Question 1

After the recent implementation of a new design that incorporated GRE tunnels into the network, the network operations staff is seeing the following syslog message in multiple routers on the network - %TUN-5-RECURDOWN: Tunnel0 temporarily disabled due to recursive routing. From a design perspective, what was not taken into account prior to implementing the solution?
A) The neighboring routers cannot respond within the specified hold time.
B) The interface on the router that is the source of the tunnel is down.
C) The interface on the neighboring router that is the source of the tunnel is down.
D) The router is learning the route to the tunnel destination address using the tunnel interface.
E) The tunnel interface on the router is not receiving any keepalives within the specified hold time.

Accepted Answer

The syslog message indicates recursive routing, which occurs when the router learns the route to the tunnel destination through the tunnel itself, causing a loop. This design flaw should have been addressed to prevent recursive routing.

Question 2

A company wants a design that would support OSPF through a service provider ATM network. Which two OSPF network types should the designer use to establish OSPF neighborship between OSPF routers through the ATM network? (Choose two.)
A) A broadcast network will always work through ATM networks.
B) A broadcast network will work when the broadcast support is explicitly configured at the ATM network.
C) Explicit neighbor statements are required when a nonbroadcast network is configured.
D) Explicit neighbor statements are required when a point-to-multipoint network is configured.
E) A nonbroadcast network does not require DR selection.

Accepted Answer

A broadcast network can work if the ATM network is configured to support broadcasts. For a nonbroadcast network, explicit neighbor statements are needed to establish OSPF neighborship.

Question 3

Which two features can be used to extend VRFs across a campus? (Choose two.)
A) 802.1q trunks
B) LDP
C) MPLS TE
D) GRE
E) port channels

Accepted Answer

The answer of Which two features can be used to...

Question 4

Refer to the exhibit.  You are planning the design of an encrypted WAN. IP packets will be transferred over encrypted GRE tunnels between routers B and C. The packet size is limited to a maximum of 1500 bytes inside the WAN between routers B and C. If endpoint 1 tries to send 1500-byte IP packets to endpoint 2, in what three ways will the network design handle the fragmentation in three different possible network configurations? (Choose three.)
A) When router B fragments packets after the encryption, router C must reassemble these fragmented packets.
B) When router B fragments packets before the encryption, router C must reassemble these fragmented packets.
C) When router B fragments packets after the encryption, the endpoint 2 must reassemble these fragmented packets.
D) When router B fragments packets before the encryption, endpoint 2 must reassemble these fragmented packets.
E) When router A fragments packets, router C must reassemble these fragmented packets.
F) When router A fragments packets, endpoint 2 must reassemble these fragmented packets.

Accepted Answer

The answer of Refer to the exhibit.  You are...

Question 5

You are designing a multisite VPN solution for a customer and you are concerned with the additional overhead of point-to-point tunnels and the associated overlay routing with DMVPN. How does a GDOI-based VPN eliminate the additional tunnel and routing overhead found in DMVPN?
A) The GDOI-based VPN requires overlaying a secondary routing infrastructure through the tunnels.
B) In a GDOI-based VPN, all group members share a common security association.
C) The GDOI-based VPN requires the provisioning of a complex connectivity mesh.
D) The GDOI-based VPN leverages the routing protocol to find its peer for tunnel setup.

Accepted Answer

In a GDOI-based VPN, all group members share a common security association, which eliminates the need for individual point-to-point tunnels and reduces routing overhead.

Question 6

A many-to-many enterprise messaging application is using multicast as a transport mechanism. As part of the network design for this application, which multicast address should be used, according to best practices outlined in RFC 2365?
A) 224.0.0.60
B) 232.192.0.60
C) 239.128.0.60
D) 239.193.0.60

Accepted Answer

The answer of A many-to-many enterprise messaging application is using...

Question 7

A company plans to establish a new network using Cisco Catalyst switches for its multicast applications. What is the disadvantage when two multicast applications are using the multicast IP addresses 234.17.4.5 and 234.145.4.5 inside the same network?
A) Multicast packets from both applications are flooded to all Layer 2 ports in a segment where a multicast receiver is located.
B) Multicast packets from both applications are flooded to ports where one multicast receiver from one application is located.
C) Only one multicast stream is received at the port where the receivers from both applications are located.
D) Both multicast senders will always receive the multicast packets from the other multicast application.
E) The routers doing PIM-SM cannot distinguish between the two multicast applications.

Accepted Answer

Both multicast applications use different multicast IP addresses, but if they share the same Layer 2 segment, multicast packets can be flooded to ports where any multicast receiver is located, potentially causing unnecessary traffic on those ports.

Question 8

What is a key design aspect to be considered when designing an IP network that will be carrying real- time VoIP traffic?
A) Minimizing total bidirectional end-to-end delay to 0-150 ms
B) Minimizing total unidirectional end-to-end delay to 150-500 ms
C) Minimizing total bidirectional end-to-end delay to 0-50 ms
D) Minimizing total unidirectional end-to-end delay to 0-150 ms

Accepted Answer

For real-time VoIP traffic, it is crucial to minimize total unidirectional end-to-end delay to 0-150 ms to ensure good voice quality and avoid noticeable latency.

Question 9

What is a key role for the access layer in a hierarchical network design?
A) The access layer provides a security, QoS, and policy trust boundary.
B) The access layer provides an aggregation point for services and applications.
C) The access layer serves as a distribution point for services and applications.
D) The access layer can be used to aggregate remote users.

Accepted Answer

The access layer is responsible for connecting end devices to the network and often serves as the point where security, Quality of Service (QoS), and policy enforcement are applied.

Question 10

A company is planning to connect its 30 sites with a VPLS WAN backbone. A router at each site should establish neighborships with all other routers using the OSPF routing protocol. Which three points must be considered regarding DR and BDR when different router platforms are used? (Choose three.)
A) It is a best practice that the routers with the most powerful hardware should take the role of the DR and BDR.
B) If the IP OSPF priority is the same for all routers, the highest loopback IP address and router ID will decide which routers will take the DR and BDR role during the selection process.
C) To select the DR and BDR, the IP OSPF priority must be set to a higher value than the default value at the DR and BDR during the selection process.
D) To select the DR and BDR, the IP OSPF priority must be set to a lower value than the default value at the DR and BDR during the selection process.
E) The role for the DR and BDR will be selected when a new OSPF router comes up.
F) To force two routers to become a DR and a BDR, the IP OSPF priority can be set to zero at all other OSPF routers.

Accepted Answer

The answer of A company is planning to connect its...

Question 11

Which restriction prevents a designer from using a GDOI-based VPN to secure traffic that traverses the Internet?
A) Enterprise host IP addresses are typically not routable.
B) GDOI is less secure than traditional IPsec.
C) Network address translation functions interfere with tunnel header preservation.
D) The use of public addresses is not supported with GDOI.

Accepted Answer

Network address translation (NAT) can interfere with the preservation of tunnel headers in GDOI-based VPNs, causing issues with the secure transmission of data.

Question 12

You have been tasked to create a Layer 2 network design that uses vPC to provide resiliency and avoid loops. vPC removes Layer 2 loops while providing redundancy through which mechanism?
A) dual-active detection
B) address synchronization
C) strict forwarding rules
D) Bridge Assurance

Accepted Answer

vPC (Virtual Port Channel) uses strict forwarding rules to prevent loops by ensuring that traffic is only forwarded on one of the vPC peer links, thus providing redundancy without creating loops.

Question 13

When a design calls for spanning VLANs across a campus network, what are two issues that need to be addressed in the design? (Choose two.)
A) network convergence
B) network accessibility
C) fault isolation
D) application scalability
E) user experience

Accepted Answer

Spanning VLANs across a campus network can affect network convergence times and fault isolation. Convergence is impacted because changes in one part of the network can affect VLANs across the entire campus. Fault isolation becomes more complex as issues in one VLAN can propagate across the network, making it harder to pinpoint and resolve problems.

Question 14

A green data center is being deployed and a design requirement is to be able to readily scale server virtualization. Which IETF standard technology can provide this requirement?
A) Transparent Interconnection of Lots of Links
B) fabric path
C) data center bridging
D) unified fabric

Accepted Answer

Transparent Interconnection of Lots of Links (TRILL) is an IETF standard that allows for scalable and efficient server virtualization by enabling the creation of large, flat Layer 2 networks, which are ideal for virtualized data center environments.

Question 15

Refer to the exhibit.  You are designing an IPv4 unicast Layer 3 VPN load-balancing solution. Which L3VPN feature needs to be configured on the PE routers to support the design requirement?
A) nonmatching route distinguishers
B) matching route target values
C) disable split horizon on PE2 and PE3
D) matching route distinguishers

Accepted Answer

The answer of Refer to the exhibit.  You are...

Question 16

You are designing the QoS features for a large enterprise network that includes DMVPN. When would you need to configure QoS preclassify?
A) when you are marking packets with the DSCP bits
B) when you are marking packets with the TOS bits
C) when your service provider requires the DSCP bits be set
D) when the QoS policy cannot be based on DSCP ToS bits

Accepted Answer

QoS preclassify is needed when the QoS policy cannot be based on DSCP or ToS bits because it allows classification based on the original packet headers before they are encapsulated by DMVPN.

Question 17

A network administrator is in charge of multiple IPsec VPN headend devices that service thousands of remote connectivity, point-to-point, IPsec/GRE tunnels. During a recent power outage, in which it was found that a backup power supply in one of those headend devices was faulty, one of the headend routers suffered a complete shutdown event. When the router was successfully recovered, remote users found intermittent connectivity issues that went away after several hours. Network operations staff accessed the headend devices and found that the recently recovered unit was near 100% CPU for a long period of time. How would you redesign the network VPN headend devices to prevent this from happening again in the future?
A) Move the tunnels more evenly across the headend devices.
B) Implement Call Admission Control.
C) Use the scheduler allocate command to curb CPU usage.
D) Change the tunnels to DMVPN.

Accepted Answer

The answer of A network administrator is in charge of...

Question 18

You are asked to design a large campus network that will be using multicast for data transport. Which feature should be enabled at the Layer 2 access edge for host-only ports?
A) PortFast
B) BPDU guard
C) PIM-SM
D) PIM query interval

Accepted Answer

PortFast should be enabled on host-only ports to allow them to transition directly to the forwarding state, which is beneficial for multicast traffic as it reduces the time it takes for ports to start forwarding packets.

Question 19

Which technique can you use to detect forwarding path failures at a uniform rate, and reconvergence times will be consistent and predictable when your routers are in the same broadcast domain?
A) Enable BFD on your routers.
B) Configure your routers with IP-SLA to ping the peer router.
C) Configure your routers with IP-SLA and track to ping the peer and switch to a default route if the pings fail.
D) Tune your routing protocol timers.

Accepted Answer

BFD (Bidirectional Forwarding Detection) is designed to detect forwarding path failures at a uniform rate, providing consistent and predictable reconvergence times, especially when routers are in the same broadcast domain.

Question 20

Which design concern should be accounted for in all Layer 3 virtualization technologies?
A) Layer 3 redundancy
B) packet sizing
C) application usage
D) Layer 3 stability

Accepted Answer

The answer of Which design concern should be accounted for...

Exam 44: Deploying Cisco Unified Contact Center Express

A company wants a design that would support OSPF through a service provider ATM network. Which two OSPF network types should the designer use to establish OSPF neighborship between OSPF routers through the ATM network? (Choose two.)

Which two features can be used to extend VRFs across a campus? (Choose two.)

You are designing a multisite VPN solution for a customer and you are concerned with the additional overhead of point-to-point tunnels and the associated overlay routing with DMVPN. How does a GDOI-based VPN eliminate the additional tunnel and routing overhead found in DMVPN?

A many-to-many enterprise messaging application is using multicast as a transport mechanism. As part of the network design for this application, which multicast address should be used, according to best practices outlined in RFC 2365?

A company plans to establish a new network using Cisco Catalyst switches for its multicast applications. What is the disadvantage when two multicast applications are using the multicast IP addresses 234.17.4.5 and 234.145.4.5 inside the same network?

What is a key design aspect to be considered when designing an IP network that will be carrying real- time VoIP traffic?

What is a key role for the access layer in a hierarchical network design?

A company is planning to connect its 30 sites with a VPLS WAN backbone. A router at each site should establish neighborships with all other routers using the OSPF routing protocol. Which three points must be considered regarding DR and BDR when different router platforms are used? (Choose three.)

Which restriction prevents a designer from using a GDOI-based VPN to secure traffic that traverses the Internet?

You have been tasked to create a Layer 2 network design that uses vPC to provide resiliency and avoid loops. vPC removes Layer 2 loops while providing redundancy through which mechanism?

When a design calls for spanning VLANs across a campus network, what are two issues that need to be addressed in the design? (Choose two.)

A green data center is being deployed and a design requirement is to be able to readily scale server virtualization. Which IETF standard technology can provide this requirement?

Refer to the exhibit. You are designing an IPv4 unicast Layer 3 VPN load-balancing solution. Which L3VPN feature needs to be configured on the PE routers to support the design requirement?

You are designing the QoS features for a large enterprise network that includes DMVPN. When would you need to configure QoS preclassify?

You are asked to design a large campus network that will be using multicast for data transport. Which feature should be enabled at the Layer 2 access edge for host-only ports?

Which technique can you use to detect forwarding path failures at a uniform rate, and reconvergence times will be consistent and predictable when your routers are in the same broadcast domain?

Which design concern should be accounted for in all Layer 3 virtualization technologies?