Cisco CCNP Service Provider 350-501 Questions & Answers

• Question 91:

  Refer to the exhibit.

  

  A network engineer must implement SNMPv3 on a Cisco IOS XR router running BGP. The engineer configures SNMPv3 to use SHA for authentication and AES for privacy on the routers, which are in a different data center in the same

  exchange as other routers. The engineer must also verify the associated MIB view family name, storage type, and status.

  Which set of actions meets these requirements?

  A. Add configuration snmp-server user UserJustMe GrpMonitoring v3 auth sha AuthPass1 priv 3des 128 PrivPass2 and use show snmp interface to verify the configuration.

  B. Add configuration snmp-server user AuthUser group2 remote 10.1.1.1 v3 auth sha and use show snmp mib to verify the configuration.

  C. Add configuration snmp-server user AuthUser group2 remote 10.1.1.1 v3 auth sha and use show snmp engineid to verify the configuration.

  D. Add configuration snmp-server user UserJustMe GrpMonitoring v3 auth sha AuthPass1 priv aes 128 PrivPass2 and use show snmp view to verify the configuration.

  Correct Answer: D

• Question 92:

  How does Cisco MPLS TE use OSPF extensions to allow for optimized transit between a headend router and a destination router?

  A. Router LSAs share router link advertisements to each router within the MPLS environment so that tunnels can be built bidirectionally.

  B. ASBR Summary LSAs share OSPF domain information so that the two routers know how to reach each other during tunnel setup.

  C. Network LSAs share RSVP information to build the tunnel between the two routers.

  D. Opaque LSAs calculate and establish unidirectional tunnels that are set according to the network constraint.

  Correct Answer: D

  Cisco MPLS TE uses OSPF extensions to allow for optimized transit between a headend router and a destination router by utilizing Opaque LSAs. Opaque LSAs allow for the calculation and establishment of unidirectional tunnels that are set according to the network constraint. The tunnels are built bidirectionally by utilizing Router LSAs, which share router link advertisements to each router within the MPLS environment. ASBR Summary LSAs are also used to share OSPF domain information so that the two routers know how to reach each other during tunnel setup. Furthermore, Network LSAs are used to share RSVP information which is necessary for setting up the tunnel between the two routers.

• Question 93:

  Refer to the exhibit.

  

  In the service provider network, routers PE1, PE2, and PE4 have access to the internet and provide access to customer networks. Router PE3 is used for access to other customer systems. In accordance with a new SLA, an engineer is updating settings on this network so that router CE1 accesses the internet via PE1 instead of PE2. Which two tasks must the engineer perform to complete the process? (Choose two.)

  A. On PE1, configure the internet VRF with import route target 102:102.

  B. On PE1 and PE4, configure the internet VRF with import route targets 102:102 and 104:104.

  C. On PE2, configure the internet VRF with import route target 102:102.

  D. On PE2 and PE3, configure the internet VRF with import route target 101:101.

  E. On PE2, configure the CE1 VRF with import route target 101:101.

  Correct Answer: A

• Question 94:

  Which Cisco software OS uses monolithic architecture?

  A. NX-OS

  B. IOS XE

  C. IOS XR

  D. IOS

  Correct Answer: D

  Explanation: Cisco Internetwork Operating System (IOS) is the software used on most Cisco Systems routers and current Cisco network switches. IOS is a package of routing, switching, internetworking and telecommunications functions integrated into a multitasking operating system. IOS uses a monolithic architecture, meaning that all processes run in a single address space, making it a single-image system.

• Question 95:

  Refer to the exhibit.

  

  An engineer with an employee 10:4350:47:853 is implementing IS-IS as the new routing protocol in the network. All routers in the network operate as Level 2 routers in the same private autonomous system, and the three branches are connected via dark fibre. The engineer has already implemented IS-IS on router R1 with NET address 49.0133.532b.ca14.6915.21311.F40F.1B3a.ba10.00. Which IS-IS NET address configuration must be implemented on R3 to establish ISIS connectivity?

  A. 49.0133.532b.ca14.6915.21311.f40f.1b4a.bb87.00

  B. 49.0135.332b.ca14.6975.28371.1721.1b3b.ca11.10

  C. 48.0133.532b.ca14.6915.21311.f40f.1626.bb98.00

  D. 49.0133.532b.ca14.6915.21311.1721.1b4a.0013.01

  Correct Answer: A

  IS-IS uses NET addresses to identify each router in the network, and the NET address of each router must be unique. In order for IS-IS to establish connectivity between R1 and R3, the NET address of R3 must be different from the NET address of R1, but it must also follow the same structure. In this case, the NET address of R1 is 49.0133.532b.ca14.6915.21311.F40F.1B3a.ba10.00, so the NET address of R3 must be 49.0133.532b.ca14.6915.21311.F40F.1B4a.bb87.00.

• Question 96:

  After troubleshooting multiple outages on the network due to repeated configuration errors, the network architect asked an engineer to enable NETCONF to facilitate future configurations. The configuration must enable syslog messaging to record NETCONF notifications from each of the numerous devices on the network. Which configuration must the engineer apply?

  A. username cisco test taker privilege 15 password 0 cisco testaaa new-model aaa authorization exec default local snmp-server community cisco test RWnetconf-yang cisco-ia snmp-community-string ciscotestlogging history warnings

  B. username cisco test taker privilege 15 password 0 ciscotestaaa new-model aaa authorization exec default local snmp-server community ciscotest RWnetconf-yang ciscologging history critical

  C. netconf-yangusername ciscotesttaker privilege 15 password 0 ciscotestaaa new-model aaa authorization exec default local snmp-server community ciscotest RWnetconf-yang cisco-ia snmp-community-string ciscotestlogging history debugging

  D. netconf-yangusername ciscotesttaker privilege 15 password 0 ciscotestsnmp-server community ciscotest RWnetconf-yang cisco-ia snmp-community-string ciscotestlogging history informational

  Correct Answer: C

• Question 97:

  What is the function of Cisco NFV infrastructure platform?

  A. It does not have a security audit feature.

  B. It does not offer high availability.

  C. It offers consistent performance.

  D. It offers decentralized logging.

  Correct Answer: C

• Question 98:

  Which condition must be met for TI-LFA to protect LDP traffic?

  A. For single-segment protection, the PQ node must be LDP and SR-capable.

  B. The protected destination must have an associated LDP label and prefix-SID.

  C. The point of local repair must be LDP-capable.

  D. For double-segment protection, the P and Q nodes must be SR-capable.

  Correct Answer: D

• Question 99:

  The NOC team must update the BGP forwarding configuration on the network with these requirements:

  1.

  BGP peers must establish a neighborship with NSF capability and restart the session for the capability to be exchanged after 120 seconds.

  2.

  BGP peers must delete routes after 360 seconds of inactivity. Which action meets these requirements?

  A. Set the BGP restart-time to 120 seconds and the BGP ha-mode sso to 360 seconds.

  B. Set the stalepath-time to 120 seconds and the BGP restart-time to 360 seconds.

  C. Set the BGP ha-mode sso to 120 seconds and the BGP restart-time to 360 seconds.

  D. Set the BGP restart-time to 120 seconds and the stalepath-time to 360 seconds.

  Correct Answer: D

• Question 100:

  Refer to the exhibit.

  

  A network engineer is configuring router RB to secure BGP advertisements against route hijacking activity. RB must validate all prefixes that it receives from origin AS 200 before installing them in the BGP route table. Which configuration meets the requirement?

  A. RB(config)# router bgp 100RB(config-router)# address-family ipv4 unicastRB(config-router-af)# bgp bestpath origin-as use validity

  B. RB(config-bgp)# router bgp 100RB(config-bgp)# bgp origin-as validation signal ibgpRB(config-bgp)# bgp bestpath origin-as allow invalid

  C. RB(config-bgp)# router bgp 100RB(config-bgp)# bgp origin-as validation time off

  D. RB(config)# router bgp 100RB(config-router)# address-family ipv4 unicastPB(config-router-af)# bgp origin-as validation enable

  Correct Answer: D