Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 381:

  A service provider is deploying L2VPN LAN services in its MPLS cloud. Which statement is true regarding LDP signaling and autodiscovery?

  A. LDP signaling requires that each PE is identified, and that an LDP session is active with its P neighbor for autodiscovery to take place.
  B. LDP signaling requires that each P is identified, and that a targeted LDP session is active for autodiscovery to take place.
  C. LDP signaling requires that each PE is identified, and that a targeted LDP session with a BGP route reflector is active for autodiscovery to take place.
  D. LDP signaling requires that each PE is identified, and that a targeted LDP session is active for autodiscovery to take place.
  D. LDP signaling requires that each PE is identified, and that a targeted LDP session is active for autodiscovery to take place.

  ---

  LDP signaling requires that each PE is identified and a targeted LDP session is active for autodiscovery to take place. Although the configuration can be automated using NMS/OSS the overall scalability of the solution is poor as a PE must be

  associated with all other PEs for LDP discovery to work, which can lead to a large number of targeted LDP sessions (n2), which may be largely unused as not all VPLS will be associated with every PE. The security attributes of LDP are

  reasonably good, although additional configuration is required to prevent unauthorized sessions being set up. Although LDP can signal additional attributes, it requires additional configuration either from an NMS/OSS or static configuration.

  Reference:

  http://www.cisco.com/en/US/products/hw/routers/ps368/products_white_paper09186a0080 1f6084.shtml

• Question 382:

  Which two statements about IPsec VTI implementation are true? (Choose two.)

  A. The IKE SA can be bound to the VTI and the crypto map.
  B. The transform set can be configured only in tunnel mode.
  C. SVTIs support only a single IPsec SA.
  D. SVTIs support IPv4 packets that carry IPv6 packets.
  B. The transform set can be configured only in tunnel mode.
  C. SVTIs support only a single IPsec SA.

• Question 383:

  Refer to the exhibit.

  

  Assume that the distances are set to default. Which statement about how the 10.0.0.0 network will reach the 10.1.1.0/24 network is true?

  A. A routing loop will occur.
  B. Packets will be load balanced.
  C. The path through OSPF will be used.
  D. The path through EIGRP will be used.
  C. The path through OSPF will be used.

• Question 384:

  Which encryption algorithm is enabled by the Cisco IOS command service password- encryption

  ?

  A. MD5
  B. Cisco Type-5
  C. Cisco AES
  D. Cisco Type-7
  E. TKIP
  D. Cisco Type-7

• Question 385:

  DRAG DROP

  Drag and drop the NHRP flag on the left to the corresponding meaning on the right.

  Select and Place:

  

  

• Question 386:

  Which statement about SSHv2 is true?

  A. Routers acting as SSH clients can operate without RSA keys.
  B. SSHv2 supports port forwarding and compression.
  C. The RSA key pair size must be at least 512.
  D. You must configure a default gateway before you enable SSHv2.
  A. Routers acting as SSH clients can operate without RSA keys.

• Question 387:

  You are configuring a DMVPN hub to perform CBWFQ on a per-spoke basis. Which information is used to identify the spoke?

  A. the NHRP network ID
  B. the spoke tunnel source IP
  C. the spoke tunnel interface IP address
  D. the NHRP group
  D. the NHRP group

• Question 388:

  Refer to the exhibit.

  

  Which statement about the route target for 192.168.1.0/24 is true?

  A. Its route target is 64512:100010051.
  B. Its route targets are 64512:100010051, 64512:2002250, and 64512:3002300.
  C. Its route target is 64512:3002300.
  D. Its route targets are 64512:100010051 and 64512:3002300.
  E. Its route targets are 64512:2002250 and 64512:3002300.
  C. Its route target is 64512:3002300.

  ---

  Here we are using route maps to change the route target for the 192.168.1.0/24 network from the default route target of 64512:100010051 to 64512:3002300.

• Question 389:

  Which two events occur when a packet is decapsulated in a GRE tunnel? (Choose two.)

  A. The destination IPv4 address in the IPv4 payload is used to forward the packet.
  B. The TTL of the payload packet is decremented.
  C. The source IPv4 address in the IPv4 payload is used to forward the packet.
  D. The TTL of the payload packet is incremented.
  E. The version field in the GRE header is incremented.
  F. The GRE keepalive mechanism is reset.
  A. The destination IPv4 address in the IPv4 payload is used to forward the packet.
  B. The TTL of the payload packet is decremented.

  ---

  After the GRE encapsulated packet reaches the remote tunnel endpoint router, the GRE packet is decapsulated. The destination address lookup of the outer IP header (this is the same as the tunnel destination address) will find a local address (receive) entry on the ingress line card. The first step in GRE decapsulation is to qualify the tunnel endpoint, before admitting the GRE packet into the router, based on the combination of tunnel source (the same as source IP address of outer IP header) and tunnel destination (the same as destination IP address of outer IP header). If the received packet fails tunnel admittance qualification check, the packet is dropped by the decapsulation router. On successful tunnel admittance check, the decapsulation strips the outer IP and GRE header off the packet, then starts processing the inner payload packet as a regular packet. When a tunnel endpoint decapsulates a GRE packet, which has an IPv4/IPv6 packet as the payload, the destination address in the IPv4/IPv6 payload packet header is used to forward the packet, and the TTL of the payload packet is decremented.

  Reference: http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r5- 3/addr-serv/configuration/guide/b-ipaddr-cg53asr9k/b-ipaddr- cg53asr9k_chapter_01001.html

• Question 390:

  Refer to the exhibit.

  

  Which statement about the output is true?

  A. The flow is an HTTPS connection to the router, which is initiated by 144.254.10.206.
  B. The flow is an HTTP connection to the router, which is initiated by 144.254.10.206.
  C. The flow is an HTTPS connection that is initiated by the router and that goes to 144.254.10.206.
  D. The flow is an HTTP connection that is initiated by the router and that goes to 144.254.10.206.
  A. The flow is an HTTPS connection to the router, which is initiated by 144.254.10.206.

  ---

  We can see that the connection is initiated by the Source IP address shown as 144.254.10.206. We also see that the destination protocol (DstP) shows 01BB, which is in hex and translates to 443 in decimal. SSL/HTTPS uses port 443.