QUESTION 1
Which of the following facts must be considered when designing for IP telephony within an Enterprise Campus network?
A. Because the IP phone is a three-port switch, IP telephony extends the network edge, impacting the
Distribution layer.
B. Video and voice are alike in being bursty and bandwidth intensive, and thus impose requirements to
be lossless, and have minimized delay and jitter.
C. IP phones have no voice and data VLAN separation, so security policies must be based on upper layer
traffic characteristics.
D. Though multi-VLAN access ports are set to dot1q and carry more than two VLANs they are not trunk ports.
Answer: D
QUESTION 2
Addressing QoS design in the Enterprise Campus network for IP Telephony applications means what?
A. It is critical to identify aggregation and rate transition points in the network, where preferred traffic and
congestion QoS policies should be enforced
B. Suspect traffic should be dropped closest to the source, to minimize wasting network resources
C. An Edge traffic classification scheme should be mapped to the downstream queue configuration
D. Applications and Traffic flows should be classified, marked and policed within the Enterprise Edge of the
Enterprise Campus network
Answer: A
QUESTION 3
The requirement for high availability within the Data Center network may cause the designer to consider which one of the following solutions?
A. Construct a hierarchical network design using EtherChannel between a server and two VDCs from the
same physical switch
B. Utilize Cisco NSF with SSO to provide intrachassis SSO at Layers 2 to 4
C. Define the Data Center as an OSPF NSSA area, advertising a default route into the DC and summarizing
the routes out of the NSSA to the Campus Core
D. Implement network services for the Data Center as a separate services layer using an active/active model
that is more predictable in failure conditions
Answer: B
QUESTION 4
When designing remote access to the Enterprise Campus network for teleworkers and mobile workers, which of the following should the designer consider?
A. It is recommended to place the VPN termination device in line with the Enterprise Edge firewall, with
ingress traffic limited to SSL only
B. Maintaining access rules, based on the source IP of the client, on an internal firewall drawn from a
headend RADIUS server is the most secure deployment
C. VPN Headend routing using Reverse Route Injection (RRI) with distribution is recommended when
the remote user community is small and dedicated DHCP scopes are in place
D. Clientless SSL VPNs provide more granular access control than SSL VPN clients (thin or thick), including
at Layer7
Answer: D
QUESTION 5
Which three statements about firewall modes are correct? (Choose three.)
A. A firewall in routed mode has one IP address.
B. A firewall in transparent mode has one IP address.
C. In routed mode, the firewall is considered to be a Layer 2 device.
D. In routed mode, the firewall is considered to be a Layer 3 device.
E. In transparent mode, the firewall is considered to be a Layer 2 device.
F. In transparent mode, the firewall is considered to be a Layer 3 device.
Answer: BDE
QUESTION 6
Which two of these correctly describe asymmetric routing and firewalls? (Choose two.)
A. only operational in routed mode
B. only operational in transparent mode
C. only eight interfaces can belong to an asymmetric routing group
D. operational in both failover and non-failover configurations
E. only operational when the firewall has been configured for failover
Answer: CD
QUESTION 7
Which of the following two statements about Cisco NSF and SSO are the most relevant to the network designer? (Choose two.)
A. You can reduce outages to 1 to 3 seconds by using SSO in a Layer 2 environment or Cisco NSF with
SSO in a Layer 3 environment.
B. SSO and NSF each require the devices to either be graceful restart-capable or graceful restart- aware.
C. In a fully redundant topology adding redundant supervisors with NSF and SSO may cause longer convergence
times than single supervisors with tuned IGP timers
D. The primary deployment scenario for Cisco NSF with SSO is in the Distribution and Core layers.
E. Cisco NSF-aware neighbor relationships are independent of any tuned IGP timers
Answer: AC
QUESTION 8
Refer to the exhibit. Which of the following two are advantages of Server virtualization using VMware vSphere? (Choose two)
A. Retains the one-to-one relationship between switch ports and functional servers
B. Enables the live migration of a virtual server from one physical server to another without disruption to
users or loss of services
C. The access layer of the network moves into the vSphere ESX servers, providing streamlined vSphere
management
D. Provides management functions including the ability to run scripts and to install third-party agents for
hardware monitoring, backup, or systems management
E. New functional servers can be deployed with minimal physical changes on the network
Answer: BD
QUESTION 9
Which of the following two are effective and simple means of employing route summarization within the Enterprise Campus network? (Choose two)
A. A default route (0.0.0.0 /0) advertised dynamically into the rest of the network
B. Route filtering to manage traffic flows in the network, avoid inappropriate transit traffic through remote
nodes, and provide a defense against inaccurate or inappropriate routing updates
C. Use manual split horizon
D. Use a structured hierarchical topology to control the propagation of EIGRP queries
E. Open Shortest Path First (OSPF) stub areas
Answer: AE
QUESTION 10
From a design perspective which two of the following OSPF statements are most relevant? (Choose two)
A. OSPF stub areas can be thought of as a simple form of summarization
B. OSPF cannot filter intra-area routes
C. An ABR can only exist in two areas – the backbone and one adjacent area
D. Performance issues in the Backbone area can be offset by allowing some traffic to transit a non-backbone area
E. The size of an area (the LSDB) will be constrained by the size of the IP MTU
Answer: AB
If you want to pass Cisco 642-874 successfully, donot missing to read latest lead2pass Cisco 642-874 dumps.
If you can master all lead2pass questions you will able to pass 100% guaranteed.
