Welcome, Guest
You have to register before you can post on our site.

Username
  

Password
  





Search Forums

(Advanced Search)

Latest Threads
PASSED!
Forum: CCNP ENCOR 350-401 Forum
Last Post: brownhorse
5 hours ago
» Replies: 0
» Views: 11
Passed Exam
Forum: CCNP ENCOR 350-401 Forum
Last Post: brownhorse
11-16-2024, 01:25 AM
» Replies: 1
» Views: 472
AN324
Forum: Answer this question
Last Post: help_desk
11-13-2024, 10:19 AM
» Replies: 1
» Views: 164
AN413
Forum: Answer this question
Last Post: help_desk
11-08-2024, 01:11 PM
» Replies: 1
» Views: 196
AND60
Forum: Answer this question
Last Post: help_desk
11-04-2024, 10:37 AM
» Replies: 1
» Views: 184
and64
Forum: Answer this question
Last Post: help_desk
11-04-2024, 10:11 AM
» Replies: 1
» Views: 199
AN600
Forum: Answer this question
Last Post: help_desk
10-26-2024, 09:34 AM
» Replies: 1
» Views: 274
AN401
Forum: Answer this question
Last Post: help_desk
10-23-2024, 10:49 AM
» Replies: 1
» Views: 311
Just Passed! Corrected La...
Forum: CCNP ENARSI 300-410 Forum
Last Post: jupertino
10-14-2024, 04:15 AM
» Replies: 1
» Views: 507
Anyone pass recently usin...
Forum: CCNP ENARSI 300-410 Forum
Last Post: jupertino
10-14-2024, 04:02 AM
» Replies: 1
» Views: 1,027

 
  encor wrong answers
Posted by: uglyprawn - 02-20-2021, 09:25 AM - Forum: CCNP ENCOR 350-401 Forum - Replies (35)

I see some wrong answers quite often and i invite you all to discuss them.


first question of arhitecture
Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?
  • A. all devices integrating with ISE

  • B. selected individual devices

  • C. all devices in selected cities

  • D. all wired devices

i dont think all devices integrated with ise is the right answer as is a ip based control access policy
doing a bit of reasrach i found a similar question
Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?
  • A. all devices integrating with ISE

  • B. selected individual devices

  • C. all devices in selected sites

  • D. all wired devices
    with an answer of Clooking on cisco papers i found this IP-Based Access Control PoliciesAn IP-based access control policy controls the traffic going into and coming out of a Cisco device in the same way that an Access Control List (ACL) does. As with an ACL, an IP-based access control policy contains lists of permit and deny conditions that are applied to traffic flows based on various criteria, including protocol type, source IP address, destination IP address, or destination port number.IP-based access control policies can be used to filter traffic for various purposes, including security, monitoring, route selection, and network address translation.https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-3-1-0/user_guide/b_cisco_dna_center_ug_1_3_1_0/b_cisco_dna_center_ug_1_3_1_0_chapter_01011.htmlbut i still cant get answer to the question. as a quess i would go with all wierd devices.
Help and explination pls?

question EC007
Which description of an SD-Access wireless network infrastructure deployment is true?
A . The access point is part of the fabric underlay.
B . The WLC is part of the fabric underlay.
C . The access point is part the fabric overlay.
D . The wireless client is part of the fabric overlay.

coorect answer is C access point is part of overlay
https://community.cisco.com/t5/cisco-dig...-p/4112722

Print this item

  QID AND20
Posted by: alaska_nelly - 02-15-2021, 06:08 AM - Forum: Answer this question - Replies (1)

That question is a 'drag and drop' mix and match on CQ, PQ, WFQ CBWFQ, and FIFO. I believe I am getting them right from your provided answers, but it is showing them as being wrong in the answer key.

Could you research and fix this if needed, please?

Print this item

  QID AN253
Posted by: alaska_nelly - 02-15-2021, 05:04 AM - Forum: Answer this question - Replies (2)

That question asks:



"Which two WAN architecture options help a business improve scalability and reliability for the network?"




I believe that the current answer of 'dual-home branches'  and 'dynamic routing' is incorrect. 

The actual answer appears to be 'dual home-branches'  and  'asynchronous routing' according to multiple sites and a duplicate question on How2pass (unsure of the QID it did show up, you will have to research it).

Could you research and fix this if needed, please?

Print this item

  QID AN034
Posted by: alaska_nelly - 02-15-2021, 02:13 AM - Forum: Answer this question - Replies (2)

I believe that the current answer of 'passive' is incorrect. It is the neighbor S2 that is passive. And that question asks:

"Refer to the Exhibit. Based on the LACP neighbor status, in which mode is the SW1 port-channel configured?"

I believe the answer would be 'active.'

I went out and checked many free testing sites and they said the same. So this is confusing.

Print this item

  EC072 - ACL in the inbound direction
Posted by: gustav - 02-13-2021, 03:22 PM - Forum: CCNP ENCOR 350-401 Forum - No Replies

An ACL on the port connection to the web server applied in the inbound direction means the traffic comes from the webserver to the client
(source = webserver, destination = client).
So the correct answer is "permit tcp host 209.165.200.225 eq 80 host 209.165.201.25"

Print this item

  QID:AN253 & QID:AN191
Posted by: ratedr - 02-10-2021, 08:00 PM - Forum: General - Replies (2)

Hey Guys,

I noticed when doing the recently added/modified section the two above question ask the question but have to different answers.

Also is it possible to make the prep test 120 questions just like the actual CCNA exam?

Thanks,

Print this item

  Current ENCOR Questions
Posted by: wangardm - 02-07-2021, 05:21 PM - Forum: CCNP ENCOR 350-401 Forum - Replies (1)

Hey guys,

is it right that currently no "router simulations, simlets" in the ENCOR tests?

Thanks and regards
Martin

Print this item

  EC255 - AP connection to WLC
Posted by: gustav - 01-28-2021, 10:30 PM - Forum: CCNP ENCOR 350-401 Forum - Replies (2)

Decimal 172 is equal to hex value ac, therefore the following solution is correct:

Configure option 43 Hex F104.AC10.3205

Print this item

  Confused about route-maps, prefix-lists, acl's, and distribution-lists
Posted by: IT-Biscuit - 01-16-2021, 06:46 AM - Forum: CCNP ENARSI 300-410 Forum - No Replies

So before I start, I am currently CCNA certified and working on CCNP.  I understand this much...

 
  • prefix-lists and access-lists are used to collect a pool of IP's or subnets to compare and contrast from

  • route-maps and distribution-lists look to those prefix-lists and access-lists or other criteria to make a decision on how to handle those pools of IP's, whether to permit them, forward them, block them from entering the AS or routing table.

  • distribution-lists only affect the IP routing table, not the AS topology information, meaning if R1, a DR in an OSPF topology within area 0 were using a distribution-list to block network 192.168.5.0/24 - it would only block it from R1's routing table (show ip route) rather than the OSPF topology (show ip ospf topology) so 192.168.5.0/24 would still propogate to other routers ospf topology and ip routing table if there were no additional filters preventing it from doing so.

  • As for route-maps - they can do alot of stuff from what I'm gathering, blocking or permitting traffic is only one of them, they can also redistribute traffic along another path using a next-hop argument. Anyway though, in this context, a route-map would block the network from the entire AS if its implemented on a ASBR.
Now what I'm having difficulty with are the actual uses of ip-prefix lists or acl's with route-maps and the most effective way to use them. Lets say for example I wanted to redistribute OSPF to EIGRP and there were two ASBR's for the same AS's and I want to tag traffic to ensure that there are no loops...

R3 is between EIGRP 100 and OSPF 1 Area 1

[b]R3 and R7 are ASBR's between OSPF 1 and EIGRP 100[/b]
[b]R5 & R6 have virtual-link configured to give R7 access to Area 0[/b]



[Image: large?v=1.0&px=999]

So now the question.. ..what would be the most effective way to...
Block IP's 10.20.0.0 thru 10.20.5.255 from entering the EIGRP routing table with the least amount of commands?
This is what I did on [b]R3[/b] and [b]R7[/b]

[code]
ip prefix-list OSPF_Filter deny 10.20.0.0/24 le 32
ip prefix-list OSPF_Filter deny 10.20.1.0/24 le 32
ip prefix-list OSPF_Filter deny 10.20.5.0/24 le 32
ip prefix-list OSPF_Filter deny 10.20.2.0/24 le 32
ip prefix-list OSPF_Filter deny 10.20.3.0/24 le 32
ip prefix-list OSPF_Filter deny 10.20.4.0/24 le 32
ip prefix-list OSPF_Filter deny 10.20.5.0/24 le 32
ip prefix-list OSPF_Filter permit 0.0.0.0/0 le 32

route-map OSPF-EIGRP permit 5
set tag 20
match ip address prefix-list OSPF_Filter
route-map OSPF-EIGRP deny 10
match tag 10
route-map EIGRP-OSPF permit 5
set tag 10
route-map EIGRP-OSPF deny 10
match tag 20

router eigrp 100
redistribute ospf 1 metric 10000 100 255 1 1500 route-map OSPF-EIGRP
router ospf 1
redistribute eigrp 100 subnets route-map EIGRP-OSPF[/font][/size][/color]
[/code]
Are the tags set correctly above?
I can't help but feel that this approach was very cumbersome and there should be an easier way to approach it with less statements or through summarization. Problem is if I summarize that route in the prefix-list I end up with a 10.20.0.0/28 which will also block unintended networks.
 
  • Can you use route summaries in prefix-lists to block out everything in the summarized route?

  • Can you modify the ge / le qualifiers in this example to only include 10.20.0.0 thru 10.20.5.255?

  • What would happen if my prefix-list instead permitted the routes and denied 0.0.0.0/0 le 32 (is that even necessary, this should be implicitly denied right?) If I did that, how would I implement it on the route-map to block the IP's permitted in the prefix-list? Would this be appropriate or would it block out all routes? Would the below be appropiate? If not, what would be best to filter those nodes out from the EIGRP routing table while keeping it in this syntax (with the prefix-lists permitting).
[code]
ip prefix-list OSPF_Filter permit 10.20.0.0/24 le 32
ip prefix-list OSPF_Filter permit 10.20.1.0/24 le 32
ip prefix-list OSPF_Filter permit 10.20.5.0/24 le 32
ip prefix-list OSPF_Filter permit 10.20.2.0/24 le 32
ip prefix-list OSPF_Filter permit 10.20.3.0/24 le 32
ip prefix-list OSPF_Filter permit 10.20.4.0/24 le 32
ip prefix-list OSPF_Filter permit 10.20.5.0/24 le 32
ip prefix-list OSPF_Filter deny 0.0.0.0/0 le 32

route-map OSPF-EIGRP permit 5
set tag 20
route-map OSPF-EIGRP deny 10
match tag 10
match ip address prefix-list OSPF_Filter
route-map EIGRP-OSPF permit 5
set tag 10
route-map EIGRP-OSPF deny 10
match tag 20
[/code]

Print this item

  Passed
Posted by: darkmice99 - 01-16-2021, 12:15 AM - Forum: CCNP ENCOR 350-401 Forum - No Replies

I took the test today and passed with an 867. There were 105 questions on the exam with 17 questions that were not available on how2pass however what was provided is surely appreciated. Thanks again how2pass, I’ve been a loyal customer for 7 years with more to come.

Print this item