In a typical MPLS VPN, which routers act as the MPLS label imposition and disposition points in the network?

A. CE Router

B. P router

C. PE Router

D. Core router

When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start apping on that device.
Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

A. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction.

B. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction.

C. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction.

D. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction.

How are LDP neighbors discovered?

A. Broadcasts hellos are sent to the 255.255.255.255 broadcast address.

B. Multicast hellos are sent to the 224.0.0.2 group address.

C. Unicast hellos are sent to directly connected neighbors IP addresses.

D. Multicast hellos are sent to the 224.0.0.5 group address.

Refer to the exhibit.

A network administrator is trying to access a branch router using TACACS+ username and password credentials, but the administrator cannot log in to the router because the WAN connectivity is down. The branch router has following AAA configuration: aaa new-model aaa authorization commands 15 default group tacacs+ aaa accounting commands 1 default stop-only group tacacs+ aaa accounting commands 15 default stop- only group tacacs+ tacacs-server host 10.100.50.99 tacacs-server key Ci$co123 Which command will resolve this problem when WAN connectivity is down?

A. aaa authentication login console group tacacs+ enable

B. aaa authentication login default group tacacs+ local

C. aaa authentication login default group tacacs+ enable

D. aaa authentication login default group tacacs+ console

In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router. Which command is required on both spoke routers to communicate directly to one another?

A. ip nhrp nhs multicast

B. ip nhrp shortcut

C. ip nhrp map dynamic

D. ip nhrp redirect

What must a network architect consider for RTs when planning for a single customer full-mesh VPN in an MPLS Layer 3 network?

A. Each RT value must be identical to an RD value within the same VPN.

B. RT must be globally identical within the same VPN.

C. RT values must be different from the RD values in the same VPN.

D. RT must be globally unique within the same VPN.

Which Layer 3 VPN attribute allows different customers to connect to the same MPLS network with overlapping IP ranges?

A. RT

B. RD

C. VRF

D. MP-BGP

What are the two goals of micro BFD sessions? (Choose two.)

A. The high bandwidth member link of a link aggregation group must run BF

B. Any member link on a link aggregation group must run BF

C. Continuity for each member link of a link aggregation group must be verified.

D. Run the BFD session with 3×3 ms hello timer.

E. Each member link of a link aggregation group must run BF

F.

Refer to the exhibit.

The administrator successfully logs into R1 but cannot access privileged mode commands. What should be configured to resolve the issue?

A. aaa authorization reverse-access

B. matching password on vty lines as cisco123!

C. secret cisco123! at the end of the username command instead of password cisco123!

D. enable secret or enable password commands to enter into privileged mode

At which layer of the OSI model is an MPLS label imposed?

A. Layer 2

B. Layer 3

C. Between layers 2 and 3

D. Between layers 3 and 4

The network administrator must configure R1 to authenticate Telnet connections based on Cisco ISE using RADIUS. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1 (192.168.1.1) with a shared secret password of Cisco123.
The administrator has configured this on R1:
aaa new-model
radius server ISE1
address ipv4 192.168.1.5
key Cisco123
aaa group server tacacs+ RAD-SERV
server name ISE1
aaa authentication login default group RAD-SERV
The network administrator cannot authenticate to access R1 based on IS

A. Which set of configurations xes the issue?

B. line vty 0 4
login authentication RAD-SERV

C. aaa group server tacacs+ ISE1
server name RAD-SERV

D. aaa group server radius RAD-SERV
server name ISE1

E. line vty 0 4
login authentication default

Refer to the exhibit. The network administrator configures the Chicago router to mutually redistribute the LA and New York routes with EIGRP routes to be summarized as a single route in OSPF:
router eigrp 100
redistribute ospf 1 metric 10 10 10 10 10
router ospf 1
redistribute eigrp 100 subnets
area 0 range 192.168.4.0 255. 255.252.0
After the configuration, the LA router receives all the specific New York routes except the summary route. Which set of configurations resolve the issue on the Chicago router?

A. interface E 0/0
ip summary-address eigrp 100 192.168.4.0 255.255.252.0

B. router ospf 1
summary-address 192.168.4.0 255.255.252.0

C. interface E 0/0
summary-address 192.168.4.0 255.255.252.0

D. router ospf 1
area 0 range 192.168.0.0 255.255.0.0

Refer to the exhibit. While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured.
Which command resolves this issue?

A. access-class INTERNET in

B. ip access-group INTERNET in

C. ipv6 traffic- filter INTERNET in

D. ipv6 access-class INTERNET in

Refer to the exhibit.

Which action resolves the issue?

A. Establish connectivity between the NTP server and the switch.

B. configure the local time on the SW1 device.

C. configure the local time on Cisco DNA Center.

D. Establish connectivity between the NTP server and Cisco DNA Center.

Refer to the exhibit. R1 is multihomed to ISP1 and ISP2. uRPF strict mode has been configured on both interfaces uplinked to the ISPs. Traffic destined to the Internet over ISP1 returns to R1 via ISP2 and is immediately dropped.
Which configuration changes address this issue and allow return traffic from the other ISP?

A. R1(config)#interface fastethernet 0/1R1(config-if)# ip verify unicast source reachable-via any

B. R1(config)#interface fastethernet 0/1R1(config-if)# ip verify unicast source reachable-via any allow-default

C. R1(config)#interface fastethernet 0/0R1(config-if)# no ip verify unicast source reachable-via any allow-default

D. R1(config)#interface fastethernet 0/0R1 (config-if)# ip verify unicast source reachable-via rx

Refer to the exhibit. An engineer implements uRPF to increase security and stop incoming spoofed IP packets. Same asymmetrically routed packets are also blocked after the configuration. Which command resolves the issue?

A. ip verify unicast source reachable-via any

B. ip verify unicast source reachable-via rx

C. ip verify unicast reverse-path

D. ip verify unicast reverse-path any

What action is performed for untagged outgoing labels in an MPLS router?

A. Convert the incoming MPLS packet to an untagged packet and then do a RIB lookup.

B. Convert the incoming MPLS packet to an untagged packet and then do a FIB lookup.

C. Convert the incoming MPLS packet to an IP packet and forward it to the next router.

D. Convert the untagged packet to a labeled packet and forward it to the next router.

Refer to the exhibit. The control plane is heavily impacted after the CoPP configuration is applied to the router. Which command removal lessens the impact on the control plane?

A. access-list 120 permit tcp any gt 1024 eq bgp log

B. access-list 120 permit ospf any

C. access-list 120 permit udp any any eq pim-auto-rp

D. access-list 120 permit eigrp any host 224.0.0.10

Refer to the exhibit. A network engineer cannot remote access R3 using Telnet from switch S1. Which action resolves the issue?

A. Allow to use the ssh -| admin 10.0.0.1 command on the switch.

B. Add the login admin command on the switch.

C. Add the transport input telnet command on R3.

D. Allow the inbound connection via the exec command on R3.

Which of the following statements are true regarding the e IPv6 RA Guard feature?

A. This feature is support on LAG bundles interfaces

B. This feature is supported on private VLANs

C. Packets dropped by the IPv6 RA Guard feature cannot be spanned.

D. This feature offers protection in networks where IPv6 traffic is tunneled.

Refer to the exhibit.

An engineer observes that every time the ICMP packet is lost at a polling interval, track 1 goes down, which causes unnecessary disruption and instability in the network. The engineer does not want the traffic to be rerouted if the loss of ICMP packets is negligible. If the packet loss is persistent for a longer duration, the track must go down and the traffic must be rerouted. Which action resolves the issue?

A. Change the IP SLA schedule to run only at certain intervals.

B. Increase the timeout value from 1000 to 1500.

C. define a delay timer under track 1.

D. Increase the threshold value from 1000 to 1500.

An engineer notices that R1 does not hold enough log messages to identify the root cause during troubleshooting. Which command resolves this issue?

A. #logging buffered 4096 critical

B. #logging buffered 16000 critical

C. (config)#logging buffered 16000 informational

D. (config)#logging buffered 4096 informational

Which two protocols work in the control plane of P routers across the MPLS cloud? (Choose two.)

A. ECMP

B. LDP

C. RSVP

D. MPLS OAM

E. LSP

Refer to the exhibit.

The network administrator can see the DHCP discovery packet in R1, but R2 is not replying to the DHCP request. The R1 related interface is configured with the
DHCP helper address. If the PC is directly connected to the Fa0/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the P

A. Which two commands resolve this issue? (Choose two.)

B. service dhcp-relay command on R1

C. ip dhcp relay information enable command on R1

D. ip dhcp option 82 command on R2

E. service dhcp command on R1

F. ip dhcp relay information trust-all command on R2

Refer to the exhibit.

R2 can reach Loopback222, but R1, SW1, and PC1 cannot communicate with 172.16.222.254. R1 and R2 configurations are shown here:

Which EIGRP configuration command resolves the issue?

A. R1(config-router)# redistribute static

B. R2(config-router)# redistribute static

C. R1(config-router)# network 172.16.222.254 0.0.0.0

D. R1(config-router)# network 172.16.222.254 255.255.255.255

Which two protocols are used by a P router to transfer VPN traffic between PE routers in an MPLS network? (Choose two.)

A. LDP

B. RSVP

C. MP-BGP

D. BGP

E. OSPF

The network administrator configured the router for Control Plane Policing so that inbound SSH traffic is policed to 500 kbps. This policy must apply to traffic coming in from 10.10.10.0/24 and 192.168.10.0/24 networks.
access-list 100 permit ip 10.10.10.0 0.0.0.255 any
access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 23
class-map CLASS-SSH
match access-group 100
policy-map PM-COPP
class CLASS-SSH
police 500000 conform-action transmit
interface E0/0
service-policy input PM-COPP
interface E0/1
service-policy input PM-COPP
The Control Plane Policing is not applied to SSH traffic and SSH is open to use any bandwidth available. Which configuration resolves this issue?

A. no access-list 100
access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22
access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22

B. interface E0/0
no service-policy input PM-COPP
interface E0/1
no service-policy input PM-COPP
control-plane
service-policy input PM-COPP

C. no access-list 100
access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22
access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22
policy-map PM-COPP
class CLASS-SSH
no police 500000 conform-action transmit
police 500000 conform-action transmit exceed-action drop

D. no access-list 100
access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22
access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22
interface E0/0
no service-policy input PM-COPP
interface E0/1
no service-policy input PM-COPP
control-plane
service-policy input PM-COPP

You have configured router R1 with multiple VRF's in order to support multiple customer VPN networks. If you wanted to see the best path for the 10.1.1.0.24 route in VRF Blue, what command would you use?

A. show ip route vrf Blue 10.1.1.0

B. show ip route 10.1.1.0 vrf Blue

C. show route all 10.1.1.0

D. show ip route all 10.1.1.0

Refer to the exhibit. An administrator must harden a router, but the administrator failed to test the SSH access successfully to the router. Which action resolves the issue?

A. SSH must be allowed with the transport output ssh command.

B. configure enable secret to log in to the device.

C. SSH syntax must be ssh -l user ip to log in to the remote device.

D. configure SSH on the remote device to log in using SS

E.

Refer to the exhibit.
After a RADIUS server fails AAA authentication, an engineer is trying to reestablish console access to a switch using the local password.
Which configuration reestablishes the console access to switch SW1 via AAA?

A.

B.

C.

D. A

An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network.
Which BGP attribute must the engineer configure to avoid using the high-delay ISP link if the second ISP link is up?

A. AS-PATH

B. WEIGHT

C. MED

D. LOCAL_PREF

Refer to the exhibit. An engineer is trying to redistribute OSPF to BGP, but not all of the routes are redistributed.
What is the reason for this issue?

A. By default, only internal routes and external type 1 routes are redistributed into BGP

B. Only classful networks are redistributed from OSPF to BGP

C. BGP convergence is slow, so the route will eventually be present in the BGP table

D. By default, only internal OSPF routes are redistributed into BGP

Refer to the exhibit. A bank ATM site has difficulty connecting with the bank server. A network engineer troubleshoots the issue and finds that R4 has no active route to the bank ATM site. Which action resolves the issue?

A. EIGRP peering between R1 and R2 to be fixed.

B. Advertise 10.10.30.0/24 subnet in R3 EIGRP AS.

C. Advertise 10.10.30.0/24 subnet in R1 EIGRP AS.

D. EIGRP peering between R3 and R4 to be fixed.

Refer to the exhibit. A PC is configured to obtain an IP address automatically, but it receives an IP address only from the 169.254.0.0 subnet. The DHCP server logs contained no DHCPDISCOVER message from the MAC address of the P

A. Which action resolves the issue?

B. configure a DHCP reservation on the server for the P

C. configure an ip helper-address on the router to forward DHCP messages to the server.

D. configure DHCP Snooping on the switch to forward DHCP messages to the server.

E. configure a static IP address on the PC and exclude it from the DHCP pool.

Refer to the exhibit. BGP is apping after the CoPP policy is applied.
What are the two solutions to fix the issue? (Choose two.)

A. configure a higher value for CIR under the Class COPP-CRITICAL-7600.

B. configure a higher value for CIR under the default class to allow more packets during peak traffic.

C. configure BGP in the COPP-CRITICAL-7600 ACL.

D. configure IP CEF for CoPP policy and BGP to work.

E. configure a three-color policer instead of two-color policer under Class COPP-CRITICAL-7600.

Refer to the exhibit. The network administrator must configure Cape Town to reach Dubai via Tokyo based on the speeds provided by the service provider. It was noticed that Cape Town is reaching Dubai directly and failed to meet the requirement. Which configuration xes the issue?

A. CapeTown –
router eigrp 100
variance 2

B. CapeTown –
interface E 0/0
bandwidth 5000
interface E 0/1
bandwidth 10000

C. CapeTown –
interface E 0/0
bandwidth 5000
interface E 0/1
bandwidth 10000
Dubai –
interface E 0/0
bandwidth 50000
interface E 0/1
bandwidth 5000
Tokyo –
interface E 0/0
bandwidth 50000
interface E 0/1
bandwidth 10000

D. Dubai –
router eigrp 100
variance 2

Refer to the exhibits. The output of the trace route from R5 shows a loop in the network.
Which configuration prevents this loop?

A.

B.

C.

D.

 
Refer to the exhibit. In Cisco DNA Center, a network engineer identifies that BGP-learned networks are repeatedly withdrawn from peers. Which configuration must the engineer apply to resolve the issue?

A. router bgp 100bgp dampening

B. router bgp 100bgp graceful-restart

C. route-map Dampening permit 10set dampening 15 750 2000 60router bgp 100neighbor 10.140.212.5 route-map Dampening out

D. route-map Dampening permit 10set dampening 15 750 2000 60router bgp 100neighbor 10.140.212.5 route-map Dampening in

Refer to the exhibit.

Which action resolves the adjacency issue?

A. configure the same autonomous system numbers.

B. Match the hello interval timers.

C. Match the authentication keys.

D. configure the same EIGRP process IDs.

Refer to the exhibit. An engineer recently implemented uRPF by configuring the ip verify unicast source reachable-via rx command on interface gi0/3. The engineer noticed right after implementing uRPF that an inbound packet on the gi0/3 interface with a source address of 172.16.3.251 was dropped. Which action resolves the issue?

A. configure uRPF loose mode to forward the packet.

B. Permit the 172.16.3.251 in the inbound ACL on interface gi0/3.

C. Remove inbound ACL from the interface gi0/3 to allow 172.16.3.251.

D. configure uRPF strict mode to forward the packet.

Refer to the exhibit. After configuring OSPF in R1, some external destinations in the network became unreachable. Which action resolves the issue?

A. Disconnect the router with the OSPF router ID 0.0.0 0 from the network.

B. Increase the SPF delay interval on R1 to synchronize routes.

C. Change the R1 router ID from 10.255.255.1 to a unique value and clear the process.

D. Clear the OSPF process on R1 to ush stale LSAs sent by other routers.

You are configuring Net flow on various network elements in order to gain visibility into the traffic types used. How many export destinations can this Network data be sent to?

A. Up to 2

B. Up to 4

C. Up to 8

D. There is no limitation on the number of flow data export destinations.

Refer to the exhibit. A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company's security policy. The administrator can still ping to www.cisco.com. Which interface should the access list 101 be applied to resolve this issue?

A. Interface G0/0 in the outgoing direction.

B. Interface G0/0 in the incoming direction.

C. Interface S1/0 in the outgoing direction.

D. Interface G0/48 in the incoming direction.

Refer to the exhibit. R1 and R2 cannot establish an EIGRP adjacency.
Which action establishes EIGRP adjacency?

A. Remove the current autonomous system number on one of the routers and change to a different value.

B. Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.

C. Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

D. Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

Refer to the exhibit. An engineer configured NetFlow on R1, but the NMS server cannot see the flow from R1.
Which configuration resolves the issue?

A. interface Ethernet0/1 flow-destination 10.221.10.11

B. interface Ethernet0/0 flow-destination 10.221.10.11

C. flow exporter FlowAnalyzer1 destination 10.221.10.11

D. flow monitor Flowmonitor1 destination 10.221.10.11

You want to implement AAA on router R1 for a more robust authentication and authorization system. What is typically the first global command used to do this?

A. aaa new-model

B. aaa enable

C. aaa server-group

D. aaa authentication login

Refer to the exhibit. An IPv6 ACL is applied to restrict PC1 from communicating with PC2 and allow all other traffic. Which configuration resolves the issue?

A. R3(config-ipv6-acl)#no sequence 20R3(config-ipv6-acl)#deny ipv6 host 2001:DB8:0:10::3B host 2001:DB8:A:A::19 sequence 10

B. R3(ccnfig-ipv6-acl)#no sequence 30R3(config-ipv6-acl)#deny ipv6 host 2001:DB8:0:10::3B host 2001:DB8:A:A::19 sequence 10

C. R3(config-lpv6-acl)#no sequence 20R3(config-ipv6-acl)#deny ipv6 host 2001:DB8:0:10::3B any sequence 10

D. R3(config-ipv6-acl)#no sequence 30R3(config-ipv6-acl)#deny ipv6 host 2001:DB8:0:10::3B any sequence 10

How are CE advertised routes segmented from other CE routers on an MPLS PE router?

A. with a combination of VRF-Lite and MP-BGP

B. by pushing MPLS labels advertised by LDP on customer routes

C. by enabling multiple instances of BGP, one for each CE router

D. by assigning CE-facing interfaces to different VRFs

Refer to the exhibit. R1 is configured with IP SLA to check the availability of the server behind R6 but it kept failing.
Which configuration resolves the issue?

A. R6(config)#ip sla responder udp-echo ip address 10.10.10.1 port 5000

B. R6(config)#ip access-list extended DDOS R6(config-ext-nacl)#5 permit icmp host 10.10.10.1 host 10.66.66.66

C. R6(config)#ip sla responder

D. R6(config)#ip access-list extended DDOS R6(config-ext-nacl)#5 permit icmp host 10.66.66.66 host 10.10.10.1 B

Refer to the exhibit.

An engineer is troubleshooting failed access by contractors to the business application server via Telnet or HTTP during the weekend.
Which configuration resolves the issue?

A. R1 no access-list 101 permit tcp 10.3.3.0 0.0.0.255 host 10.1.1.3 eq telnet time-range Contractor

B. R1 time-range Contractor no periodic weekdays 8:00 to 16:30 periodic daily 8:00 to 16:30

C. R4 time-range Contractor no periodic weekdays 17:00 to 23:59 periodic daily 8:00 to 16:30

D. R4 no access-list 101 permit tcp 10.3.3.0 0.0.0.255 host 10.1.1.3 eq telnet time-range Contractor