« 返回题库列表2026 CCNP 350-401题库资料下载|ENCOR练习题+答案解析合集
问题 #1
Refer to the exhibit Extended access-list 100 is configured on interface GigabitEthernet 0/0 in an inbound direction but it does not have the expected behavior of allowing only packets to or from 192 168 0 0/16. Which command set properly configures the a
A. R1 (config)#no access-list 100 seq 10
B. R1 (config)#ip access-list extended 100
C. R1(config)#no access-list 100 deny ip any any
D. R1(config)#ip access-list extended 100
问题 #2
Refer to the exhibit.The connection between SW1 and SW2 is not operational.which two actions resolve the issue ?
A. configure switchport nonegotiate on SW1
B. configure switchport nonegotiate on SW2
C. configure switchport mode trunk on SW2
D. condigure switchport mode dynamic desirable on SW2
E. configure switchport mode access on SW2
问题 #3
With IGMPv2, which multicast group address does the IGMP querier use to send query messages to all hosts on the LAN?
A. 239.0.0.2
B. 224.0.0.1
C. 239.0.0.1
D. 224.0.0.2
问题 #4
An engineer runs the sample code, and the terminal returns this output. Which change to the sample code corrects this issue?
A. Change the JSON method from load() to loads().
B. Enclose null in the test json string in double quotes.
C. Use a single set of double quotes and condense test json to a single line.
D. Call the read() method explicitly on the test json string.
问题 #5
An engineer must create an EEM applet that sends a syslog message in the event a change happens in the network due to trouble with an OSPFE process. Which action should the engineer use?
event routing network 172. 30.197.0/24 type all
A. action 1 syslog msg "OSPF ROUTING ERROR"
B. action 1 syslog send "OSPF ROUTING ERROR"
C. action 1 syslog pattern "OSPF ROUTING ERROR"
D. action 1syslog write "OSPF ROUTING ERROR"
问题 #6
Refer to the exhibit. Which type of antenna is shown on the radiation patterns?
A. Yagi
B. dipole
C. patch
D. omnidirectional
问题 #7
Refer to the exhibit. An engineer is investigating why guest users are able to access other guest user devices when the users are connected to the customer guest WLAN. What action resolves this issue?
A. implement P2P blocking
B. implement MFP client protection
C. implement split tunneling
D. implement Wi-Fi direct policy
问题 #8
How does EIGRP differ from OSPF?
A. EIGRP has a full map of the topology, and OSPF only knows directly connected neighbors.
B. EIGRP supports equal or unequal path cost, and OSPF supports only equal path cost.
C. EIGRP uses more CPU and memory than OSPF
D. EIGRP is more prone to routing loops than OSPF
问题 #9
A customer has a pair of Cisco 5520 WLCs set up in an SSO cluster to manage all APs. Guest traffic is anchored to a Cisco 3504 WLC located in a DMZ. Which action is needed to ensure that the EoIP tunnel remains in an UP state in the event of failover on t
A. Enable default gateway reachability check
B. Use the same mobility domain on all WLCs
C. Use the mobility MAC when the mobility peer is configured
D. Configure back-to-back connectivity on the RP ports.
问题 #10
Refer to the exhibit. An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts. Which command set accomplishes this task?
A. SW1(config)# mac access-list extended HOST-A-B
A. bbbb.cccc aaa
A. bbbb.dddd
SW1(config-ext-nacl)#deny tcp host 10. 1.1.10 host 10.1.1.20 eq www.
B. SW1(config)# mac access-list extended HOST-A-B
A. bbbb.cccc aaa
A. bbbb.dddd
SW1(config-ext-nacl)#permit tcp host 10. 1.1.10 host 10.1.1.20 eq www
C. SW1(config)# ip access-list extended DENY-HTTP
SW1 (config-ext-nacl)#deny tcp host 10. 1.1.10 host 10.1.1.20 eq www
D. SW1 (config)# ip access-list extended DENY-HTTP
SW1 (config-ext-nacl)#permit tcp host 10. 1.1.10 host 10.1.1.20 eq www
问题 #11
Refer to the exhibit. Which code results in the working Python script displaying a list of network devices from the Cisco DNA Center ?
A. network_device_list(dnac("host], dnac["username"],dnac["password")
print(dnac_devices. item)
B. login =dnac_login(dnac["host"], dnac["username"], dnac["password")
print(dnac_devices. item)
C. network_device_list(dnac["host"], dnac["username"].dnac["password"])
D. login =dnac_login(dnac["host"], dnac["username"], dnac["password")
问题 #12
In a Cisco DNA Center Plug and Play environment, why would a device be labeled unclaimed?
A. The device has not been assigned a workflow.
B. The device could not be added to the fabric
C. The device had an error and could not be provisioned
D. The device is from a third-party vendor.
问题 #13
A customer has 20 stores located throughout a city. Each store has a single Cisco access point managed by a central WLC. The customer wants to gather analytics for users in each store. Which technique supports these requirements?
A. hyperlocation
B. trilateration
C. angle of arrival
D. presence
问题 #14
What does the number in an NTP stratum level represent?
A. The amount of offset between the device clock and true time.
B. The amount of drift between the device clock and true time.
C. The number of hops it takes to reach the authoritative time source.
D. The number of hops it takes to reach the master time server
问题 #15
Which function is handled by vManage in the Cisco SD-WAN fabric?
A. Establishes BFD sessions to test liveliness of links and nodes.
B. Distributes policies that govern data forwarding
C. Performs remote software upgrades for WAN Edge, vSmart, and vBond
D. Establishes IPsec tunnels with nodes
问题 #16
What is a characteristic of a WLC that is in master controller mode?
A. All wireless LAN controllers are managed by the master controller
B. The master controller is responsible for load balancing all connecting clients to other controllers
C. Configuration on the master controller is executed on all wireless LAN controllers.
D. All new APs that join the WLAN are assigned to the master controller.
问题 #17
Refer to the exhibit. Which action completes the configuration to achieve a dynamic continuous mapped NAT for all users?
A. Increase the NAT pool size to support 254 usable addresses
B. Reconfigure the pool to use the 192.168.1.0 address range.
C. Configure a match-host type NAT pool.
D. Configure a one-to-one type NAT pool.
问题 #18
Which resource is able to be shared among virtual machines deployed on the same physical server?
A. VM configuration file
B. operating system
C. disk
D. applications
问题 #19
Refer to the exhibit. An engineer entered the command no spanning-tree bpduguard enable on interface Fa1/0/7. What is the effect of this command on Fa1/0/7?
A. It remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode.
B. It remains in err-disabled state until the errdisable recovery cause failed-port-state command is entered in the global configuration mode.
C. It remains in err-disabled state until the no shutdown command is entered in the interface configuration mode.
D. It remains in err-disabled state until the spanning-tree portfast bpduguard disable command is entered in the interface configuration mode
问题 #20
What is a benefit of a virtual machine when compared with a physical server?
A. Multiple virtual servers can be deployed on the same physical server without having to buy additional hardware.
B. Virtual machines increase server processing performance
C. The CPU and RAM resources on a virtual machine cannot be affected by other virtual machines
D. Deploying a virtual machine is technically less complex than deploying a physical server
问题 #21
What is the recommended MTU size for a Cisco SD-Access Fabric?
A. 1500
B. 9100
C. 4464
D. 17914
问题 #22
What Is the process for moving a virtual machine from one host machine to another with no downtime?
A. high availability
B. disaster recovery
C. live migration
D. multisite replication
问题 #23
What are two features of NetFlow flow monitoring? (Choose two.)
A. Copies all ingress flow information to an interface
B. Include the flow record and the flow importer
C. Can track ingress and egress information
D. Can be used to track multicast, MPLS, or bridged traffic.
E. Does not required packet sampling on interfaces
问题 #24
What is the wireless received signal strength indicator?
A. The value given to the strength of the wireless signal received compared to the noise level
B. The value of how strong the wireless signal Is leaving the antenna using transmit power, cable loss, and antenna gain
C. The value of how much wireless signal is lost over a defined amount of distance
D. The value of how strong a tireless signal is receded, measured in dBm
问题 #25
Which method should an engineer use to deal with a long-standing contention issue between any two VMs on the same host?
A. Adjust the resource reservation limits
B. Live migrate the VM to another host
C. Reset the VM
D. Reset the host
问题 #26
Which protocol is implemented to establish secure control plane adjacencies between Cisco SD-WAN nodes?
A. IKE
B. TLS
C. IPsec
D. ESP
问题 #27
Refer to the exhibit. After implementing the configuration 172.20.20.2 stops replaying to ICMP echoes, but the default route fails to be removed. What is the reason for this behavior?
A. The source-interface is configured incorrectly.
B. The destination must be 172.30.30.2 for icmp-echo
C. The default route is missing the track feature
D. The threshold value is wrong.
问题 #28
Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?
A. vBond
B. vSmart
C. vManage
D. PNP server
问题 #29
When does a stack master lose its role?
A. When the priority value of a stack member is changed to a higher value
B. when a switch with a higher priority is added to the stack
C. when the stack master is reset
D. when a stack member fails
问题 #30
Which of the following statements regarding BFD are correct? (choose two.)
A. BFD is supported by OSPF, EIGRP, BGP, and IS-IS.
B. BFD detects link failures in less than one second.
C. BFD can bypass a failed peer without relying on a routing protocol.
D. BFD creates one session per routing protocol per interface.
E. BFD is supported only on physical interfaces.
F. BFD consumes more CPU resources than routing protocol timers do.
问题 #31
An engineer measures the Wi-Fi coverage at a customer site. The RSSI values are recorded as follows: Location A: -72 dBm Location B: -75 dBm Location C: -65 dBm Location D: -80 dBm Which two statemets does the engineer use to explain these values to the c
A. The signl strength at location B is 10 dB better than location C.
B. Location D has the strongest RF signal strength.
C. The signal strength at location C is too weak to support web surfing.
D. The RF signal strength at location B is 50% weaker than location A
E. The RF signal strength at location C is 10 times stronger than location B
问题 #32
Which design principle should be followed in a Cisco SD-Access wireless network deployment?
A. The WLC is connected outside of the fabric
B. The WLC is part of the fabric underlay
C. The access point is connected outside of the fabric.
D. The WLC is part of the fabric overlay.
问题 #33
What is an advantage of using BFD?
A. It local link failure at layer 1 and updates routing table
B. It detects local link failure at layer 3 and updates routing protocols
C. It has sub-second failure detection for layer 1 and layer 3 problems
D. It has sub-second failure detection for layer 1 and layer 2 problems.
问题 #34
What is the function of vBond in a Cisco SDWAN deployment?
A. initiating connections with SD-WAN routers automatically
B. pushing of configuration toward SD-WAN routers
C. onboarding of SDWAN routers into the SD-WAN overlay
D. gathering telemetry data from SD-WAN routers
问题 #35
Which three resources must the hypervisor make available to the virtual machines? (Choose three)
A. memory
B. bandwidth
C. IP address
D. processor
E. storage
F. secure access
问题 #36
How does Protocol Independent Multicast function?
A. In sparse mode it establishes neighbor adjacencies and sends hello messages at 5-second intervals.
B. It uses the multicast routing table to perform the multicast forwarding function.
C. It uses unicast routing information to perform the multicast forwarding function.
D. It uses broadcast routing information to perform the multicast forwarding function.
问题 #37
What are two methods of ensuring that the multicast RPF check passes without changing the unicast routing table? (Choose two.)
A. implementing static mroutes
B. disabling BGP routing protocol
C. implementing MBGP
D. disabling the interface of the router back to the multicast source
E. implementing OSPF routing protocol
问题 #38
After a redundant route processor failure occurs on a Layer 3 device, which mechanism allows for packets to be forwarded from a neighboring router based on the most recent tables?
A. RPVST+
B. RP failover
C. BFD
D. NSF
问题 #39
Which two southbound interfaces originate from Cisco DNA Center and terminate at fabric underlay switches? (Choose two)
A. UDP 67: DHCP
B. ICMP: Discovery
C. TCP 23: Telnet
D. UDP 162: SNMP
E. UDP 6007: NetFlow
问题 #40
What is the function of a control-plane node in a Cisco SD-Access solution?
A. to run a mapping system that manages endpoint to network device relationships
B. to implement policies and communicate with networks outside the fabric
C. to connect external Layer 3 networks to the SD Access fabric.
D. to connect APs and wireless endpoints to the SD-Access fabric
问题 #41
Refer to the exhibit. What is the result when a switch that is running PVST+ is added to this network?
A. DSW2 operates in Rapid PVST+ and the new switch operates in PVST+
B. Both switches operate in the PVST+ mode
C. Spanning tree is disabled automatically on the network
D. Both switches operate in the Rapid PVST+ mode.
问题 #42
What is a characteristic of a next-generation firewall?
A. only required at the network perimeter
B. required in each layer of the network
C. filters traffic using Layer 3 and Layer 4 information only
D. provides intrusion prevention
问题 #43
Which measure is used by an NTP server to indicate its closeness to the authoritative time source?
A. stratum
B. hop count
C. time zone
D. latency
问题 #44
Which two results occur if Cisco DNA Center loses connectivity to devices in the SD-Access fabric? (Choose two )
A. All devices reload after detecting loss of connection to Cisco DNA Center
B. Already connected users are unaffected, but new users cannot connect
C. User connectivity is unaffected.
D. Cisco DNA Center is unable to collect monitoring data in Assurance.
E. Users lose connectivity
问题 #45
Which two components are supported by LISP? (choose two )
A. proxy ETR
B. egress tunnel router
C. route reflector
D. HMAC algorithm
E. spoke
问题 #46
Refer to the exhibit. What does the output confirm about the switch's spanning tree configuration?
A. The spanning-tree mode stp ieee command was entered on this switch
B. The spanning-tree operation mode for this switch is PVST
C. The spanning-tree operation mode for this switch is IEEE
D. The spanning-tree operation mode for this switch is PVST+
问题 #47
A customer has recently implemented a new wireless infrastructure using WLC-5520S at a site directly next to a large commercial airport Users report that they intermittently lose Wi-Fi connectivity, and troubleshooting reveals it is due to frequent channe
A. Remove UNII-2 and Extended UNII-2 channels from the 5 Ghz channel list
B. Restore the OCA default settings because this automatically avoids channel interference
C. Disable DFS channels to prevent interference writ) Doppler radar
D. Enable DFS channels because they are immune to radar interference
E. Configure channels on the UNII-2 and the Extended UNII-2 sub-bands of the 5 Ghz band only
问题 #48
What is a characteristic of para-virtualization?
A. Para-virtualization guest servers are unaware of one another
B. Para-virtualization allows direct access between the guest OS and the hypervisor
C. Para-virtualization allows the host hardware to be directly accessed
D. Para-virtualization lacks support for containers
问题 #49
A customer requests a network design that supports these requirements: * FHRP redundancy * multivendor router environment * IPv4 and IPv6 hosts Which protocol does the design include?
A. GLBP
B. VRRP version 2
C. VRRP version 3
D. HSRP version 2
问题 #50
Refer to the exhibit. What happens to access interfaces where VLAN 222 is assigned?
A. STP BPDU guard is enabled
B. A description "RSPAN" is added
C. They are placed into an inactive state
D. They cannot provide PoE
问题 #51
Which solution do IaaS service providers use to extend a Layer 2 segment across a Layer 3 network?
A. VXLAN
B. VTEP
C. VLAN
D. VRF
问题 #52
What is a characteristic of a next-generation firewall?
A. only required at the network perimeter
B. required in each layer of the network
C. filters traffic using Layer 3 and Layer 4 information only
D. provides intrusion prevention
问题 #53
Which unit measures the power of a radio signal with reference to 1 milliwatt?
问题 #54
What are two benefits of YANG?(choose two)
A. it collects statistical constraint analysis information
B. In enforces the use of specific encoding format for NETCONF
C. in enforces configuration semantics
D. it enables multiple leaf statements to exist within a leaf list
E. it enforces configuration constraints
问题 #55
Which configuration change will force BR2 to reach 209.165.201.0/27 via BR1?
A. Set the origin to igp on BR2 toward PE2 inbound
B. Set the local preference to 150 on PE1 toward BR1 outbound
C. Set the weight attribute to 65,535 on BR1 toward PE1
D. Set the MED to 1 on PE2 toward BR2 outbound
问题 #56
An engineer must export the contents of the devices object in JSON format. Which statement must be use?
A. json.print(Devices)
B. json.loads(Devices)
C. json.dumps(Devices)
D. json.repr(Devices)
问题 #57
what is the function of Cisco DNA Center in a cisco SD-Access deployment?
A. It is responsible for routing decisions inside the fabric
B. It is responsible for the design,management,deployment,provisioning,and assurance of the fabric network devices
C. It possesses information about all endponints,nodes,and extemal network related to the fabric
D. It provides integration and automation for all noonfabric nodes and their fabric counterparts.
问题 #58
A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days. What is required to complete this task?
A. Add the username admin privilege 15 common-criteria-policy Administrators password 0 Cisco013579! command
B. No further action is required. The configuration is complete
C. Add the aaa authentication enable default Administrators command
D. The password expiry mechanism is on the AAA server and must be configured there
问题 #59
An engineer troubleshoots connectivity issues with an application. Testing is performed from the server gateway, and traffic with the DF bit set is dropped along the path after increasing packet size. Removing the DF bit setting at the gateway prevents th
A. PMTUD does not work due to ICMP Packet Too Big messages being dropped by an ACL
B. The remote router drops the traffic due to high CPU load
C. The server should not set the DF bit in any type of traffic that is sent toward the network
D. There is a CoPP policy in place protecting the WAN router CPU from this type of traffic
问题 #60
What are two benefits of virtual switching when compared to hardware switching? (Choose two)
A. increased MTU size
B. hardware independence
C. VM-level isolation
D. increased flexibility
E. extended 802.1Q VLAN range
问题 #61
Refer to the exhibit.An engineer configures VRRP and issues the show commands to verify operation,What does the engineer confirm about VRRP group 1 from the output ?
A. communcation between VRRP members is encrypted using MD5
B. If R1 reboots,R2 becomes the master virtual router until R2 reboots
C. There is no route to 10.10.1.1/32 in R2's routing table
D. R1 is master if 10.10.1.1/32 is in its routing table
问题 #62
Refer to the exhibit.Which single security feature is recommended to provide Network Access Control in the enterprise ?
A. MAB
B. 802.1X
C. WebAuth
D. Port Security sticky MAC
问题 #63
Refer to the exhbit.An engineer must add the SNMP interface table to the NetFlow protocol flow records.where should the SNMP table option be added ?
A. under the interface
B. under the flow record
C. under the flow monitor
D. under the flow exporter
问题 #64
Which two operational models enable an AP to scan one or more wireless channels for rouge access points and at the same time provide wireless services to clients? (Choose two)
A. Sniffer
B. Rouge detector
C. Local
D. FlexConnect
E. Monitor
问题 #65
How does a router behave when configured with the default DNS lookup settings, and a URL is entered on the CLI?
A. prompts the user to specify the desired IP address.
B. initiates a pinfsfg request to the URL.
C. continuously attxempts tos resolve the URL until the command is cancelled.
D. attempts to query a DNS server on the network
问题 #66
What does a router do when configured with the default DNS lookup settings, and a URL is entered on the CLI?
A. initiates a ping request to the URL
B. prompts the user to specify the desired IP address
C. continuously attempts to resolve the URL until the command is cancelled
D. sends a broadcast message in an attempt to resolve the URL
问题 #67
An engineer must provide wirelss coverage in a square office.The engineer has only one AP and belives that it should be placed it in the middle of the room.which antenna type should the engineer use ?
A. directional
B. polarized
C. Yagi
D. omnidirectional
问题 #68
Refer to the exhibit.POSTMAN is showing an attempt to retrieve network device information from Cisco DNA Center API. what is the issue?
A. The URI string is incorrect
B. The token has expired
C. Authentication has failed
D. The JSON payload contains the incorrect UUID
问题 #69
Refer to the exhibit.An engineer configures a new HSRP group.while reviewing the HSRP status,the engineer sees the logging message generated on R2.What is the cause of he message ?
A. The HSRP configuration has caused a routing loop
B. The HSRP configuration has caused a spanning-tree loop
C. A PC is on the network using the IP address 10.10.1.1
D. The same virtual IP address has been configured for two HSRP groups
问题 #70
Which HTTP code must be retumed to prevent the script from exiting ?
问题 #71
what is a consideration when designing a Cisco SD-Access underlay network ?
A. The underlay switches provide endpoint physical connectivity for users
B. End user subnets and ednpoints are part of the underlay network
C. It must support IPv4 and IPv6 underlay networks
D. static routing is a requirement
问题 #72
Refer to the exhibit.Running the script causes the output in the exhibit.what should be the first line of the script?
A. from ncclient import manager
B. import manager
C. from ncclient import *
D. ncclient manager import
问题 #73
What happens to the signal strength of an RF signal due to wave spreading?
A. The signal strength of the RF signal will fall off equally near the transmitter and also farther away
B. The signal strength of the RF signal will fall off quickly near the transmitter but more slowly farther away
C. The signal strength of the RF signal will fall off slowly near the receiver and more quickly farther away
D. The signal strength of the RF signal will fall off slowly near the transmitter but more quickly farther away
问题 #74
Which two statements about AAA authentication are true? (Choose two)
A. RADIUS authentication queries the router's local username database
B. TACACS+ authentication uses an RSA server to authenticate users
C. Local user names are case-insensitive
D. Local authentication is maintained on the router
E. KRB5 authentication disables user access when an incorrect password is entered
问题 #75
what is the output of this code ?
A. cisco
B. get_credentials
C. username
D. username:cisco
问题 #76
Refer to the exhibit.An engineer is troubleshooting a connectivity issue and ececutes a tracerout.what does the result confirm?
A. The probe times out
B. The destination server reported it is too busy
C. The protocol is unreachable
D. The destination port is unreachable
问题 #77
where is radie resource management performed in a Cisco SD-Access wireless solution ?
A. DNA Center
B. control plane node
C. wireless controller
D. Cisco CMX
问题 #78
Refer to the exhibit.Router1 is currently operating as the HSRP primary with a priority of 110. Router1 fails and Router2 takes over the forwarding role.which command on Router1 causes it to take over the forwarding role when it returns to service ?
A. standby 2 priority
B. standby 2 preempt
C. standby 2 track
D. standby 2 timers
问题 #79
Refer to the exhibit.The Etherchannel between SW2 and SW3 is not operational. which action resolves this issue ?
A. configure the mode on sw2 Gi0/0 to trunk
B. configure the mode on sw2 Gi0/1 to access
C. configure the channel-group mode on SW2 Gi0/0 and Gi0/1 to on
D. configure the channel-group mode on SW2 Gi0/0 and Gi0/1 to active
问题 #80
''HTTP/1.1 204 No Content'' is returned when the curl -i -x DELETE command is issued.which situation has occurred ?
A. The object could not be located at the URL path
B. The command succeeded in deleting the object
C. The object was located at he URL,but it could not be deleted
D. The URL was invalid
问题 #81
what is one benefit of implementang a VSS archtecture?
A. It uses a single database to manage configuration for multiple switches
B. It provides a single point of management for improved efficiency
C. It provides multiple points of management for redundancy and improved support
D. It uses GLBP to balance traffic between gateways
问题 #82
How is MSDP used to interconnect multiple PIM-SM domains?
A. MSDP depends on BGP or multiprotocol BGP for interdomain operation
B. MSDP messages are used to advertise active sources in a domain
C. MSDP SA request messages are used to request a list of active sources for a specific group
D. MSDP allows a rendezvous point to dynamically discover active sources outside of its domain
问题 #83
what is the function of the LISP map resolver?
A. to send traffic to non-LISP sites when connected to a service provider that does not accept nonroutable EIDs as packet sources
B. to connect a site to the LISP-capabie part of a core network, publish the EID-to-RLOC mappings for the site, and respond to map-request messages
C. to decapsulate map-request messages from ITRs and forward the messages to the MS
D. to advertise routable non-LISP traffic from one address family to LISP sites in a different address family
问题 #84
An engineer configures HSRP group 37.The configuration does not modify the default virtual MAC address.which virtual MAC address does the group use ?
A. 00:00:0c:07:ac:25
B. c0:39:97:39:655:5
C. c0:00:00:25:00:00
D. 00:00:0c:07:ac:37
问题 #85
If the noise floor is -90 dBm and the wireless client is receiving a signal of -75 dBm,what is the SNR?
问题 #86
Refer to the exhibit. What is the effect of these commands on the BR and HQ tunnel interfaces? BR(config)#interface tunnel 1 BR(config-if)#keepalive 5 3 HQ(config)#interface tunnel 1 HQ(config-if)#keepalive 5 3
A. The tunnel line protocol goes down when the keepalive counter reaches 5
B. The keepalives are sent every 5 seconds and 3 retnes
C. The keepalives are sent every 3 seconds and 5 retnes
D. The tunnel line protocol goes down when the keepalive counter reaches 6
问题 #87
What is used to perform QoS packet classification?
A. the Options field in the Layer 3 header
B. the Type field in the Layer 2 frame
C. the Flags field in the Layer 3 header
D. the ToS field in the Layer 3 header
问题 #88
Which LISP component is required for a LISP site to communicate with a non-LISP site?
A. ETR
B. ITR
C. Proxy ETR
D. Proxy ITR
问题 #89
Which technology is used as the basis for the Cisco SD-Access data plane?
A. IPsec
B. LISP
C. VXLAN
D. 802.1Q
问题 #90
While configuring an IOS router for HSRP with a virtual IP of 10.1.1.1, an engineer sees this log message: Jan 1 12:12:14.122: %HSRP-4-DIFFVIP1: GigabitEthernet0/0 Grp 1 active routers virtual IP address 10.1.1.1 is different to the locally configured add
A. Change the HSRP group configuration on the remote router to 1
B. Change the HSRP virtual address on the local router to 10.1.1.1
C. Change the HSRP virtual address on the remote router to 10.1.1.1
D. Change the HSRP group configuration on the local router to 1
问题 #91
What is a characteristic of YANG?
A. It is a Cisco proprietary language that models NETCONF data
B. It allows model developers to create custom data types
C. It structures data in an object-oriented fashion to promote model reuse
D. It provides loops and conditionals to control now within models
问题 #92
When is an external antenna used inside a building?
A. only when using 5 GHz
B. only when using 2.4 GHz
C. when it provides the required coverage
D. only when using Mobility Express
问题 #93
Refer to the exhibit. How was spanning-tree configured on this interface?
A. By entering the command spanning-tree portfast trunk in the interface configuration mode.
B. By entering the command spanning-tree portfast in the interface configuration mode
C. By entering the command spanning-tree mst1 vlan 10,20,30,40 in the global configuration mode
D. By entering the command spanning-tree vlan 10,20,30,40 root primary in the interface configuration mode
问题 #94
An engineer is troubleshooting the AP join process using DNS. Which FQDN must be resolvable on the network for the access points to successfully register to the WLC?
A. cisco-capwap-controller.domain.com
B. wlchostname.domain.com
C. ap-manager.domain.com
D. primary-wlc.domain.com
问题 #95
How is Layer 3 roaming accomplished in a unified wireless deployment?
A. An EoIP tunnel is created between the client and the anchor controller to provide seamless connectivity as the client is associated with the new AP
B. The client entry on the original controller is passed to the database on the new controller
C. The new controller assigns an IP address from the new subnet to the client
D. The client database on the original controller is updated the anchor entry, and the new controller database is updated with the foreign entry.
问题 #96
A network administrator has designed a network with two multilayer switches on the distribution layer, which act as default gateways for the end hosts. Which two technologies allow every end host in a VLAN to use both gateways? (Choose two)
A. HSRP
B. GLBP
C. MHSRP
D. VRRP
E. VSS
问题 #97
Which measurement is used from a post wireless survey to depict the cell edge of the access points?
A. CCI
B. Noise
C. SNR
D. RSSI
问题 #98
Refer to the exhibit. While troubleshooting a routing issue, an engineer issues a ping from S1 to S2. Which two actions from the initial value of the TTL? (Choose two)
A. The packet reaches R3, and the TTL expires
B. R2 replies with a TTL exceeded message
C. R1 replies with a TTL exceeded message
D. The packet reaches R2 and the TTL expires
E. R3 replies with a TTL exceeded message
F. The packet reaches R1 and the TTL expires
问题 #99
Refer to the exhibit. Router#show access-list Extended IP access list 100 10 permit ip 192.168.0.0 0.0.255.255 any 20 permit ip 172.16.0.0 0.0.15.255 any Which command set must be added to permit and log all traffic that comes from 172.20.10.1 in interfac
A. Router(config)#ip access-list extended 100
Router(config-ext-nacl)#5 permit ip 172. 20.10.0 0.0.0.255 any log
B. Router(config)#no access-list 100 permit ip 172.16.0.0 0.0.15.255 any
Router(config)#access-list 100 permit ip 172. 16.0.0 0.0.15.255 any log
C. Router(config)#access-list 100 permit ip host 172.20.10.1 any log
D. Router(config)#access-list 100 seq 5 permit ip host 172.20.10.1 any log
问题 #100
How are the different versions of IGMP compatible?
A. IGMPv2 is compatible only with IGMPv1
B. IGMPv2 is compatible only with IGMPv2
C. IGMPv3 is compatible only with IGMPv3
D. IGMPv3 is compatible only with IGMPv1
问题 #101
An engineer runs the code against an API of Cisco DNA Center, and the platform returns this output. What does the response indicate?
A. The authentication credentials are incorrect
B. The URI string is incorrect
C. The Cisco DNA Center API port is incorrect
D. The HTTP method is incorrect
问题 #102
What is one difference between Saltstack and Ansible?
A. SaltStack uses an API proxy agent to program Cisco boxes on agent mode, whereas Ansible uses a Telnet connection
B. SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box
C. SaltStack is constructed with minion, whereas Ansible is constructed with YAML
D. SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus
问题 #103
What is the centralized control policy in a Cisco SD-WAN deployment?
A. list of ordered statements that define user access policies
B. list of enabled services for all nodes within the cloud
C. set of rules that governs nodes authentication within the cloud
D. set of statements that defines how routing is performed
问题 #104
Refer to the exhibit. R1#show crypto isakmp sa IPv4 Crypto ISAKMP SA dst src state conn-id status 209.165.201.6 209.165.201.1 QM_IDLE 101 ACTIVE After configurating an IPsec VPN, an engineer enters the show command to verify the ISAKMP SA status. What doe
A. Peers have exchanged keys, but ISAKMP SA remains unauthenticated.
B. ISAKMP SA is authenticated and can be used for Quick Mode.
C. VPN peers agreed on parameters for the ISAKMP SA
D. ISAKMP SA has been created, but it has not continued to form.
问题 #105
Refer to the exhibit. An engineer attempts to create a configuration to allow the Blue VRF to leak into the global routing table, but the configuration does not function as expected. Which action resolves this issue?
A. Change the access-list number in the route map
B. Change the source network that is specified in access-list 101
C. Change the route-map configuration to VRF_BLUE
D. Change the access-list destination mask to a wildcard
问题 #106
Which Cisco DNA center application is responsible for group-based access control permissions?
A. Design
B. Provision
C. Assurance
D. Policy
问题 #107
A client device roams between wireless LAN controllers that are mobility peers. Both controllers have dynamic interface on the same client VLAN. Which type of roam is described?
A. intra-VLAN
B. intra-controller
C. inter-controller
D. inter-subnet
问题 #108
Which line must be added in the Python function to return the JSON object {"cat_9k":"FXS193202SE"}?
A. return (json.dumps({d['hostname']: d['serialNumber'] for d in json.loads(test_json)['response']}))
B. return (json.loads({for d in json.dumps(test_json)['response']: d['hostname']: d['serialNumber']}))
C. return (json.loads({d['hostname']: d['serialNumber'] for d in json.dumps(test_json)['response']}))
D. return (json.dumps({for d in json.loads(test_json)['response']: d['hostname']: d['serialNumber']}))
问题 #109
Refer to the exhibit. A network engineer troubleshoots an issue with the port channel between SW1 and SW2. Which command resolves the issue? *Aug 12 02:22:23.233: %LINK-3-UPDOWN: Interface Port-channel10, changed state to down *Aug 12 02:22:24.236: %LINEP
A. SW1(config-if)#channel-group 10 mode active
B. SW1(config-if)#channel-group 10 mode desirable
C. SW2(config-if)#channel-group 10 mode on
D. SW2(config-if)#switchport mode trunk
问题 #110
How is 802.11 traffic handled in a fabric-enabled SSID?
A. converted by the AP into 802.3 and encapsulated into a VLAN
B. centrally switched back to WLC where the user traffic is mapped to a VXLAN on the WLC
C. centrally switched back to WLC where the user traffic is mapped to a VLAN on the WLC
D. converted by the AP into 802.3 and encapsulated into VXLAN
问题 #111
Refer to the exhibit. ------------------------------------------- R1 interface Ethernet0/0 ip address 10.1.1.10 255.255.255.0 ip nat inside ! interface Serial0/0 ip address 209.165.201.1 255.255.255.224 ip nat outside ! ip nat pool Busi 209.165.201.1 209.
A. R1 is configured with NAT overload parameters
B. The first packet triggered NAT to add on entry to NAT table
C. A Telnet from 160.1.1.1 to 10.1.1.10 has been initiated
D. R1 to configured with PAT overload parameters
问题 #112
Which congestion queuing method on Cisco IOS based routers uses four static queues?
A. low latency
B. custom
C. weighted fair
D. Priority