2.2 Configure and Verify Data Path Virtualization Technologies 350-401 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of Generic Routing Encapsulation (GRE) tunneling?

   • ATo provide encryption and authentication for data transmitted over an insecure network.
   • BTo compress data to reduce bandwidth usage over WAN links.
   • CTo replace the need for routing protocols by providing direct Layer 2 connectivity between sites.
   • DTo encapsulate a wide variety of network layer protocols inside IP packets, allowing them to be transported over an IP network.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which command displays the routing table for a specific VRF on a Cisco IOS XE router?

   • Ashow ip route vrf CUSTOMER_A
   • Bshow vrf route CUSTOMER_A
   • Cshow ip forwarding vrf CUSTOMER_A
   • Dshow ip route CUSTOMER_A
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A service provider must keep two customers' routing information isolated on the same PE router while both customers use overlapping private IP ranges (e.g., 10.0.0.0/8). The PE router must maintain separate routing tables and forwarding decisions for each customer without requiring separate physical routers. Which configuration approach should be used?

   • AImplement GRE tunnels from each customer to the PE and rely on tunnel endpoints for isolation.
   • BCreate a VRF for each customer, assign the customer-facing interfaces to the respective VRF, and configure routing protocols within each VRF.
   • CConfigure a single routing table with more specific static routes for each customer's subnets.
   • DUse policy-based routing (PBR) to redirect customer traffic based on source IP to different next hops.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a site-to-site IPsec VPN configuration, what is the purpose of a crypto map?

   • ATo associate the IPsec configuration (transform set, peer, ACL) with a specific interface.
   • BTo define the encryption algorithm used for the data traffic.
   • CTo authenticate the remote peer using a pre-shared key.
   • DTo specify which traffic is encrypted by matching source and destination addresses.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An engineer must connect two sites that run EIGRP and need to exchange routing updates securely. The WAN link is untrusted. The engineer decides to use GRE over IPsec. Which statement about the encapsulation order and configuration is correct?

   • AGRE encapsulates the original packet, then IPsec encrypts the GRE packet; the tunnel source/destination are the physical interfaces.
   • BGRE and IPsec are configured in parallel on the same interface without any order.
   • COnly IPsec is needed; GRE is unnecessary because EIGRP can run over IPsec directly.
   • DIPsec encrypts the original packet, then GRE encapsulates the encrypted packet; the tunnel source/destination are loopback addresses.
   Reveal Solution Discussion Select an answer first