Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 71:

  Which of the following are the three components of the three-tier hierarchical networking model used in the classical Cisco networks design? (Choose three.)

  A. Distribution

  B. Core

  C. Access

  D. Leaf

  E. Spine

  Correct Answer: ABC

• Question 72:

  In a Cisco SD-WAN network, which VPN Identifier is reserved as the transport VPN, carrying control traffic?

  A. VPN 0

  B. VPN 1

  C. VPN 512

  D. VPN 514

  Correct Answer: A

  VPN 0--Transport VPN, which carries control traffic via the configured WAN transport interfaces. Initially, VPN 0 contains all of a device's interfaces except for the management interface, and all interfaces are disabled. VPN 512--Management

  VPN, which carries out-of-band network management traffic among the Viptela devices in the overlay network. The interface used for management traffic resides in VPN 512. By default, VPN 512 is configured and enabled on all vEdge

  routers except for vEdge 100. For controller devices, by default, VPN 512 is not configured.

  VPNs 1 through 511, and 513 through 65530--VPNs on vEdge routers for service-side data traffic.

  https://www.cisco.com/c/en/us/support/docs/routers/12000-series-routers/47321-ciscoef.html

• Question 73:

  In a Cisco SD-WAN network, which VPN Identifier is reserved for carrying out-of-band network management traffic?

  A. VPN 0

  B. VPN 1

  C. VPN 512

  D. VPN 514

  Correct Answer: C

  VPN 0--Transport VPN, which carries control traffic via the configured WAN transport interfaces. Initially, VPN 0 contains all of a device's interfaces except for the management interface, and all interfaces are disabled. VPN 512--Management

  VPN, which carries out-of-band network management traffic among the Viptela devices in the overlay network. The interface used for management traffic resides in VPN 512. By default, VPN 512 is configured and enabled on all vEdge

  routers except for vEdge 100. For controller devices, by default, VPN 512 is not configured.

  VPNs 1 through 511, and 513 through 65530--VPNs on vEdge routers for service-side data traffic.

  https://www.cisco.com/c/en/us/support/docs/routers/12000-series-routers/47321-ciscoef.html

• Question 74:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Configure an EEM applet on LAB-RTR-01 that will automatically re-enable interface Loopback0 if it is administratively shut down.

  

  A. See the solution below in Explanation.

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  event manager applet LOOP0

  event syslog pattern "Interface Loopback0.* down" period 1

  action 1.0 syslog msg "Interface Loopback0 DOWN"

  action 2.0 cli command "enable"

  action 2.1 cli command "config t"

  action 2.2 cli command "interface loopback 0"

  action 2.3 cli command "no shutdown"

  action 3.0 syslog msg "Interface Loopback0 UP"

• Question 75:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Configure logging on SW01 and NetFlow on R01 to achieve these goals:

  1.

  Enable archive logging on SW01 to track each time a change is made to the configuration and the user who made the change.

  2.

  The NetFlow Top Talkers feature has been preconfigured on R01. Enable the feature for all inbound traffic on interface E0/2 of R01.

  R01

  

  SW01

  

  A. See the solution below in Explanation.

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  Task 1. SW01(config)#archive SW01(config-archive)# log config SW01(config-archive-log-config)# logging enable

  Task 2. R01(config)#interface Ethernet 0/2 R01(config-if)#ip route-cache flow Verification:

  R1#show ip cache flow R1#sh ip flow top-talkers Save the configuration SW01,R01#copy running-config startup-con

• Question 76:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked, the lab closes and cannot be reopened. Topology

  

  Tasks

  Configure the devices according to the topology to achieve these goals:

  1.

  Configure a SPAN session on SW01 using these parameters: Session Number: 20 Source Interface: VLAN 99 Traffic Direction: Transmitted Traffic Destination Interface: Ethernet0/1

  2.

  Configure the NetFlow Top Talkers feature for outbound traffic on interface E0/2 of R01 with these parameters: Number of Top Talkers: 50 Sort Type: Packets Cache Timeout: 30 seconds

  3.

  Configure an IP SLA operation on SW02 and start the ICMP probe with these parameters: Entry Number: 10 Target IP: 1.1.1.1 Source IP: 172.16.2.2 Frequency: 5 seconds Threshold: 250 milliseconds Timeout: 3000 milliseconds Lifetime: Forever

  A. See the solution below in Explanation.

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  SW1

  Config t Monitor session 20 source vlan 99 tx Monitor session 20 destination interface ethernet 0/1 Copy run start

  R1

  Config t Ip flow-top-talkers Top 50 Sort-by packets Cache time-out 30 Eth 0/2 Ip flow egress Copy run start

  SW02

  Config t Ip sla 10 Icmp-echo 1.1.1.1 source-ip 172.16.2.2 Frequency 5 Threshold 250 Timeout 3000 Ip sla schedule 10 start-time now life forever Copy run start

• Question 77:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary pre-configurations have been applied.

  5.

  Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed tasks.

  6.

  Do not change the enable password or hostname for any device.

  7.

  Save your configurations to NVRAM before moving to the next item.

  8.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  9.

  When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  1

  Configure R1 according to the topology to achieve these results:

  Tasks

  1.

  Configure eBGP using Loopback 0 for the router-id. Do not use the address-family command to accomplish this.

  2.

  Advertise R1's Loopback 100 and Loopback 200 networks to AS200 and AS300.

  

  A. See the solution below in Explanation.

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  First we need to know the IP addresses of loopback100 and 200 by using the “show ip int brief” command. If we assume that the IP address for loopback 100 is 100.100.100.1 and for loopback 200 it is 200.200.200.1, then the answer is below:

  router bgp 100 router-id Loopback0 neighbor 209.165.200.229 remote-as 200 neighbor 209.165.200.230 remote-as 300 network 100.100.100.1 mask 255.255.255.255 network 200.200.200.1 mask 255.255.255.255

• Question 78:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  OSPF is preconfigured on all devices except R20. Configure R20 to complete these tasks.

  Task 1:

  Configure OSPF according to the topology using these requirements:

  1.

  Use Process ID 10.

  2.

  Use Loopback1 for the Router ID.

  3.

  Advertise all networks into OSPF.

  - Use network statements under the OSPF process to accomplish this task. Task 2: Configure a /20 summary route for Area 40. Advertise only Type 3 LSAs into Area 0. R20

  

  A. See the solution below in Explanation.

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  router ospf 10 router-id Loopback1 network 10.20.30.0 0.0.0.255 area 0 network 10.10.30.0 0.0.0.255 area 40 network 10.10.20.0 0.0.0.255 area 40 area 40 range 10.40.0.0 255.255.240.0

  !

• Question 79:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  The operations team started configuring network devices for a new site. Complete the configurations to achieve these goals:

  1.

  Configure Rapid PVST+ on SW20.

  2.

  The trunk between SW20 and SW30 is not operational. Troubleshoot the issue and ensure PC3 can ping PC1 (10.10.100.10) across the link.

  3.

  The LACP port channel between SW10 and SW20 is not operational. Troubleshoot the issue and ensure PC3 can ping PC2 (10.10.100.20) across the port channel. Note: No access is provided to SW10 or SW30. Resolve these issues by making changes only to SW20. Traffic on all trunks should be restricted to only active VLANs.

  

  A. See the solution below in Explanation.

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  Task 1: Configure Rapid PVST+ on SW20 SW20(config)# spanning-tree mode rapid-pvst Task 2:

  1.

  Check Interface Configuration:

  Make sure that the trunk configuration is correctly set on interface e0/2 on SW20.

  SW20(config)# interface e0/2

  SW20(config-if)# switchport mode trunk

  SW20(config-if)# switchport trunk allowed vlan 500

  2.

  Ensure the Interface is Up:

  Check that the interface e0/2 is up:

  SW20# show interface e0/2

  3.

  Check and Clear Trunk Issues:

  Verify that VLAN 500 is allowed on the trunk and that there are no mismatches:

  SW20# show interfaces trunk

  SW20# show running-config interface e0/2

  4.

  If VLAN 500 is not listed, manually add it:

  SW20(config)# interface e0/2

  SW20(config-if)# switchport trunk allowed vlan add 500

  Task 3:

  Check LACP Configuration:

  Make sure that the interfaces e0/2 and e0/3 are correctly configured for LACP on SW20: SW20(config)# interface range e0/2 - 3 SW20(config-if-range)# channel-group 1 mode active

  Verify Port-Channel Configuration:

  Check the port-channel configuration and ensure that it's correctly set up:

  SW20# show etherchannel summary

  Restrict Trunk to Active VLANs:

  Ensure that only VLAN 500 is allowed on the port-channel trunk:

  SW20(config)# interface port-channel 1

  SW20(config-if)# switchport trunk allowed vlan 500

  Verify and Ensure Connectivity:

  After making the configurations, verify that PC3 can ping PC2 (10.10.100.20) and PC1 (10.10.100.10):

  SW20# ping 10.10.100.20

  SW20# ping 10.10.100.10

• Question 80:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked, the lab closes and cannot be reopened.

  Topology Tasks

  

  OSPF is preconfigured on all devices except R20. Configure R20 to complete these tasks.

  Task 1:

  Configure OSPF according to the topology using these requirements:

  1.

  Use Process ID 20.

  2.

  Use Loopback0 for the Router ID.

  3.

  Advertise all networks into OSPF.

  - Do not use network statements under the OSPF process to accomplish this task.

  Task 2:

  Configure a /18 summary route for Area 40. Advertise only Type 3 LSAs into Area 0.

  R20

  

  A. See the solution below in Explanation.

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  Task 1:

  Configure OSPF Process ID and Router ID:

  R20(config)# router ospf 20

  R20(config-router)# router-id

  Advertise Networks without Using Network Statements:

  R20(config)# interface e0/0

  R20(config-if)# ip ospf 20 area 0

  R20(config-if)# exit

  R20(config)# interface e0/1

  R20(config-if)# ip ospf 20 area 0

  R20(config-if)# exit

  R20(config)# interface e0/2

  R20(config-if)# ip ospf 20 area 40

  R20(config-if)# exit

  Task 2: Configure a /18 Summary Route for Area 40

  R20(config)# router ospf 20

  R20(config-router)# area 40 range 10.40.0.0 255.255.192.0

  This summarizes the 10.40.0.0/16 network to a /18 and advertises it into Area 0. By default, summary addresses are advertised as Type 3 LSAs.