NEW QUESTION 1
Which statement about Cisco EAP-FAST is true?

• A. It does not require a RADIUS server certificate.
• B. It requires a client certificate.
• C. It is an IETF standard.
• D. It operates in transparent mode.

Answer: A

NEW QUESTION 2
An engineer is configuring local web authentication on a WLAN. The engineer chooses the Authentication radio button under the Layer 3 Security options for Web Policy. Which device presents the web authentication for the WLAN?

• A. ISE server
• B. local WLC
• C. RADIUS server
• D. anchor WLC

Answer: B

NEW QUESTION 3
What are two common sources of interference for WI-FI networks? (Choose two.)

• A. radar
• B. LED lights
• C. rogue AP
• D. conventional oven
• E. fire alarm

Answer: AC

NEW QUESTION 4
Which method displays text directly into the active console with a synchronous EEM applet policy?

• A. event manager applet boom event syslog pattern 'UP'action 1.0 gets 'logging directly to console'
• B. event manager applet boom event syslog pattern 'UP'action 1.0 syslog priority direct msg 'log directly to console'
• C. event manager applet boom event syslog pattern 'UP'action 1.0 puts 'logging directly to console'
• D. event manager applet boom event syslog pattern 'UP'action 1.0 string 'logging directly to console'

Answer: B

NEW QUESTION 5
Drag and drop the description from the left onto the correct QoS components on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Traffic Policing: Drops excessive Traffic, causes TCP retransmissions, introduce no delay/jitter Shaping: buffers, excessive traffic, introduce delay and jitter, typically delays, rather than drops traffic

NEW QUESTION 6
A local router shows an EBGP neighbor in the Active state. Which statement is true about the local router?

• A. The local router has active prefix in the forwarding table from the neighboring router
• B. The local router has BGP passive mode configured for the neighboring router
• C. The local router is attempting to open a TCP session with the neighboring router.
• D. The local router is receiving prefixes from the neighboring router and adding them in RIB-IN

Answer: C

NEW QUESTION 7
Which function does a fabric edge node perform in an SD-Access deployment?

• A. Connects the SD-Access fabric to another fabric or external Layer 3 networks
• B. Connects endpoints to the fabric and forwards their traffic
• C. Provides reachability border nodes in the fabric underlay
• D. Encapsulates end-user data traffic into LISP.

Answer: A

NEW QUESTION 8
Which DNS lookup does an access point perform when attempting CAPWAP discovery?

• A. CISCO-DNA-CONTROLLER local
• B. CAPWAP-CONTROLLER local
• C. CISCO-CONTROLLER local
• D. CISCO-CAPWAP-CONTROLLER local

Answer: D

NEW QUESTION 9
A customer has several small branches and wants to deploy a WI-FI solution with local management using CAPWAP. Which deployment model meets this requirement?

• A. Autonomous
• B. Mobility Express
• C. SD-Access wireless
• D. Local mode

Answer: B

NEW QUESTION 10
Which IP SLA operation requires the IP SLA responder to be configured on the remote end?

• A. ICMP echo
• B. UDP jitter
• C. CMP jitter
• D. TCP connect

Answer: D

NEW QUESTION 11
Which access controls list allows only TCP traffic with a destination port range of 22-433, excluding port 80?

• A. Deny tcp any any eq 80 Permit tcp any any gt 21 it 444
• B. Permit tcp any any ne 80
• C. Permit tcp any any range 22 443 Deny tcp any any eq 80
• D. Deny tcp any any ne 80Permit tcp any any range 22 443

Answer: A

NEW QUESTION 12
To increase total throughput and redundancy on the links between the wireless controller and switch, the customer enabled LAG on the wireless controller Which EtherChannel mode must be configured on the switch to allow the WLC to connect?

• A. Auto
• B. Active
• C. On
• D. Passive

Answer: C

NEW QUESTION 13
Which PAgP mode combination prevents an Etherchannel from forming?

• A. auto/auto
• B. desirable/desirable
• C. auto/desirable
• D. desirable

Answer: A

NEW QUESTION 14
Which two operations are valid for RESTCONF? (Choose two.)

• A. HEAD
• B. REMOVE
• C. PULL
• D. PATCH
• E. ADD
• F. PUSH

Answer: AD

NEW QUESTION 15
Refer to the exhibit.

An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthemet 0/1. Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 16
When configuration WPA2 Enterprise on a WLAN, which additional security component configuration is required?

• A. NTP server
• B. PKI server
• C. RADIUS server
• D. TACACS server

Answer: C

NEW QUESTION 17
Which controller is the single plane of management for Cisco SD-WAN?

• A. vBond
• B. vEdge
• C. vSmart
• D. vManage

Answer: D

NEW QUESTION 18
Based on this interface configuration, what is the expected state of OSPF adjacency?

• A. Full on both routers
• B. not established
• C. 2WAY/DROTHER on both routers
• D. FULL/BDR on R1 and FULL/BDR on R2

Answer: B

NEW QUESTION 19
At which Layer does Cisco DNA Center support REST controls?

• A. EEM applets or scripts
• B. Session layer
• C. YMAL output from responses to API calls
• D. Northbound APIs

Answer: D

NEW QUESTION 20
A network is being migrated from IPV4 to IPV6 using a dual-stack approach. Network management is already 100% IPV6 enabled. In a dual-stack network with two dual-stack NetFlow collections, how many flow exporters are needed per network device in the flexible NetFlow configuration?

• A. 1
• B. 2
• C. 4
• D. 8

Answer: B

NEW QUESTION 21
Refer to the exhibit.

An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router However, the router can still ping hosts on the 209.165.200.0/24 subnet. Which

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
of this behavior is true?
A. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.
B. Only standard access control lists can block traffic from a source IP address.
C. After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.
D. The access control list must contain an explicit deny to block traffic from the router.
Answer: A

NEW QUESTION 22
Refer to the exhibit.

Which IP address becomes the active next hop for 192.168.102 0/24 when 192.168.101.2 fails?

• A. A.-192.168.101.18B.192.168.101.6C.192.168.101.10D.192.168.101.14

Answer: A

NEW QUESTION 23
......