QUESTION 1

Which statement about IPv6 global unicast addresses is true?

A. The first 3 bits is 001.
B. The first 4 bits is 0011.
C. The first 4 bits is 1111.
D. The first 16 bits is FE80 in hex.
E. The first 16 bits is FF00 in hex.
F. The first 16 bits is 2002 in hex.
G. The first 16 bits is 3FFE in hex.

Answer: A
QUESTION 2
Given the IP address 10.106.170.145 255.248.0.0, which three options are the subnet that this
IP address belongs to, the host IP address range on this subnet, and the subnet broadcast IP
address?
A. subnet = 10.104.0.0/13
B. subnet = 10.106.0.0/13
C. subnet = 10.112.0.0/13
D. host IP address range = 10.104.0.1 to 10.111.255.254
E. host IP address range = 10.106.0.1 to 10.106.255.254
F. host IP address range = 10.106.0.1 to 10.119.255.254
G. subnet broadcast IP address = 10.106.255.255
H. subnet broadcast IP address = 10.111.255.255
I. subnet broadcast IP address = 10.119.255.255

Answer: ADH
QUESTION 3
Refer to the exhibit. Robert is sending an instant message to Mary. The message will be broken
into a series of packets that will traverse all network devices. Which four options are the MAC
and IP source and destination addresses that will populate these packets as they are forwarded
from Router2 to Router1? (Choose four.)

A. source MAC = 0000.00a1.2222

B. source MAC = 0000.000c.0123
C. destination MAC = 0000.00a1.3333
D. destination MAC = 0000.000c.0124
E. source IP 10.1.2.2
F. source IP 10.1.1.253
G. destination IP = 10.1.3.3
H. destination IP = 10.1.1.254

Answer: BDEG
QUESTION 4
Which Layer 2 WAN protocol uses DLCI as the virtual circuit identifier?
A. ATM
B. PPP
C. Frame Relay
D. Packet over SONET
E. Metro Ethernet
Answer: C
QUESTION 5
Which two statements about Packet over SONET are true? (Choose two.)
A. POS is a Layer 2 technology that uses PPP in ATM encapsulation and SONET framing.
B. The Layer 2 frame is encapsulated into a generic HDLC header (not Cisco proprietary HDLC)
and placed into the appropriate SONET Payload Envelope.
C. The FCS field can be set to 16 bits on one end and 32 bits on the other end of a POS
connection without causing any connectivity issues.
D. The Cisco POS interface supports Cisco HDLC and PPP encapsulation.
E. POS can be used in a point-to-point or point-to-multipoint environment.

Answer: BD
QUESTION 6
Which pair of mechanisms are often used together to allow dynamic routing over a secured site-
to- site VPN tunnel?
A. GRE + SSL
B. VTI + SSL
C. VRF + SSL
D. GRE + IPsec
E. L2TP + IPsec
F. VRF + IPsec
Answer: D
QUESTION 7
Which two statements about IPv4 DHCP operations are true? (Choose two.)
A. If the DHCP clients and servers are on the same subnet, DHCP uses UDP broadcasts to
communicate between the clients and servers.
B. The DHCP server that receives a DHCPDISCOVER message may respond with a
DHCPOFFER message on UDP port 67.
C. A client can receive DHCPOFFER from multiple servers and it can accept all the offers by
broadcasting the DHCPREQUEST message to all the servers.
D. A DHCP relay is required if the DHCP clients and the servers are on the same subnet.
E. If the client and server are on different subnets, DHCPDISCOVER and DHCPREQUEST
messages are sent via UDP broadcasts, but DHCPOFFER and DHCPACK messages are
unicast.
F. The client broadcasts a DHCPDISCOVER message on UDP port 68 with its own MAC address to
discover available DHCP servers.

Answer: AE
QUESTION 8
Refer to the exhibit. R1 and R2 are running RIPv1 for the 10.0.0.0 and 192.168.1.0
networks. No default or static routes have been configured on the routers. Which two
statements about this topology are true? (Choose two.)

A. R1 summarizes the 10.1.1.0/24 subnet to 10.0.0.0/8 when it sends its RIPv1 routing updates
to R2. R2 summarizes the 10.2.2.0/24 subnet to 10.0.0.0/8 when it sends its RIPv1 routing
updates to R1.
B. To support this topology, R1 and R2 must be configured so that RIPv1 auto-summary is disabled.
C. R1 sends information about the 10.1.1.0/24 subnet when it sends its RIPv1 routing
updates to R2. R2 sends information about the 10.2.2.0/24 subnet when it sends its
RIPv1 routing updates to R1. Example of RIPv1 update from R1 to R2:
D. RIP: build update entries network 10.1.1.0/24 metric 1
Hosts on the 10.1.1.0/24 subnet are unable to communicate with hosts on the 10.2.2.0/24
subnet.
E. R1 accepts the 10.2.2.0/24 RIPv1 routing updates from R2 and installs the 10.2.2.0/24
route in its routing table.
 R2 accepts the 10.1.1.0/24 RIPv1 routing updates from R1 and installs the 10.1.1.0/24
route in its routing table.

Answer: AD
QUESTION 9
Which Cisco IOS XR CLI command displays the running state of each line card
(including the fan tray) on the Cisco ASR 9000 Series Router?
A. RP/0/RSP0/CPU0:PE1#show platform
B. RP/0/RSP0/CPU0:PE1(admin)#show platform
C. RP/0/RSP0/CPU0:PE1#show hw-module fpd location all
D. RP/0/RSP0/CPU0:PE1(admin)#show hw-module fpd location all
E. RP/0/RSP0/CPU0:PE1#show version
F. RP/0/RSP0/CPU0:PE1(admin)#show version

Answer: B
QUESTION 10
Which Cisco IOS XR CLI command can you use to determine if the firmware on any of the
line cards on the Cisco ASR 9000 Series Router needs to be upgraded?
A. RP/0/RSP0/CPU0:PE1#show platform
B. RP/0/RSP0/CPU0:PE1(admin)#show platform
C. RP/0/RSP0/CPU0:PE1#show hw-module fpd location all
D. RP/0/RSP0/CPU0:PE1#show version
E. RP/0/RSP0/CPU0:PE1(admin)#show version
F. RP/0/RSP0/CPU0:PE1#show install active

Answer: C
QUESTION 11
Which Cisco IOS CLI command is used to verify the speed and duplex settings on the Fa0/1
port on a Cisco switch?
A. show ip interfaces fa0/1
B. show interfaces fa0/1
C. show interfaces fa0/1 switchport
D. show ip interfaces brief
E. show interfaces switchport
Answer: B
QUESTION 12
Refer to the exhibit. Which statement about this show command output is true?

A. The S78 switch is performing remote-SPAN.

B. All traffic that ports Fa0/1, Fa0/2, Fa0/3, and Fa0/4 send and receive is monitored.
C. All traffic that port Gi0/1 sends and receives is monitored.
D. The sniffer (network analyzer) should be connected to the Gi0/1 port.
E. The SPAN destination interface replicates the source interface encapsulation method.
Answer: D
QUESTION 13
Which three statements about Cisco Discovery Protocol operations on a Cisco ME3400 switch
are true? (Choose three.)
A. Cisco Discovery Protocol is enabled by default on NNI ports.
B. Cisco Discovery Protocol is enabled by default on all NNI, ENI, and UNI ports.
C. Cisco Discovery Protocol is disabled by default on ENI ports.
D. Cisco Discovery Protocol is not supported on NNI or ENI ports.
E. Cisco Discovery Protocol is not supported on UNI ports.
Answer: ACE
QUESTION 14
Refer to the exhibit. Which three statements about this show output are true? (Choose three.)

A. Logging to the circular logging buffer has been disabled.

B. All severity levels messages can be logged to the terminal lines other than the console .
C. The logging facility has been set to "critical".
D. Messages with Severity Levels 0, 1, and 2 are sent to the syslog server.
E. 169 messages have been sent to the syslog server.
F. The logging buffer size is set to 8192 bytes.
Answer: ABD
QUESTION 15
Currently, a Cisco IOS XR router is configured to send IP SLA probes to a network
management station that is acting as the IP SLA target device. How can IP SLA
measurement accuracy be improved and also provide additional statistics?
A. Use ICMP echo probes instead of UDP echo probes.
B. Configure another Cisco router as the target and enable that other Cisco router for IP SLA
Responder operations.
C. Increase the rate (frequency) at which a specified IP SLA operation is sent into the network.
D. Use UDP echo probes instead of ICMP echo probes and enable UDP echo service on the target
network management station.
E. Enable IP SLA Responder service on the target network management station
Answer: B
QUESTION 16
Which protocol can you use to dynamically discover directly connected neighbors in the
network for inventory purposes?
A. Simple Network Management Protocol
B. Cisco Discovery Protocol
C. Remote Monitoring
D. Secure Shell
Answer: B
QUESTION 17
Why do service providers have a difficult time guaranteeing performance levels in SLAs?
A. Response times are not easily measured.
B. Network outages cannot be avoided.
C. Performance parameters are not available.
D. The shared infrastructure is dynamic.
Answer: D
QUESTION 18
When monitoring service levels against the requirements of an SLA, which three
questions should you ask when defining the data collection methodology? (Choose
three.)
A. How should the data records be collected?
B. What security is required for the data records?
C. Where in the network should you collect the data records?
D. What type of information should be collected?

Answer: ACD
QUESTION 19
Which two statements about Cisco IOS XR NTP configuration are true? (Choose two.)
A. A network device can obtain NTP time information in three ways: polling the NTP server,
listening to NTP broadcasts, and listening to NTP multicasts.
B. NTP authentication supports MD5, SHA1, or SHA2.
C. Client mode is a peer-to-peer mode.
D. The two types of poll-based NTP associations are client mode and symmetric active mode.
E. The Cisco IOS-XR implementation of NTP supports stratum 1 service.
F. In client mode, clients can dynamically learn the NTP sever IP address by listening to the NTP
server broadcasts or multicasts.

Answer: AD
QUESTION 20
Which SNMPv2/SNMPv3 operation is not supported in Cisco IOS XR software?
A. get-bulk
B. get-request
C. inform
D. trap
E. set-request

Answer: C
QUESTION 21
Which three statements about the Cisco IOS XR task-based user authorization method are
true? (Choose three.)
A. A user's association with a particular user group links that user to a particular set of task
IDs. A user that is associated with a task ID can execute any operation associated with that
task ID.
B. Users can be assigned only to one user group.
C. Every user group is associated with one or more task groups.
D. Every task group is defined by a set of task IDs.
E. Each user is assigned a privilege level.
F. Each IOS XR CLI command is assigned a privilege level.
G. A task ID maps the IOS XR command to a privilege level.

Answer: ACD
QUESTION 22
Which three statements about Cisco IOS XR CLI operations are true? (Choose three.)
A. Cisco IOS XR uses a three-stage configuration method.
B. Committed changes are persistent across reboots in Cisco IOS XR.
C. The commit replace global configuration command replaces the contents of the running
configuration with the target configuration.
D. The save global configuration command saves the contents of target configuration to the
running configuration.

E. There is no concept of a startup-config in Cisco IOS XR.

F. The clear global configuration command erases the entire current running configuration.
G. The show running-config global configuration command displays the configuration that occurs if the
contents of the uncommitted changed (target configuration) are committed to the running
configuration.

Answer: BCE

QUESTION 23
What is the result of using the Cisco IOS copy tftp: run command?
A. The running configuration on the Cisco IOS device is backed up to the TFTP server.
B. Only new configuration parameters from the saved configuration file on the TFTP server are
added to the running configuration. No changes to any existing configuration parameters in
the running configuration are made.
C. The running configuration on the Cisco IOS device is replaced with the saved configuration
file on the TFTP server.
D. The configuration stored in the TFTP server is merged with the running configuration on the
Cisco IOS device.
E. The saved configuration file from the TFTP server is copied to the target configuration.

Answer: D
QUESTION 24
Which component is integrated into the Cisco IPoDWDM interfaces?
A. ROADM
B. transponder
C. electrical cross connect
D. E-O-E converter
E. SONET/SDH controller
Answer: B
QUESTION 25
What is the SDH equivalent of the SONET STS-12 framing format?
A. SDH STM-1
B. SDH STM-4
C. SDH STM-12
D. SDH STM-16
E. SDH STM-64
Answer: B
QUESTION 26
What are the three RFC 1918 IPv4 private address ranges? (Choose three.)
A. 10.0.0.0 - 10.255.255.255
B. 172.16.0.0 - 172.255.255.255
C. 172.16.0.0 - 172.31.255.255
D. 192.168.0.0 - 192.168.31.255
E. 192.168.0.0 - 192.168.255.255
Answer: ACE
QUESTION 27
With a distance vector routing protocol like RIPv1, when is a route in the routing table
placed in the "possibly down" state?
A. when a router receives an update from its neighbor router about a network in its routing table
but with a worse metric
B. when a router receives an update from its neighbor router about a network in its routing table
but with a better metric
C. when a router receives an update from its neighbor router indicating that a previously accessible
network is now inaccessible
D. whenever the router receives an update from its neighbor about a newly learned network
E. whenever the router interface that is used to reach the remote network goes down
Answer: C
QUESTION 28
When EIGRP is enabled on Cisco IOS XR, which EIGRP feature is on by default?
A. no auto-summary
B. stub routing
C. unequal cost paths load-balancing
D. no ip eigrp split-horizon
E. eigrp authentication

Answer: A
QUESTION 29
Which feature is used to protect the control plane of the router?
A. port security
B. uRPF
C. routing protocol authentication
D. VRF
E. SSH
F. SSL
Answer: C
QUESTION 30
Given the IP address of 209.168.200.155/27, which two options are the subnet
that this IP address belongs to and the subnet broadcast IP address? (Choose
two.)
A. 209.168.200.64 255.255.255.224
B. 209.168.200.96 255.255.255.224
C. 209.168.200.128 255.255.255.224
D. 209.168.200.95
E. 209.168.200.127
F. 209.168.200.159
Answer: CF
QUESTION 31
Given the CIDR address range of 200.165.160.0 to 200.165.191.255, what is the CIDR block?
A. 200.165.160.0/17
B. 200.165.160.0/18
C. 200.165.160.0/19
D. 200.165.160.0/20
E. 200.165.160.0/21
Answer: C
QUESTION 32
Given these four Class B networks: 172.104.0.0, 172.105.0.0, 172.106.0.0, 172.107.0.0, what
is the supernet (CIDR) address that summarizes these four Class B networks?
A. 172.104.0.0/12
B. 172.104.0.0/13
C. 172.104.0.0/14
D. 172.104.0.0/15
Answer: C
QUESTION 33
This show output is from the S7 Cisco Metro Switch and the PE7 Cisco ASR 9000 Series Router.
Which configuration change(s) is/are needed to bring the S7 FastEthernet 0/2 interface into the
up/up state?

*Mar 20 21:28:02.177: %ETHCNTR-3-

HALF_DUX_COLLISION_EXCEED_THRESHOLE. Collisions at FastEthernet0/2
exceed threshold. Considered as loop-back.
*Mar 20 21:28:02.177: %PM-4-ERR_DISABLF. loopback error detected on
Fa0/2, putting Fa0/2 in err-disable state
*Mar 20 21:28:03.184: %LINEPROTO-5-UPDOWN: Line protocol on Interface
FastEthernet0/2,
changed state to down
S7#show interface fa0/2
FastEthernet0/2 is down, line protocol is down (err-disabled)
Hardware is Fast Ethernet, address is e8ba.70b5.6c04 (bia e8ba.70b5.6c04)
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Half-duplex, 10Mb/s, media type is 10/100BaseTX
input flow-control is off, output flow-control is
unsupported ARP typF. ARPA, ARP Timeout
04:00:00
Last input 00:00:40, output 00:00:00, output
hang never Last clearing of "show interface"
counters never
Input queuF. 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queuF. 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
484423 packets input, 39349929 bytes, 0 no buffer
Received 484423 broadcasts (167203 multicasts)
0 runts, 0 giants, 0 throttles
1 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 167203 multicast, 0 pause input
0 input packets with dribble condition detected
972398 packets output, 128931949 bytes, 0 underruns
0 output errors, 46 collisions, 4 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out
RP/0/RSP0/CPU0:PE7#show interfaces
gi0/0/0/0 GigabitEthernet0/0/0/0 is down,
line protocol is down
Interface state transitions: 4
Hardware is GigabitEthernet, address is 4055.392f.40a8 (bia 4055.392f.40a8)
Internet address is 192.168.107.70/24
MTU 1514 bytes, BW 100000 Kbit (Max: 100000 Kbit)
reliability 255/255, txload 0/255, rxload 0/255
Encapsulation ARPA,
Full-duplex, 100Mb/s, THD, link type is force-up
output flow control is off, input flow control is off
loopback not set, ARP type ARPA, ARP timeout
04:00:00 Last input 00:00:00, output 00:00:35
Last clearing of "show interface" counters never
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
972551 packets input, 128953765 bytes, 729 total input drops
172486 drops for unrecognized upper-level
protocol Received 0 broadcast packets,
800781 multicast packets
0 runts, 0 giants, 0 throttles, 0 parity
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
484545 packets output, 39360900 bytes,
0 total output drops Output 317283
broadcast packets, 167262 multicast
packets 0 output errors, 0 underruns, 0
applique, 0 resets
 0 output buffer failures, 0 output buffers swapped out
4 carrier transitions
A. Enable loopback line on the S7 Fa0/2 interface then shut and no shut the Fa0/2 interface.
B. Enable duplex half on the PE7 Gi0/0/0/0 interface then shut and no shut the Fa0/2 interface on
S7.
C. Change S7 Fa0/2 interface to duplex full and speed 100 then shut and no shut the Fa0/2
interface.
D. Just need to no shut the Fa0/2 interface on S7.
E. Just need to shut and no shut the Fa0/2 interface on S7.

Answer: C
QUESTION 34
What does a transparent LAN switch use to build its CAM table?
A. BPDU messages exchanged with neighbor bridges
B. STP messages exchanged with neighbor bridges
C. dynamic routing protocol updates from neighbor bridges
D. analysis of the source MAC address of incoming frames on the bridge ports

Answer: D
QUESTION 35
You are having problems browsing to http://www.cisco.com from your laptop that is
running Windows. Your laptop is connected directly to a default gateway, which is a
Cisco ISR G2 router. Which four options are the basic troubleshooting steps that you
should use to troubleshoot this issue? (Choose four.)
A. Issue the ipconfig command from the Windows command line on your laptop to determine
your laptop IP address and the default gateway IP address.
B. Issue the ipconfig /all command from the Windows command line on your laptop to determine
the DNS server IP address.
C. Issue the ping {default gateway IP address} command from the Windows command line on
your laptop to verify connectivity to the default gateway.
D. Issue the ping {DNS server IP address} command from the Windows command line on your
laptop to verify connectivity to the DNS server.
E. Issue the ping tcp www.cisco.com 80 command from the Windows command line on your
laptop to verify TCP port 80 connectivity to the www.cisco.com server.
F. From the ISR G2 CLI, issue the ping tcp www.cisco.com 80 command to verify TCP port 80
connectivity to the www.cisco.com server.
G. From the ISR G2 CLI, issue the ISR-G2#tracert www.cisco.com command to verify
connectivity to the www.cisco.com server.
H. From the ISR G2 CLI, issue the ISR-G2#nslookup www.cisco.com command to determine the IP
address of the www.cisco.com server.

Answer: ABCD
QUESTION 36
Refer to the exhibit. You want to enable these three actions:
- Enable the fa0/1 router's interface to obtain its interface IP address
dynamically from a DHCP server.
- Enable the router to configure the next hop ip address of the default route
automatically based on the DHCP response.
- Enable the router to act as the DHCP server for other clients connected
to the router fa0/2 interface.
Which three Cisco IOS configurations must you use? (Choose three.)
A. ip route 0.0.0.0 0.0.0.0 fa0/1
B. ip route 0.0.0.0 0.0.0.0 dhcp
C. ip dhcp excluded-address 192.168.101.1
D. !
ip dhcp pool test1
network 192.168.101.0 255.255.255.0
default-router 192.168.101.1 dns-
server 200.165.200.101
ip dhcp pool test2
E. ip local pool test2 192.168.101.2 192.168.101.254
default-router 192.168.101.1
dns-server 200.1665.200.101
int fa0/1
F. ip address auto
int fa0/1
G. ip address dhcp
int fa0/1
H. ip helper-address dhcp

Answer: BCF
QUESTION 37
You need to enable the "local-router" serial 0/0 connection to the "remote-router" to be
authenticated using the "C!sco!23" password.
The password cannot be sent in cleartext between the two routers.
The "remote-router" has already been configured with all the required configurations.
Which four Cisco IOS configurations are necessary? (Choose four.)
A. hostname local-router
B. int s0/0
C. encap hdlc
int s0/0
D. encap ppp
int s0/0
E. ppp authentication pap
int s0/0
F. ppp authentication chap
ip domain-name test.com
G. username remote-router password C!sco!23
H. username local-router password C!sco!23

Answer: ACEG
QUESTION 38
Refer to the exhibit. Using a single Class C network of 192.168.1.0/24 and VLSM, which two
options specify the number of subnets that are needed to support this network and what are the
minimum sizes of the required subnets? (Choose two.)

A. 4 subnets
B. 6 subnets
C. 8 subnets
D. 26 subnets
E. 28 subnets
F. two /30 subnets + one /28 subnets + one /29 subnets
G. four /30 subnets + two /28 subnets
H. six /30 subnets + two /28 subnets
I. twenty six /30 subnets
J. twenty eight /30 subnets

Answer: BG
QUESTION 39
Which two statements about Cisco IOS XE operations are true? (Choose two.)
A. Cisco IOS XE uses a two-stage configuration method.
B. Using the commit global configuration command, all the committed changes will be persistent
across reboots.
C. The copy run start command makes the configuration changes persistent across reboots.
D. The erase start command followed by the reboot command brings up the router without any
configurations.
E. There is no concept of a startup-config in Cisco IOS XE.
Answer: CD
QUESTION 40
Which option is enabled by default on Cisco IOS and IOS XE routers?
A. IPv6 unicast routing
B. IPv4 unicast routing
C. IPv6 and IPv4 unicast routing
D. SSH server
E. HTTP server
F. SSH and HTTP server
G. AAA console login authentication

Answer: B
QUESTION 41
Using VLSM, how many /30 subnets can be derived from a single /27 Class C subnet?
A. 1
B. 2
C. 4
D. 8
E. 12
F. 16

Answer: D
QUESTION 42
On Cisco IOS Switches, which port security violation mode results in frames from
non-allowed MAC address being dropped, log message created, and SNMP trap
sent?
A. protect
B. restrict
C. shutdown
D. err-disabled
E. log

Answer: B
QUESTION 43
On Cisco IOS XR, for which purpose is the turboboot procedure used?
A. to boot the router into ROM Monitor mode
B. to install the IOS XR software from scratch using the ROM Monitor mode
C. to install and boot up a PIE
D. to install and boot up a SMU
E. to perform an ISSU
F. to speed up the time it takes to boot up the IOS XR router

Answer: B

QUESTION 44
Which statement about 10/40/100 GigabitEthernet interface configuration on Cisco
IOS XR is true?
A. Use the negotiation auto command in interface configuration mode to enable link auto- negotiation to
ensure that devices that share a link segment are automatically configured with the highest
performance.
B. The configuration supports only full-duplex operation.
C. The range for MTU values is 64 bytes to 1518 bytes on the interface.
D. The interface has no flow control configuration.
Answer: B

QUESTION 45
Which three statements about the ARP function are true? (Choose three.)
A. ARP is used to determine an IP address.
B. An ARP request is broadcast at Layer 3.
C. An ARP response is broadcast at Layer 2.
D. ARP tables are maintained on Layer 3 devices.
E. The destination MAC address of an ARP request is that of the ARP responder.
F. ARP requests are broadcast at Layer 2.
G. ARP resolves MAC addresses to NET addresses.
H. ARP uses 0x0806 as the Type field in an Ethernet frame.

Answer: DFH
QUESTION 46
If a bridge port is in the non-designated state, which two statements about
spanning-tree operations on this port are true? (Choose two.)
A. This port is in the Forwarding state.
B. This port sends BPDUs on the attached link.
C. This port has the lowest cost to the root bridge.
D. This port is considered the root port.
E. This port receives BPDUs.
F. This port is in the Blocked state.

Answer: EF
QUESTION 47
Which statement about STP operations is true?
A. One root bridge exists per collision domain.
B. One root port is established per root bridge.
C. One designated port is defined per segment.
D. Non-designated ports are set in the forwarding state.
E. One root port exists per broadcast domain.
Answer: C
QUESTION 48
Which statement about a root bridge in an STP domain is true?
A. It has the highest root ID in the STP domain.
B. It has the lowest bridge ID in the STP domain.
C. It contains non-designated ports.
D. It contains root ports.
E. It has the highest priority value.
Answer: B
QUESTION 49
Which Cisco IOS XR command displays information about statically configured routes and
their corresponding interface or next-hop?
A. show ipv4 interfaces brief
B. show route connected
C. show interfaces Loopback
D. show route static
E. show route ospf

Answer: D
QUESTION 50
Which statement about SSH is true?
A. It is a TCP/IP transport layer protocol.
B. It uses TCP port number 22.
C. It securely encrypts Telnet.
D. It uses UDP port 23.
E. Passwords are sent in clear text.
F. It is an OSI network layer protocol.

Answer: B
QUESTION 51
Which Cisco IOS XR command displays traffic counters for an individual interface that
is configured on the router?
A. RP/0/RSP0/CPU0:PE1(config)# show bundle
B. RP/0/RSP0/CPU0:PE1# show interfaces GigabitEthernet 0/0/0/1
C. RP/0/RSP0/CPU0:PE1# show controllers GigabitEthernet 0/0/0/1
D. RP/0/RSP0/CPU0:PE1(admin)# show platform
E. RP/0/RSP0/CPU0:PE1(admin)# show hw-module fpd location all
F. RP/0/RSP0/CPU0:PE1# show interfaces brief
Answer: B
QUESTION 52
Which Cisco IOS XR command presents a list of all interfaces, their Layer 3 address (if
configured), and the status of the interface and protocol?
A. RP/0/RSP0/CPU0:PE1# show interface GigabitEthernet 0/0/0/1
B. RP/0/RSP0/CPU0:PE1# show controllers
C. RP/0/RSP0/CPU0:PE1(admin)# show hw-module fpd location all
D. RP/0/RSP0/CPU0:PE1(config)# show bundle
E. RP/0/RSP0/CPU0:PE1(admin)# show platform
F. RP/0/RSP0/CPU0:PE1# show ipv4 interfaces brief
Answer: F
QUESTION 53
Which Cisco IOS XR command is involved in enabling remote access?
A. RP/0/RSP0/CPU0:PE1(config)# router static
B. RP/0/RSP0/CPU0:PE1(config)# line console 0
C. RP/0/RSP0/CPU0:PE1(config)# vrf default
D. RP/0/RSP0/CPU0:PE1(config)# telnet ipv4 server max-servers 20
E. RP/0/RSP0/CPU0:PE1(config)# username CISCO password LAB
Answer: D
QUESTION 54
Which three physical lines can provide local or remote access to a Cisco router or
switch? (Choose three.)
A. console port
B. modem port
C. virtual terminal lines
D. switch fabric interface
E. aux port
F. managementEthernet0/RSP0/CPU0/0
Answer: AEF
QUESTION 55
In Cisco IOS XR, which three operations is Admin mode used for? (Choose three.)
A. Secure Domain Router management
B. configuration-register settings
C. hostname configuration
D. IOS XR software package upgrades
E. interface duplex settings
F. domain-name configuration

Answer: ABD
QUESTION 56
Which two statements are correct regarding routing protocol authentication? (Choose two.)
A. MD5 authentication can only be established between Internal BGP peers.
B. Authentication can be established using keychains on one peer and MD5 hashing on the other.
C. UDP port 179 is used for BGP session authentication.
D. MD5 passwords are never sent to a peer.
E. Routers authenticate each routing update packet received.
F. BGP peers can be configured with different passwords.

Answer: DE
QUESTION 57
Refer to the exhibit. Which two statements are true regarding the following configuration?

A. Users are authenticated using RADIUS.

B. TACACS+ is configured for remote AAA.
C. A TACACS+ AAA server group is configured.
D. A TACACS+ server can be reached through the GigabitEthernet0/1/0/1 interface.
E. Logging is configured to the local database.

Answer: BD
QUESTION 84
Refer to the exhibit. Which two options are the number of broadcast domains and
collision domains shown in the exhibit? (Choose two.)

A. 1 collision domain
B. 2 collision domains
C. 4 collision domains
D. 7 collision domains
E. 1 broadcast domain
F. 2 broadcast domains
G. 4 broadcast domains
H. 7 broadcast domains
Answer: DF

QUESTION 85
Refer to the exhibit. Which two options are the number of broadcast domains and
collision domains shown in the exhibit? (Choose two.)

A. 2 collision domains
B. 4 collision domains
C. 5 collision domains
D. 8 collision domains
E. 2 broadcast domains
F. 4 broadcast domains
G. 5 broadcast domains
H. 8 broadcast domains

Answer: CE
QUESTION 86
Which of the following would be best suited for providing accurate service-level measurements?
A. SNMP
B. IP SLA
C. RMON
D. NetFlow

Answer: B
QUESTION 87
Each syslog message has a numerical severity level assigned to generate error messages
about software or hardware malfunctions. Which of these messages has the highest numeric
severity level?
A. Error
B. Emergency
C. Debug
D. Critical
E. Alert

Answer: C
QUESTION 88
Which three steps would you use to troubleshoot a performance-related problem in the network
core? (Choose three.)
A. define problem
B. analyze problem
C. determine affected users
D. create action plan
E. verify service-level requirements

Answer: ABD
QUESTION 89
A parameter in an SLA must meet which three criteria? (Choose three.)
A. quality
B. significance
C. measurability
D. reliability
E. relevance
Answer: BCE
QUESTION 90
Which one of these items is used to define key elements for successfully building
obtainable service levels?
A. critical success factors
B. key performance indicators
C. key quality indicators
D. metrics
Answer: A
QUESTION 91
Refer to the exhibit. Company 1 has merged with Company 2. Company 1 is using RIPv2 as its
IGP and Company 2 is using EIGRP as its IGP. EIGRP also is running between R1 and R2 over
the WAN link.

Which action must be taken to allow these two configurations?

- The Company 1 RIP routes appear as external EIGRP routes
within Company 2.
- The Company 2 EIGRP routes appear as RIPv2 routes within Company 1.
A. Enable RIPv2 on the R2 router.
B. Enable RIPv2 on the R2 router and on all internal routers of Company 2. Enable EIGRP on all
internal routers of Company 1.
C. Configure mutual route redistribution between RIPv2 and EIGRP on the R1 and R2 routers.
D. Configure mutual route redistribution between RIPv2 and EIGRP on the R1 router.
E. Configure mutual route redistribution between RIPv2 and EIGRP on the R2 router.
Answer: D
QUESTION 92
Refer to the exhibit. Which two statements about these partial Cisco IOS/IOS-XE
configurations are true? (Choose two.)

A. 10.1.1.2 is the inside local address.

B. 192.168.1.2 is the outside local address.
C. 192.168.1.2 is the outside global address.
D. This is an example of static one-to-one Network Address Translation.
E. This is an example of static Port Address Translation.
Answer: AD
QUESTION 93
Refer to the exhibit. Which configuration is necessary to support this output?

A. interface Ethernet0
B. ip address 192.168.3.1 255.255.255.0
ip nat outside
!
interface Ethernet1
ip address 192.168.4.1 255.255.255.0
ip nat outside
!
interface Serial0
ip address 172.17.38.1 255.255.255.0
ip nat inside
!
ip nat inside source list 1 interface Serial0 overload !
access-list 1 permit 192.168.3.0 0.0.0.255 access-list 1
permit 192.168.4.0 0.0.0.255
interface Ethernet0
C. ip address 192.168.3.1 255.255.255.0
ip nat inside
!
interface Ethernet1
ip address 192.168.4.1 255.255.255.0
ip nat inside
!
interface Serial0
ip address 172.17.38.1 255.255.255.0
ip nat outside
!
ip nat inside source list 1 interface Serial0 overload !
access-list 1 permit 172.17.38.0 0.0.0.255
interface Ethernet0
D. ip address 192.168.3.1 255.255.255.0
ip nat inside
!
interface Ethernet1
ip address 192.168.4.1 255.255.255.0
ip nat inside
!
interface Serial0
ip address 172.17.38.1 255.255.255.0
ip nat outside
!
ip nat inside source list 1 static 172.17.38.1
!
access-list 1 permit 192.168.3.0 0.0.0.255
access-list 1 permit 192.168.4.0 0.0.0.255
interface Ethernet0
E. ip address 192.168.3.1 255.255.255.0
ip nat inside
!
interface Ethernet1
ip address 192.168.4.1 255.255.255.0
ip nat inside
 !
interface Serial0
ip address 172.17.38.1 255.255.255.0
ip nat outside
!
ip nat inside source list 1 interface Serial0 overload
! access-list 1 permit 192.168.3.0 0.0.0.255 access-
list 1 permit 192.168.4.0 0.0.0.255
Answer: D
QUESTION 94
Which IPv6 feature replaced and enhanced the IPv4 ARP functions?
A. ARPv6
B. DHCPv6
C. neighbor discovery protocol in ICMPv6
D. router solicitation and router advertisement
E. autoconfiguration
Answer: C
QUESTION 95
Which three statements correctly describe DSL-based Internet services for residential
users? (Choose three.)
A. Most residential deployments use PPPoE encapsulation where the end user PC or the DSL
CPE will require a PPP username and password configuration.
B. Most residential deployments use PPPoA encapsulation where the DSL CPE device
needs to provide Layer 3 routing functions.
C. The most commonly installed DSL variant for residential deployments is ADSL.
D. The most commonly installed DSL variant for residential deployments is SDSL.
E. The most commonly installed DSL variant for residential deployments is HDSL.
F. At the DSL service provider location, a DSLAM typically is used to terminate all the PPP
connections of the DSL subscribers.
G. At the DSL service provider location, a DSLAM is used to terminate and then aggregate the
DSL connections over an ATM network.
Answer: ACG
QUESTION 96
Refer to the exhibit. Given the Class C IP network of 192.168.1.0, using VLSM, which
five subnets meet the requirements in the exhibit? (Choose five.)

A. 192.168.1.0/27
B. 192.168.1.32/27
C. 192.168.1.48/27
D. 192.168.1.48/28
E. 192.168.1.64/28
F. 192.168.1.80/28
G. 192.168.1.80/29
H. 192.168.1.88/30
I. 192.168.1.96/30
Answer: ABEFI
QUESTION 97
Refer to the exhibit. Which layer(s) of the TCP/IP model operates end-to-end (Host A to Host B)?

A. physical layer
B. link layer
C. transport and application layers
D. link and internet (network) layers
E. physical and link layers

Answer: C
QUESTION 98
Which two applications require the network to have the least amount of jitter, delay, and packet
loss? (Choose two.)
A. FTP
B. SSH
C. VoIP
D. email
E. Cisco TelePresence
F. web browsing

Answer: CE
QUESTION 99
Which Cisco IOS XR CLI command can you use to determine if the firmware on any of the
line cards on the Cisco ASR 9000 Series Router needs to be upgraded?
A. RP/0/RSP0/CPU0:PE1#show platform
B. RP/0/RSP0/CPU0:PE1(admin)#show platform
C. RP/0/RSP0/CPU0:PE1#show hw-module fpd location all
D. RP/0/RSP0/CPU0:PE1#show version
E. RP/0/RSP0/CPU0:PE1(admin)#show version
F. RP/0/RSP0/CPU0:PE1#show install active

Answer: C
QUESTION 100
Refer to the exhibit. According to this show output, what are sticky MAC addresses?

A. dynamically learned MAC addresses on the port that are stored in the MAC address table and
also in the start-up configuration
B. statically configured MAC addresses on the port that are stored in the MAC address table
C. statically configured MAC addresses on the port that are stored in the start-up configuration
D. dynamically learned MAC addresses on the port that are stored in the running configuration

Answer: D
QUESTION 101
Which two statements about transparent bridging operations are true? (Choose two.)
A. A bridge builds its MAC address table dynamically using the spanning-tree protocol.
B. A bridge operates at the data link layer.
C. A bridge sends unknown unicast frames out on all ports except the incoming port.
D. A bridge forwards traffic based on the destination IP address.
E. All the ports on the bridge belong to the same collision domain.
Answer: BC
QUESTION 102
Which two statements are correct regarding routing protocol authentication? (Choose two.)
A. MD5 authentication can only be established between Internal BGP peers.
B. Authentication can be established using keychains on one peer and MD5 hashing on the other.
C. UDP port 179 is used for BGP session authentication.
D. MD5 passwords are never sent to a peer.
E. Routers authenticate each routing update packet received.
F. BGP peers can be configured with different passwords.

Answer: DE
QUESTION 103
Which two statements about classful or classless routing protocol operations are true?
(Choose two.)
A. Classful routing protocols do not send subnet mask information with their routing updates.
B. Variable-length subnet masks are supported when using classful routing protocols.
C. Examples of classless routing protocols include RIPv1, EIGRP, OSPF, and IS-IS.
D. Classful routing protocols do not support discontiguous subnets.

Answer: AD
QUESTION 104
When two or more different routes exist to the same destination that have been learned from
two different routing protocols, what does a router use to determine the best route?
A. routing protocol metric
B. administrative distance
C. hop count
D. path cost
E. local preference
Answer: B
QUESTION 105
What is the default spanning-tree mode of an NNI port on a Cisco ME3400 switch?
A. multiple spanning tree (mst)
B. per-vlan rapid spanning tree (rapid-pvst)
C. per-vlan spanning tree (pvst)
D. IEEE 802.1D (stp)
Answer: B
QUESTION 106
What is the term that refers to a device that has no Customer Equipment directly connected to it
in a Service Provider network?
A. Provider Edge Router
B. Customer Edge Router
C. Non-customer Edge Router
D. Provider Router
E. Provider Edge Provider Router
Answer: D
QUESTION 107
Refer to the exhibit. Host 3 on Network A is sending data to Host 8 on Network B.
Which address is the default gateway of Host 3?

A. The address of the switch interface that is connected to router interface Fa0/0
B. The address of the switch interface that is connected to router interface Fa0/1
C. The address of the host that is connected to Network A
D. The address of the host that is connected to Network B
E. The address of the router interface Fa0/0
F. The address of the router interface Fa0/1

Answer: E
QUESTION 108
The PE and CE interfaces are in the UP/UP state. The junior Network Engineer has validated
Layer 3 functionality by pinging the adjacent interface, however the customer is unable to
access the provider network. What should be your next troubleshooting step?
A. Validate that the encapsulation method is utilizing Point-to-Point Protocol
B. Validate that the destination customer network is in the correct VRF
C. Validate that the circuit clocking is inaccurate and needs to be synchronized on both sides
D. Check the physical connection between both devices to ensure stability
E. Identify incorrect RADIUS configuration is present on the PE device
F. Check that an access-list is mis-configured on the loopback 0 interface and needs to be corrected

Answer: B
QUESTION 109
What are two differences between WAN and LAN? (Choose two.)
A. The customer has explicit control of their own WAN.
B. The customer can modify the service provider route distinguishers.
C. The customer has explicit control of their LAN.
D. The customer is aware of the infrastructure within the WAN.
E. WANs will differ from LANs with attributes such as latency and distance.

Answer: CE
QUESTION 110
Which of the following correctly pairs the dotted decimal subnet mask with the correct number
of binary bits that represent the subnet mask?
A. 255.255.255.192 and /25
B. 255.255.255.248 and /28
C. 255.255.255.224 and /26
D. 255.255.255.248 and /27
E. 255.255.255.240 and /28
F. 255.255.255.240 and /16

Answer: E
QUESTION 111
What are two benefits of a star network topology? (Choose two.)
A. Disruption of the entire network is not required when adding new machines.
B. Any problem which leaves the network inoperable can be traced to the central hub.
C. This network type requires less cable as compared to linear bus topology.
D. The performance of one of the numerous nodes cannot reflect on the performance of other nodes.
E. The performance of the entire network is directly dependent on the performance of the hub.

Answer: AB
QUESTION 112
Which is a valid IPv6 Link Local address?
A. FF00::1
B. 224.0.0.5::1
C. FE80::1
D. FE70::1
E. 169.254.0.0/16

Answer: C
QUESTION 113
What is the size difference in bits between an IPv4 address and an IPv6 address?
A. 128
B. 100
C. 98
D. 96
E. 32

Answer: D
QUESTION 114
Given the subnet of 209.165.201.0/27, which subnet range will make the most efficient use of the
address block for connecting to customer edge devices?
A. 209.165.201.1/32
B. 209.165.201.1/31
C. 209.165.201.1/30
D. 209.165.201.1/29
E. 209.165.201.1/24

Answer: B
QUESTION 115
Given a ring topology, which loop prevention mechanism provides the fastest reconvergence time
after a link failure?
A. Rapid Per-VLAN Spanning Tree Protocol
B. Resilient Ethernet Protocol
C. Multiple Spanning Tree Protocol
D. Spanning Tree Protocol

Answer: B
QUESTION 116
Which three of the following components must be elected before the Spanning Tree Protocol can
converge in a switched LAN? (Choose three.)
A. Designated ports
B. Alternate ports
C. Converged ports
D. Root bridge
E. Root ports
F. Backup ports

Answer: ADE
QUESTION 117
What two commands enable port security and allow the switch to dynamically learn
the connected MAC address? (Choose two.)
A. switch5(config-if)#switchport port-security
B. switch5(config)#switchport port-security
C. switch5(config-if)#switchport port-security mac-address sticky
D. switch5(config)#switchport port-security mac-address sticky
E. switch5(config-if)#switchport port-security mac-address dynamic
F. switch5(config-if)#switchport port-security mac-address auto
Answer: AC
QUESTION 118
According to RFC 2080, which routing protocol is compatible with IPv6?
A. RIPv2
B. OSPF
C. RIP-NG
D. EIGRPv6
E. OSPFv2
F. EIGRP-NG
Answer: C
QUESTION 119
A customer uses OSPF as their Customer Edge routing protocol and remote sites are reporting
10.0.0.0/8 in the routing tables. What is most likely the mis-configuration in the redistribution?
A. Improper route summarization on CE router
B. Incorrect network statement
C. Incorrect K value configured
D. Configuration missing subnets key word
E. Stub network is sending summarized routes

Answer: D
QUESTION 120
The network administrator is using a Windows PC application that is called putty.exe for remote
communication to a switch for network troubleshooting.
Which two protocols could be used during this communication? (Choose two).
A. SNMP
B. HTTP
C. Telnet
D. RMON
E. SSH

Answer: CE
QUESTION 121
A centralized DHCP server has been setup for customer use. What command is required on the
customer Switched Virtual Interface (SVI) to allow clients to receive addresses from this server?
A. switch(config-if)#ip helper-address
B. switch(config)#ip helper-address
C. switch(config-if)#ip dhcp-address
D. switch(config-if)#ip dhcp-gateway
E. switch(config-if)#helper-address

Answer: A
QUESTION 122
What are three features present on both ICMPv4 and ICMPv6? (Choose three.)
A. Connectivity tests
B. Address assignment
C. Information error messaging
D. Address resolution
E. Mobile IPv4 support
F. Multicast group management
G. Mobile IPv6 support
H. Fragmentation needed notification

Answer: ACH
QUESTION 123
A network administrator issues the who command on a Cisco router, which takes longer than
usual to display the results. Which two commands can be used to speed up the process?
(Choose two.)
A. nslookup
B. no ip-domain lookup
C. ip name-server
D. ipconfig /all
E. ifconfig

Answer: BC

QUESTION 124
A network engineer has configured an interface with various commands including the no
shutdown command on an IOS-XR device. Both sides of the interface have been validated and
the cable has been tested. Which command does the network engineer need to input?

A. switch#copy running-configuration startup-configuration

B. switch#commit config
C. (config)#commit
D. switch(config)#commit config
E. switch#write memory
Answer: C

QUESTION 125
A Passive Optical Network is a point-to-multipoint FTTx network architecture that relies on which of
the following?

A. Electrically powered optical splitters

B. Unpowered optical splitter
C. Customer optical network terminal
D. Network interface controller

Answer: B
QUESTION 126
Which two commands can be used to enable LACP when configuring the interfaces for a
40 gigabit etherchannel? (Choose two.)
A. switch (config-if)# channel-group 1 mode active
B. switch (config-if)# channel-group 1 mode auto
C. switch (config-if)# channel-group 1 mode desirable
D. switch (config-if)# channel-group 1 mode passive
E. switch (config-if)# channel-group 1 mode LACP
Answer: AD
QUESTION 127
Refer to the exhibit. Based on the configurations shown, why is the serial link in up/down status?

A. Mismatch hostnames
B. Passwords are in plain text
C. Mismatch of authentication type
D. Wrong configuration mode for command input
Answer: C
QUESTION 128
What is a the best way to secure the route processor on a Cisco device?
A. Route processor traffic control
B. Control plane quality of service
C. Control plane policing
D. Access lists
Answer: C

QUESTION 129
Which best describes the relationship between user groups and task groups?
A. User groups include task ID's that are nested task groups.
B. Groups can be nested within other groups.
C. Tasks groups are not related to user groups.
D. Task groups are assigned to user groups to established privileged levels.

Answer: D
QUESTION 130
What is the Cisco IOS command that is used to prevent the route of the incoming traffic from
an unknown network?
A. Interface FastEthernet 0/0ip verify unicast source reachable-via any allow-default
B. Interface FastEthernet 0/0ip verify multicast source reachable-via any allow-default
C. Interface FastEthernet 0/0ip verify unicast destination reachable-via any allow-default
D. Interface FastEthernet 0/0ip verify multicast destination reachable-via any allow-default

Answer: A
QUESTION 131
Refer to the exhibit. A network administrator is setting up a new core router to be a secondary
NTP server. What command would need to be added to NTP Client configuration shown?

A. NTP server 209.165.200.227 preferNTP server 209.165.200.226

B. NTP server 209.165.200.227NTP server 209.165.200.226 secondary
C. NTP server 209.165.200.227 preferNTP server 209.165.200.226 backup
D. NTP server 209.165.200.227NTP server 209.165.200.226 prefer

Answer: A
QUESTION 132
Refer to the exhibit. A new policy requires all configurations to be saved to flash and backed up to
a TFTP server based off the hostname at 12:05am every day. Based upon the configuration,
which two commands are required to accomplish this? (Choose two.)

A. kron occurrence daily-config-backup at 0:05 recurringpolicy-list backup-config

B. kron occurrence daily-config-backup at 12:05 recurringpolicy-list backup-config
C. kron policy-list backup-configcli write memorycli show running-config|
redirect tftp://209.165.200.226/$h.cfg
D. kron policy-list backup-configcli write memorycli show running-config|
redirect tftp://209.165.200.226/$hostname.cfg
Answer: AC

QUESTION 133
What is the measurement of the Cisco IP SLA Operation ICMP Pather Jitter?
A. Measures delay and jitter on networks utilizing UDP traffic
B. Measures packet loss, jitter, and delay per hop in IP networks
C. Measures round-trip delay only in UDP traffic networks
D. Measures IP networks-only round-trip delay
Answer: B
QUESTION 134
Which two commands are required to enter enable mode on a console port without entering a
password? (Choose two.)
A. Privilege 15
B. Input SSH
C. Line VTY 0 4
D. No login
E. Privilege 0
Answer: AD
QUESTION 135
What is the Cisco recommended way to secure SNMPv2 community strings?
A. Configure complex community string names and avoid using default settings
B. Create multiple read/write strings to keep the attacker guessing
C. Use access-lists to limit the amount of access to the community strings
D. Use SNMPv3 to limit the amount of memory overhead
Answer: C
QUESTION 136
What is the Cisco IOS command to export IPv6 flows to Collector 209.165.200.200/24?
A. Switch(config)#ipv6 flow-export destination 209.165.200.200 9996
B. Switch(config)#ip flow-export destination 209.165.200.200 9996
C. Switch(config)#ip flow-export destination 209.165.200.200 255.255.255.0
D. Switch(config)#ip flow-export destination fe08::0ABC:1 9996
Answer: A
QUESTION 137
Which layer of the OSI Model does Label Distribution Protocol operate at?
A. Data Link
B. Transport
C. Application
D. Presentation
E. Session
F. Network
Answer: A
QUESTION 138
A network engineer has been provided subnet 209.165.202.128/27. What is the last usable IP
address in this network and what is the subnet mask?
A. 209.165.202.158 and 255.255.255.224
B. 209.165.202.159 and 255.255.255.192
C. 209.165.202.158 and 255.255.255.192
D. 209.165.202.128 and 255.255.255.192
E. 209.165.202.128 and 255.255.255.224
Answer: A
QUESTION 139
On Switch 5, which command would configure VLAN 5 as root?
A. switch5#spanning-tree vlan 5 priority 0
B. switch5(config)#spanning-tree vlan 5 priority 61440
C. switch5(config)#spanning-tree vlan 5 root
D. switch5(config)#spanning-tree vlan 5 priority 0
E. switch5(config-if)#spanning-tree rootguard

Answer: D

QUESTION 140
Which EIGRP feature in IOS, IOS-XE, and IOS-XR will prevent the EIGRP process from
automatically forming a neighbor adjacency?
A. Access-lists
B. Link speed and duplex
C. MTU Size
D. Passive interface
E. Bandwidth and delay

Answer: D
QUESTION 141
A Network Engineer configured NAT for external access but one individual at a time can access
the external network. What NAT feature will allow all internal devices to share the same NAT IP
address?
A. Static mapping
B. Overload feature
C. NAT DHCP feature
D. Default route statement
Answer: B

QUESTION 142
Which command set is required to enable a remote SNMP query on an IOS-XR router?
A. control-planemanagement-planeinbandinterface allallow SNMPcommit
B. control-planemanagement-planeinbandinterface allallow SNMP
C. snmp server hostsnmp server contactsnmp-server community stringcommit
D. snmp server hostsnmp server contactsnmp-server community string

Answer: A
QUESTION 143
What is the minimum version of DOCSIS that will support IPv6?
A. Version 1
B. Version 2
C. Version 3
D. Version 3.1

Answer: B
QUESTION 144
Which multiplexing technology has minimal impact to production traffic when changes are
implemented to a live circuit?
A. Dark fiber
B. DWDM
C. IPoDWDM
D. ROADM

Answer: D
QUESTION 145
A network administrator set-up AAA on a new router. While the TACACS server was down for
maintenance, the administrator was still unable to login with the backup password. Which
keyword did the administrator leave off of the AAA configuration?
A. The keyword local is missing from the AAA authentication login statement.
B. The keyword local is missing from the AAA authentication exec statement.
C. The keyword default is missing from the login authentication.
D. The command line privilege level 0 is missing from the VTY configuration.
Answer: B
QUESTION 146
Which two statements about NetFlow support on Cisco IOS XR are true? (Choose two.)
A. Cisco IOS XR supports NetFlow version 9 export format only.
B. NetFlow version 9 is a flexible and extensible means to carry NetFlow records from a network
node to a collector.
C. IP flow is based on a set of four parameters only (source IP address, destination IP address,
source port, and destination port).
D. A NetFlow flow is the bidirectional sequence of packets on a single interface.

Answer: AB

QUESTION 147
What are the four steps to enable SSH v1 and v2 server on Cisco IOS XR routers?
(Choose four.)
A. Configure a host name.
B. Configure a domain name.
C. Generate a crypto key pair.
D. Import the router identity certificate and the CA root certificate to the router.
E. Configure an ISAKMP policy.
F. Bring up an SSH server using the ssh server command.

Answer: ABCF
QUESTION 148
Generally, which way is the fastest to open S3 and S4 service requests to the Cisco TAC?
A. Use the Smart Call Home feature.
B. Use the online TAC Service Request Tool.
C. Call Cisco TAC on the phone.
D. Email Cisco TAC with a high-priority email.
E. Export the related Syslog/NetFlow information to TAC directly.

Answer: B
QUESTION 149
Given the IP address 172.16.170.15 255.255.224.0, which three options are the subnet that
this IP address belongs to, the host IP address range on this subnet, and the subnet
broadcast IP address? (Choose three.)
A. subnet = 172.16.160.0/19
B. subnet = 172.16.170.0/19
C. subnet = 172.16.192.0/19
D. host IP address range = 172.16.160.1 to 172.16.191.254
E. host IP address range = 172.16.170.1 to 172.16.170.254
F. host IP address range = 172.16.160.1 to 172.16.223.254
G. subnet broadcast IP address = 172.16.170.255
H. subnet broadcast IP address = 172.16.191.255
I. subnet broadcast IP address = 172.16.223.255

Answer: ADH
QUESTION 150
Which three IP addresses are valid for hosts that belong to the 10.152.0.0/13 subnet? (Choose
three.)
A. 10.152.0.0/13
B. 10.153.0.1/13
C. 10.158.255.255/13
D. 10.159.255.254/13
E. 10.160.0.1/13
F. 10.161.0.1/13
Answer: BCD
QUESTION 151
Which type of IPv6 address does the ff00::/8 prefix denote?
A. local loopback
B. global unicast
C. unique link local
D. link local unicast
E. multicast
F. anycast
Answer: E

QUESTION 152
With IPv6, for which purpose are router solicitation and router advertisement used?
A. routing protocol updates
B. routing protocol neighbor peerings
C. router and prefix discovery
D. Layer 3 to Layer 2 address resolution (similar to IPv4 ARP)

Answer: C
QUESTION 153
Which Cisco router feature allows multiple independent routing table instances to co-exist within
the same router at the same time?
A. Virtual Contexts
B. Virtual Machines
C. VTI
D. VRF
E. VPLS
F. GRE

Answer: D
QUESTION 154
You have a LAN that has three computers. The computers are connected by a switch.
The computers are in the 192.168.1.0/24 network.
Which network device enables you to connect the LAN to the Internet?
A. a switch
B. a hub
C. a router
D. a DSL modem in bridge mode
Answer: C
QUESTION 155
You plan to implement QoS on a network, using these four classes:
- A class for real-time applications
- A class for interactive applications
- A class for batch applications
- A scavenger class
Which two classes are interactive applications? (Choose two.)
A. email
B. SSH
C. database updates
D. IP telephony
E. file transfers
Answer: BC
QUESTION 156
Which command assigns an IP address to the Loopback1 interface on a Cisco IOS Router?
A. ip address 192.168.41.111 255.255.255.240
B. set ip 127.0.0.1/32
C. ip address 127.0.0.1 255.255.255.0
D. ip address 169.254.47.81 255.255.0.0
Answer: D
QUESTION 157
You are configuring manual route summarization in EIGRP. Which two networks are summarized
into 10.134.17.64/27? (Choose two.)
A. 10.134.17.64 255.255.255.240
B. 10.134.17.100/30
C. 10.134.17.0 255.255.255.128
D. 10.134.17.92/30
Answer: AD
QUESTION 158
Which two IP addresses can be assigned to hosts? (Choose two.)
A. 192.168.1.255/23
B. 192.168.1.255/22
C. 172.16.28.7/29
D. 224.0.250.1/24
E. 10.192.225.225/27

Answer: BE
QUESTION 159
Which three statements about Ethernet frames are true? (Choose three.)
A. Every frame starts with a preamble.
B. FCS is used to recover single-bit errors.
C. The source address is positioned behind the destination address.
D. If the data field is too short, it must be padded.
E. The dot1q tag size is six bytes.
F. The source and destination IP addresses are in the header.

Answer: ACD
QUESTION 160
Refer to the exhibit. ServerA successfully connects to Router1, but it fails to ping
SwitchX. Which action enables ServerA to ping SwitchX?

A. Set the default gateway on ServerA to 10.10.1.1.

B. Enter the command no shutdown on the Vlan1 interface of SwitchX.
C. Change the subnet mask on the Vlan1 interface of SwitchX to 255.255.255.0.
D. Replace the cable in FastEthernet0/2.

Answer: B
QUESTION 161
Refer to the exhibit. Both ComputerA and Server1 have gigabit interface cards. Switch1 and
Switch2 are both Cisco Catalyst 2960 Series Switches. The EtherChannel link between the
switches is fully operational. The switches use src-dst-mac load-balancing mode.
What is the theoretical maximum bandwidth that is available for copying files from ComputerA to
Server1 by using FTP?

A. 1 Gbps
B. 200 Mbps
C. 100 Mbps
D. 400 Mbps

Answer: C
QUESTION 162
Two sites each have a different ASN. Which method do you use to share routing information
between the sites?
A. EIGRP
B. IGP
C. static routing
D. OSPFv3
E. BGP

Answer: E
QUESTION 163
You configure a network to use IPv6, and you use RIPng as the routing protocol. What is the
maximum hop count to use to install a route in the routing table?
A. 15
B. 16
C. 255
D. 65535

Answer: A
QUESTION 164
Refer to the exhibit. Two routers are named R1 and R2. R1 runs Cisco IOS Software. R2 runs
Cisco IOS XR Software. To form an EIGRP IPv6 adjacency between the two routers, which three
configurations must you add? (Choose three.)

A. On R1, configure router-id with an IPv4 address.

B. On R1, configure router-id with an IPv6 address.
C. On R1, enter the no shutdown command inside the IPv6 EIGRP process.
D. On R1 and R2, enter the eigrp no shutdown command inside the interfaces. "Pass
Any Exam. Any Time." - www.actualtests.com 119 Cisco 640-875 Exam
E. On R1, configure IPv6 unicast routing in config mode.
F. On R2, configure IPv6 unicast routing in config mode.

Answer: ACE
QUESTION 165
Which statement about VRFs is true?
A. One interface can be a member of multiple VRFs.
B. Each VRF has its own routing table, but it has a shared FIB.
C. Each VRF has its own routing table and its own FIB.
D. Each VRF has its own routing table, and it does not have an FIB.
Answer: C
QUESTION 166
You plan to configure NAT by using these guidelines:
- Implement NAT for the inside network 192.168.1.0/128 to the range of
209.165.201.1 to 209.165.201.5/128.
- Create a static association for the server 192.168.1.129 to the
public IP address of 209.165.201.6.
- Implement PAT for the IP address range of 192.168.2.0/24 with the
outside interface.
Which commands should you use to configure NAT?
A. access-list 1 permit 192.168.1.0 0.0.0.128
access-list 2 permit 192.168.2.0 0.0.0.255
ip nat pool NATCustomerA 209.165.201.1 209.165.201.5 netmask 0.0.0.128
ip nat inside source list 1 pool NATCustomerA
ip nat inside source static 192.168.1.129 209.165.201.6
ip nat inside source list 2 interface g1/0/0 overload interface f0/0
description CustomerFacing Interface
ip nat inside
interface g1/0/0
description
PublicWan
ip nat outside
B. access-list 1 permit 192.168.1.0 0.0.0.127
access-list 2 permit 192.168.2.0 0.0.0.255
ip nat pool NATCustomerA 209.165.201.1 209.165.201.5 netmask 255.255.255.128
ip nat inside source list 1 pool NATCustomerA
ip nat inside source static 192.168.1.129 209.165.201.6
ip nat inside source list 2 interface g1/0/0 overload interface f0/0
description CustomerFacing Interface
ip nat inside interface
g1/0/0 description
PublicWan ip nat
outside
C. access-list 1 permit 192.168.1.0 0.0.0.128
access-list 2 permit 192.168.2.0 0.0.0.255
ip nat pool NATCustomerA 209.165.201.1 209.165.201.5 prefix 25
ip nat inside source list 1 pool NATCustomerA
ip nat inside source static 192.168.1.129 209.165.201.6
ip nat inside source list 2 interface g1/0/0
interface f0/0
description CustomerFacing
Interface ip nat inside
interface g1/0/0
description PublicWan
ip nat outside
D. access-list 1 permit 192.168.1.0 0.0.0.127
access-list 2 permit 192.168.2.0 0.0.0.255
ip nat pool NATCustomerA 209.165.201.1 209.165.201.5 prefix 25
ip nat inside source list 1 pool NATCustomerA overload
ip nat inside source static 192.168.1.129 209.165.201.6
ip nat inside source list 2 interface g1/0/0 interface f0/0

description CustomerFacing Interface

ip nat inside
interface g1/0/0
description PublicWan
ip nat outside
Answer: B
QUESTION 167
Refer to the exhibit. How many IP addresses does Router1 have that are available for
DHCP clients?
 A. 100
B. 99
C. 254
D. 199
Answer: B
QUESTION 168
Which type of ICMP message is generated when a datagram is discarded because the TTL
reaches a value of 0?
A. Type 0 (Echo Reply)
B. Type 12 (Parameter Problem)
C. Type 11 (Time Exceeded)
D. Type 16 (Information Reply)
E. Type 10 (Source Quench)
Answer: C
QUESTION 169
In IPv6, which kind of record is used for reverse lookups?
A. nibble
B. AAAA
C. PTR
D. APL
Answer: C
QUESTION 170
Refer to the exhibit. A Cisco IOS Router has the configuration that is shown in the exhibit.
The Cisco IOS Router is replaced by a Cisco IOS XR device.
To duplicate the IPv6 EIGRP parameters of the Cisco IOS Router, which configuration should you
use on the Cisco IOS XR device?

A. interface Loopback 0
ipv6 address 2001:db8:aaaa::1/128
!
interface gigabitEthernet 1/0/1
ipv6 enable
ipv6 address 2001:db8:bbbb::1/64
!
router eigrp 100 interface
loopback 0 interface
gigabitethernet 1/0/1 exit

commit
B. interface Loopback 0
ipv6 address 2001:db8:aaaa::1/128
!
interface gigabitEthernet
1/0/1 ipv6 enable
ipv6 address 2001:db8:bbbb::1/64
!
router eigrp 100
address-family ipv6
 interface loopback 0
interface gigabitethernet 1/0/1
exit
commit
C. interface Loopback 0
ipv6 address 2001:db8:aaaa::1/128
ipv6 eigrp 100
!
interface gigabitEthernet 1/0/1 ipv6
address 2001:db8:bbbb::1/64 ipv6
router eigrp 100
!
ipv6 router eigrp 100
no shutdown
exit
commit
D. interface Loopback 0
ipv6 address 2001:db8:aaaa::1/128
commit
!
interface gigabitEthernet 1/0/1
ipv6 enable
ipv6 address
2001:db8:bbbb::1/64 commit
!
router eigrp 100 address-
family ipv4 interface loopback
0 interface gigabitethernet
1/0/1 commit
Answer: B
QUESTION 171
DOCSIS architecture includes which two primary components? (Choose two.)
A. a DSL modem
B. a cable modem
C. CMTS
D. UMTS
E. an IP PBX
Answer: BC
QUESTION 172
A BNG device can implement which three functions? (Choose three.)
A. authentication, authorization, and accounting
B. security and policy management
C. DHCP server
D. DHCP relay
E. call management
F. DNS proxy
Answer: ABD
QUESTION 173
Which two architectures are part of the FTTx group of technologies? (Choose two.)
A. Fiber-to-the-Building
B. Fiber-to-the-Cabinet
C. Fiber-to-the-Telecom-Enclosure
D. Fiber-to-the-Home
E. Fiber-to-the-Zone
Answer: AD
QUESTION 174
Which three Cisco platforms support IPoDWDM? (Choose three.)
A. Cisco ASR 1000 Series
B. Cisco ASR 9000 Series
C. Cisco CRS-1
 D. Cisco ISR G2 Series
E. Cisco 7600 Series
F. Cisco 2900 Series
Answer: BCE
QUESTION 175
A technician connects a Cisco ASR 9001 Router with a 40 Gigabit Ethernet modular port adapter
to an older model Cisco switch through a transceiver.
The older Cisco switch has interfaces that only support up to 100-Mb half-duplex.
What should you tell the technician about this configuration?
A. The devices are unable to communicate.
B. On the older model Cisco switch, set the speed to "auto," so that the devices can communicate.
C. On the Cisco ASR 9001 Router, set the duplex and the speed to "auto," so that the devices can
communicate.
D. Set the transceiver to half/full duplex mode so that the devices can communicate.
Answer: A
QUESTION 176
Which two features are used on CE devices in Metro Ethernet? (Choose two.)
A. encryption
B. MPLS
C. packet filtering
D. Xconnect
Answer: BD
QUESTION 177
Refer to the exhibit. All physical interfaces are up.
What change must you make to ensure that Multilink PPP functions?

A. Configure no ppp authentication chap for serial 1/3.

B. Configure ppp multilink group 1 for serial 1/1 and serial 1/3.
C. Configure encapsulation ppp for the serial interfaces on both routers.
D. Add an IP address inside the multilink group.
E. Configure no shutdown inside the multilink interface.
Answer: C
QUESTION 178
Which mode prevents the counter track from being incremented when a security violation occurs?
A. shutdown
B. restrict
C. protect
D. guard
Answer: C
QUESTION 179
Refer to the exhibit. To log in successfully to the console port, what information should you enter?

A. SecretPa$$word
B. EnabLe
C. admin for the username and ThisIsVerySecretPassword for the password
D. CIsc0

Answer: A
QUESTION 180
Refer to the exhibit. You want to configure RADIUS authentication for users who connect by
using the SSH protocol. If the RADIUS server is unreachable, the users that are defined in
the running configuration should be used. Which additional command should you use?

A. aaa authentication ssh group radius backup config

B. aaa authentication ssh group radius backup current
C. aaa authentication list ssh group radius users
D. aaa authentication login ssh group radius local

Answer: D
QUESTION 181
You want to successfully authenticate to a neighboring router that has authentication type 2
configured for OSPF Area 0. Which two commands should you use? (Choose two.)
A. Inside OSPF mode, configure area 0 authentication message-digest.
B. Inside interface mode, configure ip ospf message-digest-key 1 md5.
C. Inside interface mode, configure ip ospf authentication-key.
D. Inside OSPF mode, configure area 2 authentication.
E. Inside OSPF mode, configure area 0 authentication.

Answer: AB

QUESTION 182
You are informed by your ISP that your network participated in a DDoS attack, which sent
spoofed IP packets. The ISP was able to block the packets. To prevent similar attacks,
which feature should you use?
A. Unicast Reverse Path Forwarding
B. broadcast storm control
C. directed broadcasts
D. dynamic routing protocols
Answer: A
QUESTION 183
You have a router that is configured as an NTP server. Which command should you use on the
router to allow NTP queries only from hosts that are permitted in access list 10?
A. ntp access-group peer 10
B. ntp access-group serve 10
C. ntp access-group serve-only 10
D. ntp access-group query-only 10
Answer: C
QUESTION 184
You need to set an SLA that pings a neighbor IP every 10 seconds with a timeout of 1000 ms.
Which set of commands should you use?
A. (config)#ip sla 5 (config-ip-sla)#icmp-
echo 10.0.0.1 (config-ip-sla-
icmp)#frequency 10000 (config-ip-
sla-icmp)#timeout 1000
B. (config)#ip sla 5 (config-ip-
sla)#icmp-echo 10.0.0.1 (config-
ip-sla-echo)#frequency 10
(config-ip-sla-echo)#timeout 1000
(config)#ip sla schedule 5 life forever start-time now
C. (config)#ip sla 5 (config-ip-
sla)#icmp-echo 10.0.0.1 (config-
ip-sla-icmp)#frequency 10
(config-ip-sla-icmp)#timeout 10
(config)#ip sla schedule 10 life forever start-time now
D. (config)#ip sla 5
(config-ip-sla)#type echo protocol ip IcmpEcho 10.0.0.1
(config-ip-sla-echo)#frequency 10
(config-ip-sla-echo)#timeout 1000
(config)#ip sla schedule 10 life forever start-time now
Answer: B
QUESTION 185
Which command can you use to reduce the amount of time that is required to flush inactive
entries from the CDP table?
A. cdp holdtime
B. clear cdp table
C. cdp advertise-v2
D. cdp timer
Answer: A
QUESTION 186
You install third-party monitoring software on a server that has an IP address of 10.10.1.3. The
monitoring software supports SNMPv1 and SNMPv2. You want to configure a router to allow
SNMP access from the monitoring software by using the community string of Community1. The
configuration must be as secure as possible. Which commands should you use?
A. access-list 10 permit 10.10.1.3 snmp-server
community Community1 RO 10
B. snmp-server host 10.10.1.3
snmp-server community Community1 RW 10
C. snmp-server host 10.10.1.3 snmp-server
community Community1 RO
D. access-list 10 permit 10.10.1.3 snmp-
server community Community1 RO
Answer: A
QUESTION 187
Refer to the exhibit. You want to accomplish the following:
- Change the active flow timeout to three minutes.
- Change the inactive flow to one minute.
Which two commands should you run? (Choose two.)
 A. (config)#ip flow-cache timeout active 3
B. (config)#ip flow-cache timeout inactive 60
C. (config)#ip flow-cache timeout active 180
D. (config)#ip flow-cache timeout inactive 1
Answer: AB
QUESTION 188
If a severity 1 problem is unresolved in four hours, the problem is escalated to which person?
A. the TAC director
B. the TAC manager
C. the TAC duty manager
D. the Vice President of Technical Services
Answer: A
QUESTION 189
In a ring topology network using only Cisco Catalyst 4500 and Cisco Catalyst 6500 devices
and Ethernet as Layer 2 technology, which loop prevention mechanism provides the fastest
convergence time in an event of link failure?
A. Rapid Per-VLAN Spanning Tree Protocol
B. Resilient Ethernet Protocol
C. Multiple Spanning Tree Protocol
D. Spanning Tree Protocol
Answer: B
QUESTION 190
Which are the two benefits of the star network topology over the bus network topology?
(Choose two.)
A. Disruption of the entire network is not required when adding new machines.
B. Any problem which leaves the network inoperable can be traced to the central hub.
C. This network type requires less cable as compared to linear bus topology.
D. The performance of one of the numerous nodes cannot reflect on the performance of other
nodes.
E. The performance of the entire network is directly dependent on the performance of the hub.
Answer: AB
QUESTION 192
Refer to the exhibit. The link between RT1 and RT2 requires an authentication to be enabled
using encrypted password.

Which four Cisco IOS commands are necessary to be applied on RT1? (Choose four.)
A. hostname RT1
B. int s0/0
encap hdlc
C. int s0/0
encap ppp
D. int s0/0
ppp authentication pap
E. int s0/0
ppp authentication chap
F. ip domain-name test.com
G. username RT2 password C!sco!23
H. username RT1 password C!sco!23
Answer: ACEG
QUESTION 193
At what layer of the OSI model is the Label Distribution Protocol present?
A. data link
B. transport
C. application
D. presentation
E. session
Answer: A
QUESTION 194
Which subnetwork mask should be used in a point-to-point link in order to use IPv4 address block
more efficiently?
A. 209.165.201.0/32
B. 209.165.201.0/31
C. 209.165.201.0/30
D. 209.165.201.0/29
E. 209.165.201.0/24
Answer: B
QUESTION 195
Refer to the exhibit. Customer A site 1 is reporting to the service provider that they cannot reach
Customer A site 2 networks. What is the root cause of this issue?

A. one of the PE routers is adding summarization incorrectly

B. incorrect network statement
C. ospf area-id configured incorrectly
D. configuration missing subnets keyword
Answer: D
QUESTION 196
Which three are features present on both ICMPv4 and ICMPv6? (Choose three.)
A. connectivity tests
B. address assignment
C. information error messaging
D. address resolution
E. mobile IPv4 support
F. multicast group management
G. mobile IPv6 support
H. fragmentation needed notification
Answer: ACH
QUESTION 197
Company policy only allows SSH for remote access into Cisco routers. Which configuration
would only allow SSH?
A. access-lists 101 deny tcp any eq telnet
B. transport input SSH
C. access-class 101 in
D. access-class 101 out
E. transport preferred SSH

Answer: B
QUESTION 202
You are designing a network in accordance with the hierarchical network design model.
The distribution layer provides which three functionalities? (Choose three.)
A. workgroup segmentation
B. high-speed switching
C. connectivity to workstations
D. policy-based connectivity
E. WAN connection aggregation at the edge
F. 802.1x security

Answer: ADE