NEW QUESTION 1

Drag and drop the components of a GRE tunnel from the left into the correct order on the right when monitoring a GRE encapsulated packet.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
A. Source tunnel IP headerB. Destination tunnel IP headerC. GRE headerD. Original source IP header

NEW QUESTION 2

What level of logging is enabled on a Router where the following logs are seen?
%LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up

• A. alerts
• B. critical
• C. errors
• D. notifications

Answer: D

Explanation:
Cisco routers, switches, PIX and ASA firewalls prioritize log messages into 8 levels (0-7), as shown below: LevelLevel NameDescription
0 Emergencies System is unusable 1 Alerts Immediate action needed 2 Critical Critical conditions
3 Errors Error conditions
4 Warnings Warning conditions
5 Notifications Informational messages
6 Informational Normal but significant conditions 7 Debugging Debugging messages
When you enable logging for a specific level, all logs of that severity and greater (numerically less) will be logged. In this case we can see that logging level of 3 (as seen by the 3 in “LINK-3-UPDOWN”) and level 5 (as seen by the 5 in “LINEPROTO-5-UPDOWN”) are shown, which means that logging level 5 must have been configured. As shown by the table, logging level 5 is Notifications.

NEW QUESTION 3

Which of the following is an unlikely reason for the ARP process to fail?

• A. CEF switching is disabled on the switch
• B. The source device and destination device are in different VLANs
• C. The VLAN is excluded from the trunk
• D. The host is connected to the switch through an IP phone
• E. A faulty cable from host to switch or between switches
• F. The trunking encapsulation type is inconsistent on the two ends of the link

Answer: AD

NEW QUESTION 4

Which two statements about GRE tunnel keepalives are true? (Choose two)

• A. They are supported in point-to-point GRE tunnels.
• B. They are supported in multipoint GRE tunnels.
• C. They are supported in VRFs only if the fVRF and iVRF match.
• D. They are supported with IPsec tunnel protection.
• E. They are enabled by default.

Answer: AD

NEW QUESTION 5

The implementations group has been using the test bed to do a ‘proof-of-concept’ that requires both Client 1 and Client 2 to access the WEB Server at 209.65.200.241. After several changes to the network addressing, routing scheme, DHCP services, NTP services, layer 2 connectivity, FHRP services, and device security, a trouble ticket has been opened indicating that Client 1 cannot ping the 209.65.200.241 address.
Use the supported commands to isolated the cause of this fault and answer the following questions. The fault condition is related to switch technology?

• A. NTP
• B. Switch-to-Switch Connectivity
• C. Loop Prevention
• D. Access Vlans
• E. VLAN ACL Port ACL
• F. Switch Virtual Interface
• G. Port Security

Answer: D

Explanation:
The problem here is that VLAN 10 is not configured on the proper interfaces on switch ASW1.

NEW QUESTION 6

You examine the port statistics on a Cisco Catalyst switch and notice an excessive number of frames are being dropped. Which of the following are possible reasons for the drops?

• A. Unknown destination MAC address
• B. Bad cabling
• C. MAC forwarding table is full
• D. Port configured for half duplex
• E. Port configured for full duplex
• F. Network congestion

Answer: BF

NEW QUESTION 7

Which of the following are shared distribution tree characteristics? (Choose all that apply.)

• A. Memory requirements are higher for shared distribution tree than for source distribution tree.
• B. Creates a tree from a central RP to all last-hop routers.
• C. Uses a rendezvous point.
• D. An optimal path is created between each source router and each last-hop router.
• E. Place (S,G) entry in each router's multicast routing table.
• F. Place (*,G) entry in a router's multicast routing to table.

Answer: CF

NEW QUESTION 8

You must connect two remote sites over the public internet. Multicast support, security, and simplicity are required. Which tunneling technology sould you consider?

• A. MPLS
• B. GRE over IPsec
• C. GET VPN
• D. IPsec

Answer: B

NEW QUESTION 9

Drag and drop the GRE header fields from the left into the correct categories on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Gre header
Reserved 0 Version Protocol Checksum
GRE header extension
Key
Sequence number

NEW QUESTION 10

Scenario:
You have been asked by your customer to help resolve issues in their routed network. Their network engineer has deployed HSRP. On closer inspection HSRP doesn't appear to be operating properly and it appears there are other network problems as well. You are to provide solutions to all the network problems.





You have received notification from network monitoring system that link between R1 and R5 is down and you noticed that the active router for HSRP group 1 has not failed over to the standby router for group 1. You are required to troubleshoot and identify the issue.

• A. There is an HSRP group track command misconfiguration
• B. There is an HSRP group priority misconfiguration
• C. There is an HSRP authentication misconfiguration
• D. There is an HSRP group number mismatch
• E. This is not an HSRP issue; this is routing issue.

Answer: A

Explanation:
When looking at the HSRP configuration of R1, we see that tracking has been enabled, but that it is not tracking the link to R5, only the link to R2:

R1 should be tracking the Eth 0/1 link, not 0/0 to achieve the desired affect/

NEW QUESTION 11

The implementations group has been using the test bed to do a ‘proof-of-concept’ that requires both Client 1 and Client 2 to access the WEB Server at 209.65.200.241. After several changes to the network addressing, routing scheme, DHCP services, NTP services, layer 2 connectivity, FHRP services, and device security, a trouble ticket has been opened indicating that Client 1 cannot ping the 209.65.200.241 address.
Use the supported commands to isolated the cause of this fault and answer the following questions. The fault condition is related to which technology?

• A. NTP
• B. IP DHCP Server
• C. IPv4 OSPF Routing
• D. IPv4 EIGRP Routing
• E. IPv4 Route Redistribution
• F. IPv6 RIP Routing
• G. IPv6 OSPF Routing
• H. IPv4 and IPv6 Interoperability
• I. IPv4 layer 3 security

Answer: E

Explanation:
On R4, in the redistribution of EIGRP routing protocol, we need to change name of route-map to resolve the issue. It references route-map OSPF_to_EIGRP but the actual route map is called OSPF->EIGRP.

NEW QUESTION 12

Which three protocols or protocol combinations does Management Plane Protection (MPP) support? (Choose three.)

• A. SFTP
• B. SSH
• C. Both HTTP and HTTPS
• D. FTP
• E. Only HTTP
• F. OSPF

Answer: BCD

NEW QUESTION 13

The implementations group has been using the test bed to do a ‘proof-of-concept’ that requires both Client 1 and Client 2 to access the WEB Server at 209.65.200.241. After several changes to the network addressing, routing scheme, DHCP services, NTP services, and FHRP services, a trouble ticket has been opened indicating that Client 1 cannot ping the 209.65.200.241 address.
Use the supported commands to isolated the cause of this fault and answer the following questions. What is the solution to the fault condition?

• A. In Configuration mode, using the interface port-channel 13 command, then configure switchport trunk allowed vlan none followed by switchport trunk allowed vlan 20,200 commands.
• B. In Configuration mode, using the interface port-channel 13, port-channel 23, then configure switchport trunk none allowed vlan none followed by switchport trunk allowed vlan 10,200 commands.
• C. In Configuration mode, using the interface port-channel 23 command, then configure switchport trunk allowed vlan none followed by switchport trunk allowed vlan 20,200 commands.
• D. In Configuration mode, using the interface port-channel 23, port-channel, then configure switchport trunk allowed vlan none followed by switchport trunk allowed vlan 10,20,200 commands.

Answer: B

Explanation:
We need to allow VLANs 10 and 200 on the trunks to restore full connectivity. This can be accomplished by issuing the “switchport trunk allowed vlan 10,200” command on the port channels used as trunks in DSW1.

NEW QUESTION 14

A customer network engineer has made configuration changes that have resulted in some loss of connectivity. You have been called in to evaluate a switch network and suggest resolutions to the problems.





Which of statement is true regarding STP issue identified with switches in the given topology?

• A. Loopguard configured on the New_Switch places the ports in loop inconsistent state
• B. Rootguard configured on SW1 places the ports in root inconsistent state
• C. Bpduguard configured on the New_Switch places the access ports in error-disable
• D. Rootguard configured on SW2 places the ports in root inconsistent state

Answer: A

Explanation:
On the new switch, we see that loopguard has been configured with the “spanning-tree guard loop” command.

The loop guard feature makes additional checks. If BPDUs are not received on a non-designated port, and loop guard is enabled, that port is moved into the STP loop-inconsistent blocking state, instead of the listening / learning / forwarding state. Without the loop guard feature, the port assumes the designated port role. The port moves to the STP forwarding state and creates a loop.

NEW QUESTION 15

In what situation would the command ip helper-address be required? (Choose the best answer.)

• A. Only when there is a duplicate IP address caused by a combination of static and dynamic IP address allocations
• B. On each router that exists between the client and the server
• C. Only when a router separates the client from the server
• D. Only if the DHCP sever issues a DHCPNAK to the initial request
• E. Only when the client is on the same subnet as the server
• F. Only when the DHCP pool is out of IP addresses

Answer: C

NEW QUESTION 16

Which of the following pieces of information will the command show interface provide? (Choose all that apply.)

• A. Layer 1 status
• B. Output queue drops
• C. Interface CPU utilization
• D. Cable type connected to interface
• E. Layer 2 status
• F. Input queue drops

Answer: ABEF

NEW QUESTION 17

Scenario:
A customer network engineer has edited their OSPF network configuration and now your customer is experiencing network issues. They have contacted you to resolve the issues and return the network to full functionality.







The 6.6.0.0 subnets are not reachable from R4. how should the problem be resolved?

• A. Edit access-list 46 in R6 to permit all the 6.6.0.0 subnets
• B. Apply access-list 46 in R6 to a different interface
• C. Apply access-list 1 as a distribute-list out under router ospf 100 in R4
• D. Remove distribute-list 64 out on R6
• E. Remove distribute-list 1 in ethernet 0/1 in R4
• F. Remove distribute-list 1 in ethernet 0/0 in R4

Answer: D

Explanation:
Here we see from the running configuration of R6 that distribute list 64 is being used in the outbound direction to all OSPF neighbors.

However, no packets will match the 6.6.0.0 in this access list because the first line blocks all 6.0.0.0 networks, and since the 6.6.0.0 networks will also match the first line of this ACL, these OSPF networks will not be advertised because they are first denied in the first line of the ACL.

NEW QUESTION 18

The implementation group has been using the test bed to do an IPv6 'proof-of-concept1. After several changes to the network addressing and routing schemes, a trouble ticket has been opened indicating that the loopback address on R1 (2026::111:1) is not able to ping the loopback address on DSW2 (2026::102:1).
The fault condition is related to which technology?

• A. NTP
• B. IPv4 OSPF Routing
• C. IPv6 OSPF Routing
• D. IPV4 and IPV6 Interoperability
• E. IPv4 layer 3 security

Answer: D

Explanation:
As explained earlier, the problem is with route misconfigured tunnel modes on R3. R3 is using tunnel mode ipv6, while R4 is using the default of GRE.

NEW QUESTION 19

Refer to the Exhibit:

Which output is expected in the blank line for the OSPF adjacency process?

• A. DOWN
• B. EXSTART
• C. EXCHANGE
• D. LOADING

Answer: B

Explanation:
You can check the output of "debug ip ospf adj" here:

NEW QUESTION 20

Which of the following is not considered a common approach to narrow the field of potential problem causes? (Choose the best answer.)

• A. Following the traffic path
• B. Top-down
• C. Comparing configurations
• D. Bottom-up
• E. Divide and conquer
• F. Examine SLAs

Answer: F

NEW QUESTION 21

The implementations group has been using the test bed to do a ‘proof-of-concept’ that requires both Client 1 and Client 2 to access the WEB Server at 209.65.200.241. After several changes to the network addressing, routing scheme, DHCP services, NTP services, layer 2 connectivity, FHRP services, and device security, a trouble ticket has been opened indicating that Client 1 cannot ping the 209.65.200.241 address.
Use the supported commands to isolated the cause of this fault and answer the following questions. On which device is the fault condition located?

• A. R1
• B. R2
• C. R3
• D. R4
• E. DSW1
• F. DSW2
• G. ASW1
• H. ASW2

Answer: E

Explanation:
On DSW1, VALN ACL, Need to delete the VLAN access-map test1 whose action is to drop access-list 10; specifically 10.2.1.3

NEW QUESTION 22

For which two reasons might a GRE Tunnel interface enter an up/down state? (Choose two)

• A. The tunnel source is using a loopback interface.
• B. The tunnel mode is defined as transport.
• C. Keepalives are disabled on the interfaces
• D. The route to the destination is through the tunnel itself.
• E. The tunnel source interface is down.

Answer: DE

NEW QUESTION 23

The implementations group has been using the test bed to do a ‘proof-of-concept’ that requires both Client 1 and Client 2 to access the WEB Server at 209.65.200.241. After several changes to the network addressing, routing scheme, DHCP services, NTP services, layer 2 connectivity, FHRP services, and device security, a trouble ticket has been opened indicating that Client 1 cannot ping the 209.65.200.241 address.
Use the supported commands to isolated the cause of this fault and answer the following questions. The fault condition is related to which technology?

• A. BGP
• B. NTP
• C. IP NAT
• D. IPv4 OSPF Routing
• E. IPv4 OSPF Redistribution
• F. IPv6 OSPF Routing
• G. IPv4 layer 3 security

Answer: D

Explanation:
On R1, for IPV4 authentication of OSPF the command is missing and required to configure------ ip ospf authentication message-digest

NEW QUESTION 24

FCAPS is a network maintenance model defined by ISO. It stands for which of the following?

• A. Fault Management
• B. Action Management
• C. Configuration Management
• D. Protocol Management
• E. Security Management

Answer: ACE

Explanation:
The FCAPS maintenance model consists of the following:
FCAPS Maintenance Tasks:
Fault – collect info from routers and switches, email at threshold limits, respond to trouble tickets Configuration – log changes to network h/w or s/w. alert relevant folks of planned changes
Accounting – invoice users
Performance – monitor network performance and deploy QoS
Security – deploy firewall, VPN, IPS, create security policy, use AAA to validate credentials, etc.

NEW QUESTION 25

The implementations group has been using the test bed to do a ‘proof-of-concept’. After several changes to the network addressing, routing schemes, a trouble ticket has been opened indicating that the loopback address on R1 (2026::111:1) is not able to ping the loopback address on DSW2(2026::102:1).
Use the supported commands to isolated the cause of this fault and answer the following questions. The fault condition is related to which technology?

• A. NTP
• B. IPv4 OSPF Routing
• C. IPv6 OSPF Routing
• D. IPv4 layer 3 security

Answer: C

Explanation:
On R2, IPV6 OSPF routing, configuration is required to add ipv6 ospf 6 area 0 under interface serial 0/0/0.23

NEW QUESTION 26
......