350-501 Braindumps Real Exam Updated on Aug 02, 2024 with 452 Questions [Q264-Q288]

Share

350-501 Braindumps Real Exam Updated on Aug 02, 2024 with 452 Questions

Latest 350-501 PDF Dumps & Real Tests Free Updated Today

NEW QUESTION # 264
Refer to the exhibit:

What is the URL used for with REST API?

  • A. It is used to contact a URL filter to determine the efficacy of a web address
  • B. It is used to send a message to the APIC to perform an operation on a managed object or class operator
  • C. It is used to send a TACACS+ authentication request to a server
  • D. It is used to initiate an FTP session to save a running configuration of a device.

Answer: B


NEW QUESTION # 265
Refer to the exhibit.

Which the link aggregation configuration router is running on Cisco IOS XR software, which LACP interface configuration is needed to add the interface to the bundle?



  • A. Option C
  • B. Option A
  • C. Option B
  • D. Option D

Answer: C


NEW QUESTION # 266
Refer to the exhibit.

Refer to the exhibit. ISP ASN 65100 provides Internet services to router CE-1 and receives customer prefix 198.18.18.0/24 via eBGP. An administrator for the ISP is now provisioning RTBH services to provide on-demand data-plane security for the customer's IP space. Which route-map configuration must the administrator apply to router RTBH-1 to complete the implementation of RTBH services to CE-1?

  • A. route-map RTBH-CUSTOMER-IN permit 10
    description AS65001
    match ip address prefix-list AS65001-PREFIXES
    match community 99
    set local-preference 200
    set community no-export additive
    set ip next-hop 192.168.255.255
    route-map RTBH-CUSTOMER-IN deny 65535
    description DEFAULT DENY
  • B. route-map RTBH-CUSTOMER-IN permit 10
    description AS65001
    match ip address prefixlist AS65001-PREFIXES
    match community 99
    set local-preference 200
    set community no-advertise additive
    set ip next-hop local-address
    route-map RTBH-CUSTOMER-IN deny 65535
    description DEFAULT DENY
  • C. route-map RTBH-CUSTOMER-IN permit 10
    description AS65001
    match ip address prefix-list AS65001-PREFIXES
    match community 99
    set local-preference 200
    set community no-advertise additive
    set ip next-hop 192.168.255.255
    route-map RTBH-CUSTOMER-IN deny 65535
    description DEFAULT DENY
  • D. route-map RTBH-CUSTOMER-IN permit 10
    description AS65001
    match ip address prefix-list AS65001-PREFIXES
    match community 99
    set local-preference 200
    set community local-as additive
    set ip next-hop 192.168.255.255
    route-map RTBH-CUSTOMER-IN deny 65535
    description DEFAULT DENY

Answer: A


NEW QUESTION # 267
Drag and drop the multicast concepts from the left onto the correct descriptions on the right.

Answer:

Explanation:


NEW QUESTION # 268
Drag and drop the functionalities from the left onto the correct target fields on the right.

Answer:

Explanation:


NEW QUESTION # 269
Refer to the exhibit.

An engineer has started to configure a router for secure remote access as shown. All users who require network access need to be authenticated by the SSH Protocol.Which two actions must the engineer implement to complete the SSH configuration? (Choose two.)

  • A. Configure a password under the vty lines.
  • B. Configure an IP domain name.
  • C. Configure ACL 100 to permit access to port 22.
  • D. Configure service password encryption.
  • E. Configure crypto keys

Answer: B,E

Explanation:
Configure an IP domain name: An IP domain name is essential for generating RSA keys needed for SSH. The RSA keys are part of the crypto key configuration, which is necessary to enable SSH on the router. This step ensures that users are authenticated via the SSH protocol when accessing the network remotely.
Configure crypto keys: The crypto keys are crucial for secure communication. The engineer should generate RSA keys using the configured IP domain name. These keys will be used for encryption and authentication during SSH sessions.
The other options (B, D, and E) are not directly related to completing the SSH configuration for secure remote access. Therefore, the correct answers are A and C.
Reference:
Implementing and Operating Cisco Service Provider Network Core Technologies


NEW QUESTION # 270
Refer to the exhibit. A network engineer at ISP-B must advertise 198.19.100.0/24 -
198.19.105.0/24 prefixes to ISP-A with these requirements:
- Prefixes 198.19.100.0/24 - 198.19.102.0/24 must have the community
set to 64602:10.
- Prefixes 198.19.103.0/24 - 198.19.105.0/24 must have the community
set to 64602:11.
- The AS_PATH for the 198.19.103.0/24 - 198.19.105.0/24 prefixes must
appear as "64602 64602" in ASN 64601.
Which configuration must the engineer implement on the ISP-B router to meet the requirements?

  • A. configure terminal
    access-list 30 deny 198.19.103.0 0.0.0.255
    access-list 30 deny 198.19.104.0 0.0.0.255
    access-list 30 deny 198.19.105.0 0.0.0.255
    !
    route-map ASN-64601-OUT deny 10
    match ip address 30
    set as-path prepend 64602
    set community 64602:11
    route-map ASN-64601-OUT permit 20
    set community 64602:10
    end
  • B. configure terminal
    access-list 30 deny 198.19.100.0 0.0.0.255
    access-list 30 deny 198.19.101.0 0.0.0.255
    access-list 30 deny 198.19.102.0 0.0.0.255
    access-list 30 permit any
    !
    route-map ASN-64601-OUT permit 10
    set community 64602:10
    !
    route-map ASN-64601-OUT permit 20
    match ip address 30
    set as-path prepend 64602 64602
    set community 64602:11
    end
  • C. configure terminal
    access-list 30 deny 198.19.100.0 0.0.0.255
    access-list 30 deny 198.19.101.0 0.0.0.255
    access-list 30 deny 198.19.102.0 0.0.0.255
    !
    route-map ASN-64601-OUT permit 10
    match ip address 30
    set as-path prepend 64602 64602
    set community 64602:11
    route-map ASN-64601-OUT permit 20
    set community 64602:10
    end
  • D. configure terminal
    access-list 30 deny 198.19.100.0 0.0.0.255
    access-list 30 deny 198.19.101.0 0.0.0.255
    access-list 30 deny 198.19.102.0 0.0.0.255
    access-list 30 permit any
    !
    route-map ASN-64601-OUT permit 10
    match ip address 30
    set as-path prepend 64602
    set community 64602:11
    route-map ASN-64601-OUT permit 20
    set community 64602:10
    end

Answer: D


NEW QUESTION # 271
Refer to the exhibit.

Router 1 is missing the route for the router 2 loopback 0. What should the engineer change to fix the problem?

  • A. the hello timers on Router 1 and Router 2 to be different
  • B. the wildcard mask network statement in OSPF of Router 2
  • C. the area numbers on Router 1 and Router 2 to be similar
  • D. Router 1 to be an ABR

Answer: C


NEW QUESTION # 272
Refer to the exhibit:

Which statement describes the effect of this configuration?

  • A. It modifies the default policy map to allow all HTTP traffic through the router
  • B. It creates an ACL named WEB that filters HTTP traffic.
  • C. It applies a service policy to all interfaces remarking HTTP traffic
  • D. It matches HTTP traffic for use in a policy map

Answer: D

Explanation:
The configuration creates a class map named WEB which is used to match HTTP traffic. This class map can then be referenced in a policy map to define specific actions for traffic that matches the criteria, such as applying QoS policies or traffic shaping.


NEW QUESTION # 273
Refer to the exhibit:

A network engineer is implementing a BGP protocol. Which effect of the local-as keyword in this configuration is true?

  • A. It enables peer 192.168.1.2 to establish a BGP relationship with R1 using AS 65112 without additional configuration.
  • B. It enables peer 192.168.1.2 to establish a BGP relationship with R1 using AS 65012 and the VPNv4 address family
  • C. It enables peer 192.168.1.2 to establish a BGP relationship with R1 using AS 65112 and the VPNv4 address family
  • D. It enables peer 192.168.1.2 to establish a BGP relationship with R1 using AS 65012 without additional configuration

Answer: A

Explanation:
https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/13761-39.html


NEW QUESTION # 274
Refer to the exhibit.

Refer to the exhibit. Users in AS 65010 are connected with the application server in AS 65050 with these requirements:
AS 65010 users are experiencing latency and congestion to connect with application server 172.16.50.10.
AS 65030 must be restricted to become Transient Autonomous System for traffic flow.
Links connected to AS 65020 and AS 65040 are underutilized and must be used efficiently for traffic.
Which two configurations must be implemented to meet these requirements? (Choose two.)

  • A. Configure the route map to prepend the AS-Path attribute for R5-R3 BGP peering.
  • B. Configure a higher Local preference for R5-R4 BGP peering.
  • C. Apply the MED route-map policy for traffic received from R4.
  • D. Apply the AS-Path route-map policy for traffic received from R3.
  • E. Configure the route map to set the MED 50 attribute for R5-R4 BGP peering.

Answer: C,D


NEW QUESTION # 275
Drag and drop the multicast concepts from the left onto the correct descnpt.ons on the right.

Answer:

Explanation:


NEW QUESTION # 276
Which statement about Network Services Orchestrator (NSO) is true?

  • A. It can be used only with XML coding
  • B. It must use SDN as an overlay for addressing
  • C. It is used only in service provider environments
  • D. It uses YANG modeling language to automate devices

Answer: D


NEW QUESTION # 277
Refer to the exhibit. An engineer has started to configure a router for secure remote access as shown. All users who require network access need to be authenticated by the SSH Protocol.
Which two actions must the engineer implement to complete the SSH configuration? (Choose two.)

  • A. Configure a password under the vty lines.
  • B. Configure an IP domain name.
  • C. Configure ACL 100 to permit access to port 22.
  • D. Configure service password encryption.
  • E. Configure crypto keys

Answer: B,E

Explanation:
There are four steps required to enable SSH support on a Cisco IOS router:
- Configure the hostname command.
- Configure the DNS domain.
- Generate the SSH key to be used.
- Enable SSH transport support for the virtual type terminal (vtys).
https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/4145-ssh.html


NEW QUESTION # 278
Refer to the exhibit.

A network engineer with an employee id: 3812:12:993 has started to configure router R1 for IS-IS as shown. Which additional configuration must be applied to configure the IS-IS instance to advertise only network prefixes associated to passive interfaces?

  • A. Option C
  • B. Option A
  • C. Option D
  • D. Option B

Answer: B


NEW QUESTION # 279
Refer to the exhibit:

An engineer is preparing to implement data plane security configuration.
Which statement about this configuration is true?

  • A. Router 1 drops all traffic with a local-preference set to 150
  • B. All traffic to 192.168.1.0/24 is dropped
  • C. Router 1 and Router 2 advertise the route to 192.0.2.0/24 to all BGFD peers.
  • D. All traffic is dropped

Answer: B


NEW QUESTION # 280
Which protocol does a Cisco MPLS TE tunnel use to maintain paths within the core?

  • A. RPF
  • B. RSVP
  • C. STP
  • D. VTP

Answer: B

Explanation:
RSVP (Resource Reservation Protocol) is used in MPLS Traffic Engineering (TE) tunnels to establish and maintain paths within the core network. It helps in reserving resources across an IP network and plays a crucial role in ensuring that the network can handle the traffic load efficiently, providing optimal data transfer paths while maximizing network resource utilization and quality of service. Reference: Implementing and Operating Cisco Service Provider Network Core Technologies source documents or study guide


NEW QUESTION # 281
Drag and drop the functions from the path computation element protocol roles on the right.

Answer:

Explanation:


NEW QUESTION # 282
Refer to the exhibit. The network team must implement MPLS LDP session protection with two requirements:
- Session protection is provided for core loopback IP addresses only.
- The LDP session must remain operational for one hour when the WAN
link on PE-XR1 fails.
Which configuration must the team implement on PE-XR1?

  • A. configure terminal
    ipv4 access-list LDP-SESSION-PROTECTION
    permit ipv4 172.31.255.0 0.0.0.255 any
    permit ipv4 10.0.0.0 0.0.255.255 any
    !
    mpls ldp
    session protection for LDP-SESSION-PROTECTION duration 3600
    end
  • B. configure terminal
    ipv4 access-list LDP-SESSION-PROTECTION
    permit ipv4 172.31.255.0 0.0.0.255 any
    !
    mpls ldp
    session protection for LDP-SESSION-PROTECTION duration 3600
    end
  • C. configure terminal
    ipv4 access-list LDP-SESSION-PROTECTION
    permit ipv4 172.31.255.0 0.0.0.255 any
    permit ipv4 10.0.0.0 0.0.255.255 any
    !
    mpls ldp
    session protection for LDP-SESSION-PROTECTION duration 60
    end
  • D. configure terminal
    ipv4 access-list LDP-SESSION-PROTECTION
    permit ipv4 172.31.255.0 0.0.0.255 any
    !
    mpls ldp
    session protection for LDP-SESSION-PROTECTION duration 60
    end

Answer: A


NEW QUESTION # 283
What occurs when a high bandwidth multicast stream is sent over an MVPN using Cisco hardware?

  • A. A data MDT is created to allow for the best transmission through the core for (S, G) multicast route entries.
  • B. A data and default MDT are created to flood the multicast stream out of all PIM-SM neighbors.
  • C. A data MDT is created to if it is a (*, G) multicast route entries.
  • D. The traffic uses the default MDT to transmit the data only if it is a (S, G) multicast route entry.

Answer: A

Explanation:
imc_cfg_mc_vpn.html#GUID-60B1EC78-3A10-447E-BEBE-9F076511FBCB Data MDTs are created only for (S, G) multicast route entries within the VRF multicast routing table. They are not created for (*, G) entries regardless of the value of the individual source data rate.
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_mvpn/configuration/xe-3s/imc-mvpn-xe-
3s-book/


NEW QUESTION # 284
Refer to the exhibit. While troubleshooting the network, a network operator with an employee id:
3812:12:993 is trying to ping XR1.
Which result should the operator expect when trying to ping to an XR1 local address?

  • A. ICMP traffic works at a policed rate of 19 bytes per second every 100 ms
  • B. ICMP traffic works at a policed rate of 19 packets every 100 ms.
  • C. All ICMP traffic responds successfully.
  • D. All ICMP traffic is dropped.

Answer: C


NEW QUESTION # 285
Refer to the exihibit.

Refer to the exhibit. What is the purpose of this JSON script?

  • A. It deletes a user's authentication record.
  • B. It confirms a user's login credentials.
  • C. It updates a user authentication record.
  • D. It changes the existing password.

Answer: D


NEW QUESTION # 286
Refer to the exhibit:

Assume all other configurations are correct and the network is otherwise operating normally. Which conclusion can you draw about the neighbor relationship between routers R1 and R2?

  • A. The neighbor relationship is down because the loco I-as value for R2 is missing in the R1 neighbor statement
  • B. The neighbor relationship is down because R1 believes R2 is in AS 65012.
  • C. The neighbor relationship will be up only if the two devices have activated the correct neighbor relationships under the IPv4 address family
  • D. The neighbor relationship is up

Answer: C


NEW QUESTION # 287
Drag and drop the methods of Cisco MPLS TE tunnel traffic assignment from the left onto their characteristics on the right.

Answer:

Explanation:


NEW QUESTION # 288
......

350-501 Dumps With 100% Verified Q&As - Pass Guarantee or Full Refund: https://actualtests.prep4away.com/Cisco-certification/braindumps.350-501.ete.file.html