Preguntas nuevas

An engineer must export the contents of the devices object in JSON format. Which statement must be use?. json.print(Devices). json.loads(Devices). json.dumps(Devices). json.repr(Devices).

What is the function of Cisco DNA Center in a Cisco SD-Access deployment?. It is responsible for routing decisions inside the fabric. It is responsible for the design, management, provisioning, and assurance of the fabric network devices. It possesses information about all endpoints, nodes, and external networks related to the fabric. It provides integration and automation for all nonfabric nodes and their fabric counterparts.

An engineer troubleshoots connectivity issues with an application. Testing is performed from the server gateway, and traffic with the DF bit set is dropped along the path after increasing packet size. Removing the DF bit setting at the gateway prevents the packets from being dropped. What is the cause of this issue?. PMTUD does not work due to ICMP Packet Too Big messages being dropped by an ACL. The remote router drops the traffic due to high CPU load. The server should not set the DF bit in any type of traffic that is sent toward the network. There is a CoPP policy in place protecting the WAN router CPU from this type of traffic.

A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days. What is required to complete this task?. Add the username admin privilege 15 common-criteria-policy Administrators password 0 Cisco013579! command. No further action is required. The configuration is complete. Add the aaa authentication enable default Administrators command. The password expiry mechanism is on the AAA server and must be configured there.

Refer to the exhibit. BR1 router bgp 100 neighbor 172.24.109.1 remote-as 100 neighbor 172.24.109.1 next-hop self neighbor 209.165.202.134 remote-as 200 BR2 router bgp 100 neighbor 172.24.109.2 remote-as 100 neighbor 172.24.109.2 next-hop-self neighbor 209.165.200.230 remote-as 300 PE1 router bgp 200 bgp log-neighbor-changes neighbor 209.165.202.133 remote as 100 PE2 router bgp 300 bgp log-neighbor-changes neighbor 209.165.200.229 remote as 100 BR2#sh ip route | i 209.165.201.0 209.165.201.0/27 is subnetted, 1 subnets B 209.165.201.0 [20/0] via 209.165.200.230, 00:00:12 Which configuration change will force BR2 to reach 209.165.201.0/27 via BR1?. Set the origin to igp on BR2 toward PE2 inbound. Set the local preference to 150 on PE1 toward BR1 outbound. Set the weight attribute to 65,535 on BR1 toward PE1. Set the MED to 1 on PE2 toward BR2 outbound.

What are two benefits of YANG? (Choose two). It collects statistical constraint analysis information. In enforces the use of specific encoding format for NETCONF. In enforces configuration semantics. It enables multiple leaf statements to exist within a leaf list. It enforces configuration constraints.

An engineer configures VRRP and issues the show commands to verify operation. What does the engineer confirm about VRRP group 1 from the output?. There is no route to 10.10.1.1/32 in R2’s routing table. If R1 reboots, R2 becomes the master virtual router until R2 reboots. Communication between VRRP members is encrypted using MD5. R1 is master if 10.10.1.1/32 is in its routing table.

Refer to the exhibit. flow record Recorder match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port ! flow exporter Exporter destination 192.168.100.22 transport udp 2055 ! flow monitor Monitor exporter Exporter record Recorder ! et-analytics ip flow-export destination 192.168.100.22 2055 ! interface gi1 ip flow monitor Monitor input ip flow monitor Monitor output et-analytics enable ! An engineer must add the SNMP interface table to the NetFlow protocol flow records. Where should the SNMP table option be added?. under the interface. under the flow record. under the flow monitor. under the flow exporter.

Refer to the exhibit. BR(config)#interface tunnel1 BR(config-if)#keepalive 5 3 HQ(config)#interface tunnel1 HQ(config-if)#keepalive 5 3 What is the effect of these commands on the BR and HQ tunnel interfaces?. The tunnel line protocol goes down when the keepalive counter reaches 6. The keepalives are sent every 5 seconds and 3 retries. The keepalives are sent every 3 seconds and 5 retries. The tunnel line protocol goes down when the keepalive counter reaches 5.

In Cisco SD-WAN, which protocol is used to measure link quality?. OMP. BFD. RSVP. IPsec.

What is used to perform QoS packet classification?. the Options field in the Layer 3 header. the Type field in the Layer 2 frame. the Flags field in the Layer 3 header. the ToS field in the Layer 3 header.

Refer to the exhibit. def get_token(): device_url="https://192.168.1.1/dna/sytem/api/v1/auth/token" http_result = requests.post(device_url, auth = ("test","test34393838!")) if http_result.status_code != requests.codes.ok: print("Call failed!" Review get_token().") sys.exit() return(http_result.json()["Token"]). 200. 201. 300. 301.

Which LISP component is required for a LISP site to communicate with a non-LISP site?. ETR. ITR. Proxy ETR. Proxy ITR.

What is a characteristic of a next-generation firewall?. only required at the network perimeter. required in each layer of the network. filters traffic using Layer 3 and Layer 4 information only. provides intrusion prevention.

Which technology is used as the basis for the Cisco SD-Access data plane?. IPsec. LISP. VXLAN. 802.1Q.

“HTTP/1.1 204 content” is returned when cur -l -x DELETE command is issued. Which situation has occurred?. The object could not be located at the URI path. The command succeeded in deleting the object. The object was located at the URI, but it could not be deleted. The URI was invalid.

An engineer must provide wireless converge in a square office. The engineer has only one AP and believes that it should be placed it in the middle of the room. Which antenna type should the engineer use?. directional. polarized. Yagi. omnidirectional.

While configuring an IOS router for HSRP with a virtual IP of 10.1.1.1, an engineer sees this log message: Jan 1 12:12:14.122: %HSRP-4-DIFFVIP1: GigabitEthernet0/0 Grp 1 active routers virtual IP address 10.1.1.1 is different to the locally configured address 10.1.1.25 Which configuration change must the engineer make?. Change the HSRP group configuration on the remote router to 1. Change the HSRP virtual address on the local router to 10.1.1.1. Change the HSRP virtual address on the remote router to 10.1.1.1. Change the HSRP group configuration on the local router to 1.

What is a characteristic of YANG?. It is a Cisco proprietary language that models NETCONF data. It allows model developers to create custom data types. It structures data in an object-oriented fashion to promote model reuse. It provides loops and conditionals to control now within models.

What is the function of the LISP map resolver?. to send traffic to non-LISP sites when connected to a service provider that does not accept nonroutable EIDs as packet sources. to connect a site to the LISP-capable part of a core network, publish the EID-to-RLOC mappings for the site and respond to map-request messages. to decapsulate map-request messages from ITRs and forward the messages to the MS. to advertise routable non-USP traffic from one address family to LISP sites in a different address family.

When is an external antenna used inside a building?. only when using 5 GHz. only when using 2.4 GHz. when it provides the required coverage. only when using Mobility Express.

Drag and drop the snippets onto the blanks within the code construct a script that configure a loopback interface with an IP address. Not all options are used. 1. 2. 3. 4.

Drag and drop the characteristics from the left onto the orchestration tools they describe on the right. utilizes a pull model. utilizes a push model. multimaster architecture. primary/secondary architecture.

Refer to the exhibit. How was spanning-tree configured on this interface?. By entering the command spanning-tree portfast trunk in the interface configuration mode. By entering the command spanning-tree portfast in the interface configuration mode. By entering the command spanning-tree mst1 vlan 10,20,30,40 in the global configuration mode. By entering the command spanning-tree vlan 10,20,30,40 root primary in the interface configuration mode.

An engineer is troubleshooting the AP join process using DNS. Which FQDN must be resolvable on the network for the access points to successfully register to the WLC?. cisco-capwap-controller.domain.com. wlchostname.domain.com. ap-manager.domain.com. primary-wlc.domain.com.

How is Layer 3 roaming accomplished in a unified wireless deployment?. An EoIP tunnel is created between the client and the anchor controller to provide seamless connectivity as the client is associated with the new AP. The client entry on the original controller is passed to the database on the new controller. The new controller assigns an IP address from the new subnet to the client. The client database on the original controller is updated the anchor entry, and the new controller database is updated with the foreign entry.

A network administrator has designed a network with two multilayer switches on the distribution layer, which act as default gateways for the end hosts. Which two technologies allow every end host in a VLAN to use both gateways? (Choose two). HSRP. GLBP. MHSRP. VRRP. VSS.

Which measurement is used from a post wireless survey to depict the cell edge of the access points?. CCI. Noise. SNR. RSSI.

Refer to the exhibit. While troubleshooting a routing issue, an engineer issues a ping from S1 to S2. Which two actions from the initial value of the TTL? (Choose two). The packet reaches R3, and the TTL expires. R2 replies with a TTL exceeded message. R1 replies with a TTL exceeded message. The packet reaches R2 and the TTL expires. R3 replies with a TTL exceeded message. The packet reaches R1 and the TTL expires.

Refer to the exhibit. Router#show access-list Extended IP access list 100 10 permit ip 192.168.0.0 0.0.255.255 any 20 permit ip 172.16.0.0 0.0.15.255 any Which command set must be added to permit and log all traffic that comes from 172.20.10.1 in interface GigabitEthernet0/1 without impacting the functionality of the access list?. Router(config)#ip access-list extended 100 Router(config-ext-nacl)#5 permit ip 172.20.10.0 0.0.0.255 any log Router(config)#interface GigabitEthernet0/1 Router(config-if)#access-group 100 in. Router(config)#no access-list 100 permit ip 172.16.0.0 0.0.15.255 any Router(config)#access-list 100 permit ip 172.16.0.0 0.0.15.255 any log Router(config)#interface Gigabit Ether net0/1 Router(config-if)#access-group 100 in. Router(config)#access-list 100 permit ip host 172.20.10.1 any log Router(config)#interface GigabitEthernet0/1 Router(config-if)#access-group 100 in. Router(config)#access-list 100 seq 5 permit ip host 172.20.10.1 any log Router(config)#interface GigabitEthernet0/1 Router(config-if)#access-group 100 in.

What is the function of a fabric border node in a Cisco SD-Access environment?. To connect the Cisco SD-Access fabric to another fabric or external Layer 3 networks. To collect traffic flow information toward external networks. To attach and register clients to the fabric. To handle an ordered list of IP addresses and locations for endpoints in the fabric.

How are the different versions of IGMP compatible?. IGMPv2 is compatible only with IGMPv1. IGMPv2 is compatible only with IGMPv2. IGMPv3 is compatible only with IGMPv3. IGMPv3 is compatible only with IGMPv1.

What is one benefit of implementing a VSS architecture?. It provides multiple points of management for redundancy and improved support. It provides a single point of management for improved efficiency. It uses GLBP to balance traffic between gateways. It uses a single database to manage configuration for multiple switches.

Which entity is a Type 1 hypervisor?. Oracle VM VirtualBox. VMware server. Citrix XenServer. Microsoft Virtual PC.

An engineer runs the code against an API of Cisco DNA Center, and the platform returns this output. What does the response indicate?. The authentication credentials are incorrect. The URI string is incorrect. The Cisco DNA Center API port is incorrect. The HTTP method is incorrect.

What is a consideration when designing a Cisco SD-Access underlay network?. End user subnets and endpoints are part of the underlay network. The underlay switches provide endpoint physical connectivity for users. Static routing is a requirement. It must support IPv4 and IPv6 underlay networks.

What is a characteristic of a virtual machine?. It relies on hypervisors to allocate computing resources for it. It is deployable without a hypervisor to host it. It must run the same operating system as its host. It must be aware of other virtual machines, in order to allocate physical resources for them.

What is one difference between Saltstack and Ansible?. SaltStack uses an API proxy agent to program Cisco boxes on agent mode, whereas Ansible uses a Telnet connection. SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box. SaltStack is constructed with minion, whereas Ansible is constructed with YAML. SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus.

What is the centralized control policy in a Cisco SD-WAN deployment?. list of ordered statements that define user access policies. list of enabled services for all nodes within the cloud. set of rules that governs nodes authentication within the cloud. set of statements that defines how routing is performed.

Which command set configures RSPAN to capture outgoing traffic from VLAN 3 on interface GigabitEthernet 0/3 while ignoring other VLAN traffic on the same interface?. monitor session 2 source interface gigabitethernet0/3 rx monitor session 2 filter vlan 3. monitor session 2 source interface gigabitethernet0/3 tx monitor session 2 filter vlan 3. monitor session 2 source interface gigabitethernet0/3 rx monitor session 2 fitter vlan 1-2,4 – 4094. monitor session 2 source interface gigabitethernet0/3 tx monitor session 2 filter vlan 1-2, 4 – 4094.

Refer to the exhibit. R1#show crypto isakmp sa IPv4 Crypto ISAKMP SA dst src state conn-id status 209.165.201.6 209.165.201.1 QM_IDLE 101 ACTIVE After configurating an IPsec VPN, an engineer enters the show command to verify the ISAKMP SA status. What does the status show?. Peers have exchanged keys, but ISAKMP SA remains unauthenticated. ISAKMP SA is authenticated and can be used for Quick Mode. VPN peers agreed on parameters for the ISAKMP SA. ISAKMP SA has been created, but it has not continued to form.

Refer to the exhibit. An engineer attempts to create a configuration to allow the Blue VRF to leak into the global routing table, but the configuration does not function as expected. Which action resolves this issue?. Change the access-list number in the route map. Change the source network that is specified in access-list 101. Change the route-map configuration to VRF_BLUE. Change the access-list destination mask to a wildcard.

Refer to the exhibit. POSTMAN is showing an attempt to retrieve network device information from Cisco DNA Center API. What is the issue?. The token has expired. The URI string is incorrect. Authentication has failed. The JSON payload contains the incorrect UUID.

Running the script causes the output in the exhibit. Which change to the first line of the script resolves the error?. from ncclient import *. import manager. from ncclient import. import ncclient manager.

An engineer configures HSRP group 37. The configuration does not modify the default virtual MAC address. Which virtual MAC address does the group use?. 00:00:0c:07:ac:25. 00:00:0c:07:ac:37. C0:39:83:25:258:5. C0.00:00:25:00:00.

Which Cisco DNA center application is responsible for group-based access control permissions?. Design. Provision. Assurance. Policy.

Refer to the exhibit. An engineer attempts to configure a trunk between switch SW1 and switch SW2 using DTP, but the trunk does not form. Which command should the engineer apply to switch SW2 to resolve this issue?. switchport mode access. switchport nonegotiate. no switchport. switchport mode dynamic desirable.

Refer to the exhibit. Which set of commands on router R1 allow deterministic translation of private hosts PC1, PC2, and PC3 to addresses in the public space?. RouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config-if)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config-if)#exit RouterR1(config-if)#access-list 1 10.10.10.0 0.0.0.255 RouterR1(config)#ip nat pool POOL 155.1.1.101 155.1.1.103 netmask 255.255.255.0 RouterR1(config)#ip nat inside source list 1 pool POOL. RouterR1(config)#int f0/0 RouterR1(config)#ip nat outside RouterR1(config-if)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat inside RouterR1(config-if)#exit RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101 RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102 RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103. RouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config-if)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config-if)#exit RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101 RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102 RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103. RouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config-if)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config-if)#exit RouterR1(config-if)#access-list 1 10.10.10.0 0.0.0.255 RouterR1(config)#ip nat inside source list 1 interface f0/1 overload.

A client device roams between wireless LAN controllers that are mobility peers. Both controllers have dynamic interface on the same client VLAN. Which type of roam is described?. intra-VLAN. intra-controller. inter-controller. inter-subnet.

Which line must be added in the Python function to return the JSON object {“cat_9k”:”FXS193202SE”)?. return (json.dumps({d[‘hostname’]: d[‘serialNumber’] for d in json.loads(test_json)[‘response’]})). return (json.loads({for d in json.dumps(test_json)[‘response’]: d[‘hostname’]: d[‘serialNumber’]})). return (json.loads({d[‘hostname’]: d[‘serialNumber’] for d in json.dumps(test_json)[‘response’]})). return (json.dumps({for d in json.loads(test_json)[‘response’]: d[‘hostname’]: d[‘serialNumber’]})).

Which two operational models enable an AP to scan one or more wireless channels for rouge access points and at the same time provide wireless services to clients? (Choose two). Sniffer. Rouge detector. Local. FlexConnect. Monitor.

Refer to the exhibit. An engineer configures a new HSRP group. While reviewing the HSRP status, the engineer sees the logging message generated on R2. Which is the cause of the message?. A PC is on the network using the IP address 10.10.1.1. The HSRP configuration has caused a spanning-tree loop. The HSRP configuration has caused a routing loop. The same virtual IP address has been configured for two HSRP groups.

Refer to the exhibit. A network engineer troubleshoots an issue with the port channel between SW1 and SW2. Which command resolves the issue? *Aug 12 02:22:23.233: %LINK-3-UPDOWN: Interface Port-channel10, changed state to down *Aug 12 02:22:24.236: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel10,changed state to down *Aug 12 02:22:27.237: %ETC-5-L3DONTBNDL2: Gi0/1 suspended: LACP currently not enabled on the remote port *Aug 12 02:22:29.233: %ETC-5-L3DONTBNDL2: Gi0/0 suspended: LACP currently not enabled on the remote port. SW1(config-if)#channel-group 10 mode active. SW1(config-if)#channel-group 10 mode desirable. SW2(config-if)#channel-group 10 mode on. SW2(config-if)#switchport mode trunk.

Which new enhancement was implemented in Wi-Fi 6?. Wi-Fi Protected Access 3. 4096 Quadrature Amplitude Modulation Mode. Uplink and Downlink Orthogonal Frequency Division Multiple Access. Channel bonding.

How is MSDP used to interconnect multiple PIM-SM domains?. MSDP depends on BGP or multiprotocol BGP for interdomain operation. MSDP allows a rendezvous point to dynamically discover active sources outside of its domain. MSDP SA request messages are used to request a list of active sources for a specific group. MSDP messages are used to advertise active sources in a domain.

Drag and drop the characteristics from the left onto the routing protocols they describe on the right. can automatically summarize networks at the boundary. supports virtual links. requires manual configuration of network summarization.

Drag and drop the characteristics from the left onto the protocols they apply to on the right. uses Diffused Update Algorithm. uses Dijkstra's Shortest Path First algorithm. uses an election process. uses bandwidth, delay, reliability and load for routing metric.

How is 802.11 traffic handled in a fabric-enabled SSID?. converted by the AP into 802.3 and encapsulated into a VLAN. centrally switched back to WLC where the user traffic is mapped to a VXLAN on the WLC. centrally switched back to WLC where the user traffic is mapped to a VLAN on the WLC. converted by the AP into 802.3 and encapsulated into VXLAN.

Drag and drop the wireless elements on the left to their definitions on the right. polarization. beamwidth. radiation patterns. gain.

Refer to the exhibit. NAT_verify.jpg R1 interface Ethernet0/0 ip address 10.1.1.10 255.255.255.0 ip nat inside ! interface Serial0/0 ip address 209.165.201.1 255.255.255.224 ip nat outside ! ip nat pool Busi 209.165.201.1 209.165.201.2 netmask 255.255.255.252 ip nat inside source list 1 pool Busi ! access-list permit 10.1.1.0 0.0.0.255 ! R1#show ip nat statistics Total active translations: 1 (0 static, 1 dynamic, 0 extended) Outside Interfaces: Inside Interfaces: Ethernet0/0 Hits: 119 Misses: 1 Expired translations: 0 Dynamic mappings: -- Inside Source access-list 1 pool Busi refcount 1 pool fred: netmask 255.255.255.252 start 209.165.201.1 end 209.165.201.2 type generic, total addresses 2, allocated 1 (50%), misses 0 network engineer configures NAT on R1 and enters the show command to verify the configuration. What does the output confirm?. R1 is configured with NAT overload parameters. The first packet triggered NAT to add on entry to NAT table. A Telnet from 160.1.1.1 to 10.1.1.10 has been initiated. R1 to configured with PAT overload parameters.

Which congestion queuing method on Cisco IOS based routers uses four static queues?. low latency. custom. weighted fair. Priority.

What does the Cisco DNA REST response indicate?. Cisco DNA Center has the incorrect credentials for cat9000-1. Cisco DNA Center is unable to communicate with cat9000-1. Cisco DNA Center has the incorrect credentials for RouterASR-1. Cisco DNA Center has the incorrect credentials for cat3850-1.

Which AP mode allows an engineer to scan configured channels for rogue access points?. local. sniffer. bridge. monitor.

Where is radio resource management performed in a Cisco SD-access wireless solution?. control plane node. DNA Center. Cisco CMX. wireless controller.

Refer to the exhibit. Rapid PVST+ is enabled on all switches. Which command set must be configured on Switch1 to achieve the following results on port fa0/1? + When a device is connected, the port transitions immediately to a forwarding state + The interface should not send or receive BPDUs. + If a BPDU is received, it continues operating normally. Switch1(config)# interface f0/1 Switch1(config-if)# spanning-tree portfast Switch1(config-if)# spanning-tree bpduguard enable. Switch1(config)# spanning-tree portfast bpduguard default Switch1(config)# interface f0/1 Switch1(config-if)# spanning-tree portfast. Switch1(config)#interface f0/1 Switch1(config-if)# spanning-tree portfast. Switch1(config)#spanning-tree portfast bpdufilter default Switch1(config)# interface f0/1 Switch1(config-if)# spanning-tree portfast.

Refer to the exhibit. After running the code in the exhibit. Which step reduces the amount of data that NETCONF server returns to the NETCONF client, to only the interface’s configuration?. Create an XML filter as a string and pass it to get_config() method as an argument. Use the txml library to parse the data returned by the NETCONF server for the interface’s configuration. Create a JSON filter as a string and pass it to the get_config() method as an argument. Use the JSON library to parse the data returned by the NETCONF server for the interface’s configuration.

A network engineer configures BGP between R1 and R2. Both routers use BGP peer group CORP and are set up to use MD5 authentication. This message is logged to the console of router R1: *Jun 5 33:34:33.033: %TCP-6-BADAUTH: Invalid MD5 digest from 10.10.10.1 (29832) to 10.120.10.1 (179) tableid -0 Which two configurations allow a peering session to form between R1 and R2? (Choose two). R2(config-router)#neighbor 10.10.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco. R2(config-router)#neighbor 10.10.10.1 peer-group CORP R2(Config-router)#neighbor PEER password Cisco. R1(config-router)#neighbor 10.10.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco. R1(config-router)#neighbor 10.120.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco. R2(config-router)#neighbor 10.120.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco.

Which device makes the decision for a wireless client to roam?. wireless client. access point. wireless LAN controller. WCS location server.

Refer to the exhibit. External users require HTTP connectivity to an internal company web server that is listening on TCP port 8080. Which command set accomplishes this requirement?. interface G0/0 ip address 209.165.200.225 255.255.255.224 ip nat inside. interface G0/0 ip address 209.165.200.225 255.256.255.224 ip nat inside interface G0/1 ip address 10.1.1.1 255.255.255.0 ip nat outside ip nat inside source static tcp 209.165.200.225 80 10.1.1.100 8080. interface G0/0 ip address 209.165.200.225 255.255.255.224 ip nat inside interface G0/1 ip address 10.1.1.1 255.255.255.0 ip nat outside ip nat inside source static tcp 10.1.1.1 8080 209.166.200.225 80. interface G0/0 ip address 209.165.200.225 255.255.255.224 ip nat outside interface G0/1 ip address 10.1.1.1 255.255.255.0 ip nat inside ip nat inside source static tcp 10.1.1.100 8080 interface G0/0 80. interface G0/0 ip address 209.165.200.225 255.255.255.224 ip nat outside interface G0/1 ip address 10.1.1.1 255.255.255.0 ip nat inside ip nat inside source static tcp 209.165.200.225 8080 10.1.1.100 8080.

Which three elements determine Air Time efficiency? (Choose three). evert-driven RRM. data rate (modulation density) or QAM. channel bandwidth. number of spatial streams and spatial reuse. RF group leader. dynamic channel assignment.

Which features does Cisco EDR use to provide threat detection and response protection?. containment, threat intelligence, and machine learning. firewalling and intrusion prevention. container-based agents. cloud analysis and endpoint firewall controls.

Refer to the exhibit. def get_credentials(): creds={'username':'cisco','password':'c339348dc30e3fbig3kjr93godke333'} return(creds.get('username')) print(get_credentials()) What is the output of this code?. username: Cisco. get_credentials. username. cisco.

Which two threats does AMP4E have the ability to block? (Choose two). DDoS. ransomware. SQL injection. Microsoft Word macro attack. email phishing.

Refer to the exhibit. Which single security feature is recommended to provide Network Access Control in the enterprise?. 802.1X. MAB. WebAuth. port security sticky MAC.

Refer to the exhibit. %OSPF-5-ADJCHG: Process 1, Nbr 10.0.0.2 on FastEthernet0/0 from FULL to DOWN, Neighbor Down: Interface down or detached %OSPF-6-AREACHG: 10.0.0.1/32 changed from area 0 to area 1 %OSPF-4-ERRRCV: Received invalid packet: mismatch area ID, from backbone area must be virtual-link but not found from 10.0.0.2, FastEthernet0/0 What is the cause of the log messages?. OSPF area change. hello packet mismatch. MTU mismatch. IP address mismatch.

What are two benefits of virtual switching when compared to hardware switching? (Choose two). increased MTU size. hardware independence. VM-level isolation. increased flexibility. extended 802.1Q VLAN range.

What are two characteristics of VXLAN? (Choose two). It uses VTEPs to encapsulate and decapsulate frames. It has a 12-bit network identifier. It extends Layer 2 and Layer 3 overlay networks over a Layer 2 underlay. It lacks support for host mobility. It allows for up to 16 million VXLAN segments.

Refer to the exhibit. Router# traceroute 10.10.10.1 Type escape sequence to abort. Tracing the route to 10.10.10.1 1 10.0.0.1 5 msec 5 msec 5 msec 2 10.5.0.1 15 msec 17 msec 17 msec 3 10.10.10.1 * * * An engineer is troubleshooting a connectivity issue and executes a traceoute. What does the result confirm?. The destination server reported it is too busy. The probe timed out. The destination port is unreachable. The protocol is unreachable.

Refer to the exhibit. A network engineer configures a new GRE tunnel and enters the show run command. What does the output verify?. The tunnel keepalive is configured incorrectly because they must match on both sites. The tunnel destination will be known via the tunnel interface. The tunnel will be established and work as expected. The default MTU of the tunnel interface is 1500 byte.

Refer to the exhibit. An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected. Which action will resolve this issue?. require a DHCP address assignment. utilize RADIUS profiling. set a NAC state. enable AAA override.

What is the function of a VTEP in VXLAN?. provide the routing underlay and overlay for VXLAN headers. dynamically discover the location of end hosts in a VXLAN fabric. encapsulate and de-encapsulate traffic into and out of the VXLAN fabric. statically point to end host locations of the VXLAN fabric.

If the noise floor is -90 dBm and the wireless client is receiving a signal of -75 dBm, what is the SNR?. -165. 83. 15. 1.2.

Drag and drop the snippets onto the blanks within the code to construct a script that advertises the network prefix 192.168.5.0 session. Not all options are used. 1. 2. 3.

Which design principle states that a user has no access by default to any resource, and unless a resource is explicitly granted, it should be denied?. complete mediation. least privilege. economy of mechanism. fail-safe defaults.

Drag and drop the snippets into the RESTCONF request to form the request that returns this response. Not all options are used. a. b. c.

An engineer implemented several configuration changes and receives the logging message on Switch1. Which action should the engineer take to resolve this issue?. Change Switch1 to switch port mode dynamic desirable. Change Switch2 to switch port mode dynamic auto. Change Switch1 to switch port mode dynamic auto. Change the VTP domain to match on both switches.

The EtherChannel between SW2 and SW3 is not operational. Which action resolves this issue?. Configure the channel-group mode on SW2 Gi0/1 and Gi0/1 to on. Configure the channel-group mode on SW3 Gi0/1 to active. Configure the mode on SW2 Gi0/0 to trunk. Configure the mode on SW2 Gi0/1 to access.

A network administrator applies the following configuration to an IOS device. What is the process of password checks when a login attempt is made to the device? aaa new-model aaa authentication login default local group tacacs+. A TACACS+server is checked first. If that check fail, a database is checked. A TACACS+server is checked first. If that check fail, a RADIUS server is checked. If that check fail, a local database is checked. A local database is checked first. If that fails, a TACACS+server is checked, if that check fails, a RADIUS server is checked. A local database is checked first. If that check fails, a TACACS+server is checked.

Router 1 is currently operating as the HSRP primary with a priority of 110 router1 fails and Router2 take over the forwarding role. Which command on Router1 causes it to take over the forwarding role when it return to service?. standby 2 priority. standby 2 preempt. standby 2 track. standby 2 timers.

Drag and drop packet switching architecture from the left onto the correct positions on the right. It's referred as "software switching". It is used when you have to perform in high packet volume. It uses General Purpose CPU to perform that switching.

Refer to the exhibit. Switch1# show interfaces trunk ! Output omitted for brevity Port Mode Encapsulation Status Native Gi1/0/20 auto 802.1q trunking 10 Port Vlans allowed on trunk Gi1/0/20 1-4094 Switch2# show interfaces trunk ! Output omitted for brevity Port Mode Encapsulation Status Native Gi1/0/20 auto 802.1q trunking 10 Port Vlans allowed on trunk Gi1/0/20 1-4094 The trunk does not work over the back-to-back link between Switch1 interface Gig1/0/20 and Switch2 interface Gig1/0/20. Which configuration fixes the problem?. Switch2(config)#interface gig1/0/20 Switch2(config-if)#switchport mode dynamic desirable. Switch1(config)#interface gig1/0/20 Switch1(config-if)#switchport mode dynamic auto. Switch2(config)#interface gig1/0/20 Switch2(config-if)#switchport mode dynamic auto. Switch2(config)#interface gig1/0/20 Switch1(config-if)#switchport trunk native vlan 1 Switch2(config)#interface gig1/0/20 Switch2(config-if)#switchport trunk native vlan 1.

What is the function of vBond in a Cisco SDWAN deployment?. onboarding of SDWAN routers into the SD-WAN overlay. pushing of configuration toward SD-WAN routers. initiating connections with SD-WAN routers automatically. gathering telemetry data from SD-WAN routers.

What is the difference in dBm when an AP power increases from 25 mW to 100mW?. 75dBm. 150dBm. 6dBm. 125dBm.

Which free application make REST call against DNA center?. Postman. Ansible. Chef. Puppet.

A network engineer must configure a router to send logging messages to a syslog server based on these requirements: uses syslog IP address: 10.10.10.1 uses a reliable protocol must not use any well-known TCP/UDP ports Which configuration must be used?. logging host 10.10.10.1 transport udp port 1024. logging origin-id 10.10.10.1. logging host 10.10.10.1 transport udp port 1023. logging host 10.10.10.1 transport tcp port 1024.

Drag and drop the characteristics from the left onto the routing protocols they describe on the right. The default Administrative Distance is equal to 110. It is an Advanced Distance Vector routing protocol. It requires a process ID that is local to the router. It uses virtual links to connect two parts of a partitioned backbone through a non-backbone area. It relies on the Diffused Update Algorithm to calculate the shortest path to a destination. It requires an Autonomous System number to create a routing instance for exchanging routing information.

Refer to the exhibit. psswd = (base64.b64decode(‘SzFwM001RzchCg==’). decode(‘utf-8’)).strip(‘/n’) d = datetime.date.today() date = str(10000*d.year + 100*d.month + d.day) Refer to the exhibit. Which result does the python code achieve?. The code converts time to the yyyymmdd representation. The code encrypts a base64 decrypted password. The code converts time to the “year/month/day” time format. The code converts time to the Epoch LINUX time format.

Refer to the exhibit. Which command is required to verify NETCONF capability reply messages?. show netconf | section rpc-reply. show netconf rpc-reply. show netconf xml rpc-reply. show netconf schema | section rpc-reply.

Drag and drop. ITR. ETR. A LISP proxy ETR (PETR). Map Server (MS). Map Resolver (MR):.

Drap and drop: Class of Service (CoS). The Differentiated Services Code Point (DSCP). Traffic policing. Traffic shaping.

Drag and Drop. StealWatch:. ESA:. AMP for Endpoints (AMP4E):. Umbrella:. Firepower Threat Defense (FTD):.