- (Exam Topic 1)
Refer to the exhibit.

An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?

1. A. no ip ssh disable
2. B. ip ssh enable
3. C. ip ssh version 2
4. D. crypto key generate rsa

Correct Answer: D

- (Exam Topic 3)

Refer to the exhibit A CoPP policy is implemented to allow specific control traffic, but the traffic is not matching as expected and is getting unexpected behavior of control traffic. Which action resolves the issue?

1. A. Use match-any instruction in class-map
2. B. Create a separate class map against each ACL.
3. C. Create a separate class map lor ICMP traffic.
4. D. Use default-class to match ICMP traffic

Correct Answer: A

- (Exam Topic 2)

Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).
router bgp 64511
network 172.16.20.0 mask 255.255.255.0
network 172.16.21.0 mask 255.255.255.0
network 172.16.22.0 mask 255.255.255.0
network 172.16.23.0 mask 255.255.255.0
aggregate-address 172.16.20.0 255.255.252.0
After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?

1. A. router bgp 64511aggregate-address 172.16.20.0 255.255.252.0 summary-only
2. B. router bgp 64511neighbor 192.168.100.1 summary-onlyneighbor 192.168.200.2 summary-only
3. C. interface E 0/0ip bgp suppress-map BLOCK_SPECIFIC!interface E 0/1ip bgp suppress-map BLOCK_SPECIFIC!ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC
4. D. ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22 ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC!router bgp 64511aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

Correct Answer: A
When the aggregate-address command is used within BGP routing, the aggregated address is advertised, along with the more specific routes. The exception to this
rule is through the use of the summary-only command. The “summary-only” keyword suppresses the more specific routes and announces only the summarized
route.

- (Exam Topic 3)
Refer to the exhibit.

The network administrator configured the Chicago router to mutually redistribute the LA and NewYork routes with OSPF routes to be summarized as a single route in EIGRP using the longest summary mask:

After the configuration, the New York router receives all the specific LA routes but the summary route. Which set of configurations resolves the issue on the Chicago router?

1. A. Option A
2. B. Option B
3. C. Option C
4. D. Option D

Correct Answer: B

- (Exam Topic 3)
What are two characteristics of IPv6 Source Guard? (Choose two.)

1. A. requires IPv6 snooping on Layer 2 access or trunk ports
2. B. used in service provider deployments to protect DDoS attacks
3. C. requires the user to configure a static binding
4. D. requires that validate prefix be enabled
5. E. recovers missing binding table entries

Correct Answer: DE
IPv6 Source Guard uses the IPv6 First-Hop Security Binding Table to drop traffic from unknown sources or bogus IPv6 addresses not in the binding table. The switch also tries to recover from lost address information, querying DHCPv6 server or using IPv6 neighbor discovery to verify the source IPv6 address after dropping the offending packet(s).
Reference: https://blog.ipspace.net/2013/07/first-hop-ipv6-security-features-in.html