350-501 practice questions 121–130

1. Question 121 · 377 in bank

   

   Refer to the exhibit. The operations team is implementing an LDP-based configuration in the service provider core network with these requirements: ✑ R1 must establish LDP peering with the loopback IP address as its Router-ID. ✑ Session protection must be enabled on R2. How must the team update the network configuration to successfully enable LDP peering between R1 and R2?

   • AChange the LDP password on R2 to Cisco.
   • BConfigure mpls ldp router-id loopback0 on R1 and R2.
   • CConfigure LDP session protection on R1.
   • DChange the discover hello hold time and interval to their default values.

   Show answer

   Answer: A

   Explanation

   Voting A B- There is no comment about statically set the router-id to lo0, by default LPD will chose the highest IP from a loopback interface unless the Loopback is shut or the router-id is configured C - Session protection is not need it D - timers can be different

   Source: Adapted from community discussion — IcQ

   Next question

2. Question 122 · 377 in bank

   A network engineer is testing an automation platform that interacts with Cisco networking devices via NETCONF over SSH. In accordance with internal security requirements: ✑ NETCONF sessions are permitted only from trusted sources in the 172.16.20.0/24 subnet. ✑ CLI SSH access is permitted from any source. Which configuration must the engineer apply on R1?

   • Aconfigure terminal hostname R1 ip domain-name mydomain.com crypto key generate rsa ip ssh version 1 access-list 1 permit 172.16.20.0 0.0.0.255 netconf ssh acl 1 line vty 0 4 transport input ssh end
   • Bconfigure terminal hostname R1 ip domain-name mydomain.com crypto key generate rsa ip ssh version 2 access-list 1 permit 172.16.20.0 0.0.0.255 access-list 1 permit any netconf ssh line vty 0 4 access-class 1 in transport input ssh end
   • Cconfigure terminal hostname R1 ip domain-name mydomain.com crypto key generate rsa ip ssh version 1 access-list 1 permit 172.16.20.0 0.0.0.255 access-list 2 permit any netconf ssh line vty 0 4 access-class 2 in transport input ssh end
   • Dconfigure terminal hostname R1 ip domain-name mydomain.com crypto key generate rsa ip ssh version 2 access-list 1 permit 172.16.20.0 0.0.0.255 netconf ssh acl 1 line vty 0 4 transport input ssh end

   Show answer

   Answer: D

   Explanation

   Option D Restrict access to netconf ssh using acl 1. (ssh here doesn't mean ssh. it means netconf ssh. This is how you configure netconf) Allow everyone on SSH line: No ACL applied to line vty ==================== configure terminal hostname R1 ip domain-name mydomain.com crypto key generate rsa ip ssh version 2 access-list 1 permit 172.16.20.0 0.0.0.255 netconf ssh acl 1 line vty 0 4 transport input ssh end

   Source: Adapted from community discussion — ccie_race

   Next question

3. Question 123 · 377 in bank

   A network architect decides to expand the scope of the multicast deployment within the company network. The network is already using PIM-SM with a static RP that supports a high-bandwidth, video-based training application that is heavily used by the employees, but excessive bandwidth usage is a concern. How must the engineer update the network to provide a more efficient multicast implementation?

   • AConfigure IGMP to manage the multicast hosts on each LAN.
   • BDeploy ICMP to improve multicast reachability across the network using static RP.
   • CImplement BSR to support dynamic RP notification.
   • DImplement STP to improve switching performance for multicast data.

   Show answer

   Answer: C

   Explanation

   No good answer for this one. The question says "excessive" bandwidth usage is the concern. IGMP snooping will reduce the excessive bandwidth. It also says the RP has a high amount of bandwidth, which implies it can handle the video streaming application. But A says "IGMP" not "IGMP snooping", so this could be one of Cisco's stupid wording tricks to throw you off. I had this question on my exam, and it was worded exactly like this. I went with IGMP snooping, but I'm not 100% sure.

   Source: Adapted from community discussion — karen1337

   Next question

4. Question 124 · 377 in bank

   What is the role of NSO?

   • AProvides public cloud services for customers that need Internet access.
   • BControls the turn-up of a device.
   • CProvides network monitoring services for Layer 3 devices.
   • DMaintains data storage.

   Show answer

   Answer: B

   Next question

5. Question 125 · 377 in bank

   Which configuration enables BGP FlowSpec client function and installation of policies on all local interfaces?

   • Aflowspec address-family ipv4 local-install interface-all
   • Bflowspec address-family ipv4 install interface-all local
   • Cflowspec address-family ipv4 install interface-all
   • Dflowspec address-family ipv4 local-install all-interface

   Show answer

   Answer: A

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-16-6/irg-xe-16-6-book/C3PL-BGP-Flowspec-Client.html

   References

   • Cisco documentation

   Next question

6. Question 126 · 377 in bank

   An engineer is moving all of an organization's Cisco IOS XE BGP routers to the address-family identifier format. Which command should be used to perform this upgrade quickly with the minimum service disruption?

   • Avrf upgrade-cli
   • Bbgp upgrade-cli
   • Caddress-family ipv4
   • Dip bgp-community new-format

   Show answer

   Answer: B

   Explanation

   To upgrade a Network Layer Reachability Information (NLRI) formatted router configuration file to the address-family identifier (AFI) format and set the router command-line interface (CLI) to use only AFI commands, use the bgp upgrade-cli command in router configuration mode. https://www.cisco.com/c/en/us/td/docs/ios/iproute_bgp/command/reference/irg_book/irg_bgp1.html#:~:text=or%20peer%20group.-,bgp%20upgrade%2Dcli,-To%20upgrade%20a

   Source: Adapted from community discussion — thejag

   References

   • Cisco documentation

   Next question

7. Question 127 · 377 in bank

   What is the role of NFVI?

   • Adomain name service
   • Bintrusion detection
   • Cmonitor
   • Dnetwork address translation

   Show answer

   Answer: C

   Explanation

   Vague and unclear question but answer must be C: Key Cisco NFVI roles include: Control (including Networking) Compute Storage Management (including logging, and MONITORING)<<<<<<< https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/net_mgmt/network_function_virtualization_Infrastructure/2_2_x/Cisco_VIM_Install_Guide_2_2_x/Cisco_VIM_Install_Guide_2_2_x_chapter_00.html.xml

   Source: Adapted from community discussion — thejag

   References

   • cisco.com documentation
   • Cisco documentation

   Next question

8. Question 128 · 377 in bank

   A network engineer is implementing NetFlow to observe traffic patterns on the network. The engineer is planning to review the patterns to help plan future strategies for monitoring and preventing congestion as the network grows. If the captures must include BGP next-hop flows, which configuration must the engineer apply to the router?

   • Aip cef ip flow-export version 5 bgp-nexthop ip flow-export destination 192.168.1.1 9995 interface gigabitethernet 1/0/1 ip flow egress
   • Bip cef ip flow-export version 9 bgp-nexthop ip flow-export destination 192.168.1.1 9996 interface gigabitethernet 1/0/1 ip flow ingress
   • Cip cef ip flow-export version 5 ip flow-export destination 192.168.1.1 9995 interface gigabitethernet 1/0/1 ip flow ingress cdp enable
   • Dno ip cef ip flow-export version 9 ip flow-export destination 192.168.1.1 9996 interface gigabitethernet 1/0/1 ip flow ingress ip flow egress

   Show answer

   Answer: B

   Explanation

   Configure NetFlow v9 (Version 9) data export (if only Version 5 is configured, then BGP next hop data is visible in the caches, but is not exported)

   Source: Adapted from community discussion — dydzah

   References

   • Cisco documentation

   Next question

9. Question 129 · 377 in bank

   

   Refer to the exhibit. A network engineer is trying to retrieve SNMP MIBs with RESTCONF on the Cisco switch but fails. End-to-end routing is in place. Which configuration must the engineer implement on the switch to complete the task?

   • Asnmp-server community public RO
   • Bsnmp-server community cisco RW
   • Cnetconf-yang cisco-ia snmp-community-string Public
   • Dnetconf-yang cisco-ia snmp-community-string Private

   Show answer

   Answer: B

   Explanation

   answer is B snmp-server community private RW so netconf-yang config should be netconf-yang cisco-ia snmp-community-string private. since D is private with capital "P", so D is incorrect. option B replace "snmp-server community private RW" become "snmp-server community cisco RW" and it match with "netconf-yang cisco-ia snmp-community-string cisco".

   Source: Adapted from community discussion — cipikacipiki

   Next question

10. Question 130 · 377 in bank

    Select 2

    

    Refer to the exhibit. Users in AS 65010 are connected with the application server in AS 65050 with these requirements: AS 65010 users are experiencing latency and congestion to connect with application server 172.16.50.10.

    

    ✑ AS 65030 must be restricted to become Transient Autonomous System for traffic flow. ✑ Links connected to AS 65020 and AS 65040 are underutilized and must be used efficiently for traffic. Which two configurations must be implemented to meet these requirements? (Choose two.)

    • AApply the AS-Path route-map policy for traffic received from R3.
    • BConfigure the route map to prepend the AS-Path attribute for R5-R3 BGP peering.
    • CApply the MED route-map policy for traffic received from R4.
    • DConfigure a higher Local preference for R5-R4 BGP peering.
    • EConfigure the route map to set the MED 50 attribute for R5-R4 BGP peering.

    Show answer

    Answer: AB

    Explanation

    B and D B. Configure the route map to prepend the AS-Path attribute for R5-R3 BGP peering. [ outgoing traffic of R5 via R4] D. Configure a higher Local preference for R5-R4 BGP peering [incoming traffic to R5 via R4] E is incorrect because MED is not advertised by R4 to other ASs.

    Source: Adapted from community discussion — ccie_race

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-501 practice, question 121. 377 questions available.