cisco 350-501 Exam Questions

Questions for the 350-501 were updated on : Dec 12 ,2025

Page 1 out of 34. Viewing questions 1-15 out of 501

Question 1

SIMULATION
Simulation 8



Answer:

See the


Explanation:
Solution
R3
router bgp 65413
add ipv4
nei 2.2.2.2 allowas-in
nei 4.4.4.4 allowas-in
add ipv6
nei 2001:db8:4:4:4::4 allowas-in
end
copy run start
=======================
R2
router bgp 65413
nei 1.1.1.1 as-override
nei 3.3.3.3 as-override
end
copy run start
=======================
R3
router bgp 65413
nei 10.3.4.2 remot 65412
nei 2001:db8:3:4::2 remot 65412
nei 2001:db8:4:4:4:4::4 remot 65412
nei 2001:db8:4:4:4:4::4 ebgp-multihop 10
add ip4
nei 10.3.4.2 act
ex
add ipv6
nei 2001:db8:4:4:4:4::4 activate
nei 2001:db8:4:4:4:4::4 ebgp-multihop 10
nei 2001:db8:3:4::2 act
end
copy run start
===================
R4
router bgp 65412
nei 10.3.4.1 remot 65413
nei 2001:db8:3:3:3:3::3 remot 65413
nei 2001:db8:3:3:3:3::3 ebgp-multihop 10
nei 2001:db8:3:4::1 remot 65413
add ipv4
nei 10.3.4.1 remot act
nei 10.3.4.1 prefix-limit 10
add ipv6
nei 2001:db8:3:3:3:3::3 activate
nei 2001:db8:3:3:3:3::3 ebgp-multihop 10
nei 2001:db8:3:3:3:3::3 prefix-limit 10
nei 2001:db8:3:4::1 activate
nei 2001:db8:3:4::1 prefix-limit 10
end
copy run start

Discussions
0 / 1000

Question 2

SIMULATION
Simulation 7


Answer:

See the


Explanation:
R1
key chain AUTH_ISIS
key 2
key-string C1sco!
exit
int range et0/0 , et1/0
isis authen key-chain AUTH_ISIS
ip isis
isis metric 15
Copy run start
R2
key chain AUTH_ISIS
key 2
key-string C1sco!
exit
int range et0/0 , et1/0
isis authen key-chain AUTH_ISIS
ip isis
isis metric 20
Copy run start
R3
key chain AUTH_ISIS
key 2
key-string C1sco!
exit
int range et0/0 , et1/0
isis authen key-chain AUTH_ISIS
ip isis
isis metric 25
Copy run start

Discussions
0 / 1000

Question 3

SIMULATION
Simulation 6


Answer:

See the


Explanation:
R1
router bgp 100
address-family ipv4
nei 172.16.0.2 route-map R1-TO-R2 in
network 10.1.1.1 mask 255.255.255.255
copy run start
R2
router bgp 200
address-family ipv4
network 10.2.2.2 mask 255.255.255.255
nei 172.16.0.1 route-map R2-TO-R1 in
copy run start

Discussions
0 / 1000

Question 4

SIMULATION
Simulation 5


Answer:

See the


Explanation:
R1
router ospf 10
redistribute static
int et0/0
ip ospf hello-interval 5
ip ospf dead-interval 10
ip ospf cost 15
ip ospf 10 area 0
copy run start
R2
router ospf 10
redistribute static
int et0/0
ip ospf hello-interval 5
ip ospf dead-interval 10
ip ospf cost 15
ip ospf 10 area 0
copy run start

Discussions
0 / 1000

Question 5

SIMULATION
SIMULATION 4


Answer:

See the


Explanation:
R1
Router bgp 65515
No bgp default ipv4-unicast
Neig 2.2.2.2 remote-as 65516
Nei 2.2.2.2 update-soc loopback0
Nei 2.2.2.2 ebgp-multihop 2
Neig 2.2.2.2 pass C1sc0!
Nei 2000:cc13:cc13:2::1 remote-as 65516
Nei 2000:cc13:cc13:2::1 update-so loopback0
Nei 2000:cc13:cc13:2::1 pass C1sc0!
Nei 2000:cc13:cc13:2::1 ebgp-multihop 2
Address-family ipv4
Neig 2.2.2.2 activate
Address-family ipv6
Nei 2000:cc13:cc13:2::1 activate
Ip route 2.2.2.2 255.255.255.255 192.168.1.2
Ipv6 route 2000:cc13:cc13:2::1/128 2000:cc13:cc13:cc13::2
R2
Router bgp 65516
No bgp default ipv4-unicast
Neig 1.1.1.1 remote-as 65515
Nei 1.1.1.1 update-soc loopback0
Nei 1.1.1.1 pass C1sc0!
Nei 1.1.1.1 ebgp-multihop 2
Nei 2000:cc13:cc13:1::1 remote-as 65515
Nei 2000:cc13:cc13:1::1 update-so loopback0
Nei 2000:cc13:cc13:1::1 pass C1sc0!
Nei 2000:cc13:cc13:1::1 ebgp-multihop 2
Address-family ipv4
Neig 1.1.1.1 activate
Address-family ipv6
Nei 2000:cc13:cc13:1::1 activate
Ip route 1.1.1.1 255.255.255.255 192.168.1.1
Ipv6 route 2000:cc13:cc13:1::1/128 2000:cc13:cc13:cc13::1

Discussions
0 / 1000

Question 6

SIMULATION
Simulation 3


Answer:

See the


Explanation:
TASK1:
Run “sh run” command on both routers, check if there is any “router ospf” configured. If it’s
configured, check if Loopback0 ip it’s being used as OSPF ID. If it’s, jump to TASK2. Otherwise run:
R1
router ospf 10
router-id 10.1.1.1
R2
router ospf 10
router-id 10.2.2.2
TASK2:
R1 & R2
int lo0
ip ospf 10 area 0
ip ospf network point-to-point
!
int e0/0
ip ospf network point-to-point
ip ospf 10 area 0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 C1sc0!
!

Discussions
0 / 1000

Question 7

SIMULATION
Simulation2
TOPOLOGY

http://www.justcerts.com
P-


Answer:

See the


Explanation:
R1
http://www.justcerts.com
P-

R2
http://www.justcerts.com
P-

http://www.justcerts.com

Discussions
0 / 1000

Question 8

SIMULATION
Simulation1

http://www.justcerts.com
P-


Answer:

See the
//www.justcerts.com
P-


Explanation:
SOLUTION:-
R1
Config t
router isis 1
net 49.0001.0010.0001.0101.00
area-password C1sc0!
int et0/0
ip router isis 1
isis authen mode text level-2
isis circuit-type level-2
isis tag 1
int et1/0
ip router isis 1
isis authen mode text level-2
isis circuit-type level-2
isis tag 1
R2
router isis 2
net 49.0001.0010.0002.0202.00
http://www.justcerts.com
P-
area-password C1sc0!
int et0/0
ip router isis 2
isis authen mode text level-2
isis circuit-type level-2
isis tag 2
int et1/0
ip router isis 2
isis authen mode text level-1
isis circuit-type level-1
isis tag 2
R3
router isis 3
net 49.0001.0010.0003.0303.00
area-password C1sc0!
int et0/0
ip router isis 3
isis authen mode text level-1
isis circuit-type level-1
isis tag 3
int et1/0
http://www.justcerts.com
P-
ip router isis 3
isis authen mode text level-2
isis circuit-type level-2
isis tag 3
R1 Verification: -

R1
Config t
Ipv6 unicast-routing
Router isis 1
Metric-style wide
Address-family ipv6 unicast
Multi-topology
Int loop0
Ip router isis 1
Ipv6 router isis 1
http://www.justcerts.com
P-
Isis tag 1
Int et0/0
Ipv6 router isis 1
Int et1/0
Ipv6 router isis 1
R2
Config t
Ipv6 unicast-routing
Router isis 2
Metric-style wide
Address-family ipv6 unicast
Multi-topology
Int loop0
Ip router isis 2
Ipv6 router isis 2
Isis tag 2
Int et0/0
Ipv6 router isis 2
Int et1/0
http://www.justcerts.com
P-
Ipv6 router isis 2
R3
Config t
Ipv6 unicast-routing
Router isis 3
Metric-style wide
Address-family ipv6 unicast
Multi-topology
Int loop0
Ip router isis 3
Ipv6 router isis 3
Isis tag 3
Int et0/0
Ipv6 router isis 3
Int et1/0
Ipv6 router isis 3
R1 Ipv6 Verification: -
http://www.justcerts.com
P-

L

R1
Copy run start
R2
Copy run start
http://www.justcerts.com
P-
R3
Copy run start

Discussions
0 / 1000

Question 9

After recent network outages and customer complaints, a large Tier 1 service provider has asked a network engineer to
implement MPLS OAM policy on all Provider Edge devices in the MPLS network. To improve network performance and
reliability, the policy must be able to detect 2% packet drops and a delay of 0.05 seconds. The solution must be based on
RFC 6374 and RFC 4379 standards for MPLS OAM. The CCM to detect connectivity issues has already been configured with
interval 1000. Which two actions must the engineer take to achieve the goal? (Choose two.)

  • A. Set loopback delay-frequency 50 and drop-threshold 0.2 on the PE routers.
  • B. Implement mpls ldp tracing on the PE and P routers.
  • C. Implement mpls oam policy oam on the PE routers.
  • D. Implement mpls ip oam map-policy on the PE routers. http://www.justcerts.com P-
  • E. Set loss-threshold 2 and delay-threshold 50 on the P routers.
Answer:

A, C

User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%

Discussions
vote your answer:
A
B
C
D
E
0 / 1000

Question 10

An organization with big data requirements is implementing NETCONF as part of its migration to a new cloud-based
environment. The organization has multiple offices across widespread geography. A network engineer is configuring
NETCONF on one of the border routers. Which configuration must the engineer apply to save the running configuration?

  • A. <xml version="1.0" encoding="utf-8"?> <rpc xmlns="urn:letf:params:xml:ns:netconf:base:1.0" message- id="1"> <edit-config> <target> <running/> </target> <config> </config> </edit-config> </rpc>
  • B. <xml version="1.0" encoding="utf-8"?> <rpc xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message- id="2"> <cisco-ia:save-config xmlns:cisco- ia="http://cisco.com/yang/cisco-ia"/> http://www.justcerts.com P- </rpc>
  • C. snmp-server community public RW snmp-server trap link left snmp-server enable traps snmp authentication linkdown linkup snmp-server enable traps syslog snmp-server manager
  • D. logging history debugging logging snmp-trap emergencies logging snmp-trap alerts logging snmp-trap critical logging snmp-trap errors logging snmp-trap warnings logging snmp-trap notifications logging snmp-trap information logging snmp-trap debugging
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 11

The NOC engineer in a service provider network must configure an SNMP community on switch SW with these security
attributes:
* Event messages must be authenticated with the MD5 algorithm and encrypted.
* The remote user name for the SNMP server at 172.16.10.1 is AuthNocUser.
Which configuration must the engineer apply to the switch?

  • A. SW(config)# snmp-server group group2 v3 auth SW(config)# snmp-server user AuthNocUser group2 remote 172.16.10.1 v3 auth md5 password1
  • B. SW(config)# snmp-server group group3 v3 priv http://www.justcerts.com P- SW(config)# snmp-server user AuthNocUser group3 remote 172.16.10.1 v3 auth md5 Cisco@123 priv des 56
  • C. SW(config)# snmp-server group group1 v3 noauth SW(config)# snmp-server user AuthNocUser group1 remote 172.16.10.1 SW(config)# snmp-server host 172.16.10.1 informs version 3 noauth remoteuser config
  • D. SW(config)# snmp-server community comaccess ro 4 SW(config)# snmp-server enable traps snmp authentication SW(config)# snmp-server host cisco.com version 2c public
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 12

Refer to the exhibit.

Refer to the exhibit. Routers R1 and R2 support traffic between multiple departments at a company's remote office and
exchange routes using OSPF. The link between R1 and R2 has been providing inconsistent performance, particularly during
times of peak usage. To help identify the cause, an engineer was asked to implement BFD to detect failures on the link.
Which task must the engineer perform?

  • A. Configure the session parameters individually on each interface.
  • B. Configure IS-IS to share routes between the routers.
  • C. Change the network between R1 and R2 to a /30 prefix.
  • D. Configure echo mode on both devices to support asymmetry.
Answer:

D

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 13

How does TACACS+ facilitate secure connections for user access to network routers?

  • A. The user's end device uses CHAP to securely query the network access server to authenticate the user via the TACACS+ protocol.
  • B. The network access server communicates securely with a TACACS+ daemon to authenticate the user.
  • C. The user provides a password over a secure connection to the TACACS+ server for authorization.
  • D. The network access server communicates securely with the router via the TACACS+ protocol to authorize Telnet access by the user to specific parts of a router.
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Explanation:
http://www.justcerts.com
P-

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 14

Company A must increase throughput between two non-IEEE 802.3ad switches located in the access and distribution layers.
A network engineer must create a link group with the same speed and duplex. The STP protocol must not block any of the
group ports. Which action completes the implementation?

  • A. Group Ethernet interfaces with mode desirable under the physical interfaces.
  • B. Enable Port Aggregation Protocol with mode auto under the logical group interface.
  • C. Configure a group logical interface with mode active enabled.
  • D. Bundle the physical interfaces with mode lacp configured on each of them.
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 15

What is one of the main functions of 6RD?

  • A. It provides stateful session translation with the 2002::/16 prefix.
  • B. It translates RFC 1918 IP addresses into public IP addresses.
  • C. It provides native reachability between IPv4-only hosts and 6RD-enabled IPv6 hosts. http://www.justcerts.com P-
  • D. It allows customers IPv6 traffic to be tunneled over IPv4 network infrastructure.
Answer:

D

User Votes:
A
50%
B
50%
C
50%
D
50%

Discussions
vote your answer:
A
B
C
D
0 / 1000
To page 2