NEW QUESTION 1
Which technology , implemented on aggregation –edge nodes at the aggregation layer, provides per
–tenant isolation at Layer 3 , with separate dedicated per-tenant routing and forwarding tables on the inside interfaces of firewall contexts?

• A. VDC
• B. VLAN
• C. VXLAN
• D. VRF-lite

Answer: D

NEW QUESTION 2
Which three network management requirements are common practices in network design? (Choose
three)

• A. Ensure that all network devices have their clocks synchronized.
• B. Collect SNMP poll information for future regression analysis.
• C. Capture both ingress and egress flow-based packets, while avoiding duplication of flows.
• D. Look at average counters instead of instantaneous counters for inconsistent and bursty KPIs, such as CPU utilization and interface utilization.
• E. Validate data plane health, and application and services availability, with synthetic traffic.

Answer: ABD

NEW QUESTION 3
Which OSPF design consideration, with regards to simplicity and address preservation, must be
considered when connecting two Layer 3 switches directly using 10 GBASE-T cabling and formatting an OSPF neighbor adjacency?

• A. Mesh groups must be included in the design
• B. The OSPF Hello and Dead timers must be tuned to detect failures as quickly as possible
• C. The OSPF network type must be set to point-to-multipoint
• D. An OSPF neighbor adjacency formed over loopback interfaces must be placed in Area 0
• E. The OSPF network type must be set to point-to-point

Answer: E

NEW QUESTION 4
Which two techniques are used in an OSPF network design to slow down the distribution of topology
information caused by a rapidly flapping link? (Choose two)

• A. LSA throttling
• B. SPF throttling
• C. IP event dampening
• D. Link-state incremental SPF
• E. Link-state partial SPF

Answer: AC

NEW QUESTION 5
You are designing an optical network. Your goal is to ensure that your design contains the highest degree of resiliency. In which two ways should you leverage a wavelength-switched optical network solution in your network design? (Choose two.)

• A. a wavelength-switched optical network guarantees restoration based strictly on the shortest path available
• B. a wavelength-switched optical network provides fault tolerance for single failures only
• C. a wavelength-switched optical network takes linear and nonlinear optical impairment calculation into account
• D. a wavelength-switched optical network assigns routing and wavelength information
• E. a wavelength-switched optical network eliminates the need for dispersion compensating units in a network

Answer: CD

NEW QUESTION 6
What are two possible drawbacks of ending Loop-Free Alternate to support fast convergence for
most destination IGP prefixes? (Choose two)

• A. The IGP topology might need to be adjust
• B. Loop-free alternate’s convergence in less than 100 milliseconds is not possible
• C. Loop-free alternate’s are supported only for prefixes that are considered external tot the IGP
• D. Loop-free alternates are not supported in global VPN VRF OSPF instances
• E. Additional path computations are needed

Answer: AE

NEW QUESTION 7
On a large enterprise security solution, which two options are IDS or IPS modes of operation?
(Choose two)

• A. Transparent mode
• B. Routed mode
• C. Inline mode
• D. Traffic discovery mode
• E. Promiscuous mode

Answer: C&E

NEW QUESTION 8
Which option reduces jitter in a VoIP network?

• A. Deploy WRED
• B. Deploy call Admission Control
• C. Adjust the playout delay buffer at the receiver
• D. Increase the bandwidth of the links

Answer: C

NEW QUESTION 9
Refer to the Exhibit.

The server is running multiple VLANs on its NIC. Which two Layer 2 features should be applied to the
network location identified by a circle? (Choose two)

• A. UDLD
• B. BPDU guard
• C. BPDU filtering
• D. Port Fast
• E. Loop guard
• F. PortFast trunk

Answer: BF

NEW QUESTION 10
Which two options are reasons for designing a large OSPF network with multiple areas connected to
the backbone? (Choose two)

• A. Reduce the number of routes within an area
• B. Route tagging capability
• C. Simplify logical topology
• D. Enhance failure detection
• E. Reduce SPF algorithm runs

Answer: AE

NEW QUESTION 11
Which four resources does Cisco Cloud Center provision in an ACL environment? (Choose four)

• A. VLAN Pool
• B. Contracts
• C. End point Group (EPG)
• D. VRF
• E. Subject/Filters
• F. Application Network Profile (ANP)

Answer: BCEF

NEW QUESTION 12
DRAG DROP
You are designing a new data center network. Drag and drop new data center requirements on the left into the appropriate design principle on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 13
At which two networks points is route summarization supported? (Choose two)

• A. At EIGRP AS boundaries
• B. At EIGRP interface boundaries
• C. At OSPF virtual-link boundaries
• D. At EIGRP are boundaries
• E. At OSPF area boundaries
• F. At EIGRP stub interface boundaries

Answer: BE

NEW QUESTION 14
Which option lists the cloud service models?

• A. Internet as a Service, Platform as a Service, and Storage as a Service.
• B. Infrastructure as a Service, Platform as a Service, and Storage as a Service.
• C. Infrastructure as a Service, Platform as a Service, and Software as a Service.
• D. Internet as a Service, Product as a Service, and Storage as a Service.
• E. Internet as a Service, Platform as a Service, and Software as a Service.

Answer: C

NEW QUESTION 15
DRAG DROP
A small local business recently had an outage after an employee plugged a switch into the corporate network, which caused the traffic pattern in the network to change. You have been tasked to redesign the network so that this does not happen again. From the left side to the right side, drag the PVRST+ features that should be implemented to prevent the corresponding root cause. Not all sources will be used.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 16
A regional ISP is running MPLS TE. These tunnels are configured manually using paths. Which
technology centralizes the traffic engineering decisions to reduce operational complexity?

• A. BGP Link State
• B. DiffServ-TE
• C. TE autobandwidth
• D. Shared Risk link Group

Answer: C

NEW QUESTION 17
An network is designed to use OSPF to reach eBGP peers. Which condition should be avoided in the
design to potentially prevent the eBGP peers do not flap continuously in case of link failure?

• A. Disable BGP synchronization.
• B. Advertise IP addresses used on eBGP peer statement via a non-backbone OSPF area.
• C. Advertise via eBGP IP addresses used on eBGP peer statements.
• D. Use an ACL to block BGP in one direction.

Answer: C

NEW QUESTION 18
VPLS is implemented in a Layer 2 network with 2000 VLANs. Which must be the primary concern to
ensure successful deployment of VPLS?

• A. The underlying transport mechanism
• B. PE scalability
• C. Flooding is necessary to propagate MAC address reachability information
• D. VLAN scalability

Answer: C

Explanation:
[ I think B not 100% sure]

NEW QUESTION 19
Which main IoT migration aspect should be reviewed for a manufacturing plant?

• A. Sensors
• B. Security
• C. Applications
• D. Wi-Fi Infrastructure
• E. Ethernet Switches

Answer: A

NEW QUESTION 20
Which two OSPF network type combinations can you use in the design that requires spoke-to-spoke
direct traffic? (Choose two.)

• A. hub as point-to-multipoint and spokes as non-broadcast
• B. hub as point-to-multipoint and spokes as point-to-point
• C. hub as broadcast and spokes as non-broadcast
• D. hub as point-to-point and spokes as point-to-point

Answer: BC

NEW QUESTION 21
Refer to the exhibit.

A customer interconnected hundreds of branch offices into a single DMVPN network, with the HUB
in the main data center. Due to security policies, the customer requires that the default route for all Internet traffic from the users at the branches must go through the tunnel and the only connections that are allowed to and from the branch router over the local internet circuit are the DMVPN tunnels. Which two combined actions must you take on the branch router to address these security requirements and keep the solution scalable? (Choose two)

• A. Place the WAN interface in a front-door VRF, leaving the tunnel interface in the default routing instance
• B. Protect the WAN interface by an inbound ACL that permits only IPsec-related traffic
• C. Implement a zone-based firewall that allows only IPsec-related traffic from zone UNTRUSTED to zone TRUSTED
• D. Add a host route for the public IP address of each remote branch and HUB routers that points directly to the local ISP, and add a default route that points to the tunnel
• E. Use a floating default route with the preferred path over the tunnel and a backup path over the Internet natively

Answer: AB

NEW QUESTION 22
An enterprise customer A with provider-independent address space is dual-homed to two ISP. Which
two options , when combined, allow for customer A to efficiently achieve out-bond traffic load- balancing? ( Choose two)

• A. Advertise Customer A subnets with a shorter AS path prepend to one of the ISPs than to the other
• B. Advertise Customer A subnets with different MED values to the two ISPs
• C. Accept a default route from both ISPs
• D. Make the CE connected to both ISPs route reflector
• E. Accept the routes originated on both ISPs and their direct peers

Answer: CE

NEW QUESTION 23
An operations engineer asks for your help with a new switching deployment. The engineer confirms
that STP is enabled on an edge switch, and a particular port is connected to another switch. The switch is not receiving configuration BPDUs, although it appears that everything is functioning correctly in the network. What is the design explanation?

• A. Bridge Assurance is enabled on the port
• B. Storm control broadcast is enabled on the port
• C. REP is enabled on the port
• D. BPDU Guard is enabled on the port

Answer: C

NEW QUESTION 24
Which option describes a design benefit of root guard?

• A. It prevents switch loops caused by unidirectional point-to-point link condition on Rapid PVST+ and MST.
• B. It prevents switch loops by detecting on one-way communications on the physical port.
• C. It allows small, unmanaged switches to be plugged into ports of access switches without the risk of switch loops.
• D. It makes the port go immediately into the forwarding state after being connected.
• E. It prevents switched traffic from traversing suboptimal paths on the network.
• F. It does not generate a spanning-tree topology change upon connecting and disconnecting a station on a port.

Answer: E

NEW QUESTION 25
You are working on a network design plan for a company with approximately 2000 sites. The sites will be connected using the public Internet. You plan to use private IP addressing in the network design, which will be routed without NAT through an encrypted WAN network. Some sites will be connected to the Internet with dynamic public IP addresses, and these addresses may change occasionally. Which VPN solution will support these design requirements?

• A. GET VPN must be used, because DMVPN does not scale to 2000 sites.
• B. DMVPN must be used, because GET VPN does not scale to 2000 sites.
• C. GET VPN must be used, because private IP addresses cannot be transferred with DMVPN through the public Internet.
• D. DMVPN must be used, because private IP addresses cannot be transferred with GET VPN through the public Internet.
• E. GET VPN must be used, because DMVPN does not support dynamic IP addresses for some sites.
• F. DMVPN must be used, because GET VPN does not support dynamic IP addresses for some sites.

Answer: D

NEW QUESTION 26
What are two benefits of following a structured hierarchical and modular design? (Choose two.)

• A. Each component can be designed independently for its role.
• B. Each component can be managed independently based on its role.
• C. Each component can be funded by different organizations based on its role.
• D. Each component can support multiple roles based on the requirements.
• E. Each component can provide redundancy for applications and services.

Answer: AB

NEW QUESTION 27
Which statement about SDN framework environment is true?

• A. The control plane functions is split between a SDN controller and the networking element
• B. The data plane is pulled from the networking element and put in a SDN controller
• C. The data plane is controlled by a centralized SDN element
• D. The control plane is pulled from the networking element and put in a SDN controller
• E. The control plane and data plane is pulled from the networking element and put in a SDN controller and SDN agent

Answer: D

NEW QUESTION 28
Which solution prevents microloops from be formed during network convergence time?

• A. RSVP-TE
• B. LFA
• C. Prefix suppression
• D. RLFA

Answer: D

NEW QUESTION 29
DRAG DROP
Drag and drop the NETCONF layers on the left onto their appropriate description on the left.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 30
You are redesigning a single-level IS-IS network with 500 routers, which have short-haul and long-
haul links Most of the time the routing domain is stable, but periodically interfaces on long-haul links bounce for a short period of time , causing 10 to 20 flaps in a few minutes. The probable cause is local road construction. Although fast convergence important, the client has concerns about taxing CPU cycles on the older routing platforms. What change should you recommend that both protects the CPU of the older routers during the short periods of excessive flapping, yet does not have an impact on fast convergence for all interface failures?

• A. Modify hello timers on routers with short-haul links
• B. Implement LSP generation throttling on routers with long-haul links
• C. Modify the length of time than an LSP remains in the router database without being refreshed on all routers
• D. Implement a delay between successive IS-IS LSP packet transmissions on routers with long-haul links

Answer: D

NEW QUESTION 31
......