Question 1

In a Cisco SD-Access solution, what is the role of the Identity Services Engine?

Accepted Answer

A)  It is leveraged for dynamic endpoint to group mapping and policy definition. 
B)  It provides GUI management and abstraction via apps that share context. 
C)  It is used to analyze endpoint to app flows and monitor fabric status. 
D)  It manages the LISP EID database. 
A)  It is leveraged for dynamic endpoint to group mapping and policy definition. 
B)  It provides GUI management and abstraction via apps that share context. 
C)  It is used to analyze endpoint to app flows and monitor fabric status. 
D)  It manages the LISP EID database.

Question 2

An engineer configures a WLAN with fast transition enabled. Some legacy clients fail to connect to this WLAN. Which feature allows the legacy clients to connect while still allowing other clients to use fast transition based on their OUIs?

Accepted Answer

A)  over the DS 
B)  802.11k 
C)  adaptive R 
D)  802.11v 
A)  over the DS 
B)  802.11k 
C)  adaptive R 
D)  802.11v

Question 3

What is a benefit of deploying an on-premises infrastructure versus a cloud infrastructure deployment?

Accepted Answer

A)  ability to quickly increase compute power without the need to install additional hardware 
B)  less power and cooling resources needed to run infrastructure on-premises 
C)  faster deployment times because additional infrastructure does not need to be purchased 
D)  lower latency between systems that are physically located near each other 
A)  ability to quickly increase compute power without the need to install additional hardware 
B)  less power and cooling resources needed to run infrastructure on-premises 
C)  faster deployment times because additional infrastructure does not need to be purchased 
D)  lower latency between systems that are physically located near each other

Question 4

Refer to the exhibit. Which JSON syntax is derived from this data?

Accepted Answer

A)  {[{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': ['Running', 'Video games']}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': ['Napping', 'Reading']}]} 
B)  {'Person': [{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': 'Running', 'Video games'}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': 'Napping', 'Reading'}]} 
C)  {[{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': 'Running', 'Hobbies': 'Video games'}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': 'Napping', 'Reading'}]} 
D)  {'Person': [{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': ['Running', 'Video games']}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': ['Napping', 'Reading']}]} 
A)  {[{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': ['Running', 'Video games']}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': ['Napping', 'Reading']}]} 
B)  {'Person': [{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': 'Running', 'Video games'}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': 'Napping', 'Reading'}]} 
C)  {[{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': 'Running', 'Hobbies': 'Video games'}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': 'Napping', 'Reading'}]} 
D)  {'Person': [{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': ['Running', 'Video games']}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': ['Napping', 'Reading']}]}

Question 5

Refer to the exhibit.   SwitchC connects HR and Sales to the Core switch. However, business needs require that no traffic from the Finance VLAN traverse this switch. Which command meets this requirement?

Accepted Answer

A)  SwitchC(config)# vtp pruning vlan 110 SwitchC(config)# vtp pruning vlan 110 
B)  SwitchC(config)# vtp pruning vtp pruning 
C)  SwitchC(config)# interface port-channel 1 SwitchC(config-if)# switchport trunk allowed vlan add 210,310 interface port-channel 1 SwitchC(config-if)# switchport trunk allowed vlan add 210,310 
D)  SwitchC(config)# interface port-channel 1 SwitchC(config-if)# switchport trunk allowed vlan remove 110 switchport trunk allowed vlan remove 110 
A)  SwitchC(config)# vtp pruning vlan 110 SwitchC(config)# vtp pruning vlan 110 
B)  SwitchC(config)# vtp pruning vtp pruning 
C)  SwitchC(config)# interface port-channel 1 SwitchC(config-if)# switchport trunk allowed vlan add 210,310 interface port-channel 1 SwitchC(config-if)# switchport trunk allowed vlan add 210,310 
D)  SwitchC(config)# interface port-channel 1 SwitchC(config-if)# switchport trunk allowed vlan remove 110 switchport trunk allowed vlan remove 110

Question 6

Which statement describes the IP and MAC allocation requirements for virtual machines on Type 1 hypervisors?

Accepted Answer

A)  Virtual machines do not require a unique IP or unique MAC. They share the IP and MAC address of the physical server. 
B)  Each virtual machine requires a unique IP address but shares the MAC address with the physical server. 
C)  Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes. 
D)  Each virtual machine requires a unique MAC address but shares the IP address with the physical server. 
A)  Virtual machines do not require a unique IP or unique MAC. They share the IP and MAC address of the physical server. 
B)  Each virtual machine requires a unique IP address but shares the MAC address with the physical server. 
C)  Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes. 
D)  Each virtual machine requires a unique MAC address but shares the IP address with the physical server.

Question 7

Refer to the exhibit. R1 is able to ping the R3 fa0/1 interface. Why do the extended pings fail?

Accepted Answer

A)  The maximum packet size accepted by the command is 1476 bytes. 
B)  The DF bit has been set. 
C)  R3 is missing a return route to 10.99.69.0/30. 
D)  R2 and R3 do not have an OSPF adjacency. 
A)  The maximum packet size accepted by the command is 1476 bytes. 
B)  The DF bit has been set. 
C)  R3 is missing a return route to 10.99.69.0/30. 
D)  R2 and R3 do not have an OSPF adjacency.

Question 8

Which feature is supported by EIGRP but is not supported by OSPF?

Accepted Answer

A)  route filtering 
B)  unequal-cost load balancing 
C)  route summarization 
D)  equal-cost load balancing 
A)  route filtering 
B)  unequal-cost load balancing 
C)  route summarization 
D)  equal-cost load balancing

Question 9

Which action is the vSmart controller responsible for in an SD-WAN deployment?

Accepted Answer

A)  onboard vEdge nodes into the SD-WAN fabric 
B)  gather telemetry data from vEdge routers 
C)  distribute security information for tunnel establishment between vEdge routers 
D)  manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric 
A)  onboard vEdge nodes into the SD-WAN fabric 
B)  gather telemetry data from vEdge routers 
C)  distribute security information for tunnel establishment between vEdge routers 
D)  manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric

Question 10

Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

Accepted Answer

A)  all devices integrating with ISE 
B)  selected individual devices 
C)  all devices in selected sites 
D)  all wired devices 
A)  all devices integrating with ISE 
B)  selected individual devices 
C)  all devices in selected sites 
D)  all wired devices

Question 11

Refer to the exhibit.   These commands have been added to the configuration of a switch. Which command flags an error if it is added to this configuration?

Accepted Answer

A)  monitor session 1 source interface port-channel 6 
B)  monitor session 1 source vlan 10 
C)  monitor session 1 source interface FastEthemet0/1 rx 
D)  monitor session 1 source interface port-channel 7, port-channel 8 
A)  monitor session 1 source interface port-channel 6 
B)  monitor session 1 source vlan 10 
C)  monitor session 1 source interface FastEthemet0/1 rx 
D)  monitor session 1 source interface port-channel 7, port-channel 8

Question 12

In a wireless network environment, what is calculated using the numerical values of the transmitter power level, cable loss, and antenna gain?

Accepted Answer

A)  SNR 
B)  RSSI 
C)  EIRP 
D)  dBi 
A)  SNR 
B)  RSSI 
C)  EIRP 
D)  dBi

Question 13

When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?

Accepted Answer

A)  logging host 10.2.3.4 vrf mgmt transport tcp port 514 
B)  logging host 10.2.3.4 vrf mgmt transport udp port 514 
C)  logging host 10.2.3.4 vrf mgmt transport tcp port 6514 
D)  logging host 10.2.3.4 vrf mgmt transport udp port 6514 
A)  logging host 10.2.3.4 vrf mgmt transport tcp port 514 
B)  logging host 10.2.3.4 vrf mgmt transport udp port 514 
C)  logging host 10.2.3.4 vrf mgmt transport tcp port 6514 
D)  logging host 10.2.3.4 vrf mgmt transport udp port 6514

Question 14

A network administrator applies the following configuration to an IOS device: aaa new-model aaa authentication login default local group tacacs+ What is the process of password checks when a login attempt is made to the device?

Accepted Answer

A)  A TACACS+ server is checked first. If that check fails, a local database is checked. 
B)  A TACACS+ server is checked first. If that check fails, a RADIUS server is checked. If that check fails, a local database is checked. 
C)  A local database is checked first. If that check fails, a TACACS+ server is checked. If that check fails, a RADIUS server is checked. 
D)  A local database is checked first. If that check fails, a TACACS+ server is checked. 
A)  A TACACS+ server is checked first. If that check fails, a local database is checked. 
B)  A TACACS+ server is checked first. If that check fails, a RADIUS server is checked. If that check fails, a local database is checked. 
C)  A local database is checked first. If that check fails, a TACACS+ server is checked. If that check fails, a RADIUS server is checked. 
D)  A local database is checked first. If that check fails, a TACACS+ server is checked.

Question 15

Which method of account authentication does OAuth 2.0 use within REST APIs?

Accepted Answer

A)  username/role combination 
B)  access tokens 
C)  cookie authentication 
D)  basic signature workflow 
A)  username/role combination 
B)  access tokens 
C)  cookie authentication 
D)  basic signature workflow

Question 16

Refer to the exhibit. You have configured a VRF named Blue on R1 as shown. Which action must you take to enable uRPF on the R1 interface E1/0?

Accepted Answer

A)  Configure the ip verify vrf Blue unicast source reachable-via rx allow-default command on interface E1/0. Configure the ip verify vrf Blue unicast source reachable-via rx allow-default command on interface E1/0. 
B)  Configure the ip verify unicast source reachable-via rx allow-default command under the VRF Blue process. ip verify unicast source reachable-via rx allow-default command under the VRF Blue process. 
C)  Configure the ip verify vrf Blue unicast source reachable-via rx allow-default command on interface E0/1. command on interface E0/1. 
D)  Configure the ip verify unicast source reachable-via rx allow-default command on interface E1/0. 
E)  Configure the ip verify vrf Blue unicast source reachable-via rx allow-default command under the VRF Blue process. 
A)  Configure the ip verify vrf Blue unicast source reachable-via rx allow-default command on interface E1/0. Configure the ip verify vrf Blue unicast source reachable-via rx allow-default command on interface E1/0. 
B)  Configure the ip verify unicast source reachable-via rx allow-default command under the VRF Blue process. ip verify unicast source reachable-via rx allow-default command under the VRF Blue process. 
C)  Configure the ip verify vrf Blue unicast source reachable-via rx allow-default command on interface E0/1. command on interface E0/1. 
D)  Configure the ip verify unicast source reachable-via rx allow-default command on interface E1/0. 
E)  Configure the ip verify vrf Blue unicast source reachable-via rx allow-default command under the VRF Blue process.

Question 17

Refer to the exhibit. Which command allows hosts that are connected to FastEthernet0/2 to access the Internet?

Accepted Answer

A)  ip nat inside source list 10 interface FastEthernet0/2 overload 
B)  ip nat inside source list 10 interface FastEthernet0/1 overload 
C)  ip nat outside source static 209.165.200.225 10.10.10.0 overload 
D)  ip nat outside source list 10 interface FastEthernet0/2 overload 
A)  ip nat inside source list 10 interface FastEthernet0/2 overload 
B)  ip nat inside source list 10 interface FastEthernet0/1 overload 
C)  ip nat outside source static 209.165.200.225 10.10.10.0 overload 
D)  ip nat outside source list 10 interface FastEthernet0/2 overload

Question 18

Refer to the exhibit. What are two effects of this configuration? (Choose two.)

Accepted Answer

A)  If R1 goes down, R2 becomes active but reverts to standby when R1 comes back online. 
B)  If R2 goes down, R1 becomes active but reverts to standby when R2 comes back online. 
C)  R1 becomes the active router. 
D)  R1 becomes the standby router. 
E)  If R1 goes down, R2 becomes active and remains the active device when R1 comes back online. 
A)  If R1 goes down, R2 becomes active but reverts to standby when R1 comes back online. 
B)  If R2 goes down, R1 becomes active but reverts to standby when R2 comes back online. 
C)  R1 becomes the active router. 
D)  R1 becomes the standby router. 
E)  If R1 goes down, R2 becomes active and remains the active device when R1 comes back online.

Question 19

Company policy restricts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three switches. An administrator has noticed that VLAN 10 has propagated to SW3. Which configuration corrects the issue?

Accepted Answer

A)  SW1(config)# int gi1/1 SW1(config)# switchport trunk allowed vlan 1-9,11-4094 SW1(config)# int gi1/1 switchport trunk allowed vlan 1-9,11-4094 
B)  SW2(config)# int gi1/2 SW2(config)# switchport trunk allowed vlan 10 SW2(config)# int gi1/2 switchport trunk allowed vlan 10 
C)  SW2(config)# switchport trunk allowed vlan 1-9,11-4094 
D)  SW1(config)# switchport trunk allowed vlan 10 int gi1/1 
A)  SW1(config)# int gi1/1 SW1(config)# switchport trunk allowed vlan 1-9,11-4094 SW1(config)# int gi1/1 switchport trunk allowed vlan 1-9,11-4094 
B)  SW2(config)# int gi1/2 SW2(config)# switchport trunk allowed vlan 10 SW2(config)# int gi1/2 switchport trunk allowed vlan 10 
C)  SW2(config)# switchport trunk allowed vlan 1-9,11-4094 
D)  SW1(config)# switchport trunk allowed vlan 10 int gi1/1

Question 20

Which two operations are valid for RESTCONF? (Choose two.)

Accepted Answer

A)  PULL 
B)  PUSH 
C)  PATCH 
D)  REMOVE 
E)  ADD
F) HEAD 
A)  PULL 
B)  PUSH 
C)  PATCH 
D)  REMOVE 
E)  ADD
F) HEAD

Exam 38: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

In a Cisco SD-Access solution, what is the role of the Identity Services Engine?

An engineer configures a WLAN with fast transition enabled. Some legacy clients fail to connect to this WLAN. Which feature allows the legacy clients to connect while still allowing other clients to use fast transition based on their OUIs?

What is a benefit of deploying an on-premises infrastructure versus a cloud infrastructure deployment?

Refer to the exhibit. Which JSON syntax is derived from this data?

Refer to the exhibit. SwitchC connects HR and Sales to the Core switch. However, business needs require that no traffic from the Finance VLAN traverse this switch. Which command meets this requirement?

Which statement describes the IP and MAC allocation requirements for virtual machines on Type 1 hypervisors?

Refer to the exhibit. R1 is able to ping the R3 fa0/1 interface. Why do the extended pings fail?

Which feature is supported by EIGRP but is not supported by OSPF?

Which action is the vSmart controller responsible for in an SD-WAN deployment?

Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

Refer to the exhibit. These commands have been added to the configuration of a switch. Which command flags an error if it is added to this configuration?

In a wireless network environment, what is calculated using the numerical values of the transmitter power level, cable loss, and antenna gain?

When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?

A network administrator applies the following configuration to an IOS device: aaa new-model aaa authentication login default local group tacacs+ What is the process of password checks when a login attempt is made to the device?

Which method of account authentication does OAuth 2.0 use within REST APIs?

Refer to the exhibit. You have configured a VRF named Blue on R1 as shown. Which action must you take to enable uRPF on the R1 interface E1/0?

Refer to the exhibit. Which command allows hosts that are connected to FastEthernet0/2 to access the Internet?

Refer to the exhibit. What are two effects of this configuration? (Choose two.)

Company policy restricts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three switches. An administrator has noticed that VLAN 10 has propagated to SW3. Which configuration corrects the issue?

Which two operations are valid for RESTCONF? (Choose two.)

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters