Cisco CCNP Service Provider 350-501 Questions & Answers

• Question 481:

  Which additional feature does MPLS DiffServ tunneling support?

  A. matching EXP and DSCP values

  B. PHB layer management

  C. using GRE tunnels to hide markings

  D. interaction between MPLS and IGP

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_te_diffserv/configuration/15-mt/mp-te-diffserv-15-mt-book/mp-diffserv-tun-mode.html

• Question 482:

  Refer to the exhibit An engineer is preparing to implement data plane security configuration. Which statement about this configuration is true?

  

  A. Router 2 is the router receiving the DDoS attack.

  B. Router 1 must be configured with uRPF for the RTBH implementation to be effective.

  C. Router 1 is the trigger router in a RTBH implementation.

  D. Router 2 must configure a route to null 0 for network 192.168.1.0/24 for the RTBH implementation to be complete.

  Correct Answer: C

• Question 483:

  Refer to the exhibit

  

  Router 1 was experiencing a DDoS attack that was traced to interface gigabitethernet0/1. Which statement about this configuration is true?

  A. Router 1 accepts all traffic that ingresses and egresses interface gigabitethernet0/1.

  B. Router 1 drops all traffic that ingresses interface gigabitethernet0/1 that has a FIB entry that exits a different interface.

  C. Router 1 accepts source addresses that have a match in the FIB that indicates it is reachable through a real interface.

  D. Router 1 accepts source addresses on interface gigabitethernet0/1 that are private addresses.

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_1/nx-os/security/configuration/guide/sec_nx-os-cfg/sec_urpf.html

• Question 484:

  Refer to the exhibit

  

  R1 is connected to two service providers and is under a DDoS attack.

  Which statement about this design is true if URPF in strict mode is configured on both interfaces?

  A. R1 drops all traffic that ingresses either interface that has a FIB entry that exits a different interface.

  B. R1 drops destination addresses that are routed to a null interface on the router.

  C. R1 permits asymmetric routing as long as the AS-PATH attribute entry matches the connected AS.

  D. R1 accepts source addresses on interface gigabitethernet0/1 that are private addresses.

  Correct Answer: A

• Question 485:

  Refer to the exhibits.

  

  Which information is provided for traceback analysis when this configuration is applied?

  A. source interface

  B. packet size distribution

  C. IP sub flow cache

  D. BGP version

  Correct Answer: C

• Question 486:

  Which configuration mode do you use to apply the mpls ldp graceful-restart command in IOS XE Software?

  A. MPLS LDP neighbor

  B. interface

  C. MPLS

  D. global

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_ha/configuration/xe-3s/mp-ha-xe-3s-book/mp-ldp-grace-rstrt.html

• Question 487:

  After you analyze your network environment, you decide to implement a full separation model for Internet access and MPLS L3VPN services. For which reason do you make this decision?

  A. It enables EGP and IGP to operate independently.

  B. It enables you to choose whether to separate or centralize each individual service.

  C. It is easier to manage a system in which services are mixed.

  D. It requires only one edge router.

  Correct Answer: B

• Question 488:

  Which statement about the Cisco MPLS TE forwarding adjacency feature is true?

  A. It enables the MPLS core to use EIGRP as the routing protocol.

  B. It enables the Cisco MPLS TE tunnel to be advertised into the running IGP.

  C. It enables the tailend router to advertise routes to the headend router over the tunnel.

  D. It enables the headend and tailend routers to establish a bidirectional tunnel.

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_te_path_setup/configuration/xe-16/mp-te-path-setup-xe-16-book/mpls-traffic-engineering-forwarding-adjacency.pdf

• Question 489:

  While implementing TTL security, you issue the PE(config-router-af)#neighbor 2.2.2.2 ttl-security hops 2 command. After you issue this command, which BGP packets does the PE accept?

  A. to 2.2.2.2, with a TTL of 2 or more

  B. from 2.2.2.2, with a TTL of less than 2

  C. to 2.2.2.2, with a TTL of less than 253

  D. from 2.2.2.2, with a TTL of 253 or more

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxebtsh.html#wp1059215

• Question 490:

  You are configuring MPLS traffic-engineering tunnels in the core. Which two ways exist for the tunnel path across the core? (Choose two.)

  A. The dynamic path option is supported only with IS-IS.

  B. Tunnels can be configured with dynamic path or explicitly defined path.

  C. A zero bandwidth tunnel is not a valid option.

  D. The bandwidth statement creates a "hard" reservation on the link.

  E. Tunnel links inherit IGP metrics by default unless overridden.

  Correct Answer: BE