NEW QUESTION 1

An administrator attempts to download the pack NBAR2 file using TFTP from the CPE router to another device over the Gi0/0 interface. The CPE is configured as below:

The transfer fails. Which action resolves the issue?

• A. Change the WAN ACL to permit the UDP port 69 to allow TFTP
• B. Make the permit udp any eq tftp any entry the last entry in the WAN ACL.
• C. Change the WAN ACL to permit the entire UDP destination port range
• D. Shorten the file name to the 8+3 naming convention.

Answer: B

NEW QUESTION 2


Refer to the exhibit. An engineer cannot determine the time of the problem on R1 due to a mismatch between the router local clock and legs. Which command synchronizes the time between new log entries and the local clock on R1?

• A. service timestamps debug datetime msec show.timezone
• B. service timestamps log datetime locatetime msec
• C. service timestamps datebug datetime localtime msec
• D. service timestamps log datetime msec show-timezone

Answer: B

NEW QUESTION 3

Refer to Exhibit.

Which two configurations allow clients to get dynamic ip addresses assigned?

• A. Configure access-list 100 permit udp any any eq 61 as the first line
• B. Configure access-list 100 permit udp any any eq 86 as the first line
• C. Configure access-list 100 permit udp any any eq 68 as the first line
• D. Configure access-list 100 permit udp any any eq 69 as the first line
• E. Configure access-list 100 permit udp any any eq 67 as the first line

Answer: CE

Explanation:
A DHCP server that receives a DHCPDISCOVER message may respond with a DHCPOFFER message on UDP port 68 (BootP client).
…
In the event that the DHCP server is not on the local subnet, the DHCP server will send the DHCPOFFER, as a unicast packet, on UDP port 67, back to the DHCP/BootPRelay Agent from which the DHCPDISCOVER came.
Reference:
https://www.cisco.com/c/en/us/support/docs/ip/dynamic-address-allocation-resolution/27470-100.html

NEW QUESTION 4


Refer to the exhibit A network engineer received a call from the vendor for a failed attempt to remotely log in to their managed rooter loopback interface from 192 168.40 15 Which action must the network engineer take to resolve the issue?

• A. The IP access list VENDOR must be applied to interface loopback 100
• B. The time-range configuration must be changed to use absolute instead of periodic
• C. The EIGRP configuration must be updated to include a network statement for loopback 100
• D. The source IP summarization must be updated to include the vendor source IP address

Answer: C

NEW QUESTION 5

Refer to the exhibit.

A company is evaluating multiple network management system tools. Trending graphs generated by SNMP data are returned by the NMS and appear to have multiple gaps. While troubleshooting the issue, an engineer noticed the relevant output. What solves the gaps in the graphs?

• A. Remove the exceed-rate command in the class map.
• B. Remove the class map NMS from being part of control plane policing.
• C. Configure the CIR rate to a lower value that accommodates all the NMS tools
• D. Separate the NMS class map in multiple class maps based on the specific protocols with appropriate CoPP actions

Answer: D

Explanation:
Reference: https://tools.cisco.com/security/center/resources/copp_best_practices
The class-map NMS in the exhibit did not classify traffic into specific protocols so many packets were dropped. We should create some class-map to classify the receiving traffic. It is also a recommendation of CoPP/CPP policy:
“Developing a CPP policy starts with the classification of the control plane traffic. To that end, the control plane traffic needs to be first identified and separated into different class maps.”

NEW QUESTION 6

Refer to the exhibit.

The administrator configured the network devise for end-to-end reachability, but the ASBRs are not propagation routes to each other. Which set of configuration resolves this issue?

• A. router bgp 100 neighbor 10.1.1.1 route-reflector-client neighbor 10.1.2.2 route-reflector-client neighbor 10.1.3.3 route-reflector-client
• B. router bgp 100 neighbor 10.1.1.1 next-hop-self neighbor 10.1.2.2 next-hop-self neighbor 10.1.3.3 next-hop-self
• C. router bgp 100neighbor 10.1.1.1 update-source Loopback0neighbor 10.1.2.2 update-source Loopback0neighbor 10.1 3.3 update-source Loopback0
• D. router bgp 100neighbor 10.1.1.1 ebgp-multihopneighbor 1021.2.2 ebgp-multihopneighbor 10.1.3.3 ebgp-multihop

Answer: A

NEW QUESTION 7

Refer to the exhibit.

The network administrator can see the DHCP discovery packet in R1. but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the FaO/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two.)

• A. service dhcp-relay command on R1
• B. ip dhcp option 82 command on R2
• C. service dhcp command on R1
• D. ip dhcp relay information enable command on R1
• E. ip dhcp relay information trust-all command on R2

Answer: CE

Explanation:
* 1. R1 received DHCP packet and its interface was configured with the DHCP helper address. But we are not sure if R1 forward DHCP packet to R2 or not. 2. If we connect PC directly to R2 then this problem will not appear -> DHCP Server function was configured on R2.
From these facts, the most likely problem is related to Option 82. Maybe R2 ignored DHCP request packets because it was receiving these packets with the giant field set to 0.0.0.0.
By default Cisco IOS devices reject packets with zero “giaddr” and by default Cisco Catalyst switches use “giaddr” of zero when configured for DHCP snooping! Reference: https://blog.ine.com/2009/07/22/understanding-dhcp-option-82
If we can run the “debug ip dhcp server packet” on R2, we may see these messages:
*Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, input feature, MCI Check(64), rtype 0, forus FALSE, sendself FALSE, mtu 0, fw dchk FALSE *Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, rcvd 2 *Feb 22 23:54:57.759: IP: s=0.0.0.0
(FastEthernet0/1), d=255.255.255.255, len 34 4, stop process pak for forus packet
*Feb 22 23:54:57.759: DHCPD: inconsistent relay information. *Feb 22 23:54:57.759: DHCPD: relay information option exists, but giaddr is zero
We are receiving the DHCP packet from R1, source 0.0.0.0, and destination 255.255.255.255 broadcast, but if you notice from the debug output, R2, our DHCP Server, is complaining that the relay information is inconsistent. Option 82, Information Option, is contained in the packet but the GIADDR is zero. The GIADDR stands for Gateway IP Address, which is the IP Address of the relaying agent. The Option 82, Information Option, would then contain the receiving port and hostname of the Relaying Agent by default.
R2 sees the Option 82 information, signalling that the DHCP packet might have been relayed, BUT there is no relaying IP Address. This is the behavior of DHCP Snooping when enabling it on a switch, and since the switchport does not contain an IP Address, since it’s Layer 2, no GIADDR will be added.
Instead, just the Option 82 Information is added and this is the problem we have, but there are options:
* 1. You could trust all on R2 the DHCP Server, which will cause the server to not be so suspicious: – ip dhcp relay information trust-all – ip dhcp relay information trusted 2. Disable the addition of Option 82 information on SW: – no ip dhcp snooping information option 3. Trust the port that is receiving the DHCP Discover: – ip dhcp snooping trust
Any of these options will fix our predicament. Reference: https://evilttl.com/wiki/DHCP-Snooping
But in the answer choices, we only have 1 correct answer which is the command “ip dhcp relay information
trust-all”. We checked if we need any “service dhcp…” command on both IOS version 12.4 and 15.1:
Therefore we only have the “service dhcp” command, we don’t have any “service dhcp-relay” command available. But the description of the “service dhcp” command says that it enables both DHCP server and relay agent so this is the best answer left.

NEW QUESTION 8

The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped.
access-list 100 permit ip host 172.16.1.99 any
!
class-map CM-ADMIN match access-group 100
!
policy-map PM-COPP class CM-ADMIN
police 500000 conform-action transmit
!
interface E0/0
service-policy input PM-COPP
CoPP failed to capture the desired traffic and the CPU load is getting higher. Which two configurations resolve the issue? (Choose two.)

• A. interface E0/0no service-policy input PM-COPP!control-planeservice-policy input PM-COPP
• B. policy-map PM-COPP class CM-ADMINno police 500000 conform-action transmit police 500 conform-action transmit!control-planeservice-policy input PM-COPP
• C. no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80
• D. no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80access-list 100 permit tcp host 172.16.1.99 any eq 443
• E. policy-map PM-COPP class CM-ADMINno police 500000 conform-action transmit police 500 conform-action transmit

Answer: A

NEW QUESTION 9



Refer to the exhibit. An engineer Is troubleshooting a routing loop on the network to reach the 172.16.3.0/16 from the OSPF domain. Which configuration on router R1 resolves the Issue?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 10


Refer to the exhibit An engineer must connect the Reno and Detroit spokes using DMVPN phase 2 Hub tunnel configuration is

Which configuration accomplishes the task?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 11

Refer to the exhibit.

The R2 loopback interface is advertised with RIP and EIGRP using default values. Which configuration changes make R1 reach the R2 loopback using RIP?

• A. R1(config)# router rip R1(config-router)# distance 90
• B. R1(config)# router rip R1(config-router)# distance 100
• C. R1(config)# router eigrp 1R1(config-router)# distance eigrp 130 120
• D. R1(config)# router eigrp 1R1(config-router)# distance eigrp 120 120

Answer: C

Explanation:
distance (AD Number u want to change to) (neighbor IP) (Wildcard Mask) (access-list number)

NEW QUESTION 12

Which method changes the forwarding decision that a router makes without first changing the routing table or influencing the IP data plane?

• A. nonbroadcast multiaccess
• B. packet switching
• C. policy-based routing
• D. forwarding information base

Answer: C

NEW QUESTION 13

Refer to the exhibit.

A network is under a cyberattack. A network engineer connected to R1 by SSH and enabled the terminal monitor via SSH session to find the source and destination of the attack. The session was flooded with messages, which made it impossible for the engineer to troubleshoot the issue. Which command resolves this issue on R1?

• A. no terminal monitor
• B. (config)#terminal no monitor
• C. #terminal no monitor
• D. (config)#no terminal monitor

Answer: C

Explanation:
To turn off terminal monitor, use “terminal no monitor” in the enable mode

NEW QUESTION 14

How is a preshared key "Test’’ for all the remote VPN rooters configured In a DMVPN using GRE over IPsec set up?

• A. authentication pre-share Test address 0.0.0.0 0.0.0.0
• B. set pre-share Test address 0.0.0.0 0.0.0.0
• C. crypto Ipsec key Test address 0.0.0.0 0.0.0.0
• D. crypto isakmp key Test address 0.0.0.0 0.0.0.0

Answer: D

NEW QUESTION 15

An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1.255.255.255.252 along with the summary route. After finishing configuration, the customer complained not receiving summary route with specific loopback address. Which two configurations will fix it? (Choose two.)

• A. Configure access-list 1 permit 10.1.1.0.0.0.0.3.
• B. Configure access-list 1 permit 10.1.1.1.0.0.0.252.
• C. Configure access-list 1 and match under route-map Leak-Route.
• D. Configure route-map Leak-Route permit 10 and match access-list 1.
• E. Configure route-map Leak-Route permit 20.

Answer: AD

Explanation:
When you configure an EIGRP summary route, all networks that fall within the range of your summary are suppressed and no longer advertised on the interface. Only the summary route is advertised. But if we want to advertise a network that has been suppressed along with the summary route then we can use leak-map feature. The below commands will fix the configuration in this question:
R1(config)#access-list 1 permit 10.1.1.0 0.0.0.3
R1(config)#route-map Leak-Route permit 10 // this command will also remove the “route_map Leak-Route deny 10” command.
R1(config-route-map)#match ip address 1

NEW QUESTION 16

Refer to the exhibit.

An engineer must filter incoming EIGRP updates to allow only a set of specific prefixes. The distribute list is tested, and it filters out all routes except network 10.10.10.0/24. How should the engineer temporarily allow all prefixes to be learned by the routers again without adjusting the existing access list?

• A. A permit 20 statement should be added before completing the ACL with the required prefixes, and then the permit 20 statement can be removed.
• B. A permit any statement should be added before completing the ACL with the required prefixes and then the permit any statement can be removed.
• C. A continue statement should be added within the permit 10 statement before completing the ACL with the required prefixes, and then the continue statement can be removed.
• D. An extended access list must be used instead of a standard access list to accomplish the task

Answer: C

NEW QUESTION 17

Refer to the exhibit.

The network administrator configured the Chicago router to mutually redistribute the LA and NewYork routes with OSPF routes to be summarized as a single route in EIGRP using the longest summary mask:

After the configuration, the New York router receives all the specific LA routes but the summary route. Which set of configurations resolves the issue on the Chicago router?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 18
......