Question No: 13

Which two methods do IPsec VTIs use to identify and transmit encrypted traffic through the tunnel? (choose

two)

A. static routing

B. object groups

C. ACLs

D. NAT

E. dynamic routing

Question No: 14

What command can you enter to configure NBAR to recognize VNC traffic?

A. Ipnbar custom-map VNC tcp-udp 5900 5901

B. Ipnbar application-map VNC udp 5900 5901

C. Ipnbar port-to-application seq 5 VNC tcp 5900 5901

D. Ipnbar port-map VNC hex 0xAA 0x1B

E. Ipnbar port-map VNC tcp 5900 5901

Question No: 15

Which prefix List Matches and permits all RFC 1918 network 1 0.0.0.0 routes that have subnet marks of /16 trough /24?

A. ip prefix-list foo seq 10 perm it 10.0.0.0/16 le 24.

B. ip prefix-list foo seq 10 permit 10.0.0.0/16 ge 15 le 25.

C. ip prefix-list foo seq 10 perm it 1 0.0.0.0/8 ge 15 le 25.

D. ip prefix-list foo seq 10 permit 10.0.0.0/8 ge 16 le 24.

Question No: 16

Refer to the exhibit.

Which option describes the purpose of the as-set argument of the aggregate-address command?

A. It provides a list of AS numbers top which the aggregate is advertised.

B. It provides a predefined AS path in the aggregate advertisement that is used to indicate and aggregate

prefix.

C. It provides as AS path in the aggregate advertisement that contains only the local AS number.

D. It provides an AS path in the aggregate advertisement that includes the AS numbers of the component

members.

Question No: 17

Refer to the exhibit.

After you apply the given configurations to R1 and R2.which networks does R2 advertise to R1?

A. both 172 16.32.0/20 and 172 16.33.0/24

B. 172.16.32.0/20 only

C. 172.16.0.0/16 only

D. 172.16.33.0/24 only

Question No: 18

When is MAC authentication bypass enabled by default?

A. When 802.1x authentication times out

B. When 802.1x authentication fails

C. When two-factor authentication is configured

D. After 802.1x authentication verifies the client's identity

Question No: 19

which BGP feature allows a router to maintain its current BGP configuration while it advertises a different AS number to new connections?

A. locall-AS

B. soft reset

C. allow-AS in

D. next-hop-self

Question No: 20

How is the MRU for a multilink bundle determined?

A. It is negotiated by LCP.

B. It is manually configured on the multilink bundle.

C. It is manually configured on all physical interfaces of a multilink bundle.

D. It is negotiated by NCP.

E. It is negotiated by IPCP.

Question No: 21

Which two options are potential impacts of microbursts? (Choose two.)

A. invalid checksum

B. tail drops

C. packet loss

D. unicast flooding

E. asymmetric routing

F. unnecessary broadcast traffic

Question No: 22

Which two statements about NAT are true? (Choose two)

A. Static NAT supports a one-to-one address mapping

B. Dynamic NAT allows hosts inside a network to use a pool of addresses to access hosts outside the network

C. PAT uses destination port numbers identity address mappings

D. Static NAT release the translated address for use by another device when it is inactive

E. One-to-one mapping denies outside traffic from accessing an inside host