Cisco CCNP Service Provider 350-501 Questions & Answers

• Question 141:

  Refer to the exhibit.

  

  ISP A provides VPLS services and DDoS protection to Company XYZ to connect their branches across the North America and Europe regions. The uplink from the data center to the ISP is 100 Mbps. The Company XYZ security team asked the ISP to redirect ICMP echo requests, which are currently going to the web server, to a new local security appliance. Which configuration must an ISP engineer apply to router R2 to redirect the ICMP traffic?

  A. class-map type traffic match-all B_210.10.65.1match destination-address ipv4 210.10.65.1match protocol 7match ipv4 icmp-type 3

  B. class-map type traffic match-all B_210.10.65.1match destination-address ipv4 210.10.65.1match protocol 1match ipv4 icmp-type 8

  C. class-map type traffic match-all B_210.10.65.1match destination-address ipv4 210.10.65.1match protocol 3match ipv4 icmp-type 5

  D. class-map type traffic match-all B_210.10.65.1match destination-address ipv4 210.10.65.1match protocol 6match ipv4 icmp-type 9

  Correct Answer: B

• Question 142:

  Refer to the exhibit.

  

  A network operator working for a private telecommunication company with an employee id: 7138: 13:414 just added new users to the network, which resides in VLANs connected to routers R1 and R4. The engineer now must configure the network so that routers R1 and R4 share routes to the VLANs, but routers R2 and R3 are prevented from including the routes in their routing tables. Which configuration must the engineer apply to R4 to begin implementing the request?

  A. pseudowire -class ciscotestencapsulation mpls

  interface gigabitethernet 1/0/1

  connect neighbor 192.168.1.1 101 pw-class cisco

  B. pseudowire -class ciscotestencapsulation mpls

  interface gigabitethernet 1/0/1

  xconnect 192.168.1.1 101 pw-class ciscotest

  C. pseudowire-class ciscotestencapsulation mplsservice-policy output ciscotest

  D. interface serial 2/0/0frame-relay encapsulationip address 192.168.1.4 255.255.255.0service-policy output ciscotest

  Correct Answer: B

• Question 143:

  Refer to the exhibit.

  

  A large organization is merging the network assets of a recently acquired competitor with one of its own satellite offices in the same geographic area. The newly acquired network is running a different routing protocol than the company's primary network. As part of the merger, a network engineer implemented this route map. Which task must the engineer perform to complete the implementation?

  A. Attach the route map to the redistribution command to manipulate the routes as they are shared.

  B. Enable metric-style wide to allow the use of extended metrics from the protocols.

  C. Configure an additional route map sequence to override the implicit deny at the end of the route map.

  D. Attach the route map to an IS-IS network statement to advertise the routes learned on this interface to IS-IS.

  Correct Answer: A

• Question 144:

  Refer to the exhibit.

  

  A network engineer must configure XR-PE1 for uninterruptible failover from the active RP to the standby RP. Neither peer device C-GW1 nor the core network of ASN 64512 support grateful restart extensions. Which configuration must the engineer apply to XR-PE1 to complete the task?

  A. nsr process-failures switchoverrouter ospf 100 nsf cisco

  B. router bgp 64512 nsrrouter ospf 100 nsrmpls ldp nsr

  C. nsr process-failures switchoverrouter bgp 64512 nsrrouter ospf 100 nsrmpls ldp nsr

  D. nsr process-failures switchoverrouter ospf 100 nsf letf

  Correct Answer: C

• Question 145:

  A service provider requires continuous real-time network monitoring to provide reliable SLAs to its customers. To satisfy this requirement, a network administrator is implementing gRPC dial out on an ASR with TLS. Receiver 192.168.10.2 will be assigned one of the subscriptions, and it will manage the ASR. Which configuration must the engineer apply to the router as part of the configuration process?

  A. snmp-server community publicsnmp-server enable trapssnmp-server host 192.168.10.2 version 2c public.

  B. telemetry model-driven

  destination-group DGroup1

  address family ipv4 192.168.10.2 1 port 10

  encoding self-describing-gpb

  C. snmp-server community publicsnmp-server enable trapssnmp-server enable traps snmp authentication snmp-server managersnmp-server manager session-timeout 1000

  D. telemetry model-drivendestination-group ciscotest

  address family ipv4 192.168.10.2 port 10

  encoding self-describing-gpb

  protocol grpc tis-hostname ciscotest.com

  Correct Answer: D

• Question 146:

  An engineer must implement QoS to prioritize traffic that requires better service throughout the network. The engineer started by configuring a class map to identify the high-priority traffic. Which additional tasks must the engineer perform to implement the new QoS policy?

  A. Attach the class map to a policy map that sets the minimum bandwidth allocated to the classified traffic and designates the action to be taken on the traffic.

  B. Attach the class map to a policy map that designates the action to be taken on the classified traffic and then attach the policy map to an interface using a service policy.

  C. Attach the class map to a policy map within a VRF to segregate the high-priority traffic and then attach the policy map to an interface in another VRF.

  D. Create a route map to manipulate the routes that are entered into the routing table and then attach the route map to an interface using a service policy.

  Correct Answer: B

• Question 147:

  Which benefit is provided by FRR?

  A. It provides fast forwarding path failure detection times for all media.

  B. It provides rapid failure detection between forwarding engines.

  C. It provides performance data for the service provider network.

  D. It protects Cisco MPLS TE LSPs from link and node failures.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_te_path_protect/configuration/xe-16-11/mp-te-path-protect-xe-16-11-book/mpls-traffic-engineering-fast-reroute-link-and-node-protection.html

• Question 148:

  A network administrator must monitor network usage to provide optimal performance to the network end users when the network is under heavy load. The administrator asked the engineer to install a new server to receive SNMP traps at destination 192.168.1.2. Which configuration must the engineer apply so that all traps are sent to the new server?

  A. snmp-server enable traps entitysnmp-server host 192.168.1.2 public

  B. snmp-server enable traps bgpsnmp-server host 192.168.1.2 public

  C. snmp-server enable traps isdnsnmp-server host 192.168.1.2 public

  D. snmp-server enable trapssnmp-server host 192.168.1.2 public

  Correct Answer: D

• Question 149:

  Which action does the ingress VTEP perform on traffic between EVPN VXLAN overlays?

  A. routing and bridging when doing asymmetric IRB

  B. bridging when doing symmetric IRB

  C. routing and tunneling when doing symmetric IRB

  D. routing when doing asymmetric IRB

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/products/collateral/switches/nexus-9000-series-switches/guide-c07-734107.html

• Question 150:

  Refer to the exhibit.

  

  Customers report occasional forwarding issues from hosts connected to R6 to hosts connected to R1. A network engineer has just updated the MPLS configuration on the network, and a targeted LDP session has been established between R1 and R5. Which additional task must the engineer perform so that the team can identify the path from R6 to R1 in case the forwarding issues continue?

  A. Configure an MPLS TE from R4 to R1 that routes through R5.

  B. Implement MPLS OAM within the network.

  C. Implement MPLS VPLS within the network.

  D. Configure MPLS LDP Sync on each router.

  Correct Answer: B