Cisco Designing and Implementing Cisco Service Provider Cloud Network Infrastructure

QUESTION NO: 1
Which type of cyberattack does Cisco Umbrella DNS-layer security effectively help mitigate?

A. Phishing and malware-based attacks B. Advanced persistent threats and zero-day exploits C. DDoS attacks targeting specific servers D. Brute force attacks on user accounts

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Cloud infrastructure monitoring can be automated through the use of:

A. Physical network adjustments B. Manual system checks C. Decreasing telemetry data D. Cloud agents

Correct Answer: D

QUESTION NO: 3
VNF workload optimization often involves:

A. Utilizing technologies like SR-IOV for performance B. Increasing physical network functions C. Ignoring software acceleration D. Decreasing virtualization

Correct Answer: A

QUESTION NO: 4
Load balancers are recommended in high availability designs to distribute traffic across multiple
__________.

A. protocols B. networks C. countries D. servers

Correct Answer: D

QUESTION NO: 5
Streaming telemetry with gRPC and gNMI is used for:

A. Physical network repairs B. Data encryption C. Reducing network traffic D. Real-time network monitoring

Correct Answer: D

QUESTION NO: 6
Onboarding VNF refers to:

A. Monitoring VNF performance B. The initial setup and integration of VNFs into a network C. Updating VNFs to the latest version D. Removing VNFs from the network

Correct Answer: B

QUESTION NO: 7

Refer to the exhibit. An engineer must stop DDoS attacks on web and mail servers by using an ACL. Which two commands must be run on router R17? (Choose two.)

A. access-list 101 deny ip 10.10.10.2 0.0.0.0 10.20.10.2 0.0.0.0 B. access-list 101 deny ip 10.0.0.0 0.255.255.255 10.10.0.2 0.0.0.0 C. access-list 101 deny ip 10.10.10.2 255.255.255.255 10.20.10.2 255.255.255.255 D. access-list 101 deny ip 10.10.10.2 0.0.0.0 10.30.10.2 0.0.0.0 E. access-list 101 deny ip 10.10.10.2 255.255.255.255 10.30.10.2 255.255.255.255

Correct Answer: A,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8

Refer to the exhibit. An engineer must deploy a Layer 3 EVPN over segment routing MPLS in the data center core; however, Cisco switch Spine_A fails to join the OSPF network. Which OSPF command must be run on Spine_A to resolve the issue?

A. otv join-interface loopback0 B. segment-routing mpls C. connected-prefix-sid-map D. address-family ipv4

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
What is a benefit of using VXLANs in a cloud-scale environment?

A. extends Layer 3 segments across the underlying Layer 2 infrastructure B. extends Layer 2 segments across the underlying Layer 3 infrastructure C. eliminates the need for a Layer 3 underlay in the service provider infrastructure D. reduces spanning-tree complexity across the Layer 2 infrastructure

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
Which KPI is essential in the VIM control plane for network assurance?

A. Number of physical routers B. Encryption rate C. Cable length D. CPU utilization

Correct Answer: D

QUESTION NO: 11
gNMI/gRPC are used in network management for:

A. Exclusively managing physical network devices B. Simplifying manual network configuration tasks C. Providing high-performance, bi-directional streaming of network state information D. Reducing the efficiency of network operations

Correct Answer: C

Cisco Designing and Implementing Cisco Service Provider Cloud Network Infrastructure - 300-540 Exam Questions