350-501 practice questions 231–240

1. Question 231 · 377 in bank

   How does Cisco MPLS TE use OSPF extensions to allow for optimized transit between a headend router and a destination router?

   • ARouter LSAs share router link advertisements to each router within the MPLS environment so that tunnels can be built bidirectionally.
   • BASBR Summary LSAs share OSPF domain information so that the two routers know how to reach each other during tunnel setup.
   • CNetwork LSAs share RSVP information to build the tunnel between the two routers.
   • DOpaque LSAs calculate and establish unidirectional tunnels that are set according to the network constraint.

   Show answer

   Answer: D

   Explanation

   D is correct MPLS TE provides a way to integrate TE capabilities (such as those used on Layer 2 protocols like ATM) into Layer 3 protocols (IP). MPLS TE uses an extension to existing protocols (Intermediate System-to-Intermediate System (IS-IS), Resource Reservation Protocol (RSVP), OSPF) to calculate and establish unidirectional tunnels that are set according to the network constraint. Traffic flows are mapped on the different tunnels depending on their destination. https://www.cisco.com/c/en/us/support/docs/multiprotocol-label-switching-mpls/mpls/13731-mpls-te-ospf.html

   Source: Adapted from community discussion — thejag

   References

   • Cisco documentation

   Next question

2. Question 232 · 377 in bank

   Select 2

   What are two features of 6RD IPv6 transition mechanism? (Choose two.)

   • AIt inserts IPv4 bits into an IPv6 delegated prefix.
   • BIt uses a native IPv6-routed network between CE routers and the BR router.
   • CIt allows dynamic 1:N translation of IPv6 address.
   • DIt uses stateful automatic 6to4 tunnels between CE routers and the BR router.
   • EIt uses stateless automatic 6to4 tunnels between CE routers and the BR router.

   Show answer

   Answer: AE

   Explanation

   6RD is stateless (automatic) tunneling mechanism for IPv6 traffic over IPv4 network. D is wrong because 6RD is stateless, not stateful B is wrong, because there is no routed netowrk of IPV6, rather it uses tunneling mechanism C is wrong, dynalic doesn't support 1:N, that is for statedul only and 6RD is stateless only https://networklessons.com/cisco/ccie-routing-switching-written/ipv6-6rd-rapid-deployment

   Source: Adapted from community discussion — sushil_bhattacharjee

   Next question

3. Question 233 · 377 in bank

   What Is one of the differences between Ansible and Chef?

   • AAnsible uses YAML and Chef uses Ruby.
   • BChef requires the use of Windows in the environment and Ansible requires Linux.
   • CChef is highly scalable and Ansible is highly secure.
   • DAnsible uses Ruby and Chef uses Python.

   Show answer

   Answer: A

   Explanation

   Another key distinction is that Ansible uses YAML, a Python-based configuration language that is easier to learn and oriented to administrators, whereas Chef uses Ruby, a Domain Specific Language (DSL) that is oriented to developers and has a steeper learning curve.15 févr. 2023

   Source: Adapted from community discussion — 12_sdeEQ

   Next question

4. Question 234 · 377 in bank

   

   Refer to the exhibit. The CE router is peering with both PE routers and advertising a public prefix to the internet. Routing to and from this prefix will be asymmetric under certain network conditions, but packets must not be discarded. Which configuration must an engineer apply to the two PE routers so that they validate reverse packet forwarding for packets entering their Gi2 interfaces and drop traffic from the RFC1918 space?

   • Aip verify unicast source reachable-via rx allow-default
   • Binterface GigabitEthernet 2 ip verify unicast source reachable-via rx
   • Cip verify unicast source reachable-via any allow-default interface GigabitEthernet 2
   • Dip verify unicast source reachable-via any

   Show answer

   Answer: B

   Explanation

   By the way: line "interface GigabitEthernet 2" does not belong to option C, is an error. That entry actually belongs to option D, so: interface GigabitEthernet 2 ip verify unicast source reachable-via any Here is the difference btween "any" and "rx" any: Examines incoming packets to determine whether the source address is in the Forwarding Information Base (FIB) and permits the packet if the source is reachable through any interface (sometimes referred to as loose mode). rx: Examines incoming packets to determine whether the source address is in the FIB and permits the packet only if the source is reachable through the interface on which the packet was received (sometimes referred to as strict mode). With this in place, for asymetric routing to occur (I have seen this when unexpected failovers) option "any" is the best. Go for option D 100%.

   Source: Adapted from community discussion — Mephystopheles

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 235 · 377 in bank

   

   Refer to the exhibit. An engineer with an employee 10:4350:47:853 is implementing IS-IS as the new routing protocol in the network. All routers in the network operate as Level 2 routers in the same private autonomous system, and the three branches are connected via dark fibre. The engineer has already implemented IS-IS on router R1 with NET address 49.0133.532b.ca14.6915.21311.F40F.1B3a.ba10.00. Which IS-IS NET address configuration must be implemented on R3 to establish IS-IS connectivity?

   • A49.0133.532b.ca14.6915.21311.f40f.1b4a.bb87.00
   • B49.0135.332b.ca14.6975.28371.1721.1b3b.ca11.10
   • C48.0133.532b.ca14.6915.21311.f40f.1626.bb98.00
   • D49.0133.532b.ca14.6915.21311.1721.1b4a.0013.01

   Show answer

   Answer: A

   Explanation

   Start from right work your way back: • Final 8 bits – zero • Next 48 bits – router identifier • Next 16 bits – area • First 8 bits – AFI AFI + Area makes Area Address. A is correct

   Source: Adapted from community discussion — ZeeZaidi

   Next question

6. Question 236 · 377 in bank

   

   Refer to the exhibit. A network operator working for a telecommunication company with an employee ID: 4350:47:853 must implement an IGP solution based on these requirements: • Subnet 10.50.10.0 traffic must exit through the R1 router to connect with the Syslog server. • Subnet 10.50.20.0 traffic must exit through the R2 router to connect with the NTP server. • In case of link failure between R2 and R4, traffic must be routed via R1 and R3. Which two configurations must be implemented on R5 to meet these requirements? (Choose two.)

   • AApply a route policy to redistribute 10.50.0.0 prefixes in OSPF to ISIS and ISIS to OSPF.
   • BApply a route policy to redistribute 10.50.20.0 from ISIS-L2 to OSPF Area 0 at a higher cost.
   • CEnable a route policy to advertise 10.50.20.0 in ISIS-L2 at a higher cost.
   • DApply a route policy to redistribute 10.50.10.0 from OSPF Area 0 to ISIS-L2 at a lower cost.
   • EEnable a route policy to advertise 10.50.10.0 In OSPF Area 0 at a low cost.

   Show answer

   Answer: E

   Explanation

   This is a straight forward routing question but VERY BADLY worded and does not make sense how it is written. The BGP network at the top (which hosts syslog and NTP servers) is redistributing routes from R1 (OSFP) and R2 (ISIS). The metrics of those IGPs will be added into the BGP MED attribute. They want to prefer to reach 10.50.10.0 via through R1 (OSPF) and to reach 10.50.20.0 through R2 (ISIS). So the metric will need to be lower to make it preferred. B and E

   Source: Adapted from community discussion — thejag

   Next question

7. Question 237 · 377 in bank

   An ISP Is Implementing end-to-end fault monitoring for a customer based on the IEEE 802.3ah standard. The solution must detect when 15 or more corrupted Ethernet packets arrive within 10 ms and stop propagating traffic through the ISP backbone network or to the customer side. Which configuration must the ISP engineer apply?

   • Aethernet oam link-monitoring enable ethernet oam link-monitor crc-errors ingress time-window 10 ethernet oam link-monitor crc-errors ingress threshold high 15 ethernet oam link-monitor crc-errors egress time-window 10 ethernet oam link-monitor crc-errors egress threshold high 15 ethernet oam link-monitor high-threshold action shutdown-interface
   • Bethernet oam link-monitoring ethernet oam link-monitor receive-crc window 15 ethernet oam link-monitor receive-crc threshold high 10 ethernet oam link-monitor high-threshold action disable-interface
   • Cethernet oam ethernet oam link-monitor receive-crc window 10 ethernet oam link-monitor receive-crc threshold high 15 ethernet oam link-monitor transmit-crc window 10 ethernet oam link-monitor transmit-crc threshold high 15 ethernet oam link-monitor high-threshold action errordisable-interface
   • Dethernet oam link-monitoring global enable ethernet oam link-monitor receive crc-errors period 15 ethernet oam link-monitor receive crc-errors limit 15 ethernet oam link-monitor transmit crc-errors period 10 ethernet oam link-monitor transmit crc-errors limit 15 ethernet oam link-monitor limit action error-disable interface

   Show answer

   Answer: C

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

8. Question 238 · 377 in bank

   SIMULATION -

   

   Guidelines - This is a lab item in which tasks will be performed on virtual devices. • Refer to the Tasks tab to view the tasks for this lab item. • Refer to the Topology tab to access the device console(s) and perform the tasks. • Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window. • All necessary preconfigurations have been applied. • Do not change the enable password or hostname for any device. • Save your configurations to NVRAM before moving to the next item. • Click Next at the bottom of the screen to submit this lab and move to the next question. • When Next is clicked, the lab closes and cannot be reopened. Topology -

   

   Tasks - R1 and R2 are having issues forming an eBGP neighbor relationship. Troubleshoot and resolve the issue to achieve these goals: 1. Configure R1 and R2 to form a BGP neighborship using their Loopback interfaces. 2. Form the neighbor relationship using a BGP multihop mechanism. Use minimal values to solve the issue.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   R1 router bgp 100 bgp router-id 10.1.1.1 bgp log-neighbor-changes neighbor 10.2.2.2 remote-as 200 neighbor 10.2.2.2 ebgp-multihop 2 neighbor 10.2.2.2 update-source Loopback0 ! address-family ipv4 network 10.1.1.1 mask 255.255.255.255 network 172.16.0.0 mask 255.255.255.0 neighbor 10.2.2.2 activate exit-address-family ip route 10.2.2.2 255.255.255.255 172.16.0.2 R2 router bgp 200 bgp router-id 10.2.2.2 bgp log-neighbor-changes neighbor 10.1.1.1 remote-as 100 neighbor 10.1.1.1 ebgp-multihop 2 neighbor 10.1.1.1 update-source Loopback0 ! address-family ipv4 network 10.2.2.2 mask 255.255.255.255 network 172.16.0.0 mask 255.255.255.0 neighbor 10.1.1.1 activate exit-address-family ip route 10.1.1.1 255.255.255.255 172.16.0.1

   Source: Adapted from community discussion — picho707

   

   Next question

9. Question 239 · 377 in bank

   

   Refer to the exhibit. The engineering team wants to limit control traffic on router RX with the following IP address assignments:

   

   • Accepted traffic for router: 10.0.0.0/24 • NOC users IP allocation: 192.168.10.0/24 Which additional configuration must be applied to RX to apply the policy for MSDP?

   • ARX(config)#access-list 151 permit tcp any gt 1024 10.10.0.0 0.0.0.255 eq 639 RX(config)#access-list 151 permit tcp any eq 639 10.10.0.0 0.0.0.255 gt 1024 established
   • BRX(config)#access-list 150 permit tcp any gt 1024 10.0.0.0 0.0.0.255 eq 639 RX(config)#access-list 150 permit tcp any eq 639 10.0.0.0 0.0.0.255 gt 1024 established
   • CRX(config)#access-list 151 permit tcp any 10.0.0.0 0.0.0.255 eq 639 RX(config)#access-list 151 permit udp any 10.0.0.0 0.0.0.255 eq 639
   • DRX(config)#access-list 150 permit tcp any 10.0.0.0 0.0.0.255 eq 639 RX(config)#access-list 150 permit udp any 10.0.0.0 0.0.0.255 eq 639

   Show answer

   Answer: B

   Explanation

   The task is "Which additional configuration must be applied to RX to apply the policy for MSDP?" 1. MSDP uses TCP port 639 2. they want to allow traffic to this port from "Accepted traffic for router: 10.0.0.0/24" 3. at the same time, they want to allow traffic in the opposite direction for already established TCP4/639 sessions.

   Source: Adapted from community discussion — Worgen44

   Next question

10. Question 240 · 377 in bank

    

    Refer to the exhibit. What is the result of this configuration?

    • ARouter 1 opens and closes a TCP connection to the TACACS+ server every time a user requires authorization
    • BRouter 1 and the TACACS+ server maintain one open connection between them only when network administrator is accessing the router with password ciscotest
    • CRouter 1 and the TACACS+ server maintain one open connection between them
    • DRouter 1 opens and closes a TCP connection to the TACACS+ server every time a user requires authentication

    Show answer

    Answer: C

    Explanation

    for me C is correct . the tacacs-server key its used for packet encryption between tacacs and router not for user authentication

    Source: Adapted from community discussion — zinou

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-501 practice, question 231. 377 questions available.