Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 661:

  Refer to the exhibit.

  

  Which option describes how a device with this configuration applies traffic matching?

  A. It matches traffic in ACL 8 that has a DCSP marking of EF.
  B. It matches all traffic that has QoS markings.
  C. It matches all traffic in ACL 8 and all traffic that has a DSCP marking of EF.
  D. It matches all traffic that has a DSCP marking of EF.
  E. It matches all traffic in ACL 8.
  A. It matches traffic in ACL 8 that has a DCSP marking of EF.

• Question 662:

  Which two statements about packet fragmentation on an IPv6 network are true? (Choose two.)

  A. The fragment header is 64 bits long.
  B. The identification field is 32 bits long.
  C. The fragment header is 32 bits long.
  D. The identification field is 64 bits long.
  E. The MTU must be a minimum of 1280 bytes.
  F. The fragment header is 48 bits long.
  A. The fragment header is 64 bits long.
  B. The identification field is 32 bits long.

  ---

  The fragment header is shown below, being 64 bits total with a 32 bit identification field:

  

  Reference: http://www.openwall.com/presentations/IPv6/img24.html

• Question 663:

  Refer to exhibit.

  

  The router is unreachable using telnet. Which option is solution?

  A. Use an extended access list instead of standard access list.
  B. The transport output telnet command must be added.
  C. The VRF configuration must be completed.
  D. The "vrf-also" keyword must be added to the access-class configuration.
  D. The "vrf-also" keyword must be added to the access-class configuration.

• Question 664:

  Which two statements about class maps are true? (Choose two.)

  A. As many as eight DSCP values can be included in a match dscp statement.
  B. The default parameter on a class map with more than one match command is match- any.
  C. The match class command can nest a class map within another class map.
  D. A policy map can be used to designate a protocol within a class map.
  A. As many as eight DSCP values can be included in a match dscp statement.
  C. The match class command can nest a class map within another class map.

  ---

  Answer A.

  Router(config-cmap)# match [ip] dscp dscp-value [dscp-value dscp-value dscp-value dscp-value dscp-value dscp-value dscp-value] (Optional) Identifies a specific IP differentiated service code point (DSCP) value as a match criterion. Up to

  eight DSCP values can be included in one match statement.

  Answer C.

  Router config-cmap)# match class-map class-name

  (Optional) Specifies the name of a traffic class to be used as a matching criterion (for nesting traffic class [nested class maps] within one another).

  Reference:

  http://www.cisco.com/c/en/us/td/docs/ios/12_2/qos/configuration/guide/fqos_c/qcfmcli2.html

• Question 665:

  Refer to the exhibit.

  

  If OSPF is implemented on the network, which additional configuration is needed to allow traffic from host 10.4.1.15/24 to host 10.1.2.20/24?

  A. A virtual link between router 2 and router 4
  B. A virtual link between router 3 and router 4
  C. A virtual link between router 2 and router 3
  D. The current design allows traffic between the two hosts.
  D. The current design allows traffic between the two hosts.

  ---

  This specific traffic from 10.4.1.0/24 to 10.1.2.0/24 would work because this traffic crosses only over the single OSPF area of 0.0.0.1. However, traffic from hosts on R4 to R1 would indeed need a virtual link, since area 0.0.0.2 is not connected to the backbone area of 0.0.0.0.

• Question 666:

  Refer to the exhibit.

  

  Prefix 192.168.1.0/31 is currently two-way ECMP. How can you make Ethernet0/0 the preferred path?

  A. Increase the OSPF cost of Ethernet1/0 so that the OSPF cost is higher on Ethernet1/0 than on Ethernet0/0.
  B. Increase the bandwidth of Ethernet1/0 so that it has a higher bandwidth than Ethernet0/0.
  C. Increase the OSPF cost of Ethernet0/0 so that the OSPF cost is higher on Ethernet1/0 than on Ethernet0/0.
  D. Log in to the router that is connected to Ethernet0/0 and lower the OSPF cost on the interface that is connected to Ethernet0/0.
  A. Increase the OSPF cost of Ethernet1/0 so that the OSPF cost is higher on Ethernet1/0 than on Ethernet0/0.

• Question 667:

  Which command configures port security on a switch to enable permanent MAC address learning on the interface?

  A. switchport port-security mac-address-learning enable
  B. switchport port-security mac-address timer 0
  C. switchport port-security mac-address sticky
  D. switchport port-security mac-address maximum 1 sticky
  E. switchport port-security mac-address permanent
  C. switchport port-security mac-address sticky

• Question 668:

  Refer to the exhibit.

  

  Route exchange is failing on a PE edge device configured with this VRF-Lite. Which action can you take to correct the problem?

  A. Configure the vrf-lite capability under the OSPF address families.
  B. Correct the route descriptors.
  C. Correct the OSPF router-ids.
  D. Configure the control plane with a larger memory allocation to allow the device to appear in the routing table.
  A. Configure the vrf-lite capability under the OSPF address families.

  ---

  Open Shortest Path First version 3 (OSPFv3) operates in nondefault VPN routing and forwarding (VRF) instances for both IPv6 and IPv4 address families and, transports the routes across a Border Gateway Protocol (BGP) or a Multiprotocol Label Switching (MPLS) backbone. On the provider edge (PE) device, customer routes are installed together by OSPFv3 and BGP in a common VRF or address family and each protocol is configured to redistribute the routes of the other. BGP combines the prefixes redistributed into it with a route-distinguisher value defined for the VRF and advertises them to other MPLS-BGP speakers in the same autonomous system using the VPNv4 or VPNv6 address family as appropriate. The OSPFv3 route selection algorithm prefers intra-area routes across the back-door link over inter-area routes through the MPLS backbone. Sham-links are a type of virtual link across the MPLS backbone that connect OSPFv3 instances on different PEs. OSPFv3 instances tunnel protocol packets through the backbone and form adjacencies. Because OSPFv3 considers the sham-link as an intra-area connection, sham-link serves as a valid alternative to an intra-area back-door link. Domain IDs are used to determine whether the routes are internal or external. They describe the administrative domain of the OSPFv3 instance from which the route originates. Every PE has a 48-bit primary domain ID (which may be NULL) and zero or more secondary domain IDs. How to Configure VRF-Lite/PE-CE Configuring a VRF in an IPv6 Address Family for OSPFv3 SUMMARY STEPS

  1.

  enable

  2.

  configure terminal

  3.

  vrf definition vrf-name

  4.

  rd route-distinguisher

  5.

  exit

  6.

  router ospfv3 [process-id]

  7.

  address-family ipv6 [unicast] [vrf vrf-name]

  8.

  end

  Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15- sy/iro-15-sy-book/iro-vrf-lite-pe-ce.html

• Question 669:

  Which two statements about the various types or DevOps tools are true? (Choose two )

  A. Puppet requires the installation of a master (server) and agents (clients) architecture for configuring systems.
  B. Salt cannot communicate with clients through general SSH, it use minions client agents only.
  C. Puppet and Chef are written in Python, Python skills are a must to operate these two.
  D. Ansible does not require agent node installation and uses SSH for performing all tasks.
  E. Chef and Puppet are much more attuned to the needs of system administrators.
  A. Puppet requires the installation of a master (server) and agents (clients) architecture for configuring systems.
  D. Ansible does not require agent node installation and uses SSH for performing all tasks.

• Question 670:

  Refer to the exhibit.

  

  What kind of problem is detected?

  A. The packet types that are being sent are unknown.
  B. The maximum MTU size that can be used is 1492.
  C. Waiting for a reply timed out.
  D. Fragmentation starts to occur when the MTU of 1472 is reached.
  B. The maximum MTU size that can be used is 1492.