What Validated 600-210 exam dumps Is?

Q1. Which option provides a secure connection between two endpoints as it encapsulates the IP payload? 

A. transport mode IPsec 

B. GRE 

C. Internet Key Exchange security association 

D. L2TP 

View Answer

Q2. Which option describes how DNS snooping is used on the Cisco ASR 5000? 

A. DNS snooping allows the Cisco ASR 5000 to snoop DNS query packets and compare against known DNS responses. If a match is found, the Cisco ASR 5000 replies to the query itself instead of forwarding the query to the destination DNS server. 

B. DNS snooping allows the Cisco ASR 5000 to detect if a DNS response sent back to a subscriber is valid. If the response is invalid, the Cisco ASR 5000 drops the packet. 

C. DNS snooping allows the Cisco ASR 5000 to enable set of dynamic IP rules to be installed based on the response to DNS queries sent by a subscriber that matches a configured domain rule definition. Dynamic IP rules are created for these IP entries within the same rule that has the domain name, which applies the same charging action to these dynamic rules. 

D. DNS snooping allows the Cisco ASR 5000 to enable set of dynamic domain rules to be installed based on the response to DNS queries sent by a subscriber that matches a configured domain rule definition. Dynamic domain rules are created for the DNS responses within the same rule that has the domain name, which applies the same charging action to these dynamic rules. 

View Answer

Q3. What layer of the OSI model does the BSSAP+ protocol map to? 

A. Data link layer 

B. Network layer 

C. Transport layer 

D. Application layer 

View Answer

Q4. Which statement about the sgtp-service configuration on the Cisco ASR 5000 SGSN system is true? 

A. sgtp-service should be in the same context as sgsn-service. 

B. An operator policy configuration that associates the sgtp-service should be present. 

C. GTPC and GTPU bind address shall be different in the sgtp-service. 

D. sgtp-service can be associated with multiple GTPU services. 

E. Only one GTPC bind address can be present in the sgtp-service. 

View Answer

Q5. Which interface in the UMTS doamin uses the BSSAP+ layer? 

A. Gs 

B. Gr 

C. Ge 

D. Ga 

View Answer

Q6. Which two AVPs will be sent by the GGSN within the CCR request when an update PDP request with IEs: NSAPI value 6 and Linked NSAPI value 5 is received? (Choose two.) 

A. Called-Station-ID 

B. Used-Service-Unit 

C. Bearer-ID 

D. Requested-Service-Unit 

E. Bearer-Operation= Modification 

View Answer

Q7. Your company wants to limit bandwidth for Skype traffic. You have been tasked to configure Application Detection and Control using the Cisco ASR 5000 to detect Skype traffic for all subscribers. If Skype traffic is detected, limit the uplink and downlink data rate to 32 kb/s. 

Which required configuration is needed to complete this task? 

A. active-charging service ACS_ACME p2p-detection protocol skype ruledef skype_detection p2p protocol = skype exit charging-action skype_rate_limit content-id 1500 flow limit-for-bandwidth direction downlink peak-data-rate 32000 peak-burst- 8000 violate-action discard flow limit-for-bandwidth direction uplink peak-data-rate 32000 peak-burst- 8000 violate-action discard rulebase acme_rulebase action priority 1000 ruledef skype_detection charging-action skype_rate_limit 

B. active-charging service ACS_ACME ruledef skype_detection p2p protocol = skype exit charging-action skype_rate_limit content-id 1500 flow limit-for-bandwidth direction downlink peak-data-rate 16000 peak-burst- 8000 violate-action discard flow limit-for-bandwidth direction uplink peak-data-rate 16000 peak-burst- 8000 violate-action discard rulebase acme_rulebase action priority 32000 ruledef skype_detection charging-action skype_rate_limit 

C. active-charging service ACS_ACME p2p-detection protocol skype ruledef skype_detection p2p protocol = skype flow limit-for-bandwidth direction downlink peak-data-rate 32000 peak-burst- 8000 violate-action discard flow limit-for-bandwidth direction uplink peak-data-rate 32000 peak-burst- 8000 violate-action discard exit rulebase acme_rulebase action priority 1000 ruledef skype_detection 

D. active-charging service ACS_ACME p2p-detection protocol skype ruledef skype_detection p2p protocol = skype_traffic exit charging-action skype_rate_limit content-id 1500 flow limit-for-credit direction downlink peak-data-rate 32000 peak-burst- 8000 violate-action discard flow limit-for-credit direction uplink peak-data-rate 32000 peak-burst- 8000 violate-action discard rulebase acme_rulebase action priority 1000 ruledef skype_detection charging-action skype_rate_limit 

View Answer

Q8. Which option describes the ICAP protocol? 

A. ICAP is a protocol designed to enable inter-device communications for different vendor systems to share information about subscribers in a common format. ICAP allows for subscriber session control for actions such as session disconnect and suspension. 

B. ICAP is a protocol designed to enable subscribers to communicate in a peer-to-peer network for file sharing purposes and is often used to circumvent upstream content filtering. 

C. ICAP is a communication access package consisting of a mixed platform of services such as web, FTP, and authentication. ICAP is used to minimize the deployment footprint and expedite new offerings for Internet service providers. 

D. ICAP is a protocol designed to support dynamic content filtering, insertion, and modification of web pages. ICAP allows interaction with external content servers such as parental control (content filtering) servers to provide content filtering service support. 

View Answer

Q9. Which three applications use IPsec? (Choose three.) 

A. PDN access 

B. MAP 

C. GTPv2 

D. Mobile IP 

E. L2TP – between GGSN acting as LAC and LNS 

F. L2TP – between LAC and LNS on same node 

G. Diameter 

View Answer

Q10. During the network-initiated PDP activation procedure, which network entity provides the GGSN the address of the SGSN, which the subscriber is attached to? 

A. AAA 

B. OCS 

C. PCRF 

D. HLR 

View Answer