Refer to the exhibit. An engineer is monitoring reachability of the configured default routes to ISP1 and ISP2. The default route from ISP1 is preferred if available. How is this issue resolved?
Correct Answer: D
Question 547
How does an MPLS Layer 3 VPN function?
Correct Answer: D
Explanation A Multiprotocol Label Switching(MPLS) Layer 3 Virtual Private Network (VPN) consists of a set of sites that are interconnected by means of an MPLS provider core network. At each customer site, one or more customer edge (CE) routers attach to one or more provider edge (PE) routers.
Question 548
Which Catalyst 6500 feature provides network-security enforcement based on Layer 2, Layer 3, and Layer 4 information on a VLAN?
Correct Answer: C
VLAN access control lists (VACLs) provide network-security enforcement based on Layer 2, Layer 3, and Layer 4 information on a VLAN. VACLs can be used to provide security based on MAC address, source and destination IP address, Layer 4 protocols, or port numbers. The VACL will act on all traffic of a select VLAN whether bridged or switched. The actions performed on a packet can include permit, redirect, or deny. The VACL entries are checked in sequence, which is similar in concept to route-map structures. The following procedure is used to create VACLs: Define a VLAN access map: switch(config)# vlan access-map name [seq#] Configure a match clause: switch(config-access-map)# match {ip address {1-99 | 1300-2699 | acl_name} | mac address acl_name} Configure an action clause: switch(config-access-map)# action {drop | forward | redirect} Apply the map to a VLAN: switch(config)# vlan filter map_name vlan-list list Once created, you should verify the VACLs using the following commands: switch# show vlan access-map map_name switch# show vlan filter In the sample configuration shown below, all VLAN traffic in VLANS 1 through 3 that match access list SAFE will be forwarded. All other traffic will be dropped. switch(config)# vlan access-map cisco 10 switch(config-access-map)# match ip-address SAFE switch(config-access-map)# action forward switch(config)# vlan filter cisco vlan-list 1-3 If access list cisco were configured as shown below, for example, traffic with a source address of 172.16.10.8 would be dropped. Switch# show ip access-list cisco 10 Extended ip access list cisco 10 10 permit 10.0.0.0 255.255.255.0 any Objective: Infrastructure Security Sub-Objective: Configure and verify switch security features References: Cisco > Home > Support > Product Support > End-of-Sale and End-of-Life Products > Cisco Catalyst 6000 Series Switches > Configure > Configuration Examples and Technotes > Securing Networks with Private VLANs and VLAN Access Control Lists Cisco > Cisco IOS LAN Switching Command Reference > vlan access-map Cisco > Cisco IOS LAN Switching Command Reference > match (vlan access-map)
Question 549
Refer to the exhibit. Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are uf SLA by defining frequency and schedulingsed
Correct Answer:
Question 550
Refer to the exhibit. A network administrator sets up an OSPF routing protocol for a DMVPN network on the hub router. Which configuration required to establish a DMVPN tunnel with multiple spokes?
