QUESTION 21
What does Cisco recommend when you are enabling Cisco IOS IPS?
A. Do not enable all the signatures at the same time.
B. Do not enable the ICMP signature.
C. Disable the Zone-Based Policy Firewall because it is not compatible with Cisco IOS IPS.
D. Disable CEF because it is not compatible with Cisco IOS IPS.
Answer: A
QUESTION 22
Which two statements are true about Unicast Reverse Path Forwarding Loose Mode? (Choose two.)
A. It is used in multihome network scenarios.
B. It can be used with BGP to mitigate DoS and DDoS.
C. It does not need to have CEF enabled.
D. It is enabled via the interface level command ip verify unicast reverse-path.
E. It cannot be used with “classification” access lists.
Answer: AB
QUESTION 23
Which three protocols should be explicitly managed by using a CoPP policy on an Internet border router? (Choose three.)
A. SMTP
B. ICMP
C. BGP
D. SSH
E. RTP
F. BitTorrent
G. VTP
Answer: BCD
QUESTION 24
What is true about IP Source Guard with port security?
A. Binding should be manually configured.
B. It is not supported if IEEE 802.1x port-based authentication is enabled
C. The DHCP server must support option 82, or the client is not assigned an IP address.
D. It filters based on source IP address only.
Answer: C
QUESTION 25
Which two commands are required to enable multicast on a router, knowing that the receivers only supports IGMPv2? (Choose Two)
A. IP PIM RP-address
B. IP PIM ssm
C. IP PIM Sparse-mode
D. IP PIM Passive
Answer: AC
QUESTION 26
A branch router is configured with an egress QoS policy that was designed for a total number of 10 concurrent VOIP Calls. Due to Expansion, 15 VOIP Calls are now running over the link, but after the 14th call was established, all calls were affected and the voice quality was dramatically degraded. Assuming that there is enough bandwidth on the link for all of this traffic, which part of the QOS configuration should be updated due to the new traffic profile?
A. Increase the shaping rate for the priority queue.
B. Remove the policer applied on the priority queue.
C. Remove the shaper applied on the preiority queue.
D. Increase the policing rate for the priority queue.
Answer: D
QUESTION 27
A new Backup Connection is being deployed on a remote site router. the stability of the connection has been a concern. in order to provide more information to EIGRP Regarding this interface, You wish to incorporate the “Reliability” cost metric in the EIGRP Calculation with the command metric weights 1 0 1 0 1. What impact will this modification on the remote site router have for other existing EIGRP neighborships from the same EIGRP Domain?
A. Existing Neighbors will immediately begin using the new metric.
B. Existing Neighbors will use the new metric after clearing the EIGRP Neighbors.
C. Existing Neighbors will resync, maintaining the neighbor relationship
D. All ecisting neighbor relationships will go down
Answer: D
QUESTION 28
When you are troubleshooting duplex mismatches, which two errors are typically seen on the fullduplex end? (Choose two.)
A. runts
B. FCS errors
C. interface resets
D. late collisions
Answer: AB
QUESTION 29
Which two options are contained in a VTP subset advertisement? (Choose two.)
A. followers field
B. MD5 digest
C. VLAN information
D. sequence number
Answer: CD
QUESTION 30
Which two statements are true about traffic shaping? (Choose two.)
A. Out-of-profile packets are queued.
B. It causes TCP retransmits.
C. Marking/remarking is not supported.
D. It does not respond to BECN and ForeSight Messages.
E. It uses a single/two-bucket mechanism for metering.
Answer: AC
http://www.passleader.com/350-001.html
QUESTION 31
Which three options are features of VTP version 3? (Choose three.)
A. VTPv3 supports 8K VLANs.
B. VTPv3 supports private VLAN mapping.
C. VTPv3 allows for domain discovery.
D. VTPv3 uses a primary server concept to avoid configuration revision issues.
E. VTPv3 is not compatible with VTPv1 or VTPv2.
F. VTPv3 has a hidden password option.
Answer: BDF
QUESTION 32
Which three options are considered in the spanning-tree decision process? (Choose three.)
A. lowest root bridge ID
B. lowest path cost to root bridge
C. lowest sender bridge ID
D. highest port ID
E. highest root bridge ID
F. highest path cost to root bridge
Answer: ABC
QUESTION 33
Why would a rogue host that is running a DHCP Server on a Campus LAN network present a security risk?
A. It may allocate IP addresses from an unknown subnet to the users
B. all Multicast traffic can be sniffer y using the DHCO Multicasr capabilities
C. the CPU utilization of the first hop router can be overloaded by exploiting DHCP Relay open ports
D. A potential Man-in-the-middle Attack can be used against the clients.
Answer: D
QUESTION 34
Which Statement is true about TCN Propagation?
A. The originator of the TCN immediately floods this information through the network
B. the TCN propagation is a two step process
C. A TCN is generated and sent to the root bridge
D. the root bridge must flood this information throught the network
Answer: C
QUESTION 35
Which statement is true about loop guard?
A. Loop Guard only operates on interfaces that are considered point-to-point by the spanning tree.
B. Loop Guard only operates on root ports.
C. Loop Guard only operates on designated ports
D. Loop Guard only operates on edge ports
Answer: A
QUESTION 36
Which two are effects of connecting a network segment that is running 802.1D to a network segment that is running 802.1w? (Choose Two.)
A. the entire network switches to 802.1D and generates BPDUs to determine root bridfe status.
B. A migration delay of three seconds occurs when the port that is connected to the 802.1D bridge comes up
C. The entire network reconverges and a unique root briddge for the 802.1D segment, and a root bridge for the 802.1W segment, is chosen
D. the first hop 802.1w switch that is connected to the 802.1D runs entirely in 802.1D compatibility mode and converts the BPDUs to either 802.1D or 802.1W segments of the network
E. Classic 802.1D timers, Such as forward Delay and Max-age, will only be used as a backup, and will not be necessary if point-to-point links and edge prots are properly identified and set by the administrator.
Answer: BE
QUESTION 37
Which command is used to enable Etherchannel hashing for layer 3 IP and Layer 4 Port-based CEF?
A. mpls ip cef
B. port-channel ip cef
C. mpls ip port-channel cef
D. port-channel load balance
E. mpls ip load-balance
F. ip cef etherchannel channel-id XOR L4
G. ip cef connection exchange
Answer: D
QUESTION 38
In 802.1s, how is the VLAN to instance mapping represented in the BPDU?
A. The VLAN to instance mapping is a normal 16-byte field in the MST BPDU.
B. The VLAN to instance mapping is a normal 12-byte field in the MST BPDU.
C. The VLAN to instance mapping is a 16-byte MD5 signature field in the MST BPDU.
D. The VLAN to instance mapping is a 12-byte MD5 signature field in the MST BPDU.
Answer: C
QUESTION 39
Which three combinations are valid LACP configurations that will set up a channel? (Choose three.)
A. On/On
B. On/Auto
C. Passive/Active
D. Desirable/Auto
E. Active/Active
F. Desirable/Desirable
Answer: ACE
QUESTION 40
Which two options does Cisco PfR use to control the entrance link selection with inbound optimization? (Choose two.)
A. Prepend extra AS hops to the BGP prefix.
B. Advertise more specific BGP prefixes (longer mask).
C. Add (prepend) one or more communities to the prefix that is advertised by BGP.
D. Have BGP dampen the prefix.
Answer: AC
