Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 591:

  Which three types of traffic are allowed by IEEE 802.1X access control prior to getting authenticated? (Choose three.)

  A. EAPOL
  B. VTP
  C. STP
  D. ARP
  E. CDP
  F. HTTP
  A. EAPOL
  C. STP
  E. CDP

  ---

  Until the client is authenticated, IEEE 802.1x access control allows only Extensible Authentication Protocol over LAN (EAPOL), Cisco Discovery Protocol (CDP), and Spanning Tree Protocol (STP) traffic through the port to which the client is

  connected. After authentication, normal traffic passes through the port.

  Reference:

  http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/15- 0_2_se/configuration/guide/scg3750/sw8021x.pdf

• Question 592:

  Which two statements about VPLS are true? (Choose two)

  A. The service provider provisions CE devices.
  B. It transmits broadcast traffic more efficiently than Ethernet switches.
  C. It uses broadcast replication to transmit Ethernet packets with multicast MAC addresses.
  D. It enables CE devices to operate as part of an L3 VPN.
  E. It enables CE devices on different networks to operate as if they were in the same LAN.
  F. It enables PE and CE devices to operate as if they were routing neighbors.
  C. It uses broadcast replication to transmit Ethernet packets with multicast MAC addresses.
  E. It enables CE devices on different networks to operate as if they were in the same LAN.

• Question 593:

  Which BGP feature prevents a router from installing an iBGP learned route in its routing table until the route is validated within the IGP?

  A. confederation
  B. aggregation
  C. advertise-map
  D. synchronization
  B. aggregation

• Question 594:

  By default, how does a GET VPN group member router handle traffic when it is unable to register to a key server?

  A. All traffic is queued until registration is successful or the queue is full.
  B. All traffic is forwarded through the router unencrypted.
  C. All traffic is forwarded through the router encrypted.
  D. All traffic through the router is dropped.
  B. All traffic is forwarded through the router unencrypted.

  ---

  In the basic GETVPN configuration, the traffic passing through group members will be sent in clear until it registers with the Key Server. This is because the crypto ACL is configured on the KS and GM will get that information only after the registration is successful. This means for a short period of time the traffic can go out unencrypted after a GM is booted up or the existing GETVPN session is cleared manually. This mode is called "fail open" and it is the default behavior. This behavior can be turned off by configuring "Fail Close" mode on the GMs.

  Reference: http://www.cisco.com/c/en/us/products/collateral/security/group-encrypted- transport-vpn/deployment_guide_c07_554713.html

• Question 595:

  For which three routing protocols can Cisco PfR provide direct route control? (Choose three.)

  A. OSPF
  B. IS-IS
  C. BGP
  D. EIGRP
  E. static routing
  F. ODR
  C. BGP
  D. EIGRP
  E. static routing

  ---

  Q. Can you elaborate more on the Parent Route and why it's so important to PfR? A. Yes. For any route that PfR modifies or controls (BGP, Static, PIRO, EIGRP, PBR), having a Parent prefix in the routing table eliminates the possibility of a routing loop occurring. This is naturally a good thing to prevent in routed networks.

  Reference: http://docwiki.cisco.com/wiki/Performance_Routing_FAQs#Route_Control

• Question 596:

  Which technology facilitates neighbor IP address resolution in DMVPN?

  A. CEF
  B. mGRE
  C. a dynamic routing protocol
  D. NHRP
  D. NHRP

  ---

  NHRP Used with a DMVPN NHRP is used to facilitate building a VPN and provides address resolution in DMVPN. In this context, a VPN consists of a virtual Layer 3 network that is built on top of an actual Layer 3 network. The topology you use over the VPN is largely independent of the underlying network, and the protocols you run over it are completely independent of it. The VPN network (DMVPN) is based on GRE IP logical tunnels that can be protected by adding in IPsec to encrypt the GRE IP tunnels.

  Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_4/ip_addr/configuration/guide/hadnhrp.html#w p1057255

• Question 597:

  What are two benefits of Per-Tunnel QoS for DMVPN? (Choose two.)

  A. The administrator can configure criteria that, when matched, can automatically set up QoS for each spoke as it comes online.
  B. Traffic from each spoke to the hub can be regulated individually.
  C. When traffic exceeds a configurable threshold, the spokes can automatically set up QoS with the hub.
  D. The hub can send large packets to a spoke during allotted timeframes.
  E. The hub can be regulated to prevent overloading small spokes.
  A. The administrator can configure criteria that, when matched, can automatically set up QoS for each spoke as it comes online.
  E. The hub can be regulated to prevent overloading small spokes.

• Question 598:

  Which three message types are used for prefix delegation in DHCPv6? (Choose three.)

  A. DHCP Discover
  B. Renew
  C. Solicit
  D. DHCP Offer
  E. Advertise
  F. DHCP Ack
  B. Renew
  C. Solicit
  E. Advertise

  ---

  DHCPv6 Message Types For a client to get an IPv6 address successfully from a DHCPv6 server, the Client-Server Conversation happens using the following messages. Client--->Server Messages Server--->Client Messages Solicit, Request, Confirm, Renew, Rebind, Release, Decline, Information-Request Advertise, Reply, Reconfigure

  Lets look at each message types in detail: SOLICIT This is the first step in DHCPv6, where a DHCPv6 client sends a Solicit message to locate DHCPv6 servers. ADVERTISE Upon receiving a Solicit Message from the client, the DHCPv6 server sends an Advertise message to indicate that it is available for DHCP service, in response to a Solicit message received from a client. REQUEST This message is sent by the DHCPv6 client.Client sends a Request message to request configuration parameters which includes IP addresses or delegated prefixes, from a specific server. CONFIRM Confirm message is sent by the client to any available server in the network to confirm that the client is still on the same link or it has to be removed. This message also confirms the IPv6 addresses that are assigned to the link are still valid. This could happen in case when a client detects a change in link-layer connectivity or if the device is powered on and it is found that one or more leases are still valid. Note that only the prefix portion of the addresses are validated and not the actual leases. RENEW A client sends a Renew message to the server when it wants to extend the lifetimes on the addresses and other configuration parameters assigned to the client and also to update other configuration parameters. REBIND In case of No response from the DHCPv6 Server for the Renew message, the client sends a Rebind message to any available server to extend the lifetimes on the address and to update other configuration parameters. REPLY A Reply message is sent by the DHCPv6 Server in response to a Solicit, Request, Renew, Rebind message received from a client. The reply message is sent by the server in response to a confirm message (either confirming or denying) that the addresses assigned to the client are appropriate.In short the server acknowledge receipt of a Release or Decline message by sending a REPLY message. RELEASE Release message as the name implies, is sent by the client to the server that has assigned the addresses, to indicate that the client will no longer use the assigned addresses (one or more). DECLINE Client sends a Decline message to the DHCPv6 server to tell that the one or more addresses assigned by the server is already in use RECONFIGURE The Reconfigure Message is sent by the DHCPv6 server to the client when the server has new or updated information of configuration parameters. It tells the client to initiate a information-request/reply message to the server so as to receive the updated information. INFORMATION-REQUEST Information-Request message is sent by the client to the server to update the configuration parameters

  Reference: https://supportforums.cisco.com/blog/153426/implementing-dhcpv6-introduction

• Question 599:

  Refer to the exhibit.

  

  Which routes are advertised by the router?

  A. No routes
  B. BGP routes from AS 65006 and BGP routes sourced on this router.
  C. All routes.
  D. BGP routes sourced on this router.
  C. All routes.

• Question 600:

  Refer to the exhibit.

  

  Which two statements about this configuration are true? (Choose two.)

  A. Spoke devices will be dynamically added to the NHRP mappings.
  B. The next-hop server address must be configured to 172.168.1.1 on all spokes.
  C. The next-hop server address must be configured to 192.168.1.1 on all spokes.
  D. R1 will create a static mapping for each spoke.
  A. Spoke devices will be dynamically added to the NHRP mappings.
  C. The next-hop server address must be configured to 192.168.1.1 on all spokes.

  ---

  NHRP is a client/server model protocol which is defined by RFC2332. The hub is considered to be the Next Hop Server (NHS) and the spokes are considered to be the Next Hop Client (NHC). The hub must be configured as the next-hop

  server. NHRP provides a mapping between the inside and outside address of a tunnel endpoint. These mappings can be static or dynamic. In a dynamic scenario, a next-hop server (NHS) is used to maintain a list of possible tunnel

  endpoints. Each endpoint using the NHS registers its own public and private mapping with the NHS. The local mapping of the NHS must always be static. It is important to note that the branch points to the inside or protected address of the

  NHS server. This scenario is an example of dynamic mappings.

  Reference:

  http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/WAN_and_MAN/DMVPDG/DMV PN_2_Phase2.html