Q1. What command can you enter to configure an enable password that uses an encrypted password from another configuration?

A. enable secret $abc%!#.Cd34$!ao0

B. enable secret 7 Sabc%!#.Cd34$!ao0

C. enable secret 0 Sabc%U*.Cd34$!ao0

D. enable secret 5 $abc%!#.Cd34$!ao0

E. enable secret 15 $abc%i#.Cd34$!ao0

F. enable secret 6 $abc%!#.Cd34$!ao0

View Answer

Q2. Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address 10.10.10.1?

A. ip access-list extended 200 deny tcp host 10.10.10.1 eq 80 any permit ip any any

B. ip access-list extended 10 deny tcp host 10.10.10.1 any eq 80 permit ip any any

C. ip access-list extended NO_HTTP deny tcp host 10.10.10.1 any eq 80

D. ip access-list extended 100 deny tcp host 10.10.10.1 any eq 80 permit ip any any

View Answer

Q3. Refer to the following configuration command. router (config-line)# ntp master 10

Which statement about this command is true?

A. The router acts as an authoritative NTP clock and allows only 10 NTP client connections.

B. The router acts as an authoritative NTP clock at stratum 10.

C. The router acts as an authoritative NTP clock with a priority number of 10.

D. The router acts as an authoritative NTP clock for 10 minutes only.

View Answer

Q4. After testing various dynamic IPv6 address assignment methods, an engineer decides that more control is needed when distributing addresses to clients. Which two advantages does DHCPv6 have over EUI-64 (Choose two.)

A. DHCPv6 requires less planning and configuration than EUI-64 requires.

B. DHCPv6 allows for additional parameters to be sent to the client, such as the domain name and DNS server.

C. DHCPv6 providers tighter control over the IPv6 addresses that are distributed to clients.

D. DHCPv6 does not require the configuration of prefix pools.

E. DHCPv6 does not require neighbor and router discovery on the network segment.

View Answer

Q5. Which two BGP neighbor states are valid? (Choose Two)

A. established

B. active

C. stuck in active

D. 2-WAY

E. unknown

F. DROTHER

View Answer

Q6. What is the purpose of configuring the router as a PPPoE client?

A. to provide VPN access over L2TP

B. to enable PPP session from the router to the termination device at the headend for metroEthernet connectivity

C. for DSL connectivity and removing the need for the end-user PC to run the PPPoE client software

D. for connecting the router to a cable modem, which bridges the Ethernet frames from the router to the cable modem termination system

View Answer

Q7. Which of the following are characteristics of TACACS+? (Choose two.)

A. Uses UDP

B. Encrypts an entire packet

C. Offers robust accounting

D. Cisco-proprietary

View Answer

Q8. Which statement is true about the command ipv6 ospf 1 area 0?

A. It must be issued in router global configuration mode to enable the OSPF process for IPv6.

B. It must be issued in interface configuration mode to enable the OSPF process for IPv6.

C. It must be issued before the network command to enable the OSPF process for IPv6.

D. It must be issued after the network command to enable the OSPF process for IPv6.

View Answer

Q9. A network engineer executes the show ip cache flow command. Wich two types of information are displayed in the report that is generated? (Choose 2)

A. top talkers

B. flow export statistics

C. flow sample for specific protocols

D. MLS flow traffic

E. IP packet distribution

View Answer

Q10. A network engineer is trying to modify an existing active NAT configuration on an IOS router by using the following command:

(config)# no ip nat pool dynamic-nat-pool 192.1.1.20 192.1.1.254 netmask 255.255.255.0 Upon entering the command on the IOS router, the following message is seen on the

console:

%Dynamic Mapping in Use, Cannot remove message or the %Pool outpool in use, cannot destroy

What is the least impactful method that the engineer can use to modify the existing IP NAT configuration?

A. Clear the IP NAT translations using the clear ip nat traffic * " command, then replace the NAT configuration quickly, before any new NAT entries are populated into the translation table due to active NAT traffic.

B. Clear the IP NAT translations using the clear ip nat translation * " command, then replace the NAT configuration quickly, before any new NAT entries are populated into the translation table due to active NAT traffic.

C. Clear the IP NAT translations using the reload command on the router, then replace the NAT configuration quickly, before any new NAT entries are populated into the translation table due to active NAT traffic.

D. Clear the IP NAT translations using the clear ip nat table * " command, then replace the NAT configuration quickly, before any new NAT entries are populated into the translation table due to active NAT traffic.

View Answer