Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 221:

  Which option is the most effective action to avoid packet loss due to microbursts?

  A. Implement larger buffers.
  B. Install a faster CPU.
  C. Install a faster network interface.
  D. Configure a larger tx-ring size.
  A. Implement larger buffers.

  ---

  You can't avoid or prevent them as such without modifying the sending host's application/network stack so it smoothes out the bursts. However, you can manage microbursts by tuning the size of receive buffers / rings to absorb occasional microbursts.

• Question 222:

  Which statement about UDLD is true?

  A. The udld reset command resets ports that have been error-disabled by both UDLD and Fast UDLD.
  B. Fast UDLD is configured in aggressive mode.
  C. Only bidirectional link failures can be detected in normal mode.
  D. Each switch in a UDLD topology can send and receive packets to and from its neighbors.
  A. The udld reset command resets ports that have been error-disabled by both UDLD and Fast UDLD.

• Question 223:

  Which three options are best practices for implementing a DMVPN? (Choose three.)

  A. Use IPsec in tunnel mode.
  B. Implement Dead Peer Detection to detect communication loss.
  C. Configure AES for encryption of transported data.
  D. Configure SHA-1 for encryption of transported data.
  E. Deploy IPsec hardware acceleration to minimize router memory overhead.
  F. Configure QoS services only on the head-end router.
  A. Use IPsec in tunnel mode.
  B. Implement Dead Peer Detection to detect communication loss.
  C. Configure AES for encryption of transported data.

  ---

  Best Practices Summary for Hub-and-Spoke Deployment Model This section describes the best practices for a dual DMVPN cloud topology with the hub- and- spoke deployment, supporting IP multicast (IPmc) traffic including routing

  protocols.

  The following are general best practices:

  ?

  ?

  Configure Triple DES (3DES) or AES for encryption of transported data (exports of encryption algorithms to certain countries may be prohibited by law).

  ?

  Implement Dead Peer Detection (DPD) on the spokes to detect loss of communication between peers.

  ?

  Deploy hardware-acceleration of IPsec to minimize router CPU overhead, to support traffic

  with low latency and jitter requirements, and for the highest performance for cost.

  ?

  Keep IPsec packet fragmentation to a minimum on the customer network by setting MTU size or using Path MTU Discovery (PMTUD).

  ?

  Use Digital Certificates/Public Key Infrastructure (PKI) for scalable tunnel authentication.

  ?

  Configure a routing protocol (for example, EIGRP, BGP or OSPF) with route summarization for dynamic routing.

  ?

  Set up QoS service policies as appropriate on headend and branch router interfaces to help alleviate interface congestion issues and to attempt to keep higher priority traffic from being dropped during times of congestion.

  Reference:

  http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/WAN_and_MAN/DMVPDG/DMV PN_1.html

• Question 224:

  Which two commands enable OSPF graceful shutdown? (Choose two.)

  A. nsf cisco
  B. ip ospf shutdown
  C. shutdown
  D. nsf ietf helper disable
  B. ip ospf shutdown
  C. shutdown

• Question 225:

  Which statement about the EIGRP SRTT is true?

  A. It is the average time that it takes for a reliable packet to be acknowledged.
  B. It is six time the RTO.
  C. It is the time that it takes for an update to be received by a peer.
  D. It is the time it takes to receive a reply to a query.
  A. It is the average time that it takes for a reliable packet to be acknowledged.

• Question 226:

  Refer to the exhibit.

  

  Which statement about the R1 configuration is true?

  A. It permits host 10.1.1.2 to establish a Telnet connection to R1.
  B. It limits remote hosts to two SSH connection attempts.
  C. SSH connections to R1 will log out after a 5-minute idle interval.
  D. Hosts that reside on network 10.0.0.0/8 can SSH to R1.
  E. The R1 timeout for outgoing SSH connection attempts is 30 seconds.
  E. The R1 timeout for outgoing SSH connection attempts is 30 seconds.

  ---

  The timeout for outgoing SSH connection is defined by the "ip sshh time-out" command (in seconds), which is configured here as 30.

• Question 227:

  Which is the way to enable the control word in an L2 VPN dynamic pseudowire connection on router R1?

  A. R1(config)# pseudowire-class cw-enable R1(config-pw-class)# encapsulation mpls R1(config-pw-class)# set control-word
  B. R1(config)# pseudowire-class cw-enable R1(config-pw-class)# encapsulation mpls R1(config-pw-class)# enable control-word
  C. R1(config)# pseudowire-class cw-enable R1(config-pw-class)# encapsulation mpls R1(config-pw-class)# default control-word
  D. R1(config)# pseudowire-class cw-enable R1(config-pw-class)# encapsulation mpls R1(config-pw-class)# control-word
  D. R1(config)# pseudowire-class cw-enable R1(config-pw-class)# encapsulation mpls R1(config-pw-class)# control-word

  ---

  The following example shows how to enable the control word in an AToM dynamic pseudowire connection: Device(config)# pseudowire-class cw-enable Device(config-pw-class)# encapsulation mpls Device(config-pw-class)# control-word Device(config-pw-class)# exit

  Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mpls/command/mp-cr- book/mp-a1.html

• Question 228:

  Refer to Exhibit.

  

  How is voice traffic entering this router on interface GigabitEthernet00 being handled by the shown making policy?

  A. Any traffic matching access-list vice is trusted and marking is not changed.
  B. All voice is being set to DSCP 0.
  C. All voice is being set to AF21.
  D. Any traffic matching access-list voice is set to EF.
  C. All voice is being set to AF21.

• Question 229:

  Refer to the exhibit.

  

  Which feature can R1 use to fail over from R2 to R3 if the address for R2 becomes unavailable?

  A. object tracking
  B. HSRP
  C. GLBP
  D. LACP
  A. object tracking

  ---

  The object tracking feature allows you to create a tracked object that multiple clients can use to modify the client behavior when a tracked object changes. Several clients register their interest with the tracking process, track the same object,

  and take different actions when the object state changes.

  Clients include the following features:

  Embedded Event Manager (EEM)

  ?

  Gateway Load Balancing Protocol (GLBP)

  ?

  Hot Standby Redundancy Protocol (HSRP)

  ?

  ?

  Virtual Router Redundancy Protocol (VRRP)

  The object tracking monitors the status of the tracked objects and communicates any changes made to interested clients. Each tracked object is identified by a unique number that clients can use to configure the action to take when a tracked

  object changes state.

  Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx- os/unicast/configuration/guide/l3_cli_nxos/l3_object.html

• Question 230:

  What is the most common use for route tagging in EIGRP?

  A. to determine the route source for management purposes
  B. to change the metric of a prefix
  C. to filter routes in order to prevent routing loops
  D. to modify path selection for certain classes of traffic
  C. to filter routes in order to prevent routing loops