Question 1

What is the role of the vSmart controller in a Cisco SD-WAN environment?

Accepted Answer

The vSmart controller in a Cisco SD-WAN environment is responsible for managing the control plane, which includes the distribution of routing and policy information to the network devices.

Question 2

How do agent-based versus agentless configuration management tools compare?

Accepted Answer

The answer of How do agent-based versus agentless configuration management...

Question 3

What is the role of a fusion router in an SD-Access solution?

Accepted Answer

A fusion router in an SD-Access solution is responsible for performing route leaking between user-defined virtual networks and shared services, allowing communication between different virtual networks and external services.

Question 4

What is the correct EBGP path attribute list, ordered from most preferred to least preferred, that the BGP best-path algorithm uses?

Accepted Answer

The BGP best-path selection process prefers paths based on the following order: weight, local preference, AS path, and then MED.

Question 5

Which action is the vSmart controller responsible for in an SD-WAN deployment?

Accepted Answer

The vSmart controller is responsible for distributing security information and policies to vEdge routers to establish secure tunnels between them in an SD-WAN deployment.

Question 6

Which feature must be configured to allow packet capture over Layer 3 infrastructure?

Accepted Answer

ERSPAN (Encapsulated Remote Switched Port Analyzer) allows packet capture over Layer 3 infrastructure by encapsulating the captured traffic in GRE packets, enabling it to be sent across a routed network.

Question 7

A network is being migrated from IPv4 to IPv6 using a dual-stack approach. Network management is already 100% IPv6 enabled. In a dual-stack network with two dual-stack NetFlow collectors, how many flow exporters are needed per network device in the flexible NetFlow configuration?

Accepted Answer

The answer of A network is being migrated from IPv4...

Question 8

An engineer must protect their company against ransomware attacks. Which solution allows the engineer to block the execution stage and prevent file encryption?

Accepted Answer

Cisco AMP (Advanced Malware Protection) with the Malicious Activity Protection engine enabled is designed to detect and block malicious activities, including the execution stage of ransomware, thereby preventing file encryption.

Question 9

Refer to the exhibit.  An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times. Which command set accomplishes this task?

Accepted Answer

The answer of Refer to the exhibit.  An engineer...

Question 10

An engineer is describing QoS to a client. Which two facts apply to traffic policing? (Choose two.)

Accepted Answer

Policing should be performed as close to the source as possible to prevent excess traffic from entering the network. It drops traffic that exceeds the defined rate, rather than queuing it.

Question 11

Which method does the enable secret password option use to encrypt device passwords?

Accepted Answer

The enable secret password option uses MD5 hashing to encrypt device passwords.

Question 12

Why is an AP joining a different WLC than the one specified through option 43?

Accepted Answer

The AP multicast traffic is unable to reach the WLC through Layer 3

Question 13

What is the structure of a JSON web token?

Accepted Answer

A JSON Web Token (JWT) consists of three parts: a header, a payload, and a signature, all separated by dots. The header typically contains the type of token and the signing algorithm, the payload contains the claims, and the signature is used to verify the token's integrity.

Question 14

Which access control list allows only TCP traffic with a destination port range of 22-443, excluding port 80?

Accepted Answer

The correct access control list is A because it denies TCP traffic on port 80 and permits TCP traffic on ports greater than 21 and less than 444, effectively allowing ports 22-443 except for port 80.

Question 15

Refer to the exhibit.  The inside and outside interfaces in the NAT configuration of this device have been correctly identified. What is the effect of this configuration?

Accepted Answer

The answer of Refer to the exhibit.  The inside...

Question 16

Which algorithms are used to secure REST API from brute attacks and minimize the impact?

Accepted Answer

PBKDF2, BCrypt, and SCrypt are key derivation functions designed to be computationally intensive, making them effective for securing passwords and minimizing the impact of brute force attacks on REST APIs.

Question 17

Refer to the exhibit.  An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplishes this task?

Accepted Answer

The answer of Refer to the exhibit.  An engineer...

Question 18

Refer to the exhibit.  VLANs 50 and 60 exist on the trunk links between all switches. All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server. Which command ensures that SW3 receives frames only from VLAN 50?

Accepted Answer

The answer of Refer to the exhibit.  VLANs 50...

Question 19

Which standard access control entry permits traffic from odd-numbered hosts in the 10.0.0.0/24 subnet?

Accepted Answer

The wildcard mask 0.0.0.254 in choice B allows for odd-numbered hosts by matching every other IP address starting from 10.0.0.1.

Question 20

Which statement about VXLAN is true?

Accepted Answer

VXLAN encapsulates Layer 2 frames in an IP-UDP header, enabling Layer 2 adjacency across router boundaries.

Exam 38: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)