NEW QUESTION 1
Which controller is the single plane of management for Cisco SD-WAN?

• A. vBond
• B. vEdge
• C. vSmart
• D. vManage

Answer: D

NEW QUESTION 2
What is the difference between the enable password and the enable secret password when service password encryption is enable on an IOS device?

• A. The enable password is encrypted with a stronger encryption method.
• B. There is no difference and both passwords are encrypted identically.
• C. The enable password cannot be decrypted.
• D. The enable secret password is protected via stronger cryptography mechanisms.

Answer: D

NEW QUESTION 3
Which action is the vSmart controller responsible for in an SD-WAN deployment?

• A. onboard vEdge nodes into the SD-WAN fabric
• B. distribute security information for tunnel establishment between vEdge routers
• C. manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric
• D. gather telemetry data from vEdge routers

Answer: B

NEW QUESTION 4
A local router shows an EBGP neighbor in the Active state. Which statement is true about the local router?

• A. The local router has active prefix in the forwarding table from the neighboring router
• B. The local router has BGP passive mode configured for the neighboring router
• C. The local router is attempting to open a TCP session with the neighboring router.
• D. The local router is receiving prefixes from the neighboring router and adding them in RIB-IN

Answer: C

NEW QUESTION 5
Refer to the exhibit.

An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthemet 0/1. Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 6
Refer to the exhibit.

Assuming that R is a CE router, which VRF is assigned to Gi0/0 on R1?

• A. VRF VPN_B
• B. Default VRF
• C. Management VRF
• D. VRF VPN_A

Answer: D

NEW QUESTION 7
Refer to the exhibit.

Which HTTP JSON response does the python code output give?

• A. NameError: name 'json' is not defined
• B. KeyError 'kickstart_ver_str'
• C. 7.61
• D. 7.0(3)I7(4)

Answer: B

NEW QUESTION 8
A response code of 404 is received while using the REST API on Cisco UNA Center to POST to this URI.
/dna/intent/api/v1 /template-programmer/project
What does the code mean?

• A. The client made a request a resource that does not exist.
• B. The server has not implemented the functionality that is needed to fulfill the request.
• C. The request accepted for processing, but the processing was not completed.
• D. The POST/PUT request was fulfilled and a new resource was created, Information about the resource is in the response body.

Answer: A

NEW QUESTION 9
Refer to the exhibit.

Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: A

NEW QUESTION 10
Refer to the exhibit.

What are two effect of this configuration? (Choose two.)

• A. Inside source addresses are translated to the 209.165.201.0/27 subnet.
• B. It establishes a one-to-one NAT translation.
• C. The 10.1.1.0/27 subnet is assigned as the inside global address range.
• D. The 209.165.201.0/27 subnet is assigned as the outside local address range.
• E. The 10.1.1.0/27 subnet is assigned as the inside local addresses.

Answer: AE

NEW QUESTION 11
Which statement about TLS is true when using RESTCONF to write configurations on network devices?

• A. It is provided using NGINX acting as a proxy web server.
• B. It is no supported on Cisco devices.
• C. It required certificates for authentication.
• D. It is used for HTTP and HTTPs requests.

Answer: C

NEW QUESTION 12
To increase total throughput and redundancy on the links between the wireless controller and switch, the customer enabled LAG on the wireless controller Which EtherChannel mode must be configured on the switch to allow the WLC to connect?

• A. Auto
• B. Active
• C. On
• D. Passive

Answer: C

NEW QUESTION 13
What the role of a fusion in an SD-Access solution?

• A. provides connectivity to external networks
• B. acts as a DNS server
• C. performs route leaking between user-defined virtual networks and shared services
• D. provides additional forwarding capacity to the fabric

Answer: C

NEW QUESTION 14
Refer to the exhibit.

SwitchC connects HR and Sales to the Core switch However, business needs require that no traffic from the Finance VLAN traverse this switch Which command meets this requirement?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: D

NEW QUESTION 15
Which requirement for an Ansible-managed node is true?

• A. It must be a Linux server or a Cisco device.
• B. It must have an SSH server running.
• C. It must support ad hoc commands.
• D. It must have an Ansible Tower installed.

Answer: A

NEW QUESTION 16
Which feature does Cisco TrustSec use to provide scalable, secure communication throughout a network?

• A. security group tag ACL assigned to each port on a switch
• B. security group tag number assigned to each port on a network
• C. security group tag number assigned to each user on a switch
• D. security group tag ACL assigned to each router on a network

Answer: B

NEW QUESTION 17
Which function does a fabric edge node perform in an SD-Access deployment?

• A. Connects the SD-Access fabric to another fabric or external Layer 3 networks
• B. Connects endpoints to the fabric and forwards their traffic
• C. Provides reachability border nodes in the fabric underlay
• D. Encapsulates end-user data traffic into LISP.

Answer: A

NEW QUESTION 18
Refer to the exhibit.

Which IP address becomes the active next hop for 192.168.102 0/24 when 192.168.101.2 fails?

• A. A.-192.168.101.18B.192.168.101.6C.192.168.101.10D.192.168.101.14

Answer: A

NEW QUESTION 19
Drag and drop the description from the left onto the correct QoS components on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Traffic Policing: Drops excessive Traffic, causes TCP retransmissions, introduce no delay/jitter Shaping: buffers, excessive traffic, introduce delay and jitter, typically delays, rather than drops traffic

NEW QUESTION 20
Which LISP infrastructure device provides connectivity between non-sites and LISP sites by receiving non-LISP traffic with a LISP site destination?

• A. PETR
• B. PITR
• C. map resolver
• D. map server

Answer: B

NEW QUESTION 21
What is a benefit of deploying an on-premises infrastructure versus a cloud infrastructure deployment?

• A. faster deployment times because additional infrastructure does not need to be purchased
• B. lower latency between systems that are physically located near each other
• C. less power and cooling resources needed to run infrastructure on-premises
• D. ability to quickly increase compute power without the need to install additional hardware

Answer: B

NEW QUESTION 22
Which statement about VXLAN is true?

• A. VXLAN uses TCP 35 the transport protocol over the physical data cento network
• B. VXLAN extends the Layer 2 Segment ID field to 24-bit
• C. which allows up to 4094 unique Layer 2 segments over the same network.
• D. VXLAN encapsulates a Layer 2 frame in an IP-UDP header, which allows Layer 2 adjacency across router boundaries.
• E. VXLAN uses the Spanning Tree Protocol for loop prevention.

Answer: C

NEW QUESTION 23
What is the structure of a JSON web token?

• A. three parts separated by dots: header payload, and signature
• B. header and payload
• C. three parts separated by dots: version header and signature
• D. payload and signature

Answer: A

NEW QUESTION 24
......