Q51. What are two functions of an NSSA in an OSPF network design? (Choose two.) 

A. It overcomes issues with suboptimal routing when there are multiple exit points from the area. 

B. It allows ASBRs to inject external routing information into the area. 

C. An ASBR advertises Type 7 LSAs into the area. 

D. An ABR advertises Type 7 LSAs into the area. 

E. It uses opaque LSAs. 

Answer: BC 


Q52. Which two aspects are considered when designing a dual hub, dual DMVPN cloud topology? (Choose two.) 

A. recommended for high availability 

B. requires all sites to have dual Internet connections C. spoke-to-spoke traffic will transit the hub unless spokes exchange dynamic routing directly 

D. hub sites must connect to both DMVPN clouds 

E. will only work with single-tier headend architecture 

Answer: AE 


Q53. Which two techniques are used in a network design to slow down the distribution of topology information caused by a rapidly flapping link? (Choose two.) 

A. Bidirectional Forwarding Detection 

B. IP event dampening 

C. link-state incremental SPF 

D. link-state partial SPF 

E. LSA throttling 

F. SPF throttling 

Answer: BE 


Q54. You are designing a network to support data, voice and video. Which two main factors will you address to improve network convergence? (Choose two.) 

A. event propagation delay 

B. failure detection delay 

C. forwarding engine update delay 

D. routing table recalculation delay 

Answer: BD 


Q55. Refer to the exhibit. 

Your company designed a network to allow server VLANs in a data center to span all access switches. In the design, Layer 3 VLAN interfaces and HSRP are configured on the aggregation switches. In which three ways should the design of the STP domain be optimized for server and application performance? (Choose three.) 

A. Use loop guard on access ports. 

B. Use PortFast on access ports. 

C. Use root guard on access ports. 

D. Align Layer 2 and Layer 3 forwarding paths. 

E. Use BPDU Skew Detection on access ports. 

F. Explicitly determine root and backup root bridges. 

Answer: BDF 


Q56. When designing a network, which two security features should be added to the design to protect hosts from potential IPv6 neighbor discovery denial of service attacks at the access layer? (Choose two.) 

A. SEND 

B. RA Guard 

C. IKEv2 

D. IPsec 

E. DMVPNv6 

Answer: AB 


Q57. A network administrator is in charge of multiple IPsec VPN headend devices that service thousands of remote connectivity, point-to-point, IPsec/GRE tunnels. During a recent power outage, in which it was found that a backup power supply in one of those headend devices was faulty, one of the headend routers suffered a complete shutdown event. When the router was successfully recovered, remote users found intermittent connectivity issues that went away after several hours. Network operations staff accessed the headend devices and found that the recently recovered unit was near 100% CPU for a long period of time. How would you redesign the network VPN headend devices to prevent this from happening again in the future? 

A. Move the tunnels more evenly across the headend devices. 

B. Implement Call Admission Control. 

C. Use the scheduler allocate command to curb CPU usage. 

D. Change the tunnels to DMVPN. 

Answer: B 


Q58. A customer wants to understand the benefits of a proposed network design that utilizes SNMPv3. Which two network threats is SNMPv3 effective against? (Choose two.) 

A. modification of information threats 

B. masquerade threats 

C. denial of service threats 

D. traffic analysis threats 

Answer: AB 


Q59. If a network design must support rapid convergence on half-duplex interfaces, which IEEE 802.1w capability should be used? 

A. root guard 

B. proposal-agreement handshake 

C. loop guard 

D. UplinkFast 

Answer: B 


Q60. A company wants to use SSM as the multicast routing protocol inside its network. Some of its multicast applications do not support IGMPv3. In which two ways can the mapping be done when these applications send IGMPv2 join messages? (Choose two.) 

A. The Layer 2 switches can send a request to a DNS server. 

B. The Layer 3 multicast routers can send a request to a DNS server. 

C. The mapping can be done statically at the Layer 2 switches. 

D. The mapping can be done statically at the Layer 3 multicast routers. 

E. The Layer 2 switches can transform the IGMPv2 join to an IGMPv3lite join. 

F. The Layer 3 multicast routers can transform the IGMPv2 join to an IGMPv3lite join. 

Answer: BD