350-501 practice questions 111–120

1. Question 111 · 377 in bank

   An engineer is developing a configuration script to enable dial-out telemetry streams using gRPC on several new devices. TLS must be disabled on the devices. Which configuration must the engineer apply on the network?

   • Atelemetry model-driven destination-group ciscotest address-family ipv4 192.168.1.0 port 57500 encoding self-describing-gpb protocol grpc tls-hostname ciscotest.com commit
   • Btelemetry model-driven destination-group DGroup1 address-family ipv4 172.0.0.0 port 5432 encoding self-describing-gpb protocol tcp commit
   • Ctelemetry model-driven destination-group ciscotest address-family ipv4 192.168.1.0 port 57500 encoding self-describing-gpb protocol grpc no-tls commit
   • Dtelemetry model-driven destination-group ciscotest address-family ipv4 192.168.1.0 port 57500 encoding self-describing-gpb protocol grpc commit

   Show answer

   Answer: C

   Explanation

   It's C. https://www.cisco.com/c/en/us/td/docs/iosxr/ncs5500/telemetry/65x/b-telemetry-cg-ncs5500-65x/b-telemetry-cg-ncs5500-65x_chapter_010.html You can see: The following example shows a destination group DGroup2 created for gRPC dial-out configuration with key-value GPB encoding, and with tls disabled: Router(config)#telemetry model-driven Router(config-model-driven)#destination-group DGroup2 Router(config-model-driven-dest)#address family ipv4 172.0.0.0 port 57500 Router(config-model-driven-dest-addr)#encoding self-describing-gpb Router(config-model-driven-dest-addr)#protocol grpc no-tls Router(config-model-driven-dest-addr)#commit

   Source: Adapted from community discussion — Panterarossa

   References

   • Cisco documentation

   Next question

2. Question 112 · 377 in bank

   Which additional configuration is required for NetFlow to provide traceback information?

   • AA classification ACL must be configured to identity which type of traffic will be analyzed.
   • BThe BGP routing process must be started for any ingress or egress data to be reported when using NetFlow Version 5.
   • CCisco Express Forwarding must be configured for traffic that is egressing from the router to be property reported.
   • DLLDP must be configured or the device will be unable to locate a NetFlow analyzer.

   Show answer

   Answer: C

   Explanation

   Well I am not sure it is C anymore. I believe it is a tricky question and I would go for A. CEF is a prerequisite for Netflow as stated by elroy999. However, the question says "Which ADDITIONAL configuration is required for Netflow..." which implicit means Netflow is already working properly (so prerequesites as CEF are already met). And the link provided by Penguin is specifically on traceback: Traffic Identification and Traceback At times, you can need to quickly identify and traceback network traffic, especially during incident response or poor network performance. NetFlow and Classification ACLs are the two primary methods to accomplish this with Cisco IOS software. NetFlow can provide visibility into all traffic on the network. Additionally, NetFlow can be implemented with collectors that can provide long-term trending and automated analysis. Classification ACLs are a component of ACLs and require pre-planning to identify specific traffic and manual intervention during analysis. These sections provide a brief overview of each feature. I believe A is the correct answer.

   Source: Adapted from community discussion — RogerForce

   References

   • Cisco documentation
   • Cisco documentation

   Next question

3. Question 113 · 377 in bank

   What do Chef and Puppet have in common?

   • Ause Ruby
   • Brequire modules to be created from scratch
   • Cuse a master server
   • Dmanage agents referred to as minions

   Show answer

   Answer: A

   Next question

4. Question 114 · 377 in bank

   How do intent APIs make it easier for network engineers to deploy and manage networks?

   • AThey pull stored SNMP data from a single network location to multiple monitoring tools.
   • BThey allow the engineer to use a single interface as the entry point for control access to the entire device.
   • CThey streamline repetitive workflows and support more efficient implementation.
   • DThey extend the Layer 2 infrastructure and reduce the necessary number of virtual connections to Layer 3 devices.

   Show answer

   Answer: C

   Explanation

   C is correct: Intent APIs simplify the process of creating workflows that consolidate multiple network actions. Thus, intent APIs create a shift from doing repetitive tasks to creating value-added solutions.

   Source: Adapted from community discussion — knmodi

   References

   • cisco.com documentation

   Next question

5. Question 115 · 377 in bank

   

   Refer to the exhibit. What does this REST API script configure?

   • AVRF
   • Binterface with IP address 192.168.0.1
   • Capplication profile
   • Dpublic community string for SNMP

   Show answer

   Answer: A

   Explanation

   From this link: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/rest-api-config/Cisco-APIC-REST-API-Configuration-Guide-401/Cisco-APIC-REST-API-Configuration-Guide-401_chapter_01101.html Configure the tenant, VRF, and bridge domain. (Answer A) The example is pretty much identical to the question. Now, on step 3 of link: Configure the node and interface. This example configures VRF v1 on node 103 (the border leaf switch), with the node profile, nodep1, and router ID 11.11.11.103. It also configures interface eth1/3 as a routed interface (Layer 3 port), with IP address 12.12.12.1/24 and Layer 3 domain dom1. Clearly, what the step said is configure node and INTERFACE. Basically Answer B is talking about this one. Correct answer is A.

   Source: Adapted from community discussion — Seele

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 116 · 377 in bank

   Which MPLS design attribute can you use to provide Internet access to a major customer through a separate dedicated VPN?

   • AThe Internet gateway router is connected as a PE router to the MPLS backbone.
   • BThe CE router supports VRF-Lite and the full BGP routing table.
   • CThe Internet gateway inserts the full Internet BGP routing table into the Internet access VPN.
   • DThe customer that needs the Internet access service is assigned to the same RTs as the Internet gateway.

   Show answer

   Answer: D

   Explanation

   D is correct. Keywords: MPLS design attribute via separate dedicated VPN. A is wrong because Service Provider will not allow the internet gateway router (CE) connecting to their MPLS backbone for security reason. Also not practical and will complicate Service Provider service construct. B is wrong because you don't need the full BGP routing table and VRF lite to have internet access. C is wrong for same reason as B, that you don't need full internet routing table to be able to access internet. D is correct, simple and straightforward, making use of mpls vrf/vpn route targets

   Source: Adapted from community discussion — chelgeorge

   References

   • cisco.com documentation

   Next question

7. Question 117 · 377 in bank

   

   Refer to the exhibit. An Ethernet access provider is configuring routers PE-1 and PE-2 to provide E-Access EVPL service between UNI and ENNI. ENNI service multiplexing is based on 802.1ad tag 150, and service-multiplexed UNI is based on 802.1q tag 10. Which EFP configurations must the provider implement on PE-1 and PE-2 to establish end-to-end connectivity between CE-1 and CE-2?

   • AOn PE-1: interface GigabitEthernet2 service instance 100 ethernet encapsulation dot1ad 150 rewrite ingress tag pop 1 symmetric On PE-2: interface GigabitEthernet2 service instance 2 ethernet encapsulation dot1q 10
   • BOn PE-1: interface GigabitEthernet2 service instance 100 ethernet encapsulation dot1q 150 rewrite ingress tag pop 1 symmetric On PE-2: interface GigabitEthernet2 service instance 2 ethernet encapsulation dot1q 10
   • COn PE-1: interface GigabitEthernet2 service instance 100 ethernet encapsulation dot1ad 150 dot1q 10 rewrite ingress tag pop 2 symmetric On PE-2: interface GigabitEthernet2 service instance 2 ethernet encapsulation dot1q 10
   • DOn PE-1: interface GigabitEthernet2 service instance 100 ethernet encapsulation dot1ad 150 rewrite ingress tag pop 1 symmetric On PE-2: interface GigabitEthernet2 service instance 2 ethernet encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric

   Show answer

   Answer: A

   Explanation

   Well, I agree that none of the answers are correct, but the command on PE2 should be rewrite ingress tag pop 1 symmetric to keep tag 10: https://www.cisco.com/c/en/us/td/docs/routers/asr920/configuration/guide/ce/17-1-1/b-ce-xe-17-1-asr920/b-ce-xe-17-1-asr920_chapter_010.html "Rewrite Operations You can use the rewrite command to modify packet VLAN tags. You can use this command to emulate traditional 802.1Q tagging, where packets enter a router on the native VLAN and VLAN tagging properties are added on egress. You can also use the rewrite command to facilitate VLAN translation and QinQ. The supported rewrite commands: rewrite ingress tag pop 1 symmetric rewrite ingress tag pop 2 symmetric rewrite ingress tag push dot1q vlan-id symmetric Enter the rewrite ingress tag pop {1 | 2} symmetric service-instance configuration mode command to specify the encapsulation adjustment to be performed on the frame ingress to the EFP. Entering pop 1 pops (removes) the outermost tag; entering pop 2 removes two outermost tags."

   Source: Adapted from community discussion — ariasse

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

8. Question 118 · 377 in bank

   

   Refer to the exhibit. An administrator working for large ISP must connect its two POP sites to provide internet connectivity to its customers. Which configuration must the administrator perform to establish an iBGP session between routers PE1 on POP site 1 and PE2 on POP site 2?

   • APE2#configure terminal PE2(config)#router bgp 65111 PE2(config-router)#no neighbor 172.18.10.1 shutdown PE2(config-router)#end
   • BPE1#configure terminal PE1(config)#router bgp 65111 PE1(config-router)#no neighbor 172.19.10.10 shutdown PE1(config-router)#end
   • CPE1#configure terminal PE1(config)#router bgp 65111 PE1(config-router)#address-family ipv4 unicast PE1(config-router-af)#neighbor 172.19.10.10 activate PE1(config-router-af)#end
   • DPE2#configure terminal PE2(config)#router bgp 65111 PE2(config-router)#address-family ipv4 unicast PE2(config-router-af)#neighbor 172.18.10.1 activate PE2(config-router-af)#end

   Show answer

   Answer: D

   Explanation

   Answer is D. If you shutdown the neighbor it is shutdown for all AF, so A and B can not be the solution as both would have to be IDLE if the peer was shutdown on PE2. Since the configuration is from the perspective of PE1, if it was no active under the IPv4 AF on PE1, it would not show up in a 'sh bgp * all sum" output, IPv4 would be missing. Meaning it is active on PE1 and not active on PE2 and needs to be neighbor active on PE2.

   Source: Adapted from community discussion — nottoday2077

   Next question

9. Question 119 · 377 in bank

   Select 2

   What are two features of stateful NAT64? (Choose two.)

   • AIt uses address overloading.
   • BIt provides 1:N translations, so it supports an unlimited number of endpoints.
   • CIt requires IPv4-translatable IPv6 address assignments.
   • DIt requires the IPv6 hosts to use either DHCPv6-based address assignments or manual address assignments.
   • EIt provides 1:1 translation, so it supports a limited number of endpoints.

   Show answer

   Answer: AB

   Explanation

   Stateless versus Stateful NAT64 Comparison Stateless NAT64 * 1:1 translation * No conservation of IPv4 address * Assures end-to-end address transparency and scalability * No state or bindings created on the translation * Requires IPv4-translatable IPv6 address assignment (mandatory requirement) * Requires either manual or DHCPv6-based address assignment for IPv6 hosts Stateful NAT64 * 1:N translation * Conserves IPv4 address * Uses address overloading, so it lacks an end-to-end address transparency * State or bindings are created on every unique translation * No requirement on the nature of IPv6 address assignment * Free to choose any mode of IPv6 address assignment (DHCPv6 and stateless autoconfiguration)

   Source: Adapted from community discussion — Worgen44

   Next question

10. Question 120 · 377 in bank

    

    Refer to the exhibit. An engineer working for a private telecommunication company with an employee id: 3414:81:713 is implementing this network, in which: ✑ Routers R1A and R1B are eBGP neighbors. ✑ iBGP is configured within AS 65515 and AS 65516. ✑ Network 192.168.2.0/24 is shared with AS 65516. ✑ Router R3A has an iBGP relationship with router R2A only. ✑ Router R2A has an iBGP relationship with routers R1A and R3A. Which additional task must the engineer perform to complete the configuration?

    • AConfigure router R2A to use the next-hop-self attribute when advertising the learned route to router R1A.
    • BConfigure router R3A to redistribute route 192.168.2.0/24 into the configured IGP to advertise the prefix to router R1A.
    • CConfigure router R2A as a route reflector to advertise the iBGP learned prefix from router R3A to R1A.
    • DConfigure router R1A with a static route to 192.168.2.0/24 that is redistributed into BGP.

    Show answer

    Answer: C

    Explanation

    Answer: C Because of the "BGP Split Horizon Rule," R2A will not advertise the learned rotuer from iBGP (R3A) to iBGP (R1A).

    Source: Adapted from community discussion — sushil_bhattacharjee

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-501 practice, question 111. 377 questions available.