CCNP與CCIE Security SCOR思科認(rèn)證網(wǎng)絡(luò)工程師題庫(kù)5

CCNP/CCIESecuritySCOR題庫(kù)5

QUESTION1

DRAGDROP

DraganddroptheOSsfromtheleftontothecorrectdescriptionsontheright.

SelectandPlace:

CorrectAnswer:

Section:Architecture

Explanation

Explanation/Reference:

Reference:/en/specialties/q/276369/what-is-the-key-difference-

between-ios-ios-xe-and-ios-xr-for-cisco-devices/

QUESTION2

Refertotheexhibit.P3andPE4areattheedgeoftheserviceprovidercoreandserveasABRrouters.

Aggregationareasareoneithersideofthecore.Whichstatementaboutthearchitectureistrue?

A.TosupportseamlessMPLS,theBGProutereflectorfeaturemustbedisabled.

B.IfeachareaisrunningitsownIGP,BGPmustprovideanend-to-endMPLSLSP.

C.IfeachareaisrunningitsownIGP,theABRroutersmustredistributetheIGProutingtableintoBGP.

D.TosupportseamlessMPLS,TDPmustbeusedasthelabelprotocol.

CorrectAnswer:B

Section:Architecture

Explanation

Explanation/Reference:

Reference:/c/en/us/td/docs/switches/lan/catalyst9600/software/release/16-

12/configuration_guide/mpls/b_1612_mpls_9600_cg/configuring_seamless_mpls.html

QUESTION3

WhichcomponentissimilartoanEVPNinstance?

A.routerdistinguisher

B.MPLSlabel

C.IGProuterID

D.VRF

CorrectAnswer:D

Section:Architecture

Explanation

Explanation/Reference:

QUESTION4

WhydoCiscoMPLSTEtunnelsrequirealink-stateroutingprotocol?

A.Thelink-statedatabaseprovidessegmentationbyarea,whichimprovesthepath-selectionprocess.

B.Thelink-statedatabaseprovidesadatarepositoryfromwhichthetunnelendpointscandynamically

selectasourceID.

C.Link-stateroutingprotocolsuseSPFcalculationsthatthetunnelendpointsleveragetoimplementthe

tunnel.

D.Thetunnelendpointsusethelink-statedatabasetoevaluatetheentiretopologyanddeterminethe

bestpath.

CorrectAnswer:D

Section:Architecture

Explanation

Explanation/Reference:

QUESTION5

Refertotheexhibit.BGPsecisimplementedonRI,R2,R3,andR4.BGPpeeringisestablishedbetween

neighboringautonomoussystems.Whichstatementaboutimplementationistrue?

A.BGPupdatesfromtheiBGPpeersareappendedwithacommunityoflocal-as.

B.BGPupdatesfromtheallBGPpeersareappendedwithacommunityofno-export.

C.BGPupdatesfromtheeBGPpeersareappendedwithanadditionalASpathvaluethatisstaticallyset

bythedomainadministrator.

D.BGPupdatesfromtheeBGPpeersareappendedwithaBGPsecattributesequencethatincludesapublic

keyhashanddigitalsignature.

CorrectAnswer:D

Section:Architecture

Explanation

Explanation/Reference:

QUESTION6

YouareconfiguringMPLStraffic-engineeringtunnelsinthecore.Whichtwowaysexistforthetunnelpath

acrossthecore?(Choosetwo.)

A.ThedynamicpathoptionissupportedonlywithIS-IS.

B.Tunnelscanbeconfiguredwithdynamicpathorexplicitlydefinedpath.

C.Azerobandwidthtunnelisnotavalidoption.

D.Thebandwidthstatementcreatesa“hard"reservationonthelink.

E.TunnellinksinheritIGPmetricsbydefaultunlessoverridden.

CorrectAnswer:BE

Section:Architecture

Explanation

Explanation/Reference:

QUESTION7

WhichconfigurationmodedoyouusetoapplythemplsIdpgraceful-restartcommandinIOSXESoftware?

A.MPLSLDPneighbor

B.interface

C.MPLS

D.global

CorrectAnswer:D

Section:Architecture

Explanation

Explanation/Reference:

Reference:/c/en/us/td/docs/ios-xml/ios/mp_ha/configuration/xe-3s/mp-ha-

xe-3s-book/mp-ldp-grace-rstrt.html

QUESTION8

Afteryouanalyzeyournetworkenvironment,youdecidetoimplementafullseparationmodelforInternet

accessandMPLSL3VPNservices.Forwhichreasondoyoumakethisdecision?

A.ItenablesEGPandIGPtooperateindependently.

B.Itenablesyoutochoosewhethertoseparateorcentralizeeachindividualservice.

C.Itiseasiertomanageasysteminwhichservicesaremixed.

D.Itrequiresonlyoneedgerouter.

CorrectAnswer:A

Section:Architecture

Explanation

Explanation/Reference:

QUESTION9

WhichstatementabouttheCiscoMPLSTEforwardingadjacencyfeatureistrue?

A.ItenablestheMPLScoretouse日GRPastheroutingprotocol.

B.ItenablestheCiscoMPLSTEtunneltobeadvertisedintotherunningIGP.

C.Itenablesthetailendroutertoadvertiseroutestotheheadendrouteroverthetunnel.

D.Itenablestheheadendandtailendrouterstoestablishabidirectionaltunnel.

CorrectAnswer:B

Section:Architecture

Explanation

Explanation/Reference:

Reference:/c/en/us/td/docs/ios-

xml/ios/mp_te_path_setup/configuration/xe-16/mp-te-path-setup-xe-16-book/mpls-traffic-

engineering-forwarding-adjacency.pdf

QUESTION10

WhileimplementingTTLsecurity,youissuethePE(config-router-af)#neighborttl-securityhops2

command.

Afteryouissuethiscommand,whichBGPpacketsdoesthePEaccept?

A.to,withaTTLof2ormore

B.from,withaTTLoflessthan2

C.to222.2,withaTTLoflessthan253

D.from,withaTTLof253ormore

CorrectAnswer:D

Section:Architecture

Explanation

Explanation/Reference:

Reference:

https://www.cisco.eom/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxebtsh.html#wpl059215

QUESTION11

ipflow-exportdestination

ipflow-exportversion9

interfacegigabitethernetO/1

ipflowingress

Refertotheexhibits.Whichinformationisprovidedfortracebackanalysiswhenthisconfigurationisapplied?

A.sourceinterface

B.packetsizedistribution

C.IPsubflowcache

D.BGPversion

CorrectAnswer:C

Section:Architecture

Explanation

Explanation/Reference:

Refertotheexhibit.RIisconnectedtotwoserviceprovidersandisunderaDDoSattack.

WhichstatementaboutthisdesignistrueifURPFinstrictmodeisconfiguredonbothinterfaces?

A.RIdropsalltrafficthatingresseseitherinterfacethathasaFIBentrythatexitsadifferentinterface.

B.RIdropsdestinationaddressesthatareroutedtoanullinterfaceontherouter.

C.RIpermitsasymmetricroutingaslongastheAS-PATHattributeentrymatchestheconnectedAS.

D.RIacceptssourceaddressesoninterfacegigabitethernetO/1thatareprivateaddresses.

CorrectAnswer:A

Section:Architecture

Explanation

Explanation/Reference:

QUESTION13

ipcef

interfacegigabitethernetO/1

ipverifyunicastsourcereachable-viaany

Refertotheexhibit.Router1wasexperiencingaDDoSattackthatwastracedtointerface

gigabitethernetO/1.Whichstatementaboutthisconfigurationistrue?

A.Router1acceptsalltrafficthatingressesandegressesinterfacegigabitethernetO/1.

B.Router1dropsalltrafficthatingressesinterfacegigabitethernetO/1thathasaFIBentrythatexitsa

differentinterface.

C.Router1acceptssourceaddressesthathaveamatchintheFIBthatindicatesitisreachablethrougha

realinterface.

D.Router1acceptssourceaddressesoninterfacegigabitethernetO/1thatareprivateaddresses.

CorrectAnswer:C

Section:Architecture

Explanation

Explanation/Reference:

Reference:/c/en/us/td/docs/switches/datacenter/sw/4_l/nx-

os/security/configuration/guide/sec_nx-os-cfg/sec_urpf.html

QUESTION14

Router1:

iproutenull0tag1

route-mapddos

matchtag1

setlocalpreference150

setcommunitynoexport

route-mapddospermit20

routerbgp65513

redistributestaticroute-mapddos

Router2:

InterfacegigabitethernetO/1

ipverifyunicastreverse-path

Refertotheexhibit.Anengineerispreparingtoimplementdataplanesecurityconfiguration.Which

statementaboutthisconfigurationistrue?

A.Router2istherouterreceivingtheDDoSattack.

B.Router1mustbeconfiguredwithuRPFfortheRTBHimplementationtobeeffective.

C.Router1isthetriggerrouterinaRTBHimplementation.

D.Router2mustconfigurearoutetonull0fornetwork/24fortheRTBHimplementationto

becomplete.

CorrectAnswer:A

Section:Architecture

Explanation

Explanation/Reference:

QUESTION15

WhichconfigurationmodifiesLocalPacketTransportServiceshardwarepolicies?

A.

configure

Iptspolice

exceptioninvalidrate400

protocolcdprate50

protocolarprate5000

B.

configure

Iptspifibpolicehardware

flowospfunicastdefaultrate200

flowbgpconfiguredrate200

flowbgpdefaultrate100

!

Iptspifibpolicehardwarelocation0/2

flowospfunicastdefaultrate100

flowbgpconfiguredrate300

flowicmpapplicationrate100

flowicmpdefaultrate100

c.

configure

Iptspifibhardwarepolice

flowospfunicastdefaultrate200

flowbgpconfiguredrate200

flowbgpdefaultrate100

!

Iptspifibhardwarepolicelocation0/2/CPU0

flowospfunicastdefaultrate100

flowbgpconfiguredrate300

flowicmpapplicationrate100

flowicmpdefaultrate100

!

D.

configure

Iptspuntpolicelocation0/0/CPU0

exceptioninvalidrate400

protocolcdprate50

protocolarprate5000

protocolipv4optionsrate100

exceptionicmprate200

CorrectAnswer:C

Section:Architecture

Explanation

Explanation/Reference:

Reference:/c/en/us/td/docs/routers/crs/software/crs_r4-

l/addr_serv/command/reference/b_ipaddr_cr41crs/b_ipacldr_cr41crs_chapter_0111.html#wpl75473

4006

QUESTION16

WhichadditionalfeaturedoesMPLSDiffServtunnelingsupport?

A.matchingEXPandDSCPvalues

B.PHBlayermanagement

C.usingGREtunnelstohidemarkings

D.interactionbetweenMPLSandIGP

CorrectAnswer:B

Section:Architecture

Explanation

Explanation/Reference:

Reference:/c/en/us/td/docs/ios-xml/ios/mp_te_diffserv/configuration/15-

mt/mp-te-diffserv-15-mt-book/mp-diffserv-tun-mode.html

QUESTION17

YouarecreatingnewCiscoMPLSTEtunnels.WhichtypeofRSVPmessagedoestheheadendroutersend

toreservebandwidthonthepathtothetailendrouter?

A.path

B.tear

C.error

D.reservation

CorrectAnswer:A

Section:Architecture

Explanation

Explanation/Reference:

Reference:/rsvp-te-protocol-deep-dive/

QUESTION18

WhichstatementdescribestheadvantageofaMulti-Layercontrolplane?

A.ItprovidesmultivendorconfigurationcapabilitiesforLayer3toLayer1.

B.Itautomaticallyprovisions,monitors,andmanagestrafficacrossLayer0toLayer3.

C.ItsupportsdynamicwavelengthrestorationinLayer0.

D.Itminimizeshumanerrorconfiguringconvergednetworks.

CorrectAnswer:A

Section:Architecture

Explanation

Explanation/Reference:

QUESTION19

DRAGDROP

Draganddropthetechnologiesfromtheleftontothecorrectdefinitionsontheright.

SelectandPlace:

CorrectAnswer:

Section:Architecture

Explanation

Explanation/Reference:

QUESTION20

AnengineerissettingupoverlappingVPNstoallowVRFABCandXYZtocommunicatewithVRFCENTRAL

butwantstomakesurethatVRFABCandXYZcannotcommunicate.Whichconfigurationaccomplishes

theseobjectives?

A.

ABC

a.d.(±cess-family±pv4unicast

importroute-ta.i?get

65000:1111

!

expor七route-target

65000:1111

I

vrfXYZ

a.d(±cess-family±pv4unicast

import;route-target

65000:2222

I

exportrou七e一七arge七

65000:2222

65000:1111

I

vrfCENTRAL

a.dd.i?ess-familyipv4unicast

importroute一七arge七

65000:3333

65000:1111

65000:2222

I

exportrou七e一七arget;

65000:3333

65000:1111

65000:2222

B.

vrfABC

address-familyipv4unicast

importroute-target

65000:1111

65000:4444

!

exportroute-target

65000:1111

65000:3333

!

vrfXYZ

address-familyipv4unicast

importroute-target

65000:2222

65000:4444

f

exportroute-target

65000:2222

65000:3333

I

vrfCENTRAL

address-familyipv4unicast

importroute-target

65000:3333

I

exportroute-ta.rget

65000:4444

C.

vrfABC

address-familyipv4unicast

importroute-target

65000:1111

65000:4444

I

exportroute-target

65000:1111

65000:3333

I

vrfXYZ

address-familyipv4unicast

importroute-target

65000:2222

65000:3333

!

exportroute-target

65000:2222

65000:4444

I

vrfCENTRAL

address-familyipv4unicast

importroute-target

65000:3333

I

exportroute-七arge七

65000:4444

D.

vrfABC

address-familyipv4unicast

importroute-target

65000:1111

65000:3333

!

exportroute-target

65000:1111

65000:3333

I

vrfXYZ

address-familyipv4unicast

importroute-target

65000:2222

65000:3333

I

exportroute-target

65000:2222

65000:3333

I

vrfCENTRAL

address-familyipv4unicast

importroute-target

65000:3333

I

exportroute-target

65000:3333

CorrectAnswer:B

Section:Architecture

Explanation

Explanation/Reference:

QUESTION21

Router1:

iproutenull0

iproutenull0tag1

route-mapddos

matchtag1

setipnext-hop

setlocal-preference150

setcommunitynoexport

route-mapddospermit20

routerbgp65513

redistributestaticroute-mapddos

Router2:

iproutenull0

Refertotheexhibit.Anengineerispreparingtoimplementdataplanesecurityconfiguration.Which

statementaboutthisconfigurationistrue?

A.Router1andRouter2advertisetheroutetotoallBGPpeers.

B.Alltrafficto/24isdropped.

C.Alltrafficisdropped.

D.Router1dropsalltrafficwithalocal-preferencesetto150.

CorrectAnswer:A

Section:

ArchitectureExplanation

Explanation/Reference:

QUESTION22

WhichMPLSdesignattributecanyouusetoprovideInternetaccesstoamajorcustomerthrougha

separatededicatedVPN?

A.TheInternetgatewayrouterisconnectedasaPEroutertotheMPLSbackbone.

B.TheCEroutersupportsVRF-LiteandthefullBGProutingtable.

C.TheInternetgatewayinsertsthefullInternetBGProutingtableintotheInternetaccessVPN.

D.ThecustomerthatneedstheInternetaccessserviceisassignedtothesameRTsastheInternetgateway.

CorrectAnswer:D

Section:

ArchitectureExplanation

Explanation/Reference:

QUESTION23

QUESTION23

WhichconfigurationenablesBGPFlowSpecclientfunctionandinstallationofpoliciesonalllocalinterfaces?

A.flowspecaddress-familyipv4local-installinterface-all

B.flowspecaddress-familyipv4installinterface-alllocal

C.flowspecaddress-familyipv4installinterface-all

D.flowspecaddress-familyipv4local-installall-interface

CorrectAnswer:A

Section:Architecture

Explanation

Explanation/Reference:

Reference:/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-16-

6/irg-xe-16-6-book/C3PL-BGP-Flowspec-Client.html

QUESTION24

CE1#

interfaceFastEthernet/0/0/1

description****HUBCEnonrouter****

ipaddress

routerospf100

log-adjacency-changes

network55area0

CE2#

interfaceSerialO/0/9

description****SPOKECErouter****

encapsulationppp

ipaddress2

routerospf100

log-adjacency-changes

network55area0

Refertotheexhibit.AnetworkengineerisconfiguringcustomeredgerouterstofinalizeaL2VPNover

MPLSdeployment.AssumethattheAToML2VPNservicethatconnectsthetwoCEsisconfiguredcorrectly

ontheserviceprovidernetwork.

Whichactioncausesthesolutiontofail?

A.OSPFdoesnotworkwithL2VPNservices.

B.Theroutingprotocolnetworktypesarenotcompatible.

C.Aloopbackwitha/32IPaddresshasnotbeenused.

D.Thexconnectstatementhasnotbeendefined.

CorrectAnswer:B

Section:Architecture

Explanation

Explanation/Reference:

QUESTION25

AnengineerworkingfortelecommunicationcompanyneedstosecuretheLANnetworkusingaprefixlist.

Whichbestpracticeshouldtheengineerfollowwhenheimplementsaprefixlist?

A.Anengineermustidentifytheprefixlistwithanumberonly.

B.Thefinalentryinaprefixlistmustbe/32.

C.Anengineermustincludeonlytheprefixesforwhichheneedstologactivity.

D.Anengineermustusenonsequentialsequencenumbersintheprefixlistsothathecaninsertadditional

entrieslater.

CorrectAnswer:D

Section:Architecture

Explanation

Explanation/Reference:

QUESTION26

interfacegigabitethernet1/0

xconnect12encapsulationmplspw-classcisco

Refertotheexhibit.Whicheffectofthisconfigurationistrue?

A.ItenablesMPLSontheinterface.

B.Itcreatesapseudowireclassnamedcisco.

C.ItenablesAToMoninterfacegigabitethernetl/O.

D.ItenablestaggingforVLAN12ontheinterface.

CorrectAnswer:C

Section:Architecture

Explanation

Explanation/Reference:

Reference:/t5/service-providers-documents/configuration-example-

atom-any-transport-over-mpls-for-like-to/ta-p/3144810

QUESTION27

PE-A#showipbgpvpnv4vrfCustomer-Aneighborsroutes

BGPtableversionis13148019/localrouterIDis0

Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best.i-internal,

rRIB-failurezSStale,mmultipath,bbackup-path.fRT-Filter,

xbest-external,aadditional-path/cRIB-compressedr

Origincodes:i-工GP,e-EGP,?-incomplete

RPKIvalidationcodes:Vvalid,Iinvalid,NNotfound

NetworkNextHopMetricLocPrfWeightPath

RouteDistinguisher:65000:1111(defaultforvrfCustomer-A)

*>192.168.0/1900428265001?

*>192.168.0/1700428265001?

?>192.168.0/1600428265001?

Totalnumberofprefixes5

PE-A#configt

Enterconfigurationcommands,oneperline.EndwithCNTL/Z.

PE-A(config)#ipprefix-listALLOWpermit/16ge17le19

PE-A(config)#routerbgp65000

PE-A(config-router)#address-familyipv4vrfCustomer-A

PE-A(config-router-af)#neighborprefix-listALLOWin

Refertotheexhibit.Whichthreeoutcomesoccuriftheprefixlistisaddedtotheneighbor?(Choosethree.)

A.192,168.0.0/16isdenied.

B.192,168.0.0/16ispermitted.C./19ispermittedD./19isdenied.

E./17ispermitted

F.192,168.0.0/17isdenied.

Correct

Answer:ACF

Section:Architecture

Explanation

Explanation/Reference:

QUESTION28

AnetworkengineermustenablethehelperroutertoterminatetheOSPFgracefulrestartprocessifit

detectsanychangesintheLSA.

Whichcommandenablesthisfeature?

A.nsfietfhelperdisable

B.nsfciscohelperdisable

C.nsfietfhelperstrict-lsa-checking

D.nsfciscoenforceglobal

CorrectAnswer:A

Section:Networking

Explanation

Explanation/Reference:

Reference:

https://www.cisco.eom/c/en/us/td/docs/ios/12_4t/ip_route/configuration/guide/tgrhelp.html

QUESTION29

R1：

interfaceFastEthernetO/O

ipaddress

duplexfull

end

R1(config)#interfaceFastEthernetO/O

R1(config-if)#ospfv31area1ipv4

%IPv6routingnotenabled

Refertotheexhibit.AnetworkengineerisimplementinganOSPFconfiguration.Basedontheoutput,

whichstatementistrue?

A.0SPFv3doesnotrunforIPv4onFastEthernetO/OuntilIPv6routingisenabledontherouterandIPv6is

enabledoninterfaceFastEthernetO/O.

B.Intheospfv31area1ipv4command,area0mustbeconfiguredinsteadofarea1.

C.OSPFv3cannotbeconfiguredforIPv4;OSPFv3worksonlyforIPv6.

D."IPv6routingnotenabled"isjustaninformationalmessageandOSPFv3runsforIPv4oninterface

FastEthernetO/Oanyway.

CorrectAnswer:C

Section:Networking

Explanation

Explanation/Reference:

QUESTION30

R1

routerbgp65000

router-id

neighborremote-as65012

neighborlocal-as65112

Refertotheexhibit.AnetworkengineerisimplementingaBGPprotocol.Whicheffectofthelocal-as

keywordinthisconfigurationistrue?

A.ItenablespeertoestablishaBGPrelationshipwithRIusingAS65012withoutadditional

configuration.

B.ItenablespeertoestablishaBGPrelationshipwithRIusingAS65112andtheVPNv4address

family.

C.ItenablespeertoestablishaBGPrelationshipwithRIusingAS65012andtheVPNv4

addressfamily.

D.ItenablespeertoestablishaBGPrelationshipwithRIusingAS65112withoutadditional

configuration.

CorrectAnswer:D

Section:Networking

Explanation

Explanation/Reference:

QUESTION31

RP/O/O/CPUO:router#showbgpneighbors

BGPneighboris,remoteAS1,localAS140,externallink.

RemoterouterID

BGPstate-Idle

Lastread00:00:00,holdtimeis180,keepaliveintervalis60seconds

Received0messages,0notifications,0inqueue

Sent0messages,0notifications,0inqueue

Minimumtimebetweenadvertisementrunsis15seconds

ForAddressFamily:IPv4Unicast

BGPneighborversion0

Updategroup:0.1

eBGPneighborwithinboundoroutboundpolicy;defaultsto'drop，

Routerefreshrequest:received0,sent0

0acceptedprefixes

Prefixadvertised0,suppressed0,withdrawn0,maximumlimit524288

Thresholdforwarningmessage75%

Connectionsestablished0;dropped0

Lastreset00:02:03,duetoBGPneighborinitialized

ExternalBGPneighbornotdirectlyconnected.

Refertotheexhibit.Basedontheshowcommandoutput,whichresultistrueafterBGPsessionis

established?

A.TheIOSXRrouteradvertisesandacceptsallroutestoandfromeBGPneighbor.

B.TheIOSXRrouteradvertisesallroutestotheneighbor,butitdoesnotacceptanyroutes

from.

C.Noroutesareacceptedfromtheneighbor,norareanyroutesadvertisedtoit.

D.TheIOSXRrouterdoesnotadvertisesanyroutestotheneighbor,butitacceptsanyroutes

from.

CorrectAnswer:C

Section:Networking

Explanation

Explanation/Reference:

QUESTION32

R1

routerisis

net49.0012.1111.1111.1111.00

is-typelevel-1

area-passwordcisco

R2

routerisis

net49.0022.1111.1111.1112.00

is-typelevel-1-2

area-passwordcisco

RefertotheexhibitWhicheffectofthisconfigurationistrue?

A.ThetworoutersfailtoformaneighborrelationshipbecausetheyhavedifferentIS-ISareatypes.

B.Thetworouterssuccessfullyformaneighborrelationship.

C.Thetworoutersfailtoformaneighborrelationshipbecausetheauthenticationconfigurationismissing.

D.ThetworoutersfailtoformaneighborrelationshipbecausetheirsystemIDsaredifferent.

CorrectAnswer:B

Section:Networking

Explanation

Explanation/Reference:

QUESTION33

R1

routerospf1

area2stubno-summary

R2

routerospf1

area3nssa

Refertotheexhibit.InwhichwaydoesrouterRIoperatedifferentlythanrouterR2?

A.RIsendsLSAtypes5and7,whileR2sendstype1,2,and7LSAs.

B.RIsendsLSAtype2only,whileR2sendstype1andtype7LSAs.

C.RIsendsLSAtype2onlyandR2sendsLSAtype1only.

D.RIsendsLSAtypes1and2,whileR2sendstype1,2,and7LSAs.

CorrectAnswer:D

Section:Networking

Explanation

Explanation/Reference:

QUESTION34

routerospf1

nsfietfrestartinterval90

Refertotheexhibit.WhichpurposeofimplementingNSFwiththisconfigurationistrue?

A.TherouterusesNSFtohandleRPswitchoverwhileallowingneighborrelationshipstoremainup.

B.TherouterusesNSFtoreduceneighbor-relationshipdowntimeduringRPswitchover.

C.TherouterusesNSFtoloadbalancetrafficonaroutedEtherChannel.

D.TherouterusesNSFtoloadbalancetrafficbetweentwolinks,withtheprimarylinkalternatingevery

90seconds.

CorrectAnswer:A

Section:Networking

Explanation

Explanation/Reference:

QUESTION35

WhichtaskmustbeperformedfirsttoimplementBFDinanIS-ISenvironment?

A.ConfigureBFDinaninterfaceconfigurationmode.

B.DisableCiscoExpressForwardingonallinterfacesrunningroutingprotocolsotherthanIS-IS.

C.ConfigureallIS-ISroutersasLevel2devices.

D.ConfigureBFDundertheIS-ISprocess.

CorrectAnswer:D

Section:Networking

Explanation

Explanation/Reference:

Reference:

https://www.cisco.eom/c/en/us/td/docs/ios/12_0s/feature/guide/fs_bfd.html#wpll31797

QUESTION36

WhichtwoIS-ISparametersmustmatchbeforetwoLevel2peerscanformanadjacency?(Choosetwo.)

A.hellotimersetting

B.authenticationsettings

C.areaID

D.systemID

E.MTU

CorrectAnswer:BE

Section:Networking

Explanation

Explanation/Reference:

Reference:/c/en/us/support/docs/ip/integrated-intermediate-system-to-

intermediate-system-is-is/200293-IS-IS-Adjacency-and-Area-Types.html

QUESTION37

AcustomerofanISPrequestssupporttosetupaBGProutingpolicy.WhichBGPattributeshouldbe

configuredtochoosespecificBGPspeakersaspreferredpointsforthecustomerAS?

A.lowestmulti-exitdiscriminator

B.highestlocalpreferenceoutbound

C.lowestlocalpreferenceinbound

D.highestlocalpreferenceinbound

CorrectAnswer:B

Section:Networking

Explanation

Explanation/Reference:

QUESTION38

WhichthreeOSPFparametersmustmatchbeforetwodevicescanestablishanOSPFadjacency?(Choose

three.)

A.IPaddress

B.subnetmask

C.interfacecost

D.processID

E.areanumber

F.hellotimersetting

CorrectAnswer:BEF

Section:Networking

Explanation

Explanation/Reference:

QUESTION39

R1

interfacefastethernet1/0

ipaddress4

ipospfmessage-digest-key1md5cisco

ipospfauthenticationmessage-digest

Refertotheexhibit.WhichconditionmustbemetbytheOSPFpeerofrouterRIbeforethetwodevices

canestablishcommunication?

A.TheOSPFpeermustuseclear-textauthentication.

B.TheOSPFpeermustbeconfiguredasanOSPFstubrouter.

C.TheinterfaceontheOSPFpeermayhaveadifferentkeyID,butitmustusethesamekeyvalueasthe

configuredinterfa