NEW QUESTION 1
A service provider hires you to design its new managed CE offering to meet these requirements:
- The CEs cannot run a routing protocol with the PE
- Provide the ability for equal or unequal ingress load balancing in dual-homed CE scenarios.
- Provide support for IPv6 customer routes
- Scale up to 250.000 CE devices per customer.
- Provide low operational management to scale customer growth.
- Utilize low-end (inexpensive) routing platforms for CE functionality.
Which tunneling technology do you recommend?

• A. FlexVPN
• B. point-to-point GRE
• C. DMVPN
• D. LISP

Answer: D

NEW QUESTION 2
Refer to the exhibit.

The enterprise customer wants to stream one-way video from their head office to eight branch
offices using multicast. Their current service provider provides a Layer3 VPN solution and manages
the CE routers, but they do not currently support multicast. Which solution quickly allows this
multicast traffic to go through while allowing for future scalability?

• A. Enable a GRE tunnel between nodes CE1 and CE2
• B. Enable a GRE tunnel between nodes C2 and C4
• C. Enable a GRE tunnel between nodes C1 and C4
• D. Implement hub and spoke MPLS VPN over DMVPN (also known as 2547o DMVPN) between CE1and CE2
• E. The service provider must provide a Draft Rosen solution to enable a GRE tunnel between nodesPE1 and PE2

Answer: B

NEW QUESTION 3
A European national bank considers migrating its on-premises systems to a private cloud offering in a non-European location to significantly reduce IT costs.
What is a primary factor prior to migration?

• A. data governance
• B. additional latency
• C. security
• D. cloud connectivity

Answer: A

NEW QUESTION 4
Which two foundational aspects of loT are still evolving and being worked on by the industry at large? (Choose two)

• A. WiFi protocols
• B. Regulatory domains
• C. Low energy Bluetooth sensors
• D. loT consortia
• E. Standards

Answer: AC

NEW QUESTION 5
Refer to the exhibit. A new high availability DB sever cluster is installed in the network.

These two servers require high bandwidth and low latency Layer 2 connectivity for database replication.
Which solution supports these requirements?

• A. Add two new links between SW1 and SW2 configured as LACP trunk with STP
• B. Add secondary links to REP segments 1 and 2
• C. Add two new links between SW1 and SW2 configured as REP segment 3
• D. Add two new links between SW1 and SW2 configured as REP segments 1 and 2 respectively

Answer: C

NEW QUESTION 6
Which two data plane hardening techniques are true? (Choose two)

• A. warning banners
• B. redundant AAA servers
• C. Control Plane Policing
• D. SNMPv3
• E. routing protocol authentication

Answer: EF

NEW QUESTION 7
Company XYZ is designing the network for IPv6 security and they have these design
requirements:
- A switch or router must deny access to traffic from sources with addresses that are correct, but
are topologically incorrect
- Devices must block Neighbor Discovery Protocol resolution for destination addresses that are
not found in the binding table.
Which two IPv4 security features are recommended for this company? (Choose two)

• A. IPv6 DHCP Guard
• B. IPv6 Source Guard
• C. IPv6 Destination Guard
• D. IPv6 Prefix Guard
• E. IPv6 RA Guard

Answer: CD

NEW QUESTION 8
A European government passport agency considers upgrading its IT systems to increase
performance and workload flexibility in response to constantly changing requirements. The
budget manager wants to reduce capital expenses and IT staff and must adopt the lowest-cost
technology. Which technology choice is suitable?

• A. on premises
• B. private cloud
• C. public cloud
• D. hybrid cloud

Answer: B

NEW QUESTION 9
Two enterprise networks must be connected together. Both networks are using the same private IP addresses.
The client requests from both sides should be translated using hide NAT (dynamic NAT) with the overload feature to save IF addresses from the NAT pools.
Which design addresses this requirement using only one Cisco I OS NAT router for both directions?

• A. This is not possible, because two Cisco IOS NAT routers are required to do dynamic NAT, withoverload in both directions.
• B. The ip nat inside and ip nat outside commands must be configured at the interfaces with theoverload option in both directions.
• C. The overload feature is the default and does not have to be configured.
• D. Two different NAT pools must be used for the ip nat inside source and the ip nat outside sourcecommands for the overload feature in both directions.
• E. The Nat Virtual interface must be used to achieve this requirement.

Answer: D

NEW QUESTION 10
SD-WAN can be used to provide secure connectivity to remote offices, branch offices, campus networks, data centers, and the cloud over any type of IP-based underlay transport network. Which two statements describe SD WAN solutions? (Choose two.)

• A. SD-WAN networks are inherently protected against slow performance.
• B. Control and data forwarding planes are kept separate.
• C. Improved operational efficiencies result In cost savings.
• D. Solutions include centralized orchestration, control, and zero-touch provisioning.
• E. Solutions allow for variations of commodity and specialized switching hardware.

Answer: BD

NEW QUESTION 11
Which two control plane policer designs must be considered to achieve high availability? (Choose
two.)

• A. Control plane policers are enforced in hardware to protect the software path, but they arehardware platform dependent in terms of classification ability.
• B. Control plane policers are really needed only on externally facing devices.
• C. Control plane policers can cause the network management systems to create false alarms.
• D. Control plane policers must be processed before a forwarding decision is made.
• E. Control plane policers require that adequate protocols overhead are factored in to allow protocolconvergence.

Answer: AD

NEW QUESTION 12
Which encoding format does cisco ios XE software support for NETCONF?

• A. It supports HTML encoding for NETCONF
• B. It supports YAML encoding for NETCONF
• C. It supports XML encoding for NETCONF
• D. It supports JSON encoding for NETCONF

Answer: C

NEW QUESTION 13
An existing wireless network was designed to support data traffic only.
You must now install context Aware services for location tracking changes must be applied to the existing wireless network to increase the location accuracy? (Chose two)

• A. Add access points along the perimeter of the coverage area.
• B. Increase the access point density to create an average inter-access point distance of less than 40feet or 12.2 meters
• C. Use directional antennas to provide more cell overlapping
• D. Install additional access points in monitor mode where the co-channel interference wouldotherwise be affected
• E. Fine tune the radio configuration of the access point to have a higher average transmission powerto achieve better coverage

Answer: BE

NEW QUESTION 14
SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT gateways.
Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?

• A. TLS
• B. DTLS
• C. IPsec
• D. GRE

Answer: C

NEW QUESTION 15
You are designing a network running both IPv4 and IPv6 to deploy QoS.
Which consideration is correct about the QoS for IPv4 and IPv6?

• A. IPv4 and IPv6 traffic types can use use queuing mechanisms such as LLQ, PQ and CQ.
• B. IPv6 packet classification is only available with process switching, whereas IPv4 packetclassification is available with both process switching and CEF.
• C. IPv6 and IB/4 traffic types can use a single QoS policy to match both protocols
• D. Different congestion management mechanisms need to be used for IPv4 and IPv6 traffic types

Answer: C

NEW QUESTION 16
......