350-501 practice questions 151–160

1. Question 151 · 377 in bank

   

   Refer to the exhibit. ISP A provides VPLS services and DDoS protection to Company XYZ to connect their branches across the North America and Europe regions. The uplink from the data center to the ISP is 100 Mbps. The Company XYZ security team asked the ISP to redirect ICMP echo requests, which are currently going to the web server, to a new local security appliance. Which configuration must an ISP engineer apply to router R2 to redirect the ICMP traffic?

   • Aclass-map type traffic match-all B_210.10.65.1 match destination-address ipv4 210.10.65.1 match protocol 7 match ipv4 icmp-type 3
   • Bclass-map type traffic match-all B_210.10.65.1 match destination-address ipv4 210.10.65.1 match protocol 1 match ipv4 icmp-type 8
   • Cclass-map type traffic match-all B_210.10.65.1 match destination-address ipv4 210.10.65.1 match protocol 3 match ipv4 icmp-type 5
   • Dclass-map type traffic match-all B_210.10.65.1 match destination-address ipv4 210.10.65.1 match protocol 6 match ipv4 icmp-type 9

   Show answer

   Answer: B

   Explanation

   A. class-map type traffic match-all B_210.10.65.1 match destination-address ipv4 210.10.65.1 match protocol 7 match ipv4 icmp-type 3 B. class-map type traffic match-all B_210.10.65.1 match destination-address ipv4 210.10.65.1 match protocol 1 match ipv4 icmp-type 8 C. class-map type traffic match-all B_210.10.65.1 match destination-address ipv4 210.10.65.1 match protocol 3 match ipv4 icmp-type 5 D. class-map type traffic match-all B_210.10.65.1 match destination-address ipv4 210.10.65.1 match protocol 6 match ipv4 icmp-type 9

   Source: Adapted from community discussion — thejag

   Next question

2. Question 152 · 377 in bank

   

   Refer to the exhibit. A network engineer must configure XR-PE1 for uninterruptible failover from the active RP to the standby RP. Neither peer device C-GW1 nor the core network of ASN 64512 support grateful restart extensions. Which configuration must the engineer apply to XR-PE1 to complete the task?

   • Ansr process-failures switchover router ospf 100 nsf cisco
   • Brouter bgp 64512 nsr router ospf 100 nsr mpls ldp nsr
   • Cnsr process-failures switchover router bgp 64512 nsr router ospf 100 nsr mpls ldp nsr
   • Dnsr process-failures switchover router ospf 100 nsf letf

   Show answer

   Answer: B

   Explanation

   A. nsr process-failures switchover router ospf 100 nsf cisco B. router bgp 64512 nsr router ospf 100 nsr mpls ldp nsr C. nsr process-failures switchover router bgp 64512 nsr router ospf 100 nsr mpls ldp nsr D. nsr process-failures switchover router ospf 100 nsf ietf With NSF, both peers must be graceful restart capable/aware => neither A nor B To activate NSR, you have to enable the functionality in the global configuration "D. nsr process-failures switchover" and in the supported routing protocols (BGP, OSPF and LDP) with the command "nsr" Correct answer is C

   Source: Adapted from community discussion — Iroel

   References

   • Cisco documentation

   Next question

3. Question 153 · 377 in bank

   A customer has requested that the service provider use a Cisco MPLS TE tunnel to force the E-Line service to take a specific route. What is used to send the traffic over the tunnel?

   • Aforwarding adjacency
   • Bautoroute destination
   • Cpreferred path
   • Dstatic route

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

4. Question 154 · 377 in bank

   When Cisco IOS XE REST API uses HTTP request methods, what is the purpose of a PUT request?

   • Aupdates the specified resource with new information
   • Bcreates a new resource
   • Csubmits data to be processed to the specified resource
   • Dretrieves the specified resource or representation

   Show answer

   Answer: A

   Explanation

   A PUT -- Update (Remember word U is common in PUT and UPDATE) POST - Create new data GET - Retrieve data DELETE - Delete data

   Source: Adapted from community discussion — ccie_race

   Next question

5. Question 155 · 377 in bank

   

   Refer to the exhibit. A large organization is merging the network assets of a recently acquired competitor with one of its own satellite offices in the same geographic area. The newly acquired network is running a different routing protocol than the company's primary network. As part of the merger, a network engineer implemented this route map. Which task must the engineer perform to complete the implementation?

   • AAttach the route map to the redistribution command to manipulate the routes as they are shared.
   • BEnable metric-style wide to allow the use of extended metrics from the protocols.
   • CConfigure an additional route map sequence to override the implicit deny at the end of the route map.
   • DAttach the route map to an IS-IS network statement to advertise the routes learned on this interface to IS-IS.

   Show answer

   Answer: B

   Explanation

   answer is B : Kindly note that to use the route tagging feature in IS-IS, you must change to the 'metric-style wide command' from 'metric-style narrow' command which is configured by default under the ISIS router configuration. The tag value is set into sub-TLV 1 for type, length, values (TLV) Type 135.

   Source: Adapted from community discussion — 12_sdeEQ

   References

   • Cisco documentation

   Next question

6. Question 156 · 377 in bank

   

   Refer to the exhibit. Which effect of this configuration is true?

   • AIt enables MPLS on the interface.
   • BIt creates a pseudowire class named cisco.
   • CIt enables AToM on interface gigabitethernet1/0.
   • DIt enables tagging for VLAN 12 on the interface.

   Show answer

   Answer: C

   Explanation

   It does not create a pseudowire class named cisco. It is just referencing the class to use that should be created separately. Output from an ASR-920 (IOS-XE): Router(config-if)#xconnect 1.1.1.1 1 pw-class ? WORD Pseudowire-class name Router(config-if)#xconnect 1.1.1.1 1 pw-class cisco Please make sure pw-class cisco is configured Please make sure pw-class cisco is configured and valid [Unknown pseudo-wire class name]

   Source: Adapted from community discussion — nottoday2077

   References

   • Cisco documentation
   • Cisco documentation

   Next question

7. Question 157 · 377 in bank

   A network engineer must configure a router for Flexible NetFlow IPFIX export. The IP address of the destination server is 172.17.12.1. The source address must be set to the Loopback0 IPv4 address and exported packets must be set to DSCP CS3. The TTL must be 64 and the transport protocol must be set to UDP with destination port 4739. Which configuration must the engineer apply to the router?

   • Aconfigure terminal flow exporter EXPORTER-1 destination 172.17.12.1 source Loopback0 dscp 3 ttl 64 export-protocol netflow-v9 transport udp 4739 end
   • Bconfigure terminal flow exporter EXPORTER-1 destination 172.17.12.1 source Loopback0 dscp 24 ttl 64 export-protocol ipfix end
   • Cconfigure terminal flow exporter EXPORTER-1 destination 172.17.12.1 source Loopback0 dscp 24 ttl 64 export-protocol netflow-v9 transport udp 4739 end
   • Dconfigure terminal flow exporter EXPORTER-1 destination 172.17.12.1 source Loopback0 dscp 3 ttl 64 export-protocol ipfix end

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

8. Question 158 · 377 in bank

   A network administrator is planning a new network with a segment-routing architecture using a distributed control plane. How is routing information distributed on such a network?

   • AEach segment is signaled by a compatible routing protocol, and each segment makes its own steering decisions based on SR policy.
   • BEach segment is signaled by MPLS, and each segment makes steering decisions based on the routing policy pushed by BGP.
   • CEach segment is signaled by an SR controller, but each segment makes its own steering decisions based on SR policy.
   • DEach segment is signaled by an SR controller that makes the steering decisions for each node.

   Show answer

   Answer: A

   Explanation

   Excerpt > In a distributed scenario, the segments are allocated and signaled by IS-IS or OSPF or BGP. A node individually decides to steer packets on an SR Policy (e.g., pre-computed local protection [RFC8355]). A node individually computes the SR Policy.

   Source: Adapted from community discussion — Jondal

   References

   • Cisco documentation
   • RFC Editor

   Next question

9. Question 159 · 377 in bank

   

   Refer to the exhibit. The network team must implement MPLS LDP session protection with two requirements: ✑ Session protection is provided for core loopback IP addresses only. ✑ The LDP session must remain operational for one hour when the WAN link on PE-XR1 fails. Which configuration must the team implement on PE-XR1?

   • Aconfigure terminal ipv4 access-list LDP-SESSION-PROTECTION permit ipv4 172.31.255.0 0.0.0.255 any ! mpls ldp session protection for LDP-SESSION-PROTECTION duration 60 end
   • Bconfigure terminal ipv4 access-list LDP-SESSION-PROTECTION permit ipv4 172.31.255.0 0.0.0.255 any ! mpls ldp session protection for LDP-SESSION-PROTECTION duration 3600 end
   • Cconfigure terminal ipv4 access-list LDP-SESSION-PROTECTION permit ipv4 172.31.255.0 0.0.0.255 any permit ipv4 10.0.0.0 0.0.255.255 any ! mpls ldp session protection for LDP-SESSION-PROTECTION duration 60 end
   • Dconfigure terminal ipv4 access-list LDP-SESSION-PROTECTION permit ipv4 172.31.255.0 0.0.0.255 any permit ipv4 10.0.0.0 0.0.255.255 any ! mpls ldp session protection for LDP-SESSION-PROTECTION duration 3600 end

   Show answer

   Answer: B

   Next question

10. Question 160 · 377 in bank

    

    Refer to the exhibit. A network support engineer for ASN 65502 receives a technical support ticket from a customer in ASN 65503 who reports that an eBGP session is down. The engineer determines that the peering failed after a recent change to the device at 192.168.26.2. EDGE-GW-1 must establish an eBGP session with the peering router 192.168.26.2. Which configuration establishes this session?

    • Aconfigure terminal no router bgp 65502 router bgp 65503 neighbor 192.168.26.2 remote-as 65503 address-family ipv4 neighbor 192.168.26.2 activate end
    • Bconfigure terminal router bgp 65502 address-family ipv4 neighbor 192.168.26.2 activate end
    • Cconfigure terminal no router bgp 65502 router bgp 65503 neighbor 192.168.26.2 remote-as 65123 address-family ipv4 neighbor 192.168.26.2 activate end
    • Dconfigure terminal router bgp 65502 no neighbor 192.168.26.2 remote-as 65503 neighbor 192.168.26.2 remote-as 65123 address-family ipv4 neighbor 192.168.26.2 activate end

    Show answer

    Answer: D

    Explanation

    Look the logs, remote peer is wrong. The remote peer is showed in HEXA "FE63". If you do the math will findout the FE63 is 65123

    Source: Adapted from community discussion — wstark13

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-501 practice, question 151. 377 questions available.