Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 421:

  In which type of EIGRP configuration is EIGRP IPv6 VRF-Lite available?

  A. stub
  B. named mode
  C. classic mode
  D. passive
  B. named mode

  ---

  The EIGRP IPv6 VRF Lite feature provides EIGRP IPv6 support for multiple VRFs. EIGRP for IPv6 can operate in the context of a VRF. The EIGRP IPv6 VRF Lite feature provides separation between routing and forwarding, providing an additional level of security because no communication between devices belonging to different VRFs is allowed unless it is explicitly configured. The EIGRP IPv6 VRF Lite feature simplifies the management and troubleshooting of traffic belonging to a specific VRF. The EIGRP IPv6 VRF Lite feature is available only in EIGRP named configurations.

  Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6/configuration/15- 2mt/ipv6-15-2mt-book/ip6-eigrp.html#GUID-92B4FF4F-2B68-41B0-93C8- AAA4F0EC1B1B

• Question 422:

  Refer to the exhibit.

  

  What kind of load balancing is done on this router?

  A. per-packet load balancing
  B. per-flow load balancing
  C. per-label load balancing
  D. star round-robin load balancing
  A. per-packet load balancing

  ---

  Here we can see that for the same traffic source/destination pair of 10.0.0.1 to 14.0.0.2 there were a total of 100 packets (shown by second entry without the *) and that the packets were distributed evenly across the three different outgoing interfaces (34, 33, 33 packets, respectively.

• Question 423:

  Under which condition does UDP dominance occur?

  A. when TCP traffic is in the same class as UDP
  B. when UDP flows are assigned a lower priority queue
  C. when WRED is enabled
  D. when ACLs are in place to block TCP traffic
  A. when TCP traffic is in the same class as UDP

• Question 424:

  DRAG DROP

  Drag and drop the DSCP PHB on the left to the corresponding binary representation on the right.

  Select and Place:

  

  

• Question 425:

  Which two statements are true about AAA? (Choose two.)

  A. AAA can use RADIUS, TACACS+, or Windows AD to authenticate users.
  B. If RADIUS is the only method configured in AAA, and the server becomes unreachable, the user will be able to log in to the router using a local username and password.
  C. If the local keyword is not included and the AAA server does not respond, then authorization will never be possible and the connection will fail.
  D. AAA can be used to authenticate the enable password with a AAA server.
  C. If the local keyword is not included and the AAA server does not respond, then authorization will never be possible and the connection will fail.
  D. AAA can be used to authenticate the enable password with a AAA server.

  ---

  AAA can be used to authenticate user login and the enable passwords. Example 1: Same Exec Authentication Methods for All Users Once authenticated with:

  aaa authentication login default group radius local All users who want to log in to the access server have to be authorized using Radius (first method) or local database (second method).

  We configure:

  aaa authorization exec default group radius local

  Note. On the AAA server, Service-Type=1 (login) must be selected. Note. With this example, if the local keyword is not included and the AAA server does not respond, then authorization will never be possible and the connection will fail.

  Reference: http://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access- controller-access-control-system-tacacs-/10384-security.html

• Question 426:

  Which IPv6 prefix is used for 6to4 tunnel addresses?

  A. 2001::/23
  B. 2002::/16
  C. 3ffe::/16
  D. 5f00::/8
  E. 2001::/32
  B. 2002::/16

  ---

  6to4 works by taking advantage of a reserved IPv6 prefix, 2002::/16. A 6to4 tunnel interface automatically converts the 32 bits in its IPv6 address following this prefix to a global unicast IPv4 address for transport across an IPv4 network such as the public Internet.

  Reference: http://packetlife.net/blog/2010/mar/15/6to4-ipv6-tunneling/

• Question 427:

  Which variable in an EEM applet is set when you use the sync yes option?

  A. $_cli_result
  B. $_result
  C. $_string_result
  D. $_exit_status
  D. $_exit_status

  ---

  The CLI event detector screens CLI commands for a regular expression match. When a match is found, an event is published. The match logic is performed on the fully expanded CLI command after the command is successfully parsed and

  before it is executed. The CLI event detector supports three publish modes:

  ?Synchronous publishing of CLI events--The CLI command is not executed until the EEM policy exits, and the EEM policy can control whether the command is executed. The read/write variable, _exit_status, allows you to set the exit status at

  policy exit for policies triggered from synchronous events. If _exit_status is 0, the command is skipped, if _exit_status is 1, the command is run.

  Asynchronous publishing of CLI events--The CLI event is published, and then the CLI command is executed. Asynchronous publishing of CLI events with command skipping--The CLI event is published, but the CLI command is not executed.

  Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/command/eem-cr- book/eem-cr-e1.html

• Question 428:

  Which two statements about DHCP snooping are true? (Choose two.)

  A. It is implemented on a per-VLAN basis.
  B. It filters invalid DHCP messages.
  C. The binding database logs trusted and untrusted hosts with leased IP addresses.
  D. Interfaces are trusted by default.
  E. It uses the LFIB to validate requests from untrusted hosts.
  A. It is implemented on a per-VLAN basis.
  B. It filters invalid DHCP messages.

• Question 429:

  In the DiffServ model, which class represents the highest priority with the highest drop probability?

  A. AF11
  B. AF13
  C. AF41
  D. AF43
  D. AF43

  ---

  AF43 -- Assured forwarding, high drop probability, Class 4 DSCP, and Flash-override precedence.

  Table of AF Classes and Drop Priority

  Drop Precedence Class 1 Class 2 Class 3 Class 4 Low drop AF11 DSCP 10 001010 AF21 DSCP 18 010010 AF31 DSCP 26 011010 AF41 DSCP 34 100010 Medium drop AF12 DSCP 12 001100 AF22 DSCP 20 010100 AF32 DSCP 28 011100 AF42 DSCP 36 100100 High drop AF13 DSCP 14 001110 AF23 DSCP 22 010110 AF33 DSCP 30 011110 AF43 DSCP 38 100110

  Reference: https://www.informit.com/library/content.aspx?b=CCIE_Practical_Studies_IIandseqNum=56

• Question 430:

  Refer to the exhibit.

  

  All switches have default bridge priorities, and originate BPDUs with MAC addresses as indicated. The numbers shown are STP link metrics. Which two ports are forwarding traffic after STP converges? (Choose two.)

  A. The port connecting switch SWD with switch SWE
  B. The port connecting switch SWG with switch SWF
  C. The port connecting switch SWC with switch SWE
  D. The port connecting switch SWB with switch SWC
  C. The port connecting switch SWC with switch SWE
  D. The port connecting switch SWB with switch SWC

  ---

  Here, we know SWB to SWC are forwarding because we already identified the blocking port. So for the last correct answer let's consider what must be done to prevent a switch loop between SWC/SWD/SWE. SWE to SWD will be blocked because SWC has a lower MAC address so it wins the forwarding port. And to look at it further, you could try to further understand what would happen with ports on SWG. Would the ports on SWG try to go through SWE or SWF? SWE has the lower MAC address so the port from SWG to SWE would win the forwarding election. Therefore, answer B could never be correct.