New questions:

1. SDN solution for WAN which is support automation, PnP (Plug and Play) application
delivers on WAN…(choose 1)
a. APIC
b. APIC-EM (x)
c. …
d. …

2. DCI: simple extend layer 2 data center less than 4000 VLAN…(choose 2)
a. VPLS (vpls was not an option)
b. OTV (x)
c. LISP (x)
d. VXLAN
e. …

(http://www.cisco.com/en/US/products/hw/routers/ps368/products_white_paper09186a0080
1df1df.shtml) VPLS ? I did remember well more or less ? Fabric Path (FP also support more than
4000 VLANs)
-->Question is less than 4000VLANs
---->Ok then arent VPLS or FP, LISP is for IP mobility.
-----> VXVLAN and the OTV ???
http://blogs.cisco.com/datacenter/introducing-vxlan

-->Question mentioned SIMPLE extend DC less than 4000 VLAN, so I think VPLS and OTV are
right. More than 4000 VLAN should be VXLAN.

3. ACI: how many links expect between Spin and Leaf (choose 1)
a. 0
b. 1
c. 2
d. 4
Not in the test, but at least 1 link between spine and leaf. Redundancy 2 .
4. Drap and Drop (8 options to 5)
1. VRF-Lite
2. LUN masking
3. FC Zoning
4. vPath
5. vNIC
6. Port Profiles
7. Route maps
8.

Map with:
Network Separation
1. VRF-Lite

Compute Separation
1. vNIC
2. Port Profiles

SAN Separation
1. LUN masking
2. FC Zoning

5. Drap and Drop

1.VSS
2.VPLS
3.A-VPLS
4.EoMPLS

Map with:
1.Virtual interface
2.
3.
4.
5.

6. Two companies merge together but different OSPF Processes (domain), no IP overlapping,
they want to exchange routing…(choose 1)
a. Redistribute (x)
b. Virtual link

7. Multicast pim spare-mode send traffic overload. Which feature reduce…(choose 1)?
a. Filter at Boundaries (x)
b. PIM Sparse-Mode
c. …
d. …
e. …
8. NAC: Simple access control at user and device contextual level. Which features support
(choose 2)
a. 802.1x (not an option)
b. TrustSec
c. ISE (x)
d. NAC client (x)
e. ….

9. Design QoS (choose 2)

a. Classification (x)
b. Shaping
c. Policing
d. LLQueuing (x)
e. …

10. EIGRP and OSPF:

a. Square (x)
b. Square with tuning
c. Triangle

There are 2 option with triangle and 2 options with square. I picked the one where you don’t
need to tune.

11. Lab: HSRP. Router 1 (master) and Router 2 (standby) same priority, when router 1 f0/1
(outside interface) down. Which tracking command will active to Router 2 (choose 2)
a. Tracking 50 (x)
b. Tracking 50 decrement 20 (x)
c. ip tracking 50 interface f0/1 reachability
d. ip tracking 50 network (internal network) routing
e. Tracking 50 shutdown (x)

I picked b and e, not a. A doesn’t have a action like decrement or increment or shutdown.
(http://www.pearsonitcertification.com/articles/article.aspx?p=2141271)

12. Choose the Switch location as close as possible with the servers, but not one on one at
server rack. (choose 1)
a. Top of rack (x)
b. End of rack (x)
c. Blade Switch
d. …

This questions is about that they want the as close as possible, but not one on one per
server rack, so in my opinion it would be EoR and not ToR,

13. A customer with a single Cisco Adaptive Security Appliance wants to separate multiple
segments of the e-commerce network to allow for different security policies. What firewall
technology accommodates these design requirements? (choose 1)
a. Routed mode
b. Virtual-context (x)
c. Transparent mode
d. Virtual private network
e. private VLANs
f. admission control

14. Out of band management. Cisco recommend design

a. In-band management as backup (x)
b. need to be in the routing table
c. use as less as possible SSH, TELNET, …, … ,…
d. …

(http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/SAFE_RG/SAFE_rg/chap
9.html#wp1054521)

15. Two Cisco switches with 1 SUP and many 10G line-card ports for each switch, run in VSS
mode. Why don’t connect all VSL to SUP (choose 1)
a. This design is lack (x)
b. Bandwidth congestion at SUP
c. a loop will occur
d. …

(http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Campus/VSS30dg/campusVSS_D
G/VSS-dg_ch2.html)

Note:
For line redundancy, cisco recommends configuring at least two ports per switch for the VSL.
For module redundancy, the two ports can be on different switching modules in each chassis.
http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Campus/VSS30dg/campusVSS_DG
/VSS-dg_ch2.html

16. Question BFD

a. …
b. …
c. …
d. …

(https://supportforums.cisco.com/document/62656/introduction-bfd-asr9000)
17. ACI: how many links are expected between Spine devices? (choose 1)
A. 0 (x)
B. 1
C. 2
D. 4

Note:
Figure 1. Typical Spine - and-Leaf Data Center Network Design
As shown in Figure 1, with this design each leaf connects to each spine, and no connections are
created between pairs of leafs or pairs of spines
http://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-
centric-infrastructure/white-paper-c11-731860.html

18. some IS-IS question

a. Level 2 routers interfaces connected to the backbone
b. Level 2 routers connected to the back bone
c. Level 2 routers in every area (x)
d. Level 1 routers interfaces connected to the backbone
e. Level 1 routers connected to the back bone
f. Level 1 routers in every area

19. Drap and Drop: IP subneting a /24 network. Match the subnet addresses with the required
number of hosts:

a. 5 hosts
b. 12 hosts
c. 28 hosts
d. 32 hosts

Map with:

e. 10.3.3.0/26 (d)
f. 10.3.3.64/26
g. 10.3.3.64/27 (c)
h. 10.3.3.96/27
i. 10.3.3.96/28 (b)
j. 10.3.3.120/29
k. 10.3.3.112/29 (a)

20. Firewall feature to separate log, policy, ACL…for different (choose 1)

a. Routed mode
b. Multi-context (x)
c. Transparent mode

Introduction
This document describes the steps used to configure multiple context in Firewall Service Module
(FWSM).
You can partition a single FWSM into multiple virtual devices, known as security contexts. Each
context has its own security policy, interfaces, and administrators. Multiple contexts are similar
to multiple standalone devices. Many features are supported in multiple context mode, which
includes routing tables, firewall features, and management.
Enabling or Disabling Multiple Context Mode
Your FWSM might already be configured for multiple security contexts depending on how you
ordered it from Cisco.

http://www.cisco.com/c/en/us/support/docs/interfaces-modules/catalyst-6500-series-firewall-
services-module/107524-fwsm-multiple-context-config.html

21. Which feature do you need to implement for control plane and management plane
separation
a. vPc (x)
b. VSS
c. VLAN
d. VDC
e. VTP

22. Question about DDOS overloading traffic

a. Control Plane Policing (x)