Question 1

As part of a new network design, you are helping the Network Management Team to develop a proactive report to identify places in the network where problems may happen. The network management tool can poll the network devices only via SNMP GET operations. Which two threshold- crossing metrics should you include in this report? (Choose two.)
A) packet loss
B) CPU utilization
C) heat dissipation
D) IP reachability
E) energy consumption
F) link bandwidth utilization

Accepted Answer

B,F

Question 2

A company wants to connect two data center sites using a hub-and-spoke design with 2000 remote sites. One design consideration is the requirement to transfer MPLS packets over the public Internet. In addition, one router at each site should be used, and the MPLS packets must be encapsulated inside IP packets because the public Internet cannot transfer native MPLS packets. Which feature can be used to simplify the network design?
A) GET VPN can be used to encrypt the MPLS packets with IPsec.
B) DMVPN can be used to build up GRE tunnels dynamically with MPLS encapsulation inside.
C) L2TPv3 can be used to encapsulate the MPLS packets.
D) Site-to-site IPsec without GRE can be used to encapsulate the MPLS packets.
E) PPPoE can be used to encapsulate the MPLS packets.

Accepted Answer

DMVPN (Dynamic Multipoint Virtual Private Network) can be used to dynamically build GRE tunnels, which can encapsulate MPLS packets inside IP packets, allowing them to be transferred over the public Internet.

Question 3

You are identifying performance management requirements for a VoIP migration. What three key performance indicators would you use to track media quality? (Choose three.)
A) delay
B) trunk group usage
C) jitter
D) packet loss
E) call processing (call detail records)
F) call processing (performance counters)
G) echo
H) crosstalk

Accepted Answer

Delay, jitter, and packet loss are key performance indicators for media quality in VoIP systems, as they directly affect the quality and reliability of voice transmission.

Question 4

When creating a network design that routes an IGP over L2VPNs, with which device does the remote CE router form an IGP adjacency?
A) the hub site PE router
B) the hub site CE router
C) the directly connected PE router
D) The IGP will not establish adjacency over the MPLS network.

Accepted Answer

The remote CE router forms an IGP adjacency with the hub site CE router, as the L2VPN provides a Layer 2 connection between the CE routers, allowing them to establish an IGP adjacency directly.

Question 5

A company plans to include Nonstop Forwarding and Bidirectional Forwarding Detection as a part of their network redundancy plan. In which two ways do NSF and BFD work together when different hardware platforms are compared? (Choose two.)
A) During supervisor engine or routing engine failover, the NSF feature will always ensure that the BFD at the peer router will not trigger a link down independent of the used hardware platform.
B) At some hardware platforms, BFD and NSF are not supported together. During supervisor engine or routing engine failover, the BFD at the peer router will trigger a link down.
C) To ensure that BFD at the peer router will not trigger a link down during NSF, the BFD packets must be processed fast enough, and, during supervisor engine or routing engine failover, by processing the BFD independent from the supervisor engine or routing engine.
D) Because BFD is always processed at the line cards (not at the supervisor engine or routing engine), a supervisor engine or routing engine failover will not affect the BFD peer router.
E) Because BFD is always processed at the supervisor engine or routing engine, a supervisor engine or routing engine failover will always trigger a link down at the peer router.

Accepted Answer

Some hardware platforms do not support NSF and BFD together, leading to a link down during failover. To prevent this, BFD packets must be processed independently of the supervisor engine or routing engine.

Question 6

Company X will be integrating an IPv6 application into their network and wants to develop a test environment to evaluate application performance across the network. This application will require both unicast and multicast communications. The company can do this implementation only in certain areas of its existing IPv4-only network, but wants all areas to communicate with each other. When developing the design to provide connectivity between these testing locations, what tunneling technology would work in this scenario?
A) ISATAP
B) 6to4
C) DMVPN
D) 6vPE
E) 6PE

Accepted Answer

The answer of Company X will be integrating an IPv6...

Question 7

You are designing a network using multipoint GRE tunnels and need to be able to detect when connectivity between the GRE tunnel endpoints is broken. Which statement is true about configuring keepalives for multipoint GRE tunnels?
A) The keepalive timer values on the routers must have the same value.
B) Both routers must support GRE tunnel keepalives.
C) No configuration is required to detect when connectivity is broken between the GRE tunnel endpoints.
D) GRE tunnel keepalives will not detect when connectivity is broken between the GRE tunnel endpoints.

Accepted Answer

The answer of You are designing a network using multipoint...

Question 8

Your enterprise customer has asked where they should deploy flow monitoring in their network to monitor traffic between branch offices. What is your design recommendation?
A) at the edge of the network so that user traffic will be seen
B) at the central site, because all traffic from the remotes will be seen there.
C) in the core, because all traffic will be seen there
D) in the data center, because all user traffic will be seen there

Accepted Answer

Deploying flow monitoring at the central site is recommended because all traffic from the branch offices will pass through this point, allowing for comprehensive monitoring of inter-branch traffic.

Question 9

You are working on a network design plan for a company with approximately 2000 sites. The sites will be connected using the public Internet. You plan to use private IP addressing in the network design, which will be routed without NAT through an encrypted WAN network. Some sites will be connected to the Internet with dynamic public IP addresses, and these addresses may change occasionally. Which VPN solution will support these design requirements?
A) GET VPN must be used, because DMVPN does not scale to 2000 sites.
B) DMVPN must be used, because GET VPN does not scale to 2000 sites.
C) GET VPN must be used, because private IP addresses cannot be transferred with DMVPN through the public Internet.
D) DMVPN must be used, because private IP addresses cannot be transferred with GET VPN through the public Internet.
E) GET VPN must be used, because DMVPN does not support dynamic IP addresses for some sites.
F) DMVPN must be used, because GET VPN does not support dynamic IP addresses for some sites.

Accepted Answer

The answer of You are working on a network design...

Question 10

You are tasked with implementing a 1000-phone remote access solution, where phones will traverse a WAN edge router. Assuming all of the following features are supported in a hardware-assisted manner, which of the following will have the most detrimental impact on the delay of the packet?
A) encryption
B) stateful firewall
C) MPLS encapsulation
D) GRE encapsulation

Accepted Answer

Encryption typically adds the most delay to packet processing because it involves complex algorithms to secure the data, which can be computationally intensive even with hardware assistance.

Question 11

You have been hired to redesign a network due to issues with congestion. How will a router function if the QoS mechanism of congestion avoidance is integrated into the existing network design?
A) the router handles the overflow of traffic by using FIFO
B) the router handles the possible buildup of congestion by using WRED
C) the router forces inbound and outbound traffic to stay within a defined profile by using rate limiting
D) the router separates packets based on certain characteristics by using NBAR
E) the router marks packets based on certain characteristics by using PBR

Accepted Answer

WRED (Weighted Random Early Detection) is a congestion avoidance mechanism that helps manage packet loss by preemptively dropping packets before the queue becomes full, thus preventing congestion.

Question 12

You are a network designer and have been asked to consult with your server operations team to further enhance the security of the network. The operations team provides you with these details about the network: Which technology would you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers?
A) Access control lists to limit sources of traffic that exits the server-facing interface of the firewall cluster
B) Poison certain subnets by adding static routes to Null0 on the server farm core switches.
C) Unicast Reverse Path Forwarding in strict mode
D) Unicast Reverse Path Forwarding in loose mode

Accepted Answer

The answer of You are a network designer and have...

Question 13

You are the lead network designer hired by Service Provider XYZ to deploy CoS functionality on the core MPLS network (P routers). The goal of the network design is to provide a complete CoS solution to all customers that purchase services such as dedicated internet access, MPLS L3VPN, and L2VPN (pseudowire). Service Provider XYZ has these design requirements: How would you design your solution to map the DSCP value properly so that the traffic is assigned to the respective queues in the Service Provider XYZ MPLS core network?
A) Classify traffic according to DSCP value into appropriate P router queues.
B) Map the appropriate DSCP value into the EXP field based on the number of queues in the MPLS P routers.
C) Map the appropriate DSCP value into the EXP field based on the number of queues in the MPLS PE routers.
D) Based on the DSCP value, traffic is mapped automatically into appropriate queues in the MPLS CE routers.

Accepted Answer

The answer of You are the lead network designer hired...

Question 14

In which two ways is IPv4 and IPv6 traffic handled in a network design that uses QoS deployment options? (Choose two.)
A) IPv6 and IPv4 traffic is treated in the same way by using a single QoS policy that classifies and matches on both protocols.
B) IPv6 traffic is treated differently than IPv4 by using the flow-label field, which is built into the IPv6 packet header.
C) IPv6 traffic does not require QoS because it uses to the flow-label field, which classifies and matches on the IPv6 protocol.
D) IPv6 traffic is treated differently than IPv4 by using two different QoS policies.
E) IPv6 traffic is treated differently than IPv4 because it uses only the DSCP value and not the IP precedence.

Accepted Answer

IPv6 traffic can be treated differently than IPv4 traffic by using two different QoS policies. IPv6 traffic can also be treated differently than IPv4 traffic by using the flow-label field, which is built into the IPv6 packet header.

Question 15

You have been hired by Acme Corporation to evaluate their existing network and determine if the current network design is secure enough to prevent man-in-the-middle attacks. When evaluating the network, which switch security option should you investigate to ensure that authorized ARP responses take place according to known IP-to-MAC address mapping?
A) ARP rate limiting
B) DHCP snooping
C) Dynamic ARP Inspections
D) IP Source Guard

Accepted Answer

Dynamic ARP Inspection (DAI) is a security feature that validates ARP packets in a network. It ensures that only valid ARP responses, which match known IP-to-MAC address mappings, are allowed, thus preventing man-in-the-middle attacks.

Question 16

Service provider XYZ plans to provide dedicated Internet access and MPLS L3VPN services to business customers. XYZ has these design specifications: In what two ways can the MP-BGP be removed from the MPLS P core routers and still provide dedicated Internet access and MPLS L3VPN services? (Choose two.)
A) Disable BGP from the MPLS core P routers and have the MPLS core P routers run OSPF and LDP.
B) Enable separate BGP control plane routers using a route reflector server concept that will be fully meshed with peer route reflector servers and have clients as MPLS PE routers and EBGP peering routers.
C) Enable all EBGP routers as route reflector servers and MPLS PE routers as their clients.
D) It is not possible to disable BGP from the MPLS core P routers without impacting the dedicated Internet access and MPLS L3VPN services.

Accepted Answer

The answer of Service provider XYZ plans to provide dedicated...

Question 17

You are designing a Group Encrypted Transport virtual private network solution for an existing branch network. The existing network has the following characteristics: Which additional routing protocol would you use for the overlay routing between the group members?
A) Open Shortest Path First (with a different process ID)
B) Enhanced Interior Gateway Routing Protocol
C) No additional protocol is necessary.
D) External Border Gateway Protocol
E) Routing Information Protocol Version 2
F) Next Hop Resolution Protocol

Accepted Answer

No additional protocol is necessary because Group Encrypted Transport uses the existing routing protocols for overlay routing between the group members.

Question 18

Refer to the exhibit.  An enterprise is migrating its single-area OSPF network from a Frame Relay WAN service to an MPLS L3VPN service. Frame Relay will remain in only a few sites that require increased resiliency via two different WAN connections. Which feature could be used in the ?MPLS VPN service provider network to support the design requirement by ensuring that during normal operation, intersite traffic will only use the MPLS VPN service and not the old Frame Relay service?
A) virtual links
B) sham links
C) multiple stub areas
D) super backbone

Accepted Answer

The answer of Refer to the exhibit.  An enterprise...

Question 19

Refer to the exhibit.  You are designing a loop-free hierarchical VPLS service. Which two design considerations should be implemented for the pseudowires between the N-PE and U-PE routers? (Choose two.)
A) Disable split horizon toward the N-PE routers.
B) Disable split horizon toward the U-PE router.
C) Enable split horizon toward the U-PE router.
D) Enable split horizon toward the N-PE routers.
E) Disable MAC learning on the U-PE route.
F) Disable MAC learning on the N-PE routers.

Accepted Answer

The answer of Refer to the exhibit.  You are...

Question 20

A network designer has provisioned a router to use IPsec to encrypt the traffic over a GRE tunnel going to a web server at a remote location. From the router, the network designer can ping the web server, although the users in the office comment that they are unable to reach it. (Note: The DF bit is not set.) Which aspect should be changed in the design of the virtual connection?
A) IP addresses of the GRE tunnel endpoints
B) IPsec configuration
C) MTU size on the GRE tunnel
D) encapsulation of the GRE tunnel

Accepted Answer

The issue is likely related to the MTU size on the GRE tunnel. Since the DF bit is not set, packets may be getting fragmented, and the GRE tunnel might not be handling the fragmentation properly, causing issues for users. Adjusting the MTU size can help resolve this.

Exam 44: Deploying Cisco Unified Contact Center Express

You are identifying performance management requirements for a VoIP migration. What three key performance indicators would you use to track media quality? (Choose three.)

When creating a network design that routes an IGP over L2VPNs, with which device does the remote CE router form an IGP adjacency?

A company plans to include Nonstop Forwarding and Bidirectional Forwarding Detection as a part of their network redundancy plan. In which two ways do NSF and BFD work together when different hardware platforms are compared? (Choose two.)

You are designing a network using multipoint GRE tunnels and need to be able to detect when connectivity between the GRE tunnel endpoints is broken. Which statement is true about configuring keepalives for multipoint GRE tunnels?

Your enterprise customer has asked where they should deploy flow monitoring in their network to monitor traffic between branch offices. What is your design recommendation?

You are tasked with implementing a 1000-phone remote access solution, where phones will traverse a WAN edge router. Assuming all of the following features are supported in a hardware-assisted manner, which of the following will have the most detrimental impact on the delay of the packet?

You have been hired to redesign a network due to issues with congestion. How will a router function if the QoS mechanism of congestion avoidance is integrated into the existing network design?

In which two ways is IPv4 and IPv6 traffic handled in a network design that uses QoS deployment options? (Choose two.)

You are designing a Group Encrypted Transport virtual private network solution for an existing branch network. The existing network has the following characteristics: Which additional routing protocol would you use for the overlay routing between the group members?

Refer to the exhibit. You are designing a loop-free hierarchical VPLS service. Which two design considerations should be implemented for the pseudowires between the N-PE and U-PE routers? (Choose two.)