Cisco CCNP Service Provider 350-501 Questions & Answers

• Question 71:

  Refer to the exhibit.

  

  The engineering team wants to limit control traffic on router RX with the following IP address assignments:

  Accepted traffic for router: 10.0.0.0/24 NOC users IP allocation: 192.168.10.0/24

  Which additional configuration must be applied to RX to apply the policy for MSDP?

  A. RX(config)#access-list 151 permit tcp any gt 1024 10.10.0.0 0.0.0.255 eq 639 RX(config)#access-list 151 permit tcp any eq 639 10.10.0.0 0.0.0.255 gt 1024 established

  B. RX(config)#access-list 150 permit tcp any gt 1024 10.0.0.0 0.0.0.255 eq 639 RX(config)#access-list 150 permit tcp any eq 639 10.0.0.0 0.0.0.255 gt 1024 established

  C. RX(config)#access-list 151 permit tcp any 10.0.0.0 0.0.0.255 eq 639 RX(config)#access-list 151 permit udp any 10.0.0.0 0.0.0.255 eq 639

  D. RX(config)#access-list 150 permit tcp any 10.0.0.0 0.0.0.255 eq 639 RX(config)#access-list 150 permit udp any 10.0.0.0 0.0.0.255 eq 639

  Correct Answer: B

• Question 72:

  SIMULATION

  

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  Refer to the Tasks tab to view the tasks for this lab item.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  All necessary preconfigurations have been applied.

  Do not change the enable password or hostname for any device.

  Save your configurations to NVRAM before moving to the next item.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  R1 and R2 are having issues forming an eBGP neighbor relationship. Troubleshoot and resolve the issue to achieve these goals:

  1.

  Configure R1 and R2 to form a BGP neighborship using their Loopback interfaces.

  2.

  Form the neighbor relationship using a BGP multihop mechanism. Use minimal values to solve the issue.

  A. See explanation below.

  Correct Answer: A

  Explanation:

  R1: conf t

  ip route 10.2.2.2 255.255.255.255 172.16.0.2

  router bgp 100 neighbor 10.2.2.2 remote-as 200 neighbor 10.2.2.2 update-source lo0 neighbor 10.2.2.2 disable-connected-check neighbor 10.2.2.2 ebgp-multihop 2

  address-family ipv4 unicast neighbor 10.2.2.2 activate do copy running-config startup-config

  R2: conf t

  ip route 10.1.1.1 255.255.255.255 172.16.0.1

  router bgp 200 neighbor 10.1.1.1 remote-as 100 neighbor 10.1.1.1 update-source lo0 neighbor 10.1.1.1 disable-connected-check neighbor 10.1.1.1 ebgp-multihop 2

  address-family ipv4 unicast neighbor 10.1.1.1 activate do copy running-config startup-config

• Question 73:

  An ISP Is Implementing end-to-end fault monitoring for a customer based on the IEEE 802.3ah standard. The solution must detect when 15 or more corrupted Ethernet packets arrive within 10 ms and stop propagating traffic through the ISP backbone network or to the customer side. Which configuration must the ISP engineer apply?

  A. ethernet oam link-monitoring enable ethernet oam link-monitor crc-errors ingress time-window 10 ethernet oam link-monitor crc-errors ingress threshold high 15 ethernet oam link-monitor crc-errors egress time-window 10 ethernet oam link-monitor crc-errors egress threshold high 15 ethernet oam link-monitor high-threshold action shutdown-interface

  B. ethernet oam link-monitoring ethernet oam link-monitor receive-crc window 15 ethernet oam link-monitor receive-crc threshold high 10 ethernet oam link-monitor high-threshold action disable-interface

  C. ethernet oam ethernet oam link-monitor receive-crc window 10 ethernet oam link-monitor receive-crc threshold high 15 ethernet oam link-monitor transmit-crc window 10 ethernet oam link-monitor transmit-crc threshold high 15 ethernet oam link-monitor high-threshold action errordisable-interface

  D. ethernet oam link-monitoring global enable ethernet oam link-monitor receive crc-errors period 15 ethernet oam link-monitor receive crc-errors limit 15 ethernet oam link-monitor transmit crc-errors period 10 ethernet oam link-monitor transmit crc-errors limit 15 ethernet oam link-monitor limit action error-disable interface

  Correct Answer: C

• Question 74:

  Refer to the exhibit.

  

  A network operator working for a telecommunication company with an employee ID: 4350:47:853 must implement an IGP solution based on these requirements:

  Subnet 10.50.10.0 traffic must exit through the R1 router to connect with the Syslog server. Subnet 10.50.20.0 traffic must exit through the R2 router to connect with the NTP server. In case of link failure between R2 and R4, traffic must be routed via R1 and R3.

  Which two configurations must be implemented on R5 to meet these requirements? (Choose two.)

  A. Apply a route policy to redistribute 10.50.0.0 prefixes in OSPF to ISIS and ISIS to OSPF.

  B. Apply a route policy to redistribute 10.50.20.0 from ISIS-L2 to OSPF Area 0 at a higher cost.

  C. Enable a route policy to advertise 10.50.20.0 in ISIS-L2 at a higher cost.

  D. Apply a route policy to redistribute 10.50.10.0 from OSPF Area 0 to ISIS-L2 at a lower cost.

  E. Enable a route policy to advertise 10.50.10.0 In OSPF Area 0 at a low cost.

  Correct Answer: B

• Question 75:

  Refer to the exhibit.

  

  The CE router is peering with both PE routers and advertising a public prefix to the internet. Routing to and from this prefix will be asymmetric under certain network conditions, but packets must not be discarded. Which configuration must an engineer apply to the two PE routers so that they validate reverse packet forwarding for packets entering their Gi2 interfaces and drop traffic from the RFC1918 space?

  A. ip verify unicast source reachable-via rx allow-default

  B. interface GigabitEthernet 2 ip verify unicast source reachable-via rx

  C. ip verify unicast source reachable-via any allow-default interface GigabitEthernet 2

  D. ip verify unicast source reachable-via any

  Correct Answer: D

• Question 76:

  Refer to the exhibit.

  

  A network engineer at a large ISP Is configuring telemetry streams to monitor the health status of PE routers on the network using gRPC dial-out. The PE routers are located at several data centers in different physical locations, and they are using IS-IS and BGP for routing. Which additional configuration must the engineer implement on the PE routers to meet the goal?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 77:

  Refer to the exhibit.

  

  The network engineer who manages ASN 65001 must configure a BGP routing policy on GW-XR1 with these requirements:

  Advertise locally-originated routes and /24 prefixes assigned within the 198.18.0.0/15 range. All other prefixes must be dropped.

  Reachability to 198.18.100.0/24 must be preferred via the EDGE-1 connection.

  Reachability to 198.19.100.0/24 must be preferred via the EDGE-2 connection.

  Which configuration must the network engineer implement on GW-XR1?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 78:

  SIMULATION

  

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  Refer to the Tasks tab to view the tasks for this lab item.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  All necessary preconfigurations have been applied.

  Do not change the enable password or hostname for any device.

  Save your configurations to NVRAM before moving to the next item.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Configure and verify the OSPF neighbor adjacency between R1 and R2 in OSPF area 0 according to the topology to achieve these goals:

  1.

  Establish R1 and R2 OSPF adjacency. All interfaces must be advertised in OSPF by using the OSPF interface command method. Use Loopback0 as the OSPF ID.

  2.

  There must be no DR/BDR elections in OSPF Area 0 when establishing the neighbor relationship between R1 and R2. OSPF must not generate the host entries /32 for the adjacent interfaces.

  3.

  Enable OSPF MD5 Authentication between both routers at the interface level with password C1sc0!.

  A. See explanation below.

  Correct Answer: A

  Explanation:

  R1: Conf t Router ospf 10 Router-id 10.1.1.1

  interface e0/0 ip ospf 10 area 0 ip ospf network point-to-point ip ospf message-digest-key 1 md5 C1sc0!.

  int lo0 ip ospf 10 area 0

  R2: Conf t Router ospf 10 Router-id 10.2.2.2

  interface e0/0 ip ospf 10 area 0 ip ospf network point-to-point ip ospf message-digest-key 1 md5 C1sc0!.

  int lo0 ip ospf 10 area 0

• Question 79:

  Refer to the exhibit.

  

  The customer that owns the CE-1, CE-2, and CE-3 routers purchased point-to-point E-Line services from the Carrier Ethernet provider. The service provider is delivering multiplexed UNI at the customer HQ location on PE-1 and untagged UNIs at the PE-2 and PE-3 locations. Additionally, the customer provided these VLAN to EVC mapping requirements:

  EVC 1 between CE-1 and CE-2 must be provisioned with C-VLAN 12 at the HQ location. EVC 2 between CE-1 and CE-3 must be provisioned with C-VLAN 13 at the HQ location.

  Which configuration must the network engineer implement on the PE routers to provide end-to-end Carrier Ethernet service to the customer?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 80:

  SIMULATION

  

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  Refer to the Tasks tab to view the tasks for this lab item.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  All necessary preconfigurations have been applied.

  Do not change the enable password or hostname for any device.

  Save your configurations to NVRAM before moving to the next item.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Configure the BGP routing protocol for R1 and R2 according to the topology to achieve these goals:

  1.

  Configure EBGP neighbor adjacency for the IPv4 and IPv6 address family between R1 and R2 using Loopback0 IPv4 and IPv6 addresses. All BGP updates must come from the Loopback0 interface as the source. Do not use IGP routing protocols to complete this task.

  2.

  Configure MD5 Authentication for the EBGP adjacency between R1 and R2. The password is clear text C1sc0!.

  A. See explanation below.

  Correct Answer: A

  Explanation:

  R1: conf t

  ip route 2.2.2.2 255.255.255.255 192.168.1.2 ip route 2000:cc13:cc13:2::1/128 2000:cc13:cc13:cc13::2

  router bgp 65515 neighbor 2000:cc13:cc13:2::1 remote-as 65516 neighbor 2000:cc13:cc13:2::1 update-source lo0 neighbor 2000:cc13:cc13:2::1 disable-connected-check neighbor 2000:cc13:cc13:2::1 ebgp-multihop 2 neighbor 2000:cc13:cc13:2::1 password C1sc0!. neighbor 2.2.2.2 remote-as 65516 neighbor 2.2.2.2 update-source lo0 neighbor 2.2.2.2 disable-connected-check neighbor 2.2.2.2 ebgp-multihop 2 neighbor 2.2.2.2 password C1sc0!.

  address-family ipv4 unicast neighbor 2.2.2.2 activate

  address-family ipv6 neighbor 2000:cc13:cc13:2::1 activate do copy running-config startup-config

  R2: conf t

  ip route 1.1.1.1 255.255.255.255 192.168.1.1 ip route 2000:cc13:cc13:1::1/128 2000:cc13:cc13:cc13::1

  router bgp 65516 neighbor 2000:cc13:cc13:1::1 remote-as 65515 neighbor 2000:cc13:cc13:1::1 update-source lo0 neighbor 2000:cc13:cc13:1::1 disable-connected-check neighbor 2000:cc13:cc13:1::1 ebgp-multihop 2 neighbor 2000:cc13:cc13:1::1 password C1sc0!. neighbor 1.1.1.1 remote-as 65515 neighbor 1.1.1.1 update-source lo0 neighbor 1.1.1.1 disable-connected-check neighbor 1.1.1.1 ebgp-multihop 2 neighbor 1.1.1.1 password C1sc0!.

  address-family ipv4 unicast neighbor 1.1.1.1 activate

  address-family ipv6 neighbor 2000:cc13:cc13:1::1 activate do copy running-config startup-config