nerdexam
Cisco

350-501 · Question #321

Reter to the exhibit. ISP A provides VPLS services and DDoS protection to Company XYZ to connect their branches across the North America and Europe regions. The uplink from the data center to the…

The correct answer is B. class-map type traffic match-all B_210.10.65.1. To redirect specific ICMP traffic from a web server to a security appliance, the engineer must first use a class-map to identify the target ICMP echo requests.

Services

Question

Reter to the exhibit. ISP A provides VPLS services and DDoS protection to Company XYZ to connect their branches across the North America and Europe regions. The uplink from the data center to the ISP is 100 Mbps. The Company XYZ security team asked the ISP to redirect ICMP echo requests, which are currently going to the web server, to a new local security appliance. Which configuration must an ISP engineer apply to router R2 to redirect the ICMP traffic?

Exhibit

350-501 question #321 exhibit

Options

  • Aclass-map type traffic match-all B_210.10.65.1
  • Bclass-map type traffic match-all B_210.10.65.1
  • Cclass-map type traffic match-all B_210.10.65.1
  • Dclass-map type traffic match-all B_210.10.65.1

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    85% (41)
  • C
    8% (4)
  • D
    4% (2)

Why each option

To redirect specific ICMP traffic from a web server to a security appliance, the engineer must first use a class-map to identify the target ICMP echo requests.

Aclass-map type traffic match-all B_210.10.65.1

This choice is syntactically identical to choice B, which is the correct answer. The exact distinction in the original question cannot be determined from the provided text.

Bclass-map type traffic match-all B_210.10.65.1Correct

To implement traffic redirection for specific ICMP echo requests, the initial and necessary step is to classify that traffic. The `class-map type traffic match-all B_210.10.65.1` command initiates the creation of a traffic class map. This class map will then be configured with specific match criteria (e.g., protocol ICMP, destination IP address of the web server, and ICMP type for echo requests) to precisely identify the traffic that needs to be redirected to the new local security appliance.

Cclass-map type traffic match-all B_210.10.65.1

This choice is syntactically identical to choice B, which is the correct answer. The exact distinction in the original question cannot be determined from the provided text.

Dclass-map type traffic match-all B_210.10.65.1

This choice is syntactically identical to choice B, which is the correct answer. The exact distinction in the original question cannot be determined from the provided text.

Concept tested: QoS Class-Map for Traffic Classification

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_plcshp/configuration/15-mt/qos-plcshp-15-mt-book/qos-policing-and-shaping.html

Topics

#Traffic Redirection#Policy-Based Routing#Traffic Classification#Security Services

Community Discussion

No community discussion yet for this question.

Full 350-501 Practice