NEW QUESTION 1
Which VPN technology uses the Group Domain of Interpretation as the keying protocol and IPsec for encryption that is often deployed over a private MPLS core network?

• A. DMVPN
• B. GET VPN
• C. SSL VPN
• D. L2TPv3

Answer: B

Explanation:
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635/ps7180/deployment_guide_c07_554 713.html

NEW QUESTION 2
When implementing MPLS Layer 3 VPNs with customers running OSPF as the CE-PE routing protocol, the service provider MPLS backbone looks like what to the CE routers?

• A. the backbone {Area 0}
• B. an external routing domain
• C. a superbackbone that is transparent to the CE OSPF routers
• D. a transit area {similar to a transit area for supporting virtual links}

Answer: C

NEW QUESTION 3
A network engineer is troubleshooting an MPLS Layer 3 VPN and discovers that routes are being learned by CE routers, but there is no IP connectivity. Which option is the most likely cause?

• A. The provider does not have an end-to-end label switch path.
• B. The customer does not have an end-to-end label switch path.
• C. The customer is not sharing labels with the provider.
• D. The provider is not sharing labels with the customer.
• E. The providers PE to CE routing protocol is misconfigured.
• F. The customers PE to CE routing protocol is misconfigured.

Answer: A

NEW QUESTION 4
In Layer 3 MPLS VPN implementations, if a customer is using the same AS number at both customer sites and the PE- to-CE routing protocol is BGP, what must be enabled on the PE router?

• A. BGP AS override
• B. BGP allowas-in
• C. BGP SOO extended community
• D. BGP AS path prepending

Answer: A

Explanation:
https://supportforums.cisco.com/docs/DOC-21837
Loop prevention in BGP is done by verifying the AS number in the AS Path. If the receiving router sees its own AS number in the AS Path of the received BGP packet, the packet is dropped. The receiving Router assumes that the packet was originated from its own AS and has reached the same place from where it originated initially.
The feature could be a disaster if customers are using same AS number along the various sites and disallows customer sites having identical AS numbers to be linked by another AS number. In such a scenario, routing updates from one site will be dropped when the other site receives them.
To override this feature, AS-Override function causes to replace the AS number of originating router with the AS number of the sending BGP router. The command is neighbor ip-address as-override and can only be executed under the VPNv4 address-family

NEW QUESTION 5
Refer the exhibit.




On PE7, which interface connects to the CE7 and what is the name of the VRF that interface is associated to? {Choose two.}

• A. Gi0/0/0/0
• B. Gi0/0/0/1
• C. Gi0/0/0/2
• D. Customer_1
• E. Customer_A
• F. Customer_CE7

Answer: BC

Explanation:
# show ip vrf interfaces

NEW QUESTION 6
Refer the exhibit.




On PE7, which three statements are correct regarding the MPLS VPN configurations used to support the connectivity between the CE7 and CE8 sites? {Choose three.}

• A. The RD is 1:1
• B. The import and export RTs are 1:1
• C. Interface GiO/0/0/0 is associated to the "default" VRF
• D. The network that connects PE7to CE7 is redistributed into multiprotocol IBGP
• E. The multiprotocol IBGP routes learned have a BGP origin code of "i"

Answer: BCE

Explanation:
# show ip route show ip vrf
show ip vrf detail

NEW QUESTION 7
Which VPN technology allows remote sites with dynamic IP addresses to connect to a central hub?

• A. static IPsec tunnels
• B. site-to-site VPN
• C. DMPVN
• D. VRFs

Answer: C

NEW QUESTION 8
Which flavor of MPLS Layer 3 VPN has MPLS enabled on PE-CE links?

• A. basic
• B. CSC
• C. inter-AS
• D. AToM
• E. VPLS

Answer: B

Explanation:
http://www.cisco.com/en/US/docs/ios/12_0st/12_0st14/feature/guide/csc.html

NEW QUESTION 9
When troubleshooting EoMPLS configuration problems, which three parameters must match between the two ends of the pseudowire configurations? {Choose three.}

• A. control word usage
• B. MTU size
• C. pseudowire ID
• D. Xconnect group name
• E. EFP subinterface number

Answer: ABC

Explanation:
Provisioning an AToM Static Pseudowire
In this configuration task, you use options in the xconnect Ethernet interface configuration command to specify a static connection, and mpls commands in xconnect mode to statically set the following pseudowire parameters:
•Set the local and remote pseudowire labels
•Enable or disable sending the MPLS control word


Haven't been able to find where MTU Must match

NEW QUESTION 10
A company recently completed a third company acquisition and is requesting to deploy a point-to-point VPN technology over the IP core network to extend their IGP domain. The company core network is not MPLS-enabled yet. Which technology matches these requirements?

• A. Any Transport over MPLS
• B. Layer 2 Tunneling Protocol version 3
• C. Virtual Private LAN Service
• D. Point-to-Point Protocol

Answer: B

NEW QUESTION 11
Refer the exhibit.



Which statement is correct regarding the pseudowire on connects PE7 to the 10.8.1.1 neighbor?

• A. The control word is enabled on both ends of the pseudowire
• B. The MTU size is 1500 bytes on both ends of the pseudowire
• C. Pseudowire backup is enabled
• D. The pseudowire is in the down state

Answer: B

Explanation:

show xconnect all
show ip interface brief
show mpls l2transport vc
show cable l2-vpn xconnect mpls-vc-map

NEW QUESTION 12
Which option is the minimal configuration required inside the L2VPN section of a Cisco IOS XR PE router to activate VPLS functionality?

• A. l2vpnbridge group test bridge-domain testinterface TenGigE0/0/0/1.30!vfi testvpn-id 600 autodiscovery bgp rd 10.10.10.1:30route-target 1:300 signaling-protocol bgp ve-id 10
• B. l2vpnbridge group test bridge-domain testinterface TenGigE0/0/0/1.30!vfi testneighbor 10.10.10.2 pw-id 1400mpls static label local 1400 remote 1500
• C. l2vpnbridge group test bridge-domain testinterface TenGigE0/0/0/1.30!vfi testneighbor 10.10.10.2 pw-id 1400
• D. l2vpnbridge group test bridge-domain testinterface TenGigE0/0/0/1.30!vfi testvpn-id 600 autodiscovery bgp rd 10.10.10.1:30route-target 1:300 signaling-protocol bgp
• E. l2vpnbridge group test bridge-domain test vfi test autodiscovery bgp rd 10.10.10.1:30route-target 1:300 signaling-protocol bgp ve-id 10

Answer: C

NEW QUESTION 13
When verifying Layer 3 MPLS VPN operations, which Cisco IOS XR show command is best used to verify that the PE router is receiving the routes from the CE router?

• A. show route
• B. show route vrf vrf-name
• C. show bgp vpnv4 vrf vrf-name
• D. show bgp vpnv4 unicast ip-prefix

Answer: B

Explanation:
http://www.cisco.com/en/US/docs/ios_xr_sw/iosxr_r3.7/routing/configuration/guide/rc37rib.html

NEW QUESTION 14
VPWS/EoMPLS offers which type of Ethernet services as defined by the MEF?

• A. E-Tree
• B. E-LAN
• C. E-Line
• D. E-Interworking

Answer: C

Explanation:

• E-Line is based on a point-to-point Ethernet Virtual Connection. Two E-Line services are defined:
- Ethernet Private Line {EPL}: A very simple and basic point-to-point service characterized by low frame delay, frame delay variation, and frame loss ratio. No service multiplexing is allowed, and other than a committed information rate {CIR} no class of service {CoS} {Bandwidth Profiling} is allowed.
- Ethernet Virtual Private Line {EVPL}: A point-to-point service wherein service multiplexing {more than one Ethernet Virtual Connection} is allowed. The individual Ethernet Virtual Circuits can be defined with a rich set of Bandwidth Profiles and Layer 2 Control Protocol Processing methods as defined by the Metro Ethernet Forum.

NEW QUESTION 15
When configuring an EoMPLS PW on a Cisco IOS XR router, what are the two supported transport modes? {Choose two.}

• A. ethernet {Ethernet port mode}
• B. ip {routed mode}
• C. vlan {VLAN-tagged mode}
• D. transparent {bridged mode}

Answer: AC

Explanation:
http://www.cisco.com/en/US/docs/ios_xr_sw/iosxr_r3.8/mpls/configuration/guide/gc38v2.html#wp1072883
•Ethernet Port Mode
•Ethernet Remote Port Shutdown
•VLAN Mode
•Inter-AS Mode
•QinQ Mode
•QinAny Mode
•Mac-in-Mac Protocol {Provide Backbone Bridging}

NEW QUESTION 16
A network engineer is tasked to implement an AToM VPN for a given customer to emulate a Frame Relay virtual circuit over the MPLS-enabled core network. Which command enables Frame Relay to forward frames from the attachment circuit over the emulated session in regular Cisco IOS Software?

• A. ip route 0.0.0.0 0.0.0.0 tailend_router_ip
• B. encapsulation frame-relay
• C. frame-relay switching
• D. frame-relay intf-type dce

Answer: C

NEW QUESTION 17
What is required on a Cisco IOS XR router to assign an interface to a VRF?

• A. Assign the VRF to the interface, and then re-enable Cisco Express Forwarding on the interface.
• B. Assign the VRF to the interface, and then reset the CE-to-PE routing protocol process.
• C. Shut the interface, assign the VRF to the interface, and then no shut the interface.
• D. Remove the IP address configuration on the interface, assign the VRF to the interface, and then reconfigure the IP address on the interface.

Answer: D

Explanation:
http://www.cisco.com/en/US/docs/ios_xr_sw/iosxr_r3.5/mpls/configuration/guide/gc35v3.html#wp1080845

NEW QUESTION 18
A service provider wants to scale MAC address advertisements in its next generation E-LAN and E-TREE designs. Which technology can be used in the service provider cloud to reach this goal?

• A. PBB EVPN
• B. VPLS
• C. 802.1Q
• D. 802.3ad

Answer: A

NEW QUESTION 19
Which two MPLS QoS models described by RFC3270 are used for CE-PE QoS implementation? {Choose two.}

• A. best effort
• B. pipe
• C. uniform
• D. integrated services
• E. differentiated services

Answer: BC

NEW QUESTION 20
A customer requests Internet through its MPLS provider. Which Internet design model guarantees maximum security and easier provisioning?

• A. Internet access through global routing
• B. Internet access through route leaking
• C. Internet access through a separate VPN service
• D. Internet access through multisite

Answer: C

NEW QUESTION 21
Refer to the Cisco IOS XR router output exhibit,

which method is being used to transport IPv6 traffic over the service provider network?

• A. 6PE
• B. 6VPE
• C. native IPv6
• D. native IPv4
• E. dual stack

Answer: B

Explanation:
NOT SURE THIS MATCHES ANSWER

NEW QUESTION 22
Which option is the correct command to define an interface as Layer 2 on the Cisco ASR 9000?

• A. RP/0/RSP0/CPU0:R1{config}#int gigabitEthernet 0/6/0/0 l2transport
• B. RP/0/RSP0/CPU0:R1{config}#int gigabitEthernet 0/6/0/0 layer2
• C. RP/0/RSP0/CPU0:R1{config}#int gigabitEthernet 0/6/0/0 switchport
• D. RP/0/RSP0/CPU0:R1{config}#int gigabitEthernet 0/6/0/0 xconnect

Answer: A

Explanation:

NEW QUESTION 23
......