[Free] 2017(Nov) Dumps4cert Testinsides Cisco 300-101 Dumps with VCE and PDF Download 111-120

Dumps4Cert 2017 Nov Cisco Official New Released 300-101
100% Free Download! 100% Pass Guaranteed!
http://www.Dumps4Cert.com/300-101.html

Implementing Cisco IP Routing

Question No: 111 – (Topic 6)

Refer to the exhibit.

Dumps4Cert 2017 PDF and VCE

A new TAC engineer came to you for advice. A GRE over IPsec tunnel was configured, but the tunnel is not coming up.

What did the TAC engineer configure incorrectly?

  1. The crypto map is not configured correctly.

  2. The crypto ACL is not configured correctly.

  3. The crypto map is not applied to the correct interface.

  4. The OSPF network is not configured correctly.

Answer: B

Question No: 112 – (Topic 6)

Which statement is true about an IPsec/GRE tunnel?

  1. The GRE tunnel source and destination addresses are specified within the IPsec transform set.

  2. An IPsec/GRE tunnel must use IPsec tunnel mode.

  3. GRE encapsulation occurs before the IPsec encryption process.

  4. Crypto map ACL is not needed to match which traffic will be protected.

Answer: C

Question No: 113 – (Topic 6)

An organization decides to implement NetFlow on its network to monitor the fluctuation of traffic that is disrupting core services. After reviewing the output of NetFlow, the network engineer is unable to see OUT traffic on the interfaces. What can you determine based on this information?

  1. Cisco Express Forwarding has not been configured globally.

  2. NetFlow output has been filtered by default.

  3. Flow Export version 9 is in use.

  4. The command ip flow-capture fragment-offset has been enabled.

Answer: A

Question No: 114 – (Topic 6)

Router R1, a branch router, connects to the Internet using DSL. Some traffic flows through a GRE and IPsec tunnel, over the DSL connection, and into the core of an Enterprise network. The branch also allows local hosts to communicate directly with public sites in the Internet over this same DSL connection. Which of the following answers defines how the branch NAT config avoids performing NAT for the Enterprise directed traffic but does perform NAT for the Internet-directed traffic?

  1. By not enabling NAT on the IPsec tunnel interface

  2. By not enabling NAT on the GRE tunnel interface

  3. By configuring the NAT-referenced ACL to not permit the Enterprise traffic

  4. By asking the ISP to perform NAT in the cloud

Answer: C Explanation:

The NAT configuration acts only on packets permitted by a referenced ACL. As a result, the ACL can permit packets destined for the Internet, performing NAT on those packets. The ACL also denies packets going to the Enterprise, meaning that the router does not apply NAT to those packets.

New Questions

Question No: 115 – (Topic 6)

A network engineer is trying to implement broadcast-based NTP in a network and executes the ntp broadcast client command. Assuming that an NTP server is already set up, what is the result of the command?

  1. It enables receiving NTP broadcasts on the interface where the command was executed.

  2. It enables receiving NTP broadcasts on all interfaces globally.

  3. It enables a device to be an NTP peer to another device.

  4. It enables a device to receive NTP broadcast and unicast packets.

Answer: A

Question No: 116 – (Topic 6)

Refer to the exhibit.

Dumps4Cert 2017 PDF and VCE

A new TAC engineer came to you for advice. A GRE over IPsec tunnel was configured, but the tunnel is not coming up.

What did the TAC engineer configure incorrectly?

  1. The crypto isakmp configuration is not correct.

  2. The crypto map configuration is not correct.

  3. The interface tunnel configuration is not correct.

  4. The network configuration is not correct; network 172.16.1.0 is missing.

Answer: A

Question No: 117 – (Topic 6)

What are the four main steps in configuring a GRE tunnel over IPsec on Cisco routers? (Choose Four)

  1. Configure a physical interface or create a loopback interface to use as the tunnel endpoint.

  2. Create the GRE tunnel interfaces.

  3. Add the tunnel interfaces to the routing process so that it exchanages routing updates across that interface.

  4. Add the tunnel subnet to the routing process so that it exchanages routing updates across that interface.

  5. Add all subnets to the crypto access-list, so that IPsec encrypts the GRE tunnel traffic.

  6. Add GRE traffic to the crypto access-list, so that IPsec encrypts the GRE tunnel traffic.

Answer: A,B,D,F

Question No: 118 – (Topic 6)

For a GRE tunnel to be up between two routers, which of the following must be configured?

  1. Loopback Interface

  2. IP reachability between the loopback interfaces

  3. Dynamic Routing between routers.

  4. Tunnel interfaces must be in the same subnet.

Answer: D

Question No: 119 – (Topic 6)

A network engineer is asked to configure a quot;site-to-sitequot; IPsec VPN tunnel. One of the last things that the engineer does is to configure an access list (access-list 1 permit any) along with the command ip nat inside source list 1 int s0/0 overload. Which functions do the two commands serve in this scenario?

  1. The command access-list 1 defines interesting traffic that is allowed through the tunnel.

  2. The command ip nat inside source list 1 int s0/0 overload disables quot;many-to-onequot; access for all devices on a defined segment to share a single IP address upon exiting the external interface.

  3. The command access-list 1 permit any defines only one machine that is allowed through the tunnel.

  4. The command ip nat inside source list 1 int s0/0 overload provides quot;many-to-onequot; access for all devices on a defined segment to share a single IP address upon exiting the external interface.

Answer: D

Question No: 120 – (Topic 6)

What is a key benefit of using a GRE tunnel to provide connectivity between branch offices and headquarters?

  1. authentication, integrity checking, and confidentiality

  2. less overhead

  3. dynamic routing over the tunnel

  4. granular QoS support

  5. open standard

  6. scalability

Answer: C Explanation:

Generic routing encapsulation. Tunneling protocol developed by Cisco that can encapsulate a wide variety of protocol packet types inside IP tunnels, creating a virtual point-to-point link to Cisco routers at remote points over an IP internetwork.

100% Free Download!
Download Free Demo:300-101 Demo PDF
100% Pass Guaranteed!
Download 2017 Dumps4Cert 300-101 Full Exam PDF and VCE

Dumps4Cert ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Dumps4Cert IT Certification PDF and VCE