Refer to the exhibit. Which two commands, when configured on router R1, fulfill these requirements? (Choose two.) Packets towards the entire network 2001:db8:2::/64 must be forwarded through router R2.Packets toward host 2001:db8:23::14 preferably must be forwarded through R3.
A. Ipv6 route 2001:db8:23::/128 fd00:12::2
B. Ipv6 route 2001:db8:23::14/128 fd00:13::3
C. Ipv6 route 2001:db8:23::14/64 fd00:12::2
D. Ipv6 route 2001:db8:23::/64 fd00:12::2
E. Ipv6 route 2001:db8:23::14/64 fd00:12::2 200
Correct Answer: BD Section: (none) Explanation
When a site-to-site VPN is configured, which IPsec mode provides encapsulation and encryption of the entire original P packet?
A. IPsec tunnel mode with AH
B. IPsec transport mode with AH
C. IPsec tunnel mode with ESP
D. IPsec transport mode with ESP
Correct Answer: C Section: (none)Explanation
Refer to the exhibit. An administrator must turn off the Cisco Discovery Protocol on the port configured with address last usableaddress in the 10.0.0.0/30 subnet. Which command set meets the requirement?
A. interface gi0/1 no cdp enable
B. interface gi0/1 clear cdp table
C. interface gi0/0 no cdp advertise-v2
D. interface gi0/0 no cdp run
Correct Answer: A
What is a role of access points in an enterprise network?
A. connect wireless devices to a wired network
B. support secure user logins to devices or the network
C. integrate with SNMP in preventing DDoS attacks
D. serve as a first line of defense in an enterprise network
Correct Answer: A
What is a similarity between OM3 and OM4 fiber optic cable?
A. Both have a 50 micron core diameter
B. Both have a 9 micron core diameter
C. Both have a 62.5 micron core diameter
D. Both have a 100 micron core diameter
Correct Answer: A
Refer to the exhibit. The entire contents of the MAC address table are shown. Sales-4 sends a data frame to Sales-1. What does the switch do as it receives the frame from Sales-4?
A. Perform a lookup in the MAC address table and discard the frame due to a missing entry.
B. Insert the source MAC address and port into the forwarding table and forward the frame to Sales-1.
C. Map the Layer 2 MAC address to the Layer 3 IP address and forward the frame.
D. Flood the frame out of all ports except on the port where Sales-1 is connected.
Correct Answer: B
What describes the operation of virtual machines?
A. Virtual machines are responsible for managing and allocating host hardware resources
B. In a virtual machine environment, physical servers must run one operating system at a time.
C. Virtual machines are the physical hardware that support a virtual environment.
D. Virtual machines are operating system instances that are decoupled from server hardware
Correct Answer: B
Refer to the exhibit. Only four switches are participating in the VLAN spanning-tree process. Branch-1 priority 614440 Branch-2: priority 39882416Branch-3: priority 0 Branch-4: root primaryWhich switch becomes the permanent root bridge for VLAN 5?
A. Branch-1
B. Branch-2
C. Branch-3
D. Branch-4
Correct Answer: C
When deploying syslog, which severity level logs informational message?
A. 0
B. 2
C. 4
D. 6
Correct Answer: D
Refer to the exhibit. Shortly after SiteA was connected to SiteB over a new single-mode fiber path users at SiteA report intermittentconnectivity issues with applications hosted at SiteB What is the cause of the intermittent connectivity issue?
A. Interface errors are incrementing
B. An incorrect SFP media type was used at SiteA
C. High usage is causing high latency
D. The sites were connected with the wrong cable type
Correct Answer: C
Refer to the exhibit. An engineer must configure GigabitEthernet1/1 to accommodate voice and data traffic Which configuration accomplishes this task?
A. Interface gigabitethernet 1/1Switchport mode access Switchport access vlan 300 Switchport voice vlan 400
B. Interface gigabitethernet 1/1 Switchport mode trunkSwitchport trunk vlan 300 Switchport voice vlan 400
C. Interface gigabitethernet 1/1 Switchport mode trunkSwitchport trunk vlan 300 Switchport trunk vlan 400
D. Interface gigabitethernet 1/1 Switchport mode accessSwitchport voice vlan 300 Switchport access vlan 400
Correct Answer: A
Which technology is appropriate for communication between an SDN controller and applications running over the network?
A. OpenFlow
B. REST API
C. NETCONF
D. Southbound API
Correct Answer: B
Which security program element involves installing badge readers on data-center doors to allow workers to enter and exit based on their job roles?
A. role-based access control
B. biometrics
C. multifactor authentication
D. physical access control
Correct Answer: D
Which network action occurs within the data plane?
A. compare the destination IP address to the IP routing table
B. run routing protocols (OSPF, EIGRP, RIP, BGP)
C. make a configuration change from an incoming NETCONF RPC
D. reply to an incoming ICMP echo request
Correct Answer: A
Which networking function occurs on the data plane?
A. forwarding remote client/server traffic
B. facilitates spanning-tree elections
C. processing inbound SSH management traffic
D. sending and receiving OSPF Hello packets
Correct Answer: A
A network administrator must to configure SSH for remote access to router R1 The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client. Which configuration, when applied, meets the requirements?
A. R1#enable R1#configure terminal R1(config)#ip domain-name cisco.comR1(config)#crypto key generate ec keysize 2048
B. R1#enable R1#configure terminal R1(config)#ip domain-name cisco.comR1(config)#crypto key generate rsa modulus 1024
C. R1#enable R1#configure terminal R1(config)#ip domain-name cisco.comR1(config)#crypto key generate ec keysize 1024
D. R1#enable R1#configure terminal R1(config)#ip domain-name cisco.comR1(config)#crypto key encrypt rsa name myKey
Correct Answer: B
Which protocol does an access point use to draw power from a connected switch?
A. Internet Group Management Protocol
B. Adaptive Wireless Path Protocol
C. Cisco Discovery Protocol
D. Neighbor Discovery Protocol
Correct Answer: C
What is the benefit of using FHRP?
A. reduced management overhead on network routers
B. balancing traffic across multiple gateways in proportion to their loads
C. higher degree of availability
D. reduced ARP traffic on the network
Correct Answer: C
An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?
A. Enable Security Association Teardown Protection and set the SA Query timeout to 10
B. Enable MAC filtering and set the SA Query timeout to 10
C. Enable 802.1x Layer 2 security and set me Comeback timer to 10
D. Enable the Protected Management Frame service and set the Comeback timer to 10
Correct Answer: C
A network engineer must configure the router R1 GigabitEthernet1/1 interface to connect to the router R2 GigabitEthernet1/1 interface.For the configuration to be applied the engineer must compress the address 2001:0db8:0000:0000:0500:000a:400F:583B. Which command must be issued on the interface?
A. ipv6 address 2001:0db8::5: a: 4F 583B
B. ipv6 address 2001:db8::500:a:400F:583B
C. ipv6 address 2001 db8:0::500:a:4F:583B
D. ipv6 address 2001::db8:0000::500:a:400F:583B
Correct Answer: B
What are two characteristics of the distribution layer in a three-tier network architecture? (Choose two.)
A. serves as the network aggregation point
B. provides a boundary between Layer 2 and Layer 3 communications
C. designed to meet continuous, redundant uptime requirements
D. is the backbone for the network topology
E. physical connection point for a LAN printer
Correct Answer: AB Section: (none)Explanation
What are two similarities between UTP Cat 5e and Cat 6a cabling? (Choose two.)
A. Both operate at a frequency of 500 MHz.
B. Both support runs of up to 55 meters.
C. Both support runs of up to 100 meters
D. Both support speeds of at least 1 Gigabit
E. Both support speeds up to 10 Gigabit
Correct Answer: CD Section: (none)Explanation
Which access layer threat-mitigation technique provides security based on identity?
A. Dynamic ARP Inspection
B. using a non-default native VLAN
C. 802.1x
D. DHCP snooping
Correct Answer: C Section: (none)Explanation
Which plane is centralized by an SON controller?
A. management-plane
B. control-plane
C. data-plane
D. services-plane
Correct Answer: B Section: (none)Explanation
Which function is performed by DHCP snooping?
A. propagates VLAN information between switches
B. listens to multicast traffic for packet forwarding
C. provides DDoS mitigation
D. rate-limits certain traffic
Correct Answer: A Section: (none)Explanation
A network administrator is asked to configure VLANS 2, 3 and 4 for a new implementation. Some ports must be assigned to the newVLANS with unused remaining. Which action should be taken for the unused ports?
A. configure port in the native VLAN
B. configure ports in a black hole VLAN
C. configure in a nondefault native VLAN
D. configure ports as access ports
Correct Answer: B Section: (none)Explanation
What are two benefits of using the PortFast feature? (Choose two)
A. Enabled interfaces are automatically placed in listening state
B. Enabled interfaces come up and move to the forwarding state immediately
C. Enabled interfaces never generate topology change notifications.
D. Enabled interfaces that move to the learning state generate switch topology change notifications
E. Enabled interfaces wait 50 seconds before they move to the forwarding state
Correct Answer: BC Section: (none)Explanation
Which two events occur automatically when a device Is added to Cisco DNA Center? (Choose two.)
A. The device Is assigned to the Global site.
B. The device Is placed into the Unmanaged state.
C. The device Is placed into the Provisioned state.
D. The device Is placed into the Managed state.
E. The device is assigned to the Local site.
Correct Answer: AB Section: (none)Explanation
An engineer configures interface Gi1/0 on the company PE router to connect to an ISP Neighbor discovery is disabled. Which action is necessary to complete the configuration if the ISP uses third-party network devices?
A. Enable LLDP globally
B. Disable autonegotiation
C. Disable Cisco Discovery Protocol on the interface
D. Enable LLDP-MED on the ISP device
Correct Answer: D Section: (none) Explanation
What must be considered when using 802.11a?
A. It is compatible with 802 lib- and 802 11-compliant wireless devices
B. It is used in place of 802 11b/g when many nonoverlapping channels are required
C. It is susceptible to interference from 2.4 GHz devices such as microwave ovens.
D. It is chosen over 802 11b/g when a lower-cost solution is necessary
Correct Answer: B Section: (none)Explanation
What does physical access control regulate?
A. access to spec fie networks based on business function
B. access to servers to prevent malicious activity
C. access to computer networks and file systems
D. access to networking equipment and facilities
Correct Answer: D Section: (none)Explanation
What are network endpoints?
A. act as routers to connect a user to the service prowler network
B. a threat to the network if they are compromised
C. support inter-VLAN connectivity
D. enforce policies for campus-wide traffic going to the internet
Correct Answer: B Section: (none)Explanation
How does QoS optimize voice traffic?
A. reducing bandwidth usage
B. by reducing packet loss
C. by differentiating voice and video traffic
D. by increasing jitter
Correct Answer: C Section: (none)Explanation
What is the difference in data transmission delivery and reliability between TCP and UDP?
A. TCP transmits data at a higher rate and ensures packet delivery. UDP retransmits lost data to ensure applications receive the dataon the remote end.
B. UDP sets up a connection between both devices before transmitting data. TCP uses the three-way handshake to transmit data witha reliable connection
C. UDP is used for multicast and broadcast communication. TCP is used for unicast communication and transmits data at a higher rate with error checking.
D. TCP requires the connection to be established before transmitting data. UDP transmits data at a higher rate without ensuring packetdelivery.
Correct Answer: D Section: (none)Explanation
What does an SDN controller use as a communication protocol to relay forwarding changes to a southbound API?
A. OpenFlow
B. Java
C. REST
D. XML
Correct Answer: A Section: (none)Explanation
What uses HTTP messages to transfer data to applications residing on different hosts?
A. OpenFlow
B. OpenStack
C. OpFlex
D. REST
Correct Answer: D Section: (none) Explanation
When a WLAN with WPA2 PSK is configured in the Wireless LAN Controller GUI which format is supported?
A. Unicode
B. base64
C. decimal
D. ASCII
Correct Answer: D Section: (none)Explanation
Which 802.11 management frame type is sent when a client roams between access points on the same SSID?
A. Reassociation Request
B. Probe Request
C. Authentication Request
D. Association Request
Correct Answer: A Section: (none)Explanation
An engineer observes high usage on the 2.4GHz channels and lower usage on the 5GHz channels. What must be configured to allow clients to preferentially use 5GHz access points?
A. Re- Anchor Roamed Clients
B. 11ac MU-MIMO
C. OEAP Split Tunnel
D. Client Band Select
Correct Answer: D Section: (none)Explanation
What is a characteristic of private IPv4 addressing?
A. traverse the Internet when an outbound ACL is applied
B. issued by IANA in conjunction with an autonomous system number
C. composed of up to 65.536 available addresses
D. used without tracking or registration
Correct Answer: D Section: (none)Explanation
Refer to the exhibit. Which command must be executed for Gi1.1 on SW1 to become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk mode?
A. switchport mode trunk
B. switchport mode dot1-tunnel
C. switchport mode dynamic auto
D. switchport mode dynamic desirable
Correct Answer: C Section: (none)Explanation
What are two improvements provided by automation for network management in an SDN environment? (Choose two)
A. Data collection and analysis tools establish a baseline for the network
B. Artificial intelligence identifies and prevents potential design failures.
C. Machine learning minimizes the overall error rate when automating troubleshooting processes
D. New devices are onboarded with minimal effort
E. Proprietary Cisco APIs leverage multiple network management tools.
Correct Answer: BE Section: (none)Explanation
When DHCP is configured on a router, which command must be entered so the default gateway is automatically distributed?
A. default-router
B. default-gateway
C. ip helper-address
D. dns-server
Correct Answer: A
What is a network appliance that checks the state of a packet to determine whether the packet is legitimate?
A. Layer 2 switch
B. load balancer
C. firewall
D. LAN controller
Correct Answer: C
How is the native VLAN secured in a network?
A. separate from other VLANs within the administrative domain
B. give it a value in the private VLAN range
C. assign it as VLAN 1
D. configure it as a different VLAN ID on each end of the link
Correct Answer: A
Which command on a port enters the forwarding state immediately when a PC is connected to it?
A. switch(config)#spanning-tree portfast default
B. switch(config)#spanning-tree portfast bpduguard default
C. switch(config-if)#spanning-tree portfast trunk
D. switch(config-if)#no spanning-tree portfast
Correct Answer: C
Refer to Exhibit. Which configuration must be applied to the router that configures PAT to translate all addresses in VLAN 200 whileallowing devices on VLAN 100 to use their own IP addresses?
A. Router1(config)#access-list 99 permit 209.165.201.2 0.0.0.0Router1(config)#ip nat inside source list 99 interface gi 1/0/0 overload Router1(config)#interface gi2/0/1.200Router1(config-if)#ip nat inside Router1(config)#interface gi 1/0/0Router1(config-if)#ip nat outside
B. Router1(config)#access-list 99 permit 209.165.201.2 255.255.255.255Router1(config)#ip nat inside source list 99 interface gi 1/0/0 overload Router1(config)#interface gi2/0/1.200Router1(config-if)#ip nat inside Router1(config)#interface gi 1/0/0Router1(config-if)#ip nat outside
C. Router1(config)#access-list 99 permit 192.168.100.0 0.0.0.255 Router1(config)#ip nat inside source list 99 interface gi 1/0/0 overloadRouter1(config)#interface gi2/0/1.200 Router1(config-if)#ip nat insideRouter1(config)#interface gi 1/0/0 Router1(config-if)#ip nat outside
D. Router1(config)#access-list 99 permit 192.168.100.32 0.0.0.31 Router1(config)#ip nat inside source list 99 interface gi 1/0/0 overloadRouter1(config)#interface gi2/0/1.200 Router1(config-if)#ip nat insideRouter1(config)#interface gi 1/0/0 Router1(config-if)#ip nat outside
Correct Answer: D
Refer to the exhibit. An administrator must configure interfaces Gi1/1 and Gi1/3 on switch SW11 PC-1 and PC-2 must be placed in theData VLAN and Phone-1 must be placed in the Voice VLAN Which configuration meets these requirements?
A. interface gigabitethernet 1/1 Switchport mode access Switchport access vlan 8 ! Intterface gigabitethernet 1/3 Switchport mode access Switchport voice vlan 8 Switchport access vlan 9
B. interface gigabitethernet 1/1 Switchport mode access Switchport access vlan 9 ! Intterface gigabitethernet 1/3 Switchport mode trunk Switchport trunk vlan 8 Switchport trunk vlan 9
C. interface gigabitethernet 1/1 Switchport mode access Switchport access vlan 8 ! Intterface gigabitethernet 1/3 Switchport mode access Switchport access vlan 8 Switchport voice vlan 9
D. interface gigabitethernet 1/1 Switchport mode access Switchport access vlan 8 ! Intterface gigabitethernet 1/3 Switchport mode trunk Switchport trunk vlan 8 Switchport voice vlan 9
Correct Answer: C
Refer to the exhibit. Which switch becomes the root of the spanning tree for VLAN 110?
A. Switch 1
B. Switch 2
C. Switch 3
D. Switch 4
Correct Answer: B Section: choice Explanation
What is a benefit of VRRP?
A. It provides traffic load balancing to destinations that are more than two hops from the source.
B. It provides the default gateway redundancy on a LAN using two or more routers.
C. It allows neighbors to share routing table information between each other.
D. It prevents loops in a Layer 2 LAN by forwarding all traffic to a root bridge, which then makes the final forwarding decision.
Correct Answer: B