Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 321:

  Refer to the exhibit.

  

  Which two statements about this configuration are true? (Choose two.)

  A. Pings from SW2 to SW1 fail because SW1 is pruning VLAN 10.
  B. VLANs 10 and 200 are added to the SW2 allowed list on interface fa0/22.
  C. Pings from SW2 to SW1 are successful.
  D. Only VLAN 200 is added to the SW1 allowed list on interface fa0/22.
  B. VLANs 10 and 200 are added to the SW2 allowed list on interface fa0/22.
  C. Pings from SW2 to SW1 are successful.

• Question 322:

  Which attribute enables BGP confederation to prevent loops?

  A. ATOMIC_AGGREGATE
  B. ORIGIN
  C. NEXT_HOP
  D. AS-PATH
  D. AS-PATH

• Question 323:

  Which two values comprise the VPN ID for an MPLS VPN? (Choose two.)

  A. an OUI
  B. a VPN index
  C. a route distinguisher
  D. a 16-bit AS number
  E. a 32-bit IP address
  A. an OUI
  B. a VPN index

  ---

  Each MPLS VPN ID defined by RFC 2685 consists of the following elements:

  An Organizational Unique Identifier (OUI), a three-octet hex number: The IEEE Registration Authority assigns OUIs to any company that manufactures components under the ISO/IEC 8802 standard. The OUI is used to generate universal

  LAN MAC addresses and protocol identifiers for use in local and metropolitan area network applications. For example, an OUI for Cisco Systems is 00-03-6B (hex). A Virtual Private Network (VPN) index: a four-octet hex number, which

  identifies the VPN within the company.

  Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l3_vpns/configuration/15- mt/mp-l3-vpns-15-mt-book/mp-assgn-id-vpn.html

• Question 324:

  DRAG DROP

  Drag each traceroute text character on the left to its meaning on the right.

  Select and Place:

  

  

• Question 325:

  Which three factors does Cisco PfR use to calculate the best exit path? (Choose three.)

  A. quality of service
  B. packet size
  C. delay
  D. loss
  E. reachability
  F. administrative distance
  C. delay
  D. loss
  E. reachability

  ---

  Cisco PfR selects an egress or ingress WAN path based on parameters that affect application performance, including reachability, delay, cost, jitter, and Mean Opinion Score (MOS).

  Reference: http://www.cisco.com/c/en/us/products/collateral/ios-nx-os- software/performance-routing-pfr/product_data_sheet0900aecd806c4ee4.html

• Question 326:

  Which three events can cause a control plane to become overwhelmed? (Choose three.)

  A. a worm attack
  B. processing a stream of jumbo packets
  C. a microburst
  D. a configuration error
  E. a reconvergence failure
  F. a device-generated FTP session
  A. a worm attack
  D. a configuration error
  E. a reconvergence failure

• Question 327:

  A TCP/IP host is able to transmit small amounts of data (typically less than 1500 bytes), but attempts to transmit larger amounts of data hang and then time out. What is the cause of this problem?

  A. A link is flapping between two intermediate devices.
  B. The processor of an intermediate router is averaging 90 percent utilization.
  C. A port on the switch that is connected to the TCP/IP host is duplicating traffic and sending it to a port that has a sniffer attached.
  D. There is a PMTUD failure in the network path.
  D. There is a PMTUD failure in the network path.

  ---

  Sometimes, over some IP paths, a TCP/IP node can send small amounts of data (typically less than 1500 bytes) with no difficulty, but transmission attempts with larger amounts of data hang, then time out. Often this is observed as a unidirectional problem in that large data transfers succeed in one direction but fail in the other direction. This problem is likely caused by the TCP MSS value, PMTUD failure, different LAN media types, or defective links.

  Reference: http://www.cisco.com/c/en/us/support/docs/additional-legacy-protocols/ms- windows-networking/13709-38.html

• Question 328:

  When you deploy DMVPN, what is the purpose of the command crypto isakmp key ciscotest address 0.0.0.0 0.0.0.0 ?

  A. It is configured on hub and spoke router to establish peering
  B. It is configured on hub to set the pre-shared key for the spoke routers
  C. It is configured on the spokes to indicate the hub router
  D. It is configured on the Internet PE routers to allow traffic to traverse the ISP core
  B. It is configured on hub to set the pre-shared key for the spoke routers

• Question 329:

  Which three options are components of an EEM CLI policy? (Choose three.)

  A. Safe-Tcl
  B. applet name
  C. Fast Tcl
  D. event
  E. action
  F. Tcl bytecode
  B. applet name
  D. event
  E. action

  ---

  The Embedded Event Manager (EEM) monitors events that occur on your device and takes action to recover or troubleshoot these events, based on your configuration.

  EEM consists of three major components:

  Event statements -- Events to monitor from another Cisco NX-OS component that might require some action, workaround, or notification. Action statements -- An action that EEM can take, such as sending an e-mail, or disabling an interface,

  to recover from an event. Policies -- An applet name paired with one or more actions to troubleshoot or recover from the event.

  Reference:

  http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/system_manage ment/6x/b_5500_System_Mgmt_Config_6x/ b_5500_System_Mgmt_Config_6x_chapter_01 0011.html

• Question 330:

  Which two options are EIGRP route authentication encryption modes? (Choose two.)

  A. MD5
  B. HMAC-SHA-256bit
  C. ESP-AES
  D. HMAC-AES
  A. MD5
  B. HMAC-SHA-256bit

  ---

  Packets exchanged between neighbors must be authenticated to ensure that a device accepts packets only from devices that have the same preshared authentication key. Enhanced Interior Gateway Routing Protocol (EIGRP) authentication is configurable on a per-interface basis; this means that packets exchanged between neighbors connected through an interface are authenticated. EIGRP supports message digest algorithm 5 (MD5) authentication to prevent the introduction of unauthorized information from unapproved sources. MD5 authentication is defined in RFC 1321. EIGRP also supports the Hashed Message Authentication Code-Secure Hash Algorithm-256 (HMAC-SHA-256) authentication method.

  Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/xe- 3s/ire-xe-3s-book/ire-sha-256.html