- Home
- Cisco
- Designing and Implementing Cisco Service Provider Cloud Network Infrastructure
- Cisco.300-540.v2026-06-29.q89
- Question 35
Valid 300-540 Dumps shared by EduDump.com for Helping Passing 300-540 Exam! EduDump.com now offer the newest 300-540 exam dumps, the EduDump.com 300-540 exam questions have been updated and answers have been corrected get the newest EduDump.com 300-540 dumps with Test Engine here:
Access 300-540 Dumps Premium Version
(191 Q&As Dumps, 35%OFF Special Discount Code: freecram)
<< Prev Question Next Question >>
Question 35/89
An engineer must implement a solution on a Cisco ASR 1000 Series router to protect against DDoS attacks.
DDoS traffic must be dropped by transmitting Flowspec attributes to edge routers, instructing them to generate an ACL via class-maps and policy-maps. The engineer already configured BGP neighbors. Which action must be taken next?
DDoS traffic must be dropped by transmitting Flowspec attributes to edge routers, instructing them to generate an ACL via class-maps and policy-maps. The engineer already configured BGP neighbors. Which action must be taken next?
Correct Answer: A
Comprehensive and Detailed Explanation
BGP Flowspec allows routers to distributetraffic-filtering rulesusing BGP NLRI.
To enable Flowspec, after neighbors are configured, the essential next step is:
#Activate the Flowspec address-family under BGP
Example:
router bgp 65000
address-family ipv4 flowspec
neighbor X.X.X.X activate
exit-address-family
This enables:
* FlowSpec NLRI exchange
* Distribution of drop rules (rate-limit, redirect, null route, etc.)
* Automatic ACL/class-map/policy-map generation on edge routers
Why the other options are incorrect:
* B. Set BGP routing process# already done when neighbors were configured
* C. Activate neighbors# only makes senseinsidean address-family; flowspec AF must be enabled first
* D. Configure route reflector# optional and not required for Flowspec to operate Thus, the correct next step isA. Configure Flowspec for the BGP address-family.
BGP Flowspec allows routers to distributetraffic-filtering rulesusing BGP NLRI.
To enable Flowspec, after neighbors are configured, the essential next step is:
#Activate the Flowspec address-family under BGP
Example:
router bgp 65000
address-family ipv4 flowspec
neighbor X.X.X.X activate
exit-address-family
This enables:
* FlowSpec NLRI exchange
* Distribution of drop rules (rate-limit, redirect, null route, etc.)
* Automatic ACL/class-map/policy-map generation on edge routers
Why the other options are incorrect:
* B. Set BGP routing process# already done when neighbors were configured
* C. Activate neighbors# only makes senseinsidean address-family; flowspec AF must be enabled first
* D. Configure route reflector# optional and not required for Flowspec to operate Thus, the correct next step isA. Configure Flowspec for the BGP address-family.
- Question List (89q)
- Question 1: Automatic fault management is crucial for:...
- Question 2: To ensure control plane high availability, deploying _______...
- Question 3: Which of the following are benefits of using streaming telem...
- Question 4: Zero-day exploits are:
- Question 5: Which of the following is considered a virtualized Cisco pla...
- Question 6: How does log management assist in meeting the requirements o...
- Question 7: A common DoS mitigation technique is:...
- Question 8: SR-PM is related to:
- Question 9: What is the main advantage of using container orchestration ...
- Question 10: A large company's legacy network is set up with equipment fr...
- Question 11: In high availability design, DNS is used to ensure _________...
- Question 12: High availability design models often include:...
- Question 13: Virtual Machines and Containers are both used to virtualize ...
- Question 14: The primary benefit of MACSEC is:...
- Question 15: The main purpose of using IPsec VPN for WAN connectivity is ...
- Question 16: An engineer must design a cloud platform forevent-driven app...
- Question 17: Multi-homing is beneficial for:...
- Question 18: In the context of high availability, EVLAG is implemented to...
- Question 19: Streaming telemetry with gRPC and gNMI is used for:...
- Question 20: The use of Yang models in network configuration is to:...
- Question 21: What is a benefit of a carrier-neutral data center?...
- Question 22: (Exhibit) Refer to the exhibit. An engineer working for a pr...
- Question 23: What does enabling gRPC allow in Cisco NFVI Assurance and Mo...
- Question 24: TLS and mTLS are protocols used for:...
- Question 25: Which of the following is NOT a purpose of implementing ACLs...
- Question 26: Yang models are utilized in NFV for what purpose?...
- Question 27: Cloud agents are deployed for:
- Question 28: An engineer must add VNF implementation definitions and VNF ...
- Question 29: (Exhibit) Refer to the exhibit. An engineer must configure d...
- Question 30: What is a capability of a Cisco NFVIS SNMP trap?...
- Question 31: What should be used to protect against lateral movements dur...
- Question 32: (Exhibit) Refer to the exhibit. An engineer must design a so...
- Question 33: SNMP traps are utilized for which of the following purposes?...
- Question 34: An engineer must configure NTP servers in Cisco Enterprise N...
- Question 35: An engineer must implement a solution on a Cisco ASR 1000 Se...
- Question 36: NSO in the context of virtualized architecture stands for:...
- Question 37: ACI's approach to data center management is unique because i...
- Question 38: gRPC is used in network virtualization for:...
- Question 39: An engineer must implement a public cloud solution that enab...
- Question 40: When troubleshooting DCI solutions, which of the following t...
- Question 41: VNF workload optimization often involves:...
- Question 42: Automation in deploying NFV can reduce:...
- Question 43: VIM control plane KPIs are important for:...
- Question 44: gNMI/gRPC are used in network management for:...
- Question 45: NFVI errors and events diagnosis is crucial for:...
- Question 46: (Exhibit) Refer to the exhibit. An engineer must configure m...
- Question 47: Cloud edge facilities are designed to:...
- Question 48: For infrastructure security, which of the following is NOT t...
- Question 49: API security is crucial for protecting:...
- Question 50: Which format is used by Cisco Container Platform for configu...
- Question 51: An engineer attempts to kill a NETCONF session. The session ...
- Question 52: Secure NFVI control and management plane typically involves ...
- Question 53: The implementation of SR-IOV in VNF optimization primarily i...
- Question 54: (Exhibit) Refer to the exhibit. An engineer must configure a...
- Question 55: Which two tools should be used to manage container orchestra...
- Question 56: What is used to protect against an API logic flaw?...
- Question 57: Which cloud provider connection permits BGP peering?...
- Question 58: (Exhibit) Refer to the exhibit. An engineer must configure r...
- Question 59: What is the primary focus of NFVI MANO in network assurance?...
- Question 60: (Exhibit) Refer to the exhibit. An engineer must configure m...
- Question 61: Logging with syslog is important for:...
- Question 62: What is used to protect a web server against a DDoS attack?...
- Question 63: Which of the following is an advantage of using RESTCONF ove...
- Question 64: Direct Connect offers which of the following advantages over...
- Question 65: (Exhibit) Refer to the exhibit. An engineer must configure a...
- Question 66: Virus detectors are used to:
- Question 67: (Exhibit) Refer to the exhibit. An engineer must configure a...
- Question 68: Which cloud service model would best suit an organization lo...
- Question 69: Direct connect and MPLS differ in that:...
- Question 70: uRPF is utilized to combat which type of security threat?...
- Question 71: (Exhibit) Refer to the exhibit. An engineer is troubleshooti...
- Question 72: Troubleshooting ACI involves understanding:...
- Question 73: What is the purpose of VNF data plane redundancy?...
- Question 74: Which of the following statements accurately describes the d...
- Question 75: What role does NFVI MANO play in service assurance?...
- Question 76: Which of the following are key components of network assuran...
- Question 77: A zero-day exploit refers to:
- Question 78: (Exhibit) Refer to the exhibit. An engineer must stop DDoS a...
- Question 79: Software accelerated virtual switch technologies like DPDK a...
- Question 80: (Exhibit) Refer to the exhibit. An engineer must deploy a st...
- Question 81: What is Virtualized Architecture primarily used for in the c...
- Question 82: What does Cisco Always-On Cloud DDoS use to protect against ...
- Question 83: Which type of cyberattack does Cisco Umbrella DNS-layer secu...
- Question 84: (Exhibit) Refer to the exhibit. An engineer must configure i...
- Question 85: Software-accelerated virtual switches like DPDK and VPP enha...
- Question 86: Which command must be run on a Cisco IOS device to configure...
- Question 87: (Exhibit) Refer to the exhibit. An engineer must connect swi...
- Question 88: Evaluating WAN infrastructure connectivity, one should consi...
- Question 89: BGP flowspec is primarily used for:...
