Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 511:

  Which two issues is TCP Sequence Number Randomization designed to prevent? (Choose two.)

  A. DDOS attacks
  B. OS fingerprinting
  C. man-in-the-middle attacks
  D. ARP poisoning
  E. Smurf attack
  B. OS fingerprinting
  C. man-in-the-middle attacks

• Question 512:

  Refer to the exhibit.

  

  Which additional information must you specify in this configuration to capture NetFlow traffic?

  A. ingress or egress traffic
  B. the number of cache entries
  C. the flow cache active timeout
  D. the flow cache inactive timeout
  A. ingress or egress traffic

  ---

  Configuring NetFlow Perform the following task to enable NetFlow on an interface. SUMMARY STEPS

  1.

  2.

  configure terminal

  3.

  interface type number

  4.

  ip flow {ingress | egress}

  5.

  exit

  6.

  Repeat Steps 3 through 5 to enable NetFlow on other interfaces.

  7.

  end

  DETAILED STEPS

  Purpose

  Step 1

  enable

  Example:

  Router> enable

  Enables privileged EXEC mode.

  ?

  Enter your password if prompted.

  Step 2

  configure terminal

  Example:

  Router# configure terminal

  Enters global configuration mode.

  Step 3

  interface type number

  Example:

  Router(config)# interface ethernet 0/0

  Specifies the interface that you want to enable NetFlow on and enters interface configuration mode.

  Step 4

  ip flow {ingress | egress}

  Example:

  Router(config-if)# ip flow ingress

  Enables NetFlow on the interface.

  ?

  ?

  egress--Captures traffic that is being transmitted by the interface Step 5

  exit

  Example:

  Router(config-if)# exit

  (Optional) Exits interface configuration mode and enters global configuration mode.

  Note

  You need to use this command only if you want to enable NetFlow on another interface.

  Step 6

  Repeat Steps 3 through 5 to enable NetFlow on other interfaces.

  This step is optional.

  Step 7

  end

  Example:

  Router(config-if)# end

  Exits the current configuration mode and returns to privileged EXEC mod

  Reference:

  http://www.cisco.com/c/en/us/td/docs/ios/netflow/configuration/guide/12_2sr/nf_12_2sr_boo k/cfg_nflow_data_expt.html

• Question 513:

  How many address families can a single OSPFv3 instance support?

  A. 1
  B. 2
  C. 5
  D. 10
  A. 1

• Question 514:

  Which three options are three benefits of an MPLS VPN? (Choose three.)

  A. It allows IP address space overlap by maintaining customer routes in a private routing table.
  B. It offers additional security by preventing intrusions directly into the customer routing table.
  C. It offers a transparent virtual network in which all customer sites appear on one LAN.
  D. It offers additional security by allowing only dynamic routing protocols between CE and PE routers.
  E. It allows IP address space overlap by maintaining customer routes in the global routing table with unique BGP communities.
  F. Providers can send only a default route for Internet access into the customer VPN.
  A. It allows IP address space overlap by maintaining customer routes in a private routing table.
  B. It offers additional security by preventing intrusions directly into the customer routing table.
  C. It offers a transparent virtual network in which all customer sites appear on one LAN.

• Question 515:

  Which two statements about IGMP filters that are operating in access mode are true? (Choose Two)

  A. They can be applied on the access port only.
  B. A filter that is applied on the SVI must use the same settings as a filter that is applied to the trunk port.
  C. The port filter is always checked first.
  D. They can be applied on both the SVI and the access port.
  A. They can be applied on the access port only.
  B. A filter that is applied on the SVI must use the same settings as a filter that is applied to the trunk port.

• Question 516:

  Refer to the exhibit.

  R1 and R2 have a working VRF-Lite configuration, but R1 is receiving a route only to 10.2.2.2 from R2. Which two changes can you make so that R1 receives all routes from R2? (Choose two.)

  A. Create an additional permit statement in the access list that is referenced by the import- map on R1.
  B. Disable VRF filtering on R1.
  C. Set the R1 and R2 OSPF process IDs to match.
  D. Change the wildcard mask for the network 10.3.3.0 to 0.0.0.0.
  E. Create a matching export map in the VRF for R2.
  A. Create an additional permit statement in the access list that is referenced by the import- map on R1.
  B. Disable VRF filtering on R1.

  ---

  The access list in this example is only allowing the 192.168.0.0/16 and 10.2.2.2/32 routes to be advertised, so an additional permit statement is needed to allow the other routes. Alternatively, we could simply disable VRF filtering, then all routes would be advertised.

• Question 517:

  Which regular expression will match prefixes that originated from AS200?

  A. ^$
  B. ^200_
  C. _200$
  D. ^200)
  E. _200_
  C. _200$

  ---

  Example on how to deny all prefixes originated in Autonomous System 200

  router bgp 100 neighbor 10.1.1.1 remote-as 65535 neighbor 10.1.1.1 route-map map1 in

  !

  route-map map1 permit 10

  match as-path 1

  !

  ip as-path access-list 5 deny _200$

  ip as-path access-list 5 permit .*

  Reference:

  http://www.cisco.com/c/en/us/td/docs/ios/termserv/configuration/guide/12_4t/tsv_12_4t_bo ok/tsv_reg_express.html

• Question 518:

  Refer to the exhibit.

  

  Which part of the joined group addresses list indicates that the interface has joined the EIGRP multicast group address?

  A. FF02::1
  B. FF02::1:FF00:200
  C. FF02::A
  D. FF02::2
  C. FF02::A

  ---

  FF02::A is an IPv6 link-local scope multicast addresses. This address is for all devices on a wire that want to "talk" EIGRP with one another. Focusing specifically on FF02::A and how routers join it, we can see and say three things:

  Local: FF02::A is local to the wire.

  Join: Each device "joins" FF02::A by just "deciding to listen" to the IPv6 link-local scope multicast address FF02::A. Then, by extension, it listens to the corresponding MAC address for that multicast IPv6 address (33:33:00:00:00:0A).

  Common interest: As we can see, these varying groups have something in common that they would all like to hear about. For FF02::A, the common interest -- the "connection" among the devices joining that group ?is that they all want to

  listen to or participate in EIGRP.

  Reference: http://www.networkcomputing.com/networking/understanding-ipv6-what-is- solicited-node-multicast/a/d-id/1315703

• Question 519:

  RIPv2 is enabled on a router interface. The "neighbor" command is also configured with a specific IP address. Which statement describes the effect of this configuration?

  A. RIP stops sending multicast packets on that interface.
  B. RIP starts sending only unicast packets on that interface.
  C. RIP starts ignoring multicast packets on that interface.
  D. RIP starts sending unicast packets to the specified neighbor, in addition to multicast packets.
  D. RIP starts sending unicast packets to the specified neighbor, in addition to multicast packets.

• Question 520:

  Like OSPFv2, OSPFv3 supports virtual links. Which two statements are true about the IPv6 address of a virtual neighbor? (Choose two.)

  A. It is the link-local address, and it is discovered by examining the hello packets received from the virtual neighbor.
  B. It is the link-local address, and it is discovered by examining link LSA received by the virtual neighbor.
  C. It is the global scope address, and it is discovered by examining the router LSAs received by the virtual neighbor.
  D. Only prefixes with the LA-bit not set can be used as a virtual neighbor address.
  E. It is the global scope address, and it is discovered by examining the intra-area-prefix- LSAs received by the virtual neighbor.
  F. Only prefixes with the LA-bit set can be used as a virtual neighbor address.
  E. It is the global scope address, and it is discovered by examining the intra-area-prefix- LSAs received by the virtual neighbor.
  F. Only prefixes with the LA-bit set can be used as a virtual neighbor address.

  ---

  OSPF for IPv6 assumes that each router has been assigned link-local unicast addresses on each of the router's attached physical links. On all OSPF interfaces except virtual links, OSPF packets are sent using the interface's associated link-

  local unicast address as the source address. A router learns the link-local addresses of all other routers attached to its links and uses these addresses as next-hop information during packet forwarding. On virtual links, a global scope IPv6

  address MUST be used as the source address for OSPF protocol packets.

  The collection of intra-area-prefix-LSAs originated by the virtual neighbor is examined, with the virtual neighbor's IP address being set to the first prefix encountered with the LA-bit set.

  Reference: https://tools.ietf.org/html/rfc5340