- (Exam Topic 3)
Refer to the exhibit.

While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured.
Which command resolves this issue?

1. A. access-class INTERNET in
2. B. ip access-group INTERNET in
3. C. ipv6 traffic-filter INTERNET in
4. D. ipv6 access-class INTERNET in

Correct Answer: D

- (Exam Topic 3)
The network administrator configured R1 for Control Plane Policing so that the inbound Telnet traffic is policed to 100 kbps. This policy must not apply to traffic coming in from 10.1.1.1/32 and 172.16.1.1/32. The administrator has configured this:

The network administrator is not getting the desired results. Which set of configurations resolves this issue?

1. A. control-planeno service-policy input PM-CoPP!interface Ethernet 0/0service-policy input PM-CoPP
2. B. control-planeno service-policy input PM-CoPP service-policy input PM-CoPP
3. C. no access-list 101access-list 101 deny tcp host 10,1,1.1 any eq 23access-list 101 deny tcp host 172,16.1.1 any eq 23 access-list 101 permit ip any any
4. D. no access-list 101access-list 101 deny tcp host 10,1.1.1 any eq 23access-list 101 deny tcp host 172.16.1.1 any eq 23 access-list 101 permit ip any any!interface E0/0service-policy input PM-CoPP

Correct Answer: C
Packets that match a deny rule are excluded from that class and cascade to the next class (if one exists) for classification. Therefore if we don’t want to CoPP traffic from 10.1.1.1/32 and 172.16.1.1/32, we must “deny” them in the ACL.

- (Exam Topic 3)
A company Is redesigning WAN infrastructure so that all branch sites must communicate via the head office and the head office can directly communicate with each site independently. The network engineer must configure the head office router by considering zero-touch technology when adding new sites in the same WAN infrastructure. Which configuration must be applied to the head office router to meet this requirement?

1. A. Option A
2. B. Option B
3. C. Option C
4. D. Option D

Correct Answer: D

- (Exam Topic 2)
What are two MPLS label characteristics? (Choose two.)

1. A. The label edge router swaps labels on the received packets.
2. B. Labels are imposed in packets after the Layer 3 header.
3. C. LDP uses TCP for reliable delivery of information.
4. D. An MPLS label is a short identifier that identifies a forwarding equivalence class.
5. E. A maximum of two labels can be imposed on an MPLS packet.

Correct Answer: CD
Reference:
https://www.cisco.com/c/en/us/support/docs/multiprotocol-label-switching-mpls/mpls/4649-mpls-faq-4649.html

- (Exam Topic 3)
Refer to the exhibit.

Refer to the exhibit
R1 cannot authenticate via TACACS
Which configuration resolves the issue?

1. A. Option A
2. B. Option B
3. C. Option C
4. D. Option D

Correct Answer: B