350-029 Q&A (3)

21.How to characterize the source and type in a denial of service attack on a router?
A: By applying an access-list to all incoming and outgoing interfaces,turning off route-cache on all interfaces,then,when telnetting into the router perform a debug IP packet detail
B: By perfornubg a show ip interface to see the type and source of the attack based upon the access-list matches
C: By setting up an access-list to permit all ICMP ,TCP ,and UDP traffic with the log or log-input commands ,then use the show access-list and show log commands to determine the type and source of attack
D: By performing a show interface to see the transmitted load “txload” and receive load “rxload” ;if the interface utilization is not maxed out ,there is no attack underway
Correct Answers: C

22.In which modes does selective packet discard(SPD)operate?(choose3)
A:normal
B:discard
C:random
D:full
Correct Answers: A, C, D

23.As described in rfc 3270,short-pipe mode operstion, what are the PE to CE egress polices based on?
A: Qos groups/discard class
B: customer marking
C: remarked IP tos value
D: MDRR quantam
Correct Answers: B

24.Which LSA type includes routes redistributed into an OSPF ASBR?
A: LSA type 3
B: LSA type 4
C: LSA type 5
D: LSA type 6
Correct Answers: C

25.In a frame ,what is the MPLS label imposed?
A: Within the Layer 3 header
B: After the Layer2 header and before Layer3 header
C: Before the layer 2 header
D: After the Layer3 header and before Layer2 header
Correct Answers: B

26.which two statements best describe urpf loose mode?
A:It is typically used on multipoint interfaces or on routers where asymmetrical routing is used(packets are received on one interface but the return path is not on the same interface);loose mode verifies a source address by looking in forwarding information base(FIB). Created by routing protocols, to verify there is a return route to the source and to venrify that the path uses a valid interface
B:If a packet fails the uRPF loose mode check, the packet is then transmitted and creates a log message
C:If a packet fails the uRPF loose mode check ,the packet is then dropped
D:None of above
Correct Answers: A, C

27.Which IOS feature is able to block IP spoofing attacks?
A: Cisco Express forwarding
B: MPLS traffic Engineering
C: IS-IS routing
D: Unicast Reverse Path Forwarding (uRPF)
Correct Answers: D

28.Which two of the following technologies could improve convergence time following a link failure in a service provider network?
A: MPLS TE FR
B: SNMP
C: BFD
D: VPLS
Correct Answers: A, C

29.For the following items, which is the BGP synchronization rule?
A: BGP neighbor peerings are established and sychronized using the TCP 3-way handshake.
B: Routing information received through an IBGP session is not forwarded to another IBGP neighbor, only to EBGP neighbors.
C: Routing information received through an EBGP session is not forwarded to another EBGP neighbor, only to IBGP neighbors.
D: BGP shall not advertise a route until that route has been learned via an IGP also.
Correct Answers: D

30.Which three AVPs (Attribute-Value Pair) must be present in the ICRQ?
A:Message Type
B:Called Number
C:Assigned Session ID
D:Call Serial Number
Correct Answers: A, C, D

Popularity: 3% [?]