Q6. For security purposes, an IPv6 traffic filter was configured under various interfaces on the local router. However, shortly after implementing the traffic filter, OSPFv3 neighbor adjacencies were lost. What caused this issue?

A. The traffic filter is blocking all ICMPv6 traffic.

B. The global anycast address must be added to the traffic filter to allow OSPFv3 to work properly.

C. The link-local addresses that were used by OSPFv3 were explicitly denied, which caused the neighbor relationships to fail.

D. IPv6 traffic filtering can be implemented only on SVIs.

View Answer

Q7. What does the following access list, which is applied on the external interface FastEthernet 1/0 of the perimeter router, accomplish?

router(config)#access-list 101 deny ip 10.0.0.0 0.255.255.255 any log

router (config)#access-list 101 deny ip 192.168.0.0 0.0.255.255 any log

router (config)#access-list 101 deny ip 172.16.0.0 0.15.255.255 any log router (config)#access-list 101 permit ip any any

router (config)#interface fastEthernet 1/0 router (config-if)#ip access-group 101 in

A. It prevents incoming traffic from IP address ranges 10.0.0.0-10.0.0.255, 172.16.0.0- 172.31.255.255, 192.168.0.0-192.168.255.255 and logs any intrusion attempts.

B. It prevents the internal network from being used in spoofed denial of service attacks and logs any exit to the Internet.

C. It filters incoming traffic from private addresses in order to prevent spoofing and logs any intrusion attempts.

D. It prevents private internal addresses to be accessed directly from outside.

View Answer

Q8. Study this exhibit below carefully.

What is the effect of the distribute-list command in the R1 configuration?

A. R1 will permit only the 10.0.0.0/24 route in the R2 RIP updates

B. R1 will not filter any routes because there is no exact prefix match

C. R1 will filter the 10.1.0.0/24 and the 172.24.1.0/24 routes from the R2 RIP updates

D. R1 will filter only the 172.24.1.0/24 route from the R2 RIP updates

View Answer

Q9. IPv6 has just been deployed to all of the hosts within a network, but not to the servers. Which feature allows IPv6 devices to communicate with IPv4 servers?

A. NAT

B. NATng

C. NAT64

D. dual-stack NAT

E. DNS64

View Answer

Q10. What is the purpose of the autonomous-system {autonomous-system-number} command?

A. It sets the EIGRP autonomous system number in a VRF.

B. It sets the BGP autonomous system number in a VRF.

C. It sets the global EIGRP autonomous system number.

D. It sets the global BGP autonomous system number.

View Answer

Q11. When using SNMPv3 with NoAuthNoPriv, which string is matched for authentication?

A. username

B. password

C. community-string

D. encryption-key

View Answer

Q12. A network engineer finds that a core router has crashed without warning. In this situation, which feature can the engineer use to create a crash collection?

A. secure copy protocol

B. core dumps

C. warm reloads

D. SNMP

E. NetFlow

View Answer

Q13. Which command should be added to RTB under router bgp 100 to allow only the external OSPF routes to be redistributed to RTC?

A. redistribute ospf 1

B. redistribute ospf 1 match external 1

C. redistribute ospf 1 match external 2

D. redistribute ospf 1 match external 1 external 2

View Answer

Q14. Which version or versions of NetFlow support MPLS?

A. all versions of NetFlow

B. NetFlow version 9

C. NetFlow version 8

D. NetFlow version 5

E. NetFlow version 8 and 9

View Answer

Q15. Which protocol uses dynamic address mapping to request the next-hop protocol address for a specific connection?

A. Frame Relay inverse ARP

B. static DLCI mapping

C. Frame Relay broadcast queue

D. dynamic DLCI mapping

View Answer