350-501 practice questions 371–377

1. Question 371 · 377 in bank

   Select 2

   

   Refer to the exhibit. Company A’s network architect Is implementing the capabilities that are described In RFC 4379 to provide new options for troubleshooting the company’s MPLS network. MPLS LSPs are signaled via the BGP routing protocol with IPv4 unicast prefix FECs. Due to company security policies, access is controlled on the control plane and management plane. Which two tasks must the architect perform to achieve the goal? (Choose two.)

   • AOpen IMCP port 3505.
   • BImplement VCCV on core routers only.
   • COpen UDP port 3503.
   • DImplement OAM on all MPLS-enabled routers.
   • EImplement LSP Ping on PE routers only.

   Show answer

   Answer: CE

   Next question

2. Question 372 · 377 in bank

   How does TACACS+ facilitate secure connections for user access to network routers?

   • AThe user provides a password over a secure connection to the TACACS+ server for authorization.
   • BThe network access server communicates securely with a TACACS+ daemon to authenticate the user.
   • CThe network access server communicates securely with the router via the TACACS+ protocol to authorize Telnet access by the user to specific parts of a router.
   • DThe user’s end device uses CHAP to securely query the network access server to authenticate the user via the TACACS+ protocol.

   Show answer

   Answer: B

   Next question

3. Question 373 · 377 in bank

   Select 2

   

   Refer to the exhibit. Which two features characterize remotely triggered black hole filtering? (Choose two.)

   • AIt requires running OSPF.
   • BIt is a technique that incorporates a set of well-coordinated configurations.
   • CIt requires running EIGRP.
   • DIt is a specific Cisco IOS Software feature.
   • EIt provides a method for quickly dropping undesirable traffic at the edge of the network.

   Show answer

   Answer: BE

   Next question

4. Question 374 · 377 in bank

   Select 2

   Company_A is implementing VoIP services across the company. The network architect designed a QoS policy to allow only specific IP subnets and mark the signaling flow with DSCP 36. The solution should be as secure as possible. Phones receive their IP addresses from the 172.184.12.0/24 pool and are assigned by the RADIUS server to VLAN 1021. Skinny Client Control Protocol is used as a signaling protocol in the network. For security reasons, switchport port security maximum 1 vlan voice has been preconfigured on the switch side. Which two tasks must an engineer perform on SW_1 to achieve this goal? (Choose two.)

   • AImplement a class map with the set dscp af43 command.
   • BImplement an ACL with the permit udp 172.184.12.0 0 0.0.0.255 any range 2000 2002 command.
   • CImplement a class map with the set dscp af42 command.
   • DImplement an ACL with the set dscp af4t command.
   • EImplement an ACL with the permit tcp any 10.124.121.0 0 0.0.0.255 range 16384 32767 command.

   Show answer

   Answer: BC

   Next question

5. Question 375 · 377 in bank

   

   Refer to the exhibit. Two midsize service providers are connected to each other and share VPNv4 routes. The service providers support customers in several geographic regions. The two network-engineering teams have decided to protect against data plane attacks and secure traffic between the two providers Which task should toe teams perform as part of toe configuration?

   • AImplement uRPF to match source IP addresses to the routing table
   • BImplement control plane policing to prevent unwanted hosts from accessing the network.
   • CImplement prefix lists to allow traffic only from known sources
   • DImplement RTBH filtering to black-hole unwanted traffic to a null interface

   Show answer

   Answer: D

   Next question

6. Question 376 · 377 in bank

   

   Refer to the exhibit. A network engineer with an employee ID: 5086:72:817 is configuring a connection to manage CE1 from the OAM server on VLAN 100. PE1 must push S-VLAN tag 10 toward PE2 while forwarding traffic from CE1 to the OAM server. PE1 must push S-VLAN tag 20 toward PE2 while forwarding traffic from CE2 to the data traffic gateway. Which configuration must the engineer implement on PE2?

   • AInterface Ge0/1 - encapsulation dot1q 100 rewrite ingress tag pop 10 rewrite ingress tag push 20
   • BInterface Ge0/0 - encapsulation dot1q 100 rewrite ingress tag push dot1q 10 symmetric Interface Ge0/1 - encapsulation dot1q 200 rewrite ingress tag push dot1q 20 symmetric
   • CInterface Ge0/1 - encapsulation dot1q 10 rewrite ingress tag push dot1q 10 symmetric Interface Ge0/0 - encapsulation dot1q 20 rewrite ingress tag push dot1q 20 symmetric
   • DInterface Ge0/1 - encapsulation dot1q 100 rewrite ingress tag translate 1-to-1 dot1q 20

   Show answer

   Answer: D

   Next question

7. Question 377 · 377 in bank

   

   Refer to the exhibit. A network operations team is implementing eBGP on the service provider network. Data traffic between routers R1 and R4 must use the R2-R3 link, which connects AS 65101 and AS65201. iBGP sessions with adjacent routers are up on 10.10.10.1 and 10.10.10.4. The team is now updating the configuration for eBGP peers on routers R2 and R3. Which action must be taken to meet the requirements?

   • AAdd the soft-reconfiguration command.
   • BAdd the ebgp-multihop command.
   • CRemove the update-source command.
   • DRemove the next-hop-self command.

   Show answer

   Answer: B

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-501 practice, question 371. 377 questions available.