QUESTION NO: 1
Which two of these protocols can be used to provide secure connectivity when connecting a branch office to the campus core? (Choose two.)
A. GRE
B. L2TP
C. iPsec
D. IP in IP
E. L2TP over IPsec
Answer: C,E
QUESTION NO: 2
In the Cisco Catalyst 6513 Switch, which slots support the Supervisor Engine 720 and Supervisor Engine 32?
A. any slot
B. slots 1 and 2
C. slots 5 and 6
D. slots 7 and 8
E. slots 12 and 13

Answer: D


QUESTION NO: 3
When determining a customer's current WAN properties and requirements, what are four primary types of information that are required to characterize the networked applications? (Choose four.)
A. age of the applications
B. overall bandwidth requirements
C. platforms that the applications run on
D. delay tolerance and loss characteristics
E. types of applications that will be used
F. number and location of users and servers
Answer: B,D,E,F
QUESTION NO: 4

You have been given a contract to consolidate the Cisco Catalysts 6500 services available at the headquarters office of Acme Enterprises. The Acme Enterprises management team wants to deploy application infrastructure control, security, and simplicity in design. Which Cisco Catalyst service module should you recommend?
A. IDS module
B. Content Services Module with SSL
C. Network Analysis Module
D. Anomaly Guard Module
E. ACE module
Answer: E


QUESTION NO: 5
Which two of these tasks are important when designing for high availability? (Choose two.)
A. selecting high-end devices
B. identifying single points of failures
C. improving performance to consequently increase availability
D. introducing redundancy to mitigate potential single points of failure
E. removing devices and features that introduce single points of failures
Answer: B,D
QUESTION NO: 6
Your client is adding a new R&D facility to its existing, threE. building corporate campus. The new building will be four stories high and house from 150 to 400 employees. The client would like to deploy IP communications to this building and connect it to the existing campus TDM phone system. The new building will use collaborative workspaces for each team, and it will require that each team member have the flexibility to move among work areas yet remain connected to the network and receive phone calls. Which four technologies will be applicable here? (Choose four.)
A. wireless
B. switching
C. security
D. storage
E. poe
F. aons

Answer: A,B,C,E

QUESTION NO: 7
Which supervisor module can be used in the Cisco Catalyst 451 OR chassis?
A. Supervisor ll-Plus
B. Supervisor IV
C. Supervisor V-10GE
D. Supervisor ll-TS

Answer: C


QUESTION NO: 8
Which WAN type provides the most secure transport?
A. Frame Relay
B. Private WAN
C. Internet with SLA
D. IPsec over MPLS VPN
E. dial-up connection over a circuit-switched network
Answer: D


QUESTION NO: 9
Which two standards enable the PVDM module on the ISR to provide secure communications with IP Phones? (Choose two.)
A. SRTP
B. AES encryption
C. RUDP
D. RSA signature
E. MD5 hash
F. IPSec
Answer: A,B
QUESTION NO: 10

What queuE. scheduling algorithm does the Optical Services Module PXF use to provide QoS features?
A. FIFO
B. Modified Deficit
C. Weighted Round Robin
D. Versatile Traffic Management Services
Answer: D


QUESTION NO: 11
Refer to the exhibit. Your client has merged with another company and has decided to deploy an MPLS VPN to connect that company with its network. Which situation will be the result of implementing an MPLS VPN network?

A. The P and PE routers will share a common IGP
B. The PE routers will have been configured to run MPLS with the CE routers.
C. The PE routers will install the routes learned from the P routers in the appropriate VRF.
D. The PE routers will not install the backbone IGP routes in the global routing table, but rather in the MPLS backbone VRF.
E. The MPLS backbone, the P routers, will require BGP to be implemented to be able to label-switch packets from PE1 to PE2.
Answer: A


QUESTION NO: 12
Which two of these branch office network infrastructure designs include high availability? (Choose two.)
A. singlE. homed
B. singlE. tier branch profile
C. dual-tier branch profile
D. multi-tier branch profile

E. multi-homed design with a singlE. tier branch profile
Answer: C,D
QUESTION NO: 13
What are three important characteristics of the Cisco Catalyst 2960G-24TC switch? (Choose three.)
A. Each Ethernet 10/100/1000 port supports up to six priority queues each with two drop thresholds.
B. does not support 802.3afPoE
C. uses the GBIC/SFP form factor for dual-purpose ports
D. provides a maximum forwarding bandwidth of 32 Gbps
E. contains 24 Ethernet 10/100/1000 ports and 2 dual-purpose slot
Answer: B,C,D

QUESTION NO: 14
Which two of these features can be managed by the Cisco SDM application? (Choose two.)
A. VoIP
B. HSRP
C. IPsec VPN
D. QoS policy
E. PoE power consumption
Answer: C,D


QUESTION NO: 15
In a Cisco Catalyst 6500-E Series chassis, why is a special type of fan used?
A. Nonredundant power mode generates less heat, and consequently a slower fan speed can be used.
B. It provides additional cooling, which is required by new line cards that generate more heat due to increased power consumption.
C. A dual-speed fan is required to support the redundant and nonredundant power-mode features of the Catalyst 6500-E Series.

D. A larger fan is required to provide increased airflow because the Catalyst 6500-E Series has a smaller form factor; there isn't more heat, there is less room.
Answer: B


QUESTION NO: 16
Which two types of mechanisms can be used to provide load balancing across parallel links in a redundant campus network? (Choose two.)
A. QoS
B. hsrp
C. VRRP
D. 802.1Q
E. EtherChannel link aggregation
F. Cisco Express Forwarding load balancing
Answer: E,F
QUESTION NO: 17
Which layer in a hierarchical network is considered optional in smaller campus networks?
A. access
B. distribution
C. core
D. remote
E. DMZ
F. aggregation
Answer: C


QUESTION NO: 18
Which two of these are features of the Cisco 2851 Integrated Services Router, but not features of Cisco 1800 Series Integrated Services Routers? (Choose two.)
A. 32-Gbps switching bus
B. built-in wireless module
C. Cisco SDM for simplified management
D. two integrated 10/100/1000 Ethernet ports

E. Power over Ethernet support for 10/100 Ethernet ports
F. slots dedicated to Cisco High-Density Analog and Digital Extension Module for Voice and Fax
Answer: D,F
QUESTION NO: 19
What does the Cisco Unified Communications solution use to protect against unauthorized telephones joining the IP telephony network?
A. SRTP
B. call encryption
C. intrusion prevention
D. phone authentication
E. application-layer inspection

Answer: D
QUESTION NO: 20
Refer to the exhibit. Which would be a benefit of designing the OSPF network as shown?

A. Routes can be redistributed within the individual areas.
B. The backbone area does not need any internal routers.
C. Route summarization is enabled by default in this type of configuration.
D. Route summarization configuration at the ABRs is greatly simplified.

Answer: D QUESTION NO: 21



Which is a reliable network auditing methodology for discovering applications on the network and their usage characteristics?
A. Interview system administrators regarding the networked applications.
B. Conduct a network usage study over a given period of time.
C. Place a sniffer device on the network to grasp a snapshot of traffic on the network.
D. Conduct a network inventory of servers and applications installed on them.
Answer: B


QUESTION NO: 22
Which three of these are features of the Cisco Catalyst 4900 Series Switches? (Choose three.)
A. one RU
B. stackable
C. fixed configuration
D. Power over Ethernet
E. redundant power supplies
F. Layer 2 through Layer 7 switching capabilities
Answer: A,C,E
QUESTION NO: 23
Which security feature of a Cisco Catalyst 2960 Series Switch can be used to prevent clients from acquiring an IP address from unauthorized servers?
A. port security
B. 802.1Xin conjunction with Cisco Secure ACS
C. DHCP snooping
D. MAC address notification
Answer: C
QUESTION NO: 24

What are the three most common transport network options for connecting a branch office network to the campus core? (Choose three.)
A. LAN
B. PSTN
C. Internet
D. radio links
E. MPLS VPN F. Private WAN
Answer: C,E
QUESTION NO: 25
Your customer is opening a branch office housing 30 employees. It is beginning to implement IP Phones and plans on deploying a centralized Cisco CallManager cluster. Which two Cisco products should be deployed at the branch office to support IP Phones immediately while allowing migration to the centralized cluster when it is available? (Choose two.)
A. CSA
B. cme
C. CUE
D. IPS
E. SRST
Answer: B,C
QUESTION NO: 26
Your customer is relocating its data center to a new building. The new data center is two miles from the existing data center. The customer's scheduled maintenance window is too short to accommodate a flash cut, so it plans on relocating 25 percent of the servers on separate weekends. The customer does not wish to change the IP addresses of the servers and is trying to find a way to bridge its subnets between the two data centers during the migration period. Which Cisco product may be able to accomplish this?
A. SFS3000
B. Aironet 1120
C. Aironet 1400
D. Cisco IP Transfer Point
Answer: C QUESTION NO: 27



Refer to the exhibit. Interface serial 1 is a 128-kbps Frame Relay connection. What does the command framE. relay adaptivE. shaping been configure the router to do?

A. allows bursts to 80 kbps and sets the BECN bit when 72 kbps is exceeded
B. allows bursts to 128 kbps and sets the BECN bit when 80 kbps is exceeded
C. sends a frame with the BECN bit set when the committed burst size is exceeded
D. allows bursts to 80 kbps and throttles traffic down to the minCIR value when a frame is received with the BECN bit set
E. allows bursts to 128 kbps and throttles traffic down to the minCIR value when a frame is received with the BECN bit set
Answer: E


QUESTION NO: 28
Which of these spanning tree mechanisms can be used to ensure that access switches cannot become transit nodes in a spanning tree?

A. PortFast
B. UplinkFast
C. loop guard
D. root guard
E. BPDU guard
F. BPDU filter
Answer: D


QUESTION NO: 29
Which capability of EIGRP allows a failing router to retain the routing information of an EIGRP behavior?
A. NSF awareness
B. DUAL
C. feasible successor
D. AD
Answer: A


QUESTION NO: 30
In the Cisco Catalyst 6500-E Series chassis, what are three key chassis specifications? (Choose three.)
A. requires Cisco IOS 12.2(1 )SXD and beyond
B. threE. slot chassis supports CEF720 line cards
C. is backwarD. compatible with all existing software versions
D. six- and ninE. slot chassis support only 6000-W power supplies
E. supports all existing supervisors, line cards, switch fabrics, and software releases
Answer: B,C,E
QUESTION NO: 31
A client organization is investigating deploying IP communications. It has a traditional huB.anD. spoke Frame Relay WAN. It has five remote sites, and the WAN link speed for each location is 512 kbps. The WAN supports typical IP-based applications, but the client will also be rolling out a new ERP application that will be considered mission critical. Which three QoS mechanisms will be useful in redesigning the WAN to support the mission-critical application and IP communications? (Choose three )

A. LFI
B. CBWFQ
C. 5 to 11 class model
D. llq
E. crtp
F. WFQ
Answer: A,D,E

QUESTION NO: 32
Refer to the exhibit. Given the network topology, what function is OSPF Router E performing?

A. internal router
B. area border router
C. stub router
D. autonomous system border router

Answer: D QUESTION NO: 33



Your customer is deploying a server cluster using Cisco InfiniBand Server Switches. The customer wishes to connect the server cluster to its existing Ethernet campus. Which product should be used?
A. Catalyst6500
B. SFS3000
C. SFS7000
D. ASA 5500
Answer: B


QUESTION NO: 34
When issuing the Cisco IOS command show power in the Cisco Catalyst 6509 Switch, which four types of information can be gathered? (Choose four.)
A. IOS revision level
B. operational state
C. line card revision
D. power supply fan status
E. line card administrative state and slot location
F. power capacity in watts and amperage by chassis and line card
Answer: B,D,E,F
QUESTION NO: 35
You have received an RFP from a potential client to design a network for a new corporate campus. This campus will encompass administration, sales, and RSD, and it will pull all the distributed IT functions into a new data center. The campus will consist of five buildings, each with four floors. The buildings will be linked via high-stranD. count, singlE. mode fiber-optic cable to the new data center in building 3. Each building will have an MDF with at least one telco closet per floor and at least two runs of Category 5 UTP cable will go to each work location. Multistrand multimode will connect each telco closet to the MDF. Each MDF will have dedicated power circuits and be backed up by batteries in the basement of each building and a generator. The corporation will require 3500 TDM telephones and approximately 100 of these will be in a call center in building 2. The corporation needs to increase collaboration in the workforce. Employees need the flexibility to be able to move from one floor to another or from one building to another to accomplish their jobs. Managers also need this flexibility without losing connectivity to the corporate network or their phones.

Building 4 will house RSD. This portion of the network requires connectivity to the Internet, but it also must restrict which employees have access to certain parts of the RSD network. The data center will house all connections to the Internet and to the PSTN. The corporation also provides access to customers for customized applications support. A network operations center will monitor and maintain the network on a 365/24/7 basis. Which advanced technologies will be applicable to answering this RFP? (Choose three.)
A. security
B. IP communications
C. storage
D. data center
E. routing and switching
Answer: A,C,D

QUESTION NO: 36
The PVDM slots on the motherboard of the Cisco 2800 and 3800 ISR are used for what purpose?
A. to support built-in VPN acceleration providing high-performance Crypto offload
B. to support the high-performance AIM modules
C. to support the onboard TDM switch
D. to support the integrated DSPs for voice termination, conferencing and transcoding
E. to support the EVM

Answer: D


QUESTION NO: 37
Your network includes a Cisco Catalyst 6500 Switch with an FWSM module. You need Layer 2 connectivity between two routers located on different firewall interfaces. Which feature will you need in order to provide this connectivity?
A. router mode
B. virtual firewall
C. stateful firewall
D. transparent mode
E. two FWSM modules in failover mode
Answer: D QUESTION NO: 38


In a Cisco Catalyst 6509 Switch, in which slots can the Sup2 card be installed?
A. any slot
B. slots 1 and 2
C. slots 3 and 4
D. slots 5 and 6
E. slots 1 through 9
Answer: D


QUESTION NO: 39
You are required to upgrade the network of a multistory branch office building to support Cisco 7970 IP Phones throughout. Given that each phone uses 15.4 W, how many phones can a Cisco Catalyst 3750 support using Cisco Intelligent Power Management in a 48-port PoE configuration?
A. 8
B. 16
C. 24
D. 32
E. 48
Answer: C
QUESTION NO: 40 DRAG DROP Answer:



Explanation:


QUESTION NO: 41
Which three of the following characteristics are network fundamentals that provide WAN and LAN connectivity in the Integrated Services layer of the branch office design model? (Choose three.)
A. scalability
B. performance
C. management
D. high availability
E. quality of service
F. IP addressing and routing
Answer: D,E,F QUESTION NO: 42


Which two tools can you use to manage and configure a Cisco Catalyst Express 500 Series Switch? (Choose two.)
A. CLI
B. Cisco Network Assistant
C. Cisco Smartports Advisor
D. Device Manager with embedded GUI
Answer: B,D
QUESTION NO: 43
Which Cisco 7600 module allows the router to be used as an aggregator for high-speed remote WAN links and transparent LAN services?
A. CIP services
B. link aggregator
C. optical services
D. transport services
E. Enhanced FleXWAN
F. multiflex trunking

Answer: E


QUESTION NO: 44
Which of these is a deployment focus of the Cisco Catalyst 4500 Series Switches?
A. network core
B. limiteD. space server rack
C. high-density wiring closet
D. medium to large branch offices
Answer: D

QUESTION NO: 45
Which three statements are correct regarding SDMv2.0? (Choose three.)
A. supports smart wizards with built-in intelligence about recommended Cisco IOS configurations for different use scenarios

B. extends its scope to other functions besides security, such as QoS policy configuration
C. provides industry-leading security management tool available for all Cisco router and Catalyst switch platforms
D. supports only HTTPS access, and not HTTP
E. supports rolE. based access
Answer: A,B,E
QUESTION NO: 46
Refer to the exhibit. Given that the network is running OSPF routing protocol over the WAN, which type of OSPF routing is being used on the router labeled "Mollie"?

A. point to point
B. virtual link
C. point to multipoint
D. route redistribution

Answer: C


QUESTION NO: 47
You have been given a contract to redesign a customer's network in order to provide support order to more effectively identify this customer's needs, you would like to analyze the traffic in to perform this analysis? (Choose two.)
A. RMON probes
B. NBAR
C. access control lists
D. NetFlow
E. embedded device manager

Answer: B,D
QUESTION NO: 48
Refer to the exhibit. In an analysis of the existing customer network shown, you notice that when issuing the show arp command there is no MAC address associated with the workstation. Which of the following could be the reason?

A. R4 Ethernet0 interface is running SNAP encapsulation.
B. The workstation NIC card is not running the same encapsulation as R4.
C. R4 needs to perform a RARP request to retrieve the MAC address of the workstation. D. The workstation would not return a MAC address because it is not running a routing protocol.
E. R4 needs to have a static route configured for the workstation in order for the ARP process to return a MAC address.

Answer: B


QUESTION NO: 49
Given a Cisco Catalyst 4500 Series Switch with redundant supervisors, what feature allows phone calls to remain up in the event of a supervisor failure?
A. HSRP
B. SSO
C. CEF
D. NSF
E. NetFlow
Answer: B QUESTION NO: 50


What are three reasons to design Layer 3 routing into the core of a campus LAN environment?
A. to implement security
B. to design scalable networks
C. to implement address structure
D. to improve backbone performance
E. to remove spanning tree from the core
Answer: B,C,E
QUESTION NO: 51
Refer to the exhibit. What are three key benefits of implementing this branch solution using the components listed? (Choose three.)

A. supports standard 802.3afPoE
B. provides feature parity with the Cisco Catalyst 3750 Series of switches
C. provides integrated configuration of both routing and switching functions under a single Cisco IOS instance.
D. switch ports can be stacked with external Catalyst Series switches using Cisco StackWise technology
E. maximizes concurrent routing and switching performance by using local processors and switching engines
Answer: A,B,E

QUESTION NO: 52
Your customer wishes to eliminate the expense of distributing training videotapes to each location but is worried about bandwidth consumption affecting critical business applications. Which network module can be added to ISRs to allow the customer to distribute the videos over the WAN with minimal impact on bandwidth?

A. NM-CUE. EC
B. NM-16ESW-1GIG
C. NM-HDV
D. NM-CE. BP-40G

Answer: D


QUESTION NO: 53
Refer to the exhibit. Based on this network diagram and output from a show cdp neighbors Cisco IOS command, on which network device is the command being executed?

A. BBSW2
B. DSW11
C. ASW11
D. ASW12
Answer: B


QUESTION NO: 54
Which Cisco Catalyst 6500 Series Switch supervisor module should you select in order to allow service providers to deploy MPLS and achieve high throughput?
A. Supervisor32
B. Supervisor 720

C. Supervisor 1A
D. Supervisor 2
Answer: B


QUESTION NO: 55
You have a client that currently has a single connection to an ISP. Your client is growing rapidly and would like to provide more capacity to the Internet without losing the ability to support high availability. Which methodology will support dual-homed connections to the same ISP and also support high availability?
A. VRRP
B. HSRP
C. RPR+
D. GLBP
Answer: D


QUESTION NO: 56
Refer to the exhibit. The network is running the EIGRP routing protocol. Distribution router 1 loses the link to the corporate network. How should the remote spoke router be configured to prevent it from being the next-lowest-cost path to network 10.3.1.0?

A. Disable split horizon.
B. Configure it as an EIGRP stub router.
C. Enable route filtering.
D. Configure a floating static route to network 10.3.1.0.

Answer: B


QUESTION NO: 57
Which of these features makes a Cisco 7300 Series Router the preferred choice when hardwarE. accelerated IP processing is required?
A. Parallel Express Forwarding (PXF)
B. high-speed switching bus
C. NPE. G2 network processing engine
D. optimized port adapter-to-port adapter traffic flow
Answer: A


QUESTION NO: 58
Which of these is a deployment focus of the Cisco Catalyst 4900 Series Switches?
A. network core
B. limiteD. space server rack
C. high-density wiring closet
D. medium to large branch offices
Answer: B


QUESTION NO: 59
Refer to the exhibit. The customer needs to implement the network topology shown. The path B.C. E has a cost of 10, and the path B.D. E has a cost of 20. After analyzing the exhibit, do you believe that load sharing can occur over these two paths?


A. yes, if using IS-IS and you have tuned the timers for the SPF calculation
B. only if using MPLS, and router F and router A are eBGP neighbors
C. yes, if using RIP and the command parameter max-paths 2 has been configured
D. only by using OSPF, because the SPF calculation will flood all the domain information to all OSPF areas
E. only if using EIGRP and as long as the B.D. E link is proven to be loop free, load sharing is possible in proportion to the link costs.
Answer: E


QUESTION NO: 60
Your retail customer has 330 branch locations that it wishes to connect via Frame Relay. At the headquarters location there will be two DS-3 Frame Relay circuits, each connected to an ISR 3845 router. Each branch location will have a fractional T1 with a 128-kbps CIR and a PVC mapped to each of the DS-3 circuits. Which two considerations must be addressed for this design? (Choose two.)
A. The MTU for the Frame Relay circuits should be set to 4470 to allow the LMI message to include all 330 DLCIs.
B. Additional routers and circuits should be installed at headquarters so that no more than 200 branch locations are mapped to each ISR due to IDB limitations.
C. The customer should not run OSPF. Since all branches are connected to the same circuit at headquarters they must be in the same OSPF area and the number of branches exceeds the design recommendations for routers in an OSPF area.

D. Frame Relay traffic shaping should be implemented to prevent congestion in the Frame Relay switch. 1 E. The CIRs should be reduced so the DS-3 circuits are not oversubscribed.
Answer: A,D
QUESTION NO: 61
Refer to the exhibit. Which network is characterized by the output from the show cdp neighbors command?

A. Network 1
B. Network 2
C. Network 3
D. Network 4

Answer: A


QUESTION NO: 62
A small business wants to deploy IP telephony across its enterprise but lacks the expertise and staffing to plan and deploy the service. Its concerns include cost, ensuring voice quality, and time to deployment. Given only these requirements, what is the appropriate option to recommend?
A. Provision the network using AutoQoS VoIP.
B. Configure NBAR for stateful packet inspection.

C. Use CBWFQ.
D. Configure each router to mark VoIP packets as CoS 5.
Answer: A


QUESTION NO: 63
To improve performance on the ISR platforms when supporting concurrent integrated services, the network modules, HWICs, AIMs, and DSPs connect directly into which hardware component?
A. custom ASIC
B. SCSI bus
C. PCI bus
D. crossbar bus
E. CPU
Answer: A


QUESTION NO: 64
Which two of these layers are both part of the SONA Framework? (Choose two.)
A. Unified Messaging layer
B. Distribution layer
C. Interactive Services layer
D. Core layer
E. Network Infrastructure layer
F. Services Architecture layer
Answer: C,E
QUESTION NO: 65
The servers belonging to your customer were recently infected with the Blaster virus. Which Cisco product will help prevent this kind of virus propagation?
A. CSA
B. PIX
C. CUE
D. CME


Answer: A


QUESTION NO: 66
You have a customer that is looking to mitigate DDOS attacks. Which two of the following Cisco security products would you recommend to meet this need? (Choose two.)
A. Cisco IPS
B. Cisco ASA
C. Cisco IOS Firewall
D. Cisco Anomaly Guard Module
E. Cisco Firewall Services Module
F. Cisco Traffic Anomaly Detector Module
Answer: B,D
QUESTION NO: 67
What are the two main benefits of using VSANs as opposed to zoning? (Choose two.)
A. increased capacity
B. increased availability
C. increased performance
D. increased geographical reach
E. increased manageability and scalability
Answer: B,E


QUESTION NO: 68
What three network applications are enabled via Cisco NetFlow? (Choose three.)
A. application profiling
B. user profiling
C. security analysis
D. quality of service
E. topology mapping
F. network modeling
Answer: A,B,C