Free Practice Questions for Cisco 350-501 Exam

The keyword ‘none’ is essential in management plane security using TACACS to ensure that authentication can still succeed when the TACACS+ server is unreachable. This fallback mechanism allows network resources to remain accessible even if the TACACS+ server fails or becomes unreachable. References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) - Management Plane Security section.

 To prevent packets from being forwarded beyond the service provider domain when the Label Switched Path (LSP) is down, the engineer must configure a private IP address as the destination address of the headend router of Cisco MPLS Traffic Engineering (TE). This ensures that if the LSP fails, the packets will not be routable over the public internet, thus containing them within the service provider’s network.

References := Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) documentation provides guidelines on MPLS TE configuration, including the use of private IP addresses for headend routers to maintain traffic within the service provider domain. This practice is aligned with the principles of traffic engineering and network containment for service providers.

The QoS-group keyword on Cisco IOS XR is used for marking packets on the ingress of the device. This allows for internal handling and is not transmitted across the network. It can be used in fabric QoS policy as a match criteria to apply specific policies based on the QoS group marking.

 The iosxr_command module in Ansible is used to issue commands on remote devices running Cisco IOS XR. This module allows network administrators to execute operational commands on Cisco routers and switches, which is essential for tasks such as retrieving information or applying configuration changes. It is a part of network automation using Ansible, which simplifies the management of network devices by automating repetitive tasks.

 The issue likely lies in the customer platforms’ default policy, which restricts E-BGP route exchange. References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) course materials.

https://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k-r6-2/routing/configuration/guide/b-routing-cg-asr9000-62x/b-routing-cg-asr9000-62x_chapter_010.html

 QPPB (QoS Policy Propagation via BGP) is a mechanism that allows the application of QoS policies using IP precedence or QoS group settings based on BGP community lists, AS paths, and prefix lists. In the context of the exhibit provided, it’s clear that QPPB is being used to apply a specific QoS policy (qos-group 10) based on AS path attributes. This aligns with option C, as it indicates that QoS policies are utilizing BGP to achieve comprehensive network coverage.

IS-IS uses NET addresses to identify each router in the network, and the NET address of each router must be unique. In order for IS-IS to establish connectivity between R1 and R3, the NET address of R3 must be different from the NET address of R1, but it must also follow the same structure. In this case, the NET address of R1 is 49.0133.532b.ca14.6915.21311.F40F.1B3a.ba10.00, so the NET address of R3 must be 49.0133.532b.ca14.6915.21311.F40F.1B4a.bb87.00.

 The router RA is configured with the command “ip pim ssm default”. This configuration enables Source-Specific Multicast (SSM) for the default range of 232.0.0.0/8, which is the IPv4 multicast address space reserved for SSM by IANA (Internet Assigned Numbers Authority). In SSM, data traffic is delivered to a specific group of subscribers identified by the combination of both source and multicast addresses, enhancing efficiency and security. References: Implementing and Operating Cisco Service Provider Network Core Technologies

The script in the exhibit is for configuring a static VLAN (Option D). The XML configuration specifies a static VLAN range with “allocMode=‘static’”, indicating that VLAN IDs are assigned manually, not dynamically.

References := These explanations are derived from the concepts outlined in the Cisco Service Provider source book, specifically the “Implementing and Operating Cisco Service Provider Network Core Technologies” course materials,

When creating new Cisco MPLS TE tunnels, the headend router sends a Path message to reserve bandwidth on the path to the tunnel’s tailend router. The Path message is part of the RSVP (Resource Reservation Protocol) used in signaling and establishing MPLS TE tunnels. It carries information about the requested resources and desired parameters for the tunnel123. References: Configuring MPLS TE RSVP, MPLS TE RSVP-TE, MPLS TE Theory.

The configuration shown in the exhibit is used to disable IP directed-broadcasts on a specific interface of a network device. This is typically done to mitigate smurf attacks, which involve sending a large amount of ICMP echo (ping) traffic to IP broadcast addresses, all having a spoofed source address of the victim’s IP. By disabling IP directed-broadcasts, the network device will not forward packets that are sent to broadcast addresses, thus mitigating this type of DDoS attack. References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) - Module on Security in the Service Provider Network