350-501 practice questions 11–20

1. Question 11 · 377 in bank

   An engineer working for a private service provider with employee Id: 1234:56:789 is configuring a Cisco device to redistribute OSPF into BGP. Which task enables the device to filter routes?

   • AConfigure an access list and reference it with the redistribute command.
   • BConfigure a route map and reference it with the redistribute command.
   • CConfigure a prefix list and associate it to the BGP peer interface.
   • DConfigure a distribute list and associate it to the BGP peer interface.

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

2. Question 12 · 377 in bank

   

   Refer to the exhibit. An engineer is configuring multitopology IS-IS for IPv6 on router R1. Which additional configuration must be applied to the router to complete the task?

   • AR1# configure terminal R1(config)# router isis area2 R1(config-router)# address-family ipv6 R1(config-router-af)# multi-topology
   • BR1# configure terminal R1(config)# router isis area1 R1(config-router)# metric-style wide level-2 R1(config-router)# address-family ipv6 R1(config-router-af)# multi-topology
   • CR1# configure terminal R1(config)# router isis area2 R1(config-router)# metric-style wide R1(config-router)# address-family ipv6 R1(config-router-af)# multi topology
   • DR1# configure terminal R1(config)# router isis area1 R1(config-router)# metric-style wide level-1 R1(config-router)# address-family ipv6 R1(config-router-af)# multi topology

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

3. Question 13 · 377 in bank

   

   Refer to the exhibits. Which information is provided for traceback analysis when this configuration is applied?

   • Asource interface
   • Bpacket size distribution
   • CIP sub flow cache
   • DBGP version

   Show answer

   Answer: A

   Explanation

   I'm voting for A based on this paragraph from Cisco. It specifically talks about tracing the source of an attack and using NetFlow to know the source interface. Keywords are in all caps. "The originator of DoS attacks cannot be easily identified because the IP source address of the device sending the traffic is usually forged. However, you can easily TRACE the traffic BACK through the network to the router on which it is arriving by using the NetFlow Layer 2 and Security Monitoring Exports feature to capture the MAC address and VLAN-ID fields. If the router on which traffic is arriving supports NetFlow, you can configure the NetFlow Layer 2 and Security Monitoring Exports feature on it to identify the INTERFACE on which the traffic is ARRIVING." https://www.cisco.com/en/US/docs/ios-xml/ios/netflow/configuration/15-2s/nf-detct-analy-thrts.html

   Source: Adapted from community discussion — karen1337

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 14 · 377 in bank

   

   Refer to the exhibit. A network operator has two IPv4 and IPv6 dual-stacked networks on each side of the IPv4 core network. The operator must be able to provide connectivity between them while using specific assigned IPv6 space provided from the company IP administrator team. Which technology should the network operator use to accomplish this goal?

   • A6rd
   • BDS-Lite
   • CNAT44
   • DNAT46

   Show answer

   Answer: A

   Explanation

   Correct answer is A. 6rd is a mechanism to facilitate IPv6 rapid deployment across IPv4 infrastructures of Internet service providers (ISPs). It is derived from 6to4, a preexisting mechanism to transfer IPv6 packets over the IPv4 network, with the significant change that it operates entirely within the end-user's ISP's network, thus avoiding the major architectural problems inherent in the original design of 6to4.

   Source: Adapted from community discussion — craterman

   References

   • Cisco documentation

   Next question

5. Question 15 · 377 in bank

   

   Refer to the exhibit. An engineer is trying to implement BGP configuration on a router. Which configuration error prevents the ASBR from establishing a BGP neighborship to a directly connected BGP speaker?

   • AThe routing policy is absent for this Cisco IOS XR eBGP instance.
   • BThe TCP session parameters are not specified.
   • CThe VPNv4 address family interferes with the BGP IPv4 address family negotiations.
   • DThe IPv4 address family configuration under neighbor configuration-mode must be removed.

   Show answer

   Answer: C

   Explanation

   The question says "Establishing BGP Neighborship" so if the RPL is not configured the 2 eBGP Peers still have to form an adjacency but routes will not be propagated between them due to the default drop policy !! IDK this is weird question

   Source: Adapted from community discussion — sherlock0

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

6. Question 16 · 377 in bank

   

   Refer to the exhibit. An engineer is reviewing the BGP configuration. Which routes must be advertised to 10.10.10.1?

   • ALocal routes are permitted, and routes from other ASNs are denied.
   • BAll routes whether local or from other ASNs are denied.
   • CLocal routes are denied, and routes from other ASNs are permitted.
   • DAll routes whether local or from other ASNs are permitted.

   Show answer

   Answer: D

   Explanation

   D is correct. There is distribute list configured for neighbor. Where do you see any configured access-lists? AS-PATH filtering configures by "neighbor filter-list "

   Source: Adapted from community discussion — craterman

   References

   • Cisco documentation

   Next question

7. Question 17 · 377 in bank

   

   Refer to the exhibit. An engineer is implementing BGP selective prefix suppression. The router must advertise only 10.16.4.0/24, 10.16.5.0/24, and summarized route 10.16.0.0/21, and suppress 10.16.6.0/24. Which configuration must the engineer apply to the router?

   • ARouter (config)# router bgp 300 Router(config-router)# aggregate-address 10.16.6.0 255.255.252.0 as-set suppress-map SuppressMap
   • BRouter (config)# router bgp 300 Router(config-router)# aggregate-address 10.16.0.0 255.255.255.0 as-set suppress-map unSuppressMap
   • CRouter (config)# router bgp 300 Router(config-router)# aggregate-address 10.16.0.0 255.255.248.0 as-set suppress-map SuppressMap
   • DRouter (config)# router bgp 300 Router(config-router)# aggregate-address 10.16.6.0 255.255.255.0 as-set suppress-map SuppressMap

   Show answer

   Answer: C

   Explanation

   The aggregate-address 10.16.0.0 255.255.248.0 command creates the summary route 10.16.0.0/21 itself but the more specific routers are allowed. So then the suppress-map is used to suppresses the 10.16.6.0/24 route.

   Source: Adapted from community discussion — thejag

   References

   • Cisco documentation

   Next question

8. Question 18 · 377 in bank

   

   Refer to the exhibit. Which BGP attribute should be manipulated to have CE1 use PE1 as the primary path to the internet?

   • AThe local preference attribute should be manipulated on PE2 on inbound and outbound routes advertised to CE1.
   • BThe origin of all routes should be modified on each router on inbound and outbound routes advertised to CE1.
   • CThe MED attribute should be manipulated on CE1 on inbound routes from PE1.
   • DThe weight attribute should be manipulated on PE1 on outbound routes advertised to CE1.

   Show answer

   Answer: B

   Explanation

   A - Local Preference is not attached to eBGP updates and it only stays within the AS (iBGP) so UNLESS the routers are all in the same AS it's not going to help here. B - if we modify the origin of ALL routes on each router inbound and outbound we can make the path to PE1 preferred. This is definitely a possible but horrible option. C - The MED attribute is 0 by default so modifying it on inbound routes from PE1 can not make it preferred D - the weight is only local to PE1, not advertised to CE1 I think the answer is actually B?

   Source: Adapted from community discussion — thejag

   Next question

9. Question 19 · 377 in bank

   

   Refer to the exhibit. CE1 and CE2 require connectivity to the internet through the ISP connected to PE3. What should an engineer configure to complete this task?

   • ACE1 and CE2 must be configured with a route distinguisher in the PE1 VRF that dynamically imports the route from the internet.
   • BCE1 and CE2 must be configured to use a static default route with a next-hop of PE3 to reach internet routes.
   • CPE1 must be configured with an import route target in the CE1 VRF that matches the export route target for the internet VRF on PE3.
   • DPE2 must be configured to serve as a route reflector for PE3 routes learned from the internet. PE2 then shares the routes with CE1 and CE2.

   Show answer

   Answer: C

   Explanation

   The only logical answer is D: D. PE2 must be configured to serve as a route reflector for PE3 routes learned from the internet. PE2 then shares the routes with CE1 and CE2.

   Source: Adapted from community discussion — Milanello

   Next question

10. Question 20 · 377 in bank

    An engineer is implementing a route map to support redistribution within BGP. The route map must be configured to permit all unmatched routes. Which action must the engineer perform to complete this task?

    • AInclude a permit statement as the first entry.
    • BRemove the implicit deny entry.
    • CInclude at least one explicit deny statement.
    • DInclude a permit statement as the last entry.

    Show answer

    Answer: D

    Explanation

    D is correct. route-map has implicit deny at the end unless you configure a permit catch-all for unmatched statements that fall to it.

    Source: Adapted from community discussion — NetworkYoda72

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-501 practice, question 11. 377 questions available.