all neighboring routers to report its status as a stub router. Without the stub feature, even after the routes that are sent from the distribution router to the remote router have been filtered or summarized, a problem might occur. If a route is lost somewhere in the corporate network, EIGRP could send a query to the distribution router, which in turn will send a query to the remote router even if routes are being summarized. If there is a problem communicating over the WAN link between the distribution router and the remote router, an EIGRP stuck in active (SIA) condition could occur and cause instability elsewhere in the network. The EIGRP Stub Routing feature allows a network administrator to prevent queries from being sent to the remote router.

  Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/eigrpstb.html

• Question 13:

  Which two advantages does CoPP have over receive path ACLs? (Choose two.)

  A. Only CoPP applies to IP packets and non-IP packets.
  B. Only CoPP applies to receive destination IP packets.
  C. A single instance of CoPP can be applied to all packets to the router, while rACLs require multiple instances.
  D. Only CoPP can rate-limit packets.
  A. Only CoPP applies to IP packets and non-IP packets.
  D. Only CoPP can rate-limit packets.

  ---

  Control Plane Policing ?CoPP is the Cisco IOS-wide route processor protection mechanism. As illustrated in Figure 2, and similar to rACLs, CoPP is deployed once to the punt path of the router. However, unlike rACLs that only apply to receive destination IP packets, CoPP applies to all packets that punt to the route processor for handling. CoPP therefore covers not only receive destination IP packets, it also exceptions IP packets and non-IP packets. In addition, CoPP is implemented using the Modular QoS CLI (MQC) framework for policy construction. In this way, in addition to simply permit and deny functions, specific packets may be permitted but rate-limited. This behavior substantially improves the ability to define an effective CoPP policy. (Note: that "Control Plane Policing" is something of a misnomer because CoPP generally protects the punt path to the route processor and not solely the control plane.)

  Reference: http://www.cisco.com/web/about/security/intelligence/coppwp_gs.html

• Question 14:

  Independent, multiple OSPF processes are entered on the same router, and the processes have the same destination route. Which OSPF process is used?

  A. The route with the fewest hops is used.
  B. Both processes are used to load balance the traffic.
  C. The first route process that places a route into the routing table is used.
  D. The route with the shortest prefix is used.
  C. The first route process that places a route into the routing table is used.

• Question 15:

  Which statement about the BGP originator ID is true?

  A. The route reflector always sets the originator ID to its own router ID.
  B. The route reflector sets the originator ID to the router ID of the route reflector client that injects the route into the AS.
  C. The route reflector client that injects the route into the AS sets the originator ID to its own router ID.
  D. The originator ID is set to match the cluster ID.
  B. The route reflector sets the originator ID to the router ID of the route reflector client that injects the route into the AS.

  ---

  An RR reflecting the route received from a RR-Client adds:

  Originator ID- a 4-byte BGP attribute that is created by the RR. This attribute carries the Router ID of the originator of the route in the local AS. If the update comes back to the originator, it ignores the update. Cluster List- A Cluster List is a list

  of Cluster IDs that an update has traversed. When a route reflector sends a route received from a client to a non-client, it appends the local Cluster ID. If a route reflector receives a route whose Cluster List contains the local Cluster ID, it

  ignores the update.

  Reference: https://sites.google.com/site/amitsciscozone/home/bgp/bgp-route-reflectors

• Question 16:

  When you migrate a network from PVST+ to rapid-PVST+, which two features become inactive? (Choose two.)

  A. Root guard
  B. Loop guard
  C. UplinkFast
  D. UDLD
  E. BackboneFast
  F. Bridge Assurance
  C. UplinkFast
  E. BackboneFast

  ---

  It is good to know the UplinkFast and BackboneFast behavior before you start the migration process. Here, the Access1 switch runs Cisco IOS. This output is taken before migration to the rapid-PVST+ mode:

  Access1#show spanning-tree vlan 10 VLAN0010 Spanning tree enabled protocol ieee Root ID Priority 24586 Address 0015.63f6.b700 Cost 3019 Port 107 (FastEthernet3/0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

  Bridge ID Priority 49162 (priority 49152 sys-id-ext 10) Address 000f.f794.3d00 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 Uplinkfast enabled

  Interface Role Sts Cost Prio.Nbr Type ---------------- ---- --- --------- -------- -------------------------------- Fa3/0/1 Root FWD 3019 128.107 P2p Fa3/0/2 Altn BLK 3019 128.108 P2p

  Access1#show spanning-tree summary Switch is in pvst mode Root bridge for: none Extended system ID is enabled Portfast Default is disabled PortFast BPDU Guard Default is enabled Portfast BPDU Filter Default is disabled Loopguard Default is disabled EtherChannel misconfig guard is enabled UplinkFast is enabled BackboneFast is enabled Configured Pathcost method used is short

  Name Blocking Listening Learning Forwarding STP Active ---------------------- -------- --------- -------- ---------- ---------- VLAN0010 1 0 0 1 2 VLAN0020 1 0 0 1 2 ---------------------- -------- --------- -------- ---------- ---------- 2 vlans 2 0 0 2 4 This output is taken after the mode is changed to rapid-PVST+:

  Access1#show spanning-tree vlan 10

  VLAN0010 Spanning tree enabled protocol rstp Root ID Priority 24586 Address 0015.63f6.b700 Cost 3019 Port 107 (FastEthernet3/0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

  Bridge ID Priority 49162 (priority 49152 sys-id-ext 10) Address 000f.f794.3d00 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 UplinkFast enabled but inactive in rapid-pvst mode

  Interface Role Sts Cost Prio.Nbr Type ---------------- ---- --- --------- -------- -------------------------------- Fa3/0/1 Root FWD 3019 128.107 P2p Fa3/0/2 Altn BLK 3019 128.108 P2p

  Access1#show spanning-tree summary Switch is in rapid-pvst mode Root bridge for: none Extended system ID is enabled Portfast Default is disabled PortFast BPDU Guard Default is enabled Portfast BPDU Filter Default is disabled Loopguard Default is disabled EtherChannel misconfig guard is enabled UplinkFast is enabled but inactive in rapid-pvst mode BackboneFast is enabled but inactive in rapid-pvst mode Configured Pathcost method used is short

  Name Blocking Listening Learning Forwarding STP Active ---------------------- -------- --------- -------- ---------- ---------

  VLAN0010 1 0 0 1 2 VLAN0020 1 0 0 1 2 ---------------------- -------- --------- -------- ---------- ---------- 2 vlans 2 0 0 2 4

  You can see in the show spanning-tree summary command output that UplinkFast and BackboneFast are enabled, but are inactive in rapid-PVST mode.

  Reference: http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series- switches/72836-rapidpvst-mig-config.html#upback1

• Question 17:

  When you configure an IPv6 IPsec tunnel, which two fields can represent the ISAKMP identity of a peer? (Choose two)

  A. Authentication method
  B. DH group identifier
  C. Hostname
  D. IP address
  E. Encryption algorithm
  C. Hostname
  D. IP address

• Question 18:

  Refer to the exhibit.

  

  How can the EIGRP hello and hold time for Gig0/0 be changed to 5 and 15?

  A. No action is required, since Gig0/0 is not listed with a nondefault hello and hold time.
  B. Add the commands ip hello-interval eigrp 1 5 and ip hold-time eigrp 1 15 under interface Gig0/0.
  C. Add the commands hello-interval 5 and hold-time 15 under "af-interface Gig0/0" under the address family.
  D. Add the commands default hello-interval and default hold-time under the af-interface Gig0/0 statement under the address family.
  C. Add the commands hello-interval 5 and hold-time 15 under "af-interface Gig0/0" under the address family.

  ---

  To configure the hello interval for an interface, use the hello-interval command in interface configuration mode To configure the hold time for an interface, use the hold-time command in interface configuration mode. Reference: http://www.cisco.com/c/en/us/td/docs/routers/crs/software/crs_r4- 1/routing/command/reference/b_routing_cr41crs/ b_routing_cr41crs_chapter_010.html#wp2 323069468

• Question 19:

  Refer to the exhibit.

  

  Which configuration is missing that would enable SSH access on a router that is running Cisco IOS XE Software?

  A. int Gig0/0/0 management-interface
  B. class-map ssh-class match access-group protect-ssh policy-map control-plane-in class ssh-class police 80000 conform transmit exceed drop control-plane service-policy input control-plane-in
  C. control-plane host management-interface GigabitEthernet0/0/0 allow ssh
  D. interface Gig0/0/0 ip access-group protect-ssh in
  C. control-plane host management-interface GigabitEthernet0/0/0 allow ssh

  ---

  The feature Management Plane Protection (MPP) allows an administrator to restrict on which interfaces management traffic can be received by a device. This allows the administrator additional control over a device and how the device is

  accessed. This example shows how to enable the MPP in order to only allow SSH and HTTPS on the GigabitEthernet0/1 interface:

  !

  control-plane host

  management-interface GigabitEthernet 0/1 allow ssh https !

  Reference: http://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html

• Question 20:

  Which map is locally defined?

  A. DSCP-to-DSCP-mutation
  B. CoS-to-DSCP
  C. IP-precedence-to-DSCP
  D. DSCP-to-CoS
  A. DSCP-to-DSCP-mutation