NEW QUESTION 1

Which three characteristics does the SNMPv3 protocols add compared to previous SNMP versions? (Choose three)

• A. Performance improvements
• B. Encryption support
• C. Authentication support
• D. Manager-to-manager communications
• E. Remote configuration enhancements
• F. Reliable transport based on TCP instead of UDP

Answer: BCE

NEW QUESTION 2

What is the port number of an IPSec Encapsulating Security Payload packet?

• A. IP protocol 50
• B. IP protocol 51
• C. TCP port 50
• D. TCP port 51
• E. UDP port 50
• F. UDP port 51

Answer: A

NEW QUESTION 3

In an NFV environment, what is the role of an SDN controller?

• A. Dynamically controls all of the software components
• B. Spins up the VMs that are required to build the NFVs
• C. Dynamically scales up and scales down VM resources
• D. Connects the virtualized networking devices through a common policy-based model

Answer: D

NEW QUESTION 4

Which two statements about MPLS Label Distribution Protocol (LDP) are true? (Choose two)

• A. LDP hello packets are sent to TCP 646.
• B. LDP session packets are sent to TCP 646.
• C. LDP session packets are sent to TCP 711.
• D. LDP hello packets are sent to TCP 711.
• E. LDP hello packets are sent to UDP 711.
• F. LDP hello packets are sent to UDP 646.

Answer: BF

NEW QUESTION 5

What features set is most frequently used to prevent hackers from flooding a port with MAC- addresses?

• A. BPDU Guard
• B. 802.x
• C. Port Security
• D. Storm Control

Answer: C

NEW QUESTION 6

Refer to the exhibit. A service provider is providing Layer 2 VPN between CE1 and CE2 via a pseudowire created between R1 and R5. What is the label stack of the packets leaving R6 going toward R5 for traffic flowing from CE1 to CE2?

• A. Single label of 17
• B. 24(top) and 0 (Bottom)
• C. Single label of 24
• D. 3 (top) and 24 (bottom)
• E. 0 (top) and 24 (bottom)
• F. 0 (top) and 17 (bottom)
• G. 3 (top) and 24 (bottom)
• H. 17 (top) and 0 (bottom)

Answer: F

NEW QUESTION 7

Which two components are shared across secure domain routers? (Choose two)

• A. Fabric
• B. CPU
• C. Memory
• D. Fans
• E. Forwarding engine

Answer: AD

NEW QUESTION 8

Refer to the exhibit. Why is router 1 unable to ping 10.10.100.2 from vrf cust1?

• A. Because Multi-VRF support is not enabled
• B. Because address-family ipv4 is missing from the VRF statement
• C. Because of an incorrect interface configuration
• D. Because of a missing BGP configuration

Answer: B

NEW QUESTION 9

An operation engineer from AS 2000 must deploy this inbound routing policy:
*Based on RFC 1998, modify the local-preference value for prefixes containing BGP community values 2000:90 and 2000:110
*Strip any BGP community of the BGP prefixes received from customers that are in the range between 2000:1 and 2000:2000. Any other BGP community values must not be removed
*Apply 2000:1003 BGP community Value, which indicates that the BGP prefix is learned form a customer
Which configuration accomplishes this BGP routing policy?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 10

What is used as label in cell-based MPLS?

• A. VPI and VCI
• B. None of above
• C. VCI
• D. Specific 4 bytes label
• E. VPI

Answer: A

NEW QUESTION 11


Refer to the exhibit. How can IPv4 hosts located on the IPv4 Internet access the IPv6-only servers located in a small IPv6-only net

• A. By using NAT 444
• B. By using stateless NAT64 with static v6v4 mapping
• C. By using statefull NAT64
• D. It is not possible IPv6 translation with IPv4 Internet hosts
• E. By using stateful NAT64 with static v6v4 mappings

Answer: E

NEW QUESTION 12

In the MVPN profile 3 ( Rosen GRE with BGP-AS), which information is included inside of the opaque value?

• A. Type 2- Root Address: VPN-ID; 0-n
• B. Type 1-source-PE: Global-ID
• C. RD:S,G
• D. Not applicable for this profile

Answer: D

NEW QUESTION 13

What is the payload capacity of an SDH/STM1 circuit?

• A. 155.52 Mbps
• B. 150.336 Mbps
• C. 153.472 Mbps
• D. 151.424 Mbps

Answer: B

NEW QUESTION 14

Cisco IOS XR has implemented a nonstop routing feature so that when RP failover occurs, the routing information can be recovered locally. Which protocol does not support the NSR feature?

• A. OSPF
• B. LDP
• C. BGP
• D. IS-IS
• E. RSVP

Answer: E

NEW QUESTION 15

Which two statements about 10 Gigabit Ethernet (10GE) are true? (Choose two.)

• A. 10 Gigabit Ethernet does not support VLAN definition
• B. 10 Gigabit Ethernet supports full duplex links, but does not support half duplex links.
• C. 10 Gigabit Ethernet supports unshielded or shielded twisted-pair cable connections
• D. 10 Gigabit Ethernet supports Carrier Sense Multiple Access with Collision Detection (CSMA/CD).
• E. 10 Gigabit Ethernet supports optical fiber connections in single mode onl
• F. Multi mode is not supported.

Answer: BC

NEW QUESTION 16

Which two Any Transport over MPLS (AToM) traffic encapsulations require the use of a control word? (Choose two)

• A. HDLC
• B. ATM AAL5
• C. PPP
• D. Ethernet VLAN
• E. Frame Relay

Answer: BE

Explanation:
AToM Header
The AToM header is 4 bytes (control word). The control word is optional for Ethernet, PPP, HDLC, and cell relay transport types. However, the control word is required for Frame Relay, and ATM AAL5 transport types.

NEW QUESTION 17

Which three PIM modes require RP? (Choose three)

• A. PIM-DM
• B. PIM-SM
• C. PIM with mLDP
• D. PIM-SSM
• E. PIM anycast
• F. PIM-BIDIR

Answer: BEF

NEW QUESTION 18

IPv6 multicast is enabled in a VPLS domain. An operations engineer must reduce the multicast flooding in this VPLS domain. Which feature constrains IPv6 traffic at Layer 2 by configuring Layer 2 ports dynamically to forward IPv6 multicast traffic only to those ports that want to receive it?

• A. IGMP snooping
• B. MLD snooping
• C. MLD querier
• D. IGMP version 3
• E. MLD version 2

Answer: B

NEW QUESTION 19
DRAG DROP
Drag and drop the BGP path attributes description on the left onto the correct BGP path
attribute classification on the right

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 20
DRAG DROP

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 21

Which type of mVPN core tree does the Rosen mLDP profile use to signal individual P2MP LSP that are mapped to SGs?

• A. S-PMSI
• B. MS-PMSI
• C. partitioned MDT
• D. MI-PMSI

Answer: D

NEW QUESTION 22

A router is unable to route packets over a PPPoE link. What could be the cause of this issue?

• A. incorrect IPCP connection for the agreed-upon IP address
• B. incorrect dialer map profile
• C. incorrect username of the PPP connection
• D. incorrect access list

Answer: B

NEW QUESTION 23

Which two statements are correct?

• A. A VC type 5 transports a VLAN over MPLS.
• B. A VC type 4 tunnels an Ethernet port over MPLS.
• C. A VC type 5 tunnels an Ethernet port over MPLS.
• D. A VC type 4 transports a VLAN over MPLS.

Answer: CD

Explanation:
VC Type 4 is used for Ethernet VLAN mode. VC Type 5 is used for Ethernet Port mode.

NEW QUESTION 24

Which two statements are true about DPT/RPR?

• A. DPT/RPR uses a bi-directional ring consisting of two symmetric counter rotating fibre rings.
• B. DPT/RPR is defined in the IEEE 802.17 standard and it uses Token Bucket system to avoid collisions on the fiber.
• C. DPT/RPR can be deployed in the Core of the SP networks where point-to-point POS links are used to make best use of the Bandwidth.
• D. In DPT/RPR rings, data packets can be sent in one direction (downstream) and the corresponding control packets in the opposite direction (upstream), thus using both fibres concurrently to maximize bandwidth.

Answer: AD

Explanation:
• SONET/SDH is the accepted transport architecture.
• The key building block is the twin optical fiber ring forming point-to-point connections that are “nailed up” between several SONET/SDH add-drop multiplexers (ADM).
• The twin fiber rings in SONET/SDH ring run in parallel, one is the working ring carrying the communication traffic. The other is the protection ring acting as a backup in the event of cable failure or failure of an ADM node.
• SONET/SDH provides good quality performance monitoring and failure protection information which also travel along the ring.
• The exclusive use of one ring for data and the other for protection means one ring is fully utilized and the other ring is virtually redundant, awaiting the unlikely event of a failure. This, of course, is not the most efficient use of fiber, especially given the considerable cost to lay fiber.

NEW QUESTION 25

A company is using a Layer 2 Frame Relay network. Which circuit emulation will a network engineer use to extend the customer Frame Relay network over the Service Provider backbone?

• A. GRE
• B. L3VPN
• C. AToM
• D. VPLS

Answer: C

NEW QUESTION 26

Which Cisco IOS XR configuration creates an L2VPN using BGP as auto-discovery and LDP a signaling?
A.
l2vpn
bridge group bg1 bridge-domain bg1_bd1 interface gig0/6/0/1.1
!
vfi bg1_db1_vifi vpn-id 101
auto discovery bgp rd 101:1
route-target 101:1 signaling-protocol ldp vpls-id 1:101
B.
l2vpn
bridge group bg1 bridge-domain bg1_bd1 interface gig0/6/0/1.1
!
vfi bg1_db1_vifi vpn-id 111
auto discovery bgp rd auto
route-target 111:1 signaling-protocol ldp
ve-id 3
C.
l2vpn
bridge group bg1 bridge-domain bg1_bd1 interface gig0/6/0/1.1
!
vfi bg1_db1_vifi vpn-id 111
auto discovery ldp rd auto
route-target auto signaling-protocol ldp vpls-id auto
D.
l2vpn
bridge group bg1 bridge-domain bg1_bd1 interface gig0/6/0/1.123
!
vfi bg1_db1_vifi vpn-id 123
auto discovery bgp rd 123:3
route-target auto signaling-protocol ldp vpls-id 3

• A.

Answer: A

NEW QUESTION 27

In order to validate update message that contain the BGPsec_path attribute, the recipient must be two pieces of data that are obtained from valid PPKI certifications and ROAs. Which are these two pieces of data? (Choose two)

• A. The public key infrastructure with the necessary certificate objects, the dig
• B. The OPEN BGP messages that is successfully negotiated between BGP speakers to use the new BGP attribute, the BGPsec_Path
• C. The exchanged certificate with internet Routing Registries using cryptographic identity management systems
• D. The AS number and the list of IP address prefix for each valid ROA
• E. The AS number, public key, and subject key identifier for each valid RPKI router certificate

Answer: DE

NEW QUESTION 28
DRAG DROP

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

New Questions

NEW QUESTION 29
......