Final Exam Enterprise Networking, Security, and Automation Part 4

107. How does virtualization help with disaster recovery within a data center?  Hardware does not have to be identical.  Power is always provided.  Less energy is consumed.  Server provisioning is faster. 108. Refer to the exhibit. Which devices exist in the failure domain when switch S3 loses power?  S4 and PC_2  PC_3 and AP_2  AP_2 and AP_1  PC_3 and PC_2  S1 and S4 A failure domain is the area of a network that is impacted when a critical device such as switch S3 has a failure or experiences problems. 109. Which set of access control entries would allow all users on the 192.168.10.0/24 network to access a web server that is located at 172.17.80.1, but would not allow them to use Telnet? access-list 103 deny tcp host 192.168.10.0 any eq 23 access-list 103 permit tcp host 192.168.10.1 eq 80 access-list 103 permit tcp 192.168.10.0 0.0.0.255 host 172.17.80.1 eq 80 access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq 23 access-list 103 permit tcp 192.168.10.0 0.0.0.255 any eq 80 access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq 23 access-list 103 permit 192.168.10.0 0.0.0.255 host 172.17.80.1 access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq telnet For an extended ACL to meet these requirements the following need to be included in the access control entries: identification number in the range 100-199 or 2000-2699 permit or deny parameter protocol source address and wildcard destination address and wildcard port number or name 110. Refer to the exhibit. A network administrator needs to add an ACE to the TRAFFICCONTROL ACL that will deny IP trafÏc from the subnet 172.23.16.0/20. Which ACE will meet this requirement?  5 deny 172.23.16.0 0.0.15.255  5 deny 172.23.16.0 0.0.255.255  15 deny 172.23.16.0 0.0.15.255  30 deny 172.23.16.0 0.0.15.255 111. Which step in the link-state routing process is described by a router building a linkstate database based on received LSAs?  executing the SPF algorithm  building the topology table  selecting the router ID  declaring a neighbor to be inaccessible 112. What protocol uses agents, that reside on managed devices, to collect and store information about the device and its operation?  SYSLOG  TFTP  CBWFQ  SNMP 113. An administrator is configuring single-area OSPF on a router. One of the networks that must be advertised is 10.27.27.0 255.255.255.0. What wildcard mask would the administrator use in the OSPF network statement?  0.0.0.63  0.0.0.255  0.0.0.31  0.0.0.15 114. When will an OSPF-enabled router transition from the Down state to the Init state?  when an OSPF-enabled interface becomes active  as soon as the router starts  when the router receives a hello packet from a neighbor router  as soon as the DR/BDR election process is complete 115. What type of trafÏc is described as having a high volume of data per packet?  data  video  voice 116. What protocol is a vendor-neutral Layer 2 protocol that advertises the identity and capabilities of the host device to other connected network devices?  LLDP  NTP  TFTP  SNMP 117. Which step in the link-state routing process is described by a router running an algorithm to determine the best path to each destination?  building the topology table  selecting the router ID  declaring a neighbor to be inaccessible  executing the SPF algorithm 118. Refer to the exhibit. Which conclusion can be drawn from this OSPF multiaccess network?  If the DR stops producing Hello packets, a BDR will be elected, and then it promotes itself to assume the role of DR.  With an election of the DR, the number of adjacencies is reduced from 6 to 3.*  When a DR is elected all other non-DR routers become DROTHER.  All DROTHER routers will send LSAs to the DR and BDR to multicast 224.0.0.5. On OSPF multiaccess networks, a DR is elected to be the collection and distribution point for LSAs sent and received. A BDR is also elected in case the DR fails. All other non-DR or BDR routers become DROTHER. Instead of flooding LSAs to all routers in the network, DROTHERs only send their LSAs to the DR and BDR using the multicast address 224.0.0.6. If there is no DR/BDR election, the number of required adjacencies is n(n-1)/2 = > 4(4-1)/2 = 6. With the election, this number is reduced to 3. 119. Refer to the exhibit. The network administrator has an IP address of 192.168.11.10 and needs access to manage R1. What is the best ACL type and placement to use in this situation?  extended ACL outbound on R2 WAN interface towards the internet  standard ACL inbound on R1 vty lines  extended ACLs inbound on R1 G0/0 and G0/1  extended ACL outbound on R2 S0/0/1 Explanation: Standard ACLs permit or deny packets based only on the source IPv4 address. Because all traffic types are permitted or denied, standard ACLs should be located as close to the destination as possible. Extended ACLs permit or deny packets based on the source IPv4 address and destination IPv4 address, protocol type, source and destination TCP or UDP ports and more. Because the filtering of extended ACLs is so specific, extended ACLs should be located as close as possible to the source of the traffic to be filtered. Undesirable traffic is denied close to the source network without crossing the network infrastructure. 120. Which type of VPN connects using the Transport Layer Security (TLS) feature?  SSL VPN  IPsec virtual tunnel interface  GRE over IPsec  dynamic multipoint VPN 121. Which group of APIs are used by an SDN controller to communicate with various applications?  eastbound APIs  westbound APIs  northbound APIs  southbound APIs 122. A company has consolidated a number of servers and it is looking for a program or firmware to create and control virtual machines which have access to all the hardware of the consolidated servers. What service or technology would support this requirement?  Cisco ACI  software defined networking  Type-1 hypervisor  APIC-EM 123. What command would be used as part of configuring NAT or PAT to identify inside local addresses that are to be translated?  ip nat inside source list 24 interface serial 0/1/0 overload  ip nat inside source list 14 pool POOL-STAT overload  access-list 10 permit 172.19.89.0 0.0.0.255  ip nat inside source list ACCTNG pool POOL-STAT 124. Anycompany has decided to reduce its environmental footprint by reducing energy costs, moving to a smaller facility, and promoting telecommuting, what service or technology would support requirement?  -Cloud services  Data center  APIC-EM  Cisco ACI 125. Refer to the exhibit. An administrator is trying to back up the current running configuration of the router to a USB drive, and enters the command;copy usbflash0:/R1config running-config;on the router command line. After removing the USB drive and connecting it to a PC, the administrator discovers that the running configuration was not properly backed up to the R1-config file. What is the problem?  The file already exists on the USB drive and cannot be overwritten.  The drive was not properly formatted with the FAT16 file system.  There is no space left on the USB drive.  The USB drive is not recognized by the router.  The command that the administrator used was incorrect. 126. Which three types of VPNs are examples of enterprise-managed site-to-site VPNs? (Choose three.)  Layer 3 MPLS VPN  IPsec VPN  Cisco Dynamic Multipoint VPN  GRE over IPsec VPN  clientless SSL VPN  client-based IPsec VPN 127. Refer to the exhibit. Employees on 192.168.11.0/24 work on critically sensitive information and are not allowed access off their network. What is the best ACL type and placement to use in this situation?  standard ACL inbound on R1 vty lines  extended ACL inbound on R1 G0/0  standard ACL inbound on R1 G0/1  extended ACL inbound on R3 S0/0/1 128. In an OSPF network which two statements describe the link-state database (LSDB)? (Choose two.)  It can be viewed by using the;show ip ospf database;command.  A neighbor table is created based on the LSDB.  It contains a list of only the best routes to a particular network.  It contains a list of all neighbor routers to which a router has established bidirectional communication.  All routers within an area have an identical link-state database. 129. In an OSPF network which OSPF structure is used to create the neighbor table on a router?  adjacency database  link-state database  routing table  forwarding database 130. What protocol is used in a system that consists of three elements–a manager, agents, and an information database?  MPLS  SYSLOG  SNMP  TFTP 131. What type of trafÏc is described as not resilient to loss?  data  video  voice Explanation: Video traffic tends to be unpredictable, inconsistent, and bursty compared to voice traffic. Compared to voice, video is less resilient to loss and has a higher volume of data per packet. 132. Refer to the exhibit. Router R1 is configured with static NAT. Addressing on the router and the web server are correctly configured, but there is no connectivity between the web server and users on the Internet. What is a possible reason for this lack of connectivity?  Interface Fa0/0 should be configured with the command ip nat outside .  The inside global address is incorrect.  The router NAT configuration has an incorrect inside local address.  The NAT configuration on interface S0/0/1 is incorrect. 133. Which type of API would be used to allow authorized salespeople of an organization access to internal sales data from their mobile devices?  open  partner  public  private 134. Refer to the exhibit. Which data format is used to represent the data for network automation applications?  XML  HTML  YAML  JSON 135. An ACL is applied inbound on a router interface. The ACL consists of a single entry: access-list 101 permit udp 192.168.100.32 0.0.0.7 host 198.133.219.76 eq telnet . If a packet with a source address of 198.133.219.100, a destination address of 198.133.219.170, and a protocol of 23 is received on the interface, is the packet permitted or denied?  denied  permitted 136. Refer to the exhibit. If no router ID was manually configured, what would router R1 use as its OSPF router ID?  10.0.0.1  10.1.0.1  192.168.1.100  209.165.201.1 137. What protocol is a vendor-neutral Layer 2 protocol that advertises the identity and capabilities of the host device to other connected network devices?  NTP  LLDP  SNMP  MPLS 138. Which type of VPN uses a hub-and-spoke configuration to establish a full mesh topology?  MPLS VPN  GRE over IPsec  IPsec virtual tunnel interface  dynamic multipoint VPN 139. What is a characteristic of the REST API?  A. evolved into what became SOAP  B. used for exchanging XML structured information over HTTP or SMTP  C. considered slow, complex, and rigid  D. most widely used API for web services 140. In which step of gathering symptoms does the network engineer determine if the problem is at the core, distribution, or access layer of the network?  Determine the symptoms.  Determine ownership.  Gather information.  Narrow the scope.  Document the symptoms. 141. A student, doing a summer semester of study overseas, has taken hundreds of pictures on a smartphone and wants to back them up in case of loss. What service or technology would support this requirement?  Cisco ACI  cloud services  software defined networking  dedicated servers 142. Consider the following access list that allows IP phone configuration file transfers from a particular host to a TFTP server: R1(config)# access-list 105 permit udp host 10.0.70.23 host 10.0.54.5 range 1024 5000 R1(config)# access-list 105 deny ip any any R1(config)# interface gi0/0 R1(config-if)# ip access-group 105 out Which method would allow the network administrator to modify the ACL and include FTP transfers from any source IP address? R1(config)# interface gi0/0 R1(config-if)# no ip access-group 105 out R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 20 R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 21 R1(config)# interface gi0/0 R1(config-if)# ip access-group 105 out R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 20 R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 21 R1(config)# interface gi0/0 R1(config-if)# no ip access-group 105 out R1(config)# no access-list 105 R1(config)# access-list 105 permit udp host 10.0.70.23 host 10.0.54.5 range 1024 5000 R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 20 R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 21 R1(config)# access-list 105 deny ip any any R1(config)# interface gi0/0 R1(config-if)# ip access-group 105 out R1(config)# access-list 105 permit udp host 10.0.70.23 host 10.0.54.5 range 1024 5000 R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 20 R1(config)# access-list 105 permit tcp any host 10.0.54.5 eq 21 R1(config)# access-list 105 deny ip any any 143. Which three statements are generally considered to be best practices in the placement of ACLs? (Choose three.)  Filter unwanted trafÏc before it travels onto a low-bandwidth link.  Place standard ACLs close to the destination IP address of the trafÏc.  Place standard ACLs close to the source IP address of the traffic.  Place extended ACLs close to the destination IP address of the traffic.  Place extended ACLs close to the source IP address of the trafÏc.  For every inbound ACL placed on an interface, there should be a matching outbound ACL. 144. Match the term to the web link http://www.buycarsfromus.com/2020models/ford/suv.html#Escape component. (Not all options are used.) Http —-> Protocol buycarsfromus.com/2020models/ford/suv.html#Escape —-> URN http://www.buycarsfromus.com/2020models/ford/suv.html —-> URL http://www.buycarsfromus.com/2020models/ford/suv.html#Escape —-> URI #Escape —- Fragment 145. What command would be used as part of configuring NAT or PAT to display all static translations that have been configured?  show ip nat translations  show ip pat translations  show ip cache  show running-config 146. A network administrator modified an OSPF-enabled router to have a hello timer setting of 20 seconds. What is the new dead interval time setting by default?  40 seconds  60 seconds  80 seconds  100 seconds