2.1 End-To-End IP Traffic Flow in a Feature-Rich Environment 400-007 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A service provider is deploying a new VPLS service for a customer with two sites. The customer requires that all traffic between the sites be encrypted, but the provider's VPLS core does not support encryption. The provider also runs MPLS TE with fast reroute for link protection. Which solution will meet the encryption requirement without breaking the VPLS service?

   • AUse a different VPLS instance with a different route distinguisher to isolate the traffic.
   • BEnable encryption on the VPLS pseudowire using MPLS security.
   • CConfigure the provider edge routers to encrypt the VPLS payload using MACsec.
   • DPlace an IPsec tunnel between the customer edge routers, and route the VPLS traffic through the tunnel.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When QoS marking is applied at the access layer, how does this feature most directly affect traffic flow?

   • AIt changes the routing path that packets take through the network
   • BIt determines the next-hop IP address for the packet
   • CIt influences how packets are queued and scheduled at each hop
   • DIt encrypts the packet payload to ensure confidentiality
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How does a change in the OSPF routing table affect the data plane?

   • AIt changes the MAC address table on the router
   • BIt requires a manual reload of the router to take effect
   • CIt only affects the control plane, not the data plane
   • DIt immediately changes the forwarding information base (FIB) used for packet forwarding
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   When designing a network for scalability, which operational choice has the most direct impact on end-to-end traffic flow as the network grows?

   • ADisabling all routing protocols to reduce overhead
   • BImplementing a flat network with no segmentation
   • CUsing only static routes to simplify configuration
   • DUsing a hierarchical design with modular layers
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A network engineer is analyzing a traffic flow between two hosts in different VLANs. The path includes a firewall that performs stateful inspection. The engineer notices that the first packet of a new connection is dropped, but subsequent packets are allowed. What is the most likely cause?

   • AThe firewall's default policy is to drop all traffic, and the first packet is not matched by any rule.
   • BThe firewall is configured to allow only established connections, and the first packet is not part of an established session.
   • CThe firewall's state table is full, so it cannot create a new session entry.
   • DThe firewall is performing asymmetric routing, and the return traffic takes a different path.
   Reveal Solution Discussion Select an answer first