Question 281
A network administrator is troubleshooting a failed AAA login issue on a Cisco Catalyst c3560 switch. When the network administrator tries to log in with SSH using TACACS+ username and password credentials, the switch is no longer authenticating and is failing back to the local account. Which action resolves this issue?
A. Configure ip tacacs-server source-interface GigabitEthernet 1/1.
B. Configure ip tacacs source-ip 192.168.100.55.
C. Configure ip tacacs source-interface GigabitEthernet 1/1.
D. Configure ip tacacs-server source-ip 192.168.100.55.
Question 282
Which two solutions are used to overcome a flapping link that causes a frequent label binding exchange between MPLS routers? (Choose two.)
A. Increase input queue on links to protect the session.
B. Increase a hold-timer to protect the session.
C. Increase a session delay to protect the session.
D. Create link dampening on links to protect the session.
E. Create targeted hellos to protect the session.
Question 283
A network engineer must configure a DMVPN network so that a spoke establishes a direct path to another spoke if the two must send traffic to each other. A spoke must send traffic directly to the hub if required. Which configuration meets this requirement?
A. At the hub router:
interface tunnel10
ip nhrp nhs dynamic multipoint
ip nhrp nhs shortcut
tunnel mode gre multicast
On the spokes router:
interface tunnel10
ip nhrp nhs multicast dynamic
ip nhrp nhs redirect
tunnel mode gre multicast
B. At the hub router:
interface tunnel10
ip nhrp map dynamic multipoint
ip nhrp redirect
tunnel mode gre multicast
On the spokes router:
interface tunnel10
ip nhrp map multicast dynamic
ip nhrp shortcut
tunnel mode gre multicast
C. At the hub router:
interface tunnel10
ip nhrp nhs multicast dynamic
ip nhrp nhs shortcut
tunnel mode gre multipoint
On the spokes router:
interface tunnel10
ip nhrp nhs multicast dynamic
ip nhrp nhs redirect
tunnel mode gre multipoint
D. At the hub router:
interface tunnel10
ip nhrp map multicast dynamic
ip nhrp redirect
tunnel mode gre multipoint
On the spokes router:
interface tunnel10
ip nhrp map multicast dynamic
ip nhrp shortcut
tunnel mode gre multipoint
Question 284
The network administrator configured R1 to authenticate Telnet connections based on Cisco ISE using TACACS+. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1 (192.168.1.1) with a shared secret password of Cisco123.
The administrator has configured this on R1:
A. line vty 0 4login authentication TAC-SERV
B. tacacs-server host 192.168.1.5 key Cisco123
C. ip tacacs-server host 192.168.1.5 key Cisco123
D. line vty 0 4login authentication telnet
Question 285
Refer to the exhibit. A network engineer is troubleshooting a failed link between R2 and R3. No traffic loss is reported from router R5 to HQ. Which command fixes the separated backbone?
A. R3(config-router)#area 21 virtual-link 192.168.125.5
B. R2(config-router)#area 21 virtual-link 192.168.125.5
C. R3(config-router)#no area 21 stub
D. R2(config-router)#no area 21 stub
Question 286
Refer to the exhibit. An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established and did not meet the requirement. Which action resolves the issue?
A. Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv4 address, and remove process 10 from the global configuration.
B. Replace OSPF process 10 on the interfaces with OSPF process 1, and configure an additional router ID with IPv6 address.
C. Replace OSPF process 10 on the interfaces with OSPF process 1, and remove process 10 from the global configuration.
D. Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv6 address, and remove process 10 from the global configuration.
Question 287
What is the purpose of an OSPF sham-link?
A. to allow inter-area routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
B. to allow intra-area routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
C. to correct OSPF backdoor routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
D. to correct OSPF backdoor routing when OSPF is used as the PE-PE connection protocol in an MPLS VPN network
Question 288
Refer to the exhibit. A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company’s security policy. The administrator can still ping to www.cisco.com. Which interface should the access list 101 be applied to resolve this issue?
A. Interface G0/0 in the outgoing direction.
B. Interface G0/0 in the incoming direction.
C. Interface S1/0 in the outgoing direction.
D. Interface G0/48 in the incoming direction.
Question 289
Network operations report issues with receiving too many external routes, which caused CPU spike on routers with smaller memories. Which action resolves the issue?
A. Configure the area range command when redistributing on ASBR.
B. Configure the summary-address command when redistributing on ABR.
C. Configure the area range command when redistributing on ABR.
D. Configure the summary-address command when redistributing on ASBR.
Question 290
Refer to the exhibit. The administrator noticed that the connection was flapping between the two ISPs instead of switching to ISP2 when the ISP1 failed. Which action resolves the issue?
A. Include a valid source-interface keyword in the icmp-echo statement.
B. Reference the track object 1 on the default route through ISP2 instead of ISP1.
C. Modify the static routes to refer both to the next hop and the outgoing interface.
D. Modify the threshold to match the administrative distance of the ISP2 route.
