[May-2026] Latest Cisco 350-501 Certification Practice Test Questions
Verified 350-501 Dumps Q&As - 1 Year Free & Quickly Updates
NEW QUESTION # 268
Refer to the exhibit:
After implementing a new design for the network, a technician reviews the pictured CLI output as part of the MOP.
Which two statements describe what the technician can ascertain from the ImpNull output? (Choose two.)
- A. Label 0 is used for the prefix displayed but will not be part of the MPLS label stack for packets destined for 192 168.10.10.
- B. Ultimate Hop Popping is in use for the prefix displayed.
- C. Label 3 is in use for the prefix displayed and will be part of the MPLS label stack for packets destined for 192.168.10.10
- D. Penultimate Hop Popping is in use for the prefix displayed
- E. Label 0 is used for the prefix displayed and will be part of the MPLS label stack for packets destined for
192.168.10.10
Answer: C,D
NEW QUESTION # 269
What are two purposes of a data-modeling language such as YANG? (Choose two.)
- A. defining a semi-structured data scheme
- B. defining a relational-model data scheme
- C. defining a hierarchical data scheme
- D. modeling notifications, data configuration and data status
- E. defining API calls, JSON format and XML structure
Answer: C,D
NEW QUESTION # 270
The network team is planning to implement IPv6 on the company's existing IPv4 network infrastructure. The network currently uses IS-IS to share routes between peers. Which task must the team perform so that IS-IS will run in multitopology mode on the updated IPv6 network?
- A. Configure the links between the network routers as point-to-point.
- B. Configure the IS-IS IPv6 metric on the dual-stack links.
- C. Configure the network routers as Level 2 routers.
- D. Configure the network routers to use metric-style wide.
Answer: B
NEW QUESTION # 271
Refer to the exhibit:
You are configuring an administrative domain implement so that devices can dynamically learn the RP?
- A. BID1R-PIM
- B. SSM
- C. BSR
- D. Auto-RP
Answer: D
NEW QUESTION # 272 
Refer to the exhibit. A network engineer is configuring an SNMP community on router RB with these requirements:
* Allow read-only access for all objects to members of Access-List 10 that use the comaccess community string.
* Other SNMP managers must not have access to objects.
* SNMP authentication failure traps must be sent to SNMPv2c and then to the host using SNMPv2c with the public community string.
Which configuration meets these requirements?
- A. Option B
- B. Option A
- C. Option D
- D. Option C
Answer: A
Explanation:
Option B is the correct answer because it meets all the given requirements. The configuration "snmp-server community comaccess ro 10" allows read-only access for all objects to members of Access-List 10 that use the comaccess community string. The "snmp-server host ABC.com informs version 2c public" command ensures SNMP authentication failure traps are sent to SNMPv2c and then to the host using SNMPv2c with the public community string.
NEW QUESTION # 273
Refer to the exhibit.
A network engineer is deploying SNMP configuration on client's routers. Encrypted authentication must be included on router 1 to provide security and protect message confidentially. Which action should the engineer perform on the routers to accomplish this task?
- A. snmp-server group group 1 v3 auth.
- B. snmp-server community public
- C. snmp-server host 192.168.0.254 informs version 3 auth testuser config.
- D. snmp-server user testuser group 1 remote 192.168.0.254 v3 auth md5 testpassword
Answer: D
NEW QUESTION # 274
What are two factors to consider when implementing NSR High Availability on an MPLS PE router? (Choose two.)
- A. It requires routing protocol extensions
- B. It requires all PE-CE sessions to support NSR
- C. It consumes more memory and CPU resources than NSF
- D. It cannot sync state information across redundant RPs
- E. It operates normally without NSR support on the PE peers.
Answer: C,E
NEW QUESTION # 275 
Refer to the exhibit. If router RA is configured as shown, which IPv4 multicast address space does it use?
- A. 239.0.0.0/8
- B. 232.0.0.0/8
- C. 225.0.0.0/8
- D. 224.0.0.0/8
Answer: B
Explanation:
Section: Services
Explanation
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/multicast/ configuration_guide/b_mc_3se_3850_cg/b_mc_3se_3850_cg_chapter_01011.html
NEW QUESTION # 276
Refer to the exhibit.
An engineer must configure router R2 as the new P router in the network. Which configuration must be applied to R2 to enable LDP-IGP Sync on its L2 IS-IS adjacencies?
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: D
NEW QUESTION # 277
An engineer working for a telecommunication company with an employee ID: 1234:56:789 must configure an OSPF router in a multivendor network so that it performs NSF in the event of a route processor switchover. Which configuration must the engineer apply?
- A. router ospf 1
nsf ietf - B. router ospf 1
nsf ietf helper - C. router ospf 1
nsf cisco - D. router ospf 1
nsf cisco helper
Answer: A
NEW QUESTION # 278
Refer to the exhibit.
An engineer working for private Service Provider with employee id: 3948:11:613 is configuring the BGPsec framework. Which two conditions must the engineer take into account? (Choose two.)
- A. BGPsec uses IPsec tunnel for security.
- B. Private keys are part of the router key pair used to sign route updates.
- C. In BGPsec. all route advertisements are given an expiry time by the originator of the route.
- D. The BGPsec framework secures the AS path.
- E. In BGPsec. route advertisements are not given an expiration time by the originator of the route.
Answer: B,D
Explanation:
The BGPsec framework is designed to secure the AS path information in BGP updates. It uses digital signatures to validate the AS path and prevent unauthorized route manipulation. Here are the key points related to BGPsec:
Securing AS Path:
BGPsec ensures the integrity of the AS path by allowing routers to sign BGP updates using their private keys.
When a router originates a BGP route, it signs the AS path information with its private key.
Other routers can verify the signature using the corresponding public key.
This prevents malicious AS path modifications and ensures the authenticity of the advertised route.
Private Keys and Router Key Pair:
BGPsec relies on cryptographic keys for signing and verifying BGP updates.
Each router has a router key pair consisting of a private key and a corresponding public key.
The private key is kept confidential and is used for signing route updates.
The public key is distributed to other routers for verification.
Expiration Time:
Unlike regular BGP updates, BGPsec does not assign an expiration time (TTL) to route advertisements.
The absence of an expiration time ensures that the signed AS path remains valid until explicitly withdrawn.
In summary, BGPsec enhances BGP security by securing the AS path using digital signatures and private keys. It does not rely on IPsec tunnels for security1.
Reference:
Cisco. (2021). Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) v1.0. Cisco Learning Services.
Cisco. (2021). Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) v1.1. Cisco Learning Network Store.
Cisco. (2021). BGPsec Overview. Link
NEW QUESTION # 279
Refer to the exhibit:
Export statistics received do not include the BGP next hop.
Which statement about the NetFlow export statistics is true?
- A. Loopback 0 must be participating in BGP for it to be included in the export statistics.
- B. To include the BGP next hop in the export statistics, those keywords must be included with the version 9 entry.
- C. The origin AS and the peer-as will be included in the export statistics.
- D. Only the origin AS of the source router will be included in the export statistics.
Answer: B
NEW QUESTION # 280
Refer to the exhibit. An organization s network recently experienced several significant outages due to device failures. The network administrator just moved the network devices to a new central data center, and packets are switched using labels. The administrator Is now implementing NSF on the network to reduce potential risk factors in the event of another outage.
Which task must the administrator perform on each router as part of the process?
- A. Remove route filtering to speed repopulation of the link-state database
- B. Implement Graceful Restart to mitigate the delay in MPLS LDP synchronization when the IGP starts up.
- C. Implement MPLS to forward packets while the RIB updates after a faliover.
- D. Copy the router s existing state information and share the file with its peers to enable BGP soft resets
Answer: B
NEW QUESTION # 281
Refer to the exhibit.
An engineer is securing a customer's network. Which command completes this configuration and the engineer must use to prevent a DoS attack?
- A. ttl-security
- B. ebgp-multihop
- C. neighbor ebgp-multihop
- D. neighbor-ttl-security
Answer: A
Explanation:
The TTL security mechanism is used to protect a router from receiving BGP sessions that are not originated from the expected peer. It drops incoming TCP segments whose TTL value is not equal to or greater than the expected minimum value, thus helping in preventing DoS attacks that could be initiated from an unauthorized source pretending to be a legitimate BGP peer. References := Implementing and Operating Cisco Service Provider Network Core Technologies
NEW QUESTION # 282
Which CLI mode must be used to configure the BGP keychain in Cisco IOS XR software?
- A. mode BGP address-family configuration mode
- B. BGP neighbor configuration
- C. global configuration mode
- D. routing configuration mode
Answer: C
NEW QUESTION # 283
Drag and drop the functionalities from the left onto the correct target fields on the right.
Answer:
Explanation:
NEW QUESTION # 284
Refer to the exhibit. An engineer is implementing Auto-RP and reviewing the configuration of the PE-A.
Which configuration permits Auto-RP messages to be forwarded over this interface?
- A. PE-A(config-if)#no ip pim bsr-border
- B. PE-A(config-if)#ip pim sparse-mode
- C. PE-A(config-if)#ip pim sparse-dense-mode
- D. PE-A(config-if)#ip igmp version 3
Answer: C
NEW QUESTION # 285
Refer to the exhibit.
ASN 64501 currently reaches the networks under the 10.0.0.0/8 prefix via the North_B router, which is a slow backup link. The administrator of ASN 64502 wants traffic from ASN 64501 to 10.0.0.0/8 to travel via the primary link North_A.
Which change to the network configuration accomplishes this task?
- A. Advertise the 10.0.0.0/8 prefix through North_B and specific subnets through North_A
- B. Set a Lower Weight value for incoming traffic on North_A
- C. Set a higher local preference between North_A and South_A
- D. Set a lower MED between North_B and South_B
Answer: D
NEW QUESTION # 286
Refer to the exhibit:
Which configuration prevents the OSPF neighbor from establishing?
- A. duplex
- B. network statement
- C. default-metric
- D. mtu
Answer: D
Explanation:
The OSPF neighbor relationship is not establishing due to a mismatch in MTU (Maximum Transmission Unit) settings on the interfaces of PE-A and PE-B routers. On PE-A, there is no MTU configuration under the interface FastEthernet0/0, which means it is using the default MTU setting. However, on PE-B, the MTU is explicitly set to 1400 bytes with "ip mtu 1400" command under interface FastEthernet0/0. OSPF requires that both ends of a point-to-point link have matching MTU sizes to form a neighbor relationship; otherwise, OSPF adjacency will not be established.
:
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) - Cisco SPCOR Resources
NEW QUESTION # 287
Which configuration mode do you use to apply the mpls Idp graceful-restart command in IOS XE Software?
MPLS
- A. interface
- B. global
- C. LDP neighbor
- D. MPLS
Answer: B
Explanation:
The mpls ldp graceful-restart command is applied in the global configuration mode in IOS XE Software. This command enables MPLS LDP Graceful Restart, which assists a neighboring router with MPLS LDP Stateful Switchover/Nonstop Forwarding (SSO/NSF) Support and Graceful Restart to recover gracefully from an interruption in service without losing its MPLS forwarding state1.
MPLS Configuration Guide, Cisco IOS XE 17.x1.
NEW QUESTION # 288
......
Latest 2026 Realistic Verified 350-501 Dumps - 100% Free 350-501 Exam Dumps: https://www.dumpexams.com/350-501-real-answers.html
Get 2026 Updated Free Cisco 350-501 Exam Questions and Answer: https://drive.google.com/open?id=1WjcwlafI5cT9VRIKsoAu1vVOwA16tyZA