important Info: These new valid Cisco 350-025 exam questions were updated in recent days by Cisco 350-025,please visit our website to get the full version of new Cisco 350-025 exam dumps with free version of new VCE Player, you can pass the exam easily by training it!
QUESTION 66
What is the correct sequence of events when an asynchronous PPP client dials into a router with the configuration shown above? (assume the router and modem configurations are set properly)
A. The modems sync up, DTR goes high, and the router starts PPP.
B. The modems sync up, CD goes high, and the router starts PPP.
C. The modems sync up, DSR/CD goes high, and the router starts PPP.
D. The modems sync up, DSR/CD goes high, the router prompts for a username, but instead the PPP activation character is seen by the router. The router aborts the login prompt and PPP is started on the router.
E. The modems sync up, DSR/CD goes high, the activation character for PPP is seen by the router, and PPP is started on the router.
Correct Answer: E
QUESTION 67
Which statement about TACACS+ is false?
A. TACACS+ uses TCP.
B. If the user enters an incorrect password, the TACACS+ server will respond with an “ERROR” message.
C. The entire body of a TACACS+ packet is encrypted if a shared key is set on the NAS and the server.
D. TACACS+ can pass caller ID or called party values from the NAS to the server.
E. TACACS+ can log every command that is entered at the router’s exec prompt.
Correct Answer: B
QUESTION 68
When a user logs into a router in exec mode without AAA authorization, the default privilege level assigned is:
A. Privilege level 0
B. Privilege level 1
C. Privilege level 5
D. Privilege level 10
E. Privilege level 15
Correct Answer: B QUESTION 69
When can a Radius Server can be configured to apply known Tacacs+ attribute pairs?
A. If the dictionary has been patched to support this
B. Only through the use of vendor-specific attributes
C. Tunnel attributes can be used in place of vendor-specific attributes.
D. All radius implementations support vendor-specific attributes by default.
Correct Answer: AB
QUESTION 70
Which statements about TACACS+ are true? (multiple answer)
A. If more than one TACACS+ server is configured and the first one does not respond within a given timeout period, the next TACACS+ server in the list will be contacted.
B. The TACACS+ server’s connection to the NAS must always be encrypted.
C. The TACACS+ server must use TCP for its connection to the NAS.
D. Authentication usually precedes Authorization but is not always required.
E. The TACACS+ server may be configured to use TCP or UDP for its connection to the NAS.
Correct Answer: ACD
QUESTION 71
A network administrator is asked to design a dial-in solution. Both scripted and pure PPP logins should be supported for packet mode connections. The network administrator must configure the NAS to authenticate both types of users with RADIUS. Assuming the lines and interfaces are configured correctly, which answer is the correct AAA authentication configuration?
A. aaa new-modelaaa authentication login default radiusaaa authentication ppp default if-needed radius
B. aaa new-modelaaa authentication login default radiusaaa authentication ppp default radius
C. aaa new-modelaaa authentication network default radius
D. aaa new-modelaaa authentication network radius defaultaaa authentication ppp radius default
E. aaa new-modelaaa authentication radius default
Correct Answer: A
QUESTION 72
The purpose of configuring “clients” on a RADIUS server is:
A. To define a list a users and their access profiles
B. To define a list of NASs that the RADIUS server may connect to
C. To define a list of remote node devices that users may use to connect to the network
D. To define a list of IP hosts that are granted permission to administer the RADIUS database
E. All of the above
Correct Answer: B
QUESTION 73
In a Multichassis Multilink PPP (MMP) stack group the command sgbp seed-bid offload will cause a router to:
A. Only accept a call if Multilink options are not offered during PPP negotiation
B. Forward all Multilink calls
C. Win the bid only if the first Multilink call arrives on this router
D. Outbid all stack members and host the Multilink master bundle interface
E. Refuse all Multilink calls
Correct Answer: D
QUESTION 74
What is correct with respect to Layer 2 Tunnel Protocol Session establishment?
A. ICRQ, ICRN, ICCP, ZLB
B. SCCRQ, SCCRP, SCCCN, ZLB
C. ICRQ, ICRP, ICCN, ZLB
D. ICRQ, ICCN, ZLB
E. None of the above
Correct Answer: C
QUESTION 75
This indicates that:
A. The routers are performing 2-way authentication.
B. The routers are performing 1-way authentication with this peer authenticating the remote peer.
C. The routers are performing 1-way authentication with the remote peer authenticating this peer.
D. L2TP tunnel authentication is about to start.
E. This peer is changing the authentication method from PAP to CHAP.
Correct Answer: B
QUESTION 76
What statement about VPDN tunnel authentication is most accurate?
A. LAC authenticates LNS with a 3-way handshake.
B. LNS authenticates LAC with a 3-way handshake.
C. LAC and LNS authenticate each other with a 3-way handshake.
D. LAC and LNS authenticate each other with a 6-way handshake.
Correct Answer: C
QUESTION 77
In the above debug, the CONFREJ sent to the peer indicates the options included are:
A. Acceptable and will be allocated upon IPCP completion
B. Not acceptable, the CONFREQ needs to be resent without these options included
C. LCP needs to be renegotiated to allow an acceptable IPCP CONFREQ to be sent.
D. Acceptable, the CONFREQ needs to be resent with only these options included
E. IP is not enabled on this device
Correct Answer: B QUESTION 78
With the command vpdn authen-before-forward on the LAC, the first time the router connects to the AAA server:
A. Only the domain name is forwarded.
B. Both the domain name and DNIS are forwarded.
C. The entire structured username is forwarded.
D. Only the DNIS is forwarded.
E. The LAC hostname is forwarded.
Correct Answer: C
QUESTION 79
When dialing into a network that is using Virtual Private Data Network (VPDN) to tunnel the PPP session to the LNS, the challenge used for CHAP authentication of the remote client is sent by which entity?
A. LAC
B. LNS
C. TACACS server
D. RADIUS server
Correct Answer: A
QUESTION 80
A network administrator is designing a Multichassis Multilink PPP stack consisting of four Cisco Network Access Servers (NAS) (two T1 PRIs each) and a router as the offload server. The network admin expects Multilink 2 B-channel calls to take up to 20% of the ports. If the sgbp ppp-forward command is configured on all of the Cisco Network Access Servers (NAS), how many addresses must be reserved to assign to remote clients?
A. 50 ?5
B. 120 ?5
C. 180 ?5
D. 200 ?5
Correct Answer: C
QUESTION 81
What is correct with respect to Layer 2 Tunnel Protocol Control Connection Establishment?
A. SCCRQ, SCCRP, SCCCN, ZLB
B. SCCRQ, SCCRN, SCCCP, ZLB
C. SCCRQ, SCCRP, ZLB
D. ICRQ, ICRP, ICCN, ZLB
E. None of the above
Correct Answer: A
QUESTION 82
Which modem modulation is most used in mobile networks to connect to Cisco access servers running E1?
A. V120
B. LABP-TA
C. V110
D. HSCSD
E. None of the above
Correct Answer: C
QUESTION 83
Which factors have a significant impact on the total amount of time necessary for a dial-up PPP connection to be established and ready to send data?
A. The modem modulation requested
B. The modem compression protocol requested
C. The Local Exchange Carrier
D. The responsiveness of the authentication server
E. The routing protocol used
Correct Answer: AD
QUESTION 84
What best describes v.44 compression?
A. V.44 compression is part of the v.92 modem standard.
B. A connection can either be negotiated to support v.44 compression or v.90, but not both at the same time.
C. V.44 is a compression standard based on Lempel-Zev that uses a string-matching algorithm
D. V.44 requires a higher quality TDM line to work as effectively as V.42.
E. None of the above
Correct Answer: C
QUESTION 85
What is NOT a feature of V92?
A. QC
B. PCM
C. MOH
D. Passive mode
Correct Answer: D
QUESTION 86
Which data compression protocol gives the best compression on HTML files running a 50k analog dialup connection?
A. LAPM
B. V54bis
C. V42bis
D. V44
Correct Answer: D
QUESTION 87
There are four access servers in a PoP which have been working well for about six months. Capacity is being reached during peak hours and another access server was turned up about a week earlier. It is noted that the connection speeds on the new access server are, on average, 3-4 kbps lower than other access servers. It is confirmed that the same modem code is loaded on all the routers. Which could explain this behavior?
A. IOS version
B. Impairments in the local loop
C. Client modems
D. Incoming T1 trunk
E. Local phone switch
Correct Answer: DE
QUESTION 88
The capacity of a Universal gateways can be effected by several factors. What factor effects the number of calls that can be processed by a Universal GW?
A. The codecs that are used
B. The processing power of the central CPU
C. The nature of the call mixture of Voice, Fax and Data Calls
D. The ingress bandwidth available
E. The number of available DPSs
Correct Answer: B
QUESTION 89
What will result in the most efficient transport of 10 seconds of voice bearer traffic?
A. G729a with a 10ms packetization over serial point to point link cRTP and VAD OFF
B. G711ulaw with 30ms packetization over a AAL2 link
C. G723.1 with a 30ms packetization with VAD ON and a 60% talk time over an Ethernet link
D. G726 (32k) with a 20ms packetization over a serial point to point link with VAD OFF
E. Not enough information to determine which is most efficient
Correct Answer: C
QUESTION 90
Which statements are true about the V.92 standard?
A. The Quick Connect feature reduces modem negotiation time by skipping certain phases of the modem negotiation.
B. The Modem on Hold feature allows a modem to suspend operation indefinitely.
C. V.44 compression must be used in conjunction with V.90 modulations.
D. PCM upstream enhances the web browsing performance for most users by reducing the round-trip time.
Correct Answer: AB
QUESTION 91
An inverse ARP is sent:
A. To map a hostname to an IP address
B. To map an IP address to a hostname
C. To map an MAC address to an IP address
D. To map a MAC address to a hostname
E. To map an IP address to a MAC address
Correct Answer: C
QUESTION 92
If a host sends a TCP segment with the RST flag set, it means:
A. The receiver should send all data in the reassembly buffer to the application receiving it immediately.
B. The receiver should reset the session.
C. Any routers between the source and destination hosts should reset the state of the connection in their buffers.
D. The receiver should make certain its send buffer is pushed onto the wire.
Correct Answer: B
QUESTION 93
The network associated with Router A’s Ethernet 0 port is designed to be publicly accessible. However, Router B’s Token Ring 0 network should be accessible only to hosts from Router A’s Ethernet 0 network. What access list for Router B would accomplish this?
A. access-list 99 permit 191.8.1.0 0.0.0.255access-list 99 deny 0.0.0.0 255.255.255.255
B. access-list 103 permit 191.8.1.0 0.0.0.255access-list 103 deny 0.0.0.0 255.255.255.255
C. access-list 88 deny 0.0.0.0 255.255.255.255access-list 88 permit 191.8.1.0 0.0.0.255
D. access-list 3 permit 191.8.1.0 255.255.255.0access-list 3 deny 0.0.0.0 0.0.0.0
E. access-list 99 permit 191.8.10.0 0.0.0.0access-list 99 deny 0.0.0.0 255.255.255.255
Correct Answer: A
QUESTION 94
A router has the above routes listed in its routing table and receives a packet destined for 172.16.0.45. What will happen?
A. The router will not forward this packet, since it is destined for the 0 subnet.
B. The router will forward the packet through 172.31.116.65, since it has the lowest metric.
C. The router will forward the packet through 10.1.1.1.
D. The router will forward the packet through 172.31.116.65, since it has the lowest administrative distance.
E. The router will forward the packet through 192.168.1.4.
Correct Answer: C
QUESTION 95
In this network, Host A is trying to reach Host D. There is no routing protocol running, but Router B and C have the following static routes configured:Router B: ip route 10.1.3.0 255.255.255.0 ethernet 1Router C: ip route 10.1.1.0 255.255.255.0 ethernet 1
A. This will not work because Router B has no idea of how to forward traffic to the 10.1.3.0/24 network.
B. This will work because Router B will recognize that Router C is on the 10.1.2.0/24 network through a router discovery protocol and will forward traffic for 10.1.3.0/24 to Router C.
C. This will not work because a broadcast interface in a static route command cannot be specified.
D. This will work because Router B will ARP for Host D’s IP address on the 10.1.2.0/24 network and Router C will answer.
Correct Answer: D
QUESTION 96
The diagram shows a collapsed L3 switched building backbone consisting of two L3 switches: W and U. Each L3 switch has a routed interface on every subnet (VLAN) in the building. There are no VLAN trunks in the network. In other words the L3 switches are acting as native routers. There are exactly 4 client-side VLANs (subnets): a, b, c, d. There are exactly 2 server-side VLANs (subnets): x and y. There is one routed link (Subnet e) connecting the L3 switches in the core. How many equal-cost paths to Subnet d does L3 Switch W keep in its routing table?
A. 1
B. 2
C. 3
D. 4
E. 5
Correct Answer: A
QUESTION 97
What mechanism enables cut-through switches to process a frame with reduced latency?
A. The destination address is at or near the beginning of the frame.
B. The CRC is at the end of the frame.
C. The CRC is at or near the beginning of the frame.
D. The source address is at or near the beginning of the frame.
E. The data is compressed in the middle of the frame.
Correct Answer: A
QUESTION 98
L3 switches R1 and R2 are in the backbone of the network. They are connected by a routed EtherChannel bundle consisting of eight Gigabit Ethernet ports. The routed link is represented as subnet X.0 in the diagram. Since X.0 is routed, it is not a VLAN trunk. How can spanning tree loops be prevented in the backbone of this network?
A. Since EtherChannel X is routed there are no spanning tree loops.
B. Configure seven of the eight ports in the bundle as passive interfaces
C. Configure UplinkFast on R1 and R2
D. Disable Spanning Tree Protocol (STP) on R1 and R2
E. Disable VLAN X on seven of the eight ports in the bundle
Correct Answer: A
QUESTION 99
On each LAN segment with multiple bridges running spanning tree, the bridge closest to the:
A. Designated bridge is selected as root bridge
B. Root bridge is selected as designated bridge
C. Root bridge is not selected as designated bridge
D. Designated bridge is not selected as root bridge
Correct Answer: B
QUESTION 100
Host D sends a frame to Host B at the same time that Host B sends a frame to Host D. Bridging is enabled on Router 1, and the two frames collide into each other. Select the best explanation of why Host B will or will not receive the original frame from Host D:
A. Host B will receive the frame, since Hosts B & D are in the same VLAN.
B. Host B will receive the frame, since Hosts B and D are in the same routing domain.
C. Host B will not receive the frame, since Hosts B and D are in the same collision domain.
D. Host B will not receive the frame, since Hosts B and D are in different broadcast domains.
E. Host B will receive the frame, since Hosts B and D are in the same bridging domain.
Correct Answer: C
QUESTION 101
The correct way to reverse telnet to a modem on an AS5850 Access Server is to:
A. Create a Rotary5 on the modem lines and telnet ip address loopback address port 2001
B. Create a Rotary1 on the modem lines and telnet ip address loopback address port 2001
C. Create a rotary 1 on the modem lines and telnet to ip address loopback address port 7001
D. None of the above
Correct Answer: C
QUESTION 102
Select the True statement:
A. T1 and E1 cards can be mixed on an AS5850 Access Server.
B. T1 and E1 cards can never be mixed on an AS5850 Access Server.
C. T1 and E1 cards can be mixed on AS5XXX Access Servers with the exception of the AS5850 Access Server.
D. T1 and E1 cards can be mixed on the AS5850 Access Server if the correct IOS version is used.
Correct Answer: B
QUESTION 103
Normally a high speed serial link can NOT be used to:
A. Terminate SS7 F links
B. Act as a standard serial interface
C. Backhaul a full T1 worth of Voice traffic when using cRTP
D. Act as a console port for telnet access
Correct Answer: D
QUESTION 104
What protocol cannot be terminated on Nextport ASAP DSP?
A. V110
B. V120
C. LAPB-TA
D. B and C
Correct Answer: C
QUESTION 105
Which are true for all Cisco ASAP platforms (AS5350, AS5400, AS5850)?
A. High performance packet forwarding is achieved through distributed forwarding engines.
B. TDM switching of data between DS0’s requires the use of a DSP.
C. Any voice or modem codec can be used on any port at any time
D. To lower costs, SS7 trunks can be used to terminate calls.
Correct Answer: CD
PDF format– Printable version, print Cisco 350-025 exam dumps out and study anywhere.Software format– Simulation version, test yourself like Cisco 350-025 exam real test.Credit Guarantee– Passtcert never sell the useless Cisco 350-025 exam dumps out.You will receive our Cisco 350-025 exam dumps in time and get CCIE Certified easily.