Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 641:

  Which two statements about port ACLs are true? (Choose two.)

  A. Port ACLs are supported on physical interfaces and are configured on a Layer 2 interface on a switch.
  B. Port ACLs support both outbound and inbound traffic filtering.
  C. When it is applied to trunk ports, the port ACL filters only native VLAN traffic.
  D. When it is applied to a port with voice VLAN, the port ACL filters both voice and data VLAN traffic.
  A. Port ACLs are supported on physical interfaces and are configured on a Layer 2 interface on a switch.
  D. When it is applied to a port with voice VLAN, the port ACL filters both voice and data VLAN traffic.

  ---

  PACLs filter incoming traffic on Layer 2 interfaces, using Layer 3 information, Layer 4 header information, or non-IP Layer 2 information The port ACL (PACL) feature provides the ability to perform access control on specific Layer 2 ports. A Layer 2 port is a physical LAN or trunk port that belongs to a VLAN. Port ACLs perform access control on all traffic entering the specified Layer 2 port, including voice and data VLANs that may be configured on the port. Port ACLs are applied only on the ingress traffic.

  Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12- 2SY/configuration/guide/sy_swcg/port_acls.html

• Question 642:

  Which two options are valid for the number of bytes in a BGP AS number? (Choose two.)

  A. 2 bytes
  B. 4 bytes
  C. 6 bytes
  D. 8 bytes
  E. 16 bytes
  A. 2 bytes
  B. 4 bytes

  ---

  During the early time of BGP development and standardization, it was assumed that availability of a 16 bit binary number to identify the Autonomous System (AS) within BGP would have been more than sufficient. The 16 bit AS number, also known as the 2-byte AS number, provides a pool of 65536 unique Autonomous System numbers. The IANA manages the available BGP Autonomous System Numbers (ASN) pool, with the assignments being carried out by the Regional Registries. The current consumption rate of the publicly available AS numbers suggests that the entire public 2-byte ASN pool will be fully depleted. A solution to this depletion is the expansion of the existing 2-byte AS number to a 4-byte AS number, which provides a theoretical 4,294,967,296 unique AS numbers. ARIN has made the following policy changes in conjunction with the adoption of the solution. The Cisco IOS BGP "4-byte ASN" feature allows BGP to carry a Autonomous System Number (ASN) encoded as a 4-byte entity. The addition of this feature allows an operator to use an expanded 4-byte AS number granted by IANA.

• Question 643:

  Which two improvements do SIA-Query and SIA-Reply messages add to EIGRP? (Choose two.)

  A. Stuck-in-active conditions are solved faster.
  B. They prevent a route from going into the stuck-in-active state.
  C. They help in the localization of the real failure in the network.
  D. The EIGRP adjacency between two neighbors never goes down.
  A. Stuck-in-active conditions are solved faster.
  C. They help in the localization of the real failure in the network.

• Question 644:

  MPLS LDP IGP synchronization is configured on a link. The OSPF adjacency on that link is UP but MPLS LDP synchronization is not achieved. Which statement about this scenario is true?

  A. The router excludes the link from its OSPF LSA type 1.
  B. The router flushes its own router LSA.
  C. The router advertises the link in its router LSA with max-metric.
  D. The router advertises an LSA type 2 for this link, with the metric set to max-metric.
  E. The router advertises the link and OSPF adjacency as it would when the synchronization is achieved.
  C. The router advertises the link in its router LSA with max-metric.

  ---

  To enable LDP-IGP Synchronization on each interface that belongs to an OSPF or IS-IS process, enter the mpls ldp sync command. If you do not want some of the interfaces to have LDP-IGP Synchronization enabled, issue the no mpls ldp igp sync command on those interfaces. If the LDP peer is reachable, the IGP waits indefinitely (by default) for synchronization to be achieved. To limit the length of time the IGP session must wait, enter the mpls ldp igp sync holddown command. If the LDP peer is not reachable, the IGP establishes the adjacency to enable the LDP session to be established. When an IGP adjacency is established on a link but LDP-IGP Synchronization is not yet achieved or is lost, the IGP advertises the max-metric on that link.

  Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/fsldpsyn.html

• Question 645:

  Refer to the exhibit.

  

  The two standalone chassis are unable to convert into a VSS. What can you do to correct the problem?

  A. Set a different port channel number on each chassis.
  B. Set a different virtual domain ID on each chassis.
  C. Set the redundancy mode to rpr on both chassis.
  D. Add two ports to the port channel group.
  A. Set a different port channel number on each chassis.

• Question 646:

  Which two application protocols require application layer gateway support when using NAT on a Cisco router? (Choose two.)

  A. SIP
  B. HTTP
  C. FTP
  D. SMTP
  E. POP3
  A. SIP
  C. FTP

• Question 647:

  Refer to the exhibit.

  

  Which technology does the use of bi-directional BPDUs on all ports in the topology support?

  A. RSTP
  B. MST
  C. Bridge Assurance
  D. Loop Guard
  E. Root Guard
  F. UDLD
  C. Bridge Assurance

  ---

  Spanning Tree Bridge Assurance Turns STP into a bidirectional protocol Ensures spanning tree fails "closed" rather than "open" If port type is "network" send BPDU regardless of state If network port stops receiving BPDU it's put in BA- inconsistent state

  

  Bridge Assurance (BA) can help protect against bridging loops where a port becomes designated because it has stopped receiving BPDUs. This is similar to the function of loop guard. Reference: http://lostintransit.se/tag/convergence/

• Question 648:

  Which three statements about RIPng are true? (Choose three.)

  A. It supports route tags.
  B. It sends updates on FF02::9.
  C. Its RTE last byte is 0XFF.
  D. It supports authentication.
  E. It sends updates on UDP port 520.
  F. It can be used on networks of greater than 15 hops.
  A. It supports route tags.
  B. It sends updates on FF02::9.
  C. Its RTE last byte is 0XFF.

• Question 649:

  Refer to the Exhibit.

  

  Which three statements about the output are true? (Choose Three)

  A. Group 224.0.1.40 is a reserved address, and it should not be used for multicast user data transfer.
  B. Group 239.192.1.1 is a reserved address, and it should not be used for multicast user data transfer.
  C. One or more multicast groups are operating in PIM dense mode.
  D. One or more of the multicast data streams will be forwarded out to neighbor 10.85.20.20.
  E. A multicast receiver has requested to join one or more of the multicast groups.
  F. This switch is currently receiving a multicast data stream that is being forwarded out VLAN 150.
  A. Group 224.0.1.40 is a reserved address, and it should not be used for multicast user data transfer.
  E. A multicast receiver has requested to join one or more of the multicast groups.
  F. This switch is currently receiving a multicast data stream that is being forwarded out VLAN 150.

• Question 650:

  Which two protocols does the Management Plane Protection feature support? (Choose two.)

  A. ARP
  B. HTTPS
  C. TFTP
  D. OSPF
  B. HTTPS
  C. TFTP