Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) v1.0
Question 1
Refer to the exhibit. Which type of DDoS attack will be mitigated by this configuration?
- A. teardrop attack
- B. smurf attack
- C. SYN flood
- D. SIP INVITE flood attacks
Answer : B
Question 2
Refer to the exhibit. While troubleshooting the network, a network operator with an employee id: 1234:55:678 is trying to ping XR1. Which result should the operator expect when trying to ping to an XR1 local address?
- A. AII ICMP traffic is dropped
- B. AII ICMP traffic responds successfully
- C. ICMP traffic works at a policed rate of 19 bytes per second every 100 ms
- D. ICMP traffic works at a policed rate of 19 packets every 100 ms
Answer : B
Question 3
Refer to the exhibit. Which show command should be implemented to display per-interface statistics about uRPF drops and suppressed drops?
- A. show cef interface
- B. show ip traffic
- C. show ip interface
- D. show ip interface brief
Answer : C
Reference:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_urpf/configuration/xe-3s/sec-data-urpf-xe-3s-book/cfg-unicast-rpf.html#GUID-3609F224-
5D40-422E-8754-B12C60677612
Question 4
Refer to the exhibit. What is the result of this configuration?
- A. Router 1 opens and closes a TCP connection to the TACACS+ server every time a user requires authorization
- B. Router 1 and the TACACS+ server maintain one open connection between them only when network administrator is accessing the router with password ciscotest
- C. Router 1 and the TACACS+ server maintain one open connection between them
- D. Router 1 opens and closes a TCP connection to the TACACS+ server every time a user requires authentication
Answer : B
Question 5
Which QoS model allows hosts to report their QoS needs to the network?
- A. IntServ
- B. CB-WFQ
- C. DiffServ
- D. MQC
Answer : A
IntServ follows the signaled-QoS model, where the end-hosts signal their QoS needs to the network.
Reference:
https://www.cisco.com/en/US/technologies/tk543/tk766/technologies_white_paper09186a00800a3e2f.html
Question 6
Refer to the exhibit. Which show command shows statistics for the control plane policy and is used to troubleshoot?
- A. show control-plane CoPP
- B. show policy control-plane
- C. show control-plane
- D. show policy-map control-plane
Answer : D
Question 7
Refer to the exhibit. An engineer has started to configure a router for secure remote access as shown. All users who require network access need to be authenticated by the SSH protocol. Which two actions must the engineer implement to complete the SSH configuration? (Choose two.)
- A. Configure an IP domain name.
- B. Configure ACL 100 to permit access to port 22.
- C. Configure a password under the vty lines.
- D. Configure crypto keys.
- E. Configure service password encryption.
Answer : AD
Question 8
Refer to the exhibit. To protect in-band management access to CPE-R7, an engineer wants to allow only SSH management and provisioning traffic from management network 192.168.0.0/16. Which infrastructure ACL change must be applied to router PE-R9 to complete this task?
- A. ip access-list extended INFRA-ACL 15 permit tcp 192.168.0.0 0.0.255.255 range 49152 65535 100.64.0.0 0.31.255.255 eq 443
- B. ip access-list extended INFRA-ACL no 10 15 permit tcp 192.168.0.0 0.0.255.255 range 49152 65535 100.64.0.0 0.31.255.255 eq 22
- C. ip access-list extended INFRA-ACL 15 permit tcp 192.168.0.0 0.0.255.255 range 49152 65535 100.64.0.0 0.31.255.255 eq 22
- D. ip access-list extended INFRA-ACL no 10 15 permit tcp 192.168.0.0 0.0.255.255 eq 22 100.64.0.0 0.31.255.255 eq 22
Answer : B
Question 9
Refer to the exhibit. A network engineer notices that router R2 is failing to install network 172.16.33.1/32 in the routing table. Which configuration must the engineer apply to R2 to fix the problem?
- A. R2(config)# access-list 1 permit 172.16.33.0 0.0.0.255
- B. R2(config)# access-list 1 permit 172.16.33.0 255.255.0.0
- C. R2(config)# access-list 1 permit 172.16.33.0 255.255.255.0
- D. R2(config)# access-list 1 permit 172.16.33.0 255.0.0.0
Answer : A
Question 10
Which two PHY modes are available to implement an IOS XR 10 Gigabit Ethernet interface? (Choose two.)
- A. LAN
- B. SONET
- C. MAN
- D. WAN
- E. WDWM
Answer : AD
Question 11
Which CLI mode must be used to configure the BGP keychain in Cisco IOS XR Software?
- A. routing configuration mode
- B. BGP neighbor configuration mode
- C. global configuration mode
- D. BGP address-family configuration mode
Answer : C
Question 12
A remote operation center is deploying a set of I-BGP and E-BGP connections for multiple IOS-XR platforms using the same template. The I-BGP sessions exchange prefixes with no apparent issues, but the E-BGP sessions do not exchange routes. What causes this issue?
- A. The I-BGP neighbors are mistyped and HELLO packets cannot be exchanged successfully between routers.
- B. The E-BGP neighbors are not allowed to exchange Information due to the customer platform's default policy.
- C. A PASS ALL policy has not been implemented for the I-BGP neighbors.
- D. The next-hop-self command is not implemented on both E-BGP neighbors.
Answer : B
Question 13
Refer to the exhibit. An engineer is securing a customer's network. Which command must the engineer use to complete this configuration to prevent a DoS attack?
- A. neighbor ttl-security
- B. ebgp-multihop
- C. neighbor ebgp-multihop
- D. ttl-security
Answer : D
Question 14
What is the function of the FEC field within the OTN signal structure?
- A. It allows the sending devices to apply QoS within the OTN forwarding structure.
- B. It allows deep inspection of data payload fields.
- C. It allows receivers to correct errors upon data arrival
- D. It allows source nodes to discard payload errors before transmitting data on the network.
Answer : C
Question 15
A customer of an ISP requests support to setup a BGP routing policy. Which BGP attribute should be configured to choose specific BGP speakers as preferred points for the customer AS?
- A. lowest multi-exit discriminator
- B. highest local preference outbound
- C. lowest local preference inbound
- D. highest local preference inbound
Answer : D