A network architect plans to implement MPLS OAM to provide additional troubleshooting functionality for the NOC team. After analyzing the configuration on the MPLS P/PE nodes, the architect decides to revise the CoPP policies. Which two actions ensure that the new solution is secure? (Choose two.)
A. Allow port 3505 in the outbound direction only.
B. Allow the ICMP protocol only.
C. Allow the TCP and UDP protocols.
D. Allow the UDP protocol only.
E. Allow port 3503 in the inbound direction only.
What is a feature of model-driven telemetry?
A. It occasionally streams to multiple servers in the network.
B. It is less secure because it uses community strings.
C. It uses the pull model to send requested data to a client when polled.
D. It uses the push model to stream data to desired destinations.
Refer to the exhibit.
A network engineer is implementing an LDP-based MPLS solution to enable packet flow between the two bank sites. The engineer was given two requirements:
1.
LDP peering must stay up when there is a link failure between R3 and R6
2.
LDP peering must not flap when there is a link failure between R5 and R6 Which action meets these requirement?
A. Reset the LDP session between R4 and R6.
B. Implement an LDP targeted session with R4 on R6.
C. Enable Link LDP on R4 and R6.
D. Configure LDP Session Protection on R4.
Refer to the exhibit.
A network engineer at ISP-B must advertise 198.19.100.0/24 – 198.19.105.0/24 prefixes to ISP-A with these requirements:
1.
Prefixes 198.19.100.0/24 – 198.19.102.0/24 must have the community set to 64602:10.
2.
Prefixes 198.19.103.0/24 – 198.19.105.0/24 must have the community set to 64602:11.
3.
The AS_PATH for the 198.19.103.0/24 – 198.19.105.0/24 prefixes must appear as “64602 64602” in ASN 64601.
Which configuration must the engineer implement on the ISP-B router to meet the requirements?
A. configure terminalaccess-list 30 deny 198.19.100.0 0.0.0.255access-list 30 deny 198.19.101.0 0.0.0.255access-list 30 deny 198.19.102.0 0.0.0.255! route-map ASN-64601-OUT permit 10
match ip address 30
set as-path prepend 64602 64602
set community 64602:11
route-map ASN-64601-OUT permit 20
set community 64602:10
end
B. configure terminalaccess-list 30 deny 198.19.103.0 0.0.0.255access-list 30 deny 198.19.104.0 0.0.0.255access-list 30 deny 198.19.105.0 0.0.0.255! route-map ASN-64601-OUT deny 10
match ip address 30
set as-path prepend 64602
set community 64602:11
route-map ASN-64601-OUT permit 20
set community 64602:10
end
C. configure terminalaccess-list 30 deny 198.19.100.0 0.0.0.255access-list 30 deny 198.19.101.0 0.0.0.255access-list 30 deny 198.19.102.0 0.0.0.255access-list 30 permit any! route-map ASN-64601-OUT permit 10
match ip address 30
set as-path prepend 64602
set community 64602:11
route-map ASN-64601-OUT permit 20
set community 64602:10
end
D. configure terminalaccess-list 30 deny 198.19.100.0 0.0.0.255access-list 30 deny 198.19.101.0 0.0.0.255access-list 30 deny 198.19.102.0 0.0.0.255access-list 30 permit any! route-map ASN-64601-OUT permit 10
set community 64602:10
!
route-map ASN-64601-OUT permit 20
match ip address 30
set as-path prepend 64602 64602
set community 64602:11
end
Refer to the exhibit.
The USER that is connecting an application on an Internet connection in AS 100 is facing these issues:
1.
The USER lost the connection to the application during a failure between IG and R2.
2.
Router R2 configuration is lost due to a power outage.
3.
The application the USER is connecting to is hosted behind CE2.
What action resolves the issues on R3 and R4 routers?
A. Apply low Local Preference on R4 toward R2.
B. Apply high Local Preference on R3 toward R1.
C. Set R4 as a route reflector for R3 and CE2.
D. Set R3 as a route reflector for R4 and CE1.
Refer to the exhibit.
An ISP engineer configured a VRF to isolate traffic for the customer ciscotest as shown. Now, the engineer must implement the Intra-AS VPN feature on PE1 to pass traffic between customer sites. Which additional configuration must the engineer apply to PE1 to meet this requirement?
A. router bgp 64525address-family ipv4 unicastneighbor 192.168.1.1
remote-as 64520
update-source Loopback0
address-family ipv4 unicast
B. router bgp 64525address-family vpnv4 unicastneighbor 192.168.1.1
remote-as 64525
update-source Loopback0
address-family vpnv4 unicast
C. router bgp 64525address-family ipv4 unicastneighbor 192.168.1.1
remote-as 64526
address-family ipv4 unicast
D. router bgp 64525address-family vpnv4 unicastneighbor 192.168.1.1
remote-as 64516
update-source Loopback0
address-family vpnv4 unicast
Refer to the exhibit.
The network engineer who manages ASN 65001 is troubleshooting suboptimal routing to the 198.18.15.0/24 prefix. According to the network requirements:
1.
Routing to IP destinations in the 198.18.15.0/25 block must be preferred via the EDGE-1 PE.
2.
Routing to IP destinations in the 198.18.15.128/25 block must be preferred via the EDGE-2 PE.
3.
More specific prefixes of the 198.18.15.0/24 block must not be advertised beyond the boundaries of ASN 64611.
4.
Routing to 198.18.15.0/24 must be redundant in case one of the uplinks on INT-R1 fails.
Which configuration must the network engineer implement on INT-R1 to correct the suboptimal routing and fix the issue?
A. configure terminalroute-policy ASN65001-SPECIFIC-OUT
if destination in (198.18.15.0/25) then
set community (no-export, peeras:65001)
done
endif
if destination in (198.18.15.0/24) then
prepend as-path 65001 3
done
endif
drop
end-policy
!
router bgp 65001
neighbor 100.65.0.1
address-family ipv4 unicast
route-policy ASN65001-SPECIFIC-OUT out
end
B. configure terminalroute-policy ASN65001-SPECIFIC-OUT
if destination in (198.18.15.0/25) then
set community (internal, peeras:65001)
done
endif
if destination in (198.18.15.0/24) then
done
endif
drop
end-policy
!
router bgp 65001
neighbor 100.65.0.1
address-family ipv4 unicast
route-policy ASN65001-SPECIFIC-OUT out
end
C. configure terminalroute-policy ASN65001-SPECIFIC-OUTif destination in (198.18.15.0/25) thenset community (no-advertise, peeras:65001)
done
endif
if destination in (198.18.15.128/25) then
prepend as-path 65001 3
done
endif
drop
end-policy
!
router bgp 65001
neighbor 100.65.0.1
address-family ipv4 unicast
route-policy ASN65001-SPECIFIC-OUT out
end
D. configure terminalroute-policy ASN65001-SPECIFIC-OUT
if destination in (198.18.15.0/25) then
set community (no-export, peeras:65001)
done
endif
if destination in (198.18.15.128/25) then
prepend as-path 65001 3
done
endif
drop
end-policy
!
router bgp 65001
neighbor 100.65.0.1
address-family ipv4 unicast
route-policy ASN65001-SPECIFIC-OUT in
end
Refer to the exhibit.
Routers P4 and P5 receive the 0.0.0.0/0 route from the ISP via eBGP peering. P4 is the primary Internet gateway router, and P5 is its backup. P5 is already advertising a default route into the OSPF domain. Which configuration must be applied to P4 so that it advertises a default route into OSPF and becomes the primary Internet gateway for the network?
A. configure terminalrouter ospfv3 100address-family ipv4 unicastdefault-information originate metric 40 metric-type 2end
B. configure terminalrouter ospfv3 100address-family ipv4 unicastdefault-information originate metric 40 metric-type 1end
C. configure terminalrouter ospfv3 100address-family ipv4 unicastredistribute bgp 65500 metric 40 metric-type 1end
D. configure terminalrouter ospfv3 100address-family ipv4 unicastdefault-information originate always metric 40 metric-type 1end
Refer to the exhibit.
A network support engineer for ASN 65502 receives a technical support ticket from a customer in ASN 65503 who reports that an eBGP session is down. The engineer determines that the peering failed after a recent change to the device at
192.168.26.2. EDGE-GW-1 must establish an eBGP session with the peering router 192.168.26.2. Which configuration establishes this session?
A. configure terminalno router bgp 65502router bgp 65503neighbor 192.168.26.2 remote-as 65503address-family ipv4neighbor 192.168.26.2 activateend
B. configure terminalrouter bgp 65502address-family ipv4neighbor 192.168.26.2 activateend
C. configure terminalno router bgp 65502router bgp 65503neighbor 192.168.26.2 remote-as 65123address-family ipv4neighbor 192.168.26.2 activateend
D. configure terminalrouter bgp 65502no neighbor 192.168.26.2 remote-as 65503neighbor 192.168.26.2 remote-as 65123address-family ipv4neighbor 192.168.26.2 activateend
Refer to the exhibit.
A network engineer configures CPE-1 for QoS with these requirements:
1.
IPv4 and IPv6 traffic originated by the CPE-1 WAN IP address must be marked with DSCP CS3.
2.
IPv4 LAN traffic must be marked with DSCP CS1.
3.
IPv6 LAN traffic must be marked with DSCP default.
Which configuration must the engineer implement on CPE-1?
A. class-map match-any SELF_TRAFFICmatch access-group name SELF_V4match access-group name SELF_V6
class-map match-all V4_ TRAFFICmatch protocol ipclass-map match-all V6_TRAFFICmatch protocol ipv6class-map match-all QG_4match qos-group 4class-map match-all QG_6
match qos-group 6
!
policy-map LAN-INPUT
class V4_TRAFFIC
set qos-group 4
class V6_TRAFFIC
set qos-group 6
!
policy-map WAN-OUTPUT
class SELF_TRAFFIC
set ip dscp cs3
class QG_4
set ip dscp cs1
class QG_6
set ip dscp default
B. class-map match-all SELF_TRAFFICmatch access-group name SELF_V4match access-group name SELF_V6
class-map match-all V4_ TRAFFICmatch protocol ipclass-map match-all V6_TRAFFICmatch protocol ipv6class-map match-all QG_4match qos-group 4class-map match-all QG_6
match qos-group 6
!
policy-map LAN-INPUT
class V4_TRAFFIC
set qos-group 4
class V6_TRAFFIC
set qos-group 6
!
policy-map WAN-OUTPUT
class SELF_TRAFFIC
set dscp cs3
class QG_4
set ip dscp cs1
class QG_6
set dscp default
C. class-map match-all SELF_TRAFFICmatch access-group name SELF_V4match access-group name SELF_V6
class-map match-all V4_ TRAFFICmatch protocol ipclass-map match-all V6_TRAFFICmatch protocol ipv6class-map match-all QG_4match qos-group 4class-map match-all QG_6
match qos-group 6
!
policy-map LAN-INPUT
class V4_TRAFFIC
set qos-group 4
class V6_TRAFFIC
set qos-group 6
!
policy-map WAN-OUTPUT
class SELF_TRAFFIC
set ip dscp cs3
class QG_4
set ip dscp cs1
class QG_6
set ip dscp default
D. class-map match-any SELF_TRAFFICmatch access-group name SELF_V4match access-group name SELF_V6
class-map match-all V4_ TRAFFICmatch protocol ipclass-map match-all V6_TRAFFICmatch protocol ipv6class-map match-all QG_4match qos-group 4class-map match-all QG_6
match qos-group 6
!
policy-map LAN-INPUT
class V4_TRAFFIC
set qos-group 4
class V6_TRAFFIC
set qos-group 6
!
policy-map WAN-OUTPUT
class SELF_TRAFFIC
set dscp cs3
class QG_4
set ip dscp cs1
class QG_6
set dscp default
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 350-501 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.