300-420 practice questions 181–190

1. Question 181 · 359 in bank

   When differentiating between IETF, OpenConfig, and Cisco native YANG models, how does the use of containers differ?

   • AIETF and Cisco native models use one container for operational data and another container for configuration data, and OpenConfig uses a single container for operational data and configuration data.
   • BOpenConfig uses one container for operational data and another container for configuration data, and IETF and Cisco native models use a single container for operational data and configuration data.
   • CCisco native models use one container for operational data and another container for configuration data, and OpenConfig and IETF use a single container for operational data and configuration data.
   • DIETF and Cisco native models use a single container for operational data and configuration data, and OpenConfig uses one container for operational data and another container for configuration data.

   Show answer

   Answer: A

   Explanation

   Given answer is correct. "Note: The IETF and Native models for IOS XE use separate containers/models for operational data and configuration data, while the OpenConfig combines both config and operational data into the same container." https://blogs.cisco.com/developer/which-yang-model-to-use

   Source: Adapted from community discussion — reheheeeehe

   References

   • cisco.com documentation

   Next question

2. Question 182 · 359 in bank

   An engineer must connect a new remote site to an existing OSPF network. The new site consists of two low-end routers, one for WAN, and one for LAN. There is no demand for traffic to pass through this area. Which area type does the engineer choose to provide minimal router resource utilization, while still allowing for full connectivity to the rest of the network?

   • Anot so stubby
   • Btotally not so stubby
   • Ctotally stubby area
   • Dstubby area

   Show answer

   Answer: C

   Explanation

   “There is no demand for traffic to pass through this area.” So we know from this that an NSSA or a totally not so stubby area is needed. NSSA’s or totally NSSA’s are only needed if routes are being injected into the OSPF domain. So A and B are not correct. C and D are both similar in that they both do not inject Type 5 LSA, which would keep router utilization down. However, if we desire to cut down on as many LSA’s as possible, which would then cut down on the router utilization due to the OSPF routers not having to run the SPF calculation, then answer C is MOST correct. A totally stubby area restricts not only type 5, but also type 4 and type 3 LSA’s. Since the requirement states “provide minimal resource utilization” answer C “totally stubby area” is correct.

   Source: Adapted from community discussion — iLikeHamburgers

   Next question

3. Question 183 · 359 in bank

   Refer to the exhibit.

   

   A Cisco Catalyst switch is configured to allow only one MAC address to be learned manually on interface gig0/2. Which command must be run to dynamically learn the devices that are connected to the switch port?

   • Aswitchport port-security mac-address sticky
   • Bswitchport port-security mac-address auto
   • Cswitchport port-security aging
   • Dswitchport port-security maximum 1 auto

   Show answer

   Answer: A

   Next question

4. Question 184 · 359 in bank

   

   Refer to the exhibit. A customer is planning to deploy a new branch in New York. The new office will not exceed 1024 users. Which subnet must be used to provide maximum number of host addresses while not providing more than necessary?

   • A192.168.8.0/22
   • B192.168.16.0/21
   • C192.168.8.0/21
   • D192.168.16.0/22

   Show answer

   Answer: B

   Next question

5. Question 185 · 359 in bank

   A company’s branch location uses redundant routers and links for connectivity to the headquarters. Also, to use the entire available bandwidth, the branch uses a dynamic routing protocol. An architect must design a multicast streaming solution to avoid RPF check failures because of the current network design. Which deployment model must the architect choose?

   • APIM-BSR
   • BBIDIR-PIM
   • CPIM-SM
   • DPIM-SSM

   Show answer

   Answer: B

   Next question

6. Question 186 · 359 in bank

   

   Refer to the exhibit. A network engineer working for a private service provider with an employee ID: 1234:56:789 must design a BGP solution based on: • All traffic originating from AS100 must pass through AS200 to reach the NTP and DHCP server • When a link failure occurs between R3 and R4, traffic must follow the R2-R9 link to reach the NTP and DHCP server Which solution must the design include?

   • ARouters R3 and R10 advertise an IGP metric into BGP during redistribution in both directions
   • BRouter R6 influences the paths of R9 and R11 to the DC with a higher AS-PATH value
   • CRouters R3 and R10 advertise a lower local preference for outgoing traffic and a higher AS-PATH value for incoming traffic
   • DRouter R3 applies a local preference of 200 for R1, R2, R9, and R11 routers to reach the data center

   Show answer

   Answer: D

   Next question

7. Question 187 · 359 in bank

   DRAG DROP - An engineer is designing an addressing plan for a small business using a single /24 network. Each department must have its own subnet. Drag and drop the subnets from the left onto the requirements of the department they fulfill on the right. Not all options are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

8. Question 188 · 359 in bank

   

   Refer to the exhibit. An architect is designing a BGP solution to connect a remote branch to a service provider. There are several prefixes within the branch that the company does not want to be advertised to the Internet. Which solution should the architect use to accomplish this?

   • AAttach the No-Export community with the prefixes to exclude.
   • BUse the BGP No-Advertise community for the prefixes to exclude.
   • CSet the BGP Internet community for all prefixes.
   • DImplement the NOPEER community.

   Show answer

   Answer: A

   Explanation

   Both A and B will get the job done, as they both will keep Branch A prefixes from being advertised to the internet, however there is a fundamental difference in what happens after the prefix is advertised to ISP A. If the No-Export community is used, then the prefixes will only be advertised to other BGP speakers with the same AS as ISP A. Which means the prefix will not be advertised to the internet but will be advertised within ISP A’s network which would be ideal. If the No-Advertise community is used, then only the BGP router that is peered with Branch A will have the routes. And while it won’t advertise these prefixes to the internet, it also won’t advertise them to any other routers with the same AS as it (ISP A). This would keep all other routers inside of ISP A from learning the routes, which is not ideal from a failover perspective.

   Source: Adapted from community discussion — iLikeHamburgers

   Next question

9. Question 189 · 359 in bank

   Which AES mode should be used in a Cisco SD-WAN environment that includes multicast applications?

   • AElectronic Code Book (ECB)
   • BCipher Feedback (CFB)
   • CCipher Block Chaining (CBC)
   • DGalois/Counter Mode (GCM)

   Show answer

   Answer: D

   Explanation

   According to the below link, it depends on the SD-WAN release...go figure....so C and D I guess are both correct in a way or the other.....but will go with D since in C its a combination of CBC and HMAC For multicast traffic: Cisco SD-WAN Release 20.1.x and later– the encryption algorithm is AES-256-GCM Previous releases– the encryption algorithm is AES-256-CBC with SHA1-HMAC https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge-20-x/security-book/config-sec-param.html#:~:text=For%20unicast%20traffic%2C%20the%20encryption,algorithm%20is%20AES%2D256%2DGCM

   Source: Adapted from community discussion — 26d13e9

   References

   • Cisco documentation

   Next question

10. Question 190 · 359 in bank

    

    Refer to the exhibit. An engineer must connect the IPv6 island to the IPv4-only network to provide IPv6 hosts access to file servers and DNS services in the IPv4 network. Which NAT should the engineer choose?

    • Astateless NAT66
    • Bstateful NAT66
    • Cdynamic NAT-PT
    • Dstatic NAT-PT

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-420 practice, question 181. 359 questions available.