350-501 Question #520: Real Exam Question with Answer & Explanation

Question

Company_A is implementing VoIP services across the company. The network architect designed a QoS policy to allow only specific IP subnets and mark the signaling flow with DSCP 36. The solution should be as secure as possible. Phones receive their IP addresses from the 172.184.12.0/24 pool and are assigned by the RADIUS server to VLAN 1021. Skinny Client Control Protocol is used as a signaling protocol in the network. For security reasons, switchport port security maximum 1 vlan voice has been preconfigured on the switch side. Which two tasks must an engineer perform on SW_1 to achieve this goal? (Choose two.)

Options

• AImplement a class map with the set dscp af43 command.
• BImplement an ACL with the permit udp 172.184.12.0 0 0.0.0.255 any range 2000 2002 command.
• CImplement a class map with the set dscp af42 command.
• DImplement an ACL with the set dscp af4t command.
• EImplement an ACL with the permit tcp any 10.124.121.0 0 0.0.0.255 range 16384 32767

Explanation

Set DSCP AF43 (DSCP 36): DSCP value AF43 corresponds to DSCP 36, as required in the design. Using a class map with the set dscp af43 command ensures that the signaling flow is correctly marked with DSCP 36 for QoS prioritization. Permit SCCP Signaling with ACL: The Skinny Client Control Protocol (SCCP) uses UDP ports in the range 2000-2002. An ACL with the command permit udp 172.184.12.0 0.0.0.255 any range 2000 2002 ensures only signaling traffic from the specified VoIP subnet is allowed. VLAN 1021 and port security: These pre-configurations restrict access to VoIP phones, adding an extra layer of security.

No community discussion yet for this question.