A service provider upgraded its core routers to CRS-1. The service provider connects the CRS-1
to an internal network via CRS-1 management ports. This internal network is configured with
private IP addresses. All SSH access from a service provider workstation that is incoming to the
management ports of the CRS-1 routers was tested and was found to be working properly. The
routers were configured for AAA by using the Cisco Secure Access Control Server, and AAA was
working as desired. Furthermore, SNMP traffic used the inband 10-Gigabit Ethernet ports, and all
SNMP functionality was properly configured and tested prior to the rollout. After CRS-1 routers
were placed in production, a need arose to engage Cisco TAC to perform troubleshooting and

diagnosis on the routers. It was noted that while all service provider operations staff could access
the routers from the private IP-based management network, Cisco TAC could not access the
router because its connection was coming in on the inband 10-Gigabit Ethernet ports. The VTY
line ACLs were configured to allow the Cisco TAC source IP address, but that did not fix the
problem.
What is a possible cause for the lack of connectivity? (Choose one.)

Refer to the exhibit.

The figure shows a service provider network that has MPLS TE tunnels that originate from GSR1,
GSR2, and GSR3. While GSR1 and GSR2 have multiple paths to the core network, the GSR3 has
a single path into the core. For GSR1 and GSR2, the purple links are the preferred paths, but
because they are multihomed to the core, they can also take the black, less-desirable path. The
less-desirable black paths need to be retained for certain operational reasons. GSR3 has a single
path into the core network, and a TE tunnel originating from GSR3 must be able to use this path. It
has been noted that if the network encounters multiple link failures or link transitions, the TE
tunnels originating from GSR1 or GSR2 can preempt the TE tunnel originating from GSR3, thus
causing a lack of MPLS connectivity. The operations team does not want the TE tunnel originating
from GSR3 to be preempted unless this tunnel is administratively shut down.
How should this situation be mitigated?

Refer to the exhibit.

Refer to the topology diagram for a service provider that is offering L3VPN services. PE1, PE2,
PE3, and PE4 are provider edge routers that are connected to the core P routers. They are
learning VPNv4 prefixes from different sites. The MPLS core is LDP-enabled and is running OSPF
as an IGP. One of the P routers that is connected to PE1 and PE2 has an LDP defect in which the
LDP session periodically resets and then manages to recover on its own. While the LDP session
resets, an outage is observed on L3VPN traffic that needs LDP to maintain a label-switched path.
While a software fix has been identified and is in the works, which MPLS or IGP feature will avoid
this problem?

You are working for a large service provider. The engineering team requested that new SIP-600
cards be rolled out in all 7600 Series Routers in the network. The current certified Cisco IOS
release for these routers is 12.2(18)SXF8. You realize that the Cisco IOS Software must be
upgraded to support the new SIP-600 cards, but engineering has not specified an upgrade. The
engineering team confirms this need and informs you that the certification lab has begun testing
Cisco IOS Release 12.2(33)SRD for this purpose and has not encountered any problems yet.
How should you proceed?

Refer to the exhibit.

A network operator uses TACACS for authentication and authorization. While troubleshooting a
NetFlow problem, the operator was requested by Cisco TAC to get the output of show techsupport netflow. The exhibit shows that the command failed with a message “% This command is
not authorized.” The operator is logged into the router with privilege 15 user account defined in
TACACS. What is the most likely reason for this?

A Cisco IOS router is experiencing continuous OSPF adjacency flapping. Further investigation
revealed that CPU utilization of OSPF process is very high. The problem is limited to this router.
What is the most likely reason for this issue?

An ISP has an IP/MPLS core network. Recently, after replacing low-capacity routers with two
Cisco Carrier Routing System routers, customer has complained about reduced application
performance (slow website access). What is the most likely cause for this issue?

There is a defective egress queuing ASIC in the data path of a router. Under certain conditions,
the ASIC may flip a bit from a large data packet from 0 to 1. The bit flip can occur only on a bit
position greater than 128 bytes. What is the accurate statement about FTP flow transiting through
this ASIC over a PPP SONET port?

Assume that you have to manage a network with several remote locations. You are told that you
need to collect performance data from each remote location to access the total traffic that goes to
the corporate office, that go to other remote locations, and that go outside of the organization.
Your low-bandwidth WAN connection that goes to the NOC does not have enough bandwidth to
allow for export of all of the data from the remote locations. What other option should you pursue?

Refer to the syslog message generated by a Cisco IOS device: *Mar 6 22:48:34.452 UTC.
%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up. What
does the special character (*) indicate?