Share your ARCH Experience

Again about Q9,

I don’t know if it is typo or not, but if C is “Routers will not advertise iBGP learned routers to other iBGP peers.” it is incorrect because it should be “… learned routes…” not “… learned routers…”

I hate the typo issue , and because this is a new exam and has other typos in it.
You just don’t know.
i missed that typo on C , so im D and E now , if there is no typos in the question

@Kash….Did u take t exam??? U had said 3 hrs….wat was tat 4 ??? Any1 else has taken t exam…Can the AT5.8 be split into a set of 50qns and 1 ppl work on it 2 c0nfirm t correct answers…Wat u guys say…It needs 2 be a team effort 2 crack tis exam…..guys do confirm so tat i can initiate t actions…Confirm as to who all r ready 4 tis!!! reply back plz…

Passed with a few marks to spare. Not enough for my purposes, but the questions are almost all from the AT5.8 except for 2 new questions. A lot of AT’s answers are wrong, though, so confirm from the student guide if you have it. Doesn’t take long and that way at least you can answer the new questions as well.

Gyrop

Good form!! , did you score good on the advanced ip and security sections??
above or below %50

QUESTION NO: 60
With respect to address summarization, which of the following statements concerning IPv4 and
IPv6 is true?

A. The potential size of the IPv6 address blocks suggests that address summarization favors IPv6
over IPv4.
B. Role based addressing using wildcard masks to match multiple subnets is suitable for IPv4, but
unsuitable for IPv6.
C. In order to summarize, the number of subnets in the IPv4 address block should be a power of 2
while the number of subnets in the IPv address block should be a power of 64.
D. WAN link addressing best supports summarization with a/126 subnet fir IPv4 and a/31 for IPv6.
Answer: B
Explanation: B is wrong C is correct , confirmed with student guide

QUESTION NO: 60

Doh I meant B is correct same as AT

5.8
QUESTION NO: 96

Users of a site-to-site VPN are reporting performance problems. The VPN connection employs
IPSec and GRE and traverses several Ethernet segments. The VPN packets are being
fragmented as they traverse the links. What would be two methods to overcome this problem?
(Choose two.)
A. Employ path MTU discovery.
B. Set the MTU higher than 1500 bytes.
C. Turn off pre-fragmentation for IPSec.
D. Set the MTU value to 1400 bytes.

Answer: A,D
May be C better than D? I think we can’t to know exactly what value need to define. Any ideas?

@BD i have confirmed Q 96 answer is A and D for sure.

@Sri i am going tomorrow 16:00 hours

@Kash
Ok. Thx.

hi All ,
Q 42
Q 243 i checked student guide C and D (But D dosent sounds good)
Q 267 Is there any thing wrong with C & D

@ gyrop do you mind sharing some thing

5.8
QUESTION NO: 97

You are the Cisco Network Designer in Cisco.com. Which statement is correct regarding NBAR
and NetFlow?
A. NBAR examines data in Layers 1 and 4.
B. NBAR examines data in Layers 3 and 4.
C. NetFlow examines data in Layers 3 and 4.
D. NBAR examines data in Layers 2 through 4.

Answer: B
Hmm I thought that NBAR makes more deep examination. May be right answer is C ?

“…While NetFlow examines primarily Layer 3 (network) and Layer 4 (transport) information to quantify network consumption on a flow-by-flow basis, NBAR examines data not only at Layer 4 (transport layer, port identification), but also all the way up to Layer 7 (application layer)..”
http://ciscoarticles.com/print/1871.html

let me check from user guide …

ok checked with USer guide bd u r right .
Netflow works between 3 and 4 Layer
Flexible Netflow workd from Lyer 2 to 7 inspect payload
NBAR works 3 to 7 as well

there is a Figure 12-11. NetFlow and NBAR are Complementary Technologies in the book shows nbar doing deep packet inspection

the same thing is on the blog have a look

http://itpeopleworld.blogspot.com/2011/08/netflow-vs-nbar.html

QUESTION NO: 4
OSPF stub areas are an important tool for the Network designer; which of the following two should
be considered when utilizing OSPF stub areas?

A. OSPF stub areas increase the size of the LSDB with the addition of Type 3 and 5 LSAs
B. OSPF not so stubby areas are particularly useful as a simpler form of summarization
C. OSPF stub areas are always insulated from external changes
D. OSPF stub areas can distinguish among ASBRs for destinations that are external to the OSPF
domain
E. OSPF totally stubby cannot distinguish among ABRs for the best route to destinations outside
the areas

Answer: B,E

A: wrong , opposite is true
B: correct
C: true mentioned in the student guide
D: wrong , stub has no LSA 4,5 so we don’t know the ASBR external routes
E: true

so maybe B,C
any info
“

@ Victor Q 9 B and E is the answer dont worry it is correct

What are your thoughts about these ?
Q 42
Q 243 i checked student guide C and D (But D dosent sounds good)
Q 267 Is there any thing wrong with C & D

QUESTION NO: 64 DRAG DROP
Drag the OSPF technology on the left to the approriate network convergence step on the right that

AT is wrong

Detect the Event — Bidirectional Forwarding Detection (from student guide)
Propogate the event — LSA Propagation/Throttling or pacing timers
Process the event — SPF Throttling or pacing timers
Update Forwarding data structures — CEF

Bidirectional Forwarding Detection is def a keepalive method
OSPF messages are Propagated with LSA
Processing OSPF updates is done with SPF algorithm
CEF updates the FIB table (data structures)

GOOOOD WORK Victor ….

i am bit shake about

Process the event — SPF Throttling or pacing timers

@Kash

Q9 could you please explain how B could be correct or comment the reference?

B- iBGP requires a full mesh of eBGP peers?!

@kash
Process then event with CPU , CPU can get overloaded with the SPF algorithm
so perhaps some SPF throttling to ease the pain

QUESTION NO: 42 (def wrong inbound is def possible)
When designing the routing for an Enterprise Campus network it is important to keep while of the
following filtering aspects in mind?
A. Filtering is only useful when combined with route summarization
B. It is best to filter (allow) the default and summary prefixes only in the Enterprise Edge to remote
sites or site-to-site IPsec VPN networks
C. IGPs (for example EIGRP or OSPF) are superior to route filtering in avoiding in inappropriate
transit traffic through remote nodes or inaccurate or inappropriate routing updates
D. The primary limitation of router filtering is that it can only be applied on outbound updates
Answer: D
Explanation: better answer i think is B
Maybe C / using ospf and eigrp summaries is much more elegant way to achieve the same result
From Cisco.com
OSPF Route-Map-Based Filtering: Example
In this example, OSPF external LSAs have a tag. The value of the tag is examined before the prefix is installed in the routing table. All OSPF external prefixes that have the tag value of 777 are filtered (prevented from being installed in the routing table). The permit statement with sequence number 20 has no match conditions, and there are no other route-map statements after sequence number 20, so all other conditions are permitted.
route-map tag-filter deny 10
match tag 777
route-map tag-filter permit 20
!
router ospf 1
router-id 10.0.0.2
log-adjacency-changes
network 172.16.2.1 0.0.0.255 area 0
distribute-list route-map tag-filter in

Q9
Ibgp requires fulll mesh of ibgp peers (same AS), ebgp peers (diff AS) to not have this same requirement

@Pedram Q9 According to me answer is C and E
the reason B is not an answer is
User guide page number 144

The full mesh of IBGP routers is needed because IBGP routers do not re-advertise routes learned via IBGP to other IBGP peers. This behavior is part of BGP protocol behavior that is used to prevent information from circulating between IBGP speaking routers in a routing information loop or cycle

Q 9

C and D for me
E is good but not a design concept

I can see the correct answer of Q7 of Chapter 3 of self-study v2 which is:

IBGP requires a full mesh of peers because it has no other way to
prevent looping of routing information.

but it says “peers”, probably this answer means that ebgp peers inside AS should form ibgp full mesh together, makes sense

@victor

I don’t know if it is typo or not, but if C is “Routers will not advertise iBGP learned routers to other iBGP peers.” it is incorrect because it should be “… learned routes…” not “… learned routers…”

Ok im cross checking with 2 CCIE’s this Q42

what you say about Q 243

@9 BGP

Ebgp are not inside your AS , only ibgp peers

I didn’t say B is correct for Q9, Kash put a comment on that and I asked him how? and tried to find some reference for that, which I found a Q in self-study but is not completely match with the answer here.

Q9
@Kash

even with/without typo makes no difference i think
routes learned or routers learned about are not passed to other ibgp peers

RS CCIE at work says that’s what he would choose to me

Got Reply for Question no 42 From one of My friedn according to him it is B
according to him B anc C both are good but B makes more Sense.

42 agree
D is wrong , B is best

Victor what you say about this

Q 243 i checked student guide C and D (But D dosent sounds good)
Q 267 Is there any thing wrong with C & D

@Kash

Q267 answer is A,D; Ref: self-study v2 page 219

@Kash

267 is fine , the flex-link stuff is always the same
no stp and over a single pair of links

243
no idea , will investigate

@pedram Q 2467
OMG It seesm question have 3 correct answers A,C,D

FlexLinks provide an active/standby pair of uplinks defined on a common access layer switch. These are some of the attributes of FlexLinks:
• FlexLinks are configured using the switchport backup interface interface-id
• An interface can belong to only one FlexLink. command on the primary interface (the interface specified in the command is the port which becomes the backup for the primary interface).
• The pair can be of the same or different interface types such as Gigabit Ethernet, 10 Gigabit Ethernet, or PortChannel.
• FlexLinks automatically disable STP, so no BPDUs are propagated.
• Failover from active to standby is in the one- to two-second range, which is not as fast as with RST.
• FlexLinks operate using only a single pair of links.
• The aggregation layer switch is not aware of the FlexLink configuration. From the perspective of the aggregation switch, the links are up and STP logical and virtual ports are active and allocated.

sorry Q 267
according to me Answer is ACD

Ref: self-study v2 page 219

An interface can belong to only one FlexLink.
FlexLinks automatically disable STP, so no BPDUs are propagated.
FlexLinks operate using only a single pair of links.

seems there are three correct answer?!

243
A C base on student guide, my thoughts

put a comment if you get that!

243 @ victor why ,
D is not the option . for sure . C and one more.

@ Pedram
What we decide on Q 246

QUESTION NO: 267

im not sure now , only thing that is diff is “pairs” instead of pair on C

Flex Links are a pair of a Layer 2 interfaces (switchports or port channels), where one interface is
configured to act as a backup to the other. Which two statements are correct regarding Flex
Links?
A. An interface can only belong to single Flex Links.
B. An interface can belong to multiple Flex Links.
C. Flex Links operate only over single “pairs” of links.
D. Flex Links automatically disable STP so no BPDUs are propagated.

@ Kash

For sure there are three correct answers

A. An interface can only belong to single Flex Links.
ref: “An interface can belong to only one FlexLink.”

C. Flex Links operate only over single pairs of links.
ref: “FlexLinks operate using only a single pair of links. ”

D. Flex Links automatically disable STP so no BPDUs are propagated.
ref: “FlexLinks automatically disable STP, so no BPDUs are propagated.”

really hard to say.

@victor

such a thing is in A as well; “Flex Links”

@Kash 243
from the student guide

SLB One-Armed Mode Overview

* SLB device is not in line
* Return traffic requires PBR server default gateway pointint to SLB device, or Client NAT
* Mode is not as common as bridge or routed mode
* This OOB approach supports scaling

so based of this i thought A C

Q 267 , to close to call is it in Anderson dump 642-873 somewhere
Its and older question