Practice Free 350-501 Exam Online Questions
Refer to me exhibit.
Refer to the exhibit. A network engineer notices PE-21 convergence degradation due to the growing LSDB size of Level 2 areas in the network. The engineer decides to migrate router PE-21 from an inter-area design to an intra-area implementation. Inter-area routing must be accomplished via an ATT-bit set by the Level 1/Level 2 router.
Which configuration must the engineer implement on PE-21 to complete the migration?
- A . configure terminal
router isis 1
no net 49.0200
net 49.5000
is-type level-1-2
end - B . configure terminal
router isis 1
net 49.5000.0100.1202.0021.00
is-type level-1-2
end - C . configure terminal
router isis 1
net 49.5000.0100.1222.0022.00
is-type level-1
end - D . configure terminal
router isis 1
no net 49.0200.0100.1202.0021.00
net 49.5000.0100.1202.0021.00
is-type level-1
end
Refer to the exhibit.
An organization s network recently experienced several significant outages due to device failures. The network administrator just moved the network devices to a new central data center, and packets are switched using labels. The administrator Is now implementing NSF on the network to reduce potential risk factors in the event of another outage.
Which task must the administrator perform on each router as part of the process?
- A . Remove route filtering to speed repopulation of the link-state database
- B . Copy the router s existing state information and share the file with its peers to enable BGP soft resets
- C . Implement MPLS to forward packets while the RIB updates after a faliover.
- D . Implement Graceful Restart to mitigate the delay in MPLS LDP synchronization when the IGP starts up.
Which statement about TLS is accurate when using RESTCONF to write configurations on network devices?
- A . It requires certificates for authentication.
- B . It is provided using NGINX acting as a proxy web server
- C . It is used for HTTP and HTTPS requests.
- D . It is not supported on Cisco devices
Refer to the exhibit.
An engineer has started to configure a router for secure remote access as shown. All users who require network access need to be authenticated by the SSH Protocol.
Which two actions must the engineer implement to complete the SSH configuration? (Choose two.)
- A . Configure an IP domain name.
- B . Configure service password encryption.
- C . Configure crypto keys
- D . Configure ACL 100 to permit access to port 22.
- E . Configure a password under the vty lines.
Refer to the exhibit:
You are configuring an administrative domain implement so that devices can dynamically learn the RP?
- A . SSM
- B . BID1R-PIM
- C . BSR
- D . Auto-RP
A network operator working for a private outsourcing company with an employee id: 4261:72:778 needs to limit the malicious traffic on their network.
Which configuration must the engineer use to implement URPF loose mode on the GigabitEthernet0/1 interface?
- A . router(config)# interface gigabitethernet0/1
router(config-if)# ip address 192.168.200.1 255.255.255.0
router(config-if)# ip verify unicast source reachable-via any
router(config-if)# ipv6 address 2001:DB8:1::1/96
router(config-if)# ipv6 verify unicast source reachable-via any - B . router(config)# interface gigabitethernet0/1
router(config-if)# ip address 192.168.200.1 255.255.255.0
router(config-if)# ip verify unicast source reachable-via rx
router(config-if)# ipv6 address 2001:DB8:1::1/96
router(config-if)# ipv6 verify unicast source reachable-via rx - C . router(config)# interface gigabitethernet0/1
router(config if)# ip address 192.168.200.1 255.255.255.0
router(config-if)# ip verify unicast source reachable-via rx
router(config-if)# ipv6 address 2001:DB8:1::1/96
router(config-if)# ipv6 verify unicast source reachable-via any - D . router(config)# interface gigabitethernet0/1
router(config-if)# ip address 192.168.200.1 255.255.255.0
router(config-if)# ip verify unicast source reachable-via any
router(config-if)# ipv6 address 2001:DB8:1::1/96
router(config-if)# ipv6 verify unicast source reachable-via rx
Refer to the exhibit.
An engineer working for private Service Provider with employee id: 3948:11:613 is configuring the BGPsec framework.
Which two conditions must the engineer take into account? (Choose two.)
- A . BGPsec uses IPsec tunnel for security.
- B . The BGPsec framework secures the AS path.
- C . In BGPsec. all route advertisements are given an expiry time by the originator of the route.
- D . Private keys are part of the router key pair used to sign route updates.
- E . In BGPsec. route advertisements are not given an expiration time by the originator of the route.
Refer to the exhibit.
LDP peering between routers R1 and R2 is dropped when the link between R1 and R2 is taken offline. However, LDP peering between R2 and R3 stays up when the link between R2 and R3 is taken offline.
Which action allows MPLS traffic forwarding to continue normally if the link between R1 and R2 goes down?
- A . Enable IGP and LDP Synchronization on R1.
- B . Implement LDP Session Protection on R1.
- C . Enable IGP and LDP Synchronization on R2.
- D . Implement LDP Session Protection on R2.
Refer to the exhibit.
An ISP provides shared VoIP Extranet services to a customer in VRF-100 with these settings:
✑ The VoIP services are hosted in the 198.19.1000/24 space.
✑ The customer has been assigned the 198.18.10/29 IP address bloc*.
✑ VRF-100 is assigned Import and export route target 85010:100.
Which configuration must the engineer Apply to PE-1 to provision VRF-100 and provide access to the shared services?
- A . vrf definition VRF-100
rd 172.17.255.1:100
!
address-family ipv4
export map VRF-100-EXPORT
import map VRF-100-IMPORT
exit-address-family
!
route-map VRF-100-EXPORT permit 10
match ip address prefix-list VRF-100-ALLOWED-EXPORT
set extcommunity rt 65010:100 65010:2999
route-map VRF-100-EXPORT permit 20
set extcommunity rt 65010:100
!
route-map VRF-100-IMPORT permit 10
match extcommunity VRF-100-RT SHARED-SERVICES
!
ip extcommunity-list standard SHARED-SERVICES permit rt 65010:1999
ip extcommunity-list standard VRF-100-RT permit rt 65010:100
ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29 - B . vrf definition VRF-100
rd 172.17.255.1:100
!
address-family ipv4
export map VRF-100-EXPORT
route-target import 65010:100
route-target import 65010:2999
exit-address-family
!
route-map VRF-100-EXPORT permit 10
match ip address prefix-list VRF-100-ALLOWED-EXPORT
set extcommunity rt 65010:100 65010:1999
route-map VRF-100-EXPORT permit 20
set extcommunity rt 65010:100
!
ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29 - C . vrf definition VRF-100
rd 172.17.255.1:100
!
address-family ipv4
export map VRF-100-EXPORT
route-target import 65010:100
route-target import 65010:1999
exit address-family
!
route-map VRF-100-EXPORT permit 10
match ip address prefix-list VRF-100-ALLOWED-EXPORT
set extcommunity rt 65010:100 65010:2999
route-map VRF-100-EXPORT permit 20
set extcommunity r 65010:100
!
ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29 - D . vrf definition VRF-100
rd 172.17.255.1:100
!
address-family ipv4
route-target export 65010:100
route-target export 65010:1999
route-target import 65010:100
route-target import 65010:2999
exit-address-family
DRAG DROP
Drag and drop the OSPF and IS-IS Cisco MPLS TE extensions from the left to their functional descriptions on the right.
