What is a consideration when designing a Cisco SD-Access underlay network? End user subnets and endpoints are part of the underlay network The underlay switches provide endpoint physical connectivity for users Static routing is a requirement It must support IPv4 and IPv6 underlay networks.
What is a characteristic of a virtual machine? It relies on hypervisors to allocate computing resources for it It is deployable without a hypervisor to host it It must run the same operating system as its host It must be aware of other virtual machines, in order to allocate physical resources for them.
What is one difference between Saltstack and Ansible? SaltStack uses an API proxy agent to program Cisco boxes on agent mode, whereas Ansible uses a Telnet connection SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box SaltStack is constructed with minion, whereas Ansible is constructed with YAML SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus.
What is the centralized control policy in a Cisco SD-WAN deployment? list of ordered statements that define user access policies list of enabled services for all nodes within the cloud set of rules that governs nodes authentication within the cloud set of statements that defines how routing is performed.
Which command set configures RSPAN to capture outgoing traffic from VLAN 3 on interface GigabitEthernet 0/3 while ignoring other VLAN traffic on the same interface? monitor session 2 source interface gigabitethernet0/3 rx
monitor session 2 filter vlan 3
monitor session 2 source interface gigabitethernet0/3 tx
monitor session 2 filter vlan 3
monitor session 2 source interface gigabitethernet0/3 rx
monitor session 2 fitter vlan 1-2,4 – 4094
monitor session 2 source interface gigabitethernet0/3 tx
monitor session 2 filter vlan 1-2, 4 – 4094
.
Refer to the exhibit.
R1#show crypto isakmp sa
IPv4 Crypto ISAKMP SA
dst src state conn-id status
209.165.201.6 209.165.201.1 QM_IDLE 101 ACTIVE
After configurating an IPsec VPN, an engineer enters the show command to verify the ISAKMP SA status. What does the status show?
Peers have exchanged keys, but ISAKMP SA remains unauthenticated. ISAKMP SA is authenticated and can be used for Quick Mode. VPN peers agreed on parameters for the ISAKMP SA ISAKMP SA has been created, but it has not continued to form.
Refer to the exhibit.
An engineer attempts to create a configuration to allow the Blue VRF to leak into the global routing table, but the configuration does not function as expected. Which action resolves this issue?
Change the access-list number in the route map Change the source network that is specified in access-list 101 Change the route-map configuration to VRF_BLUE Change the access-list destination mask to a wildcard.
Refer to the exhibit.
POSTMAN is showing an attempt to retrieve network device information from Cisco DNA Center API. What is the issue?
The token has expired The URI string is incorrect Authentication has failed The JSON payload contains the incorrect UUID.
Running the script causes the output in the exhibit. Which change to the first line of the script resolves the error? from ncclient import * import manager from ncclient import import ncclient manager.
An engineer configures HSRP group 37. The configuration does not modify the default virtual MAC address. Which virtual MAC address does the group use? 00:00:0c:07:ac:25 00:00:0c:07:ac:37 C0:39:83:25:258:5 C0.00:00:25:00:00.
Which Cisco DNA center application is responsible for group-based access control permissions? Design Provision Assurance Policy.
Refer to the exhibit.
An engineer attempts to configure a trunk between switch SW1 and switch SW2 using DTP, but the trunk does not form. Which command should the engineer apply to switch SW2 to resolve this issue?
switchport mode access switchport nonegotiate no switchport switchport mode dynamic desirable.
Refer to the exhibit.
Which set of commands on router R1 allow deterministic translation of private hosts PC1, PC2, and PC3 to addresses in the public space? RouterR1(config)#int f0/0
RouterR1(config)#ip nat inside
RouterR1(config-if)#exit
RouterR1(config)#int f0/1
RouterR1(config)#ip nat outside
RouterR1(config-if)#exit
RouterR1(config-if)#access-list 1 10.10.10.0 0.0.0.255
RouterR1(config)#ip nat pool POOL 155.1.1.101 155.1.1.103 netmask 255.255.255.0
RouterR1(config)#ip nat inside source list 1 pool POOL
! RouterR1(config)#int f0/0
RouterR1(config)#ip nat outside
RouterR1(config-if)#exit
RouterR1(config)#int f0/1
RouterR1(config)#ip nat inside
RouterR1(config-if)#exit
RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101
RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102
RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103
! RouterR1(config)#int f0/0
RouterR1(config)#ip nat inside
RouterR1(config-if)#exit
RouterR1(config)#int f0/1
RouterR1(config)#ip nat outside
RouterR1(config-if)#exit
RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101
RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102
RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103
! RouterR1(config)#int f0/0
RouterR1(config)#ip nat inside
RouterR1(config-if)#exit
RouterR1(config)#int f0/1
RouterR1(config)#ip nat outside
RouterR1(config-if)#exit
RouterR1(config-if)#access-list 1 10.10.10.0 0.0.0.255
RouterR1(config)#ip nat inside source list 1 interface f0/1 overload
.
A client device roams between wireless LAN controllers that are mobility peers. Both controllers have dynamic interface on the same client VLAN. Which type of roam is described? intra-VLAN intra-controller inter-controller inter-subnet.
Which line must be added in the Python function to return the JSON object
{“cat_9k”:”FXS193202SE”)?
return (json.dumps({d[‘hostname’]: d[‘serialNumber’] for d in json.loads(test_json)[‘response’]})) return (json.loads({for d in json.dumps(test_json)[‘response’]: d[‘hostname’]: d[‘serialNumber’]})) return (json.loads({d[‘hostname’]: d[‘serialNumber’] for d in json.dumps(test_json)[‘response’]})) return (json.dumps({for d in json.loads(test_json)[‘response’]: d[‘hostname’]: d[‘serialNumber’]})).
Which two operational models enable an AP to scan one or more wireless channels for rouge access points and at the same time provide wireless services to clients? (Choose two) Sniffer Rouge detector Local FlexConnect Monitor.
Refer to the exhibit.
An engineer configures a new HSRP group. While reviewing the HSRP status, the engineer sees the logging message generated on R2. Which is the cause of the message?
A PC is on the network using the IP address 10.10.1.1 The HSRP configuration has caused a spanning-tree loop The HSRP configuration has caused a routing loop The same virtual IP address has been configured for two HSRP groups.
Refer to the exhibit. A network engineer troubleshoots an issue with the port channel between SW1 and SW2. Which command resolves the issue? SW1(config-if)#channel-group 10 mode active SW1(config-if)#channel-group 10 mode desirable SW2(config-if)#channel-group 10 mode on SW2(config-if)#switchport mode trunk.
Which new enhancement was implemented in Wi-Fi 6? Wi-Fi Protected Access 3 4096 Quadrature Amplitude Modulation Mode Uplink and Downlink Orthogonal Frequency Division Multiple Access Channel bonding.
How is MSDP used to interconnect multiple PIM-SM domains? MSDP depends on BGP or multiprotocol BGP for interdomain operation MSDP allows a rendezvous point to dynamically discover active sources outside of its domain MSDP SA request messages are used to request a list of active sources for a specific group MSDP messages are used to advertise active sources in a domain.
Drag and drop the characteristics from the left onto the routing protocols they describe on the right. EIGRP
+ can automatically summarize networks at the boundary
OSPF
+ supports virtual links
+ requires manual configuration of network summarization
nope.
Drag and drop the characteristics from the left onto the protocols they apply to on the right. OSPF
+ uses Dijkstra’s Shortest Path First algorithm
+ uses an election process
EIGRP
+ uses Diffused Update Algorithm
+ uses bandwidth, delay, reliability and load for routing metric
NOPE.
How is 802.11 traffic handled in a fabric-enabled SSID? converted by the AP into 802.3 and encapsulated into a VLAN centrally switched back to WLC where the user traffic is mapped to a VXLAN on the WLC centrally switched back to WLC where the user traffic is mapped to a VLAN on the WLC converted by the AP into 802.3 and encapsulated into VXLAN.
Drag and drop the wireless elements on the left to their definitions on the right. + the relative increase in signal strength of an antenna in a given direction: gain
+ a graph that shows the relative intensity of the signal strength of an antenna within its space: radiation patterns
+ measures the angle of an antenna pattern in which the relative signal strength is half-power below the maximum value: beamwidth
+ radiated electromagnetic waves that influence the orientation of an antenna within its electromagnetic field: polarization
NOPE.
Refer to the exhibit.
R1
interface Ethernet0/0
ip address 10.1.1.10 255.255.255.0
ip nat inside
!
interface Serial0/0
ip address 209.165.201.1 255.255.255.224
ip nat outside
!
ip nat pool Busi 209.165.201.1 209.165.201.2 netmask 255.255.255.252
ip nat inside source list 1 pool Busi
!
access-list permit 10.1.1.0 0.0.0.255
!
R1#show ip nat statistics
Total active translations: 1 (0 static, 1 dynamic, 0 extended)
Outside Interfaces:
Inside Interfaces:
Ethernet0/0
Hits: 119 Misses: 1
Expired translations: 0
Dynamic mappings:
-- Inside Source
access-list 1 pool Busi refcount 1
pool fred: netmask 255.255.255.252
start 209.165.201.1 end 209.165.201.2
type generic, total addresses 2, allocated 1 (50%), misses 0
A network engineer configures NAT on R1 and enters the show command to verify the configuration. What does the output confirm?
R1 is configured with NAT overload parameters The first packet triggered NAT to add on entry to NAT table A Telnet from 160.1.1.1 to 10.1.1.10 has been initiated R1 to configured with PAT overload parameters.
Which congestion queuing method on Cisco IOS based routers uses four static queues? low latency custom weighted fair Priority.
What does the Cisco DNA REST response indicate? Cisco DNA Center has the incorrect credentials for cat9000-1 Cisco DNA Center is unable to communicate with cat9000-1 Cisco DNA Center has the incorrect credentials for RouterASR-1 Cisco DNA Center has the incorrect credentials for cat3850-1.
Which AP mode allows an engineer to scan configured channels for rogue access points? local sniffer bridge monitor.
Where is radio resource management performed in a Cisco SD-access wireless solution? control plane node DNA Center Cisco CMX wireless controller.
Refer to the exhibit.
Rapid PVST+ is enabled on all switches. Which command set must be configured on Switch1 to achieve the following results on port fa0/1?
+ When a device is connected, the port transitions immediately to a forwarding state
+ The interface should not send or receive BPDUs.
+ If a BPDU is received, it continues operating normally.
Switch1(config)# interface f0/1
Switch1(config-if)# spanning-tree portfast
Switch1(config-if)# spanning-tree bpduguard enable
Switch1(config)# spanning-tree portfast bpduguard default
Switch1(config)# interface f0/1
Switch1(config-if)# spanning-tree portfast
Switch1(config)#interface f0/1
Switch1(config-if)# spanning-tree portfast
Switch1(config)#spanning-tree portfast bpdufilter default
Switch1(config)# interface f0/1
Switch1(config-if)# spanning-tree portfast
.
|
