Which tunnel type allows clients to perform a seamless Layer 3 roam between a Cisco AireOS WLC and a Cisco IOS XE WLC?

A. CAPWAP

B. IPsec

C. VPN

D. Ethernet over IP

Refer to the exhibit.

Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?

A. R1(config)#router bgp 1 R1(config-router)#neighbor 192.168.10.2 remote-as 2 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 192.168.10.1 remote-as 1 R2(config-router)#network 10.2.2.0 mask 255.255.255.0

B. R1(config)#router bgp 1 R1(config-router)#neighbor 10.2.2.2 remote-as 2 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 10.1.1.1 remote-as 1 R2(config-router)#network 10.2.2.0 mask 255.255.255.0

C. R1(config)#router bgp 1 R1(config-router)#neighbor 192.168.10.2 remote-as 2 R1(config-router)#network 10.0.0.0 mask 255.0.0.0 R2(config)#router bgp 2 R2(config-router)#neighbor 192.168.10.1 remote-as 1 R2(config-router)#network 10.0.0.0 mask 255.0.0.0

D. R1(config)#router bgp 1 R1(config-router)#neighbor 10.2.2.2 remote-as 2 R1(config-router)#neighbor 10.2.2.2 update-source lo0 R1(config- router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 10.1.1.1 remote-as 1 R2(config- router)#neighbor 10.1.1.1 update-source lo0 R2(config-router)#network 10.2.2.0 mask 255.255.255.0

Which technology reduces the implementation of STP and leverages both unicast and multicast?

A. VLAN

B. VPC

C. VXLAN

D. VSS

Refer to the exhibit.

An engineer is troubleshooting a connectivity issue and executes a traceroute. What does the result confirm?

A. The destination port is unreachable.

B. The probe timed out.

C. The destination server reported it is too busy.

D. The protocol is unreachable.

In Cisco routers, the codes for a traceroute command reply are:
! ” success
* ” time out
N ” network unreachable –
H ” host unreachable –
P ” protocol unreachable –
A ” admin denied –
Q ” source quench received (congestion)
? ” unknown (any other ICMP message). In Cisco routers, the codes for a traceroute command reply are:
! ” success
* ” time out
N ” network unreachable –
H ” host unreachable –
P ” protocol unreachable –
A ” admin denied –
Q ” source quench received (congestion)
? ” unknown (any other ICMP message)

Which Cisco FlexConnect state allows wireless users that are connected to the network to continue working after the connection to the WLC has been lost?

A. Authentication Down/Switching Down

B. Authentication-Central/Switch-Local

C. Authentication-Central/Switch-Central

D. Authentication-Down/Switch-Local

Drag and drop the descriptions from the left onto the correct QoS components on the right.

Select and Place:

Which protocol is responsible for data plane forwarding in a Cisco SD-Access deployment?

A. IS-IS

B. OSPF

C. VXLAN

D. LISP

Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

Select and Place:

Which OSPF network types are compatible and allow communication through the two peering devices?

A. point-to-multipoint to nonbroadcast

B. broadcast to nonbroadcast

C. point-to-multipoint to broadcast

D. broadcast to point-to-point

Why would a small or mid-size business choose a cloud solution over an on-premises solution?

A. Cloud provides greater ability for customization than on-premises.

B. Cloud provides more control over the implementation process than on-premises.

C. Cloud provides lower upfront cost than on-premises.

D. Cloud provides higher data security than on-premises.

A customer requires their wireless data traffic to egress at the switch port of the access point. Which access point mode supports this?

A. FlexConnect

B. Sniffer

C. Bridge

D. Monitor

Drag and drop the NTP elements from the left onto the correct descriptions on the right.

Select and Place:

What is the recommended minimum SNR for data applications on wireless networks?

A. 20

B. 25

C. 15

D. 10

A company has an existing Cisco 5520 HA cluster using SSO. An engineer deploys a new single Cisco Catalyst 9800 WLC to test new features. The engineer successfully configures a mobility tunnel between the 5520 cluster and 9800 WL

A. Clients connected to the corporate WLAN roam seamlessly between access points on the 5520 and 9800 WL

B. After a failure on the primary 5520 WLC, all WLAN services remain functional; however, clients cannot roam between the 5520 and 9800 controllers without dropping their connection. Which feature must be configured to remedy the issue?

C. mobility MAC on the 5520 cluster

D. mobility MAC on the 9800 WLC

E. new mobility on the 5520 cluster

F. new mobility on the 9800 WLC

Refer to the exhibit.

The EtherChannel between SW2 and SW3 is not operational. Which action resolves this issue?

A. configure the channel-group mode on SW3 Gi0/0 and Gi0/1 to active.

B. configure the mode on SW2 Gi0/0 to trunk.

C. configure the channel-group mode on SW2 Gi0/0 and Gi0/1 to on.

D. configure the mode on SW2 Gi0/1 to access.

Drag and drop the code snippets from the bottom onto the blanks in the script to convert a Python object into a JSON string. Not all options are used.

Select and Place:

Refer to the exhibit. Which command set must be added to permit and log all traffic that comes from 172.20.10.1 in interface GigabitEthernet0/1 without impacting the functionality of the access list?

A.

B.

C.

D.

Refer to the exhibit. Which command when applied to the Atlanta router reduces type 3 LSA flooding into the backbone area and summarizes the inter-area routes on the Dallas router?

A. Atlanta(config-router)#area 0 range 192.168.0.0 255.255.252.0

B. Atlanta(config-router)#area 1 range 192.168.0.0 255.255.248.0

C. Atlanta(config-router)#area 0 range 192.168.0.0 255.255.248.0

D. Atlanta(config-router)#area 1 range 192.168.0.0 255.255.252.0

An engineer is configuring Local WebAuth on a Cisco Wireless LAN Controller. According to RFC 5737, which virtual IP address must be used in this configuration?

A. 172.20.10.1

B. 192.168.0.1

C. 1.1.1.1

D. 192.0.2.1

Refer to the exhibit.

Users cannot reach the web server at 192.168.100.1. What is the root cause for the failure?

A. The server is attempting to load balance between links 10.100.100.1 and 10.100.200.1.

B. There is a loop in the path to the server.

C. The gateway cannot translate the server domain name.

D. The server is out of service.

What is the function of the LISP map resolver?

A. to connect a site to the LISP-capable part of a core network publish the EID-to-RLOC mappings for the site, and respond to map-request messages

B. to advertise routable non-LISP traffic from one address family to LISP sites in a different address family

C. to send traffic to non-LISP sites when connected to a service provider that does not accept nonroutable EIDs as packet sources

D. to decapsulate map-request messages from ITRs and forward the messages to the MS

Drag and drop the components of the Cisco SD-Access fabric architecture from the left onto the correct descriptions on the right. Not all options are used.

Select and Place:

Drag and drop the QoS mechanisms from the left onto their descriptions on the right.

Select and Place:

An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication.
Which profile must the engineer edit to achieve this requirement?

A. Policy

B. RF

C. Flex

D. WLAN

Router R1 must be configured as a UDP responder on port 6336. Which configuration accomplishes this task?

A. (config)#ip sla responder udp-echo ipaddress 10.10.10.1 port 6336

B. (config)#ip sla responder udp-echo ipv4 10.10.10.1 port 6336

C. (config)#ip sla responder ipaddress 10.10.10.1 port 6336

D. (config-if)#ip sla responder udp-port ipaddress 10.10.10.1 port 6336

How can an engineer prevent basic replay attacks from people who try to brute force a system via REST API?

A. Add a timestamp to the request in the API header.

B. Use a password hash.

C. Add OAuth to the request in the API header.

D. Use HTTPS.

What is a Type 2 hypervisor?

A. installed as an application on an already installed operating system

B. also referred to as a “bare metal hypervisor” because it sits directly on the physical server

C. runs directly on a physical server and includes its own operating system

D. supports over-allocation of physical resources

Which two pieces of information are necessary to compute SNR? (Choose two.)

A. transmit power

B. noise floor

C. EIRP

D. RSSI

E. antenna gain

Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address
10.10.10.1?

A. ip access-list extended 200 deny tcp host 10.10.10.1 eq 80 any permit ip any any

B. ip access-list extended 10 deny tcp host 10.10.10.1 any eq 80 permit ip any any

C. ip access-list extended NO_HTTP deny tcp host 10.10.10.1 any eq 80

D. ip access-list extended 100 deny tcp host 10.10.10.1 any eq 80 permit ip any any D

What are two characteristics of Cisco SD-Access elements? (Choose two.)

A. The border node is required for communication between fabric and nonfabric devices.

B. traffic within the fabric always goes through the control plane node.

C. Fabric endpoints are connected directly to the border node.

D. The control plane node has the full RLOC-to-EID mapping database.

E. The border node has the full RLOC-to-EID mapping database.

What are two characteristics of a directional antenna? (Choose two.)

A. commonly used to cover large areas

B. low gain

C. provides the most focused and narrow beam-width

D. receive signals equally from all directions

E. high gain

Refer to the exhibit.

Which command is required to validate that an IP SLA configuration matches the traffic between the branch office and the central site?

A. R1# show ip sla group schedule

B. R1# show ip route

C. R1# show ip sla configuration

D. R1# show ip sla statistics

Ansible is being used in a network for configuration and management automation. Which of the following are true statements regarding Ansible? (Choose two.)

A. Requires an agent on the end device.

B. Utilizes the concept of playbooks to execute the configuration.

C. Uses a pull model, where the end devices pull configuration files from the Ansible server.

D. Utilizes SS

E.

Refer to the exhibit. An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected.
Which action will resolve this issue?

A. enable AAA override

B. set a NAC state

C. utilize RADIUS pro ling

D. require a DHCP address assignment

Which congestion queuing method on Cisco IOS based routers uses four static queues?

A. weighted fair

B. custom

C. low latency

D. priority

A script contains the statement "while loop != 999:" Which value terminates the loop?

A. A value not equal to 999.

B. A value less than or equal to 999.

C. A value equal to 999.

D. A value greater than or equal to 999.

At which layer does Cisco DNA Center support REST controls?

A. session layer

B. northbound APIs

C. EEM applets or scripts

D. YAML output from responses to API calls

Drag and drop the characteristics from the left onto the orchestration tool classifications on the right.

Select and Place:

Which two mechanisms are used with OAuth 2.0 for enhanced validation? (Choose two.)

A. authorization

B. custom headers

C. request management

D. authentication

E. accounting

Refer to the exhibit. R1 is able to ping the R3 fa0/1 interface. Why do the extended pings fail?

A. The maximum packet size accepted by the command is 1476 bytes.

B. The DF bit has been set.

C. R3 is missing a return route to 10.99.69.0/30.

D. R2 and R3 do not have an OSPF adjacency.

An engineer must configure HSRP for VLAN 1200 on SW1. The second switch is configured by using the last usable IP address in the network as the virtual IP. Which command set accomplishes this task?

A. SW1(config)# interface vlan 1200SW1(config-if)# ip address 172.12.0.254 255.255.255.0SW1(config-if)# standby version 2SW1(config-if)# standby 1200 ip 172.12.0.2SW1(conflg-it)# standby 1200 preempt

B. SW1(config)# interface vlan 1200SW1(config-if)# ip address 172.12.0.2 255.255.255.0SW1(config-if)# standby version 2SW1(config-if)# standby 1200 ip 172.12.0.254SW1(conflg-it)# standby 1200 preempt

C. SW1(config)# interface vlan 1200SW1(config-if)# ip address 172.12.0.2 255.255.255.0SW1(config-if)# standby 1200 ip 172.12.0.254SW1(config-if)# standby 1200 timers 5 15SW1(conflg-it)# standby 1200 preempt

D. SW1(config)# interface vlan 1200SW1(config-if)# ip address 172.12.0.1 255.255.255.0SW1(config-if)# standby 1200 ip 172.12.0.254SW1(config-if)# standby 1200 timers 5 15SW1(conflg-it)# standby 1200 preempt

Drag and drop the LISP components from the left onto the functions they perform on the right. Not all options are used.

Select and Place:


2%80%93%20Proxy%20ITR%20(PITR)%3A%20A,devices%20deployed%20at%20LISP%20sites.

Which function does a fabric AP perform in a Cisco SD-Access deployment?

A. It updates wireless clients’ locations in the fabric.

B. It connects wireless clients to the fabric.

C. It manages wireless clients’ membership information in the fabric.

D. It configures security policies down to wireless clients in the fabric.

Refer to the exhibit. What does the Python code accomplish?

A. It configures interface e1/32 to be in an admin down state

B. It generates a status code of 403 because the type is incorrect.

C. It configures interface e1/32 to be in an err-disable state.

D. It returns data in JSON-RPC format.

Which two namespaces does the LISP network architecture and protocol use? (Choose two.)

A. TLOC

B. RLOC

C. DNS

D. VTEP

E. EID

In a Cisco VXLAN based network, which of the following best describes the main function of a VXLAN Tunnel Endpoint (VTEP)?

A. A device that performs VXLAN encapsulation and decapsulation.

B. It is a 24 bit segment ID that defines the broadcast domain.

C. It is the Logical interface where the encapsulation and de-encapsulation occurs.

D. It is a device that performs tunneling using GR

E.

Refer to the exhibit. The OSPF neighborship fails between two routers. What is the cause of this issue?

A. The OSPF process is stopped on the neighbor router.

B. The OSPF router ID is missing on this router.

C. The OSPF router ID is missing on the neighbor router.

D. There is an MTU mismatch between the two routers.

Refer to the exhibit. Which configuration is required to summarize the Area 2 networks that are advertised to Area 0?

A. RouterB(config)# router ospf 1 RouterB(config-router)# area 2 range 192.168.36.0 255.255.252.0

B. RouterB(config)# router ospf 1 RouterB(config-router)# network 192.168.38.0 255.255.255.0

C. RouterB(config)# router ospf 1 RouterB(config-router)# network 192.168.38.0 255.255.252.0

D. RouterB(config)# router ospf 1 RouterB(config-router)# area 2 range 192.168.36.0 255.255.255.0 A

After a redundant route processor failure occurs on a Layer 3 device, which mechanism allows for packets to be forwarded from a neighboring router based on the most recent tables?

A. BFD

B. RP failover

C. NSF

D. RPVST+

An engineer is concerned with the deployment of a new application that is sensitive to inter-packet delay variance. Which command configures the router to be the destination of jitter measurements?

A. Router(config)# ip sla responder udp-connect 172.29.139.134 5000

B. Router(config)# ip sla responder tcp-connect 172.29.139.134 5000

C. Router(config)# ip sla responder udp-echo 172.29.139.134 5000

D. Router(config)# ip sla responder tcp-echo 172.29.139.134 5000