Question 1

Refer to the exhibits:

R1 and R2 are directly connected and IS-IS routing has been enabled between R1 and R2 R1 message periodically Based on this output, which statement is true?

Options :

A : IS-IS neighbor authentication is failing for Level 2 first and then for Level 1 PDUs

B : 1S-1S neighbor authentication is failing for Level 1 and Level 2 PDUs .

C : IS-IS neighbor authentication is failing for Level 1 PDUs only

D : IS-IS neighbor authentication is failing for Level 2 PDUs only.

Answer: C

Question 2

After troubleshooting multiple outages on the network due to repeated configuration errors, the network architect asked an engineer to enable NETCONF to facilitate future configurations. The configuration must enable syslog messaging to record NETCONF notifications from each of the numerous devices on the network. Which configuration must the engineer apply?

Options :

A :

username cisco test taker privilege 15 password 0 cisco test

aaa new-model

aaa authorization exec default local

snmp-server community cisco test RW

netconf-yang cisco-ia snmp-community-string ciscotest

logging history warnings

B :

username cisco test taker privilege 15 password 0 ciscotest

aaa new-model

aaa authorization exec default local

snmp-server community ciscotest RW

netconf-yang cisco

logging history critical

C :

netconf-yang

username ciscotesttaker privilege 15 password 0 ciscotest

aaa new-model

aaa authorization exec default local

snmp-server community ciscotest RW

netconf-yang cisco-ia snmp-community-string ciscotest

logging history debugging

D :

netconf-yang

username ciscotesttaker privilege 15 password 0 ciscotest

snmp-server community ciscotest RW

netconf-yang cisco-ia snmp-community-string ciscotest

logging history informational

Answer: C

Question 3

Refer to the exhibit.

Refer to the exhibit. An ISP provides shared VoIP Extranet services to a customer in VRF-100 with these

settings:

The VoIP services are hosted in the 198.19.100.0/24 space.

The customer has been assigned the 198.18.1.0/29 IP address block.

VRF-100 is assigned import and export route target 65010:100.

Which configuration must the engineer apply to PE-1 to provision VRF-100 and provide access to the shared

services?

Options :

A :

vrf definition VRF-100

rd 172.17.255.1:100

!

address-family ipv4

export map VRF-100-EXPORT

import map VRF-100-IMPORT

exit-address-family

!

route-map VRF-100-EXPORT permit 10

match ip address prefix-list VRF-100-ALLOWED-EXPORT

set extcommunity rt 65010:100 65010:2999

route-map VRF-100-EXPORT permit 20

set extcommunity rt 65010:100

!

route-map VRF-100-IMPORT permit 10

match extcommunity VRF-100-RT SHARED-SERVICES

!

ip extcommunity-list standard SHARED-SERVICES permit rt 65010:1999

ip extcommunity-list standard VRF-100-RT permit rt 65010:100

ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29

B :

vrf definition VRF-100

rd 172.17.255.1:100

!

address-family ipv4

export map VRF-100-EXPORT

route-target import 65010:100

route-target import 65010:2999

exit-address-family

!

route-map VRF-100-EXPORT permit 10

match ip address prefix-list VRF-100-ALLOWED-EXPORT

set extcommunity rt 65010:100 65010:1999

route-map VRF-100-EXPORT permit 20

set extcommunity rt 65010:100

!

ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29

C :

vrf definition VRF-100

rd 172.17.255.1:100

!

address-family ipv4

export map VRF-100-EXPORT

route-target import 65010:100

route-target import 65010:1999

exit address-family

!

route-map VRF-100-EXPORT permit 10

match ip address prefix-list VRF-100-ALLOWED-EXPORT

set extcommunity rt 65010:100 65010:2999

route-map VRF-100-EXPORT permit 20

set extcommunity r 65010:100

!

ip prefix-list VRF-100-ALLOWED-EXPORT seq 5 permit 198.18.1.0/29

D :

vrf definition VRF-100

rd 172.17.255.1:100

!

address-family ipv4

route-target export 65010:100

route-target export 65010:1999

route-target import 65010:100

route-target import 65010:2999

exit-address-family

Answer: D

Question 4

Refer to the exhibit.

An engineer is updating this network to meet these conditions:
* Area 10 will receive inter-area routes and support mutual redistribution of external routes with the extranet.
* The ::/0 route is prohibited in Area 10.
* Area 11 will receive only the ::/0 route from the ABR.
* External route redistribution is not supported in Area 11.
* The ABR in Area 11 will advertise no interarea routes.
Which two configurations must be performed to meet the requirements? (Choose two.)

Options :

A : Configure area 11 as nssa no-summary on R7 and as nssa on XR31.

B : Configure area 10 as stub on R9 and XR32.

C : Configure area 11 as stub no-summary on R7 and as stub on XR31.

D : Configure area 11 as nssa default-information-originate on R7 and as nssa on XR31.

E : Configure area 10 as nssa on R9 and XR32.

Answer: A,C

Question 5

Refer to the exhibit. A network engineer is configuring router RB to secure BGP advertisements against route hijacking activity. RB must validate all prefixes that it receives from origin AS 200 before installing them in the BGP route table. Which configuration meets the requirement?

Options :

A :

RB(config)# router bgp 100

RB(config-router)# address-family ipv4 unicast

RB(config-router-af)# bgp bestpath origin-as use validity

B : RB(config-bgp)# router bgp 100

RB(config-bgp)# bgp origin-as validation signal ibgp

RB(config-bgp)# bgp bestpath origin-as allow invalid

C :

RB(config-bgp)# router bgp 100

RB(config-bgp)# bgp origin-as validation time off

D :

RB(config)# router bgp 100

RB(config-router)# address-family ipv4 unicast

PB(config-router-af)# bgp origin-as validation enable

Answer: D