Cisco CCNP Service Provider 350-501 Questions & Answers

• Question 251:

  Refer to the exhibit.

  R1 interface gigabitethernet1/0/0ipv6 enable ipv6 ospf 1 area 1interface gigabitethernet2/0/0ipv6 enable ipv6 ospf 1 area 2

  An engineer implemented OSPF neighbor relationship on an IOS device. Which configuration must be applied to get the OR/BOR election removed from interfaces running OSPF?

  A. ip ospf network broadcast on interfaces running OSPF

  B. ip ospf network point-to-point on interfaces running OSPF

  C. ip ospf network multipoint-point on interfaces running OSPF

  D. ip ospf network non-broadcast on n:erfaces running OSPF

  Correct Answer: B

• Question 252:

  A company needs to improve the use of the network resources that is used to deploy internet access service to customers on separate backbone and internet access network. Which two major design models should be used to configure MPLS L3VPNs and internet service in the same MPLS backbone? (Choose two.)

  A. Carriage of full internet routes in a VPN, in the case of internet access VPNS

  B. Internet routing through global routing on a PE router.

  C. Internet access routing as another VPN in the ISP network.

  D. Internet access through leaking of internet routed from the global table into the L3VPN VRF

  E. Internet access for global routing via a separate interface in a VRF

  Correct Answer: CE

  http://etutorials.org/Networking/MPLS+VPN+security/Part+II+Advanced+MPLS+VPN+Secu rity+Issues/Chapter+4+Secure+MPLS+VPN+Designs/Internet+Access/

• Question 253:

  Refer to the exhibit.

  

  An engineer configured BGP summarization on a customer's network. Which route is advertised to BGP peers?

  A. 192.0.0.0/16

  B. 192168.0.0/16

  C. 192.168.1.0/24

  D. 192168.0.5/30

  Correct Answer: B

• Question 254:

  Which type of attack is a Protocol attack?

  A. HTTP flood

  B. TFTP flood

  C. SYN flood

  D. Slowlorls

  Correct Answer: C

  Protocol Attacks Includes SYN floods, fragmented packet attacks, Ping of Death, Smurf DDoS and more. This type of attack consumes actual server resources

• Question 255:

  An engineer working for a private telecommunication company with an employ id:3948:613 needs to limit the malicious traffic on their network.

  Which configuration must the engineer use to implement URPF loose mode on the GigabitEthernet0/1 interface?

  A. router(config)# interface gigabitethernet0/1router(config-if)# ip address 192.168.200.1 255.255.255.0router(config-if)# ip verify unicast source reachable-via anyrouter(config-if)# ipv6 address 2001:DB8:1::1/96router(config-if)# ipv6 verify unicast source reachable-via any

  B. router(config)# interface gigabitethernet0/1router(config-if)# ip address 192.168.200.1 255.255.255.0router(config-if)# ip verify unicast source reachable-via rxrouter(config-if)# ipv6 address 2001:DB8:1::1/96router(config-if)# ipv6 verify unicast source reachable-via rx

  C. router(config)# interface gigabitethernet0/1router(config if)# ip address 192.168.200.1 255.255.255.0router(config-if)# ip verify unicast source reachable-via rxrouter(config-if)# ipv6 address 2001:DB8:1::1/96router(config-if)# ipv6 verify unicast source reachable-via any

  D. router(config)# interface gigabitethernet0/1router(config-if)# ip address 192.168.200.1 255.255.255.0router(config-if)# ip verify unicast source reachable-via anyrouter(config-if)# ipv6 address 2001:DB8:1::1/96router(config-if)# ipv6 verify unicast source reachable-via rx

  Correct Answer: A

  "reachable-via any" must be configured for Loose mode on both IPv4 and IPv6. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_urpf/configuration/xe-3s/sec-data-urpf-xe-3s-book/sec-unicast-rpf-loose-mode.html

• Question 256:

  What is the function of the FEC field within the OTN signal structure?

  A. It allows the sending devices to apply QoS within the OTN forwarding structure.

  B. It allows deep inspection of data payload fields.

  C. It allows receivers to correct errors upon data arrival

  D. It allows source nodes to discard payload errors before transmitting data on the network.

  Correct Answer: C

• Question 257:

  How is a telemetry session established for data analytics?

  A. A router initiates a session using the dial-out to a destination.

  B. A destination initiate a session to a router.

  C. The destination initiate a session using the dial-out more to the router.

  D. A router requests the data using Teinet.

  Correct Answer: A

• Question 258:

  Refer to the exhibit.

  

  The network engineer who manages ASN 65010 is provisioning a customer VRF named CUSTOMER-ABC on PE-2. The PE-CE routing protocol is OSPF Internet reachability is available via the OSPF 0 0 0.0/0 route advertised by CE-1 to PE-1 In the customer VRF

  Which configuration must the network engineer Implement on PE-2 so that CE-2 has connectivity to the Internet?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 259:

  Refer to the exhibit.

  

  An engineer working for private Service Provider with employee id: 3948:11:613 is configuring the BGPsec framework. Which two conditions must the engineer take into account? (Choose two.)

  A. BGPsec uses IPsec tunnel for security.

  B. The BGPsec framework secures the AS path.

  C. In BGPsec. all route advertisements are given an expiry time by the originator of the route.

  D. Private keys are part of the router key pair used to sign route updates.

  E. In BGPsec. route advertisements are not given an expiration time by the originator of the route.

  Correct Answer: BC

  https://tools.ietf.org/html/rfc8374#section-3.2

• Question 260:

  Refer to the exhibit.

  

  AN engineer is configuring segment routing on an ISP to simplify traffic engineering and management across network domains. What should the engineer do to complete the implementation of segment routing?

  A. OSPF must be configured with wide area metrics to support routing.

  B. The segment will run without any further configuration.

  C. Area authentication must be enable before segment routing will run.

  D. Area Authentication must be enable before segment routing will run.

  Correct Answer: C