Exam 350-501 topic 1 question 276 discussion

Actual exam question from Cisco's 350-501

Question #: 276
Topic #: 1

Refer to the exhibit. A network engineer at ISP-B must advertise 198.19.100.0/24 `" 198.19.105.0/24 prefixes to ISP-A with these requirements:
✑ Prefixes 198.19.100.0/24 `" 198.19.102.0/24 must have the community set to 64602:10.
✑ Prefixes 198.19.103.0/24 `" 198.19.105.0/24 must have the community set to 64602:11.
The AS_PATH for the 198.19.103.0/24 `" 198.19.105.0/24 prefixes must appear as `64602 64602` in ASN 64601.

Which configuration must the engineer implement on the ISP-B router to meet the requirements?

A. configure terminal access-list 30 deny 198.19.100.0 0.0.0.255 access-list 30 deny 198.19.101.0 0.0.0.255 access-list 30 deny 198.19.102.0 0.0.0.255 ! route-map ASN-64601-OUT permit 10 match ip address 30 set as-path prepend 64602 64602 set community 64602:11 route-map ASN-64601-OUT permit 20 set community 64602:10 end
B. configure terminal access-list 30 deny 198.19.103.0 0.0.0.255 access-list 30 deny 198.19.104.0 0.0.0.255 access-list 30 deny 198.19.105.0 0.0.0.255 ! route-map ASN-64601-OUT deny 10 match ip address 30 set as-path prepend 64602 set community 64602:11 route-map ASN-64601-OUT permit 20 set community 64602:10 end
C. configure terminal access-list 30 deny 198.19.100.0 0.0.0.255 access-list 30 deny 198.19.101.0 0.0.0.255 access-list 30 deny 198.19.102.0 0.0.0.255 access-list 30 permit any ! route-map ASN-64601-OUT permit 10 match ip address 30 set as-path prepend 64602 set community 64602:11 route-map ASN-64601-OUT permit 20 set community 64602:10 end
D. configure terminal access-list 30 deny 198.19.100.0 0.0.0.255 access-list 30 deny 198.19.101.0 0.0.0.255 access-list 30 deny 198.19.102.0 0.0.0.255 access-list 30 permit any ! route-map ASN-64601-OUT permit 10 set community 64602:10 ! route-map ASN-64601-OUT permit 20 match ip address 30 set as-path prepend 64602 64602 set community 64602:11 end

Show Suggested Answer

Suggested Answer: C 🗳️

by ccie_race at Oct. 25, 2022, 1:37 a.m.

Comments

Submit Cancel

ccie_race

Highly Voted 2 years, 7 months ago

C. access-list 30 will match ==> 103-105 subnets route-map ASN-64601-OUT permit 10 ==> applies to 103-105 subnets route-map ASN-64601-OUT permit 20 ==> applies to 100-102 subnets configure terminal access-list 30 deny 198.19.100.0 0.0.0.255 access-list 30 deny 198.19.101.0 0.0.0.255 access-list 30 deny 198.19.102.0 0.0.0.255 access-list 30 permit any route-map ASN-64601-OUT permit 10 match ip address 30 set as-path prepend 64602 set community 64602:11 route-map ASN-64601-OUT permit 20 set community 64602:10 end

upvoted 8 times

...

picho707

Most Recent 10 months, 2 weeks ago

Selected Answer: D

ip access-list standard 30 10 deny 198.19.100.0 0.0.0.255 20 deny 198.19.101.0 0.0.0.255 30 deny 198.19.102.0 0.0.0.255 40 permit any ! route-map ASN-64601-OUT permit 10 set community 64602:10 ! route-map ASN-64601-OUT permit 20 match ip address 30 set as-path prepend 64602 64602 set community 64602:11

upvoted 1 times

picho707

10 months ago

I correct my answer. The answer is C. This is why!> A=> missing permit statement in the access list. B=> missing permit statement in the access list. C=> It meets all the requirements. D => It prepends AS_PATH 64602 three times instead of two.

upvoted 1 times

...

HARDCCNP

1 year, 3 months ago

198.19.100.0 0.0.0.255 Deveria ser permitida de acordo com a pergunta.

upvoted 1 times

...

thejag

1 year, 12 months ago

Selected Answer: C

C is correct

upvoted 1 times

...

thejag

1 year, 12 months ago

A. configure terminal access-list 30 deny 198.19.100.0 0.0.0.255 access-list 30 deny 198.19.101.0 0.0.0.255 access-list 30 deny 198.19.102.0 0.0.0.255 ! route-map ASN-64601-OUT permit 10 match ip address 30 set as-path prepend 64602 64602 set community 64602:11 route-map ASN-64601-OUT permit 20 set community 64602:10 end B. configure terminal access-list 30 deny 198.19.103.0 0.0.0.255 access-list 30 deny 198.19.104.0 0.0.0.255 access-list 30 deny 198.19.105.0 0.0.0.255 ! route-map ASN-64601-OUT deny 10 match ip address 30 set as-path prepend 64602 set community 64602:11 route-map ASN-64601-OUT permit 20 set community 64602:10 end

upvoted 1 times

...

thejag

1 year, 12 months ago

C. configure terminal access-list 30 deny 198.19.100.0 0.0.0.255 access-list 30 deny 198.19.101.0 0.0.0.255 access-list 30 deny 198.19.102.0 0.0.0.255 access-list 30 permit any ! route-map ASN-64601-OUT permit 10 match ip address 30 set as-path prepend 64602 set community 64602:11 route-map ASN-64601-OUT permit 20 set community 64602:10 end D. configure terminal access-list 30 deny 198.19.100.0 0.0.0.255 access-list 30 deny 198.19.101.0 0.0.0.255 access-list 30 deny 198.19.102.0 0.0.0.255 access-list 30 permit any ! route-map ASN-64601-OUT permit 10 set community 64602:10 ! route-map ASN-64601-OUT permit 20 match ip address 30 set as-path prepend 64602 64602 set community 64602:11 end

upvoted 1 times

...

ZeeZaidi

2 years, 4 months ago

A and D are incorrect as we have to specify an AS number just once not twice set as-path prepend 64602 --> correct set as-path prepend 64602 64602 --> incorrect

upvoted 2 times

...