NEW QUESTION 1

Which two technologies optimize MPLS infrastructure using bandwidth protection services when experiencing slow response7 (Choose two.)

• A. IPLFA
• B. MPLS OAM
• C. VPLS
• D. SO-MPLS
• E. Fast-Rwoute

Answer: AE

NEW QUESTION 2

An engineer configured the wrong default gateway for the Cisco DNA Center enterprise interface during the install. Which command must the engineer run to correct the configuration?

• A. sudo maglev-config update
• B. sudo maglev install config update
• C. sudo maglev reinstall
• D. sudo update config install

Answer: A

NEW QUESTION 3



Refer to the exhibit. In Cuco DNA Center, a network engineer identifies that BGP-learned networks are repeatedly withdrawn from peers. Which configuration must the engineer apply to resolve the Issue?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: D

NEW QUESTION 4

Which statement about IPv6 ND inspection is true?

• A. It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.
• B. It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.
• C. It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.
• D. It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Answer: B

Explanation:
IPv6 ND inspection learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables. IPv6 ND inspection analyzes neighbor discovery messages in order to build a trusted binding table database, and IPv6 neighbor discovery messages that do not have valid bindings are dropped. A neighbor discovery message is considered trustworthy if its IPv6-to-MAC mapping is verifiable.
This feature mitigates some of the inherent vulnerabilities for the neighbor discovery mechanism, such as attacks on duplicate address detection (DAD), address resolution, device discovery, and the neighbor cache.
Reference:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-s/ip6f-15-s-book/ip6-snooping.p

NEW QUESTION 5

A customer requested a GRE tunnel through the provider network between two customer sites using loopback to hide internal networks. Which configuration on R2 establishes the tunnel with R1?

• A. R2(config)# interface Tunnel 1R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1400R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 192.168.20.1 R2(config-if)# tunnel destination 192.168.10.1
• B. R2(config)# interface Tunnel 1R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1400R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 10.10.2.2R2(config-if)# tunnel destination 10.10.1.1
• C. R2(config)# interface Tunnel 1R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1500R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 192.168.20.1 R2(config-if)# tunnel destination 10.10.1.1
• D. R2(config)# interface Tunnel 1R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1500R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 10.10.2.2 R2(config-if)# tunnel destination 10.10.1.1

Answer: D

NEW QUESTION 6

Refer to the exhibit.

R1 is configured with IP SLA to check the availability of the server behind R6 but it kept failing. Which configuration resolves the issue?

• A. R1(config)# ip sla 700R1(config-track)# delay down 30 up 20
• B. R1(config)# ip sla 700R1(config-track)# delay down 20 up 30
• C. R1(config)# track 700 ip sla 700 R1(config-track)# delay down 30 up 20
• D. R1(config)# track 700 ip sla 700 R1(config-track)# delay down 20 up 30

Answer: C

NEW QUESTION 7

Refer to the exhibit.

Users report that IP addresses cannot be acquired from the DHCP server. The DHCP
server is configured as shown. About 300 total nonconcurrent users are using this DHCP server, but none of them are active for more than two hours per day. Which action fixes the issue within the current resources?

• A. Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool
• B. Configure the DHCP lease time to a smaller value
• C. Configure the DHCP lease time to a bigger value
• D. Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool

Answer: B

NEW QUESTION 8

Refer to the exhibit.

A network engineer is adding a new spoke router into an existing DMVPN Phase 3 tunnel with a hub router to provide secure communication between sites Which additional configuration must the engineer apply to enable the tunnel to come up?

• A. ip nhrp registration no-unique
• B. ip nhrp server-only non-caching
• C. ip nhrp responder tunnel
• D. ip nhrpnhs 172.23.5.1

Answer: D

NEW QUESTION 9

What statement about route distinguishes in an MPLS network is true?

• A. Route distinguishes make a unique VPNv4 address across the MPLS network.
• B. Route distinguishers allow multiple instances of a routing table to coexist within the edge router.
• C. Route distinguishes are used for label bindings
• D. Route distinguishes define which prefixes are imported and exported on the edge router

Answer: A

NEW QUESTION 10

What are two functions of MPLS Layer 3 VPNs? (Choose two.)

• A. LDP and BGP can be used for Pseudowire signaling.
• B. It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.
• C. BGP is used for signaling customer VPNv4 routes between PE nodes.
• D. A packet with node segment ID is forwarded along with shortest path to destination.
• E. Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

Answer: CE

Explanation:
MPLS Layer-3 VPNs provide IP connectivity among CE sites* MPLS VPNs enable full-mesh, hub-andspoke, and hybrid IP connectivity* CE sites connect to the MPLS network via IP peering across PE-CE links* MPLS Layer-3 VPNs are implemented via VRFs on PE edge nodes* VRFs providing customer routing and forwarding segmentation* BGP used for signaling customer VPN (VPNv4) routes between PE nodes* To ensure traffic separation, customer traffic is encapsulated in an additional VPN label when forwarded in MPLS network* Key applications are layer-3 business VPN services, enterprise network segmentation, and segmented layer-3 Data Center access
Reference: https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2018/pdf/BRKMPL-1100.pdf

NEW QUESTION 11

What is an advantage of implementing BFD?

• A. BFD provides faster updates for any flapping route.
• B. BFD provides millisecond failure detection
• C. BFD is deployed without the need to run any routing protocol
• D. BFD provides better capabilities to maintain the routing table

Answer: B

NEW QUESTION 12

Refer to the exhibits.

Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two commands are missing? (Choose two.)

• A. The ip nhrp redirect command is missing on the spoke routers.
• B. The ip nhrp shortcut command is missing on the spoke routers.
• C. The ip nhrp redirect commands is missing on the hub router.
• D. The ip nhrp shortcut commands is missing on the hub router.
• E. The ip nhrp map command is missing on the hub router.

Answer: BC

NEW QUESTION 13

An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table. What should be configured to accomplish this task?

• A. set ip next-hop
• B. set ip default next-hop
• C. set ip next-hop recursive
• D. set ip next-hop verify-availability

Answer: B

Explanation:

NEW QUESTION 14


Refer to the exhibit. An organization is installing a new L3 MPLS link to establish DM VPN Phase 2 tunnels between the hub and two spoke routers Which additional configuration should the engineer implement on each device to achieve optimal routing between the spokes?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 15


Refer to the exhibit EIGRP adjacency between router A and router C is not working as expected Which two configurations resolve the issue? (Choose two )
A)

B)

C)

D)

E)

• A. Option A
• B. Option B
• C. Option C
• D. Option D
• E. Option E

Answer: BC

NEW QUESTION 16

Refer to the exhibit.

A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using SNMP and TFTP servers.
Which configuration prevents changes from unauthorized NMS and TFTP servers?

• A. access-list 20 permit 10.221.10.11 access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20 snmp-server community Cisc0Us3r RO 20snmp-server community Cisc0wrus3r RW 20 snmp-server tftp-server-list 20
• B. access-list 20 permit 10.221.10.11 access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20 snmp-server community Cisc0wrus3r RO 20snmp-server community Cisc0Us3r RW 20 snmp-server tftp-server-list 20
• C. access-list 20 permit 10.221.10.11 access-list 20 deny any log
• D. access-list 20 permit 10.221.10.11

Answer: A

NEW QUESTION 17

Refer to the exhibit.

A network administrator is trying to switch to the privileged EXEC level on R1 but failed. Which configuration resolves the issue?

• A. Enable password Cisco@123
• B. tacass server enable-password Cisco@123
• C. tacacs-server enable-password Cisco@123
• D. enable-password Cisco@123

Answer: D

NEW QUESTION 18
......