Which two statements are correct about using firewall filters on EX Series switches? (Choose two.)

1. A. You can deploy only stateless firewall filters on an EX Series switch.
2. B. You can only apply firewall filters to Layer 2 traffic on an EX Series switch.
3. C. You can apply firewall filters to both Layer 2 and Layer 3 traffic on an EX Series switch.
4. D. You can deploy both stateless and stateful firewall filters on an EX Series switch.

Correct Answer: AC
✑ A is correct because you can deploy only stateless firewall filters on an EX Series switch. A stateless firewall filter is a filter that evaluates each packet individually based on the header information, such as source and destination addresses, protocol, and port numbers1. A stateless firewall filter does not keep track of the state or context of a packet flow, such as the sequence number, flags, or sessioninformation1. EX Series switches support only stateless firewall filters, which are also called access control lists (ACLs) or packet filters2.
✑ C is correct because you can apply firewall filters to both Layer 2 and Layer 3 traffic on an EX Series switch. Layer 2 traffic is traffic that is switched within a VLAN or a bridge domain, while Layer 3 traffic is traffic that is routed between VLANs or networks3. EX Series switches support three types of firewall filters: port (Layer 2) firewall filters, VLAN firewall filters, and router (Layer 3) firewall filters4. You can apply these filters to different interfaces and directions to control the traffic
entering or exiting the switch.

Refer to the exhibit.

Referring to the output shown in the exhibit, which statement is correct?

1. A. The state is normal for a DR neighbor.
2. B. The state is normal for a DRother neighbor
3. C. An MTU mismatch exists between the OSPF neighbors.
4. D. An area ID mismatch exists between the OSPF neighbors

Correct Answer: B
In OSPF, the state of the neighbor relationship is determined by the exchange of OSPF packets between routers1. The state ??2Way?? as shown in the exhibit indicates that bi-directional communication has been established between the two OSPF routers1. This is the normal state for a neighbor that is not the Designated Router (DR) or Backup Designated Router (BDR) on a broadcast, non-broadcast multi-access (NBMA), or point-to-multipoint network1. These neighbors are often referred to as "DRothers"1. Therefore, option B is correct.

A new network requires multiple topology support. You decide to use IS-IS in this situation. Which three protocol topologies are supported in this scenario? (Choose three.)

1. A. IPsec
2. B. anycast
3. C. IPv6
4. D. multicast
5. E. IPv4

Correct Answer: CDE
IS-IS (Intermediate System to Intermediate System) is a routing protocol that is designed to move information efficiently within a computer network12. It supports multiple protocol topologies, including IPv4, IPv6, and multicast12. Therefore, options C, E, and D are correct.

After receiving a BGP route, which two conditions are verified by the receiving router to ensure that the received route is valid? (Choose two)

1. A. The AS-path length is greater than 0.
2. B. The loops do not exist.
3. C. The next hop is reachable.
4. D. The local preference is greater than 0.

Correct Answer: BC
✑ B is correct because the loops do not exist is one of the conditions that are verified by the receiving router to ensure that the received BGP route is valid. A loop in BGP means that a route has been advertised by the same AS more than once, which can cause routing instability and inefficiency1. To prevent loops, BGP uses the AS-path attribute, which lists the AS numbers that a route has traversed from the origin to the destination2. The receiving router checks the AS-path attribute of the received route and discards it if it finds its own AS number in the list2. This way, BGP avoids accepting routes that contain loops.
✑ C is correct because the next hop is reachable is one of the conditions that are verified by the receiving router to ensure that the received BGP route is valid. The next hop is the IP address of the next router that is used to forward packets to the destination network3. The receiving router checks the next hop attribute of the received route and verifies that it has a valid route to reach it3. If the next hop is not reachable, the received route is not usable and is rejected by the receiving router3. This way, BGP ensures that only feasible routes are accepted.

Exhibit

Your ISP is announcing a default route to both R1 and R2. You want your network routers to forward all Internet traffic through the R1 device
Which BGP attribute would you use?

1. A. MED
2. B. next-hop
3. C. local preference
4. D. origin

Correct Answer: C
The BGP attribute that you would use to forward all Internet traffic through the R1 device is the local preference1.
The local preference is an attribute that is used within an autonomous system (AS) and exchanged between iBGP routers1. It is used to select an exit point from the AS1. The path with the highest local preference is preferred1. By setting a higher local preference for the routes received from R1, you can make R1 the preferred exit point for all Internet traffic1.