Designing Cisco network Service Architectures (ARCH)

1. Which of these Layer 2 access designs does not support VLAN extensions?
A. FlexLinks
B. loop-free U
C. looped square
D. looped triangle
E. loop-free inverted U
Answer: B
 
2. Which of these is a Layer 2 transport architecture that provides packet-based transmission optimized for data based on a dual (counter-rotating) ring topology?
A. DTP
B. RPR
C. SDH
D. CWDM
E. DWDM
Answer: B
 
3. Which three of these are elements of the Cisco Unified Wireless Network architecture? (Choose three)
A. cell phones
B. remote access
C. mobility services
D. network management
E. network unification
F. network decentralization
Answer: CDE

4. Refer to the exhibit. Which two of these are correct regarding the recommended practice for distribution layer design? (Choose two.)
A. use a redundant link to the core
B. use a Layer 2 link between distribution switches
C. never use a redundant link to the core because of convergence issues
D. use a Layer 3 link between distribution switches with route summarization
E. use a Layer 3 link between distribution switches without route summarization
Answer: AD

5. Which of these terms refers to call issues that cause variations in timing or time of arrival?
A. queuing
B. jitter
C. packet loss
D. digitized sampling
E. signal-to-noise ratio ratio
Answer: B

6. Which two of these are characteristics of an IDS sensor? (Choose two.)
A. passively listens to network traffic
B. is an active device in the traffic path
C. has a permissive interface that is used to monitor networks
D. traffic arrives on one IDS interface and exits on another
E. has a promiscuous interface that is used to monitor the network
Answer: AE

7. In base e-Commerce module designs, where should firewall perimeters be placed?
A. core layer
B. Internet boundary
C. aggregation layer
D. aggregation and core layers
E. access and aggregation layers
Answer: A

8. In which two locations in an enterprise network can an IPS sensor be placed? (Choose two.)
A. bridging VLANs on two switches
B. bridging two VLANs on one switch
C. between two Layer 2 devices with trunking
D. between two Layer 2 devices without trunking
E. between a Layer 2 device and a Layer 3 device with trunking
Answer: CD

9. What is a virtual firewall?
A. another name for a firewall deployed in routed mode
B. another name for a firewall deployed in transparent mode
C. a separation of multiple firewall security contexts on a single firewall
D. a firewall that, when deployed in routed mode, can support up to 1000 VLANs per context
E. a firewall that has multiple contexts, all of which share the same policies (such as NAT and ACLs)
Answer: C

10. In a VoWLAN deployment, what is the recommended separation between cells with the same channel?
A. 19 dBm
B. 7 dBm
C. 10 dBm
D. 6 dBm
E. 5 dbm to 10 dBm
Answer: A

11. Why is STP required when VLANs span access layer switches?
A. to ensure a loop-free topology
B. to protect against user-side loops
C. in order to support business applications
D. because of the risk of lost connectivity without STP
E. for the most deterministic and highly available network topology
Answer: B

12. Which site-to-site VPN solution allows Cisco routers, PIX Firewalls, and Cisco hardware clients to act as remote VPN clients in order to receive predefined security policies and configuration parameters from the VPN headend at the central site?
A. Easy VPN
B. GRE tunneling
C. Virtual Tunnel Interfaces
D. Dynamic Multipoint VPN
E. Group Encrypted Transport VPN
Answer: A

13. Which two design concerns must be addressed when designing a multicast implementation? (Choose two.)
A. only the low-order 23 bits of the MAC address are used to map IP addresses
B. only the low-order 24 bits of the MAC address are used to map IP addresses
C. only the high-order 23 bits of the MAC address are used to map IP addresses
D. only the low-order 23 bits of the IP address are used to map MAC addresses
E. the 0x01004f MAC address prefix is used for mapping IP addresses to MAC addresses
F. the 0x01005e MAC address prefix is used for mapping IP addresses to MAC addresses Answer: AF

14. Which two of these are recommended practices with trunks? (Choose two.)
A. use ISL encapsulation
B. use 802.1q encapsulation
C. set ISL to desirable and auto with encapsulation negotiate to support ILS protocol negotiation
D. use VTP server mode to support dynamic propagation of VLAN information across the network
E. set DTP to desirable and desirable with encapsulation negotiate to support DTP protocol negotiation.
Answer: BE

15. For acceptable voice calls, the packet error rate should be no higher than what value?
A. 0.1%
B. 1%
C. 2.5%
D. 25%
Answer: B

16. Which of these statements is true of clientless end-user devices?
A. They do not receive unique IP addresses.
B. RADIUS or LDAP is required in order to assign IP addresses.
C. They are assigned addresses from the internal DHCP pool.
D. Their traffic appears to originate from the originating host network.
Answer: A

17. Which statement is correct regarding NBAR and NetFlow?
A. NetFlow uses five key fields for the flow.
B. NBAR examines data in Layers 3 and 4.
C. NetFlow examines data in Layers 3 and 4.
D. NBAR examines data in Layers 2 through 4.
E. NetFlow examines data in Layers 2 through 4.
Answer: B

18. What is meant by the term "firewall sandwich"?
A. multiple layers of firewalling
B. a method of operating firewalls from multiple vendors
C. firewall connections in either an active or standby state
D. an architecture in which all traffic between firewalls goes through application-specific servers
E. an architecture in which all traffic between firewalls goes through application-specific gateways
Answer: A

19. When BGP tuning is used, how is packet flow into the e-commerce module controlled?
A. by tracking the status of objects along the path to the e-commerce module
B. by detecting undesirable conditions along the path to the e-commerce module
C. by using the MED to communicate the site preferences for traffic to multiple ISPs
D. by communicating the available prefixes, routing policies, and preferences of each site to its ISP
E. by moving the SLB to a position where selected traffic to and from the servers does not go through the SLB
Answer: D

20. Which three Layer 2 access designs have all of their uplinks in an active state? (Choose three.)
A. Flex Links
B. loop-free U
C. looped square
D. looped triangle
E. loop-free inverted U
Answer: BCE

21. Which signal and noise values will result in the best phone communication with an access point?
A. signal strength 6dBm, noise level 5dBm
B. signal strength 4dBm, noise level 4dBm
C. signal strength 8dBm, noise level 9dBm
D. signal strength 0dBm, noise level 6dBm
Answer: A

22. A remote user needs a static IP address to support a specific application. Which remote access VPN addressing technique supports this?
A. Deploy RADIUS or LDAP to assign the address to the user.
B. Use DHCP to assign addresses based on incoming user policies.
C. Deploy a clientless model to assign a unique address to the user.
D. Use an internal address pool per VPN headend; use with ACLs and a static route to the VPN headend.
Answer: A

23. Which two of these are characteristics of an IPS device? (Choose two.)
A. passively listens to network traffic
B. is an active device in the traffic path
C. has a permissive interface that is used to monitor networks
D. traffic arrives on one IPS interface and exits on another
E. has a promiscuous interface that is used to monitor the network
Answer: BD

24. Which four Cisco Spanning Tree Protocol enhancements are supported with rapid per-VLAN Spanning-Tree plus? (Choose four.)
A. PortFast
B. UplinkFast
C. loop guard
D. root guard
E. BPDU guard
F. BackboneFast
Answer: ACDE

25. A customer has eight sites and plans to increase that number in the future. Branch site to branch site traffic is approaching 30 percent. The customer's goals are to make it easier to add branch sites in the future and to reduce traffic through the hub.
Which VPN topology should you recommend to this customer?
A. Easy VPN
B. GRE tunneling
C. Virtual Tunnel Interfaces
D. Dynamic Multipoint VPN
E. Group Encrypted Transport VPN
Answer: D

26. Which two of these key fields are used to identify a flow in a traditional NetFlow implementation? (Choose two.)
A. source port
B. output interface
C. next-hop IP address
D. source MAC address
E. destination IP address
F. next-hop MAC address
Answer: AE

27. Which two statements correctly describe an IPS device? (Choose two.)
A. It resembles a Layer 2 bridge.
B. Traffic flow through the IPS resembles traffic flow through a Layer 3 router.
C. Inline interfaces which have no IP addresses cannot be detected.
D. Malicious packets that have been detected are allowed to pass through, but all subsequent traffic is blocked.
E. Traffic arrives on the detection interface, is inspected, and exits via the same interface.
Answer: AC

28. What two descriptions best define DWDM? (Choose two.)
A. a WDM system that is compatible with EDFA technology
B. an optical technology for transmitting up to 16 channels over multiple fiber strands
C. an optical technology for transmitting up to 32 channels over multiple fiber strands
D. a technology for transmitting multiple optical signals using less sophisticated transceiver designs then CWDM
E. a technology for transmitting more closely packed optical signals using more sophisticated transceiver designs than CWDM
Answer: AE

29. Which two statements correctly identify considerations to take into account when deciding on Campus QoS Design elements? (Choose two.)
A. Voice needs to be assigned to the hardware priority queue.
B. Voice needs to be assigned to the software priority queue.
C. Call signaling must have guaranteed bandwidth service.
D. Strict-priority queuing should be limited to 50 percent of the capacity of the link.
E. At least 33 percent of the link bandwidth should be reserved for default best-effort class. Answer: AC

30. Which two of these are characteristics of multicast routing? (Choose two.)
A. multicast routing uses RPF.
B. multicast routing is connectionless.
C. In multicast routing, the source of a packet is known.
D. When network topologies change, multicast distribution trees are not rebuilt, but use the original path
E. Multicast routing is much like unicast routing, with the only difference being that it has a a group of receivers rather than just one destination
Answer: AC