Deck 13: Security, Professional

Question 1

Referring to the exhibit, which two statements about route reflectors are correct? (Choose two.)

A) RR1 advertises routes learned from Client1 to RR2 with itself as the next hop.
B) RR2 advertises routes learned from Client3 to EBGP2 with itself as the next hop.
C) RR1 and RR2 need the same cluster ID to exchange routes learned from their clients.
D) RR2 adds its cluster ID when advertising routes from Client4 to Client3.

Answer 1

RR2 advertises routes learned from Client3 to EBGP2 with itself as the next hop.
RR2 adds its cluster ID when advertising routes from Client4 to Client3.

Question 2

You have the LDP signaled VPLS topology as shown in the exhibit. CE-B at Site-2 is multihomed to both PE-2 and PE-3. In this scenario, where would you configure loop prevention?

A) PE-1
B) CE-B
C) PE-3
D) PE-2

Answer 2

PE-1

Question 3

Which two statements are correct about Opaque LSAs in OSPF? (Choose two.)

A) Type 10 LSAs are used for MPLS traffic-engineering and have area scope.
B) Type 11 LSAs are used for MPLS traffic-engineering and have area scope.
C) Type 11 LSAs are used for MPLS label exchange and have link-local scope
D) Type 9 LSAs are used for graceful-restart and have link-local scope

Answer 3

Type 10 LSAs are used for MPLS traffic-engineering and have area scope.
Type 9 LSAs are used for graceful-restart and have link-local scope

Question 4

Which two statements about IS-IS are correct? (Choose two.)

A) Level 1 intermediate systems exchange routing information with Level 1 intermediate systems on other IS-IS areas.
B) An IS-IS router sets the attached bit in the PDUs it sends to a Level 1 area to indicate that it is a backbone router.
C) A Level 1 router can only form adjacencies with other Level 1 routers.
D) Level 2 routers can form adjacencies with either Level 1 or Level 2 routers.

Question 5

R2 is receiving the same route from R1 and R3. You must ensure that you can load balance traffic for that route. Referring to the exhibit, which two configuration changes will allow load balancing? (Choose two.)

A) Apply the prepend policy as an import policy under group R1. Apply the prepend policy as an import policy under group R1.
B) Configure multipath under the global BGP configuration. Configure multipath under the global BGP configuration.
C) Configure multipath under group R1. under group R1.
D) Apply the prepend policy as an import policy under group R3. policy as an import policy under group R3.

Question 6

Which two types of LSAs have an area scope? (Choose two.)

A) Type 2
B) Type 5
C) Type 11
D) Type 7

Question 7

Referring to the exhibit, what will the IS-IS cost be for R1 to reach R3?

A) 73
B) 20
C) 301
D) 310

Question 8

You have a mixed vendor EVPN environment and you need to ensure VXLAN interoperability between all devices. In tins scenario, winch statement is correct?

A) You should only use pure Type 2 routes.
B) You should only use pure Type 5 routes.
C) You should only use Type 2 and Type 5 routes.
D) You should only use Type 6 and Type 2 routes.

Question 9

Which two statements about wide and narrow metrics used in IS-IS are correct? (Choose two.)

A) Wide metrics are enabled with the wide-metrics-only parameter under protocols isis hierarchy. Wide metrics are enabled with the wide-metrics-only parameter under protocols isis hierarchy.
B) Narrow metrics are enabled by default and use 8 bits in TLVs to send information.
C) Wide metrics are sent by default and use 24 bits in TLVs to send information.
D) Disabling narrow metrics results in external routes being leaked from L1 to L2 areas automatically.

Question 10

All adjacencies have been formed, no extra options have been configured, and no policies have been written. Referring to the exhibit, which two statements are correct? (Choose two.)

A) R2 will create a default route and send it as a TLV to R1
B) R1 cannot reach R5
C) R1 can reach R5
D) R1 will create its own default route that points to R2

Question 11

Referring to the exhibit, the local BGP router is receiving IPv4 routes from the BGP neighbor, but it is not receiving L3 VPN routes from the BGP neighbor. Which two actions should you take to solve this problem? (Choose two.)

A) Configure the family inet-vpn unicast statement on the BGP neighbor. Configure the family inet-vpn unicast statement on the BGP neighbor.
B) Configure the family inet unicast statement on the local BGP router. family inet unicast statement on the local BGP router.
C) Configure the family inet-vpn unicast statement on the local BGP router.
D) Configure the family inet unicast statement on the BGP neighbor.

Question 12

A network administrator is migrating from IPv4 to IPv6 and one of the IS-IS adjacencies is not coming up between R1 and R2. Which action will solve the problem?

A) Remove topologies ipv6-unicast from protocols isis on R2. Remove topologies ipv6-unicast from protocols isis on R2.
B) Configure topologies ipv4-unicast from protocols isis on R2. Configure topologies ipv4-unicast
C) Remove topologies ipv6-unicast from protocols isis on R1. on R1.
D) Configure an IPv4 address on interface ge-0/0/1 on R1. Configure an IPv4 address on interface ge-0/0/1

Question 13

The link between CE1 and PE1 has a history of flapping. To avoid the impact that flapping causes to the network, you decide to use route damping. Which statement is correct in this scenario?

A) Dampening is enabled on interfaces.
B) Dampened routes decay at a sliding rate known as half-life.
C) Routes become dampened when the configured max-suppress value is reached. Routes become dampened when the configured max-suppress value is reached.
D) Dampened routes become active when their figure of merit drops below the reuse value.

Question 14

Referring to the exhibit, hosts in Site 1 and Site 2 are unable to communicate with each other through the Layer 3 VPN. What is the problem?

A) The two sites are in the same AS.
B) The two sites are using the same instance type.
C) The two sites are using the same route target.
D) The two sites are using the same route distinguisher.

Question 15

You are the administrator of AS 65512. You are learning the 192.168.1.0/24 prefix from both AS 100 and AS 200. You want traffic destined to the 192.168.1.0.0/24 prefix to exit your AS towards AS 200. How would you accomplish this task?

A) Configure an import routing policy on PE-2 to set a higher MED on the path learned from AS 100.
B) Configure an import routing policy on PE-2 to modify the origin attribute on the path learned from AS 100.
C) Configure an import routing policy on PE-2 to set a higher local preference value on the path learned from AS 200.
D) Configure an import routing policy on PE-2 to append the AS path attribute on the path learned from AS 100.

Question 16

You are provisioning Layer 2 circuits between sites CE1, CE2, and CE3. Referring to the exhibit, which statement is true?

A) A point-to-multipoint LSP must be created between sites.
B) Each site must have only one VLAN configured to the PE.
C) Site PE1 must have a point-to-multipoint link configured towards the core.
D) Two VLANs must be configured from PE 1 to CE 1.

Question 17

What information is stored in a VRF table for a BGP Layer 2 VPN? (Choose three.)

A) Layer 2 encapsulation
B) local site ID
C) remote interface of local CE device
D) logical interlace provisioned to local CE device
E) label-switched path

Question 18

R2 has IS-IS adjacencies with R3 and R4. You want to ensure that R2 has both a level 1 and level 2 adjacency to both R3 and R4, but R2 only has one adjacency with R4. Referring to the exhibit, which configuration change will solve this issue?

A) Change the IS-IS area on R4 to match R2.
B) Remove the level 1 disable configuration from R4.
C) Remove the level 1 disable configuration from R2.
D) Change the IS-IS area on R2 to match R4.

Question 19

You are asked to configure a series of interface policers and firewall filters, which include policers, on the same device. You must ensure that the two configuration methods do not conflict. What are two considerations when performing this task? (Choose two.)

A) On inbound traffic, firewall filters are applied before interface policers.
B) On outbound traffic, interface policers are applied before firewall filters.
C) On outbound traffic, firewall filters are applied before interface policers.
D) On inbound traffic, interface policers are applied before firewall filters.

Question 20

You manage an MX Series device which includes the configuration shown in the exhibit. Traffic marked with DSCP 000011 is entering the ge-1/0/4 interface at 102 Mbps. The traffic exits the device on the ge-1/0/5 interface. No other traffic is transiting the router. In this scenario, what happens to traffic exceeding 100 Mbps?

A) Traffic exceeding 100 Mbps is redirected to a rate limiter.
B) Traffic exceeding 100 Mbps is buffered.
C) Traffic exceeding 100 Mbps is dropped.
D) Traffic exceeding 100 Mbps is forwarded.

Question 21

Which three statements are true about the show pim join output shown in the exhibit? (Choose three.)

A) This is a source-specific multicast stream.
B) The multicast receiver is still using the RP to receive the stream.
C) The multicast stream has been configured with a backup path to allow for fast reroute.
D) The multicast stream does not have an RP.
E) The shortest path to the source is through the RP.

Question 22

Why do interprovider option B VPNs scale better than interprovider option A VPNs?

A) The ASBRs in interprovider option B VPNs do not need per-VPN VRF tables.
B) The ASBRs in interprovider option A VPNs do not need per-VPN VRF tables.
C) The ASBRs in interprovider option A VPNs only carry internal routes.
D) The ASBRs in interprovider option B VPNs only carry internal routes.

Question 23

Referring to the exhibit, you want to reduce the CPU processing load on PE 2 by preventing the receipt of routes belonging to Customer B. In this scenario, which layer 3 VPN scaling mechanism provides this functionality?

A) route refresh
B) route origin
C) route reflection
D) route target filtering

Question 24

Your router should be configured with a rewrite rule which alters the default behavior of expedited forwarding as shown in the exhibit. In this scenario, which configuration is correct?

A)
B)
C)
D)

Question 25

You want to allow the load balancing of traffic for an EBGP route from two different peers in the same AS. Which three actions are needed to accomplish this task? (Choose three.)

A) A policy to load-balance traffic should be applied to the forwarding table.
B) The multipath parameter should be configured under protocols BGP. The multipath parameter should be configured under protocols BGP.
C) At least two interfaces should be connected to the same EBGP neighbor.
D) An equal cost AS path for the route is required.
E) The multihop parameter should be configured under protocols BGP. multihop

Question 26

Referring to the exhibit, which statement is true?

A) The BGP session between R1 and R2 will establish correctly and only the inet6 unicast NLRI will pass routing information.
B) The BGP session between R1 and R2 will fail to establish correctly due to an NLRI mismatch.
C) The BGP session between R1 and R2 will establish correctly and the inet unicast and the inet6 unicast NLRIs will pass routing information.
D) The BGP session between R1 and R2 will establish correctly and only the inet unicast NLRI will pass routing information.

Question 27

All networks shown in the exhibit contain more than one BGP speaker. You operate ISP A and must ensure that Customer Y sends their traffic to you over the directly connected link. Customer Y is not to be used for transit into your network. What would you do to accomplish this task?

A) Advertise routes to Customer X with the custom defined 0:0 community.
B) Advertise routes to Customer X with the well-known no-advertise community.
C) Advertise routes to Customer Y with the custom defined 65535:65535 community.
D) Advertise routes to Customer Y with the well-known no-export community.

Question 28

What are two reasons an IBGP learned route would be hidden? (Choose two.)

A) The route is suppressed by damping.
B) The route has a next hop of the local routing device.
C) The route is rejected by an export policy.
D) The route has an empty AS path.

Question 29

Which two statements regarding the output shown in the exhibit are correct? (Choose two.)

A) The type of connection is remote.
B) The type of connection is local.
C) The PEs have matching control word values.
D) The label associated with this virtual circuit is out of range.

Question 30

R1 assigns incoming voice traffic to the ef forwarding class. All other traffic is assigned to the best-effort forwarding class. You have configured a CoS re-write rule on R1 to include the correct CoS bit values in packets sent towards R2. You want R2 to classify traffic using the CoS markings created by R1. Which two configuration steps are necessary to accomplish this task? (Choose two.)

A) Assign the behavior aggregate classifier to the ge-0/0/1.0 interface on R2.
B) Assign the CoS re-write rule to the ge-0/0/1.0 interface on R2.
C) Configure a CoS re-write rule on R2 and assign matching CoS values.
D) Configure a behavior aggregate classifier on R2.

Question 31

You have a Layer 3 VPN established between PE-1 and PE-2 to allow communication between CE-1 and CE-2. You want to establish communication between CE-1 and CE-2. Referring to the exhibit, which statement is correct?

A) You will need a BGP export policy on PE-1 to redistribute the OSPF routes, learned from PE-2, to the CE1 BGP neighbor.
B) You will need a VRF import policy on PE-2 to advertise the OSPF routes, learned from CE-2, through the Layer 3 VPN.
C) You will need a VRF export policy on PE-2 to redistribute the OSPF routes, learned from CE-2, through the Layer 3 VPN.
D) You will need a VRF import policy on PE-1 to receive the OSPF routes, learned from PE-2, through the Layer 3 VPN.

Question 32

You have a Layer 3 VPN established between PE-1 and PE-2 to allow communication between CE-1 and CE-2. Referring to the exhibit, which statement is correct?

A) You will need an OSPF import policy on PE-1 to receive the BGP routes, learned from PE-2, through the Layer 3 VPN.
B) You will need a BGP export policy on PE-1 to redistribute the routes, learned from CE-1, through the Layer 3 VPN.
C) You will need a VRF import policy on PE-1 to advertise the BGP routes, learned from CE-1, through the Layer 3 VPN.
D) You will need an OSPF export policy on PE-2 to redistribute the BGP routes, learned from PE-1, through the Layer 3 VPN.

Question 33

Referring to the exhibit, which command would reduce the size of the OSPF database and corresponding routes?

A)
B)
C)
D)

Question 34

Which two statements regarding Ethernet segments (ES) are correct? (Choose two.)

A) The Type-4 EVPN route will be used to elect the designated forwarder for the ES.
B) The Type-3 EVPN route will be used for the aliasing function to load-balance to the ES.
C) The Type-1 EVPN route will indicate if the ES is all-active or single-active.
D) The Type-2 EVPN route will indicate if there is a designated forwarder on the ES.

Question 35

A network administrator is investigating why traffic from R2 is not being forwarded to R1. Referring to the show isis database command output shown in the exhibit, what is causing this problem on the network?

A) R1 and R2 are in different IS-IS areas.
B) The preferred interface between R1 and R2 is experiencing errors.
C) R1 is configured to drop all incoming traffic.
D) R2 is ignoring specific LSPs from R1 in its SPF calculations.

Question 36

Referring to the exhibit, which three statements are correct? (Choose three.)

A) The ESI is 00:22:22:22:22:22:22:22:22:22.
B) This route contains the MAC address of an end host.
C) The router with the IP address 10.101.100.3 is the originator of this route.
D) This ESI Auto-Discovery route is used for designated forwarder election.
E) This route is an EVPN Type-1 route.

Question 37

A Layer 3 VPN exists in the provider network and the CE devices are connecting to the PE devices using BGP. The PE devices are receiving BGP routes from the CE devices and the PE devices have the CE BGP routes in their respective routing tables. However, the remote CE devices are not receiving the BGP routes. Referring to the exhibit, what is the problem?

A) A route distinguisher mismatch exists.
B) The PE devices are detecting an AS loop.
C) The CE devices are detecting an AS loop.
D) A VRF target community mismatch exists.

Question 38

Referring to the exhibit, what will the IS-IS cost be for R3 to reach R1?

A) 301
B) 73
C) 20
D) 310

Question 39

You are troubleshooting a problem with a BGP peer where BGP routes are not being accepted from that peer. Referring to the exhibit, which two statements are correct? (Choose two.)

A) Term 0 is missing a terminating action that allows BGP routes to be accepted.
B) Term 0 is missing a route-filter that specifies the allowed routes.
C) The reject at the end of the policy is preventing the routes from being accepted.
D) You cannot have terminating actions outside of terms.

Question 40

Refer ring to the exhibit, which two statements are correct for a route advertised by R1 towards R4? (Choose two.)

A) The BGP next hop is set to 14.1.1.1 by R2.
B) The AS path is set to 150 by R2.
C) The BGP next hop is set to 192.168.2.2 by R2.
D) The AS path is set to null by R2.

Question 41

Referring to the exhibit, you want to make ISP1 your preferred connection for inbound and outbound traffic. Which two steps will accomplish this task? (Choose two.)

A) Create an export policy setting local-preference 200 and next-hop self and apply it to the IBGP peers on R2. Create an export policy setting local-preference 200 and next-hop self and apply it to the IBGP peers on R2.
B) Create an export policy to prepend the ASN on advertised routes and apply it to the EBGP peer on R1.
C) Create an export policy to prepend the ASN on advertised routes and apply it to the EBGP peer on R2.
D) Create an export policy setting local-preference 200 and next-hop self and apply it to the IBGP peers on R1. and apply it to the IBGP peers on R1.

Question 42

You are configuring a BGP signaled Layer 2 VPN across your MPLS enabled core network. In this scenario, which statement is correct?

A) This type of VPN is only supported over LSPs that are using traffic-engineering.
B) You must use a unique route distinguisher value on all PE devices in your environment.
C) You must ensure that all interfaces within the site's configuration are explicitly defined with their remote site identifier values.
D) This type of VPN requires the support of the 12vpn signaling NLRI on all route reflectors and participating PE devices. This type of VPN requires the support of the 12vpn signaling NLRI on all route reflectors and participating PE devices.

Question 43

You are responsible for configuring CoS for your network Your network includes a video application with strict latency requirements, so that any packets delayed by more than 75 ms are effectively useless. You want to ensure that you do not waste buffer space. When configuring the scheduler for this application, which feature would you use?

A) remainder
B) exact
C) temporal
D) rate limit

Question 44

A network administrator is concerned about the number of LSAs that they are observing on the network. What will reduce Type 7 LSAs advertised from R2 to the non-backbone routers shown in the exhibit?

A) Configure no-summaries under area 0.0.0.2 on R2. Configure no-summaries under area 0.0.0.2 on R2.
B) Configure nssa under area 0.0.0.2 on R2. nssa area 0.0.0.2 on R2.
C) Configure no-nssa-abr under protocols ospf3 on R2. no-nssa-abr protocols ospf3
D) Configure no-summaries under protocols ospf3 on R2.

Question 45

R2 is receiving a route from R1 and you must ensure that the route is not advertised to R3. Referring to the exhibit, which two configuration changes on R2 will solve the issue? (Choose two.)

A) Apply the no-export policy as an import policy under group 65001. Apply the no-export policy as an import policy under group 65001.
B) Apply the no-advertise policy as an export policy under group 65003. no-advertise policy as an export policy under group 65003.
C) Apply the no-export policy as an export policy under group 65003.
D) Apply the no-advertise policy as an import policy under group 65001.

Question 46

Which two statements are true about what a route reflector does by default when distributing routes it has received from reflector clients? (Choose two.)

A) It does not change any received BGP attributes.
B) It changes the default BGP attributes to inform peers that it is a route reflector.
C) It sets the next hop of all routes to "self" to prevent routing loops.
D) It adds its cluster ID to the client-received routes.

Question 47

The exhibit shows a BGP peering session for two PE routers. The BGP session is up, but the hosts in the Layer 2 VPN that uses the BGP session are unable to communicate. What is the problem in this situation?

A) The BGP peer does not support the add-path feature.
B) There is a mismatch in the supported NLRI address families between the BGP peers.
C) The local BGP router does not support Layer 2 VPN and Layer 3 VPN NLRI address families at the same time.
D) The BGP peer does not support the restarter functionality.

Question 48

A customer recently migrated to IS-IS and is concerned about resource starvation when the routing protocol daemon (RPD) starts. To resolve this issue and protect R2 and R3, which feature should you implement?

A) Double the policy-options damping half-life timer to let the network settle. Double the policy-options damping half-life timer to let the network settle.
B) Implement the overload bit and timer to signal service availability.
C) Deploy firewall filters to limit the prefix count in the route table.
D) Use the forwarding-options ip-options-protocol-queue parameter to increase resources. Use the forwarding-options ip-options-protocol-queue parameter to increase resources.

Question 49

Referring to the exhibit, you are asked to summarize all routes in the 10.10.0.0/22 address range ensuring that a single summary route is present in area 49.0002 while the IS-IS internal contributing routes are restricted to area 49.0001. All other routes must not be affected. Which two operations would have to be performed on R2 to accomplish this task? (Choose two.)

A) Create and apply a policy with a single term to accept only the summary route.
B) Include the to level 2 match criteria when referencing the summary route. Include the to level 2 match criteria when referencing the summary route.
C) Include the from level 1 match criteria when referencing the summary route. from level 1
D) Create and apply a policy with two terms; one to accept the summary route and one to reject the contributing routes.

Question 50

Referring to the exhibit, external routes are being received at R1. These routes must appear on R5. Which action will produce this result?

A) Write an export policy on R4 from level 2 to level 1 matching the external routes.
B) Turn on wide metrics on R1 and R2 and write an export policy on R4 from level 2 to level 1 matching the external routes.
C) Write an export policy on R2 from level 1 to level 2 matching the external routes.
D) Turn on wide metrics on R4 and R5 and write an export policy on R2 from level 1 to level 2 matching the external routes.

Question 51

Referring to the exhibit, which two statements are true? (Choose two.)

A) This router is an ASBR.
B) There are two interfaces marked as passive.
C) There is one interface marked as passive.
D) This router is an ABR.

Question 52

CE-1, CE-2, and CE-3 are part of a single VPLS VPN. An Ethernet frame has just arrived at PE-3 from CE-3. It has a source MAC address of CE-3 and a destination MAC address of CE-1. You want to know what PE-3 does with the Ethernet frame. Referring to the exhibit, which statement is correct?

A) It drops the packet because the destination MAC address is not in PE-3's MAC table.
B) It forwards the packet to PE-1 and PE-2.
C) It forwards the packet to PE-1 only.
D) It drops the packet because the destination MAC address is not for PE-3.

Question 53

Referring to the exhibit, which two statements are true? (Choose two.)

A) The CE-1 and CE-2 routes will have the same route distinguisher, which will stop the BGP routes from being shared.
B) An AS loop will not exist between CE-1 and CE-2 and the BGP routes will be shared.
C) An AS loop will exist between CE-1 and CE-2 and the BGP routes will not be shared.
D) The CE-1 and CE-2 routes will have the same route distinguisher, which will not stop the BGP routes from being shared.

Question 54

Referring to the exhibit, you have recently established a Layer 3 VPN between PE-1 and PE-2, connecting the two CE sites. Routing information is being shared between sites and the customer has two-way communication. After adding this VPN to your core network, PE-1 and PE-2 are no longer able to forward traffic to the Internet. In this scenario, what is the problem?

A) You must configure the inet-vpn NLRI for the BGP sessions on both your PE devices. You must configure the inet-vpn NLRI for the BGP sessions on both your PE devices.
B) You must configure a multihop external BGP session between your PE devices and the Internet provider's ISP-A device
C) You must configure the inet unicast NLRI for the BGP session on both your PE devices. inet unicast NLRI for the BGP session on both your PE devices.
D) You must configure a separate internal BGP group on both your PE devices specifically for Internet connectivity.

Question 55

You recently deployed CoS-based forwarding in your network, which uses OSPF as its IGP. You notice that the forwarding of traffic has not changed and is not following the path indicated within your configuration. In this scenario, which statement explains this behavior?

A) The defined policy references IP addresses as the next-hops instead of interface names.
B) Load balancing has not been enabled under [edit forwarding-options] . Load balancing has not been enabled under [edit forwarding-options] .
C) The defined policy references interface names as the next-hops instead of IP addresses.
D) The defined policy has not been applied under [edit class-of-service forwarding-policy] . The defined policy has not been applied under [edit class-of-service forwarding-policy]

Question 56

Referring to the exhibit, which statement is true?

A) This is a multipath route.
B) The route is learned from three different neighbors.
C) This is a multihop route.
D) The route is learned from only one neighbor.

Question 57

You must configure an OSPF virtual link to facilitate communication between Area 0 and Area 20. Referring to the exhibit, which two addresses should you use as the neighbor IDs of the virtual link endpoints? (Choose two.)

A) The address that is associated with R4's xe-0/0/1 interface.
B) The address that is associated with R2's router ID.
C) The address that is associated with R2's xe-1/2/0 interface.
D) The address that is associated with R4's router ID.