Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 861:

  Which two statements about the default SNMP configuration are true? (Choose two.)

  A. The SNMP agent is enabled.
  B. The SNMP trap receiver is configured.
  C. All SNMP notification types are sent.
  D. SNMPv1 is the default version.
  E. SNMPv3 is the default version.
  C. All SNMP notification types are sent.
  D. SNMPv1 is the default version.

  ---

  Default SNMP Configuration

  Feature Default Setting SNMP agent Enabled SNMP community strings Read-Only: Public Read-WritE. Private Read-Write-all: Secret SNMP trap receiver None configured SNMP traps None enabled SNMP version If no version keyword is present, the default is version 1. SNMPv3 authentication If no keyword is entered, the default is the noauth (noAuthNoPriv) security level. SNMP notification type If no type is specified, all notifications are sent. Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2950/software/release/12- 1_19_ea1/configuration/guide/2950scg/swsnmp.html

• Question 862:

  Refer to the exhibit.

  

  Which statement is true?

  A. BGP peer 10.1.2.3 is performing inbound filtering.
  B. BGP peer 10.1.2.3 is a route reflector.
  C. R1 is a route reflector, but BGP peer 10.1.2.3 is not a route reflector client.
  D. R1 still needs to send an update to the BGP peer 10.1.2.3.
  D. R1 still needs to send an update to the BGP peer 10.1.2.3.

  ---

  On R1 the routing table version (Tbl Ver) for 10.1.2.3 is 1, other routers have version 2, so it needs to send an update to the 10.1.2.3 peer.

• Question 863:

  Which BGP feature allows BGP routing tables to be refreshed without impacting established BGP sessions?

  A. BGP synchronization
  B. soft reconfiguration
  C. confederations
  D. hard reset
  B. soft reconfiguration

  ---

  Clearing a BGP session using a hard reset invalidates the cache and results in a negative impact on the operation of networks as the information in the cache becomes unavailable. Soft reset is recommended because it allows routing tables to be reconfigured and activated without clearing the BGP session. Soft reset is done on a per-neighbor basis.

  Reference: http://www.cisco.com/en/US/products/ps6599/products_data_sheet09186a0080087b3a.ht ml

• Question 864:

  Refer to the exhibit.

  

  All switches have default bridge priorities, and originate BPDUs with MAC addresses as indicated. The numbers shown are STP link metrics. Which two ports are in blocking state after STP converges? (Choose two.)

  A. the port on switch SWD that connects to switch SWE
  B. the port on switch SWF that connects to switch SWG
  C. the port on switch SWD that connects to switch SWC
  D. the port on switch SWB that connects to switch SWD
  C. the port on switch SWD that connects to switch SWC
  D. the port on switch SWB that connects to switch SWD

  ---

  This is a scenario that wants you to demonstrate understanding of the Root switch and Root port election process. So, it's best to start with where the root switch will be and work down from there. It's setup nicely because the lowest MAC address switch starts at the top and then the lower priority/higher mac addresses move down the architecture. SWA wins the root election and of course all ports in SWA are forwarding. SWB introduces the possibility for a switching loop so it's important to understand which ports will be put into the blocking state. Since SWD is a higher MAC address it will end up with a blocked port connected to SWB to prevent a loop: and this is one of the correct answers. To prevent the possibility of another potential switching loop, SWD again ends up with the higher MAC address so blocking the link between D and C prevents a B/C/D switching loop.

• Question 865:

  If MPLS label packets are swapped, what happens to the TTL value?

  A. It is preserved.
  B. It is set to 255.
  C. It is decremented.
  D. It is set to zero.
  C. It is decremented.

• Question 866:

  DRAG DROP

  Drag each AF class on the left to its matching DSCP binary value on the right.

  Select and Place:

  

  

• Question 867:

  What is the destination multicast MAC address for BPDUs on the native VLAN, for a switch that is running 802.1D?

  A. 0185. C400. 0000
  B. 0100.0CCC.CCCC
  C. 0100.0CCC.CCCD
  D. 0180.C200.0000
  D. 0180.C200.0000

  ---

  If the native vlan is 1:

  A STP BPDU for VLAN 1 will be sent untagged to MAC 0180.c200.0000 (this is the common spanning tree) A PVST+ BPDU for VLAN 1 will be sent untagged to MAC 0100.0ccc.cccd A PVST+ BPDU for all other vlans will be sent with a

  802.1Q tag to MAC 0100.0ccc.cccd (with a PVID = to the VLAN)

  If the native vlan is not 1:

  A STP BPDU for VLAN 1 will be sent untagged (on the native vlan) to MAC 0180.c200.0000 (this is the common spanning tree) A PVST+ BPDU for VLAN1 will be sent with a 802.1Q tag to MAC 0100.0ccc.cccd (with a PVID=1) A PVST+

  BPDU for the native vlan will be sent untagged to MAC 0100.0ccc.cccd (with a PVID=native vlan) A PVST+ BPDU for all other vlans will be sent with a 802.1Q tag to MAC 0100.0ccc.cccd (with a PVID = to the VLAN)

• Question 868:

  Which three statements are functions that are performed by IKE phase 1? (Choose three.)

  A. It builds a secure tunnel to negotiate IKE phase 1 parameters.
  B. It establishes IPsec security associations.
  C. It authenticates the identities of the IPsec peers.
  D. It protects the IKE exchange by negotiating a matching IKE SA policy.
  E. It protects the identities of IPsec peers.
  F. It negotiates IPsec SA parameters.
  C. It authenticates the identities of the IPsec peers.
  D. It protects the IKE exchange by negotiating a matching IKE SA policy.
  E. It protects the identities of IPsec peers.

  ---

  The basic purpose of IKE phase 1 is to authenticate the IPSec peers and to set up a secure channel between the peers to enable IKE exchanges. IKE phase 1 performs the following functions: Authenticates and protects the identities of the IPSec peers Negotiates a matching IKE SA policy between peers to protect the IKE exchange Performs an authenticated Diffie-Hellman exchange with the end result of having matching shared secret keys Sets up a secure tunnel to negotiate IKE phase 2 parameters

  Reference: http://www.ciscopress.com/articles/article.asp?p=25474andseqNum=7

• Question 869:

  Refer to the exhibit.

  

  While reviewing a log file on a router with this NTP configuration, you note that the log entries of the router display a different time than the NTP time.

  Which action can you take to correct the problem?

  A. Add the localtime keyword to the service timestamps log datetime statement.
  B. Add the msec keyword to the service timestamps log datetime statement.
  C. Add the statement ntp broadcast to the NTP configuration of the neighboring router.
  D. Configure the router to be the NTP master.
  E. Remove the datetime keyword from the service timestamps log datetime statement.
  A. Add the localtime keyword to the service timestamps log datetime statement.

• Question 870:

  Which option describes how a router responds if LSA throttling is configured and it receives the identical LSA before the interval is set?

  A. The LSA is added to the OSPF database and a notification is sent to the sending router to slow down its LSA packet updates.
  B. The LSA is added to the OSPF database.
  C. The LSA is ignored.
  D. The LSA is ignored and a notification is sent to the sending router to slow down its LSA packet updates.
  C. The LSA is ignored.

  ---

  How OSPF LSA Throttling Works The timers throttle lsa all command controls the generation (sending) of LSAs. The first LSA is always generated immediately upon an OSPF topology change, and the next LSA generated is controlled by the minimum start interval. The subsequent LSAs generated for the same LSA are rate-limited until the maximum interval is reached. The "same LSA" is defined as an LSA instance that contains the same LSA ID number, LSA type, and advertising router ID. The timers LSA arrival command controls the minimum interval for accepting the same LSA. If an instance of the same LSA arrives sooner than the interval that is set, the LSA is dropped. It is recommended that the arrival interval be less than or equal to the hold-time interval of the timers throttle lsa all command.

  Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/fsolsath.html