Cisco 350-501 Exam Dumps

Question 6 of 347

After you analyze your network environment, you decide to implement a full separation model for Internet access and MPLS L3VPN services.

For which reason do you make this decision?

It enables EGP and IGP to operate independently.

It enables you to choose whether to separate or centralize each individual service.

It is easier to manage a system in which services are mixed.

It requires only one edge router.

Correct Answer: A

Implementing a full separation model for Internet access and MPLS L3VPN services enables EGP (Exterior Gateway Protocol) and IGP (Interior Gateway Protocol) to operate independently. This separation is crucial because EGP is used to exchange routing information between different autonomous systems, while IGP is used within an autonomous system. By maintaining separate routing instances for each service, the network can achieve enhanced performance and stability, as it prevents routing conflicts and ensures each protocol operates within its optimal context.

Question 7 of 347

Which statement about the Cisco MPLS TE forwarding adjacency feature is true?

It enables the MPLS core to use EIGRP as the routing protocol.

It enables the Cisco MPLS TE tunnel to be advertised into the running IGP.

It enables the tailend router to advertise routes to the headend router over the tunnel.

It enables the headend and tailend routers to establish a bidirectional tunnel.

Correct Answer: B

The Cisco MPLS TE forwarding adjacency feature allows an MPLS Traffic Engineering tunnel to be advertised as a link in the Interior Gateway Protocol (IGP) routing tables. This enables the MPLS core network to facilitate traffic engineering by providing the capability to include MPLS TE tunnels as part of the IGP’s topology.

Question 8 of 347

While implementing TTL security, you issue the PE(config-router-af)#neighbor 2.2.2.2 ttl-security hops 2 command.

After you issue this command, which BGP packets does the PE accept?

to 2.2.2.2, with a TTL of 2 or more

from 2.2.2.2, with a TTL of less than 2

to 2.2.2.2, with a TTL of less than 253

from 2.2.2.2, with a TTL of 253 or more

Correct Answer: D

When configuring TTL security with the command 'neighbor 2.2.2.2 ttl-security hops 2', the router expects to receive BGP packets from the neighbor with a TTL value of at least 253. This is calculated as 255 (the maximum TTL value) minus the number of hops set (2). Therefore, the correct answer is that the PE accepts packets from 2.2.2.2 with a TTL of 253 or more.

Question 9 of 347

Refer to the exhibits. Which information is provided for traceback analysis when this configuration is applied?

source interface

packet size distribution

IP sub flow cache

BGP version

Correct Answer: A

The configuration provided refers to NetFlow, which is a protocol used for collecting IP traffic information. The command 'ip flow-export' designates where to send NetFlow data, and the 'ip flow ingress' command on the interface specifies that ingress traffic should be monitored. One crucial piece of information that NetFlow can provide for traceback analysis is the source interface of the traffic, which can help in determining the origin of the packets. This is especially useful in security monitoring and attack traceback scenarios.

Question 10 of 347

Refer to the exhibit. R1 is connected to two service providers and is under a DDoS attack.

Which statement about this design is true if URPF in strict mode is configured on both interfaces?

R1 drops all traffic that ingresses either interface that has a FIB entry that exits a different interface.

R1 drops destination addresses that are routed to a null interface on the router.

R1 permits asymmetric routing as long as the AS-PATH attribute entry matches the connected AS.

R1 accepts source addresses on interface gigabitethernet0/1 that are private addresses.

Correct Answer: A

Unicast Reverse Path Forwarding (URPF) in strict mode helps prevent IP address spoofing by ensuring that packets received on an interface have a source IP address that matches the routing table's reverse path for that interface. In the strict mode, R1 will drop any traffic that enters an interface if the forwarding information base (FIB) entry for the source IP address does not match the interface the packet arrived on. This behavior is what option A describes. Therefore, this option is correct because it accurately reflects how URPF strict mode operates.