Refer to the exhibit. The administrator is troubleshooting a BGP peering between PE1 and PE3 that is unable to establish. Which action resolves the issue?

A. Disable sending ICMP unreachables on P2 to allow PE1 to establish a session with PE3.

B. P2 must have a route to PE3 to establish a BGP session to PE1.

C. Remove the traffic filtering rules on P2 blocking the BGP communication between PE1 and PE3.

D. Ensure that the PE3 loopback address is used as a source for BGP peering to PE1.

An engineer configures PBR on R5 and wants to create a policy that matches traffic destined toward 10.10.10.0/24 and forwards it toward 10.1.1.1. This traffic must also have its IP precedence set to 5. All other traffic should be forwarded toward 10.1.1.2 and have its IP precedence set to 0. Which configuration meets the requirements?

A. access-list 100 permit ip any 10.10.10.0 0.0.0.255
route-map CCNP permit 10
match ip address 100
set ip next-hop 10.1.1.1
set ip precedence 5
route-map CCNP permit 20
set ip next-hop 10.1.1.2
set ip precedence 0

B. access-list 100 permit ip any 10.10.10.0 0.0.0.255
route-map CCNP permit 10
match ip address 100
set ip next-hop 10.1.1.1
set ip precedence 0
route-map CCNP permit 20
set ip next-hop 10.1.1.2
set ip precedence 5
route-map CCNP permit 30

C. access-list 1 permit 10.10.10.0 0.0.0.255
route-map CCNP permit 10
match ip address 1
set ip next-hop 10.1.1.1
set ip precedence 5
route-map CCNP permit 20
set ip next-hop 10.1.1.2
set ip precedence 0

D. access-list 1 permit 10.10.10.0 0.0.0.255
access-list 2 permit any
route-map CCNP permit 10
match ip address 1
set ip next-hop 10.1.1.1
set ip precedence 5
route-map CCNP permit 20
match ip address 2
set ip next-hop 10.1.1.2
set ip precedence 0
route-map CCNP permit 30

An engineer notices that R1 does not hold enough log messages to identify the root cause during troubleshooting. Which command resolves this issue?

A. #logging buffered 4096 critical

B. #logging buffered 16000 critical

C. (config)#logging buffered 16000 informational

D. (config)#logging buffered 4096 informational

After some changes in the routing policy, it is noticed that the router in AS 45123 is being used as a transit AS router for several service providers. Which configuration ensures that the branch router in AS 45123 advertises only the local networks to all SP neighbors?

A.

B.

C.

D.

Refer to the exhibit. In an attempt to increase the network security, the administrator applied the Gi3-in ACL to the Gi3 interface. After the ACL was applied, clients in the network connected to Gi3 lost their ability to obtain IP settings from DHCP. Which two configuration commands must be added to the Gi3-in ACL to reinstate the DHCP service for the clients? (Choose two.)

A. 74 permit udp 192.168.30.0 0.0.0.255 eq bootpc host 192.168.255.3 eq bootps

B. 71 permit udp host 0.0.0.0 eq bootps host 255.255.255.255 eq bootpc

C. 73 permit udp host 0.0.0.0 eq bootpc host 192.168.255.3 eq bootps

D. 72 permit udp host 192.168.255.3 eq bootps 192.168.30.0 0.0.0.255 eq bootpc

E. 75 permit udp host 0.0.0.0 eq bootpc host 255.255.255.255 eq bootps

Refer to the exhibit. An engineer configures router B to direct all traffic from host 192.168.1.3 to router

A. All other traffic must be routed through normal routing-protocol operations. Which configuration accomplishes the task?

B. interface g0/0/0
ip address 192.168.1.254 255.255.255.0
access-list 101 permit ip host 192.168.1.3 any
access-list 101 permit ip any any
route-map CCNP permit 10
match ip address 101
set ip next-hop 10.0.1.2

C. interface g0/0/0
ip address 192.168.1.254 255.255.255.0
ip policy route-map CCNP
access-list 101 permit ip host 192.168.1.3 any
route-map CCNP permit 10
match ip address 101
set ip next-hop 10.0.2.1

D. interface g0/0/0
ip address 192.168.1.254 255.255.255.0
ip policy route-map CCNP
access-list 101 permit ip any host 192.168.1.3
route-map CCNP permit 10
match ip address 101
set ip next-hop 10.0.1.2

E. interface g0/0/0
ip address 192.168.1.254 255.255.255.0
ip policy route-map CCNP
access-list 101 permit ip host 192.168.1.3 any
route-map CCNP permit 10
match ip address 101
set ip next-hop 10.0.1.2

Refer to the exhibit. An engineer is troubleshooting a TACACS problem.
Which action resolves the issue?

A. configure a matching TACACS server IP.

B. configure a matching preshared key.

C. Generate authentication from a relative source interface.

D. Apply a configured AAA profile to the VTY.

Refer to the exhibit.
RR configuration:
router bgp 100
neighbor IBGP peer-group
neighbor IBGP route-reflector-client
neighbor 10.1.1.1 remote-as 100
neighbor 10.1.2.2 remote-as 100
neighbor 10.1.3.3 remote-as 100
The network administrator configured the network to establish connectivity between all devices and notices that the ASBRs do not have routes for each other.
Which set of configurations resolves this issue?

A. router bgp 100 neighbor IBGP update-source Loopback0

B. router bgp 100 neighbor IBGP next-hop-self

C. router bgp 100 neighbor 10.1.1.1 next-hop-self neighbor 10.1.2.2 next-hop-self neighbor 10.1.3.3 next-hop-self

D. router bgp 100 neighbor 10.1.1.1 peer-group IBGP neighbor 10.1.2.2 peer-group IBGP neighbor 10.1.3.3 peer-group IBGP

Refer to the exhibit.

An engineer must configure the hub router to add new offices in the same infrastructure without performing any further configurations at the hub router.
Which tunnel mode configuration on the hub router meets this requirement?

A.

B.

C.

D. B

 
Refer to the exhibit. Customer B has decided not to receive any routes from R1 that originated outside the AS 100. Which AS path access list must the engineer choose to meet this requirement?

A. ip as-path access-list 1 permit ^10[0-9]*$

B. ip as-path access-list 1 permit ^100$

C. ip as-path access-list 1 permit _100$

D. ip as-path access-list 1 permit _100_

Which of the following are used to validate the source of IPv6 traffic and are considered IPv6 layer 2 snooping features? (Choose two.)

A. DHCPv6 Guard

B. DHCPv6 Root Guard

C. IPv6 Source Guard

D. IPv6 prefix Guard

Refer to the exhibit. An engineer implemented an access list on R1 to allow anyone to Telnet except R2 Loopback0 to R1 Loopback4. How must sequence 20 be replaced on the R1 access list to resolve the issue?

A. sequence 20 permit tcp host 1001:ABC:2011:7::1 host 400A:0:400C::1 eq telnet

B. sequence 20 deny tcp host 400A:0:400C::1 host 1001:ABC:2011:7::1 eq telnet

C. sequence 20 permit tcp host 400A:0:400C::1 host 1001:ABC:2011:7::1 eq telnet

D. sequence 20 deny tcp host 1001:ABC:2011:7::1 host 400A:0:400C::1 eq telnet

Refer to the exhibit. An engineer is investigating an OSPF issue reported by the Cisco DNA Assurance Center. Which action resolves the issue?

A. One of the interfaces is using the wrong MTU. Match interface MTU on both links.

B. One of the interfaces is using the wrong authentication. Match interface authentication on both links.

C. One of the neighbor links is down. Bring the interface up by running shut and no shut.

D. An ACL entry blocking multicast on the interfaces. Allow multicast through the interface ACL.

Refer to the exhibit. The services at branch B are down. An engineer notices that router A and router B are not exchanging any routes. Which configuration resolves the issue on router B?

A.

B.

C.

D.

Refer to the exhibit. ISP 1 and ISP 2 directly connect to the Internet. A customer is tracking both ISP links to achieve redundancy and cannot see the Cisco IOS IP
SLA tracking output on the router console.
Which command is missing from the IP SLA configuration?

A. Start-time 00:00

B. Start-time 0

C. Start-time immediately

D. Start-time now

SIMULATION
-
 
Guidelines
-
This is a lab item in which tasks will be performed on virtual devices.
•	Refer to the Tasks tab to view the tasks for this lab item.
•	Refer to the Topology tab to access the device console(s) and perform the tasks.
•	Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
•	All necessary preconfigurations have been applied.
•	Do not change the enable password or hostname for any device.
•	Save your configurations to NVRAM before moving to the next item.
•	Click Next at the bottom of the screen to submit this lab and move to the next question.
•	When Next is clicked, the lab closes and cannot be reopened.
Topology
-
 
Tasks
-
Troubleshoot and resolve the issues to achieve these goals:
1. Ensure that R1 reaches the prefix 10.6.66.6 without any single point of failure in the path. Do not use a static route or policy-based routing to accomplish this.
2. Ensure that R1 loopback 1 reaches to R6’s loopback 1 by following the path through R1, R3, R5 to R6 and vice versa. Use metric values K1 = 100000, K2=1, K3=255, K4=10, K5=1500 to modify the default metric in EIGRP if required. Do not use a route-map.
3. Ensure that on R3, prefix 10.0.56.6/32 uses the SP1 to route to the Internet, whereas prefix 172.16.12.2/32 uses the SP2 to route to the Internet. Do not use BGP to accomplish this. Use the pre-configured route-maps SP1 and SP2 and modify to accomplish the task if required. Use the ping and trace commands from R6 and R2 to prefixes 209.165.202.132 and 209.165.202.128, respectively to verify the results.

Refer to the exhibit. Which action resolves the authentication problem?

A. configure the same password between the TACACS+ server and router.

B. configure the TCP port 49 to be reachable by the router.

C. configure the UDP port 1812 to be allowed on the TACACS+ server.

D. configure the user name on the TACACS+ server.

Drag and drop the DHCP messages from the left onto the correct uses on the right.

Select and Place:

Refer to the exhibit. An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 loses reachability with the router R3
Fa0/0 interface. The route has changed to flow through router R2.
Which debug command is used to troubleshoot this issue?

A. debug ip flow

B. debug ip sla error

C. debug ip routing

D. debug ip packet

Refer to the exhibit. The network administrator configures the Chicago router to mutually redistribute the LA and New York routes with EIGRP routes to be summarized as a single route in OSPF:
router eigrp 100
redistribute ospf 1 metric 10 10 10 10 10
router ospf 1
redistribute eigrp 100 subnets
area 0 range 192.168.4.0 255. 255.252.0
After the configuration, the LA router receives all the specific New York routes except the summary route. Which set of configurations resolve the issue on the Chicago router?

A. interface E 0/0
ip summary-address eigrp 100 192.168.4.0 255.255.252.0

B. router ospf 1
summary-address 192.168.4.0 255.255.252.0

C. interface E 0/0
summary-address 192.168.4.0 255.255.252.0

D. router ospf 1
area 0 range 192.168.0.0 255.255.0.0

How is a preshared key "Test" for all the remote VPN routers configured in a DMVPN using GRE over IPsec set up?

A. authentication pre-share Test address 0.0.0.0 0.0.0.0

B. set pre-share Test address 0.0.0.0 0.0.0.0

C. crypto ipsec key Test address 0.0.0.0 0.0.0.0

D. crypto isakmp key Test address 0.0.0.0 0.0.0.0

What is the role of LDP in MPLS networks?

A. It creates MPLS packet forwarding along with the IGP routes.

B. It enables label binding information to exchange with peer LSRs.

C. It disables label binding information to exchange with peer LSRs.

D. It enables label binding that exchanges route descriptors.

Refer to the exhibit. Which statement about R1 is true?

A. OSPF redistributes RIP routes only if they have a tag of one.

B. RIP learned routes are distributed to OSPF with a tag value of one.

C. R1 adds one to the metric for RIP learned routes before redistributing to OSP

D. RIP routes are redistributed to OSPF without any changes.

Refer to the exhibit. An administrator configured a Cisco router for TACACS authentication, but the router is using the local enable password instead. Which action resolves the issue?

A. configure the aaa authentication login default group admin local if-authenticated command instead.

B. configure the aaa authentication login admin group tacacs+ local enable none command instead.

C. configure the aaa authentication login admin group tacacs+ local if-authenticated command instead.

D. configure the aaa authentication login admin group admin local enable command instead.

A network engineer must configure a DMVPN network so that a spoke establishes a direct path to another spoke if the two must send traffic to each other. A spoke must send traffic directly to the hub if required. Which configuration meets this requirement?

A. At the hub router:
interface tunnel10
ip nhrp nhs dynamic multipoint
ip nhrp nhs shortcut
tunnel mode gre multicast
On the spokes router:
interface tunnel10
ip nhrp nhs multicast dynamic
ip nhrp nhs redirect
tunnel mode gre multicast

B. At the hub router:
interface tunnel10
ip nhrp map dynamic multipoint
ip nhrp redirect
tunnel mode gre multicast
On the spokes router:
interface tunnel10
ip nhrp map multicast dynamic
ip nhrp shortcut
tunnel mode gre multicast

C. At the hub router:
interface tunnel10
ip nhrp nhs multicast dynamic
ip nhrp nhs shortcut
tunnel mode gre multipoint
On the spokes router:
interface tunnel10
ip nhrp nhs multicast dynamic
ip nhrp nhs redirect
tunnel mode gre multipoint

D. At the hub router:
interface tunnel10
ip nhrp map multicast dynamic
ip nhrp redirect
tunnel mode gre multipoint
On the spokes router:
interface tunnel10
ip nhrp map multicast dynamic
ip nhrp shortcut
tunnel mode gre multipoint

Refer to the exhibit. After reloading the router, an administrator discovered that the interface utilization graphs displayed inconsistencies with their previous history in the NMS.
Which action prevents this issue from occurring after another router reload in the future?

A. configure SNMP interface index persistence on the router.

B. Save the router configuration to startup-config before reloading the router.

C. Rediscover all the router interfaces through SNMP after the router is reloaded.

D. configure SNMP to use static OIDs referring to individual router interfaces.

Which MPLS value is combined with the IP prefix to convert to a VPNv4 prefix?

A. 8-byte Route Distinguisher

B. 8-byte Route Target

C. 16-byte Route Target

D. 16-byte Route Distinguisher

An engineer received a ticket about a router that has reloaded. The monitoring system graphs show different traffic patterns between logical and physical interfaces when the router is rebooted. Which action resolves the issue?

A. Configure the snmp ifindex persist command on the physical interfaces.

B. Clear the logical interfaces with snmp ifindex clear command.

C. Trigger a new snmpwalk from the monitoring system to synchronize interface OIDs.

D. Configure the snmp ifindex persist command globally.

Refer to the exhibit. An engineer is trying to connect to R1 via Telnet with no success.
Which configuration resolves the issue?

A. tacacs server prod address ipv4 10.221.10.10 exit

B. ip route 10.221.10.10 255.255.255.255 ethernet 0/1

C. ip route 10.221.0.11 255.255.255.255 ethernet 0/1

D. tacacs server prod address ipv4 10.221.10.11 exit

The network administrator must configure R1 to authenticate Telnet connections based on Cisco ISE using RADIUS. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1 (192.168.1.1) with a shared secret password of Cisco123.
The administrator has configured this on R1:
aaa new-model
radius server ISE1
address ipv4 192.168.1.5
key Cisco123
aaa group server tacacs+ RAD-SERV
server name ISE1
aaa authentication login default group RAD-SERV
The network administrator cannot authenticate to access R1 based on IS

A. Which set of configurations xes the issue?

B. line vty 0 4
login authentication RAD-SERV

C. aaa group server tacacs+ ISE1
server name RAD-SERV

D. aaa group server radius RAD-SERV
server name ISE1

E. line vty 0 4
login authentication default

Refer to the exhibit. A network administrator configured name resolution for IPv6 traffic to be allowed through an inbound access list. After the access list is applied to resolve the issue, name resolution still did not work. Which action does the network administrator take to resolve the name resolution problem?

A. Add permit udp any eq domain 53 any log in the access list

B. Remove ipv6 inspect ipv6- firewall in from interface gi0/1

C. Add permit udp any eq domain any log in the access list

D. Inspect ipv6 inspect name ipv6- firewall udp 53 in global config

Refer to the exhibits. A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router.
Which set of configurations xes the issue?

A.

B.

C.

D.

Refer to the exhibit. The 130.130.130.0/24 route shows in the R2 routing table but is getting filtering toward R3. Which action resolves the issue?

A. Automatic route summarization must be enabled on R2.

B. The outgoing filter list for all interfaces must be set on R2.

C. The incoming filter list for all interfaces must be set on R2.

D. IGP synchronization must be disabled on R2.

Refer to the exhibit. An engineer configured R2 and R5 as route reflectors and noticed that not all routes are sent to R1 to advertise to the eBGP peers.
Which iBGP routers must be configured as route reflectors to advertise all routes to restore reachability across all networks?

A. R1 and R4

B. R1 and R5

C. R4 and R5

D. R2 and R5

The network administrator configured CoPP so that all SNMP traffic from Cisco Prime located at 192.168.1.11 toward the router CPU is limited to 1000 kbps. Any traffic that exceeds this limit must be dropped.
access-list 100 permit udp any any eq 161
class-map CM-SNMP
match access-group 100
policy-map PM-COPP
class CM-SNMP
police 1000 conform-action transmit
control-plane
service-policy input PM-COPP
The network administrator is not getting the desired result for the SNMP traffic and SNMP traffic is getting dropped frequently. Which set of configurations resolves the issue?

A. no access-list 100
access-list 100 permit tcp host 192.168.1.11 any eq 161

B. no access-list 100
access-list 100 permit udp host 192.168.1.11 any eq 161
policy-map PM-COPP
class CM-SNMP
no police 1000 conform-action transmit
police 1000000 conform-action transmit
control-plane
no service-policy input PM-COPP
interface E 0/0
service-policy input PM-COPP
interface E 0/1
service-policy input PM-COPP

C. no access-list 100
access-list 100 permit udp host 192.168.1.11 any eq 161
policy-map PM-COPP
class CM-SNMP
no police 1000 conform-action transmit
police 1000000 conform-action transmit

D. policy-map PM-COPP
class CM-SNMP
no police 1000 conform-action transmit
police 1000000 conform-action transmit

Refer to the exhibit. Which two configurations allow clients to get dynamic IP addresses assigned? (Choose two.)

A. configure access-list 100 permit udp any any eq 68 as the first line

B. configure access-list 100 permit udp any any eq 69 as the first line

C. configure access-list 100 permit udp any any eq 61 as the first line

D. configure access-list 100 permit udp any any eq 66 as the first line

E. configure access-list 100 permit udp any any eq 67 as the first line

Refer to the exhibit. TCP traffic should be reaching host 10.10.10.10/24 via R2. Which action resolves the issue?

A. Allow TCP in the access list with no changes to the route map.

B. Add a permit 20 statement in the route map to allow TCP traffic.

C. TCP traffic will reach the destination via R2 without any changes.

D. Set IP next-hop to 10.10.12.2 under the route-map permit 10 to allow TCP traffic.

An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network.
Which BGP attribute must the engineer configure to avoid using the high-delay ISP link if the second ISP link is up?

A. AS-PATH

B. WEIGHT

C. MED

D. LOCAL_PREF

Refer to the exhibit. A network administrator configured NetFlow data but the data is not visible at the NetFlow collector. Which configuration allows the router to send the records?

A. Configure a different interface to send the records.

B. Configure the management interface in the global routing table to send the records.

C. Configure the NetFlow collector to listen at export-protocol netflow-v5.

D. Rectify NetFlow collector reachability from the management interface.

A newly installed spoke router is configured for DMVPN with the ip mtu 1400 command. Which configuration allows the spoke to use fragmentation with the maximum negotiated TCP MTU over GRE?

A. ip tcp adjust-mss 1360 crypto ipsec fragmentation mtu-discovery

B. ip tcp adjust-mss 1360 crypto ipsec fragmentation after-encryption

C. ip tcp payload-mtu 1360 crypto ipsec fragmentation after-encryption

D. ip tcp payload-mtu 1360 crypto ipsec fragmentation mtu-discovery

When determining if a system is capable of support, what is the minimum time spacing required for a BFD control packet to receive once a control packet is arrived?

A. Desired Min TX Interval

B. Detect Mult

C. Required Min RX Interval

D. Required Min Echo RX Interval

An engineer must configure a Cisco router to initiate secure connections from the router to other devices in the network but kept failing.
Which two actions resolve the issue? (Choose two.)

A. configure transport input ssh command on the console.

B. configure a domain name.

C. configure a crypto key to be generated.

D. configure a source port for the SSH connection to initiate.

E. configure a TACACS+ server and enable it.

Which label operations are performed by a label edge router?

A. SWAP and POP

B. PUSH and POP

C. SWAP and PUSH

D. PUSH and PHP

Refer to the exhibit. An engineer cannot copy the IOS.bin file from the FTP server to the switch.
Which action resolves the issue?

A. Allow file permissions to download the file from the FTP server.

B. Add the IOS.bin file, which does not exist on FTP server.

C. Make memory space on the switch flash or USB drive to download the file.

D. Use the copy flash:/ ftp://cisco@10.0.0.2/IOS.bin command.

A customer reports that traffic is not passing on an EIGRP enabled multipoint interface on a router configured as below:

Which action resolves the issue?

A. Enable poison reverse.

B. Disable split horizon.

C. Disable poison reverse.

D. Enable split horizon.

Refer to the exhibit. With the partial configuration of a router-on-a-stick, clients in VLAN 10 on Gi2 cannot obtain IP configuration from the central DHCP server. The DHCP server is reachable by a successful ping from the router. Which action resolves the issue?

A. configure the ip helper-address 192.168.255.3 command on the Gi2.10 subinterface.

B. configure a valid IP address on the Gi2 interface so that DHCP requests can be forwarded.

C. configure the ip dhcp pool 1 and network 192.168.210.0 255.255.255.0 commands.

D. configure the ip dhcp excluded-address 192.168.255.3 command on the Gi2.10 subinterface.

What is a function of BFD?

A. failure detection independent of routing protocols and media types

B. peer recovery after a Layer 2 adjacency failure

C. peer recovery after a Layer 3 protocol adjacency failure

D. failure detection dependent on routing protocols and media types

Refer to the exhibit. A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using
SNMP and TFTP servers.
Which configuration prevents changes from unauthorized NMS and TFTP servers?

A. access-list 20 permit 10.221.10.11 access-list 20 deny any log ! snmp-server group NETVIEW v3 priv read NETVIEW access 20 snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20 snmp-server community Cisc0Us3r RO 20 snmp-server community Cisc0wrus3r RW 20 snmp-server tftp-server-list 20

B. access-list 20 permit 10.221.10.11 access-list 20 deny any log ! snmp-server group NETVIEW v3 priv read NETVIEW access 20 snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20 snmp-server community Cisc0wrus3r RO 20 snmp-server community Cisc0Us3r RW 20 snmp-server tftp-server-list 20

C. access-list 20 permit 10.221.10.11 access-list 20 deny any log

D. access-list 20 permit 10.221.10.11

Refer to the exhibit.

The network administrator can see the DHCP discovery packet in R1, but R2 is not replying to the DHCP request. The R1 related interface is configured with the
DHCP helper address. If the PC is directly connected to the Fa0/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the P

A. Which two commands resolve this issue? (Choose two.)

B. service dhcp-relay command on R1

C. ip dhcp relay information enable command on R1

D. ip dhcp option 82 command on R2

E. service dhcp command on R1

F. ip dhcp relay information trust-all command on R2

Refer to the exhibits. SanFrancisco and Boston routers are choosing slower links to reach each other despite the direct links being up.
Which configuration xes the issue?

A. All Routers router ospf 1 auto-cost reference-bandwidth 100

B. SanFrancisco Router router ospf 1 auto-cost reference-bandwidth 1000

C. Boston Router router ospf 1 auto-cost reference-bandwidth 1000

D. All Routers router ospf 1 auto-cost reference-bandwidth 1000