- (Exam Topic 3)
An engineer configured a router with this configuration
ip access-hst DENY TELNET
10 deny tcp any any eq 23 log-input
The router console starts receiving log message :%SEC-6-IPACCESSLOGP: list DENY_TELNET denied tcp 192.168.1.10(1022)(FastEthernet1/0 D508.89gb.003f) ->192.168.2.20(23), 1 packet"
Which action stops messages on the console while still denying Telnet?

1. A. Configure a 20 permit ip any any command
2. B. Remove log-Input keyword from the access list.
3. C. Replace log-input keyword with the log keyword in the access list.
4. D. Configure a 20 permit ip any any log-input command.

Correct Answer: B

- (Exam Topic 3)
An engineer configured VRF-Lite on a router for VRF blue and VRF red. OSPF must be enabled on each VRF to peer to a directly connected router in each VRF. Which configuration forms OSPF neighbors over the network 10.10.10.0/28 for VRF blue and 192.168.0.0/30 for VRF red?

1. A. Option A
2. B. Option B
3. C. Option C
4. D. Option D

Correct Answer: A

- (Exam Topic 3)

Refer to the exhibit A network engineer is troubleshooting an AAA authentication issue for R1 from R2 When an engineer tries to open a telnet connection to R1 it opens the connection but shows a %Authorization failed error message on the terminal and closes the connection silently Which action resolves the issue?

1. A. Resolve tacacs+ server host IP authentication miss configuration on the R1 router
2. B. Resolve tacacs+ server reachability from the R1 router.
3. C. Configure the tacacs+ server host IP on the R1 router
4. D. Configure authorization commands in the tacacs* server for the R1 router.

Correct Answer: D

- (Exam Topic 2)
What are two functions of LDP? (Choose two.)

1. A. It is defined in RFC 3038 and 3039.
2. B. It requires MPLS Traffic Engineering.
3. C. It advertises labels per Forwarding Equivalence Class.
4. D. It must use Resource Reservation Protocol.
5. E. It uses Forwarding Equivalence Class

Correct Answer: CE
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/mpls/configuration/guide/mpls_cg/mp

- (Exam Topic 2)
When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on
that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

1. A. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction
2. B. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction
3. C. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction
4. D. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction

Correct Answer: B