- (Exam Topic 2)
What are two functions of IPv6 Source Guard? (Choose two.)

1. A. It uses the populated binding table for allowing legitimate traffic.
2. B. It works independent from IPv6 neighbor discovery.
3. C. It denies traffic from unknown sources or unallocated addresses.
4. D. It denies traffic by inspecting neighbor discovery packets for specific pattern.
5. E. It blocks certain traffic by inspecting DHCP packets for specific sources.

Correct Answer: AC

- (Exam Topic 2)
Refer to the exhibit.

A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands Which action resolves the issue?

1. A. Configure TACACS+ synchronization with the Active Directory admin group
2. B. Configure the username from a local database
3. C. Configure full access for the username from TACACS+ server
4. D. Configure an authorized IP address for this user to access this router

Correct Answer: C

- (Exam Topic 1)
What is the role of a route distinguisher via a VRF-Lite setup implementation?

1. A. It extends the IP address to identify which VFP instance it belongs to.
2. B. It manages the import and export of routes between two or more VRF instances
3. C. It enables multicast distribution for VRF-Lite setups to enhance EGP routing protocol capabilities
4. D. It enables multicast distribution for VRF-Lite setups to enhance IGP routing protocol capabilities

Correct Answer: A

- (Exam Topic 3)
How does LDP operate in an MPLS network?

1. A. When topology changes occur such as a router failure, LDP generates peer discovery messages that terminate the LDP season to propagate an LSP change.
2. B. When an adjacent LSR receives LDP discovery message
3. C. TCP two-way handshake ensures that the LDP session has unidirectional connectivity.
4. D. Peer routers establish the LDP session, and the LDP neighbors maintain and terminate the session by exchanging messages
5. E. LDP notification messages allow LERs to exchange label information to determine the next hops within a particular LSP.

Correct Answer: D

- (Exam Topic 3)
Refer to the exhibit.


The network engineer configured the summarization of the RIP routes into the OSPF domain on R5 but
still sees four different 172.16.0.0/24 networks on R4. Which action resolves the issue?

1. A. R5(config)#router ospf 1 R5(config-router)#no areaR5(config-router)#summary-address 172.16.0.0 255.255.252.0
2. B. R4(config)#router ospf 99R4(config-router)#network 172.16.0.0 0.255.255.255 area 56R4(config-router)#area 56 range 172.16.0.0 255,255.255.0
3. C. R4(config)#router ospf 1 R4(config-router)#no areaR4(config-router)#summary-address 172.16.0.0 255.255.252.0
4. D. R5(config)#router ospf 99R5(config-router)#network 172.16.0.0 0.255.255.255 area 56R5(config-router)#area 56 range 172.16.0.0 255.255.255.0

Correct Answer: A
Area 36 is a NSSA so R5 is an ASBR so we can summarize external routes using the “summaryaddress” command. The command “area area-id range” can only be used on ABR so it is not correct.
The summarization must be done on the ASBR which is R5, not R4 so the correct answer must be started with “R5(config)#router ospf 1”.
Note: The “no area” command is used to remove any existing “area …” command (maybe “area 56 range …” command).