You are a network designer and are responsible for ensuring that the network you design is
secure. How do you plan to prevent infected devices on your network from sourcing random DDoS
attacks using forged source addresses?

Your design plan includes mutual redistribution of two OSPF networks at multiple locations, with
connectivity to all locations in both networks. How is this accomplished without creating routing
loops?

A planned EBGP network will use OSPF to reach the EBGP peer addresses. Which of these
conditions should be avoided in the design that could otherwise cause the peers to flap
continuously?

When designing a large full mesh network running OSPF, how would you reduce LSA repetition?

A data center provider has designed a network using these requirements:
Two data center sites are connected to the public Internet.
Both data centers are connected to different Internet providers.
Both data centers are also directly connected with a private connection for the internal traffic,
and public Internet traffic can also be routed at this direct connection.
The data center provider has only one /19 public IP address block.
Under normal conditions, Internet traffic should be routed directly to the data center where the
services are located. When one Internet connection fails, the complete traffic for both data centers
should be routed by using the remaining Internet connection. In which two ways can this routing
be achieved? (Choose two.)

Your network operations team is deploying Access Control Lists (ACLs) across your Internet
gateways. They wish to place an ACL inbound on the Internet gateway interface facing the core

network (the “trusted” interface). Which one of these addresses would the ACL need for traffic
sourced from the inside interface, to match the source address of the traffic?

During a corporate merger, a network designer is asked for a solution that will provide connectivity
between the two enterprise networks. The solution must have the ability to support video sessions
so that the CEO can message merger activities to the employees. The designer decides to
consider multicast as a transport with MSDP to provide redundancy. Which transport feature does
the network designer need to apply to the interconnecting firewall to ensure that Source-Active
messages between the MSDP peers can be sent in both enterprise networks?

When designing a network, which two security features should be added to the design to protect
hosts from potential IPv6 neighbor discovery denial of service attacks at the access layer?
(Choose two.)

You are the lead network designer for an enterprise company called ABC, and you are leading
design discussions regarding IPv6 implementation into their existing network. A question is raised
regarding older Layer 2 switches that exist in the network, and if any changes are required to
these Layer 2 switches for successful IPv6 implementation. Which two responses should you
give? (Choose two.)

Your organization is working on a design solution for a new Internet-based remote access virtual
private network that has 1000 remote sites. A network administrator recommends GETVPN as the
model because the network of today uses DMVPN, which results in a lot of background NHRP
control traffic. What is a potential problem with using GETVPN for this design solution?