Introducing The New!
Surepassexam Collection
Get Unlimited Access to all
Surepassexam's PREMIUM files
Q1. Which Cisco NAC Appliance component is optional?
A. NAC Appliance Manager
B. NAC Appliance Server
C. NAC Appliance Agent
D. NAC Appliance Policy Updates
Answer: C
Q2. Which two protocol characteristics should be most considered when designing a single unified fabric for the Data Center? (Choose two.)
A. FCIP or FCoE allow for easier integration by using the Fibre Channel Protocol (FCP) and Fibre Channel framing
B. iSCSI uses a special EtherType and an additional header containing additional control information
C. FCIP and iSCSI has higher overhead than FCoE owing to TCP/IP
D. FCoE was initially developed to be used as a switch-to-switch protocol, while FCIP is primarily meant to be used as an access layer protocol to connect hosts and storage to a Fibre Channel SAN
E. FCoE requires gateway functionality to integrate into an existing Fibre Channel network
Answer: A,C
Q3. The network designer needs to consider the number of multicast applications and sources in the network to provide the most robust network possible. Which of the following is a consideration the designer must also address?
A. The IGPs should utilize authentication to avoid being the most vulnerable component
B. With SSM source or receiver attacks are not possible
C. With Shared Trees access control is always applied at the RP
D. Limit the rate of Register messages to the RP to prevent specific hosts from being attacked on a PIM-SM network
Answer: B
Q4. A well-designed IP addressing scheme supporting role-based functions within the subnet will result in the most efficient use of which technology?
A. Layer 3 switching in the core
B. Network Admission Control (NAC)
C. IP telephony (voice and video) services
D. ACLs
Answer: D
Q5. Which statement about IPS and IDS solutions is true?
A. IDS and IPS read traffic only in inline mode.
B. IDS and IPS read traffic only in promiscuous mode.
C. An IDS reads traffic in inline mode, and an IPS reads traffic in promiscuous mode.
D. An IDS reads traffic in promiscuous mode, and an IPS reads traffic in inline mode.
Answer: D
Q6. Refer to the exhibit. Which option should be the default gateway for the PC1 that is shown?
A. 10.3.2.4
B. 10.2.2.2
C. 10.2.2.1
D. 10.2.2.3
Answer: A
Q7. A Layer 2 switch in the network has recently started broadcasting traffic out of every port and is impacting network performance. The engineering department determines that a MAC overflow attack is the cause. Which two features can protect and mitigate the damage of the attacks? (Choose two.)
A. Storm Control
B. Port Security
C. SPAN
D. BPDU Filters
E. IP Source Guard
F. VACLs
Answer: A,B
Q8. What three benefits exist when utilizing Cisco Nexus technology for implementing a unified fabric design? (Choose three.)
A. reduced cabling
B. fewer adapters
C. consolidated switching
D. increased bandwidth
E. enhanced redundancy
F. improved convergence
Answer: A,B,C
Q9. Which two options improve BGP scalability in a large autonomous system? (Choose two.)
A. route reflectors
B. route redistribution
C. confederations
D. communities
Answer: A,C
Q10. A network engineer is implementing virtualization into the enterprise network. Which system should be used to address policy enforcement at the distribution layer?
A. Cisco IOS based firewall
B. multilayer switches
C. integrated firewall services
D. identity services engine
E. intrusion protection systems
Answer: C
Q11. Which two design principles should be followed to scale EIGRP properly? (Choose two.)
A. Ensure that the network design follows a structured hierarchical topology.
B. Utilize route summarization on edge devices.
C. Implement multiple autonomous systems, regardless of the size of the network.
D. Tune EIGRP delay metric on all core devices.
E. Configure offset lists on the network border.
Answer: A,B
Q12. What are two of Cisco's best practices at the access layer to ensure rapid link transitions and VLAN consistency? (Choose two.)
A. Deploy RPVST
B. Deploy MSTP
C. Utilize VTP in server/client mode
D. Utilize VTP in transparent mode
E. VLANs span entire network
F. Portfast applied on distribution uplinks
Answer: A,D
Q13. Which three statements about zoning are correct? (Choose three.)
A. Zoning increases security.
B. DNS queries are used for software zoning.
C. Software zoning is more secure than hardware zoning.
D. When using zones and VSANs together, the zone is created first.
E. Zoning requires that VSANs be established before it becomes operational.
Answer: A,B,E
Q14. A network engineer is building a LAN design that includes Cisco NAC. What two characteristics of an out-of-band NAC deployment are important to consider when evaluating it for the design? (Choose two.)
A. supported by a limited number of switch models
B. never in-line with user traffic
C. aggregate client traffic is constrained to NAC server port speed
D. recommended if sharing ports between IP phones and PCs
E. supports real IP gateway (routed mode)
Answer: A,D
Q15. Refer to the exhibit.
The Cisco Nexus 1000V in the VMware vSphere solution effectively creates an additional access layer in the virtualized data center network; which of the following 1000V characteristics can the designer take advantage of?
A. Offloads the STP requirement from the external Access layer switches
B. If upstream access switches do not support vPC or VSS the dual-homed ESX host traffic can still be distributed using virtual port channel host mode using subgroups automatically discovered through CDP
C. Allows transit traffic to be forwarded through the ESX host between VMNICs
D. Can be divided into multiple virtual device contexts for service integration, enhanced
security, administrative boundaries, and flexibility of deployment
Answer: B