Q1. Which option is a method of restricting access for users based on user roles and locales? A. RBAC
B. ACE
C. LDAP
D. RADIUS
Answer: A
Q2. Which option is a primary requirement for the deployment of an IPv6-enabled network via the native method (dual-stack model) within the enterprise campus environment?
A. hardware-based switching support for IPv6 forwarding on all campus switches
B. restriction of IPv6-enabled devices to the core layer
C. manual implementation of tunneling between IPv6-incompatible devices in an IPv4-over-IPv6 tunnel
D. disabling of multicast in the distribution layer prior to implementation of IPv6
Answer: A
Q3. Which two design concerns must be addressed when designing a multicast implementation? (Choose two.)
A. only the low-order 23 bits of the MAC address are used to map IP addresses
B. only the low-order 24 bits of the MAC address are used to map IP addresses
C. only the high-order 23 bits of the MAC address are used to map IP addresses
D. only the low-order 23 bits of the IP address are used to map MAC addresses
E. the 0x01004f MAC address prefix is used for mapping IP addresses to MAC addresses
F. the 0x01005e MAC address prefix is used for mapping IP addresses to MAC addresses
Answer: A,F
Q4. Which option is an advanced WAN services design consideration for a multipoint architecture that connects two or more customer devices using Ethernet bridging techniques over an MPLS network?
A. VPLS
B. Metro Ethernet
C. MPLS
D. SONET/SDH
Answer: A
Q5. Which four options are network virtualization technologies that are employed in the data center? (Choose four.)
A. VLAN
B. VSAN
C. VRF
D. VRP
E. VLC
F. VPC
Answer: A,B,C,F
Q6. What network technology provides Layer 2 high availability between the access and distribution layers?
A. HSRP
B. MEC
C. EIGRP
D. GLBP
Answer: B
Q7. From a design perspective which two of the following OSPF statements are most relevant? (Choose two)
A. OSPF stub areas can be thought of as a simple form of summarization
B. OSPF cannot filter intra-area routes
C. An ABR can only exist in two areas - the backbone and one adjacent area
D. Performance issues in the Backbone area can be offset by allowing some traffic to transit a non-backbone area
E. The size of an area (the LSDB) will be constrained by the size of the IP MTU
Answer: A,B
Q8. Which option describes why duplicate IP addresses reside on the same network in Cisco network design?
A. HSRP designed network
B. using Cisco ACE in active/passive mode
C. VRRP designed network
D. running multiple routing protocols
Answer: B
Q9. Port security supports which type of port?
A. SPAN destination port
B. EtherChannel port-channel port
C. nonnegotiating trunk port
D. DTP-enabled trunk port
Answer: C
Q10. A network engineer must perform posture assessments on Cisco ASA remote access VPN clients and control their network access based on the results. What mode is the Cisco best practice NAC deployment design for this situation?
A. Layer 2 in-band real IP gateway mode
B. Layer 2 out-of-band real IP gateway mode
C. Layer 3 in-band virtual gateway mode
D. Layer 3 out-of-band virtual gateway mode
Answer: C