Preparacion Networking

What is the difference between a RIB and a FIB?. The FIB is populated based on RIB content. The RIB maintains a mirror image of the FIB. The RIB is used to make IP source prefix-based switching decisions. The FIB is where all IP routing information is stored.

Which QoS component alters a packet to change the way that traffic is treated in the network?. policing. classification. marking. shaping.

Traffic policing vs traffic shaping. causes TCP retransmissions when traffic is dropped. buffers excessive traffic. introduces no delay and jitter. drops excessive traffic. typically delays, rather than drops traffic. introduces delay and jitter.

Which statement about Cisco Express Forwarding is true?. The CPU of a router becomes directly involved with packet-switching decisions. It uses a fast cache that is maintained in a router data plane. It maintains two tables in the data plane: the FIB and adjacency table. It makes forwarding decisions by a process that is scheduled through the IOS scheduler.

What is a benefit of deploying an on-premises infrastructure versus a cloud infrastructure deployment?. ability to quickly increase compute power without the need to install additional hardware. less power and cooling resources needed to run infrastructure on-premises. faster deployment times because additional infrastructure does not need to be purchased. lower latency between systems that are physically located near each other.

DRAG DROP - Drag and drop the characteristics from the left onto the appropriate infrastructure deployment types on the right. Select and Place: customizable hardware, purpose-buit systems. easy to scale and upgrade. more suitable for companies with specific regulatory or security requirements. resources can be over or underutilized as requirements vary. requires a strong and stable internet connection. built-in, automated data backups and recovery.

How does QoS traffic shaping alleviate network congestion?. It drops packets when traffic exceeds a certain bitrate. It buffers and queues packets above the committed rate. It fragments large packets and queues them for delivery. It drops packets randomly from lower priority queues.

An engineer is describing QoS to a client. Which two facts apply to traffic policing? (Choose two.). Policing should be performed as close to the source as possible. Policing adapts to network congestion by queuing excess traffic. Policing should be performed as close to the destination as possible. Policing drops traffic that exceeds the defined rate. Policing typically delays the traffic, rather than drops it.

Which component handles the orchestration plane of the Cisco SD-WAN?. vBond. vSmart. vManage. WAN Edge.

What are two device roles in Cisco SD-Access fabric? (Choose two.). edge node. vBond controller. access switch. core switch. border node.

What is the role of the vSmart controller in a Cisco SD-WAN environment?. It performs authentication and authorization. It manages the control plane. It is the centralized network management system. It manages the data plane.

When a wired client connects to an edge switch in a Cisco SD-Access fabric, which component decides whether the client has access to the network?. edge node. Identity Services Engine. RADIUS server. control-plane node.

Which benefit is offered by a cloud infrastructure deployment but is lacking in an on-premises deployment?. virtualization. supported systems. storage capacity. efficient scalability.

Which action is the vSmart controller responsible for in a Cisco SD-WAN deployment?. onboard WAN Edge nodes into the Cisco SD-WAN fabric. gather telemetry data from WAN Edge routers. distribute policies that govern data forwarding performed within the Cisco SD-WAN fabric. handle, maintain, and gather configuration and status for nodes within the Cisco SD-WAN fabric.

Where is radio resource management performed in a Cisco SD-Access wireless solution?. DNA Center. control plane node. wireless controller. Cisco CMX.

DRAG DROP - Drag and drop the characteristics from the left onto the infrastructure types on the right. Select and Place: enterprise owns the hardware. low capital expenditure. provider maintains the infrastructure. slow upgrade lifecycle. high capital expenditure. fast upgrade lifecycle.

How does the RIB differ from the FIB?. The FIB maintains network topologies and routing tables. The RIB is a list of routes to particular network destinations. The FIB includes many routes to a single destination. The RIB is the best route to a single destination. The RIB is used to create network topologies and routing tables. The FIB is a list of routes to particular network destinations. The RIB includes many routes to the same destination prefix. The FIB contains only the best route.

Which technology is used to provide Layer 2 and Layer 3 logical networks in the Cisco SD-Access architecture?. underlay network. VPN routing/forwarding. easy virtual network. overlay network.

What is the difference between CEF and process switching?. CEF processes packets that are too complex for process switching to manage. Process switching is faster than CEF. CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet. CEF is more CPU-intensive than process switching.

What are two considerations when using SSO as a network redundancy feature? (Choose two.). requires synchronization between supervisors in order to guarantee continuous connectivity. the multicast state is preserved during switchover. must be combined with NSF to support uninterrupted Layer 3 operations. both supervisors must be configured separately. must be combined with NSF to support uninterrupted Layer 2 operations.

DRAG DROP - Drag and drop the characteristics from the left onto the correct infrastructure deployment type on the right. Select and Place: significant initial investment but lower reoccurring costs. pay-as-you-go model. physical location of data can be defined in contract with provider. very scalable and fast delivery of changes in scale. company has control over the physical security of equipment.

In a Cisco SD-Access fabric, which control plane protocol is used for mapping and resolving endpoints?. DHCP. VXLAN. SXP. LISP.

What are two differences between the RIB and the FIB? (Choose two.). FIB is a database of routing prefixes, and the RIB is the information used to choose the egress interface for each packet. The FIB is derived from the data plane, and the RIB is derived from the FIB. The RIB is a database of routing prefixes, and the FIB is the information used to choose the egress interface for each packet. The RIB is derived from the control plane, and the FIB is derived from the RIB. The FIB is derived from the control plane, and the RIB is derived from the FIB.

Which two network problems indicate a need to implement QoS in a campus network? (Choose two.). port flapping. excess jitter. misrouted network packets. duplicate IP addresses. bandwidth-related packet loss.

In a Cisco SD-Access wireless architecture, which device manages endpoint ID to edge node bindings?. fabric control plane node. fabric wireless controller. fabric border node. fabric edge node.

DRAG DROP - Drag and drop the QoS mechanisms from the left onto their descriptions on the right. Select and Place: Service policy. policy map. DSCP.

Which control plane protocol is used between Cisco SD-WAN routers and vSmart controllers?. TCP. OMP. UDP. BGP.

In a three-tier hierarchical campus network design, which action is a design best-practice for the core layer?. provide QoS prioritization services such as marking, queueing, and classification for critical network traffic. provide redundant Layer 3 point-to-point links between the core devices for more predictable and faster convergence. provide advanced network security features such as 802.1X, DHCP snooping, VACLs, and port security. provide redundant aggregation for access layer devices and first-hop redundancy protocols such as VRRP.

What is a VPN in a Cisco SD-WAN deployment?. common exchange point between two different services. attribute to identify a set of services offered in specific places in the SD-WAN fabric. virtualized environment that provides traffic isolation and segmentation in the SD-WAN fabric. virtual channel used to carry control plane information.

Which function does a fabric edge node perform in an SD-Access deployment?. Connects endpoints to the fabric and forwards their traffic. Encapsulates end-user data traffic into LISP. Connects the SD-Access fabric to another fabric or external Layer 3 networks. Provides reachability between border nodes in the fabric underlay.

What is the role of a fusion router in an SD-Access solution?. acts as a DNS server. provides additional forwarding capacity to the fabric. performs route leaking between user-defined virtual networks and shared services. provides connectivity to external networks.

Which action is the vSmart controller responsible for in an SD-WAN deployment?. onboard vEdge nodes into the SD-WAN fabric. gather telemetry data from vEdge routers. distribute security information for tunnel establishment between vEdge routers. manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric.

What is one fact about Cisco SD-Access wireless network deployments?. The access point is part of the fabric overlay. The wireless client is part of the fabric overlay. The access point is part of the fabric underlay. The WLC is part of the fabric underlay.

In a Cisco SD-Access solution, what is the role of a fabric edge node?. to connect external Layer 3 networks to the SD-Access fabric. to connect wired endpoints to the SD-Access fabric. to advertise fabric IP address space to external networks. to connect the fusion router to the SD-Access fabric.

What are two reasons a company would choose a cloud deployment over an on-prem deployment? (Choose two.). Cloud costs adjust up or down depending on the amount of resources consumed. On-prem costs for hardware, power, and space are on-going regardless of usage. Cloud resources scale automatically to an increase in demand. On-prem requires additional capital expenditure. In a cloud environment, the company is in full control of access to their data. On-prem risks access to data due to service provider outages. In a cloud environment, the company controls technical issues. On-prem environments rely on the service provider to resolve technical issues. Cloud deployments require long implementation times due to capital expenditure processes. On-prem deployments can be accomplished quickly using operational expenditure processes.

What is the difference between the MAC address table and TCAM?. TCAM is used to make L2 forwarding decisions. CAM is used to build routing tables. Router prefix lookups happen in TCAM. MAC address table lookups happen in CAM. The MAC address table supports partial matches. TCAM requires an exact match. The MAC address table is contained in TCAM. ACL and QoS information is stored in CAM.

Which controller is the single plane of management for Cisco SD-WAN?. vBond. vSmart. vManage. vEdge.

A company plans to implement intent-based networking in its campus infrastructure. Which design facilitates a migration from a traditional campus design to a programmable fabric design?. two-tier. Layer 2 access. three-tier. routed access.

Which statement about a fabric access point is true?. It is in local mode and must be connected directly to the fabric edge switch. It is in local mode and must be connected directly to the fabric border node. It is in FlexConnect mode and must be connected directly to the fabric border node. It is in FlexConnect mode and must be connected directly to the fabric edge switch.

A customer requests a network design that supports these requirements: ✑ FHRP redundancy ✑ multivendor router environment ✑ IPv4 and IPv6 hosts Which protocol does the design include?. VRRP version 2. VRRP version 3. GLBP. HSRP version 2.

While configuring an IOS router for HSRP with a virtual IP of 10.1.1.1, an engineer sees this log message. Jan 1 12:12:12.111 : %HSRP-4-DIFFVIP1: GigabitEthernet0/0 Grp 1 active routers virtual IP address 10.1.1.1 is different to the locally configured address 10.1.1.25 Which configuration change must the engineer make?. Change the HSRP group configuration on the local router to 1. Change the HSRP virtual address on the local router to 10.1.1.1. Change the HSRP virtual address on the remote router to 10.1.1.1. Change the HSRP group configuration on the remote router to 1.

A network administrator has designed a network with two multilayer switches on the distribution layer, which act as default gateways for the end hosts. Which two technologies allow every end host in a VLAN to use both gateways? (Choose two.). VRRP. GLBP. VSS. MHSRP. HSRP.

Refer to the exhibit. On which interfaces should VRRP commands be applied to provide first hop redundancy to PC-01 and PC-02?. G0/0 and G0/1 on Core. G0/0 on Edge-01 and G0/0 on Edge-02. G0/1 on Edge-01 and G0/1 on Edge-02. G0/0 and G0/1 on ASW-01.

Under which network conditions is an outbound QoS policy that is applied on a router WAN interface most beneficial?. under traffic classification and marking conditions. under interface saturation conditions. under all network conditions. under network convergence conditions.

An engineer must configure HSRP group 300 on a Cisco IOS router. When the router is functional, it must be the active HSRP router. The peer router has been configured using the default priority value. Which command set is required?. standby version 2 standby 300 priority 110 standby 300 preempt. standby 300 priority 110 standby 300 timers 1 110. standby version 2 standby 300 priority 90 standby 300 preempt. standby 300 priority 90 standby 300 preempt.

What is the function of a fabric border node in a Cisco SD-Access environment?. To collect traffic flow information toward external networks. To connect the Cisco SD-Access fabric to another fabric or external Layer 3 networks. To attach and register clients to the fabric. To handle an ordered list of IP addresses and locations for endpoints in the fabric.

In a wireless Cisco SD-Access deployment, which roaming method is used when a user moves from one AP to another on a different access switch using a single WLC?. Layer 3. inter-xTR. auto anchor. fast roam.

What is the recommended MTU size for a Cisco SD-Access Fabric?. 4464. 17914. 9100. 1500.

What is the function of the fabric control plane node in a Cisco SD-Access deployment?. It is responsible for policy application and network segmentation in the fabric. It performs traffic encapsulation and security profiles enforcement in the fabric. It holds a comprehensive database that tracks endpoints and networks in the fabric. It provides integration with legacy nonfabric-enabled environments.

What is the data policy in a Cisco SD-WAN deployment?. list of ordered statements that define node configurations and authentication used within the SD-WAN overlay. set of statements that defines how data is forwarded based on IP packet information and specific VPNs. detailed database mapping several kinds of addresses with their corresponding location. group of services tested to guarantee devices and links liveliness within the SD-WAN overlay.

In Cisco SD-WAN, which protocol is used to measure link quality?. IPsec. OMP. RSVP. BFD.

How do cloud deployments differ from on-premises deployments?. Cloud deployments require longer implementation times than on-premises deployments. Cloud deployments are more customizable than on-premises deployments. Cloud deployments have lower upfront costs than on-premises deployments. Cloud deployments require less frequent upgrades than on-premises deployments.

Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?. vBond. vSmart. vManage. PNP Server.

How is 802.11 traffic handled in a fabric-enabled SSID?. centrally switched back to WLC where the user traffic is mapped to a VXLAN on the WLC. converted by the AP into 802.3 and encapsulated into VXLAN. centrally switched back to WLC where the user traffic is mapped to a VLAN on the WLC. converted by the AP into 802.3 and encapsulated into a VLAN.

Refer to the exhibit. An engineer is installing a new pair of routers in a redundant configuration. When checking on the standby status of each router, the engineer notices that the routers are not functioning as expected. Which action will resolve the configuration error?. configure matching hold and delay timers. configure matching key-strings. configure matching priority values. configure unique virtual IP addresses.

Refer to the exhibit. Router1 is currently operating as the HSRP primary with a priority of 110. Router1 fails and Router2 takes over the forwarding role. Which command on Router1 causes it to take over the forwarding role when it returns to service?. standby 2 priority. standby 2 preempt. standby 2 track. standby 2 timers.

An engineer has deployed a single Cisco 5520 WLC with a management IP address of 172 16.50.5/24. The engineer must register 50 new Cisco AIR-CAP2802I- E-K9 access points to the WLC using DHCP option 43. The access points are connected to a switch in VLAN 100 that uses the 172.16.100.0/24 subnet. The engineer has configured the DHCP scope on the switch as follows: Network 172.16.100.0 255.255.255.0 Default Router 172.16.100.1 - Option 43 ASCII 172.16.50.5 - The access points are failing to join the wireless LAN controller. Which action resolves the issue?. configure option 43 Hex F104.AC10.3205. configure option 43 Hex F104.CA10.3205. configure dns-server 172.16.50.5. configure dns-server 172. 16.100.1.

Which element enables communication between guest VMs within a virtualized environment?. hypervisor. virtual router. vSwitch. pNIC.

Which action is performed by Link Management Protocol in a Cisco StackWise Virtual domain?. It determines which switch becomes active or standby. It determines if the hardware is compatible to form the StackWise Virtual domain. It rejects any unidirectional link traffic forwarding. It discovers the StackWise domain and brings up SVL interfaces.

What are two reasons why broadcast radiation is caused in the virtual machine environment? (Choose two.). vSwitch must interrupt the server CPU to process the broadcast packet. The Layer 2 domain can be large in virtual machine environments. Virtual machines communicate primarily through broadcast mode. Communication between vSwitch and network switch is broadcast based. Communication between vSwitch and network switch is multicast based.

Which two GRE features are configured to prevent fragmentation? (Choose two.). TCP window size. IP MTU. TCP MSS. DF bit clear. MTU ignore.

Which LISP device is responsible for publishing EID-to-RLOC mappings for a site?. ETR. MR. ITR. MS.

Refer to the exhibit. Assuming that R1 is a CE router, which VRF is assigned to Gi0/0 on R1?. default VRF. VRF VPN_A. VRF VPN_B. management VRF.

What are two benefits of virtualizing the server with the use of VMs in a data center environment? (Choose two.). reduced rack space, power, and cooling requirements. smaller Layer 2 domain. increased security. speedy deployment. reduced IP and MAC address requirements.

Which statement about route targets is true when using VRF-Lite?. Route targets control the import and export of routes into a customer routing table. When BGP is configured, route targets are transmitted as BGP standard communities. Route targets allow customers to be assigned overlapping addresses. Route targets uniquely identify the customer routing table.

Which LISP infrastructure device provides connectivity between non-LISP sites and LISP sites by receiving non-LISP traffic with a LISP site destination?. PITR. map resolver. map server. PETR.

Which statement explains why Type 1 hypervisor is considered more efficient than Type2 hypervisor?. Type 1 hypervisor is the only type of hypervisor that supports hardware acceleration techniques. Type 1 hypervisor relies on the existing OS of the host machine to access CPU, memory, storage, and network resources. Type 1 hypervisor runs directly on the physical hardware of the host machine without relying on the underlying OS. Type 1 hypervisor enables other operating systems to run on it.

Which statement about VXLAN is true?. VXLAN encapsulates a Layer 2 frame in an IP-UDP header, which allows Layer 2 adjacency across router boundaries. VXLAN uses the Spanning Tree Protocol for loop prevention. VXLAN extends the Layer 2 Segment ID field to 24-bits, which allows up to 4094 unique Layer 2 segments over the same network. VXLAN uses TCP as the transport protocol over the physical data center network.

Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?. MSS. MTU. MRU. window size.

Which statement describes the IP and MAC allocation requirements for virtual machines on Type 1 hypervisors?. Virtual machines do not require a unique IP or unique MAC. They share the IP and MAC address of the physical server. Each virtual machine requires a unique IP address but shares the MAC address with the physical server. Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes. Each virtual machine requires a unique MAC address but shares the IP address with the physical server.

Which two namespaces does the LISP network architecture and protocol use? (Choose two.). TLOC. RLOC. DNS. VTEP. EID.

Which two entities are Type 1 hypervisors? (Choose two.). Oracle VM VirtualBox. Microsoft Hyper-V. VMware server. VMware ESXi. Microsoft Virtual PC.

Drag and drop the LISP components from the left onto the functions they perform on the right. Not all options are used. Select and Place: LISP map resolver. LISP proxy ETR. LISP route reflector. LIST ITR. LISP map server.

Which action is a function of VTEP in VXLAN?. tunneling traffic from IPv6 to IPv4 VXLANs. allowing encrypted communication on the local VXLAN Ethernet segment. encapsulating and de-encapsulating VXLAN Ethernet frames. tunneling traffic from IPv4 to IPv6 VXLANs.

Which two actions provide controlled Layer 2 network connectivity between virtual machines running on the same hypervisor? (Choose two.). Use a virtual switch provided by the hypervisor. Use a virtual switch running as a separate virtual machine. Use VXLAN fabric after installing VXLAN tunneling drivers on the virtual machines. Use a single routed link to an external router on stick. Use a single trunk link to an external Layer2 switch.

What is a Type 1 hypervisor?. runs directly on a physical server and depends on a previously installed operating system. runs directly on a physical server and includes its own operating system. runs on a virtual server and depends on an already installed operating system. runs on a virtual server and includes its own operating system.

Refer to the exhibit. A network engineer configures a GRE tunnel and enters the show interface tunnel command. What does the output confirm about the configuration?. The keepalive value is modified from the default value. The physical interface MTU is 1476 bytes. The tunnel mode is set to the default. Interface tracking is configured.

What it the purpose of the LISP routing and addressing architecture?. It creates two entries for each network node, one for its identity and another for its location on the network. It allows LISP to be applied as a network virtualization overlay though encapsulation. It allows multiple instances of a routing table to co-exist within the same router. It creates head-end replication used to deliver broadcast and multicast frames to the entire network.

What function does VXLAN perform in a Cisco SD-Access deployment?. policy plane forwarding. control plane forwarding. data plane forwarding. systems management and orchestration.

Refer to the exhibit. MTU has been configured on the underlying physical topology, and no MTU command has been configured on the tunnel interfaces. What happens when a 1500-byte IPv4 packet traverses the GRE tunnel from host X to host Y, assuming the DF bit is cleared?. The packet is discarded on router B. The packet arrives on router C without fragmentation. The packet arrives on router C fragmented. The packet is discarded on router A.

Which entity is responsible for maintaining Layer 2 isolation between segments in a VXLAN environment?. VNID. switch fabric. VTEP. host switch.

What is an emulated machine that has dedicated compute, memory, and storage resources and a fully installed operating system?. mainframe. host. virtual machine. container.

Drag and drop the descriptions of the VSS technology from the left to the right. Not all options are used. Select and Place: combines exactly two devices. supported on cisco 3750 and 3850. supported on cisco 4500 and 6500. supports devices that are geographically separated. supports up to nine devices. uses proprietary clabling.

Which technology does VXLAN use to provide segmentation for Layer 2 and Layer 3 traffic?. bridge domain. VLAN. VNI. VRF.

Drag and drop the characteristics from the left onto the routing protocols they describe on the right. maintains alternative loop-free path if available. Link State Protocol. select routes using the DUAL algorithm. supports only equal multipath load balancing. Advanced Distance Vector Protocol. quickly computes new path upon link failure.

Which method does the enable secret password option use to encrypt device passwords?. CHAP. PAP. MD5. AES.

Which method does Cisco DNA Center use to allow management of non-Cisco devices through southbound protocols?. It creates device packs through the use of an SDK. It uses an API call to interrogate the devices and register the returned data. It obtains MIBs from each vendor that details the APIs available. It imports available APIs for the non-Cisco device in a CSV format.

In a Cisco Catalyst switch equipped with two supervisor modules an administrator must temporally remove the active supervisor from the chassis to perform hardware maintenance on it. Which mechanism ensure that the active supervisor removal is not disruptive to the network operation?. NSF/NSR. SSO. HSRP. VRRP.

Refer to the exhibit. What does the error message relay to the administrator who is trying to configure a Cisco IOS device?. A NETCONF request was made for a data model that does not exist. The device received a valid NETCONF request and serviced it without error. A NETCONF message with valid content based on the YANG data models was made, but the request failed. The NETCONF running datastore is currently locked.

Drag and drop the descriptions from the left onto the routing protocol they describe on the right. summaries can be created anywhere in the IGP topology. uses areas to segment a network. DUAL algorithm. summarizes can be create in specific parts of the IGP topology.

Drag and drop the descriptions from the left onto the routing protocol they describe on the right. supports unequal path load balancing. link state routing protocol. distance vector protocol. metric is based on delay and bandwidth by default. makes it easy to segment the network logically. constructs three tables as a part of its operation neighbor table, topology table and routing table.

Drag the drop the description from the left onto the routing protocol they describe on the right. supports unequal cost path load balancing. link state. advanced distance vector. supports only equal cost path load balancing.

Refer to the exhibit. An engineer must assign an IP address of 192.168.1.1/24 to the GigabitEthernet1 interface. Which two commands must be added to the existing configuration to accomplish this task? (Choose two.). Router(config-if)#ip address 192.168.1.1 255.255.255.0. Router(config-vrf)#address-family ipv4. Router(config-vrf)#ip address 192.168.1.1 255.255.255.0. Router(config-if)#address-family ipv4. Router(config-vrf)#address-family ipv6.

The following system log message is presented after a network administrator configures a GRE tunnel: %TUN-RECURDOWN Interface Tunnel 0 temporarily disabled due to recursive routing Why is Tunnel 0 disabled?. Because dynamic routing is not enabled. Because the tunnel cannot reach its tunnel destination. Because the best path to the tunnel destination is through the tunnel itself. Because the router cannot recursively identify its egress forwarding interface.

Refer to the exhibit. A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec profiles. Which two configuration changes accomplish this? (Choose two). Create an IPsec profile, associate the transform-set ACL, and apply the profile to the tunnel interface. Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode ipsec ipv4. Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL. Create an IPsec profile, associate the transform-set, and apply the profile to the tunnel interface. Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24.

What is a benefit of a virtual machine when compared with a physical server?. Multiple virtual servers can be deployed on the same physical server without having to buy additional hardware. Virtual machines increase server processing performance. The CPU and RAM resources on a virtual machine cannot be affected by other virtual machines. Deploying a virtual machine is technically less complex than deploying a physical server.

What is required for a virtual machine to run?. a Type 1 hypervisor and a host operating system. a hypervisor and physical server hardware. only a Type 1 hypervisor. only a Type 2 hypervisor.

Which entity is a Type 1 hypervisor?. Oracle VM VirtualBox. Citrix XenServer. VMware server. Microsoft Virtual PC.

What are two benefits of virtual switching when compared to hardware switching? (Choose two.). increased MTU size. VM-level isolation. extended 802.1Q VLAN range. hardware independence. increased flexibility.

What is a characteristic of a virtual machine?. It must run the same operating system as its host. It is deployable without a hypervisor to host it. It must be aware of other virtual machines, in order to allocate physical resources for them. It relies on hypervisors to allocate computing resources for it.

Which LISP component is required for a LISP site to communicate with a non-LISP site?. Proxy ITR. ITR. ETR. Proxy ETR.

Which two components are supported by LISP? (Choose two.). proxy ETR. egress tunnel router. route reflector. HMAC algorithm. spoke.

What is the function of a VTEP in VXLAN?. provide the routing underlay and overlay for VXLAN headers. dynamically discover the location of end hosts in a VXLAN fabric. encapsulate and de-encapsulate traffic into and out of the VXLAN fabric. statically point to end host locations of the VXLAN fabric.

Refer to the exhibit. Which configuration must be applied to R1 to enable R1 to reach the server at 172.16.0.1?. interface Ethernet0/0 ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 255.255.0.0. interface Ethernet0/0 vrf forwarding hotel ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf Hotel network 172.16.0.0 0.0.255.255 area 0. interface Ethernet0/0 vrf forwarding bank ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 0.0.255.255 area 0. interface Ethernet0/0 ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf hotel network 172.16.0.0 255.255.0.0.

Refer to the exhibit. Which configuration allows Customer2 hosts to access the FTP server of Customer1 that has the IP address of 192.168.1.200?. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 global ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 global ip route 192.168.1.0 255.255.255.0 Vlan10 ip route 172.16.1.0 255.255.255.0 Vlan20. ip route vrf Customer1 172.16.1.1 255.255.255.255 172.16.1.1 global ip route vrf Customer2 192.168.1.200 255.255.255.0 192.168.1.1 global ip route 192.168.1.0 255.255.255.0 Vlan10 ip route 172.16.1.0 255.255.255.0 Vlan20. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer2 ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer1. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer1 ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer2.

Refer to the exhibit. A network engineer configures a new GRE tunnel and enters the show run command. What does the output verify?. The tunnel keepalive is configured incorrectly because they must match on both sites. The tunnel destination will be known via the tunnel interface. The tunnel will be established and work as expected. The default MTU of the tunnel interface is 1500 bytes.

Drag and drop the virtual components from the left onto their descriptions on the right. Select and Place: vNIC. OVA. VMDK. VMX.

What is the responsibility of a secondary WLC?. It enables Layer 2 and Layer 3 roaming between itself and the primary controller. It registers the LAPs if the primary controller fails. It avoids congestion on the primary controller by sharing the registration load on the LAPs. It shares the traffic load of the LAPs with the primary controller.

Which two methods are used to reduce the AP coverage area? (Choose two.). Reduce channel width from 40 MHz to 20 MHz. Reduce AP transmit power. Enable Fastlane. Increase minimum mandatory data rate. Disable 2.4 GHz and use only 5 GHz.

Which antenna type should be used for a site-to-site wireless connection?. patch. dipole. omnidirectional. Yagi.

In a wireless network environment, what is calculated using the numerical values of the transmitter power level, cable loss, and antenna gain?. SNR. RSSI. EIRP. dBi.

What does the LAP send when multiple WLCs respond to the CISCO-CAPWAP-CONTROLLER.localdomain hostname during the CAPWAP discovery and join process?. unicast discovery request to the first WLC that resolves the domain name. broadcast discovery request. join request to all the WLCs. unicast discovery request to each WLC.

A port channel is configured between SW2 and SW3. SW2 is not running a Cisco operating system. When all physical connections are made, the port channel does not establish. Based on the configuration excerpt of SW3, what is the cause of the problem?. The port-channel mode should be set to auto. The port channel on SW2 is using an incompatible protocol. The port-channel trunk is not allowing the native VLAN. The port-channel interface load balance should be set to src-mac.

What is a fact about Cisco EAP-FAST?. It requires a client certificate. It is an IETF standard. It does not require a RADIUS server certificate. It operates in transparent mode.

Which DNS lookup does an access point perform when attempting CAPWAP discovery?. CISCO-CONTROLLER.local. CAPWAP-CONTROLLER.local. CISCO-CAPWAP-CONTROLLER.local. CISCO-DNA-CONTROLLER.local.

Refer to the exhibit. What are two effects of this configuration? (Choose two.). It establishes a one-to-one NAT translation. The 209.165.201.0/27 subnet is assigned as the outside local address range. The 10.1.1.0/27 subnet is assigned as the inside local addresses. Inside source addresses are translated to the 209.165.201.0/27 subnet. The 10.1.1.0/27 subnet is assigned as the inside global address range.

An engineer configures a WLAN with fast transition enabled. Some legacy clients fail to connect to this WLAN. Which feature allows the legacy clients to connect while still allowing other clients to use fast transition based on their OUIs?. over the DS. 802.11k. adaptive R. 802.11v.

Which two pieces of information are necessary to compute SNR? (Choose two.). transmit power. noise floor. EIRP. RSSI. antenna gain.

Which OSPF network types are compatible and allow communication through the two peering devices?. point-to-multipoint to nonbroadcast. broadcast to nonbroadcast. point-to-multipoint to broadcast. broadcast to point-to-point.

Refer to the exhibit. Which statement about the OSPF debug output is true?. The output displays OSPF hello messages which router R1 has sent or received on interface Fa0/1. The output displays all OSPF messages which router R1 has sent or received on all interfaces. The output displays all OSPF messages which router R1 has sent or received on interface Fa0/1. The output displays OSPF hello and LSACK messages which router R1 has sent or received.

Which statement about multicast RPs is true?. RPs are required only when using protocol independent multicast dense mode. RPs are required for protocol independent multicast sparse mode and dense mode. By default, the RP is needed periodically to maintain sessions with sources and receivers. By default, the RP is needed only to start new sessions with sources and receivers.

To increase total throughput and redundancy on the links between the wireless controller and switch, the customer enabled LAG on the wireless controller. Which EtherChannel mode must be configured on the switch to allow the WLC to connect?. Active. Passive. On. Auto.

Based on this interface configuration, what is the expected state of OSPF adjacency?. 2WAY/DROTHER on both routers. not established. FULL on both routers. FULL/BDR on R1 and FULL/BDR on R2.

Refer to the exhibit. Link1 is a copper connection and Link2 is a fiber connection. The fiber port must be the primary port for all forwarding. The output of the show spanning-tree command on SW2 shows that the fiber port is blocked by spanning tree. An engineer enters the spanning-tree port-priority 32 command on G0/1 on SW2, but the port remains blocked. Which command should be entered on the ports that are connected to Link2 to resolve the issue?. Enter spanning-tree port-priority 4 on SW2. Enter spanning-tree port-priority 32 on SW1. Enter spanning-tree port-priority 224 on SW1. Enter spanning-tree port-priority 64 on SW2.

Which behavior can be expected when the HSRP version is changed from 1 to 2?. No changes occur because the standby router is upgraded before the active router. No changes occur because version 1 and 2 use the same virtual MAC OUI. Each HSRP group reinitializes because the virtual MAC address has changed. Each HSRP group reinitializes because the multicast address has changed.

Refer to the exhibit. Which IP address becomes the active next hop for 192.168.102.0/24 when 192.168.101.2 fails?. 192.168.101.10. 192.168.101.14. 192.168.101.6. 192.168.101.18.

Which PAgP mode combination prevents an EtherChannel from forming?. auto/desirable. desirable/desirable. desirable/auto. auto/auto.

If a VRRP master router fails, which router is selected as the new master router?. router with the lowest priority. router with the highest priority. router with the highest loopback address. router with the lowest loopback address.

In OSPF, which LSA type is responsible for pointing to the ASBR router?. type 1. type 2. type 3. type 4.

Refer to the exhibit. VLANs 50 and 60 exist on the trunk links between all switches. All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server. Which command ensures that SW3 receives frames only from VLAN 50?. SW1(config)#vtp mode transparent. SW3(config)#vtp mode transparent. SW2(config)#vtp pruning. SW1(config)#vtp pruning.

Which First Hop Redundancy Protocol maximizes uplink utilization and minimizes the amount of configuration that is necessary?. GLBP. HSRP v2. VRRP. HSRP v1.

Refer to the exhibit. Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?. R1(config)#router bgp 1 R1(config-router)#neighbor 192.168.10.2 remote-as 2 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 192.168.10.1 remote-as 1 R2(config-router)#network 10.2.2.0 mask 255.255.255.0. R1(config)#router bgp 1 R1(config-router)#neighbor 10.2.2.2 remote-as 2 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 10.1.1.1 remote-as 1 R2(config-router)#network 10.2.2.0 mask 255.255.255.0. R1(config)#router bgp 1 R1(config-router)#neighbor 192.168.10.2 remote-as 2 R1(config-router)#network 10.0.0.0 mask 255.0.0.0 R2(config)#router bgp 2 R2(config-router)#neighbor 192.168.10.1 remote-as 1 R2(config-router)#network 10.0.0.0 mask 255.0.0.0. R1(config)#router bgp 1 R1(config-router)#neighbor 10.2.2.2 remote-as 2 R1(config-router)#neighbor 10.2.2.2 update-source lo0 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 10.1.1.1 remote-as 1 R2(config-router)#neighbor 10.1.1.1 update-source lo0 R2(config-router)#network 10.2.2.0 mask 255.255.255.0.

Refer to the exhibit. Which type of antenna do the radiation patterns present?. Yagi. patch. omnidirectional. dipole.

Which reason could cause an OSPF neighborship to be in the EXSTART/EXCHANGE state?. mismatched OSPF link costs. mismatched OSPF network type. mismatched areas. mismatched MTU size.

When configuring WPA2 Enterprise on a WLAN, which additional security component configuration is required?. PKI server. NTP server. RADIUS server. TACACS server.

A customer has several small branches and wants to deploy a Wi-Fi solution with local management using CAPWAP. Which deployment model meets this requirement?. local mode. autonomous. SD-Access wireless. Mobility Express.

Refer to the exhibit. The WLC administrator sees that the controller to which a roaming client associates has Mobility Role Anchor configured under Clients > Detail. Which type of roaming is supported?. indirect. Layer 3 intercontroller. intracontroller. Layer 2 intercontroller.

Which feature is supported by EIGRP but is not supported by OSPF?. route filtering. unequal-cost load balancing. route summarization. equal-cost load balancing.

What is the correct EBGP path attribute list, ordered from most preferred to least preferred, that the BGP best-path algorithm uses?. local preference, weight, AS path, MED. weight, local preference, AS path, MED. weight, AS path, local preference, MED. local preference, weight, MED, AS path.

A local router shows an EBGP neighbor in the Active state. Which statement is true about the local router?. The local router is attempting to open a TCP session with the neighboring router. The local router is receiving prefixes from the neighboring router and adding them in RIB-IN. The local router has active prefixes in the forwarding table from the neighboring router. The local router has BGP passive mode configured for the neighboring router.

Refer to the exhibit. SwitchC connects HR and Sales to the Core switch. However, business needs require that no traffic from the Finance VLAN traverse this switch. Which command meets this requirement?. SwitchC(config)#vtp pruning vlan 110. SwitchC(config)#vtp pruning. SwitchC(config)#interface port-channel 1 SwitchC(config-if)#switchport trunk allowed vlan add 210,310. SwitchC(config)#interface port-channel 1 SwitchC(config-if)#switchport trunk allowed vlan remove 110.

Refer to the exhibit. An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplishes this task?. R4(config-router)bgp default local-preference 200. R3(config-router)bgp default local-preference 200. R4(config-router)neighbor 10.2.2.2 weight 200. R3(config-router)neighbor 10.1.1.1 weight 200.

Which feature of EIGRP is not supported in OSPF?. load balancing of unequal-cost paths. load balance over four equal-cost paths. uses interface bandwidth to determine best path. per-packet load balancing over multiple paths.

Which NTP Stratum level is a server that is connected directly to an authoritative time source?. Stratum 0. Stratum 1. Stratum 14. Stratum 15.

Refer to the exhibit. An engineer reconfigures the port-channel between SW1 and SW2 from an access port to a trunk and immediately notices this error in SW1's log: *Mar 1 09:47:22.245: %PM-4-ERR_DISABLE: bpduguard error detected on Gi0/0, putting Gi0/0 in err-disable state Which command set resolves this error?. SW1(config-if)#interface Gi0/0 SW1(config-if)#no spanning-tree bpdufilter SW1(config-if)#shut SW1(config-if)#no shut. SW1(config-if)#interface Gi0/0 SW1(config-if)#no spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut. SW1(config-if)#interface Gi0/0 SW1(config-if)#spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut. SW1(config-if)#interface Gi0/1 SW1(config-if)#spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut.

When a wireless client roams between two different wireless controllers, a network connectivity outage is experienced for a period of time. Which configuration issue would cause this problem?. Not all of the controllers in the mobility group are using the same mobility group name. Not all of the controllers within the mobility group are using the same virtual interface IP address. All of the controllers within the mobility group are using the same virtual interface IP address. All of the controllers in the mobility group are using the same mobility group name.

What is the role of the RP in PIM sparse mode?. The RP maintains default aging timeouts for all multicast streams requested by the receivers. The RP acts as a control-plane node only and does not receive or forward multicast packets. The RP is the multicast router that is the root of the PIM-SM shared multicast distribution tree. The RP responds to the PIM join messages with the source of a requested multicast group.

Why is an AP joining a different WLC than the one specified through option 43?. The AP is joining a primed WLC. The APs broadcast traffic is unable to reach the WLC through Layer 2. The AP multicast traffic is unable to reach the WLC through Layer 3. The WLC is running a different software version.

Company policy restricts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three switches. An administrator has noticed that VLAN 10 has propagated to SW3. Which configuration corrects the issue?. SW1(config)#int gi1/1 SW1(config)#switchport trunk allowed vlan 1-9,11-4094. SW2(config)#int gi1/2 SW2(config)#switchport trunk allowed vlan 10. SW2(config)#int gi1/2 SW2(config)#switchport trunk allowed vlan 1-9,11-4094. SW1(config)#int gi1/1 SW1(config)#switchport trunk allowed vlan 10.

Which First Hop Redundancy Protocol should be used to meet a design requirement for more efficient default gateway bandwidth usage across multiple devices?. GLBP. LACP. HSRP. VRRP.

A client device roams between access points located on different floors in an atrium. The access points are joined to the same controller and configured in local mode. The access points are in different AP groups and have different IP addresses, but the client VLAN in the groups is the same. Which type of roam occurs?. inter-controller. inter-subnet. intra-VLAN. intra-controller.

Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller?. Option 43. Option 60. Option 67. Option 150.

Refer to the exhibit. A network engineer is configuring OSPF between router R1 and router R2. The engineer must ensure that a DR/BDR election does not occur on the Gigabit Ethernet interfaces in area 0. Which configuration set accomplishes this goal?. R1(config-if)interface Gi0/0 R1(config-if)ip ospf network point-to-point R2(config-if)interface Gi0/0 R2(config-if)ip ospf network point-to-point. R1(config-if)interface Gi0/0 R1(config-if)ip ospf network broadcast R2(config-if)interface Gi0/0 R2(config-if)ip ospf network broadcast. R1(config-if)interface Gi0/0 R1(config-if)ip ospf database-filter all out R2(config-if)interface Gi0/0 R2(config-if)ip ospf database-filter all out. R1(config-if)interface Gi0/0 R1(config-if)ip ospf priority 1 R2(config-if)interface Gi0/0 R2(config-if)ip ospf priority 1.

Refer to the exhibit. Which type of antenna does the radiation pattern represent?. multidirectional. directional patch. omnidirectional. Yagi.

Wireless users report frequent disconnections from the wireless network. While troubleshooting, a network engineer finds that after the user is disconnected, the connection re-establishes automatically without any input required. The engineer also notices these message logs: AP 'AP2' is down. Reason: Radio channel set. 6:54:04 PM AP 'AP4' is down. Reason: Radio channel set. 6:44:49 PM AP 'AP7' is down. Reason: Radio channel set. 6:34:32 PM Which action reduces the user impact?. enable coverage hole detection. increase the AP heartbeat timeout. enable BandSelect. increase the dynamic channel assignment interval.

Refer to the exhibit. The inside and outside interfaces in the NAT configuration of this device have been correctly identified. What is the effect of this configuration?. NAT64. dynamic NAT. static NAT. PAT.

DRAG DROP - Drag and drop the descriptions from the left onto the routing protocol they describe on the right. Select and Place: summaries can be created anywhere in the IGP topology. uses areas to segment a network. DUAL algorithm. summaries can be created in specific parts of the IGP topology.

What is the purpose of an RP in PIM?. send join messages toward a multicast source SPT. ensure the shortest path from the multicast source to the receiver. receive IGMP joins from multicast receivers. secure the communication channel between the multicast sender and receiver.

Refer to the exhibit. Which command must be applied to R2 for an OSPF neighborship to form?. network 20.1.1.2 255.255.0.0 area 0. network 20.1.1.2 0.0.0.0 area 0. network 20.1.1.2 255.255.255.255 area 0. network 20.1.1.2 0.0.255.255 area 0.

Refer to the exhibit. Which router is the designated router on the segment 192.168.0.0/24?. This segment has no designated router because it is a p2p network type. Router Chicago because it has a lower router ID. Router NewYork because it has a higher router ID. This segment has no designated router because it is a nonbroadcast network type.

Refer to the exhibit. Which two commands are needed to allow for full reachability between AS 1000 and AS 2000? (Choose two.). R2#no network 10.0.0.0 255.255.255.0. R2#network 209.165.201.0 mask 255.255.192.0. R2#network 192.168.0.0 mask 255.255.0.0. R1#no network 10.0.0.0 255.255.255.0. R1#network 192.168.0.0 mask 255.255.0.0.

Refer to the exhibit. An engineer attempts to configure a router on a stick to route packets between Clients, Servers, and Printers; however, initial tests show that this configuration is not working. Which command set resolves this issue?. interface Vlan10 no ip vrf forwarding Clients ! interface Vlan20 no ip vrf forwarding Servers ! interface Vlan30 no ip vrf forwarding Printers. router eigrp 1 network 10.0.0.0 255.255.255.0 network 172.16.0.0 255.255.255.0 network 192.168.1.0 255.255.255.0. interface Vlan10 no ip vrf forwarding Clients ip address 192.168.1.2. 255.255.255.0 ! interface Vlan20 no ip vrf forwarding Servers ip address 172.16.1.2 255.255.255.0 ! interface Vlan30 no ip vrf forwarding Printers ip address 10.1.1.2 255.255.255.0. router eigrp 1 network 10.0.0.0 255.0.0.0 network 172.16.0.0 255.255.0.0 network 192.168.1.0 255.255.0.0.

How does SSO work with HSRP to minimize network disruptions?. It enables HSRP to elect another switch in the group as the active HSRP switch. It ensures fast failover in the case of link failure. It enables data forwarding along known routes following a switchover, while the routing protocol reconverges. It enables HSRP to failover to the standby RP on the same device.

Refer to the exhibit. Which command when applied to the Atlanta router reduces type 3 LSA flooding into the backbone area and summarizes the inter-area routes on the Dallas router?. Atlanta(config-router)#area 0 range 192.168.0.0 255.255.252.0. Atlanta(config-router)#area 1 range 192.168.0.0 255.255.248.0. Atlanta(config-router)#area 0 range 192.168.0.0 255.255.248.0. Atlanta(config-router)#area 1 range 192.168.0.0 255.255.252.0.

An engineer must configure interface GigabitEthernet0/0 for VRRP group 10. When the router has the highest priority in the group, it must assume the master role. Which command set must be added to the initial configuration to accomplish this task? Initial Configuration - interface GigabitEthernet0/0 description To IDF A 38-24-044.40 ip address 172.16.13.2 255.255.255.0. standby 10 ip 172.16.13.254 255.255.255.0 standby 10 preempt. vrrp group 10 ip 172.16.13.254 255.255.255.0 vrrp group 10 priority. standby 10 ip 172.16.13.254 standy 10 priority 120. vrrp 10 ip 172.16.13.254 vrrp 10 preempt.

DRAG DROP - Drag and drop the characteristics from the left onto the routing protocols they describe on the right. Select and Place: maintains alternative loop free backup path if available. Link State Protocol. selects routes using the DUAL algorithm. supports only equal multipath load balancing. Advanced Distance Vector Protocol. quickly computes new path upon link failure.

Refer to the exhibit. Which two commands ensure that DSW1 becomes the root bridge for VLAN 10 and 20? (Choose two.). spanning-tree mst 1 priority 4096. spanning-tree mst 1 root primary. spanning-tree mst vlan 10,20 priority root. spanning-tree mst 1 priority 1. spanning-tree mstp vlan 10,20 root primary.

Refer to the exhibit. R1 is able to ping the R3 fa0/1 interface. Why do the extended pings fail?. The maximum packet size accepted by the command is 1476 bytes. The DF bit has been set. R3 is missing a return route to 10.99.69.0/30. R2 and R3 do not have an OSPF adjacency.

Refer to the exhibit. Which command allows hosts that are connected to FastEthernet0/2 to access the Internet?. ip nat inside source list 10 interface FastEthernet0/2 overload. ip nat inside source list 10 interface FastEthernet0/1 overload. ip nat outside source static 209.165.200.225 10.10.10.0 overload. ip nat outside source list 10 interface FastEthernet0/2 overload.

Refer to the exhibit. What are two effects of this configuration? (Choose two.). If R1 goes down, R2 becomes active but reverts to standby when R1 comes back online. If R2 goes down, R1 becomes active but reverts to standby when R2 comes back online. R1 becomes the active router. R1 becomes the standby router. If R1 goes down, R2 becomes active and remains the active device when R1 comes back online.

Refer to the exhibit. An engineer must ensure that all traffic entering AS 200 from AS 100 chooses Link 2 as an entry point. Assume that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers. Which configuration accomplishes this task?. R3(config)#route-map PREPEND permit 10 R3(config-route-map)#set as-path prepend 200 200 200 R3(config)#router bgp 200 R3#(config-router)#neighbor 10.1.1.1 route-map PREPEND out. R4(config)#route-map PREPEND permit 10 R4(config-route-map)#set as-path prepend 100 100 100 R4(config)#router bgp 200 R4(config-router)#neighbor 10.2.2.2 route-map PREPEND in. R4(config)#route-map PREPEND permit 10 R4(config-route-map)#set as-path prepend 200 200 200 R4(config)#router bgp 200 R4(config-router)#neighbor 10.2.2.2 route-map PREPEND out. R3(config)#route-map PREPEND permit 10 R3(config-route-map)#set as-path prepend 100 100 100 R3(config)#router bgp 200 R3(config-router)#neighbor 10.1.1.1 route-map PREPEND in.

Which DHCP option provides the CAPWAP APs with the address of the wireless controller(s)?. 43. 66. 69. 150.

Refer to the exhibit. Which two commands ensure that DSW1 becomes root bridge for VLAN 10? (Choose two.). DSW1(config)#spanning-tree vlan 10 priority 4096. DSW1(config)#spanning-tree vlan 10 priority root. DSW2(config)#spanning-tree vlan 10 priority 61440. DSW1(config)#spanning-tree vlan 10 port-priority 0. DSW2(config)#spanning-tree vlan 20 priority 0.

What mechanism does PIM use to forward multicast traffic?. PIM sparse mode uses a pull model to deliver multicast traffic. PIM dense mode uses a pull model to deliver multicast traffic. PIM sparse mode uses receivers to register with the RP. PIM sparse mode uses a flood and prune model to deliver multicast traffic.

Refer to the exhibit. The traceroute fails from R1 to R3. What is the cause of the failure?. An ACL applied inbound on loopback0 of R2 is dropping the traffic. The loopback on R3 is in a shutdown state. Redistribution of connected routes into OSPF is not configured. An ACL applied inbound on fa0/1 of R3 is dropping the traffic.

Refer to the exhibit. An engineer must establish eBGP peering between router R3 and router R4. Both routers should use their loopback interfaces as the BGP router ID. Which configuration set accomplishes this task?. R3(config)#router bgp 200 R3(config-router)#neighbor 10.4.4.4 remote-as 100 R3(config-router)# neighbor 10.4.4.4 update-source Loopback0 R4(config)#router bgp 100 R4(config-router)#neighbor 10.3.3.3 remote-as 200 R4(config-router)#network 10.3.3.3 update-source Loopback0. R3(config)#router bgp 200 R3(config-router)#neighbor 10.24.24.4 remote-as 100 R3(config-router)#neighbor 10.24.24.4 update-source Loopback0 R4(config)#router bgp 100 R4(config-router)#neighbor 10.24.24.3 remote-as 200 R4(config-router)#neighbor 10.24.24.3 update-source Loopback0. R3(config)#router bgp 200 R3(config-router)#neighbor 10.4.4.4 remote-as 100 R3(config-router)#bgp router-id 10.3.3.3 R4(config)#router bgp 100 R4(config-router)#neighbor 10.3.3.3 remote-as 200 R4(config-router)#bgp router-id 10.4.4.4. R3(config)#router bgp 200 R3(config-router)#neighbor 10.24.24.4 remote-as 100 R3(config-router)#bgp router-id 10.3.3.3 R4(config)#router bgp 100 R4(config-router)#neighbor 10.24.24.3 remote-as 200 R4(config-router)#bgp router-id 10.4.4.4.

An engineer is configuring GigabitEthernet1/0/0 for VRRP. When the router has the highest priority in group 5, it must assume the master role. Which command set should the engineer add to the configuration to accomplish this task? interface GigabitEthernet1/0/0 description To IDF A 38-70-774-10 ip address 172.16.13.2 255.255.255.0. standby 5 ip 172.16.13.254 standby 5 priority 100 standby 5 track 1 decrement 10. standby 5 ip 172.16.13.254 standby 5 priority 100 standby 5 preempt. vrrp 5 ip 172.16.13.254 vrrp 5 priority 100. vrrp 5 ip 172.16.13.254 255.255.255.0 vrrp 5 track 1 decrement 10 vrrp 5 preempt.

Which two security features are available when implementing NTP? (Choose two.). encrypted authentication mechanism. symmetric server passwords. clock offset authentication. broadcast association mode. access list-based restriction scheme.

How does the EIGRP metric differ from the OSPF metric?. The EIGRP metric is calculated based on bandwidth only. The OSPF metric is calculated on delay only. The EIGRP metric is calculated based on delay only. The OSPF metric is calculated on bandwidth and delay. The EIGRP metric is calculated based on bandwidth and delay. The OSPF metric is calculated on bandwidth only. The EIGRP metric is calculated based on hop count and bandwidth. The OSPF metric is calculated on bandwidth and delay.

An engineer is installing a new pair of routers in a redundant configuration. Which protocol ensures that traffic is not disrupted in the event of a hardware failure?. HSRPv1. GLBP. VRRP. HSRPv2.

Refer to the exhibit. After an engineer configures an EtherChannel between switch Refer to the exhibit. After an engineer configures an EtherChannel between switch SW1 and switch SW2, this error message is logged on switch SW2: SW2# 09:45:32: %PM-4-ERR_DISABLE: channel-misconfig error detected on Gi0/0, putting Gi0/0 in err-disable state 09:45:32: %PM-4-ERR_DISABLE: channel-misconfig error detected on Gi0/1, putting Gi0/1 in err-disable state Based on the output from switch SW1 and the log message received on switch SW2, what action should the engineer take to resolve this issue?. Configure the same protocol on the EtherChannel on switch SW1 and SW2. Define the correct port members on the EtherChannel on switch SW1. Correct the configuration error on Interface Gi0/0 on switch SW1. Correct the configuration error on Interface Gi0/1 on switch SW1.

Refer to the exhibit. Communication between London and New York is down. Which command set must be applied to resolve this issue?. NewYork(config)#int f0/1 NewYork(config)#switchport nonegotiate NewYork(config)#end NewYork#. NewYork(config)#int f0/1 NewYork(config)#switchport mode trunk NewYork(config)#end NewYork#. NewYork(config)#int f0/1 NewYork(config)#switchport trunk encap dot1q NewYork(config)#end NewYork#. NewYork(config)#int f0/1 NewYork(config)#switchport mode dynamic desirable NewYork(config)#end NewYork#.

Which encryption hashing algorithm does NTP use for authentication?. SSL. MD5. AES128. AES256.

Refer to the exhibit. The trunk between Gig1/0/1 of switch SW2 and Gig1/0/1 of switch SW1 is not operational. Which action resolves this issue?. Configure both interfaces to nonegotiate and ensure that the switches are in different VTP domains. Configure both interfaces in dynamic auto DTP mode and ensure that the switches are in the same VTP domain. Configure both interfaces in dynamic auto DTP mode and ensure that the switches are in different VTP domains. Configure both interfaces in dynamic desirable DTP mode and ensure that the switches are in the same VTP domain.

Refer to the exhibit. Which two facts does the device output confirm? (Choose two.). The device's HSRP group uses the virtual IP address 10.0.3.242. The device is configured with the default HSRP priority. The device sends unicast messages to its peers. The standby device is configured with the default HSRP priority. The device is using the default HSRP hello timer.

Refer to the exhibit. Which type of antenna is shown on the radiation patterns?. patch. dipole. omnidirectional. Yagi.

Refer to the exhibit. All switches are configured with the default port priority value. Which two commands ensure that traffic from PC1 is forwarded over the Gi1/3 trunk port between DSW1 and DSW2? (Choose two.). DSW2(config)#interface gi1/3. DSW1(config-if)#spanning-tree port-priority 0. DSW2(config-if)#spanning-tree port-priority 128. DSW1(config)#interface gi1/3. DSW2(config-if)#spanning-tree port-priority 16.

A company has an existing Cisco 5520 HA cluster using SSO. An engineer deploys a new single Cisco Catalyst 9800 WLC to test new features. The engineer successfully configures a mobility tunnel between the 5520 cluster and 9800 WLC. Clients connected to the corporate WLAN roam seamlessly between access points on the 5520 and 9800 WLC. After a failure on the primary 5520 WLC, all WLAN services remain functional; however, clients cannot roam between the 5520 and 9800 controllers without dropping their connection. Which feature must be configured to remedy the issue?. mobility MAC on the 5520 cluster. mobility MAC on the 9800 WLC. new mobility on the 5520 cluster. new mobility on the 9800 WLC.

Refer to the exhibit. Which configuration change ensures that R1 is the active gateway whenever it is in a functional state for the 172.30.110.0/24 network?. R2 standby 1 priority 90 standby 1 preempt. R2 standby 1 priority 100 standby 1 preempt. R1 standby 1 preempt R2 standby 1 priority 90. R1 standby 1 preempt R2 standby 1 priority 100.

A customer has completed the installation of a Wi-Fi 6 greenfield deployment at their new campus. They want to leverage Wi-Fi 6 enhanced speeds on the trusted employee WLAN. To configure the employee WLAN, which two Layer 2 security policies should be used? (Choose two.). WPA2 (AES). 802.1X. OPEN. WEP. WPA (AES).

Which two actions, when applied in the LAN network segment, will facilitate Layer 3 CAPWAP discovery for lightweight AP? (Choose two.). Utilize DHCP option 43. Utilize DHCP option 17. Configure an ip helper-address on the router interface. Enable port security on the switch port. Configure WLC IP address on LAN switch.

Refer to the exhibit. Which action resolves the EtherChannel issue between SW2 and SW3?. Configure switchport mode trunk on SW2. Configure switchport nonegotiate on SW3. Configure channel-group 1 mode desirable on both interfaces. Configure channel-group 1 mode active on both interfaces.

Refer to the exhibit. A network engineer configures OSPF and reviews the router configuration. Which interface or interfaces are able to establish OSPF adjacency?. GigabitEthernet0/0 and GigabitEthernet0/1. only GigabitEthernet0/1. only GigabitEthernet0/0. GigabitEthernet0/1 and GigabitEthernet0/1.40.

Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right. Select and Place: DHCP request. DHCP offer. DHCP discover. DHCP ack.

Which two methods are used by an AP that is trying to discover a wireless LAN controller? (Choose two.). Cisco Discovery Protocol neighbor. querying other APs. DHCP Option 43. broadcasting on the local subnet. DNS lookup CISCO-DNA-PRIMARY.localdomain.

Which access point mode allows a supported AP to function like a WLAN client would, associating and identifying client connectivity issues?. client mode. SE-connect mode. sensor mode. sniffer mode.

Based on the configuration in this WLAN security setting, which method can a client use to authenticate to the network?. text string. username and password. RADIUS token. certificate.

A client device fails to see the enterprise SSID, but other client devices are connected to it. What is the cause of this issue?. The client has incorrect credentials stored for the configured broadcast SSID. The hidden SSID was not manually configured on the client. The broadcast SSID was not manually configured on the client. The client has incorrect credentials stored for the configured hidden SSID.

Which two descriptions of FlexConnect mode for Cisco APs are true? (Choose two.). APs that operate in FlexConnect mode cannot detect rogue APs. When connected to the controller, FlexConnect APs can tunnel traffic back to the controller. FlexConnect mode is used when the APs are set up in a mesh environment and used to bridge between each other. FlexConnect mode is a feature that is designed to allow specified CAPWAP-enabled APs to exclude themselves from managing data traffic between clients and infrastructure. FlexConnect mode is a wireless solution for branch office and remote office deployments.

Refer to the exhibit. Rapid PVST+ is enabled on all switches. Which command set must be configured on Switch1 to achieve the following results on port fa0/1? ✑ When a device is connected, the port transitions immediately to a forwarding state. ✑ The interface should not send or receive BPDUs. ✑ If a BPDU is received, it continues operating normally. Switch1(config)# spanning-tree portfast bpdufilter default Switch1(config)# interface f0/1 Switch1(config-if)# spanning-tree portfast. Switch1(config)# spanning-tree portfast bpduguard default Switch 1 (config)# interface f0/1 Switch1 (config-if)# spanning-tree portfast. Switch1(config)# interface f0/1 Switch1(config-if)# spanning-tree portfast. Switch1(config)# interface f0/1 Switch1(config-if)# spanning-tree portfast Switch1 (config-if)# spanning-tree bpduguard enable.

Refer to the exhibit. Which configuration change will force BR2 to reach 209.165.201.0/27 via BR1?. Set the MED to 1 on PE2 toward BR2 outbound. Set the origin to igp on BR2 toward PE2 inbound. Set the weight attribute to 65,535 on BR1 toward PE1. Set the local preference to 150 on PE1 toward BR1 outbound.

DRAG DROP - Drag and drop the characteristics from the left onto the protocols they apply to on the right. Select and Place: uses djkstra shortest path first algorithm. uses difused update algorithm. uses bandwidth, delay reliability and load for routing metric. uses an election process.

Refer to the exhibit. Which set of commands on router R1 allow deterministic translation of private hosts PC1, PC2, and PC3 to addresses in the public space?. RouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#access-list 1 10.10.10.0 0.0.0.255 RouterR1(config)#ip nat inside source list 1interface f0/1 overload. RouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#access-list 1 10.10.10.0 0.0.0.255 RouterR1(config)#ip nat pool POOL 155.1.1.101 155.1.1.103 netmask 255.255.255.0 RouterR1(config)#ip nat inside source list 1 pool POOL. RouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101 RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102 RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103. RouterR1(config)#int f0/0 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101 RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102 RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103.

Refer to the exhibit. Communication between London and New York is down. Which command set must be applied to the NewYork switch to resolve the issue?. NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode negotiate NewYork(config-if)#end NewYork#. NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode on NewYork(config-if)#end NewYork#. NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode passive NewYork(config-if)#end NewYork#. NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode auto NewYork(config-if)#end NewYork#.

Refer to the exhibit. An engineer is configuring an EtherChannel between Switch1 and Switch2 and notices the console message on Switch2. Based on the output, which action resolves this issue?. Configure more member ports on Switch1. Configure less member ports on Switch2. Configure the same port channel interface number on both switches. Configure the same EtherChannel protocol on both switches.

Refer to the exhibit. A network engineer configures NAT on R1 and enters the show command to verify the configuration. What does the output confirm?. The first packet triggered NAT to add an entry to the NAT table. R1 is configured with NAT overload parameters. A Telnet session from 160.1.1.1 to 10.1.1.10 has been initiated. R1 is configured with PAT overload parameters.

Refer to the exhibit. What is the cause of the log messages?. OSPF area change. MTU mismatch. IP address mismatch. hello packet mismatch.

A network engineer configures BGP between R1 and R2. Both routers use BGP peer group CORP and are set up to use MD5 authentication. This message is logged to the console of router R1: ג€May 5 39:85:55.469: %TCP-6-BADAUTHג€ Invalid MD5 digest from 10.10.10.1 (29832) to 10.120.10.1 (179) tebleid -0 Which two configurations allow a peering session to form between R1 and R2? (Choose two.). R1(config-router)#neighbor 10.10.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco. R2(config-router)#neighbor 10.120.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco. R2(config-router)#neighbor 10.10.10.1 peer-group CORP R2(config-router)#neighbor PEER password Cisco. R1(config-router)#neighbor 10.120.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco. R2(config-router)#neighbor 10.10.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco.

Refer to the exhibit. An engineer implemented several configuration changes and receives the logging message on Switch1. Which action should the engineer take to resolve this issue?. Change Switch2 to switch port mode dynamic auto. Change the VTP domain to match on both switches. Change Switch1 to switch port mode dynamic auto. Change Switch1 to switch port mode dynamic desirable.

Drag and drop the characteristics of PIM Dense Mode from the left to the right. Not all options are used. Select and Place: builds source based distribution trees. uses push model to distribute multicast traffic. uses pull model to distribute multicast traffic. uses prune mechanisms to stop unwanted multicast traffic. builds shared distribution trees. requires a rendezvous point to deliver multicast traffic.

DRAG DROP - Drag and drop the wireless elements on the left to their definitions on the right. Select and Place: beamwidth. polarization. radiation patterns. gain.

How are the different versions of IGMP compatible?. IGMPv2 is compatible only with IGMPv2. IGMPv3 is compatible only with IGMPv3. IGMPv2 is compatible only with IGMPv1. IGMPv3 is compatible only with IGMPv1.

Which measurement is used from a post wireless survey to depict the cell edge of the access points?. SNR. Noise. RSSI. CCI.

If a client's radio device receives a signal strength of -67 dBm and the noise floor is -85 dBm, what is the SNR value?. 15 dB. 16 dB. 18 dB. 20 dB.

Which AP mode allows an engineer to scan configured channels for rogue access points?. monitor. bridge. local. sniffer.

Refer to the exhibit. While troubleshooting a routing issue, an engineer issues a ping from S1 to S2. Which two actions result from the initial value of the TTL? (Choose two.). The packet reaches R2, and the TTL expires. R1 replies with a TTL exceeded message. The packet reaches R3, and the TTL expires. R2 replies with a TTL exceeded message. R3 replies with a TTL exceeded message. The packet reaches R1, and the TTL expires.

Which two operational modes enable an AP to scan one or more wireless channels for rogue access points and at the same time provide wireless services to clients? (Choose two.). monitor. rogue detector. FlexConnect. sniffer. local.

Refer to the exhibit. An engineer attempts to configure a trunk between switch SW1 and switch SW2 using DTP, but the trunk does not form. Which command should the engineer apply to switch SW2 to resolve this issue?. switchport nonegotiate. no switchport. switchport mode dynamic desirable. switchport mode access.

An engineer is troubleshooting the AP join process using DNS. Which FQDN must be resolvable on the network for the access points to successfully register to the WLC?. wlchostname.domain.com. cisco-capwap-controller.domain.com. ap-manager.domain.com. primary-wlc.domain.com.

Which new enhancement was implemented in Wi-Fi 6?. Uplink and Downlink Orthogonal Frequency Division Multiple Access. Channel bonding. Wi-Fi Protected Access 3. 4096 Quadrature Amplitude Modulation Mode.

Which device makes the decision for a wireless client to roam?. wireless client. wireless LAN controller. access point. WCS location server.

An engineer configures GigabitEthernet 0/1 for VRRP group 115. The router must assume the primary role when it has the highest priority in the group. Which command set is required to complete this task? interface GigabitEthernet0/1 ip address 10.10.10.2 255.255.255.0 vrrp 115 ip 10.10.10.1 vrrp 115 authentication 407441579. Router(config if)# vrrp 115 track 1 decrement 100 Router(config-if)# vrrp 115 preempt. Router(config-if)# vrrp 115 priority 100. Router(config-if)# vrrp 115 track 1 decrement 10 Router(config-if)# vrrp 115 preempt. Router(config-if)# standby 115 priority 100 Router(config-if)# standby 115 preempt.

How is MSDP used to interconnect multiple PIM-SM domains?. MSDP allows a rendezvous point to dynamically discover active sources outside of its domain. MSDP SA request messages are used to request a list of active sources for a specific group. MSDP depends on BGP or multiprotocol BGP for interdomain operation. MSDP messages are used to advertise active sources in a domain.

The EtherChannel between SW2 and SW3 is not operational. Which action resolves this issue?. Configure the channel-group mode on SW3 Gi0/0 and Gi0/1 to active. Configure the mode on SW2 Gi0/0 to trunk. Configure the channel-group mode on SW2 Gi0/0 and Gi0/1 to on. Configure the mode on SW2 Gi0/1 to access.

Refer to the exhibit. Which action completes the configuration to achieve a dynamic continuous mapped NAT for all users?. Reconfigure the pool to use the 192.168.1.0 address range. Configure a match-host type NAT pool. Increase the NAT pool size to support 254 usable addresses. Configure a one-to-one type NAT pool.

Which AP mode allows a supported AP to function like a WLAN client would, associating and identifying client connectivity issues?. client mode. SE-connect mode. sensor mode. sniffer mode.

An engineer is concerned with the deployment of a new application that is sensitive to inter-packet delay variance. Which command configures the router to be the destination of jitter measurements?. Router(config)# ip sla responder udp-connect 172.29.139.134 5000. Router(config)# ip sla responder tcp-connect 172.29.139.134 5000. Router(config)# ip sla responder udp-echo 172.29.139.134 5000. Router(config)# ip sla responder tcp-echo 172.29.139.134 5000.

Which IP SLA operation requires the IP SLA responder to be configured on the remote end?. UDP jitter. ICMP jitter. TCP connect. ICMP echo.

Refer to the exhibit. What does the error message relay to the administrator who is trying to configure a Cisco IOS device?. The device received a valid NETCONF request and serviced it without error. The NETCONF running datastore is currently locked. A NETCONF request was made for a data model that does not exist. A NETCONF message with valid content based on the YANG data models was made, but the request failed.

Which three methods does Cisco DNA Center use to discover devices? (Choose three.). CDP. SNMP. LLDP. ping. NETCONF. a specified range of IP addresses.

Which statement about TLS is accurate when using RESTCONF to write configurations on network devices?. It is used for HTTP and HTTPS requests. It requires certificates for authentication. It is provided using NGINX acting as a proxy web server. It is not supported on Cisco devices.

What do Cisco DNA southbound APIs provide?. interface between the controller and the consumer. RESTful API interface for orchestrator communication. interface between the controller and the network devices. NETCONF API interface for orchestrator communication.

Which statement about an RSPAN session configuration is true?. Only one session can be configured at a time. A special VLAN type must be used as the RSPAN destination. A filter must be configured for RSPAN sessions. Only incoming traffic can be monitored.

Which feature must be configured to allow packet capture over Layer 3 infrastructure?. RSPAN. ERSPAN. VSPAN. IPSPAN.

Refer to the exhibit. What is the result when a technician adds the monitor session 1 destination remote vlan 223 command?. The RSPAN VLAN is replaced by VLAN 223. RSPAN traffic is sent to VLANs 222 and 223. An error is flagged for configuring two destinations. RSPAN traffic is split between VLANs 222 and 223.

Refer to the exhibit. An engineer configures monitoring on SW1 and enters the show command to verify operation. What does the output confirm?. RSPAN session 1 is incompletely configured for monitoring. RSPAN session 1 monitors activity on VLAN 50 of a remote switch. SPAN session 2 monitors all traffic entering and exiting port FastEthernet 0/15. SPAN session 2 only monitors egress traffic exiting port FastEthernet 0/14.

A network is being migrated from IPv4 to IPv6 using a dual-stack approach. Network management is already 100% IPv6 enabled. In a dual-stack network with two dual-stack NetFlow collectors, how many flow exporters are needed per network device in the flexible NetFlow configuration?. 1. 2. 4. 8.

A network engineer is configuring Flexible NetFlow and enters these commands. sampler NetFlow1 mode random one-out-of 100 interface fastethernet 1/0 flow-sampler NetFlow1 What are two results of implementing this feature instead of traditional NetFlow? (Choose two.). Only the flows of top 100 talkers are exported. CPU and memory utilization are reduced. The number of packets to be analyzed are reduced. The data export flow is more secure. The accuracy of the data to be analyzed is improved.

Refer to the exhibit. An engineer must add the SNMP interface table to the NetFlow protocol flow records. Where should the SNMP table option be added?. under the interface. under the flow record. under the flow monitor. under the flow exporter.

A network administrator is implementing a routing configuration change and enables routing debugs to track routing behavior during the change. The logging output on the terminal is interrupting the command typing process. Which two actions can the network administrator take to minimize the possibility of typing commands incorrectly? (Choose two.). Configure the logging synchronous global configuration command. Configure the logging synchronous command under the vty. Increase the number of lines on the screen using the terminal length command. Configure the logging delimiter feature. Press the TAB key to reprint the command in a new line.

When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?. logging host 10.2.3.4 vrf mgmt transport tcp port 514. logging host 10.2.3.4 vrf mgmt transport udp port 514. logging host 10.2.3.4 vrf mgmt transport tcp port 6514. logging host 10.2.3.4 vrf mgmt transport udp port 6514.

R1# *Feb 14 37:09:53.129: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up What is the logging severity level?. notification. emergency. critical. alert.

An engineer reviews a router's logs and discovers the following entry. What is the event's logging severity level? Router# *Jan 01 38:24:04.401: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up. error. warning. informational. notification.

An engineer must configure a SPAN session. What is the effect of the configuration?. Traffic received on VLANs 10, 11, and 12 is copied and sent to interface g0/1. Traffic sent on VLANs 10 and 12 only is copied and sent to interface g0/1. Traffic sent on VLANs 10, 11, and 12 is copied and sent to interface g0/1. Traffic received on VLANs 10 and 12 only is copied and sent to interface g0/1.

Refer to the exhibit. These commands have been added to the configuration of a switch. Which command flags an error if it is added to this configuration?. monitor session 1 source interface port-channel 6. monitor session 1 source vlan 10. monitor session 1 source interface FastEthemet0/1 rx. monitor session 1 source interface port-channel 7, port-channel 8.

Which method does Cisco DNA Center use to allow management of non-Cisco devices through southbound protocols?. It creates device packs through the use of an SDK. It uses an API call to interrogate the devices and register the returned data. It obtains MIBs from each vendor that details the APIs available. It imports available APIs for the non-Cisco device in a CSV format.

Refer to the exhibit. Cisco DNA Center has obtained the username of the client and the multiple devices that the client is using on the network. How is Cisco DNA Center getting these context details?. Those details are provided to Cisco DNA Center by the Identity Services Engine. The administrator had to assign the username to the IP address manually in the user database tool on Cisco DNA Center. Cisco DNA Center pulled those details directly from the edge node where the user connected. User entered those details in the Assurance app available on iOS and Android devices.

Which command set configures RSPAN to capture outgoing traffic from VLAN 3 on interface GigabitEthernet 0/3 while ignoring other VLAN traffic on the same interface?. monitor session 2 source interface gigabitethernet0/3 rx monitor session 2 filter vlan 3. monitor session 2 source interface gigabitethernet0/3 rx monitor session 2 filter vlan 1 - 2, 4 - 4094. monitor session 2 source interface gigabitethernet0/3 tx monitor session 2 filter vlan 3. monitor session 2 source interface gigabitethernet0/3 tx monitor session 2 filter vlan 1- 2, 4 - 4094.

Refer to the exhibit. What is required to configure a second export destination for IP address 192.168.10.1?. Specify a different UDP port. Specify a different TCP port. Configure a version 5 flow-export to the same destination. Specify a different flow ID. Specify a VRF.

Refer to the exhibit. After implementing the configuration, 172.20.20.2 stops replying to ICMP echos, but the default route fails to be removed. What is the reason for this behavior?. The threshold value is wrong. The source-interface is configured incorrectly. The destination must be 172.30.30.2 for icmp-echo. The default route is missing the track feature.

Which component of the Cisco Cyber Threat Defense solution provides user and flow context analysis?. Cisco Firepower and FireSIGHT. Cisco Stealthwatch system. Advanced Malware Protection. Cisco Web Security Appliance.

Which Cisco DNA Center application is responsible for group-based access control permissions?. Provision. Design. Assurance. Policy.

Which privilege level is assigned to VTY users?. 1. 7. 13. 15.

Which NGFW mode blocks flows crossing the firewall?. tap. inline. passive. inline tap.

How does Cisco TrustSec enable more flexible access controls for dynamic networking environments and data centers?. uses flexible NetFlow. assigns a VLAN to the endpoint. classifies traffic based on advanced application recognition. classifies traffic based on the contextual identity of the endpoint rather than its IP address.

The login method is configured on the VTY lines of a router with these parameters: ג€¢ The first method for authentication is TACACS ג€¢ If TACACS is unavailable, login is allowed without any provided credentials Which configuration accomplishes this task?. R1#sh run | include aaa aaa new-model aaa authentication login VTY group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748 R1#sh run | include username R1#. R1#sh run | include aaa aaa new-model aaa authentication login telnet group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 R1#sh run | include username R1#. R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748. R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ aaa session-id common R1#sh run | section vty line vty 0 4 transport input none.

Which feature does Cisco TrustSec use to provide scalable, secure communication throughout a network?. security group tag ACL assigned to each port on a switch. security group tag number assigned to each user on a switch. security group tag number assigned to each port on a network. security group tag ACL assigned to each router on a network.

Which technology provides a secure communication channel for all traffic at Layer 2 of the OSI model?. SSL. Cisco TrustSec. MACsec. IPsec.

An engineer is configuring local web authentication on a WLAN. The engineer chooses the Authentication radio button under the Layer 3 Security options for Web Policy. Which device presents the web authentication for the WLAN?. ISE server. RADIUS server. anchor WLC. local WLC.

Which method does the enable secret password option use to encrypt device passwords?. MD5. PAP. CHAP. AES.

On which protocol or technology is the fabric data plane based in Cisco SD-Access fabric?. VXLAN. LISP. Cisco TrustSec. IS-IS.

What is the difference between the enable password and the enable secret password when service password encryption is enabled on an IOS device?. The enable secret password is protected via stronger cryptography mechanisms. The enable password cannot be decrypted. The enable password is encrypted with a stronger encryption method. There is no difference and both passwords are encrypted identically.

Which access control list allows only TCP traffic with a destination port range of 22-443, excluding port 80?. deny tcp any any eq 80 permit tcp any any gt 21 lt 444. permit tcp any any range 22 443 deny tcp any any eq 80. permit tcp any any ne 80. deny tcp any any ne 80 permit tcp any any range 22 443. deny tcp any any eq 80 permit tcp any any range 22 443.

A network administrator applies the following configuration to an IOS device: aaa new-model aaa authentication login default local group tacacs+ What is the process of password checks when a login attempt is made to the device?. A TACACS+ server is checked first. If that check fails, a local database is checked. A TACACS+ server is checked first. If that check fails, a RADIUS server is checked. If that check fails, a local database is checked. A local database is checked first. If that check fails, a TACACS+ server is checked. If that check fails, a RADIUS server is checked. A local database is checked first. If that check fails, a TACACS+ server is checked.

Refer to the exhibit. Assuming the WLC's interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?. the controller management interface. the controller virtual interface. the interface specified on the WLAN configuration. any interface configured on the WLC.

Which component of the Cisco Cyber Threat Defense solution provides user and flow context analysis?. Cisco Firepower and FireSIGHT. Cisco Stealthwatch system. Advanced Malware Protection. Cisco Web Security Appliance.

An engineer must protect their company against ransomware attacks. Which solution allows the engineer to block the execution stage and prevent file encryption?. Use Cisco Firepower and block traffic to TOR networks. Use Cisco AMP deployment with the Malicious Activity Protection engine enabled. Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation. Use Cisco AMP deployment with the Exploit Prevention engine enabled.

An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times. Which command set accomplishes this task?. R3(config)#time-range WEEKEND R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59 R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out. R1(config)#time-range WEEKEND R1(config-time-range)#periodic weekend 00:00 to 23:59 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in. R3(config)#time-range WEEKEND R3(config-time-range)#periodic weekend 00:00 to 23:59 R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out. R1(config)#time-range WEEKEND R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in.

Refer to the exhibit. PC-1 must access the web server on port 8080. To allow this traffic, which statement must be added to an access control list that is applied on SW2 port G0/0 in the inbound direction?. permit tcp host 172.16.0.2 host 192.168.0.5 eq 8080. permit tcp host 192.168.0.5 host 172.16.0.2 eq 8080. permit tcp host 192.168.0.5 eq 8080 host 172.16.0.2. permit tcp host 192.168.0.5 lt 8080 host 172.16.0.2.

What is the result of applying this access control list? ip access-list extended STATEFUL 10 permit tcp any any established 20 deny ip any any. TCP traffic with the URG bit set is allowed. TCP traffic with the SYN bit set is allowed. TCP traffic with the ACK bit set is allowed. TCP traffic with the DF bit set is allowed.

Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address 10.10.10.1?. ip access-list extended 200 deny tcp host 10.10.10.1 eq 80 any permit ip any any. ip access-list extended 10 deny tcp host 10.10.10.1 any eq 80 permit ip any any. ip access-list extended NO_HTTP deny tcp host 10.10.10.1 any eq 80. ip access-list extended 100 deny tcp host 10.10.10.1 any eq 80 permit ip any any.

Refer to the exhibit. An engineer must create a configuration that executes the show run command and then terminates the session when user CCNP logs in. Which configuration change is required?. Add the access-class keyword to the username command. Add the autocommand keyword to the aaa authentication command. Add the access-class keyword to the aaa authentication command. Add the autocommand keyword to the username command.

Refer to the exhibit. Security policy requires all idle exec sessions to be terminated in 600 seconds. Which configuration achieves this goal?. line vty 0 15 absolute-timeout 600. line vty 0 15 no exec-timeout. line vty 0 15 exec-timeout 10 0. line vty 0 4 exec-timeout 600.

DRAG DROP - Drag and drop the threat defense solutions from the left onto their descriptions on the right. Select and Place: Umbrella. AMP4E. FTD. Stealthwatch. ESA.

Refer to the exhibit. What is the effect of this configuration?. The device will allow users at 192.168.0.202 to connect to vty lines 0 through 4 using the password ciscotestkey. The device will authenticate all users connecting to vty lines 0 through 4 against TACACS+. The device will allow only users at 192.168.0.202 to connect to vty lines 0 through 4. When users attempt to connect to vty lines 0 through 4, the device will authenticate them against TACACS+ if local authentication fails.

Which deployment option of Cisco NGFW provides scalability?. inline tap. high availability. clustering. tap.

DRAG DROP - Drag and drop the REST API authentication methods from the left onto their descriptions on the right. Select and Place: HTTP basic authentication. OAuth. secure vault.

In a Cisco SD-Access solution, what is the role of the Identity Services Engine?. It is leveraged for dynamic endpoint to group mapping and policy definition. It provides GUI management and abstraction via apps that share context. It is used to analyze endpoint to app flows and monitor fabric status. It manages the LISP EID database.

DRAG DROP - Drag and drop the solutions that compromise Cisco Cyber Threat Defense from the left onto the objectives they accomplish on the right. Select and Place: StealthWatch. Identity Services Engine. Web Security Appliance.

DRAG DROP - An engineer creates the configuration below. Drag and drop the authentication methods from the left into the order of priority on the right. Not all options are used. R1#sh run | i aaa - aaa new-model aaa authentication login default group ACE group AAA_RADIUS local-case aaa session-id common R1# Select and Place: tacacs servers of group ACE. local configured username in non case-sensitive format. local configured username in case-sensitive format. AAA servers of ACE group. AAA servers of AAA RADIUS group. if no method works, then deny login.

What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?. real-time threat management to stop DDoS attacks to the core and access networks. real-time awareness of users, devices, and traffic on the network. malware control. dynamic threat control for web traffic.

An engineer must configure an ACL that permits packets which include an ACK in the TCP header. Which entry must be included in the ACL?. access-list 110 permit tcp any any eq 21 tcp-ack. access-list 10 permit tcp any any eq 21 established. access-list 110 permit tcp any any eq 21 established. access-list 10 permit ip any any eq 21 tcp-ack.

A client with IP address 209.165.201.25 must access a web server on port 80 at 209.165.200.225. To allow this traffic, an engineer must add a statement to an access control list that is applied in the inbound direction on the port connecting to the web server. Which statement allows this traffic?. permit tcp host 209.165.200.225 lt 80 host 209.165.201.25. permit tcp host 209.165.201.25 host 209.165.200.225 eq 80. permit tcp host 209.165.200.225 eq 80 host 209.165.201.25. permit tcp host 209.165.200.225 host 209.165.201.25 eq 80.

Which standard access control entry permits traffic from odd-numbered hosts in the 10.0.0.0/24 subnet?. permit 10.0.0.0 0.0.0.1. permit 10.0.0.1 0.0.0.254. permit 10.0.0.1 0.0.0.0. permit 10.0.0.0 255.255.255.254.

Refer to the exhibit. An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthernet 0/1. Which configuration command set will allow this traffic without disrupting existing traffic flows?. config t ip access-list extended EGRESS permit ip 10.1.10.0 255.255.255.0 10.1.2.0 255.255.255.0. config t ip access-list extended EGRESS2 permit ip 10.1.10.0 0.0.0.255 10.1.2.0 0.0.0.255 permit ip 10.1.100.0 0.0.0.255 10.1.2.0 0.0.0.255 deny ip any any ! interface g0/1 no ip access-group EGRESS out ip access-group EGRESS2 out. config t ip access-list extended EGRESS permit ip 10.1.10.0 0.0.0.255 10.1.2.0 0.0.0.255. config t ip access-list extended EGRESS 5 permit ip 10.1.10.0 0.0.0.255 10.1.2.0 0.0.0.255.

Which configuration restricts the amount of SSH traffic that a router accepts to 100 kbps?. class-map match-all CoPP_SSH match access-group name CoPP_SSH ! Policy-map CoPP_SSH class CoPP_SSH police cir 100000 exceed-action drop ! ! ! Interface GigabitEthernet0/1 ip address 209.165.200.225 255.255.255.0 ip access-group CoPP_SSH out duplex auto speed auto media-type rj45 service-policy input CoPP_SSH ! ip access-list extended CoPP_SSH permit tcp any any eq 22 !. class-map match-all CoPP_SSH match access-group name CoPP_SSH ! Policy-map CoPP_SSH class CoPP_SSH police cir CoPP_SSH exceed-action drop ! ! ! Interface GigabitEthernet0/1 ip address 209.165.200.225 255.255.255.0 ip access-group … out duplex auto speed auto media-type rj45 service-policy input CoPP_SSH ! Ip access-list extended CoPP_SSH deny tcp any any eq 22 !. class-map match-all CoPP_SSH match access-group name CoPP_SSH ! Policy-map CoPP_SSH class CoPP_SSH police cir 100000 exceed-action drop ! ! ! Control-plane service-policy input CoPP_SSH ! Ip access-list extended CoPP_SSH permit tcp any any eq 22 !. class-map match-all CoPP_SSH match access-group name CoPP_SSH ! Policy-map CoPP_SSH class CoPP_SSH police cir 100000 exceed-action drop ! ! ! Control-plane transit service-policy input CoPP_SSH ! Ip access-list extended CoPP_SSH permit tcp any any eq 22 !.

Refer to the exhibit. What step resolves the authentication issue?. use basic authentication. change the port to 12446. target 192.168.100.82 in the URI. restart the vsmart host.

Refer to the exhibit. Security policy requires all idle exec sessions to be terminated in 600 seconds. Which configuration achieves this goal?. line vty 0 15 absolute-timeout 600. line vty 0 15 no exec-timeout. line vty 0 15 exec-timeout 10 0. line vty 0 4 exec-timeout 600.

Refer to the exhibit. An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router. However, the router can still ping hosts on the 209.165.200.0/24 subnet. What explains this behavior?. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router. After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect. Only standard access control lists can block traffic from a source IP address. The access control list must contain an explicit deny to block traffic from the router.

What is a characteristic of a next-generation firewall?. only required at the network perimeter. required in each layer of the network. filters traffic using Layer 3 and Layer 4 information only. provides intrusion prevention.

Refer to the exhibit. An engineer is investigating why guest users are able to access other guest user devices when the users are connected to the customer guest WLAN. What action resolves this issue?. implement P2P blocking. implement MFP client protection. implement Wi-Fi direct policy. implement split tunneling.

Refer to the exhibit. An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected. Which action will resolve this issue?. enable AAA override. set a NAC state. utilize RADIUS profiling. require a DHCP address assignment.

Refer to the exhibit. Which single security feature is recommended to provide Network Access Control in the enterprise?. MAB. 802.1X. WebAuth. port security sticky MAC.

Refer to the exhibit. After configuring an IPsec VPN, an engineer enters the show command to verify the ISAKMP SA status. What does the status show?. VPN peers agreed on parameters for the ISAKMP SA. Peers have exchanged keys, but ISAKMP SA remains unauthenticated. ISAKMP SA is authenticated and can be used for Quick Mode. ISAKMP SA has been created, but it has not continued to form.

Which two threats does AMP4E have the ability to block? (Choose two.). email phishing. DDoS. Microsoft Word macro attack. SQL injection. ransomware.

Refer to the exhibit. An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts. Drag and drop the commands into the configuration to achieve these results. Some commands may be used more than once. Not all commands are used. Select and Place: SW1(config)#ip access-list extended DENY-HTTP SW1(config-ext-nacl)#_________ tcp host 10.1.1.10 host 10.1.1.20 eq www. SW1(config)#ip access-list extended MATCH-ALL SW1(config-ext-nacl)#_______ ip any any. SW1(config)#vlan access-map HOST-A-B 10 SW1(config-access-map)#match address DENY-HTTP SW1(config-access-map)#__________. SW1(config)#vlan access-map HOST-A-B 20 SW1(config-access-map)#match address MATCH-ALL SW1(config-access-map)#__________.

An engineer must configure the strongest password authentication to locally authenticate on a router. Which configuration must be used?. username netadmin secret 5 $1$b1Ju$kZbBS1Pyh4QzwXyZ1kSZ2. username netadmin secret 9 $9$vFpMf8elb4RVV8$seZ/bDAx1uV. username netadmin secret $1$b1Ju$k406689705QzwXyZ1kSZ2. line Console 0 password $1$b1Ju$.

What is a characteristic of MACsec?. 802.1AE is built between the host and switch using the MKA protocol, which negotiates encryption keys based on the primary session key from a successful 802.1X session. 802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol. 802.1AE is built between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode). 802.1AE provides encryption and authentication services.

Refer to the exhibit. A network engineer attempts to connect to the Router1 console port. Which configuration is needed to allow Telnet connections?. Router1(config)# line vty 0 15 Router1(config-line)# transport output telnet. Router1(config)# telnet client. Router1(config)# line console 0 Router1(config-line)# transport output telnet. Router1(config)# access-list 100 permit tcp any any eq telnet Router1(config)# line console 0 Router1(config-line)# access-class 100 out.

A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days. What is required to complete this task?. Add the username admin privilege 15 common-criteria-policy Administrators password 0 Cisco13579! command. The password expiry mechanism is on the AAA server and must be configured there. Add the aaa authentication enable default Administrators command. No further action is required. The configuration is complete.

How is a data modeling language used?. To enable data to be easily structured, grouped, validated, and replicated. To represent finite and well-defined network elements that cannot be changed. To model the flows of unstructured data within the infrastructure. To provide human readability to scripting languages.

Which statements are used for error handling in Python?. try/catch. catch/release. block/rescue. try/except.

How do agent-based versus agentless configuration management tools compare?. Agentless tools use proxy nodes to interface with slave nodes. Agentless tools require no messaging systems between master and slaves. Agent-based tools do not require a high-level language interpreter such as Python or Ruby on slave nodes. Agent-based tools do not require installation of additional software packages on the slave nodes.

Which HTTP JSON response does the Python code output give?. 7.0(3)|7(4). 7.61. NameError: name 'json' is not defined. KeyError: 'kickstart_ver_str'.

A network administrator is preparing a Python script to configure a Cisco IOS XE-based device on the network. The administrator is worried that colleagues will make changes to the device while the script is running. Which operation of the ncclient manager prevents colleagues from making changes to the devices while the script is running?. m.lock(config='running'). m.lock(target='running'). m.freeze(target='running'). m.freeze(config='running').

Which outcome is achieved with this Python code? client.connect (ip, port= 22, username= usr, password= pswd ) stdin, stdout, stderr = client.exec_command ( 'show ip bgp 192.168.101.0 bestpath\n ' ) print (stdout). connects to a Cisco device using SSH and exports the BGP table for the prefix. displays the output of the show command in a formatted way. connects to a Cisco device using SSH and exports the routing table information. connects to a Cisco device using Telnet and exports the routing table information.

Refer to the exhibit. Which JSON syntax is derived from this data?. {[{"First Name": "Johnny", "Last Name": "Table", "Hobbies": ["Running", "Video games"]}, {"First Name": "Billy", "Last Name": "Smith", "Hobbies": ["Napping", "Reading"]}]}. {"Person": [{"First Name": "Johnny", "Last Name": "Table", "Hobbies": "Running", "Video games"}, {"First Name": "Billy", "Last Name": "Smith", "Hobbies": "Napping", "Reading"}]}. {[{"First Name": "Johnny", "Last Name": "Table", "Hobbies": "Running", "Hobbies": "Video games"}, {"First Name": "Billy", "Last Name": "Smith", "Hobbies": "Napping", "Reading"}]}. {"Person": [{"First Name": "Johnny", "Last Name": "Table", "Hobbies": ["Running", "Video games"]}, {"First Name": "Billy", "Last Name": "Smith", "Hobbies": ["Napping", "Reading"]}]}.

Which data is properly formatted with JSON?. { "name": "Peter", "age": "25", "likesJson": true, "characteristics": ["small","strong",18] }. { "name": "Peter", "age": "25", "likesJson": true, "characteristics": ["small","strong","18"], }. { "name": Peter, "age": 25, "likesJson": true, "characteristics": ["small","strong","18"], }. { "name":"Peter" "age":"25" "likesJson":true "characteristics":["small","strong",18] }.

Based on the output below, which Python code shows the value of the "upTime" key?. json_data = response.json() print(json_data['response'][0]['upTime']). json_data = response.json() print(json_data[response][0][upTime]). json_data = json.loads(response.text) print(json_data['response']['family']['upTime']). json_data = response.json() print(json_data['response'][family]['upTime']).

Which exhibit displays a valid JSON file?. { "hostname": "edge_router_1" "interfaces": { "GigabitEthernet1/1" "GigabitEthernet1/2" "GigabitEthernet1/3" } }. { "hostname": "edge_router_1", "interfaces": { "GigabitEthernet1/1", "GigabitEthernet1/2", "GigabitEthernet1/3", }, }. { "hostname": "edge_router_1" "interfaces": [ "GigabitEthernet1/1" "GigabitEthernet1/2" "GigabitEthernet1/3" ] }. { "hostname": "edge_router_1", "interfaces": [ "GigabitEthernet1/1", "GigabitEthernet1/2", "GigabitEthernet1/3" ] }.

Refer to the exhibit. What is the JSON syntax that is formed from the data?. Name: Bob, Johnson, Age: 76, Alive: true, Favourite Foods. [Cereal, "Mustard", "Onions}}. Name', 'Bob Johnson,' 'Age', 76, 'Alive', true, 'favourite Foods' 'Cereal Mustard', 'Onions'}. {"Name": "Bob Johnson", "age": 76, "alive": true, "favorite foods ": [" Cereal ", " Mustard ", " Onions "] }. Name", "Bob Johnson", "Age", 76, "Alive", true, "favourite Foods", ["Cereal, "Mustard", Onions"}}. Name", "Bob Johnson", "Age": Seventysix, "Alive" true, "favourite Foods" ,[Cereal" "Mustard" "Onions"}}.

Which JSON syntax is valid. . {"switch": "name": "dist1", "interfaces": ["gig1", "gig2", "gig3"]}. {/"switch/": {/"name/": "dist1", /"interfaces/": ["gig1", "gig2", "gig3"]}}. {"switch": {"name": "dist1", "interfaces": ["gig1", "gig2", "gig3"]}}. {`switch': (`name': `dist1', `interfaces': [`gig1', `gig2', `gig3'])}.

What is the structure of a JSON web token?. three parts separated by dots: header, payload, and signature. three parts separated by dots: version, header, and signature. header and payload. payload and signature.

A response code of 404 is received while using the REST API on Cisco DNA Center to POST to this URI: /dna/intent/api/v1/template-programmer/project What does the code mean?. The POST/PUT request was fulfilled and a new resource was created. Information about the resource is in the response body. The request was accepted for processing, but the processing was not completed. The client made a request for a resource that does not exist. The server has not implemented the functionality that is needed to fulfill the request.

Which two operations are valid for RESTCONF? (Choose two.). PULL. PUSH. PATCH. REMOVE. ADD. HEAD.

Refer to the exhibit. An engineer is using XML in an application to send information to a RESTCONF-enabled device. After sending the request, the engineer gets this response message and an HTTP response code of 400. What do these responses tell the engineer?. The Accept header sent was application/xml. POST was used instead of PUT to update. The Content-Type header sent was application/xml. A JSON body was used.

What is used to validate the authenticity of client and is sent in HTTP requests as a JSON object?. SSH. HTTPS. JWT. TLS.

What is YANG used for?. scraping data via CLI. processing SNMP read-only polls. describing data models. providing a transport for network configuration data between client and server.

Which HTTP status code is the correct response for a request with an incorrect password applied to a REST API session?. HTTP Status Code: 200. HTTP Status Code: 302. HTTP Status Code: 401. HTTP Status Code: 504.

Which protocol does REST API rely on to secure the communication channel?. HTTP. SSH. HTTPS. TCP.

At which layer does Cisco DNA Center support REST controls?. session layer. northbound APIs. EEM applets or scripts. YAML output from responses to API calls.

Which algorithms are used to secure REST API from brute attacks and minimize the impact?. SHA-512 and SHA-384. MD5 algorithm-128 and SHA-384. SHA-1, SHA-256, and SHA-512. PBKDF2, BCrypt, and SCrypt.

Which method of account authentication does OAuth 2.0 use within REST APIs?. username/role combination. access tokens. cookie authentication. basic signature workflow.

Which two protocols are used with YANG data models? (Choose two.). TLS. RESTCONF. SSH. NETCONF. HTTPS.

What is a benefit of data modeling languages like YANG?. They create more secure and efficient SNMP OIDs. They provide a standardized data structure, which results in configuration scalability and consistency. They enable programmers to change or write their own applications within the device operating system. They make the CLI simpler and more efficient.

Refer to the exhibit. After running the code in the exhibit, which step reduces the amount of data that the NETCONF server returns to the NETCONF client, to only the interface's configuration?. Use the Ixml library to parse the data returned by the NETCONF server for the interface's configuration. Create an XML filter as a string and pass it to get_config() method as an argument. Create a JSON filter as a string and pass it to the get_config() method as an argument. Use the JSON library to parse the data returned by the NETCONF server for the interface's configuration.

Which method displays text directly into the active console with a synchronous EEM applet policy?. event manager applet boom event syslog pattern 'UP' action 1.0 syslog priority direct msg 'logging directly to console'. event manager applet boom event syslog pattern 'UP' action 1.0 gets 'logging directly to console'. event manager applet boom event syslog pattern 'UP' action 1.0 string 'logging directly to console'. event manager applet boom event syslog pattern 'UP' action 1.0 puts 'logging directly to console'.

Which two steps are required for a complete Cisco DNA Center upgrade? (Choose two.). automation backup. system update. golden image selection. proxy configuration. application updates.

Which method creates an EEM applet policy that is registered with EEM and runs on demand or manually?. event manager applet ondemand event none action 1.0 syslog priority critical msg 'This is a message from ondemand'. event manager applet ondemand action 1.0 syslog priority critical msg 'This is a message from ondemand'. event manager applet ondemand event register action 1.0 syslog priority critical msg 'This is a message from ondemand'. event manager applet ondemand event manual action 1.0 syslog priority critical msg 'This is a message from ondemand'.

What does this EEM applet event accomplish? "event snmp oid 1.3.6.1.3.7.6.5.3.9.3.8.7 get-type next entry-op gt entry-val 75 poll-interval 5". Upon the value reaching 75%, a SNMP event is generated and sent to the trap server. It reads an SNMP variable, and when the value exceeds 75%, it triggers an action. It issues email when the value is greater than 75% for five polling cycles. It presents a SNMP variable that can be interrogated.

What is a requirement for an Ansible-managed node?. It must have an SSH server running. It must be a Linux server or a Cisco device. It must support ad hoc commands. It must have an Ansible Tower installed.

Which characteristic distinguishes Ansible from Chef?. Ansible uses Ruby to manage configurations. Chef uses YAML to manage configurations. The Ansible server can run on Linux, Unix or Windows. The Chef server must run on Linux or Unix. Ansible pushes the configuration to the client. Chef client pulls the configuration from the server. Ansible lacks redundancy support for the primary server. Chef runs two primary servers in active/active mode.

Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right. uses a pull model. uses playbooks. procedural. declarative.

Refer to the exhibit. What does the snippet of code achieve?. It creates an SSH connection using the SSH key that is stored, and the password is ignored. It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls. It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context. It opens a tunnel and encapsulates the login information, if the host key is correct.

Which two characteristics define the Intent API provided by Cisco DNA Center? (Choose two.). northbound API. business outcome oriented. device-oriented. southbound API. procedural.

In a Cisco DNA Center Plug and Play environment, why would a device be labeled unclaimed?. The device has not been assigned a workflow. The device could not be added to the fabric. The device had an error and could not be provisioned. The device is from a third-party vendor.

What does the Cisco DNA Center use to enable the delivery of applications through a network and to yield analytics for innovation?. process adapters. Command Runner. intent-based APIs. domain adapters.

Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?. all devices integrating with ISE. selected individual devices. all devices in selected sites. all wired devices.

Which tool is used in Cisco DNA Center to build generic configurations that are able to be applied on devices with similar network settings?. Command Runner. Application Policies. Template Editor. Authentication Template.

In which part of the HTTP message is the content type specified?. HTTP method. body. header. URI.

An engineer must create an EEM applet that sends a syslog message in the event a change happens in the network due to trouble with an OSPF process. Which action should the engineer use? event manager applet LogMessage event routing network 172.30.197.0/24 type all. action 1 syslog msg "OSPF ROUTING ERROR". action 1 syslog send "OSPF ROUTING ERROR". action 1 syslog pattern "OSPF ROUTING ERROR". action 1 syslog write "OSPF ROUTING ERROR".

An engineer runs the code against an API of Cisco DNA Center, and the platform returns this output. What does the response indicate?. The authentication credentials are incorrect. The URI string is incorrect. The Cisco DNA Center API port is incorrect. The HTTP method is incorrect.

What are two benefits of YANG? (Choose two.). It enforces the use of a specific encoding format for NETCONF. It collects statistical constraint analysis information. It enables multiple leaf statements to exist within a leaf list. It enforces configuration semantics. It enforces configuration constraints.

Drag and drop the characteristics from the left onto the orchestration tools they describe on the right. utilizes a pull model. utilizes a push model. multimaster architecture. primary/secondary architecture.

Refer to the exhibit. After running the code in the exhibit, which step reduces the amount of data that the NETCONF server returns to the NETCONF client, to only the interface's configuration?. Use the Ixml library to parse the data returned by the NETCONF server for the interface's configuration. Create an XML filter as a string and pass it to get_config() method as an argument. Create a JSON filter as a string and pass it to the get_config() method as an argument. Use the JSON library to parse the data returned by the NETCONF server for the interface's configuration.

Running the script causes the output in the exhibit. Which change to the first line of the script resolves the error?. from ncclient import. import manager. from ncclient import *. import ncclient manager.

Which line must be added in the Python function to return the JSON object {“cat_9k”: “FXS1932Q2SE”}?. return (json.dumps({d['hostname']: d['serialNumber'] for d in json.loads(test_json)['response']})). return (json.dumps({for d in json.loads(test_json)['response']: d['hostname']: d['serialNumber']})). return (json.loads({d['hostname']: d['serialNumber'] for d in json.dumps(test_json)['response'})). return (json.loads({for d in json.dumps(test_json)['response']: d['hostname']: d['serialNumber']})).

Refer to the exhibit. Which code results in the working Python script displaying a list of network devices from the Cisco DNA Center?. network_device_list(dnac["host"], dnac["username"],dnac["password"]) login = dnac_login(dnac) print(dnac_devices). login = dnac_login(dnac["host"], dnac["username"], dnac["password"]) network_device_list(dnac, login) for item in dnac_devices: print(dnac_devices.item). login = dnac_login(dnac["host"], dnac["username"], dnac["password"]) network_device_list(dnac, login) print(dnac_devices). network_device_list(dnac["host"], dnac["username"], dnac["password"]) login = dnac_login(dnac) for item in dnac_devices: print(dnac_devices.item).

What does the Cisco DNA REST response indicate?. Cisco DNA Center has the incorrect credentials for cat3850-1. Cisco DNA Center is unable to communicate with cat9000-1. Cisco DNA Center has the incorrect credentials for cat9000-1. Cisco DNA Center has the incorrect credentials for RouterASR-1.

What is a characteristic of YANG?. It is a Cisco proprietary language that models NETCONF data. It allows model developers to create custom data types. It structures data in an object-oriented fashion to promote model reuse. It provides loops and conditionals to control flow within models.

Drag and drop the snippets onto the blanks within the code to construct a script that changes the routing from gateway 1 to gateway 2 from 11:00 p.m. to 12:00 a.m. (2300 to 2400) only, daily. Not all options are used, and some options may be used twice. Select and Place: event timer. 111. ***. event tag. 10***. daily.

Refer to the exhibit. The IP SLA is configured in a router. An engineer must configure an EEM applet to shut down the interface and bring it back up when there is a problem with the IP SLA. Which configuration should the engineer use?. event manager applet EEM_IP_SLA event track 10 state down. event manager applet EEM_IP_SLA event track 10 state unreachable. event manager applet EEM_IP_SLA event sla 10 state unreachable. event manager applet EEM_IP_SLA event sla 10 state down.

What is the value of the variable list after the code is run?. [1, 2], [1, 2], [1, 2]. [1, 2] * 3. [1, 2, 1, 2, 1, 2]. [3, 6].

Which result does the Python code achieve?. The code encrypts a base64 decrypted password. The code converts time to the Epoch LINUX time format. The code converts time to the "year/month/day" time format. The code converts time to the yyyymmdd representation.

POSTMAN is showing an attempt to retrieve network device information from Cisco DNA Center API. What is the issue?. The URI string is incorrect. The token has expired. Authentication has failed. The JSON payload contains the incorrect UUID.

Running the script causes the output in the exhibit. What should be the first line of the script?. from ncclient import manager. import manager. from ncclient import *. ncclient manager import.

An engineer must create a script that appends the output of the show process cpu sorted command to a file. Which action completes the configuration?. action 4.0 syslog command "show process cpu sorted | append flash:high-cpu-file". action 4.0 cli command "show process cpu sorted | append flash:high-cpu-file". action 4.0 cns-event "show process cpu sorted | append flash:high-cpu-file". action 4.0 publish-event "show process cpu sorted | append flash:high-cpu-file".

Which three items represent features of Cisco Virtual Port Channels? (Choose three.). Single control plane. Dual control planes. vPC appears as one switch to downstream switches. vPC appears as two switches to downstream switch. Etherchannel protocols include Static, LACP. channel protocols include Static, PAgP, PAgP+, LACP.

Ospf LSAs. LSA Type 1. LSA Type 2. LSA Type 3. LSA Type 4. LSA Type 5. LSA Type 6. LSA Type 7. LSA Type 8.

What is a characteristic of MACsec?. 802.1AE is built between the host and switch using the MKA protocol, which negotiates encryption keys based on the primary session key from a successful 802.1X session. 802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol. 802.1AE is built between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode). 802.1AE provides encryption and authentication services.

A network engineer is configuring OSPF on a router. The engineer wants to prevent having a route to 172.16.0.0/16 learned via OSPF in the routing table and configures a prefix list using the command ip prefix-list OFFICE seq 5 deny 172.16.0.0/16. Which two additional configuration commands must be applied to accomplish the goal? (Choose two.). ip prefix-list OFFICE seq 10 permit 0.0.0.0/0 le 32. distribute-list prefix OFFICE in under the OSPF process. distribute-list OFFICE in under the OSPF process. distribute-list OFFICE out under the OSPF process. ip prefix-list OFFICE seq 10 permit 0.0.0.0/0 ge 32.

Drag and drop the characteristics from the left onto the technology types on the right. Select and Place: This type of technology provides automation across multiple technologies and domains. This type of technology enables consistent configuration of infrastructure resources. Puppet is used for this type of technology. Ansible is used for this type of technology.

Refer to the exhibit. Which command set must be applied on R1 to establish a BGP neighborship with R2 and to allow communication from R1 to reach the networks?. router bgp 1200 network 209.165.200.224 mask 255.255.255.224 neighbor 209.165.202.130 remote-as 1200. router bgp 1201 network 209.165.200.224 mask 255.255.255.224 neighbor 209.165.202.130 remote-as 1201. router bgp 1200 network 209.165.200.224 mask 255.255.255.224 neighbor 209.165.202.130 remote-as 1201. router bgp 1200 network 209.165.200.224 mask 255.255.255.224 neighbor 209.165.201.2 remote-as 1200.

Why would a log file contain a * next to the date?. The network device was receiving NTP time when the log messages were recorded. The network device was unable to reach the NTP server when the log messages were recorded. The network device is not configured to use NTP. The network device is not configured to use NTP time stamps for logging.

A network engineer must configure a router to send logging messages to a syslog server based on these requirements: * uses syslog IP address: 10.10.10.1 * uses a reliable protocol * must not use any well-known TCP/UDP ports Which configuration must be used?. logging host 10.10.10.1 transport tcp port 1024. logging host 10.10.10.1 transport udp port 1024. logging host 10.10.10.1 transport udp port 1023. logging origin-id 10.10.10.1.

Drag and drop the snippets onto the blanks within the code to construct a script that shows all logging that occurred on the appliance from Sunday until 9:00 p.m. Thursday. Not all options are used. Select and Place: 1.0. 0 21 * * 0-4. redirect ftp://cisco:cisco@192.168.1.1. 3.0. 0 21 * * 1-5. ftp://cisco:cisco@192.168.1.1.

Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right. Select and Place: declarative. communicates using knife tool. communicates through ssh. procedural.

Which configuration allows administrators to configure the device through the console port and use a network authentication server?. aaa new-model aaa authentication login default local aaa authorization console aaa authorization config-commands username netadmin secret $9$vFpMf8elb4RVV8$seZ/bDAx1uV. aaa new-model aaa authentication login default local aaa authorization console aaa authorization config-commands. aaa new-model aaa authentication login default line. aaa new-model aaa authentication login default group radius aaa authorization console aaa authorization config-commands.

Drag and drop the characteristics from the left onto the infrastructure deployment models they describe on the right. Select and Place: easy to scale the capacity up and down. infrastructure requires large and regular investments. highly agile. highly customizable.

Refer to the exhibit. An engineer must create a configuration that prevents R3 from receiving the LSA about 172.16.1.4/32. Which configuration set achieves this goal?. On R3 ip access-list standard R4_L0 deny host 172.16.1.4 permit any router ospf 200 distribute-list R4_L0 in. On R1 ip prefix-list INTO-AREA1 seq 5 deny 172.16.1.4/32 ip prefix-list INTO-AREA1 seq 10 permit 0.0.0.0/0 le 32 router ospf 200 area 1 filter-list prefix INTO-AREA1 out. On R1 ip prefix-list INTO-AREA1 seq 5 deny 172.16.1.4/32 ip prefix-list INTO-AREA1 seq 10 permit 0.0.0.0/0 le 32 router ospf 200 area 1 filter-list prefix INTO-AREA1 in. On R3 ip prefix-list INTO-AREA1 seq 5 deny 172.16.1.4/32 ip prefix-list INTO-AREA1 seq 10 permit 0.0.0.0/0 le 32 router ospf 200 area 1 filter-list prefix INTO-AREA1 in.

Refer to the exhibit. An engineer is reaching network 172.16.10.0/24 via the R1-R2-R4 path. Which configuration forces the traffic to take a path of R1-R3-R4?. R1(config)#route-map RM_LOCAL_PREF permit 10 R1(config-route-map)#set local-preference 101 R1(config-route-map)#exit R1(config)#router bgp 100 R1(config-router)#neighbor 13.13.13.3 route-map RM_LOCAL_PREF in R1(config-router)#end R1#clear ip bgp 13.13.13.3 soft in. R1(config)#route-map RM_AS_PATH_PREPEND R1(config-route-map)#set as-path prepend 200 200 R1(config-route-map)#exit R1(config)#router bgp 100 R1(config-router)#neighbor 12.12.12.2 route-map RM_AS_PATH_PREPEND in R1(config-router)#end R1#clear ip bgp 12.12.12.2 soft in. R1(config)#router bgp 100 R1(config-router)#neighbor 13.13.13.3 weight 1 R1(config-router)#end. R2(config)#route-map RM_MED permit 10 R2(config-route-map)#set metric 1 R2(config-route-map)#exit R2(config)#router bgp 200 R2(config-router)#neighbor 12.12.12.1 route-map RM_MED out R2(config-router)#end R2#clear ip bgp 12.12.12.1 soft out.

Refer to the exhibit. How does the router handle traffic after the CoPP policy is configured on the router?. Traffic generated by R1 that matches access list SNMP is policed. Traffic coming to R1 that matches access list SNMP is policed. Traffic passing through R1 that matches access list SNMP is policed. Traffic coming to R1 that does not match access list SNMP is dropped.

What is a characteristic of Cisco StackWise technology?. It is supported on the Cisco 4500 series. It supports devices that are geographically separated. It combines exactly two devices. It uses proprietary cabling.

Refer to the exhibit. After the code is run on a Cisco IOS-XE router, the response code is 204. What is the result of the script?. The configuration fails because interface GigabitEthernet2 is missing on the target device. Interface GigabitEthemet2 is configured with IP address 10.10.10.1/24. The configuration fails because another interface is already configured with IP address 10.10.10.1/24. The configuration is successfully sent to the device in cleartext.

Refer to the exhibit. VPN-A sends point-to-point traffic to VPN-B and receives traffic only from VPN-C. VPN-B sends point-to-point traffic to VPN-C and receives traffic only from VPN-A. Which configuration is applied?. PE-2 vrf VPN-B address-family ipv4 unicast import route-target 100:1 export route-target 100:2. PE-3 vrf VPN-B address-family ipv4 unicast import route-target 100:2 export route-target 100:2. PE-2 vrf VPN-B address-family ipv4 unicast import route-target 100:2 export route-target 100:2. PE-3 vrf VPN-B address-family ipv4 unicast import route-target 100:1 export route-target 100:2.

A customer wants to use a single SSID to authenticate IoT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?. Central Web Authentication. Cisco Centralized Key Management. Identity PSK. Fast Transition.

When firewall capabilities are considered, which feature is found only in Cisco next-generation firewalls?. malware protection. stateful inspection. traffic filtering. active/standby high availability.

A network engineer is enabling HTTPS access to the core switch, which requires a certificate to be installed on the switch signed by the corporate certificate authority. Which configuration commands are required to issue a certificate signing request from the core switch?. Core-Switch(config)#crypto pki enroll Core-Switch Core-Switch(config)#ip http secure-trustpoint Core-Switch. Core-Switch(config)#ip http secure-trustpoint Core-Switch Core-Switch(config)#crypto pki enroll Core-Switch. Core-Switch(config)#crypto pki trustpoint Core-Switch Core-Switch(ca-trustpoint)#enrollment terminal Core-Switch(config)#crypto pki enroll Core-Switch. Core-Switch(config)#crypto pki trustpoint Core-Switch Core-Switch(ca-trustpoint)#enrollment terminal Core-Switch(config)#ip http secure-trustpoint Core-Switch.

An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication. Which profile must the engineer edit to achieve this requirement?. Policy. RF. Flex. WLAN.

A customer requests a design that includes GLBP as the FHRP. The network architect discovers that the members of the GLBP group have different throughput capabilities. Which GLBP load balancing method supports this environment?. round robin. host dependent. weighted. least connection.

Refer to the exhibit. Which command set changes the neighbor state from Idle (Admin) to Active?. R1(config)#router bgp 65001 R1(config-router)#neighbor 192.168.50.2 remote-as 65001. R1(config)#router bgp 65001 R1(config-router)#neighbor 192.168.50.2 activate. R1(config)#router bgp 65001 R1(config-router)#no neighbor 192.168.50.2 shutdown. R1(config)#router bgp 65002 R1(config-router)#neighbor 192.168.50.2 activate.

In a Cisco SD-WAN solution, how is the health of a data plane tunnel monitored?. with IP SLA. ARP probing. using BFD. with OMP.

By default, which virtual MAC address does HSRP group 16 use?. c0:41:41:43:07:10. 00:05:5c:07:0c:16. 00:00:0c:07:ac:10. 05:00:0c:07:ac:16.

Refer to the exhibit. Why was the response code generated?. The resource was unreachable. Access was denied based on the user permissions. . Access was denied based on the credentials. The resource is no longer available on the server.

What happens when a FlexConnect AP changes to standalone mode?. All client roaming continues to work. Only clients on central switching WLANs stay connected. All clients on all WLANs are disconnected. All controller-dependent activities stop working except the DFS.

If the maximum power level assignment for global TPC 802.11a/n/ac is configured to 10 dBm. which power level effectively doubles the transmit power?. 13 dBm. 14 dBm. 17 dBm. 20 dBm.

An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Which script must the engineer apply?. event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 6, Nbr 1.1.1.1 on Serial0/0 from FULL to DOWN" action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf event" action 3.0 cli command "debug ip ospf adj" action 4.0 syslog priority informational msg "ENABLE_OSPF_DEBUG". event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 5, Nbr 1.1.1.1 on Serial0/0 from LOADING to FULL" action 1.0 cli command "debug ip ospf event" action 2.0 cli command "debug ip ospf adj" action 3.0 syslog priority informational msg "ENABLE_OSPF_DEBUG". event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-1-ADJCHG: Process 5, Nbr 1.1.1.1 on Serial0/0 from FULL to DOWN" action 1.0 cli command "debug ip ospf event" action 2.0 cli command "debug ip ospf adj" action 3.0 syslog priority informational msg "ENABLE_OSPF_DEBUG". event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 5, Nbr 1.1.1.1 on Serial0/0 from LOADING to FULL" action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf event" action 3.0 cli command "debug ip ospf adj" action 4.0 syslog priority informational msg "ENABLE_OSPF_DEBUG".

A customer wants to provide wireless access to contractors using a guest portal on Cisco ISE. The portal is also used by employees. A solution is implemented, but contractors receive a certificate error when they attempt to access the portal. Employees can access the portal without any errors. Which change must be implemented to allow the contractors and employees to access the portal?. Install a trusted third-party certificate on the Cisco ISE. Install an internal CA signed certificate on the Cisco ISE. Install a trusted third-party certificate on the contractor devices. Install an internal CA signed certificate on the contractor devices.

An engineer must configure a new loopback interface on a router and advertise the interface as a /24 in OSPF. Which command set accomplishes this task?. R2(config)#interface Loopback0 R2(config-if)#ip address 172.22.2.1 255.255.255.0 R2(config-if)#ip ospf network broadcast R2(config-if)#ip ospf 100 area 0. R2(config)#interface Loopback0 R2(config-if)#ip address 172.22.2.1 255.255.255.0 R2(config-if)#ip ospf network point-to-point R2(config-if)#ip ospf 100 area 0. R2(config)#interface Loopback0 R2(config-if)#ip address 172.22.2.1 255.255.255.0 R2(config-if)#ip ospf network point-to-multipoint R2(config-if)#router ospf 100. R2(config-router)#network 172.22.2.0 0.0.0.255 area 0 R2(config)#interface Loopback0 R2(config-if)#ip address 172.22.2.1 255.255.255.0 R2(config-if)#ip ospf 100 area 0.

Drag and drop the LISP components on the left to their descriptions on the right. Not all options are used. Select and Place: map server. map resolver. RLOC. ITR.

Refer to the exhibit. Which commands are required to allow SSH connections to the router?. Router(config)#access-list 10 permit tcp any eq 22 any Router(config)#class-map class-ssh Router(config-cmap)#match access-group 10 Router(config)#policy-map CoPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit. Router(config)#access-list 100 permit tcp any any eq 22 Router(config)#access-list 101 permit tcp any any eq 22 Router(config)#class-map class-ssh Router(config-cmap)#match access-group 101 Router(config)#policy-map CoPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit. Router(config)#access-list 100 permit udp any any eq 22 Router(config)#access-list 101 permit tcp any any eq 22 Router(config)#class-map class-ssh Router(config-cmap)#match access-group 101 Router(config)#policy-map CoPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit. Router(config)#access-list 100 permit tcp any eq 22 any Router(config)#class-map class-ssh Router(config-cmap)#match access-group 10 Router(config)#policy-map CoPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit.

What is a characteristic of a type 2 hypervisor?. complicated deployment. ideal for data center. referred to as bare-metal. ideal for client/end-user system.

Which two features does the Cisco SD-Access architecture add to a traditional campus network? (Choose two.). modular QoS. software-defined segmentation. identity services. private VLANs. SD-WAN.

Which congestion queuing method on Cisco IOS based routers uses four static queues?. weighted fair. custom. low latency. priority.

An engineer plans to use Python to convert text files that contain device information to JSON Drag and drop the code snippets from the bottom onto the blanks in the code to construct the request. Not all options are used. out_file.close(out_file). with open(raw-data) as text:. out_file = open ("Json-Output.json","w"). with open(input_file) as text:. out_file.close(). out_file = open ("Json-Output.json","r").

Refer to the exhibit. Drag and drop the snippets into the RESTCONF request to form the request that returns this response. Not all options are used. Select and Place: POST. Cisco-IOS-XE. GET. Accept. interface/GigabitEthernet/1/. PUT.

Refer to the exhibit. An engineer must configure static NAT on R1 to allow users HTTP access to the web server on TCP port 80. The web server must be reachable through ISP 1 and ISP 2. Which command set should be applied to R1 to fulfill these requirements?. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 extendable ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80 extendable. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 no-alias ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80 no-alias. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 ip nat inside source static tcp 10.1.1.100 8080 209.165.201.1 8080.

Refer to the exhibit. An engineer attempts to bundle interface Gi0/0 into the port channel, but it does not function as expected. Which action resolves the issue?. Enable fast LACP PDUs on interface Gi0/0. Set LACP max-bundle to 2 on interface Port-channel1. Configure no shutdown on interface Gi0/0. Configure channel-group 1 mode active on interface Gi0/0.

In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?. management and data. control, and forwarding. control and management. control and data.

Refer to the exhibit. A network engineer is enabling logging to a local buffer, to the terminal, and to a syslog server for all debugging level logs filtered by facility code 7. Which command is needed to complete this configuration snippet?. logging buffered debugging. logging discriminator Disc1 severity includes 7. logging buffered discriminator Disc1 debugging. logging discriminator Disc1 severity includes 7 facility includes fac7.

Drag and drop the snippets onto the blanks within the code to construct a script that adds a prefix list to a route map and sets the local preference. Not all options are used. Select and Place: "running":null. "seq_no". "config":null. "permit". "match". "name":"100".

Refer to the exhibit. What is the result of the API request?. The native interface information is read from the network appliance. The information for all interfaces is read from the network appliance. The "params" variable reads data fields from the network appliance. The "params" variable sends data fields to the network appliance.

Which definition describes JWT in regard to REST API security?. an encrypted JSON token that is used for authentication. an encrypted JSON token that is used for authorization. an encoded JSON token that is used to securely exchange information. an encoded JSON token that is used for authentication.

Refer to the exhibit. A client has two directly connected eBGP peering links with diverse ISPs. Both providers advertise the same public prefix 209.165.200.224/27 to R1 without any route manipulation. Traffic leaves R1 outbound via ISP1 but returns inbound via ISP2. Which configuration prevents asymmetrical routing and makes ISP1 the preferred path inbound and outbound?. R1#config t R1(config)#router bgp 65000 R1(config-router)#neighbor 10.11.0.2 route-map AS65001 out. R1#config t R1(config)#route-map AS65002 permit 10 R1(config-router)#set weight 100. R1#config t R1(config)#router bgp 65000 R1(config-router)#neighbor 10.11.0.2 route-map AS65002 out. R1#config t R1(config)#route-map AS65001 permit 10 R1(config-router)#set local-preference 100.

Refer to the exhibit. An engineer must allow all users in the 10.2.2.0/24 subnet to access the internet. To conserve address space, the public interface address of 209.165.201.1 must be used for all external communication. Which command set accomplishes these requirements?. access-list 10 permit 10.2.2.0 0.0.0.255 interface G0/3 ip nat outside ! interface G0/2 ip nat inside ! ip nat inside source list 10 209.165.201.1. access-list 10 permit 10.2.2.0 0.0.0.255 interface G0/3 ip nat outside ! interface G0/2 ip nat inside ! ip nat inside source list 10 interface G0/3. access-list 10 permit 10.2.2.0 0.0.0.255 interface G0/3 ip nat outside ! interface G0/2 ip nat inside ! ip nat inside source list 10 interface G0/2 overload. access-list 10 permit 10.2.2.0 0.0.0.255 interface G0/3 ip nat outside ! interface G0/2 ip nat inside ! ip nat inside source list 10 interface G0/3 overload.

What is a TLOC in a Cisco SD-WAN deployment?. value that identifies a specific tunnel within the Cisco SD-WAN overlay. identifier that represents a specific service offered by nodes within the Cisco SD-WAN overlay. attribute that acts as a next hop for network prefixes. component set by the administrator to differentiate similar nodes that offer a common service.

Refer to the exhibit. Which configuration must be applied to the HQ router to set up a GRE tunnel between the HQ and BR routers?. interface tunnel1 ip address 209.165.202.130 255.255.255.252 tunnel source GigabitEthernet0/0 tunnell destination 209.165.202.129. interface tunnel1 ip address 10.111.111.1 255.255.255.0 tunnel source GigabitEthernet0/0 tunnell destination 209.165.202.129. interface tunnel1 ip address 10.111.111.1 255.255.255.0 tunnel source GigabitEthernet0/0 tunnell destination 209.165.202.134. interface tunnel1 ip address 10.111.111.1 255.255.255.0 tunnel source GigabitEthernet0/0 tunnell destination 209.165.202.133.

Refer to the exhibit. An engineer configures the BGP adjacency between R1 and R2; however, it fails to establish. Which action resolves the issue?. Change the network statement on R1 to 172.16.10.0. Change the remote-as number on R1 to 6500. Change the remote-as number for 192.168.100.11. Enable synchronization on R1 and R2.

Refer to the exhibit. The trunk does not work over the back-to-back link between Switch1 interface Gig1/0/20 and Switch2 interface Gig1/0/20. Which configuration fixes the problem?. Switch 1(config)#interface gig1/0/20 Switch1(config-if)#switchport mode dynamic auto. Switch2(config)#interface gig1/0/20 Switch2(config-if)#switchport mode dynamic desirable. Switch2(config)#interface gig1/0/20 Switch2(config-if)#switchport mode dynamic auto. Switch1(config)#interface gig1/0/20 Switch1(config-if)#switchport trunk native vlan 1 Switch2(config)#interface gig1/0/20 Switch2(config-if)#switchport trunk native vlan 1.

Refer to the exhibit. An engineer must configure an ERSPAN session with the remote end of the session 10.10.0.1. Which commands must be added to complete the configuration?. Device(config)#monitor session 1 type erspan-source Device(config-mon-erspan-src)#destination Device(config-mon-erspan-src-dst)#no origin ip address 10.10.0.1 Device(config-mon-erspan-src-dst)#ip address 10.10.0.1. Device(config)#monitor session 1 type erspan-source Device(config-mon-erspan-src)#destination Device(config-mon-erspan-src-dst)#no vrf 1. Device(config)#monitor session 1 type erspan-source Device(config-mon-erspan-src)#destination Device(config-mon-erspan-src-dst)#no origin ip address 10.10.0.1 Device(config-mon-erspan-src-dst)#ip destination address 10.10.0.1. Device(config)#monitor session 1 type erspan-destination Device(config-mon-erspan-src)#source Device(config-mon-erspan-src-dst)#origin ip address 10.1.0.1.

An engineer must configure a router to leak routes between two VRFs. Which configuration must the engineer apply?. ip access-list extended acl-to-red permit ip any 10.1.1.0 0.0.0.255 route-map rm-to-red permit 10 match ip address 50 ip vrf RED rd 1:1 import ipv4 unicast map rm-to-red. ip access-list extended acl-to-red permit ip 10.1.1.0 0.0.0.255 any route map rm-to-red permit 10 match ip address acl-to-red ip vrf RED rd 1:1 import ipv4 unicast map rm-to-red. ip access-list extended acl-to-red permit ip 10.1.1.0 0.0.0.255 any route map rm-to-red permit 10 match ip address acl-to-red ip vrf RED rd 1:1 import ipv4 unicast map route-map acl-to-red. ip access-list extended acl-to-red permit ip 10.1.1.0 0.0.0.255 any route map rm-to-red permit 10 match ip address acl-to-red ip vrf RED rd 1:1 import ipv4 unicast acl-to-red.

Which Python code snippet must be added to the script to save the returned configuration as a JSON-formatted file?. with open ("ifaces.json","w") as OutFile: JSONResponse = json.loads(Response.text) OutFile.write(JSONResponse). with open("ifaces.json","w") as OutFile: OutFile.write(response). with open("ifaces.json","w") as OutFile: OutFile.write(response.text). with open("ifaces.json","w") as OutFile: OutFile.write(response.json()).

Refer to the exhibit. What does the output confirm about the switch's spanning tree configuration?. The spanning-tree operation mode for this switch is PVST. The spanning-tree operation mode for this switch is PVST+. The spanning-tree mode stp ieee command was entered on this switch. The spanning-tree operation mode for this switch is IEEE.

Drag and drop the snippets onto the blanks within the code to construct a script that advertises the network prefix 192.168.5.0/24 into a BGP session. Not all options are used. Select and Place: 192.168.5.0. 255.255.255.0. with-mask. mask. subnet-mask.

Based on the router's API output in JSON format below, which Python code will display the value of the `hostname` key?. json_data = response,json() print(json_data['response'][0]['hostname']). json_data = json.loads(response.text) print(json_data['response']['family']['hostname']). json_data = json.loads(response.text) print(json_data[response][0][hostname]). json_data = response.json() print(json_data['response'][family][hostname']).

Which function is performed by vSmart in the Cisco SD-WAN architecture'?. distribution of IPsec keys. execution of localized policies. redistribution between OMP and other routing protocols. facilitation of NAT detection and traversal.

Refer to the exhibit. The administrator troubleshoots an EtherChannel that keeps moving to err-disabled. Which two actions must be taken to resolve the issue? (Choose two.). Ensure that the corresponding port channel interface on the neighbor switch is named Port-channel1. Ensure that the switchport parameters of Port-channel1 match the parameters of the port channel on the neighbor switch. Ensure that interfaces Gi1/0/2 and Gi1/0/3 connect to the same neighboring switch. Reload the switch to force EtherChannel renegotiation. Ensure that the neighbor interfaces of Gi1/0/2 and Gi1/0/3 are configured as members of the same EtherChannel.

Refer to the exhibit. A network engineer must configure NETCONF. After creating the configuration, the engineer gets output from the command show line, but not from show running-config. Which command completes the configuration?. Device(config)# netconf max-sessions 100. Device(config)# no netconf ssh acl 1. Device(config)# netconf lock-time 500. Device(config)# netconf max-message 1000.

Which protocol is implemented to establish secure control plane adjacencies between Cisco SD-WAN nodes?. IKE. TLS. IPsec. ESP.

Refer to the exhibit. What are two reasons for IP SLA tracking failure? (Choose two.). The threshold value is wrong. The destination must be 172.30.30.2 for icmp-echo. The default route has the wrong next hop IP address. A route back to the R1 LAN network is missing in R2. The source-interface is configured incorrectly.

Refer to the exhibit. Which command set must be added to the configuration to analyze 50 packets out of every 100?. sampler SAMPLER-1 mode random 1-out-of 2 flow FLOW-MONITOR-1 interface GigabitEthernet 0/0/0 ip flow monitor SAMPLER-1 input. flow monitor FLOW-MONITOR-1 record v4_r1 sampler SAMPLER-1 interface GigabitEthernet 0/0/0 ip flow monitor FLOW-MONITOR-1 sampler SAMPLER-1 input. sampler SAMPLER-1 no mode random 1-out-of 2 mode percent 50 interface GigabitEthernet 0/0/0 ip flow monitor FLOW-MONITOR-1 sampler SAMPLER-1 input. interface GigabitEthernet 0/0/0 ip flow monitor FLOW-MONITOR-1 sampler SAMPLER-1 input.

Why would an engineer use YANG?. to transport data between a controller and a network device. to model data for NETCONF. to access data using SNMP. to translate JSON into an equivalent XML syntax.

A network monitoring system uses SNMP polling to record the statistics of router interfaces. The SNMP queries work as expected until an engineer installs a new interface and reloads the router. After this action, all SNMP queries for the router fail. What is the cause of this issue?. The SNMP interface index changed after reboot. The SNMP server traps are disabled for the link state. The SNMP server traps are disabled for the interface index. The SNMP community is configured incorrectly.

Which character formatting is required for DHCP Option 43 to function with current AP models?. MD5. Base64. ASCII. Hex.

Which benefit is realized by implementing SSO?. IP first-hop redundancy. communication between different nodes for cluster setup. physical link redundancy. minimal network downtime following an RP switchover.

Refer to the exhibit. After configuring HSRP an engineer enters the show standby command. Which two facts are derived from the output? (Choose two.). R2 becomes the active router after the hold time expires. If Fa0/0 is shut down, the HSRP priority on R2 becomes 80. R2 Fa1/0 regains the primary role when the link comes back up. The router with IP 10.10.1.3 is active because it has a higher IP address. R2 is using the default HSRP hello and hold timers.

Which two parameters are examples of a QoS traffic descriptor? (Choose two.). DSCP. MPLS EXP bits. packet size. bandwidth. ToS.

An engineer must configure a multicast UDP jitter operation. Which configuration should be applied?. Router(config)#ip sla 1 Router(config)#udp-jitter 192.0.2.115 65051. Router(config)#ip sla 1 Router(config)#udp jitter 239.1.1.1 65051 end-point list List source-ip 192.168.1.1. Router(config)#ip sla 1 Router(config)#udp-jitter 192.0.2.115 65051 num-packets 20. Router(config)#ip sla 1 Router(config)#udp jitter 10.0.0.1 source-ip 192.168.1.1.

in a Cisco SD-WAN solution, which two functions are performed by OMP? (Choose two.). advertisement of network prefixes and their attributes. configuration of control and data policies. gathering of underlay infrastructure data. delivery of crypto keys. segmentation and differentiation of traffic.

How can an engineer prevent basic replay attacks from people who try to brute force a system via REST API?. Add a timestamp to the request in the API header. Use a password hash. Add OAuth to the request in the API header. Use HTTPS.

What are the main components of Cisco TrustSec?. Cisco ISE and Enterprise Directory Services. Cisco ISE, network switches, firewalls, and routers. Cisco ISE and TACACS+. Cisco ASA and Cisco Firepower Threat Defense.

What is a characteristic of a WLC that is in master controller mode?. Configuration on the master controller is executed on all wireless LAN controllers. The master controller is responsible for load balancing all connecting clients to other controllers. All new APs that join the WLAN are assigned to the master controller. All wireless LAN controllers are managed by the master controller.

Which Cisco FlexConnect state allows wireless users that are connected to the network to continue working after the connection to the WLC has been lost?. Authentication Down/Switching Down. Authentication-Central/Switch-Local. Authentication-Central/Switch-Central. Authentication-Down/Switch-Local.

Refer to the exhibit. An engineer must prevent the R6 loopback from getting into Area 2 and Area 3 from Area 0. Which action must the engineer take?. Apply a filter list outbound on R3 and R7. Apply a filter list inbound on R2 and R9. Apply a filter list inbound on R3 and R7. Apply a filter list outbound on R7 only.

An engineer must configure and validate a CoPP policy that allows the network management server to monitor router R1 via SNMP while protecting the control plane. Which two commands or command sets must be used? (Choose two.). access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp access-list 150 permit udp 10.0.1.4 0.0.0.0 eq snmp host 10.0.1.2 class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action drop control-plane Service-policy input CoPP-policy. show ip interface brief. show quality-of-service-profile. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action transmit control-plane Service-policy input CoPP-policy. show policy-map control-plane.

Which feature is used to propagate ARP, broadcast, and link-local frames across a Cisco SD-Access fabric to address connectivity needs for silent hosts that require reception of traffic to start communicating?. Multisite Fabric. Native Fabric Multicast. SDA Transit. Layer 2 Flooding.

Refer to the exhibit. Which Python code snippet prints the descriptions of disabled interfaces only?. for interface in netconf_data["GigabitEthernet"]: if interface["enable"] !='false': print(interface["description"]). for interface in netconf_data["GigabitEthernet"]: if interface["enable"] !='true': print(interface["description"]). for interface in netconf_data["GigabitEthernet"]: if interface["disable"] !='true': print(interface["description"]). for interface in netconf_data["GigabitEthernet"]: print(interface["enable"]) print(interface["description"]).

Which measure is used by an NTP server to indicate its closeness to the authoritative time source?. stratum. time zone. latency. hop count.

Refer to the exhibit. An engineer configures OSPF and wants to verify the configuration. Which configuration is applied to this device?. R1(config)#interface Gi0/1 R1(config-if)#ip ospf enable R1(contig-if)#ip ospf network broadcast R1(config-if)#no shutdown. R1(config)#router ospf 1 R1(config-router)#network 0.0.0.0 0.0.0.0 area 0 R1(config-router)#no passive-interface Gi0/1. R1(config)#interface Gi0/1 R1(config-if)#ip ospf 1 area 0 R1(config-if)#no shutdown. R1(config)#router ospf 1 R1(config-router)#network 192.168.50.0 0.0.0.255 area 0.

What is a characteristic of a Type 2 hypervisor?. It eliminates the need for an underlying operating system. Problems in the base operating system can affect the entire system. Its main task is to manage hardware resources between different operating systems. It is completely independent of the operating system.

What is the purpose of a data modeling language?. to describe the structure and meaning of exchanged data. to standardize the procedures that are executed when parsing sent and received data. to establish a framework to process data by using an object-oriented programming approach. to specify the rules for transcoding between text and binary data encodings.

Which IPv4 packet field carries the QoS IP classification marking?. ID. TTL. FCS. ToS.

Which two solutions are used for backing up a Cisco DNA Center Assurance database? (Choose two.). bare metal server. remote server. NFS share. local server. non-linux server.

Refer to the exhibit. Communication between R2 and R3 over FastEthenet1/1 falls. What is the root cause of the failure?. The subnet mask is different between the two interfaces. The interface of R3 is not operational. The wrong type of cable is connected between the two interfaces. IP CEF is disabled on R3.

What is one characteristic of the Cisco SD-Access control plane?. It allows host mobility only in the wireless network. It is based on VXLAN technology. Each router processes every possible destination and route. It stores remote routes in a centralized database server.

A customer transitions a wired environment to a Cisco SD-Access solution. The customer does not want to integrate the wireless network with the fabric. Which wireless deployment approach enables the two systems to coexist and meets the customer requirement?. Deploy the wireless network over the top of the fabric. Implement a Cisco DNA Center to manage the two networks. Deploy a separate network for the wireless environment. Deploy the APs in autonomous mode.

y default, which virtual MAC address does HSRP group 14 use?. 04:17:01:05:7c:0e. 00:05:0c:07:ac:14. 00:00:0c:07:ac:0e. 00:05:5e:19:0c:14.

Which LISP component decapsulates messages and forwards them to the map server responsible for the egress tunnel routers?. Router Locator. Map Resolver. Proxy ETR. Ingress Tunnel Router.

An engineer must design a wireless network for a school system based on these requirements: ✑ The network must be able to triangulate client location based on RSSI. ✑ Each client must be able to sustain 5 Mbps of throughput at all times. ✑ Each classroom has up to 30 clients. ✑ Primary coverage is 5 GHz. Which design should be used?. Place APs in a grid orientation throughout the building, located as close as possible to the center of each classroom. Mount one AP in the center of each classroom. Space APs evenly on both sides of the hallways. Place APs near exterior walls and corners of the building, and fill in the center area with a staggered pattern.

Refer to the exhibit. Which command must be applied to R2 for an OSPF neighborship to form?. network 20.1.1.0 0.0.0.0 area 0. network 20.1.1.2 0.0.0.0 area 0. network 20.0.0.2 0.0.0.3 area 0. network 20.0.0.2 0.0.0.0 area 0.

What is one characteristic of VXLAN?. It supports a maximum of 4096 VLANs. It supports multitenant segments. It uses STP to prevent loops in the underlay network. It uses the Layer 2 header to transfer packets through the network underlay.

What is the function of vBond in a Cisco SD-WAN deployment?. initiating connections with SD-WAN routers automatically. pushing of configuration toward SD-WAN routers. onboarding of SD-WAN routers into the SD-WAN overlay. gathering telemetry data from SD-WAN routers.

Which router is elected the IGMP Querier when more than one router is in the same LAN segment?. The router with the shortest uptime. The router with the longest uptime. The router with the highest IP address. The router with the lowest IP address.

Drag and drop the characteristics from the left onto the switching mechanisms they describe on the right. Select and Place: The forwarding table is created in advance. The router processor is involved with every forwarding decision. All forwarding decisions are made in software. All packets are switched using hardware.

When using BFD in a network design, which consideration must be made?. BFD is used with dynamic routing protocols to provide subsecond convergence. BFD is used with first hop routing protocols to provide subsecond convergence. BFD is used with NSF and graceful to provide subsecond convergence. BFD is more CPU-intensive than using reduced hold timers with routing protocols.

Refer to the exhibit. Traffic is not passing between SW1 and SW2. Which action fixes the issue?. Configure switch port mode to ISL on S2. Configure LACP mode on S1 to active. Configure PAgP mode on S1 to desirable. Configure LACP mode on S1 to passive.

Which Python code snippet must be added to the script to store the changed interface configuration to a local JSON-formatted file?. OutFile = open("ifaces.json","w") OutFile.write(Response.text) OutFile.close(). OutFile = open("ifaces.json","w") OutFile.write(UpdateConfig) OutFile.close(). OutFile = open("ifaces.json","w") json.dump(UpdateConfig,OutFile) OutFile.close(). OutFile = open("ifaces.json","w") OutFile.write(Response.json()) OutFile.close().

Drag and drop the characteristics from the left onto the switching architectures on the right. Select and Place: It optimizes the switching process to handle larger packet volumes. It is referred to as "software switching". The general purpose CPU is in charge of packet switching.

A server running Linux is providing support for virtual machines along with DNS and DHCP services for a small business. Which technology does this represent?. container. Type 1 hypervisor. Type 2 hypervisor. hardware pass-thru.

Drag and drop the characteristics from the left onto the deployment types on the right. Select and Place: It is responsible for hardware maintenance. It provides on-demand scalability. Maintenance is handled by a third party. Scalability requires time and effort.

Drag and drop the characteristics from the left onto the routing protocols they describe on the right. Select and Place: maintains alternative loop-free backup path if available. quickly computes new path upon link failure. selects route using the DUAL algorithm.

An engineer is configuring Local WebAuth on a Cisco Wireless LAN Controller. According to RFC 5737, which virtual IP address must be used in this configuration?. 172.20.10.1. 192.168.0.1. 1.1.1.1. 192.0.2.1.

Refer to the exhibit. The OSPF neighborship fails between two routers. What is the cause of this issue?. The OSPF process is stopped on the neighbor router. The OSPF router ID is missing on this router. The OSPF router ID is missing on the neighbor router. There is an MTU mismatch between the two routers.

In Cisco DNA Center what is the integration API?. southbound consumer-facing RESTful API, which enables network discovery and configuration management. westbound interface, which allows the exchange of data to be used by ITSM, IPAM and reporting. an interface between the controller and the network devices, which enables network discovery and configuration management. northbound consumer-facing RESTful API which enables network discovery and configuration management.

An engineer must configure a new WLAN that allows a user to enter a passphrase and provides forward secrecy as a security measure. Which Layer 2 WLAN configuration is required on the Cisco WLC?. WPA3 Enterprise. WPA2 Personal. WPA2 Enterprise. WPA3 Personal.

Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right. Select and Place: declarative. uses Ruby. uses Python. procedural.

An engineer must create a script to append and modify device entries in a JSON-formatted file. The script must work as follows: ✑ Until interrupted from the keyboard, the script reads in the hostname of a device, its management IP address operating system type, and CLI remote access protocol. ✑ After being interrupted, the script displays the entered entries and adds them to the JSON-formatted file, replacing existing entries whose hostname matches. The contents of the JSON-formatted file are as follows: { "examplerouter":{ "ip":"203.0.113.1", "os":"ios-xe", "protocol":"ssh" }, ... } Drag and drop the statements onto the blanks within the code to complete the script. Not all options are used. Select and Place: while True:. exept. import.json. File.open(). File.close(). File = open.

Refer to the exhibit. An engineer configures HSRP and enters the show standby command. Which two facts about the network environment are derived from the output? (Choose two.). If the local device fails to receive a hello from the active router for more than 5 seconds, it becomes the active router. If a router with a higher IP address and same HSRP priority as the active router becomes available that router becomes the new active router 5 seconds later. The virtual IP address of the HSRP group is 10.1.1.1. The hello and hold timers are set to custom values. The local device has a higher priority setting than the active router.

Refer to the exhibit. After configuring the BGP network an engineer verifies that the path between Server1 and Server2 is functional. Why did RouterSF choose the route from RouterDAL instead of the route from RouterCHI?. BGP is not running on RouterCHI. There is a static route in RouterSF for 10.0.0.0/24. The route from RouterDAL has a lower MED. The Router-ID for Router DAL is lower than the Router-ID for RouterCHI.

Drag and drop the LISP components on the left to the correct description on the right. Select and Place: ETR. map server. EID.

Refer to the exhibit. Which command set must be added to permit and log all traffic that comes from 172.20.10.1 in interface GigabitEthernet0/1 without impacting the functionality of the access list?. Router(config)#access-list 100 permit ip host 172.20.10.1 any log Router(config)#interface GigabitEthernet0/1 Router(config-if)#access-group 100 in. Router(config)#access-list 100 seq 5 permit ip host 172.20.10.1 any log Router(config)#interface GigabitEthernet0/1 Router(config-if)#access-group 100 in. Router(config)#ip access-list extended 100 Router(config-ext-nacl)#5 permit ip 172.20.10.0 0.0.0.255 any log Router(config)#interface GigabitEthernet0/1 Router(config-if)#access-group 100 in. Router(config)#no access-list 100 permit ip 172.16.0.0 0.0.15.255 any Router(config)#access-list 100 permit ip 172.16.0.0 0.0.15.255 any log Router(config)#interface GigabitEthernet0/1 Router(config-if)#access-group 100 in.

Which option must be used to support a WLC with an IPv6 management address and 100 Cisco Aironet 2800 Series access points that will use DHCP to register?. 43. 52. 60. 82.

Refer to the exhibit. Which configuration set implements Control Plane Policing for SSH and Telnet?. Router(config)#class-map inspect match-all Router(config-cmap)#match access-group 100 Router(config-cmap)#match access-group 101 Router(config)#policy-map CoPP Router(config-pmap)#class class-control Router(config-pmap-c)#policy 1000000 conform-action transmit Router(config)#control-plane Router(config-cp)#service-policy output CoPP. Router(config)#class-map match-all class-control Router(config-cmap)#match access-group 100 Router(config-cmap)#match access-group 101 Router(config)#policy-map CoPP Router(config-pmap)#class class-control Router(config-pmap-c)#policy 1000000 conform-action transmit Router(config)#control-plane Router(config-cp)#service-policy output CoPP. Router(config)#class-map class-telnet Router(config-cmap)#match access-group 100 Router(config)#class-map class-ssh Router(config-cmap)#match access-group 101 Router(config)#policy-map CoPP Router(config-pmap)#class class-telnet-ssh Router(config-pmap-c)#policy 1000000 conform-action transmit Router(config)#control-plane Router(config-cp)#service-policy input CoPP. Router(config)#class-map match-any class-control Router(config-cmap)#match access-group 100 Router(config-cmap)#match access-group 101 Router(config)#policy-map CoPP Router(config-pmap)#class class-control Router(config-pmap-c)#policy 1000000 conform-action transmit Router(config)#control-plane Router(config-cp)#service-policy input CoPP.

Which design principle states that a user has no access by default to any resource, and unless a resource is explicitly granted, it should be denied?. least privilege. fail-safe defaults. economy of mechanism. complete mediation.

A customer wants to connect a device to an autonomous Cisco AP configured as a WGB. The WGB is configured properly: however, it fails to associate to a CAPWAP-enabled AP. Which change must be applied in the advanced WLAN settings to resolve this issue?. Enable Aironet IE. Enable passive client. Disable AAA override. Disable FlexConnect local switching.

By default, which virtual MAC address does HSRP group 32 use?. 04:19:01:05:2e:32. 05:5e:5c:ac:0c:32. 00:00:0c:07:ac:20. 00:5e:0c:07:ac:20.

Which two Cisco SD-WAN components exchange OMP information? (Choose two.). WAN Edge. vBond. vManage. vAnalytics. vSmart.

What does the number in an NTP stratum level represent?. The number of hops it takes to reach the authoritative time source. The amount of offset between the device clock and true time. The number of hops it takes to reach the primary time server. The amount of drift between the device clock and true time.

Refer to the exhibit. Clients report that they cannot connect to this SSID using the provided PSK. Which action will resolve this issue?. Apply the correct interface to this WLAN. Apply the changes this SSID. Select the PSK under authentication key management. Define the correct Radio Policy.

Which two results occur if Cisco DNA Center loses connectivity to devices in the SD-Access fabric? (Choose two.). Users lose connectivity. Already connected users are unaffected but new users cannot connect. All devices reload after detecting loss of connection to Cisco DNA Center. User connectivity is unaffected. Cisco DNA Center is unable to collect monitoring data in Assurance.

Refer to the exhibit. The connection between SW1 and SW2 is not operational. Which two actions resolve the issue? (Choose two.). configure switchport nonegotiate on SW1. configure switchport nonegotiate on SW2. configure switchport mode access on SW2. configure switchport mode trunk on SW2. configure switchport mode dynamic desirable on SW2.

What does a YANG model provide?. standardized data structure independent of the transport protocols. creation of transport protocols and their interaction with the OS. user access to interact directly with the CLI of the device to receive or modify network configurations. standardized data structure that can be used only with NETCONF or RESTCONF transport protocols.

A system must validate access rights to all its resources and must not rely on a cached permission matrix. If the access level to a given resource is revoked but is not reflected in the permission matrix, the security is violated. Which term refers to this REST security design principle?. economy of mechanism. complete mediation. separation of privilege. least common mechanism.

Refer to the exhibit. Which command set completes the ERSPAN session configuration?. monitor session 11 type erspan-destination destination interface GigabitEthemet4 source erspan-id 11 ip address 10.10.10.10. monitor session 12 type erspan-destination destination interface GigabitEthernet4 source erspan-id 12 ip address 10.10.10.10. monitor session 11 type erspan-destination destination interface GigabitEthernet4 source erspan-id 12 ip address 10.100.10.10. monitor session 12 type erspan-destination destination interface GigabitEthernet4 source erspan-id 11 ip address 10.10.10.10.

"HTTP/1.1 204 No Content" is returned when the curl -i -X DELETE command is issued. Which situation has occurred?. The command succeeded in deleting the object. The object was located at the URI, but it could not be deleted. The object could not be located at the URI path. The URI was invalid.

What is the recommended minimum SNR for voice applications on wireless networks?. 10. 15. 20. 25.

Refer to the exhibit. What are two results of the NAT configuration? (Choose two.). Packets with a destination of 200.1.1.1 are translated to 10.1.1.1 or .2, respectively. A packet that is sent to 200 1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1. R1 is performing NAT for inside addresses and outside address. R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts. R1 processes packets entering E0/0 and S0/0 by examining the source IP address.

A network engineer must configure a switch to allow remote access for all feasible protocols Only a password must be requested for device authentication and all idle sessions must be terminated in 30 minutes. Which configuration must be applied?. line vty 0 15 password cisco transport input telnet ssh exec-timeout 30 0. line vty 0 15 password cisco transport input all exec-timeout 0 30. username cisco privilege 15 cisco line vty 0 15 transport input telnet ssh login local exec-timeout 0 30. line console 0 password cisco exec-timeout 30 0.

When does a Cisco StackWise primary switch lose its role?. when a switch with a higher priority is added to the stack. when a stack member fails. when the priority value of a stack member is changed to a higher value. when the stack primary is reset.

Refer to the exhibit. A network engineer troubleshoots an issue with the port channel between SW1 and SW2. Which command resolves the issue?. SW2(config-if)#switchport mode trunk. SW1(config-if)#channel-group 10 mode active. SW1(config-if)#channel-group 10 mode desirable. SW2(config-if)#channel-group 10 mode on.

A customer has a wireless network deployed within a multi-tenant building. The network provides client access, location-based services and is monitored using Cisco DNA Center. The security department wants to locate and track malicious devices based on threat signatures. Which feature is required for this solution?. malicious rogue rules on Cisco DNA Center. malicious rogue rules on the WLC. Cisco aWIPS policies on the WLC. Cisco aWIPS policies on Cisco DNA Center.

In a Cisco SD-Access wireless environment, which device is responsible for hosting the anycast gateway?. fusion router. control plane node. fabric border node. fabric edge node.

Refer to the exhibit. The port channel between the switches does not work as expected. Which action resolves the issue?. Interface Gi0/1 on Switch1 must be configured as desirable. Trunking must be enabled on both interfaces on Switch2. Interface Gi0/0 on Switch2 must be configured as passive. Interface Gi0/1 on Switch2 must be configured as active.

Refer to the exhibit. Which set of commands is required to configure and verify the VRF for Site 1 Network A on router R1?. R1#ip routing R1#(config)#ip vrf 100 R1#(config-vrf)#rd 100:1 R1#(config-vrf)# address family ipv4 ! R1(config)#interface Gi0/2 R1(config-if)#ip address 10.0.1.1 255.255.255.0 R1#show ip route. R1#ip routing R1#(config)#ip vrf 100 ! R1(config)#interface Gi0/2 R1(config-if)#ip address 10.0.1.1 255.255.255.0 R1#showip route. R1#ip routing R1#(config)#ip vrf 100 ! R1(config)#interface Gi0/2 R1(config-if)#ip vrf forwarding 100 R1(config-if)#ip address 10.0.1.1 255.255.255.0 R1#show ip vrf. R1#ip routing R1#(config)#ip vrf 100 ! R1(config)#interface Gi0/2 R1(config-if)#ip address 10.0.1.1 255.255.255.0 R1#show ip vrf.

How does Protocol Independent Multicast function?. In sparse mode, it establishes neighbor adjacencies and sends hello messages at 5-second intervals. It uses the multicast routing table to perform the multicast forwarding function. It uses unicast routing information to perform the multicast forwarding function. It uses broadcast routing information to perform the multicast forwarding function.

Which VXLAN component is used to encapsulate and decapsulate Ethernet frames?. VNI. GRE. VTEP. EVPN.

Refer to the exhibit. Assuming all links are functional, which path does PC1 take to reach DSW1?. PC1 goes from ALSW1 to DSW2 to CORE to DSW1. PC1 goes from ALSW1 to DSW2 to ALSW2 to DSW1. PC1 goes from ALSW1 to DSW2 to DSW1. PC1 goes from ALSW1 to DSW1.

By default, which virtual MAC address does HSRP group 22 use?. c0:41:99:98:06:16. 00:00:0c:07:ac:16. 00:00:0c:07:ac:22. c0:07:0c:ac:00:22.

Refer to the exhibit. Both controllers are in the same mobility group. Which result occurs when client 1 roams between APs that are registered to different controllers in the same WLAN?. The client database entry moves from controller A to controller B. A CAPWAP tunnel is created between controller A and controller B. Client 1 uses an EoIP tunnel to contact controller A. Client 1 contacts controller B by using an EoIP tunnel.

Where in Cisco DNA Center is documentation of each API call organized by its functional area?. Developer Toolkit. platform management. platform bundles. Runtime Dashboard.

Refer to the exhibit. An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic. Which two configurations must be applied to drop these types of traffic when it continuously exceeds 320 kbps? (Choose two.). R1(config-pmap)#class CLASS-CoPP-Management R1(config-pmap-c)#police 32 conform-action transmit exceed-action drop violate-action transmit. R1(config)#policy-map POLICY-CoPP R1(config-pmap)#class CLASS-CoPP-Management R1(config-pmap-c)#police 320000 conform-action transmit exceed-action drop violate-action drop. R1(config)#policy-map POLICY-CoPP R1(config-pmap)#class CLASS-CoPP-Management R1(config-pmap-c)#police 320000 conform-action transmit exceed-action transmit violate-action drop. R1(config)#control-plane R1(config-cp)# service-policy output POLICY-CoPP. R1(config)#control-plane R1(config-cp)# service-policy input POLICY-CoPP.

Which free application has the ability to make REST calls against Cisco DNA Center?. API Explorer. REST Explorer. Postman. Mozilla.

If AP power level is increased from 25 mW to 100 mW, what is the power difference in dBm?. 6 dBm. 14 dBm. 17 dBm. 20 dBm.

Refer to the exhibit. Which command is required to verify NETCONF capability reply messages?. show netconf rpc-reply. show netconf | section rpc-reply. show netconf schema | section rpc-reply. show netconf xml rpc-reply.

When is an external antenna used inside a building?. only when using Mobility Express. only when using 2.4 GHz. when it provides the required coverage. only when using 5 GHz.

A company requires a wireless solution to support its main office and multiple branch locations. All sites have local Internet connections and a link to the main office for corporate connectivity. The branch offices are managed centrally. Which solution should the company choose?. Cisco DNA Spaces. Cisco Unified Wireless Network. Cisco Mobility Express. Cisco Catalyst switch with embedded controller.

Which QoS feature uses the IP Precedence bits in the ToS field of the IP packet header to partition traffic into different priority levels?. marking. shaping. policing. classification.

Refer to the exhibit. Which two commands are required on router R1 to block FTP and allow all other traffic from the Branch 2 network? (Choose two.). access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data access-list 101 permit ip any any. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data access-list 101 permit ip any any. interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.252 ip access-group 101 out. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp access-list 101 permit ip any any. interface GigabitEthernet0/0 ip address 10.0.101.1 255.255.255.252 ip access-group 101 in.

A company recently decided to use RESTCONF instead of NETCONF, and many of their NETCONF scripts contain the operation <edit-config> (operation="create"). Which RESTCONF operation must be used to replace these statements?. PUT. CREATE. GET. POST.

An engineer is configuring RADIUS-Based Authentication with EAP MS-CHAPv2 is configured on a client device. Which outer method protocol must be configured on the ISE to support this authentication type?. LDAP. EAP-FAST. EAP-TLS. PEAP.

Refer to the exhibit. Hosts FC1, PC2; and PC3 must access resources on Server1. An engineer configures NAT on Router R1 to enable the communication and enters the show command to verify operation. Which IP address is used by the hosts when they communicate globally to Server1?. random addresses in the 155.1.1.0/24 range. 155.1.1.1. their own address in the 10.10.10.0/24 range. 155.1.1.5.

Using the EIRP formula, what parameter is subtracted to determine the EIRP value?. transmitter power. antenna cable loss. antenna gain. signal-to-noise ratio.

What is one main REST security design principle?. separation of privilege. password hashing. confidential algorithms. OAuth.

Refer to the exhibit. R1 has a BGP neighborship with a directly connected router on interface Gi0/0. Which command set is applied between the iterations of show ip bgp 2.2.2.2?. R1(config)#no ip route 192.168.50.2 255.255.255.255 Gi0/0. R1(config)#ip route 2.2.2.2 255.255.255.255 192.168.50.2. R1(config)#router bgp 65002 R1(config-router)#neighbor 192.168.50.2 shutdown. R1(config)#router bgp 65001 R1(config-router)#neighbor 192.168.50.2 shutdown.

After a redundant route processor failure occurs on a Layer 3 device, which mechanism allows for packets to be forwarded from a neighboring router based on the most recent tables?. BFD. RP failover. NSF. RPVST+.

Which technology reduces the implementation of STP and leverages both unicast and multicast?. VLAN. VPC. VXLAN. VSS.

A customer has recently implemented a new wireless infrastructure using WLC-5520s at a site directly next to a large commercial airport. Users report that they intermittently lose Wi-Fi connectivity, and troubleshooting reveals it is due to frequent channel changes. Which two actions fix this issue? (Choose two.). Enable DFS channels because they are immune to radar interference. Restore the DCA default settings because this automatically avoids channel interference. Remove UNII-2 and Extended UNII-2 channels from the 5 Ghz channel list. Disable DFS channels to prevent interference with Doppler radar. Configure channels on the UNII-2 and the Extended UNII-2 sub-bands of the 5 Ghz band only.

An engineer configures VRRP and issues the show commands to verify operation. What does the engineer confirm about VRRP group 1 from the output?. Communication between VRRP members is encrypted using MD5. There is no route to 10.10.1.1/32 in R2's routing table. R1 is primary if 10.10.1.1/32 is in its routing table. If R1 reboots, R2 becomes the primary virtual router until R2 reboots.

An engineer is working with the Cisco DNA Center API. Drag and drop the methods from the left onto the actions that they are used for on the right. Select and Place: GET. POST. DELETE. PUT.

Drag and drop the characteristics from the left onto the QoS components they describe on the right. Select and Place: applied on traffic to convey information to a downstream device. distinguishes traffic types. process used to buffer traffic that exceeds a predefined rate. permits traffic to pass through the device while retaining DSCP/COS values.

What are two benefits of implementing a Cisco SD-WAN architecture? (Choose two.). It provides resilient and effective traffic flow using MPLS. It improves endpoint protection by integrating embedded and cloud security features. It allows configuration of application-aware policies with real time enforcement. It simplifies endpoint provisioning through standalone router management. It enforces a single scalable hub-and-spoke topology.