exam questions

Exam 350-501 All Questions

View all questions & answers for the 350-501 exam

Exam 350-501 topic 1 question 10 discussion

Actual exam question from Cisco's 350-501
Question #: 10
Topic #: 1
[All 350-501 Questions]

While implementing TTL security, you issue the PE(config-router-af)#neighbor 2.2.2.2 ttl-security hops 2 command.
After you issue this command, which BGP packets does the PE accept?

  • A. to 2.2.2.2, with a TTL of 2 or more
  • B. from 2.2.2.2, with a TTL of less than 2
  • C. to 2.2.2.2, with a TTL of less than 253
  • D. from 2.2.2.2, with a TTL of 253 or more
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
rans3001
11 months ago
Selected Answer: D
Example: Router(config-router)# neighbor 10.1.1.1 ttl-security hops 2 The example configuration sets the expected incoming TTL value to at least 253, which is 255 minus the TTL value of 2, and this is the minimum TTL value expected from the BGP peer. The local router will accept the peering session from the 10.1.1.1 neighbor only if it is 1 or 2 hops away. https://www.cisco.com/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxebtsh.html
upvoted 2 times
...
picho707
1 year, 3 months ago
Selected Answer: D
According to Cisco, the expected ping response from the neighbor should be 253 or greater because 255-253=2 or 255-254=1 which means that the neighbor is 2 or 1 hops away.
upvoted 1 times
...
Benxi
2 years, 2 months ago
the expected incoming TTL value to at least 253 Reference: https://www.cisco.com/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxebtsh.html
upvoted 1 times
...
chst
3 years, 1 month ago
It's D -------------------------------------------------- neighbor 10.1.1.1 ttl-security hops 2 The example configuration sets the expected incoming TTL value to at least 253, which is 255 minus the TTL value of 2, and this is the minimum TTL value expected from the BGP peer. The local router will accept the peering session from the 10.1.1.1 neighbor only if it is 1 or 2 hops away. -------------------------------------------------------------- https://www.cisco.com/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxebtsh.html#wp1059215
upvoted 2 times
...
chst
3 years, 2 months ago
It's B. from 2.2.2.2, with a TTL of less than 2
upvoted 1 times
thejag
2 years, 3 months ago
That's not right, it's 253 or more. 255-2 = 253
upvoted 4 times
...
...
Moks87
3 years, 7 months ago
neighbor 10.1.1.1 ttl-security hops 2 The local router will accept the peering session from the 10.1.1.1 neighbor only if it is 1 or 2 hops away. https://www.cisco.com/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxebtsh.html#wp1059215
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...