Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 671:

  Which two Cisco IOS AAA features are available with the local database? (Choose two.)

  A. command authorization
  B. network access authorization
  C. network accounting
  D. network access authentication
  A. command authorization
  D. network access authentication

  ---

  Configuring the Local Database This section describes how to manage users in the local database. You can use the local database for CLI access authentication, privileged mode authentication, command authorization, network access authentication, and VPN authentication and authorization. You cannot use the local database for network access authorization. The local database does not support accounting.

  Reference: http://www.cisco.com/c/en/us/td/docs/security/asa/asa80/configuration/guide/conf_gd/aaa.h tml

• Question 672:

  Refer to the exhibit.

  

  If the traffic flowing from network 192.168.254.0 to 172.16.250.0 is unencrypted, which two actions must you take to enable encryption? (Choose two).

  A. Configure the transform-set on R2 to match the configuration on R1.
  B. Configure the crypto map on R2 to include the correct subnet.
  C. Configure the ISAKMP policy names to match on R1 and R2.
  D. Configure the crypto map names to match on R1 and R2.
  E. Configure the Diffie-Hellman keys used in the ISAKMP policies to be different on R1 and R2.
  A. Configure the transform-set on R2 to match the configuration on R1.
  B. Configure the crypto map on R2 to include the correct subnet.

  ---

  A transform set combines an encryption method and an authentication method. During the IPsec security association negotiation with ISAKMP, the peers agree to use a particular transform set to protect a particular data flow. The transform set must be the same for both peers. Also, the crypto map on R2 points to the address name of VPN, which includes 172.16.0.0/16, but it should be the local subnet of 192.168.0.0/16

• Question 673:

  Refer to the exhibit.

  

  Why is the neighbor relationship between R1 and R2 and R1 and R3 an L2-type neighborship?

  A. because the area ID on R1 is different as compared to the area ID of R2 and R3
  B. because the circuit type on those three routers is L1/L2
  C. because the network type between R1, R2, and R3 is point-to-point
  D. because the hello interval is not the same on those three routers
  A. because the area ID on R1 is different as compared to the area ID of R2 and R3

  ---

  With IS-IS, an individual router is in only one area, and the border between areas is on the link that connects two routers that are in different areas. A Level 2 router may have neighbors in the same or in different areas, and it has a Level 2 link-state database with all information for inter-area routing. Level 2 routers know about other areas but will not have Level 1 information from its own area.

  Reference: http://www.cisco.com/en/US/products/ps6599/products_white_paper09186a00800a3e6f.sh tml

• Question 674:

  Which two OSPF network types require the use of a DR and BDR? (Choose two.)

  A. non-broadcast networks
  B. point-to-point networks
  C. point-to-multipoint networks
  D. broadcast networks
  E. point-to-multipoint non-broadcast networks
  A. non-broadcast networks
  D. broadcast networks

• Question 675:

  Which three options are characteristics of a Type 10 LSA? (Choose three.)

  A. It is an area-local, opaque LSA.
  B. Data is flooded to all routers in the LSA scope.
  C. It is used for traffic-engineering extensions to OSPF.
  D. It is a link-local, opaque LSA.
  E. Data is flooded only to the routers in the LSA scope that understand the data.
  F. It is used for traffic-engineering extensions to LDP.
  A. It is an area-local, opaque LSA.
  B. Data is flooded to all routers in the LSA scope.
  C. It is used for traffic-engineering extensions to OSPF.

• Question 676:

  DRAG DROP

  Drag and drop the method for refreshing BGP prefixes on the left to the corresponding description on the right.

  Select and Place:

  

  

• Question 677:

  Which three routing protocols utilize TLVs? (Choose three.)

  A. BGP
  B. IS-IS
  C. ODR
  D. OSPF
  E. EIGRP
  F. RIP
  A. BGP
  B. IS-IS
  E. EIGRP

  ---

  IS-IS, originally designed for Open System Interconnection (OSI) routing, uses TLV parameters to carry information in Link State Packets (LSPs). The TLVs make IS-IS extendable. IS-IS can therefore carry different kinds of information in the LSPs. Several routing protocols use TLVs to carry a variety of attributes. Cisco Discovery Protocol (CDP), Label Discovery Protocol (LDP), and Border Gateway Protocol (BGP) are examples of protocols that use TLVs. BGP uses TLVs to carry attributes such as Network Layer Reachability Information (NLRI), Multiple Exit Discriminator (MED), and local pReference: The IP header of the EIGRP packet specifies IP protocol number 88 within it, and the maximum length of the packet will be the IP MTU of the interface on which it is transmitted, most of the time 1500 octets. Following the IP header is the various Type/Length/Value (TLV) triplets. These TLVs will not only carry the route entries but also provide fields for the management of the DUAL process, multicast sequencing, and IOS software versions from the router.

  References: http://www.cisco.com/c/en/us/support/docs/ip/integrated-intermediate-system- to-intermediate-system-is-is/5739-tlvs-5739.html http://ericleahy.com/index.php/eigrp-packets-neighborships/

• Question 678:

  Which two statements about RSTP and MSTP BPDUs are true? (Choose two.)

  A. MSTP switches can detect boundary ports when they receive RSTP version 2 BPDUs.
  B. MSTP switches can detect boundary ports when they receive RSTP version 1 BPDUs.
  C. RSTP switches can process MSTP version 3 BPDUs.
  D. When all boundary switches are running RSTP, MST sends only version 0 configuration BPDUs.
  A. MSTP switches can detect boundary ports when they receive RSTP version 2 BPDUs.
  C. RSTP switches can process MSTP version 3 BPDUs.

  ---

  A switch running both MSTP and RSTP supports a built-in protocol migration mechanism that enables it to interoperate with legacy 802.1D switches. If this switch receives a legacy 802.1D configuration BPDU (a BPDU with the protocol

  version set to 0), it sends only 802.1D BPDUs on that port. An MST switch can also detect that a port is at the boundary of a region when it receives a legacy BPDU, an MST BPDU (version 3) associated with a different region, or an RST

  BPDU (version 2).

  Reference:

  http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2950/software/release/12- 1_9_ea1/configuration/guide/scg/swmstp.html

• Question 679:

  Which component of the BGP ORF can you use to permit and deny routing updates?

  A. match
  B. action
  C. AFI
  D. SAFI
  E. ORF type
  A. match

• Question 680:

  How long will the root bridge continue to send configuration BPDUs to notify all bridges to age out their MAC address tables?

  A. Three times the hello interval
  B. The forward delay + max-age time
  C. The max-age time
  D. The forward delay time
  B. The forward delay + max-age time