Cisco 300-410 today updated questions - Verified by Cisco Experts

Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Questions and Answers

Question 1

Refer to the exhibit.

An engineer must advertise routes into IPv6 MP-BGP and failed. Which configuration resolves the issue on R1?

Options:

router bgp 65000no bgp default ipv4-unicastaddress-family ipv6 multicastnetwork 2001:DB8::/64

router bgp 65000no bgp default ipv4-unicastaddress-family ipv6 unicastnetwork 2001:DB8::/64

router bgp 64900no bgp default ipv4-unicastaddress-family ipv6 unicastnetwork 2001:DB8::/64

router bgp 64900no bgp default ipv4-unicastaddress-family ipv6 multicastneighbor 2001:DB8:7000::2 translate-update ipv6 multicast

Question 2

Refer to the exhibit An engineer configured NetFlow but cannot receive the flows from R1 Which two configurations resolve the issue? (Choose two )

Options:

Option A

Option B

Option C

Option D

Option E

Question 3

Refer to the exhibit.

A prefix list is created to filter routes inbound to an EIGRP process except for network 10 prefixes After the prefix list is applied no network 10 prefixes are visible in the routing table from EIGRP. Which configuration resolves the issue?

Options:

ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9.

ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8

ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9 ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

Question 4

What must a network architect consider for RTs when planning for a single customer full-mesh VPN m an MPLS Layer 3 network?

Options:

RT must be globally unique within the same VPN

RT must be globally identical within the same VPN

RT values must be Afferent from the RD values in the same VPN

Each RT value must be identical to an RD value within the same VPN.

Question 5

Refer to the exhibit.

An engineer must establish a point-to-point GRE VPN between R1 and the remote site. Which configuration accomplishes the task for the remote site?

Options:

Interface Tunnel1tunnel source 199.1.1.1tunnel destination 200.1.1.3ip address 192.168.1.3 255.255.255.0

Interface Tunnel1tunnel source 200.1.1.3tunnel destination 199.1.1.1ip address 192.168.1.1.255.255.255.0

Interface Tunnel1tunnel source 200.1.1.3tunnel destination 199.1.1.1ip address 192.168.1.3.255.255.255.0

Interface Tunnellunnel source 199.1.1.1tunnel destination 200.1.1.3ip address 192.168.1.1.255.255.255.0

Question 6

Refer to the exhibit.

An engineer must configure OSPF with R9 and R10 and configure redistribution between OSPF and RIP causing a routing loop Which configuration on R9 and R10 meets this objective?

Options:

Option

Question 7

Refer to the exhibit A network engineer notices that the configured track option is down Which configuration resolves the issue*?

Options:

ip sla schedule 10 start-time now

ip sla schedule 10 start-time pending life forever

ip sla schedule 10 no timeout

ip sla schedule 10 no threshold

Question 8

R1 and R2 are configured as eBGP neighbor , R1 is in AS100 and R2 is in AS200. R2 is advertising these networks to R1:

The network administrator on R1 must improve convergence by blocking all subnets of 172-16.0.0/16 major network with a mask lower than 23 from coming in, Which set of configurations accomplishes the task on R1?

Options:

ip prefix-list PL-1 deny 172.16.0.0/16 le 23ip prefix-list PL-1 permit 0.0.0.0/0 le 32!router bgp 100neighbor 192.168.100.2 remote-as 200neighbor 192.168.100.2 prefix-list PL-1 in

ip prefix-list PL-1 deny 172.16.0.0/16 ge 23ip prefix-list PL-1 permit 0.0.0.0/0 le 32!router bgp 100neighbor 192.168.100.2 remote-as 200neighbor 192.168.100.2 prefix-list PL-1 in

access-list 1 deny 172.16.0.0 0.0.254.255access-list 1 permit any!router bgp 100neighbor 192.168.100.2 remote-as 200neighbor 192.168.100.2 distribute-list 1 in

ip prefix-list PL-1 deny 172.16.0.0/16ip prefix-list PL-1 permit 0.0.0.0/0!router bgp 100neighbor 192.168.100.2 remote-as 200neighbor 192.168.100.2 prefix-list PL-1 in

Question 9

A network administrator performed a Compact Flash Memory upgrade on a Cisco Catalyst 6509 Switch. Everything is functioning normally except SNMP, which was configured to monitor the bandwidth of key interfaces but the interface indexes are changed. Which global configuration resolves the issue?

Options:

snmp-server ifindex permanent

snmp ifindex permanent

snmp-server ifindex persist

snmp ifindex persist

Question 10

Refer to the exhibit. An engineer must troubleshoot a connectivity issue impacting the redistribution of the subnet 172.16.2.48/28 into the OSPF domain. Which configuration on router R1 advertises this subnet into the OSPF domain?

Options:

R1(config)#route-map CCNP permit 10R1(config-route-map)#match route-type internalR1(config-router)#router ospf 10R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

R1(config)#route-map CCNP permit 10R1(config-route-map)#match route-type level-2R1(config-router)#router ospf 10R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

R1(config)#route-map CCNP deny 10R1(config-route-map)#match tag 200R1(config)#route-map CCNP permit 10R1(config-router)#router ospf 10R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

R1(config)#route-map CCNP permit 10R1(config-route-map)#match tag 200R1(config-route-map)#exitR1(config-router)#router ospf 10R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

Question 11

Refer to the exhibit.

Router R2 should be learning the route for 10.123.187.0/24 via EIGRP. Which action resolves the issue without introducing more issues?

Options:

Use distribute-list to modify the route as an internal EIGRP route

Redistribute the route in EIGRP with metric, delay, and reliability

Use distribute-list to filter the external router in OSPF

Remove route redistribution in R2 for this route in OSPF

Question 12

Refer to the exhibit.

An engineer must establish multipoint GRE tunnels between hub router R6 and branch routers R1, R2, and R3. Which configuration accomplishes this task on R1?

Options:

Option A

Option B

Option C

Option D

Question 13

Refer to the exhibit.

An engineer configures SW101 to send OSPFv3 interfaces state change messages to the server. However, only some OSPFv3 errors are being recorded. which organization resolves the ..?

Options:

snmp-server enable traps ospfv3 state-change if-state-change

snmp-server-enable traps ospfv3 state-change restart-status-change

snmp-server-enable traps ospfv3 state-change neighbor-state-change.

snmp-server-enable traps ospfv3 state-change if-state-change neighbor-state-change

Question 14

The network administrator configured R1 for Control Plane Policing so that the inbound Telnet traffic is policed to 100 kbps. This policy must not apply to traffic coming in from 10.1.1.1/32 and 172.16.1.1/32. The administrator has configured this:

The network administrator is not getting the desired results. Which set of configurations resolves this issue?

Options:

control-planeno service-policy input PM-CoPP!interface Ethernet 0/0service-policy input PM-CoPP

control-planeno service-policy input PM-CoPPservice-policy input PM-CoPP

no access-list 101access-list 101 deny tcp host 10,1,1.1 any eq 23access-list 101 deny tcp host 172,16.1.1 any eq 23access-list 101 permit ip any any

no access-list 101access-list 101 deny tcp host 10,1.1.1 any eq 23access-list 101 deny tcp host 172.16.1.1 any eq 23access-list 101 permit ip any any!interface E0/0service-policy input PM-CoPP

Question 15

Which table is used to map the packets in an MPLS LSP that exit from the same interface, via the same next hop, and have the same queuing policies?

Options:

RIB

FEC

LDP

CEF

Question 16

Refer to the exhibit.

R1 is configured with IP SLA to check the availability of the server behind R6 but it kept failing. Which configuration resolves the issue?

Options:

R6(config)# ip sla responder

R6(config)# ip sla responder udp-echo ip address 10.10.10.1 port 5000

R6(config)# ip access-list extended DDOSR6(config ext-nac)# 5 permit icmp host 10.66 66.66 host 10.10.10.1

R6(config)# ip access-list extended DDOSR6(confg ext-nac)# 5 permit icmp host 10.10.10.1 host 10.66.66.66

Question 17

Which two protocols are used by a P router to transfer VPN traffic between PE routers in an MPLS network? (Choose two.)

Options:

BGP

OSPF

MP-BGP

LDP

RSVP

Question 18

Refer to the exhibit.

The network operation team observes a traffic forwarding issue between R2 and R3:

Ping and traceroute of loopback IP address from R2 to R3 is successful.

iBGP peering in AS 65101 and AS 65201 is up.

Which configuration resolves the issue?

Options:

Configure MD5 password authentication on R2.

Advertise R2 and R3 loopback IPs in AS 65101 and AS 65201.

Remove MD5 password authentication on R3.

Set up eBGP multihop on R2 and R3 routers.

Question 19

What is the function of BFD?

Options:

It provides uniform failure detection regardless of media type.

It creates high CPU utilization on hardware deployments.

It negotiates to the highest version if the neighbor version differs.

It provides uniform failure detection on the same media type.

Question 20

How does MPLS Layer 3 VPN function?

Options:

When a VPN route is learned from a CE device and injected into IGP, a VPN route distinguisher attribute is associated with it.

When a destination PE device receives a labeled packet, it pops the label and uses it to forward the packet to the correct CE device.

When an EIGRP internal route is redistributed into BGP by one PE and then back into EIGRP by another PE, the originating router ID for the route is changed to the router ID of the first PE

When a PE device forwards a packet received from a CE device across the provider network, it labels the packet with the label learned from the source PE device.

Question 21

What is a function of BFD?

Options:

peer recovery after a Layer 3 protocol adjacency failure

peer recovery after a Layer 2 adjacency failure

failure detection independent of routing protocols and media types

failure detection dependent on routing protocols and media types

Question 22

Refer to the exhibit.

The connected routers do not show up as OSPF neighbors. Which action resolves the issue?

Options:

Change the R1 dead timer to 20.

Change the R2 dead timer to 20.

Change the R2 hello timer to 20.

Change the R1 hello timer to 20.

Question 23

Refer to the exhibit.

Which command must be configured to make VRF CCNP work?

Options:

interface Loopback0vrf forwarding CCNP

interface Loopback0ip address 10.1.1.1 255.255.255.0

interface Loopback0ip address 10.1.1.1 255.255.255.0vrf forwarding CCNP

interface Loopback0ip address 10.1.1.1 255.255.255.0ip vrf forwarding CCNP

Question 24

An engineer configured a router with this configuration

ip access-hst DENY TELNET

10 deny tcp any any eq 23 log-input

The router console starts receiving log message :%SEC-6-IPACCESSLOGP: list DENY_TELNET denied tcp 192.168.1.10(1022)(FastEthernet1/0 D508.89gb.003f) ->192.168.2.20(23), 1 packet"

Which action stops messages on the console while still denying Telnet?

Options:

Configure a 20 permit ip any any command

Remove log-Input keyword from the access list.

Replace log-input keyword with the log keyword in the access list.

Configure a 20 permit ip any any log-input command.

Question 25

Refer to the exhibit.

An engineer configures the router 10.1.100.10 for EIGRP autosummarization so that R1 should receive the summary route of 10.0.0.0/8. However, R1 receives more specific /24 routes.

Which action resolves this issue?

Options:

Router R1 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

Router R1 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are received on R1.

Router 10.1.100.10 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are summarized toward R1.

Router 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

Question 26

Refer to the exhibit. Users are experiencing slow response times from critical application servers connected to the network. The engineer determined from the console log that there is a DOS attack on the interface GigabitEthernet0/0. Which action must the engineer take to resolve the issue?

Options:

Configure an access group on GigabitEthernet0/0 to block traffic from 192.168.1.1.

Configure an access group on GigabitEthernet0/0 to block traffic from 172.17.132.95.

Restrict CoPP traffic on the management interface from 172.17.132.95 and 192.168.1.1.

Configure QoS on FastEthernet0/0 to restrict bandwidth usage for 172.17.132.95 and 192.168.1.1.

Question 27

Refer to the exhibit The SNMP server with IP address 172.16 4 4 cannot access host router A Which configuration command on router A resolves the issue?

Options:

snmp-server community ccnp

access-list 4 permit 172.16.4.0 0.0.0.3

access-list 4 permit host 172.16.4.4

snmp-server host 172.16.4.4 ccnp

Question 28

Refer to the exhibit. An enterprise user reports an access issue with IPv6 content on the Internet. The user can access IPv4 content that is at the data center. Which action resolves the issue with IPv6 content?

Options:

Change Area 11 to Area 0 between routers B and C.

Add a static route for 2001: db8:0:6::1/64 on router B RIB.

Advertise the 2001:db8: e::e/64 route on the router D OSPF process.

Enable default information to originate in IPv6 AF on router B.

Question 29

Refer to the exhibit An engineer must connect the Reno and Detroit spokes using DMVPN phase 2 Hub tunnel configuration is

Which configuration accomplishes the task?

Options:

Option A

Option B

Option C

Option D

Question 30

Refer to the exhibit.

An administrator configured a Cisco router for TACACS authentication, but the router is using the local enable password instead Which action resolves the issue?

Options:

Configure the aaa authentication login admin group admin local enable command instead.

Configure the aaa authentication login admin group tacacs* local enable none command instead.

Configure the aaa authentication login admin group tacacs* local if-authenticated command instead.

Configure the aaa authentication login default group admin local if-authenticated command instead.

Question 31

Refer to the exhibit. In Cuco DNA Center, a network engineer identifies that BGP-learned networks are repeatedly withdrawn from peers. Which configuration must the engineer apply to resolve the Issue?

Options:

Option A

Option B

Option C

Option D

Question 32

:580

An engneer must configure encrypted packets for a single router OSPF neighoorsMp Which configuration meets this requirement?

Options:

Option A

Option B

Option C

Option D

Question 33

An engineer must override the normal routing behavior of a router for Telnet traffic that is destined to 10.10.10.10 from 10.10.1.0/24 via a next hop of 10.4.4.4. which is directly connected to the router that is connected to the 10.1.1.0/24 subnet Which configuration reroutes traffic according to this requirement?

Options:

Option A

Option B

Option C

Option D

Question 34

Refer to the exhibit. The default route is not advertised to the neighboring router. Which action resolves the issue?

Options:

Configure the redistribute static metric 200 subnets command under OSPF.

Configure OSPF on the Dialer0 interface.

Configure the network 0.0.0.0 255.255.255.255 area 0 command under OSPF.

Configure the default-information originate command under OSPF.

Question 35

How is the LDP router ID used in an MPLS network?

Options:

The MPLS LOP router ID must match the IGP router ID.

If not configured, the operational physical interface is chosen as the router ID oven d a loopback is configured.

The loopback with the highest IP address is selected as the router ID

The force keyword changes the router ID to the speeded address without causing any impact.

Question 36

Refer to the exhibit.

The forwarding entries how that the next hop for prefixes from the 172.16.0.0/16 network is set to 10.2.2.2 instead of 10.1.1.1. Which action resolves the issue?

Options:

Add set ip next hop 10.1.1.1 in route-map RED permit 20.

Add the continue statement in route-map RED permit 10 instead of continue 20.

Remove match ip address prefix-list 1 from route-map RED permit 10.

Remove the continue 20 statement from route-map RED permit 10

Question 37

Refer to the exhibit.

An engineer configured NetFlow to capture traffic information through the router, but it iOS not working as expected. Which action captures the flow information from this router to the collector?

Options:

Change the interface configuration FLOW-MONITOR-1 from input to output.

Configure a flow exporter under flow FLOW-MONITOR-1.

Configure more than one flow exporter destination addresses.

Change the flow exporter transport protocol from UDP to TCP

Question 38

Refer to the exhibit.

An administrator is configuring a GRE tunnel to establish an EIGRP neighbor to a remote router. The

other tunnel endpoint is already configured. After applying the configuration as shown, the tunnel

started flapping. Which action resolves the issue?

Options:

Modify the network command to use the Tunnel0 interface netmask

Advertise the Loopback0 interface from R2 across the tunnel

Stop sending a route matching the tunnel destination across the tunnel

Readdress the IP network on the Tunnel0 on both routers using the /31 netmask

Question 39

Refer to the exhibit The remote branch locations have a static neighbor relationship configured to R1 only R1 has successful neighbor relationships with the remote locations of R2 and R3, but the end users cannot communicate with each other. Which configuration resolves the issue’

Options:

Option A

Option B

Option C

Option D

Option E

Question 40

Refer to me exhibit. The hub and spoke are connected via two DMVPN tunnel interfaces The NHRP is configured and the tunnels are detected on the hub and the spoke Which configuration command adds an IPsec profile on both tunnel interfaces to encrypt traffic?

Options:

tunnel protection ipsec profile DMVPN multipoint

tunnel protection ipsec profile DMVPN tunnel1

tunnel protection ipsec profile DMVPN shared

tunnel protection ipsec profile DMVPN unique

Question 41

Refer to the exhibit.

The Internet traffic should always prefer Site-A ISP-1 if the link and BGP connection are up; otherwise, all Internet traffic should go to ISP-2 Redistribution is configured between BGP and OSPF routing protocols and it is not working as expected. What action resolves the issue?

Options:

Set metric-type 2 at Site-A RTR1, and set metric-type 1 at Site-B RTR2

Set OSPF cost 100 at Site-A RTR1, and set OSPF Cost 200 at Site-B RTR2

Set OSPF cost 200 at Site: A RTR1 and set OSPF Cost 100 at Site-B RTR2

Set metric-type 1 at Site-A RTR1, and set metric-type 2 at Site-B RTR2

Question 42

Refer to the exhibit.

While troubleshooting a BGP route reflector configuration, an engineer notices that reflected routes are missing from neighboring routers. Which two BGP configurations are needed to resolve the issue? (Choose two)

Options:

neighbor 10.1.1.14 route-reflector-client

neighbor R2 route-reflector-client

neighbor 10.1.1.2 allowas-in

neighbor R4 route-reflector-client

neighbor 10.1.1.2 route-reflector-client

Question 43

How are LDP neighbors discovered?

Options:

Unicast hellos are sent to directly connected neighbors IP addresses.

Multicast hellos are sent to the 224.0.0.2 group address.

Broadcasts hellos are sent to the 255.255.255.255 broadcast address.

Multicast hellos are sent to the 224.0.0.5 group address.

Question 44

Which 0S1 model is used to insert an MPLS label?

Options:

between Layer 5 and Layer 6

between Layer 1 and Layer 2

between Layer 3 and Layer 4

between Layer 2 and Layer 3

Question 45

:593

Refer to the exhibit. Which two configurations are required on R2 to prevent a routing loop caused by the redistribution from OSPF back into EIGRP? (Choose two.)

Options:

Option A

Option B

Option C

Option D

Option E

Question 46

Refer to the exhibit. The authentication is not working as desired and the user drops into user-exec mode. Which configuration resolves the issue?

Options:

Option A

Option B

Option C

Option D

Question 47

Refer to the exhibit. A network engineer cannot remote access R3 using Telnet from switch S1. Which action resolves the issue?

Options:

Allow the inbound connection via the exec command on R3.

Add the transport input telnet command on R3.

Allow to use the ssh -I admin 10.0.0.1 command on the switch.

Add the login admin command on the switch.

Question 48

Refer to the exhibit SW100 cannot receive routes from R1 Which configuration resolves the issue?

Options:

Option A

Option B

Option C

Question 49

Refer to the exhibit.

After configuring OSPF in R1, some external destinations in the network became unreachable. Which action resolves the issue?

Options:

Clear the OSPF process on R1 to flush stale LSAs sent by other routers.

Change the R1 router ID from 10.255.255.1 to a unique value and clear the process.

Increase the SPF delay interval on R1 to synchronize routes.

Disconnect the router with the OSPF router ID 0.0.0.0 from the network.

Question 50

Refer to the exhibit.

A network administrator successfully logs in to a switch using SSH from a (RADIUS server When the network administrator uses a console port to access the switch the RADIUS server returns shell:priv-lvl=15’’ and the switch asks to enter the enable command \ the command is entered, it gets rejected. Which command set is used to troubleshoot and reserve this issue?

Options:

line con 0aaa authorization consoleauthorization exec!line vty 0 4transport input ssh

line con 0aaa authorization console!line vty 0 4authorization exec

line con 0aaa authorization console priv15!line vty 0 4authorization exec

line con 0aaa authorization consoleauthorization priv15!line vty 0 4transport input ssh

Question 51

A company Is redesigning WAN infrastructure so that all branch sites must communicate via the head office and the head office can directly communicate with each site independently. The network engineer must configure the head office router by considering zero-touch technology when adding new sites in the same WAN infrastructure. Which configuration must be applied to the head office router to meet this requirement?

Options:

Option A

Option B

Option C

Option D

Question 52

Which two technologies optimize MPLS infrastructure using bandwidth protection services when experiencing slow response7 (Choose two.)

Options:

IPLFA

MPLS OAM

VPLS

SO-MPLS

Fast-Rwoute

Question 53

Refer to the exhibit. An engineer is troubleshooting a prefix advertisement issue from R3, which is not directly connected to R1. Which configuration resolves the issue?

Options:

Option A

Option B

Option C

Option D

Question 54

What is a function of IPv6 Source Guard?

Options:

It works with address glean or ND to find existing addresses.

It inspects ND and DHCP packets to build an address binding table.

It denies traffic from known sources and allocated addresses.

It notifies the ND protocol to inform hosts if the traffic is denied by it.

Question 55

Refer to the exhibit.

Users in VLAN46 cannot get the IP from the DHCP server. Assume that all the parameters are configured properly in VLAN 10 and on the DHCP server Which command on interlace VLAN46 allows users to receive IP from the DHCP server?

Options:

ip dhcp-addreos 10.221.10.10

ip dhcp server 10.221.10.10

ip helper-addrets 10.221.10.10

ip dhcp relay information trust-all

Question 56

:589

Aswitchhas been configured to provide DHCP relay on VLAN 100 to a server with an IP address of 10.1.1.1. The DHCP server is sending syslog reports of multiple TFTP requests that also originate from the switch. As a result, the server CPU exceeded a configured threshold. Which action does the network administrator recommend to bring the server CPU threshold down?

Options:

Configure the switch with an access list on VLAN100 to deny TFTP.

Configure the switch with a VACL on VLAN100 to deny TFTP.

Configure the switch with ip forward-protocol udp 67 globally.

Configure the switch with no ip forward-protocol udp 69 on VLAN100.

Question 57

Refer to the exhibit.

After a new regional office is set up,not all guests can access the internet via guest Wi

Fi. Clients are getting the correct IP address from guest Wi-Fi VLAN 364. which action resolves the issue ?

Options:

Allow 10.66.46.0/23 in the outbound ACL

Allow DNS traffic through the outbound ACL

Allow DNS traffic through the inbound ACL

Allow 10.66.46.0/23 in the inbound ACL

Question 58

Refer to the exhibit.

A loop occurs between R1, R2, and R3 while EIGRP is run with poison reverse enabled. Which action prevents the loop between R1, R2, and R3?

Options:

Configure route tagging

Enable split horizon

Configure R2 as stub receive-only

Configure route filtering

Question 59

Refer to the exhibit. A network engineer is troubleshooting a failed link between R2 and R3 No traffic loss is reported from router R5 to HQ Which command fixes the separated backbone?

Options:

R2(config-router)#no area 21 stub

R2(config_router)#area 21 virtual-link 192.168.125.5

R3(config-router)#area 21 virtual-link 192.168.125.5

R3(config-router)#no area 21 stub

Question 60

IPv6 is enabled in the infrastructure to support customers with an IPv6 network over WAN and to connect the head office to branch offices in the local network. One of the customers is already running IPv6 and wants to enable IPv6 over the DMVPN network infrastructure between the headend and branch sites. Which configuration command must be applied to establish an mGRE IPv6 tunnel neighborship?

Options:

tunnel protection mode ipv6

ipv6 unicast-routing

ipv6 nhrp holdtime 30

tunnel mode gre multipoint ipv6

Question 61

Refer to the exhibit.

R6 should reach R1 via R5>R2>R1.Which action resolves the issue?

Options:

Increase the cost to 61 between R2-R3-R1

Increase the cost to 61 between R2 and R3

Decrease the cost to 2 between R6-R5-R2

Decrease the cost to 41 between R2 and R1

Question 62

Refer to the exhibit.

R1 is configured with IP SLA to check the availability of the server behind R6 but it kept failing. Which configuration resolves the issue?

Options:

R1(config)# ip sla 700R1(config-track)# delay down 30 up 20

R1(config)# ip sla 700R1(config-track)# delay down 20 up 30

R1(config)# track 700 ip sla 700R1(config-track)# delay down 30 up 20

R1(config)# track 700 ip sla 700R1(config-track)# delay down 20 up 30

Question 63

An engineer configured access list NON-CISCO in a policy to influence routes

What are the two effects of this route map configuration? (Choose two.)

Options:

Packets are not evaluated by sequence 10.

Packets are evaluated by sequence 10.

Packets are forwarded to the default gateway.

Packets are forwarded using normal route lookup.

Packets are dropped by the access list.

Question 64

Refer to the exhibit.

PC-2 failed to establish a Telnet connection to the terminal server. Which configuration resolves the issue?

Options:

Option A

Option B

Option C

Option D

Question 65

Refer to the exhibit.

R1 is connected with R2 via GigabitEthernet0/0, and R2 cannot ping R1. What action will fix the issue?

Options:

Fix route dampening configured on the router.

Replace the SFP module because it is not supported.

Fix IP Event Dampening configured on the interface.

Correct the IP SLA probe that failed.

Question 66

Exhibit:

An engineer configured R2 and R5 as route reflectors and noticed that not all routes are sent to R1 to advertise to the eBGP peers. Which iBGP routers must be configured as route reflectors to advertise all routes to restore reachability across all networks?

Options:

R1 and R4

R1 and R5

R4 and R5

R2 and R5

Question 67

Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

Options:

VACL blocking broadcast frames from nonauthorized hosts

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

PVLANs with community ports associated to route advertisements and isolated ports for nodes

IPv4 ACL blocking route advertisements from nonauthorized hosts

Question 68

Refer to the exhibit.

Which action resolves the failed authentication attempt to the router?

Options:

Configure aaa authorization login command on line vty 0 4

Configure aaa authorization login command on line console 0

Configure aaa authorization console global command

Configure aaa authorization console command on line vty 0 4

Question 69

Refer to the exhibit. The remote server is failing to receive the NetFlow data Which action resolves the issue?

Options:

Modify the flow transport command transport udp 2055 to move under flow monitor profile.

Modify the interlace command to Ip flow monitor FLOW-MONITOR-1 Input.

Modify the udp port under flow exporter profile to Ip transport udp 4739.

Modify the flow record command record v4_r1 to move under flow exporter profile.

Question 70

A DMVPN single hub topology is using IPsec + mGRE with OSPF. What should be configured on the hub to ensure it will be the designated router?

Options:

tunnel interface of the hub with ip nhrp ospf dr

OSPF priority to 0

route map to set the metrics of learned routes to 110

OSPF priority greater than 1

Question 71

Refer to the exhibit.

Which two actions should be taken to access the server? (Choose two.)

Options:

Modify the access list to add a second line of permit ip any

Modify the access list to deny the route to 192.168.2.2.

Modify distribute list seq 10 to permit the route to 192.168.2.2.

Add a sequence 20 in the route map to permit access list 1.

Add a floating static route to reach to 192.168.2.2 with administrative distance higher than OSPF

Question 72

Refer to the exhibit. A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source The configuration did not work as desired Which service must be enabled to resolve the issue?

Options:

Enter the service timestamps log datetime localtime global command.

Enter the service timestamps log datetime synchronize global command.

Enter the service timestamps log datetime console global command.

Enter the service timestamps log datetime clock-period global command

Question 73

Refer to the exhibit. A network administrator redistributed the default static route into OSPF toward all internal routers to reach to Internet. Which set of commands restores reachability to the Internet by internal routers?

Options:

router ospf 1default-information originate

router ospf 1network 0.0.0.0 0.0.0.0 area 0

router ospf 1redistribute connected 0.0.0.0

router ospf 1redistribute static subnets

Question 74

An engineer configured a DHCP server for Cisco IP phones to download its configuration from a TFTP server, but the IP phones failed to toad the configuration What must be configured to resolve the issue?

Options:

BOOTP port 67

DHCP option 66

BOOTP port 68

DHCP option 69

Question 75

Clients on ALS2 receive IPv4 and IPv6 addresses but clients on ALS1 receive only IPv4 addresses and not IPv6 addresses. Which action on DSW1 allows clients on ALS1 to receive IPv6 addresses?

Options:

Configure DSW1(config-if)#ipv6 helper address 2002:404:404::404:404

Configure DSW1(dhcp-config)#default-router 2002:A04:A01::A04:A01

Configure DSW1(config)#ipv6 route 2002:404:404:404:404/128 FastEthernet1/0

Configure DSW1(config-if)#ipv6 dhcp relay destination 2002:404:404::404:404 GigabitEthernet1/2

Option A

Option B

Option C

Question 76

Refer to the exhibit.

While troubleshooting an EIGRP neighbor adjacency problem, the network engineer notices that the interface connected to the neighboring router is not participating in the EIGRP process. Which action resolves the issues?

Options:

Configure the network command to network 172.16.0.1 0.0.0.0

Configure the network command under EIGRP address family vrf CLIENT1

Configure EIGRP metrics on interface FastEthernet0/3

Configure the network command under EIGRP address family ipv4

Question 77

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

Options:

Packets are not forwarded to the specific next hop.

Packets are forwarded based on the routing table.

Packets are forwarded based on a static route.

Packets are forwarded to the specific next hop.

Question 78

What does the PE router convert the Ipv4 prefix to within an MPLS VPN?

Options:

VPN-IPv4 prefix combined with the 64-bit route distinguisher

48-bit route combining the IP and PE router-id

prefix that combines the ASN, PE router-id, and IP prefix

eBGP path association between the PE and CE sessions

Question 79

What are two MPLS label characteristics? (Choose two.)

Options:

The label edge router swaps labels on the received packets.

Labels are imposed in packets after the Layer 3 header.

LDP uses TCP for reliable delivery of information.

An MPLS label is a short identifier that identifies a forwarding equivalence class.

A maximum of two labels can be imposed on an MPLS packet.

Question 80

Refer to the exhibit.

The Math and Science departments connect through the corporate. IT router but users in the Math department must not be able to reach the Science department and vice versa Which configuration accomplishes this task?

Options:

vrf definition Science！interface E 0/2ip address 192.168.1.1 255.255.255.0no shut！interface E 0/3ip address 192.168.2.1 255.255.255.0no shut

vrf definition Scienceaddress-family ipv4!interface E 0/2ip address 192.168.1.1 255.255.255.0vrf forwarding Scienceno shut!interface E 0/3ip address 192.168.2.1 255.255.255.0vrf forwarding Scienceno shut

vrf definition Scienceaddress-family ipv4!interface E 0/2ip address 192.168.1.1 255.255.255.0no shut!interface E 0/3ip address 192.168.2.1 255.255.255.0no shut

vrf definition Scienceaddress-family ipv4!interface E 0/2vrf forwarding Scienceip address 192.168.1.1 255.255.255.0no shut!interface E 0/3vrf forwarding Scienceip address 192.168.2.1

Question 81

Refer to the exhibits. An engineer filtered messages based on severity to minimize log messages. After applying the filter, the engineer noticed that it filtered required messages as well. Which action must the engineer take to resolve the issue?

Options:

Configure syslog level 2.

Configure syslog level 3.

Configure syslog level 4.

Configure syslog level 5.

Question 82

An engineer needs dynamic routing between two routers and is unable to establish OSPF adjacency. The output of the show ip ospf neighbor command shows that the neighbor state is EXSTART/EXCHANGE. Which action should be taken to resolve this issue?

Options:

match the passwords

match the hello timers

match the MTUs

match the network types

Question 83

How does an MPLS Layer 3 VPN function?

Options:

set of sites use multiprotocol BGP at the customer site for aggregation

multiple customer sites interconnect through service provider network to create secure tunnels between customer edge devices

set of sites interconnect privately over the Internet for security

multiple customer sites interconnect through a service provider network using customer edge to provider edge connectivity

Question 84

Refer to the exhibit.

Which two actions restrict access to router R1 by SSH? (Choose two.)

Options:

Configure transport input ssh on line vty and remove sequence 30 from access list 100.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.

Remove class-map ANY from service-policy CoPP

Configure transport output ssh on line vty and remove sequence 10 from access list 199.

Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199

Question 85

Refer to the exhibit.

A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands Which action resolves the issue?

Options:

Configure TACACS+ synchronization with the Active Directory admin group

Configure the username from a local database

Configure full access for the username from TACACS+ server

Configure an authorized IP address for this user to access this router

Question 86

Refer to the exhibit.

BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1. Users report packet loss and interruption of service to applications hosted onthe 10.1.1.0724 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command. Which action stabilizes the service?

Options:

Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.

Repeat the test from R4 using ICMP ping on the local 10.1.1.0/24 prefix, and fix any Layer 2 errors on the host or switch side of the subnet. ^ C. Place an OSPF distribute-list outbound on R3 to block the 10.1.10/24 prefix from being advertised back to R3.

Reduce frequent OSPF SPF calculations on R3 that cause a high CPU and packet loss on traffic traversing R3.

Question 87

What are two functions of LDP? (Choose two.)

Options:

It is defined in RFC 3038 and 3039.

It requires MPLS Traffic Engineering.

It advertises labels per Forwarding Equivalence Class.

It must use Resource Reservation Protocol.

It uses Forwarding Equivalence Class

Question 88

What are two functions of IPv6 Source Guard? (Choose two.)

Options:

It uses the populated binding table for allowing legitimate traffic.

It works independent from IPv6 neighbor discovery.

It denies traffic from unknown sources or unallocated addresses.

It denies traffic by inspecting neighbor discovery packets for specific pattern.

It blocks certain traffic by inspecting DHCP packets for specific sources.

Question 89

Drag and drop the LDP features from the left onto the descriptions on the right

Options:

Question 90

Refer to Exhibit:

AS 111 wanted to use AS 200 as the preferred path for 172.20.5.0/24 and AS 100 as the backup. After the configuration, AS 100 is not used for any other routes. Which configuration resolves the issue?

Options:

route-mmap SETLP permit 10match ip address prefix-list PLIST1set local-preference 99route-map SETLP permit 20

route-map SETLP permit 10match ip address prefix-list PLIST1set local-preference 110route-map SETLP permit 20

router bgp 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.10.1 route-map SETLP out

router bap 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.20.2 route-map SE TLP in

Question 91

Drag and drop the actions from the left into the correct order on the right to configure a policy to avoid following packet forwarding based on the normal routing path.

Options:

Question 92

Refer to the exhibit.

An engineer configured BGP between routers R1 and R3 The BOP peers cannot establish neighbor adjacency to be able to exchange routes. Which configuration resolves this issue?

Options:

R3router bgp 6502address-family ipv6neighbor AB01:2011:7:100::1 activate

R1router bgp 6501address-family ipv6neighbor AB01:2011:7:100;:3 activate

R3router bgp 6502neighbor AB01:2011:7:100::1 ebgp-muttlhop 255

R1router bgp 6501 neighborAB01:2011:7:100::3ebgp-multihop255

Question 93

Refer to Exhibit.

A network administrator enables DHCP snooping on the Cisco Catalyst 3750-X switch and configures the uplink port (Port-channel2) as a trusted port. Clients are not receiving an IP address, but when DHCP snooping is disabled, clients start receiving IP addresses. Which global command resolves the issue?

Options:

No ip dhcp snooping information option

ip dhcp snooping

ip dhcp relay information trust portchannel2

ip dhcp snooping trust

Question 94

What are two characteristics of VRF instance? (Choose two.)

Options:

All VRFs share customers routing and CEF tables .

An interface must be associated to one VRF.

Each VRF has a different set of routing and CEF tables

It is defined by the VPN membership of a customer site attached to a P device.

A customer site can be associated to different VRFs

Question 95

Which two protocols work in the control plane of P routers across the MPLS cloud? (choose two)

Options:

LSP

RSVP

ECMP

LDP

MPLS OAM

Question 96

Refer to the exhibits.

When DMVPN is configured, which configuration allows spoke-to-spoke communication using loopback as a tunnel source?

Options:

Configure crypto isakmp key cisco address 0.0.0.0 on the hub.

Configure crypto isakmp key Cisco address 200.1.0.0 255.255.0.0 on the hub.

Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes.

Configure crypto isakmp key cisco address 0.0.0.0 on the spokes.

Question 97

Refer to the exhibit.

A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?

Options:

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

Set a tag in the route map when redistributing EIGRP into OSPF on R1, and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

Question 98

An engineer is troubleshooting on the console session of a router and turns on multiple debug commands. The console screen is filled with scrolling debug messages that none of the commands can be verified if entered correctly or display any output. Which action allows the engineer to see entered console commands while still continuing the analysis of the debug messages?

Options:

Configure the logging synchronous command

Configure the no logging console debugging command globally

Configure the logging synchronous level all command

Configure the term no mon command globally

Question 99

Refer to the exhibit.

An engineer wanted to set a tag of 30 to route 10 1.80.65/32 but it failed How is the issue fixed?

Options:

Modify route-map ospf-to-eigrp permit 30 and match prefix-list ccnp2.

Modify route-map ospf-to-eigrp permit 10 and match prefix-list ccnp2.

Modify prefix-list ccnp3 to add 10.1.64.0/20 le 24

Modify prefix-list ccnp3 to add 10.1.64.0/20 ge 32

Question 100

Refer to the exhibit.

A network administrator configured an IPv6 access list to allow TCP return frame only, but it is not working as expected. Which changes resolve this issue?

Options:

Option A

Option B

Option C

Option D

Question 101

A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company’s security policy. The administrator can still ping to www.cisco.com Which interface should the access list 101 be applied to resolve this issue?

Options:

Interface G0/48 in the incoming direction

Interface G0/0 in the outgoing direction.

Interface S1/0 in the outgoing direction.

Interface G0/0 in the incoming direction.

Question 102

Refer to the exhibit. A network administrator configured an IPv6 access list to allow TCP return traffic only, but it is not working as expected. Which changes resolve this issue?

Options:

ipv6 access-list inboundpermit tcp any any syndeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound out

ipv6 access-list inboundpermit tcp any any syndeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound in

ipv6 access-list inboundpermit tcp any any establisheddeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound in

ipv6 access-list inboundpermit tcp any any establisheddeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound out

Question 103

Refer to the exhibit.

All the serial between R1, R2, and R3 have the Same bandwidth. User on the 192.168.1.0/24 network report slow response times while they access resource on network 192.168.3.0/24. When a traceroute is run on the path. It shows that the packet is getting forwarded via R2 to R3 although the link between R1 and R3 is still up. What must the network administrator to fix the slowness?

Options:

Change the Administrative Distance of EIGRP to 5.

Add a static route on R1 using the next hop of R3.

Remove the static route on R1.

Redistribute theR1 route to EIGRP

Question 104

Refer to the exhibit.

The OSPF routing protocol is redistributed into the BGP routing protocol, but not all the OSPF routes are distributed into BGP Which action resolves the issue?

Options:

Include the word external in the redistribute command

Use a route-map command to redistribute OSPF external routes defined in an access list

Include the word internal external in the redistribute command

Use a route-map command to redistribute OSPF external routes defined in a prefix list.

Question 105

Refer to the exhibit.

When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic to pass through the interface Which command must be configured to resolve the issue?

Options:

access-class INTERNET in

ipv6 traffic-filter INTERNET in

ipv6 access-class INTERNET in

ip access-group INTERNET in

Question 106

An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted. Which action resolves the issue?

Options:

Configure all devices for SNMPv3 informs with priv.

Configure all devices for SNMPv3 informs with auth.

Configure all devices for SNMPv3 traps with auth.

Configure all devices for SNMPv3 traps with priv.

Question 107

Refer to the exhibit. R1 and R2 cannot establish an EIGRP adjacency. Which action establishes EIGRP adjacency?

Options:

Remove the current autonomous system number on one of the routers and change to a different value.

Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.

Question 108

Refer to the exhibit. The DHCP client is unable to receive an IP address from the DHCP server RouterB is configured as follows:

Interface fastethernet 0/0

description Client DHCP ID 394482431

Ip address 172 31 11 255 255.255 0

ip route 172.16.1.0 255 255 255.0 10.1.1.2

Which command is required on the fastethernet 0/0 interface of RouterB to resolve this issue?

Options:

RouterB(config-if)#lp helper-address 172.31.1.1

RouterBiconfig-ififclp helper-address 255.255 255 255

RouterB(config-if)#lp helper-address 172.16.1.1

RouterB(config-if)#lp helper-address 172.16.1.2

Question 109

Refer to the exhibit.

An engineer identifier a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?

Options:

no spanning-tree uplinkfast

spanning-tree loopguard default

spanning-tree backbonesfast

spanning-tree portfast bpduguard

Question 110

In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.)

Options:

by IPv6 routing protocols to securely build neighborships without the need of authentication

by the recovery mechanism to recover the binding table in the event of a device reboot

by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways

by various IPv6 guard features to validate the data link layer address

by storing hashed keys for IPsec tunnels for the built-in IPsec features

Question 111

Which two components are needed for a service provider to utilize the LVPN MPLS application? (Choose two.)

Options:

The P routers must be configured for MP-iBGP toward the PE routers

The P routers must be configured with RSVP.

The PE routers must be configured for MP-iBGP with other PE routers

The PE routers must be configured for MP-eBGP to connect to CEs

The P and PE routers must be configured with LDP or RSVP

Question 112

An engineer configured SNMP notifications sent to the management server using authentication and encrypting data with DES. An error in the response PDU is received as "UNKNOWNUSERNAME. WRONGDIGEST". Which action resolves the issue?

Options:

Configure the correct authentication password using SNMPv3 authPriv .

Configure the correct authentication password using SNMPv3 authNoPriv.

Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.

Configure correct authentication and privacy passwords using SNMPv3 authPriv.

Question 113

Refer to the exhibit.

A company with autonomous system number AS65401 has obtained IP address block 209.165.200.224/27 fro, ARIN. The company needed more IP addresses and was assigned block209.165.202.128/27 from ISP2. An engineer is ISP1 reports they are receiving ISP2 routes from AS65401. Which configuration onR1 resolves the issue?

Options:

Option A

Option B

Option C

Option D

Question 114

Refer to the exhibit.

Which interface configuration must be configured on the HUB router to enable MVPN with mGRE mode?

Options:

Option A

Option B

Option C

Option D

Question 115

Refer to the exhibit.

A user cannot SSH to the router. What action must be taken to resolve this issue?

Options:

Configure transport input ssh

Configure transport output ssh

Configure ip ssh version 2

Configure ip ssh source-interface loopback0

Question 116

Refer to the exhibit.

Troubleshoot and ensure that branch B only ever uses the MPLS B network to reach HQ. Which action achieves this requirement?

Options:

Introduce an AS path filter on branch A routers so that only local prefixes are advertised into BGP

increase the local preference for all HQ prefixes received at branch B from the MPLS B network to be higher than the local preferences used on the MPLS A network

Introduce AS path prepending on the branch A MPLS B network connection so that any HQ advertisements from branch A toward the MPLS B network are prepended three times

Modify the weight of all HQ prefixes received at branch B from the MPLS B network to be higher than the weights used on the MPLS A network

Question 117

Refer to the exhibit.

A network administrator is using the DNA Assurance Dashboard panel to troubleshoot an OSPF adjacency that failed between Edge_NYC interface GigabitEthernet1/3 with Neighbor Edge_SNJ. The administrator observes that the neighborship is stuck in exstart state. How does the administrator fix this issue?

Options:

Configure to match the OSPF interface speed and duplex settings on both routers.

Configure to match the OSPF interface MTU settings on both routers.

Configure to match the OSPF interface unique IP address and subnet mask on both routers.

Configure to match the OSPF interface network types on both routers.

Question 118

Refer to the exhibit.

A user has set up an IP SLA probe to test if a non-SLA host web server on IP address 10.1.1.1 accepts HTTP sessions prior to deployment. The probe is failing. Which action should the network administrator recommend for the probe to succeed?

Options:

Re-issue the ip sla schedule command.

Add icmp-echo command for the host.

Add the control disable option to the tcp connect.

Modify the ip sla schedule frequency to forever.

Question 119

Refer to the exhibit.

AS65510 iBGP is configured for directly connected neighbors. R4 cannot ping or traceroute network 192 168.100.0/24 Which action resolves this issue?

Options:

Configure R4 as a route reflector server and configure R1 as a route reflector client

Configure R1 as a route reflector server and configure R2 and R3 as route reflector clients

Configure R4 as a route reflector server and configure R2 and R3 as route reflector clients.

Configure R1 as a route reflector server and configure R4 as a route reflector client

Question 120

Refer to the exhibit.

To provide reachability to network 10.1.1.0 /24 from R5, the network administrator redistributes EIGRP into OSPF on R3 but notices that R4 is now taking a ........... path through R5 to reach 10.1.1.0/24 network. Which action fixes the issue while keeping the reachability from R5 to 10.1.1.0/24 network?

Options:

Change the administrative distance of the external EIGRP to 90.

Apply the outbound distribution list on R5 toward R4 in OSPF.

Change the administrative distance of OSPF to 200 on R5.

Redistribute OSPF into EIGRP on R4

Question 121

Refer to the exhibit.

The network administrator configured redistribution on an ASBR to reach to all WAN networks but failed Which action resolves the issue?

Options:

The route map must have the keyword prefix-list to evaluate the prefix list entries

The OSPF process must have a metric when redistributing prefixes from EIGRP.

The route map EIGRP->OSPF must have the 10.0.106.0/24 entry to exist in one of the three prefix lists to pass

EIGRP must redistribute the 10.0.106.0/24 route instead of using the network statement

Question 122

What are two functions of MPLS Layer 3 VPNs? (Choose two.)

Options:

LDP and BGP can be used for Pseudowire signaling.

It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.

BGP is used for signaling customer VPNv4 routes between PE nodes.

A packet with node segment ID is forwarded along with shortest path to destination.

Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

Question 123

Refer to the exhibit.

SanFrancisco and Boston routers are choosing slower links to reach each other despite the direct links being up Which configuration fixes the issue?

Options:

Option A

Option B

Option C

Option D

Question 124

Refer to the exhibit.

An IPv6 network was newly deployed in the environment and the help desk reports that R3 cannot SSH to the R2s Loopback interface. Which action resolves the issue?

Options:

Modify line 10 of the access list to permit instead of deny.

Remove line 60 from the access list.

Modify line 30 of the access list to permit instead of deny.

Remove line 70 from the access list.

Question 125

Which statement about MPLS LDP router ID is true?

Options:

If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.

The loopback with the highest IP address is selected as the router ID.

The MPLS LDP router ID must match the IGP router ID.

The force keyword changes the router ID to the specified address without causing any impact.

Question 126

Which protocol does VRF-Lite support?

Options:

IS-IS

ODR

EIGRP

IGRP

Question 127

Refer to the exhibit.

An engineer is trying to redistribute OSPF to BGP, but not all of the routes are

redistributed. What is the reason for this issue?

Options:

By default, only internal routes and external type 1 routes are redistributed into BGP

Only classful networks are redistributed from OSPF to BGP

BGP convergence is slow, so the route will eventually be present in the BGP table

By default, only internal OSPF routes are redistributed into BGP

Question 128

Refer to the exhibit.

An administrator noticed that after a change was made on R1, the timestamps on the system logs did not match the clock. What is the reason for this error?

Options:

An authentication error with the NTP server results in an incorrect timestamp.

The keyword localtime is not defined on the timestamp service command.

The NTP server is in a different time zone.

The system clock is set incorrectly to summer-time hours.

Question 129

Refer to the exhibit.

Which interface configuration must be configured on the spoke A router to enable a dynamic DMVPN tunnel with the spoke B router?

Options:

Option A

Option B

Option C

Option D

Question 130

Refer to the exhibit. an engineer is trying to get 192.168.32.100 forwarded through 10.1.1.1, but it was forwarded through 10.1.1.2. What action forwards the packets through 10.1.1.1?

Options:

Configure EIGRP to receive 192.168.32.0 route with lower admin distance.

A. Configure EIGRP to receive 192.168.32.0 route with longer prefix than /19.

A. Configure EIGRP to receive 192.168.32.0 route with lower metric.

A. Configure EIGRP to receive 192.168.32.0 route with equal or longer prefix than /24.

Question 131

Refer to the following output:

Router#show ip nhrp detail

10.1.1.2/8 via 10.2.1.2, Tunnel1 created 00:00:12, expire 01:59:47

TypE. dynamic, Flags: authoritative unique nat registered used

NBMA address: 10.12.1.2

What does the authoritative flag mean in regards to the NHRP information?

Options:

It was obtained directly from the next-hop server.

Data packets are process switches for this mapping entry.

NHRP mapping is for networks that are local to this router.

The mapping entry was created in response to an NHRP registration request.

The NHRP mapping entry cannot be overwritten.

Question 132

Refer the exhibit.

Which action resolves intermittent connectivity observed with the SNMP trap

packets?

Options:

Decrease the committed burst Size of the mgmt class map

Increase the CIR of the mgmt class map

Add a new class map to match TCP traffic

Add one new entry in the ACL 120 to permit the UDP port 161

Question 133

After some changes in the routing policy, it is noticed that the router in AS 45123 is being used as a transit AS router for several service provides. Which configuration ensures that the branch router in AS 45123 advertises only the local networks to all SP neighbors?

Options:

Option A

Option B

Option C

Option D

Question 134

Which label operations are performed by a label edge router?

Options:

SWAP and POP

SWAP and PUSH

PUSH and PHP

PUSH and POP

Question 135

Which two protocols can cause TCP starvation? (Choose two)

Options:

TFTP

SNMP

SMTP

HTTPS

FTP

Question 136

Refer to the exhibit.

An engineer configures a static route on a router, but when the engineer checks the route

to the destination, a different next hop is chosen. What is the reason for this?

Options:

Dynamic routing protocols always have priority over static routes.

The metric of the OSPF route is lower than the metric of the static route.

The configured AD for the static route is higher than the AD of OSPF.

The syntax of the static route is not valid, so the route is not considered.

Question 137

Drag and drop the MPLS VPN device types from me left onto the definitions on the right.

Options:

Question 138

Which transport layer protocol is used to form LDP sessions?

Options:

UDP

SCTP

TCP

RDP

Question 139

Which Cisco VPN technology can use multipoint tunnel, resulting in a single GRE tunnel interface on the hub, to support multiple connections from multiple spoke devices?

Options:

DMVPN

GETVPN

Cisco Easy VPN

FlexVPN

Question 140

Which statement about IPv6 ND inspection is true?

Options:

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Question 141

Refer to the exhibit.

An engineer is trying to generate a summary route in OSPF for network 10.0.0.0/8, but the

summary route does not show up in the routing table. Why is the summary route missing?

Options:

The summary-address command is used only for summarizing prefixes between areas.

The summary route is visible only in the OSPF database, not in the routing table.

There is no route for a subnet inside 10.0.0.0/8, so the summary route is not generated.

The summary route is not visible on this router, but it is visible on other OSPF routers in the same area.

Question 142

Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

Options:

multi-paths eibgp 2

maximum-paths 2

Maximum-paths ibgp 2

multi-paths 2

Question 143

Refer to the exhibit.

Which statement about R1 is true?

Options:

OSPF redistributes RIP routes only if they have a tag of one.

RIP learned routes are distributed to OSPF with a tag value of one.

R1 adds one to the metric for RIP learned routes before redistributing to OSPF.

RIP routes are redistributed to OSPF without any changes.

Question 144

An engineer is trying to copy an IOS file from one router to another router by using TFTP. Which two actions are needed to allow the file to copy? (Choose two.)

Options:

Copy the file to the destination router with the copy tftp: flash: command

Enable the TFTP server on the source router with the tftp-server flash: command

TFTP is not supported in recent IOS versions, so an alternative method must be used

Configure a user on the source router with the username tftp password tftp command

Configure the TFTP authentication on the source router with the tftp-server authentication local command

Question 145

Refer to the exhibit.

The output of the trace route from R5 shows a loop in the network. Which configuration

prevents this loop?

Options:

Option A

Option B

Option C

Option D

Question 146

Refer to the exhibit.

During troubleshooting it was discovered that the device is not reachable using a secure

web browser. What is needed to fix the problem?

Options:

permit tcp port 443

permit udp port 465

permit tcp port 465

permit tcp port 22

Question 147

A network engineer is investigating a flapping (up/down) interface issue on a core switch that is synchronized to an NTP server. Log output currently does not show the time of the flap. Which command allows the logging on the switch to show the time of the flap according to the clock on the device?

Options:

service timestamps log uptime

clock summer-time mst recurring 2 Sunday mar 2:00 1 Sunday nov 2:00

service timestamps log datetime localtime show-timezone

clock calendar-valid

Question 148

Which statement about IPv6 RA Guard is true?

Options:

It does not offer protection in environments where IPv6 traffic is tunneled.

It cannot be configured on a switch port interface in the ingress direction.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

It is not supported in hardware when TCAM is programmed.

Question 149

Refer to the exhibit.

An engineer is trying to block the route to 192.168.2.2 from the routing table by using the

configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?

Options:

Use an extended access list instead of a standard access list.

Change sequence 10 in the route-map command from permit to deny.

Use a prefix list instead of an access list in the route map.

Add this statement to the route map: route-map RM-OSPF-DL deny 20.

Question 150

Refer to the exhibit.

What is the result of applying this configuration?

Options:

The router can form BGP neighborships with any other device.

The router cannot form BGP neighborships with any other device.

The router cannot form BGP neighborships with any device that is matched by the access list named “BGP”.

The router can form BGP neighborships with any device that is matched by the access list named “BGP”.

Question 151

Refer to the exhibit.

Which configuration configures a policy on R1 to forward any traffic that is sourced from

the 192.168.130.0/24 network to R2?

Options:

Option A

Option B

Option C

Option D

Question 152

Refer to the exhibit.

In which circumstance does the BGP neighbor remain in the idle condition?

Options:

if prefixes are not received from the BGP peer

if prefixes reach the maximum limit

if a prefix list is applied on the inbound direction

if prefixes exceed the maximum limit

Question 153

Drag and drop the operations from the left onto the locations where the operations are performed on the right.

Options:

Question 154

Refer to the exhibit.

Which configuration denies Telnet traffic to router 2 from 198A:0:200C::1/64?

Options:

Option A

Option B

Option C

Option D

Question 155

Refer to the exhibit.

An administrator that is connected to the console does not see debug messages when

remote users log in. Which action ensures that debug messages are displayed for remote logins?

Options:

Enter the transport input ssh configuration command.

Enter the terminal monitor exec command.

Enter the logging console debugging configuration command.

Enter the aaa new-model configuration command.

Question 156

Refer to the exhibit.

Why is user authentication being rejected?

Options:

The TACACS+ server expects “user”, but the NT client sends “domain/user”.

The TACACS+ server refuses the user because the user is set up for CHAP.

The TACACS+ server is down, and the user is in the local database.

The TACACS+ server is down, and the user is not in the local database.

Question 157

Refer to the exhibit.

An engineer is troubleshooting BGP on a device but discovers that the clock on the device does not correspond to the time stamp of the log entries. Which action ensures consistency between the two times?

Options:

Configure the service timestamps log uptime command in global configuration mode.

Configure the logging clock synchronize command in global configuration mode.

Configure the service timestamps log datetime localtime command in global configuration mode.

Make sure that the clock on the device is synchronized with an NTP server.

Question 158

Refer to the exhibit.

A router receiving BGP routing updates from multiple neighbors for routers in AS 690. What is the reason that the router still sends traffic that is destined to AS 690 to a neighbor other than 10.222.1.1?

Options:

The local preference value in another neighbor statement is higher than 250.

The local preference value should be set to the same value as the weight in the route map.

The route map is applied in the wrong direction.

The weight value in another neighbor statement is higher than 200.

Question 159

Refer to the exhibit.

An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 loses reachability with the router R3 Fa0/0 interface. The route has changed to flow through

router R2. Which debug command is used to troubleshoot this issue?

Options:

debug ip flow

debug ip sla error

debug ip routing

debug ip packet

Question 160

An engineer configured a company’s multiple area OSPF head office router and Site A cisco

routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone.

After finishing both site router configurations, none of the LSA 3,4 5, and 7 are installed at Site A router. Which configuration resolves this issue?

Options:

configure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc

configure capability vrf-lite on Head Office and its connected PE router under router ospf 1 vrf abc

configure capability vrf-lite on both PE routers connected to Head Office and Site A routers under routtr ospf 1 vrf abc

configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc

Question 161

Refer to the exhibit.

The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new IP address. Which two actions must be taken to resolve this Issue? (Choose two.)

Options:

Configure the server to use DHCP on the network with default gateway 200 30.40.100.

Configure the server with a static IP address and default gateway.

Configure the router to exclude a server IP address.

Configure the server to use DHCP on the network with default gateway 200 30.30.100.

Configure the router to exclude a server IP address and default gateway.

Question 162

What is an advantage of using BFD?

Options:

It detects local link failure at layer 1 and updates routing table.

It detects local link failure at layer 2 and updates routing protocols.

It has sub-second failure detection for layer 1 and layer 3 problems.

It has sub-second failure detection for layer 1 and layer 2 problems.

Question 163

Which statement about route distinguishers in an MPLS network is true?

Options:

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network.

Route distinguishers define which prefixes are imported and exported on the edge router.

Question 164

What is the output of the following command:

show ip vrf

Options:

Show's default RD values

Displays IP routing table information associated with a VRF

Show's routing protocol information associated with a VRF.

Displays the ARP table (static and dynamic entries) in the specified VRF

Question 165

Drag and drop the addresses from the left onto the correct IPv6 filter purposes on the right.

Options:

Question 166

An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table. What should be configured to accomplish this task?

Options:

set ip next-hop

set ip default next-hop

set ip next-hop recursive

set ip next-hop verify-availability

Question 167

Refer to the exhibit.

The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host

192.168.10.10cannot SSH to host 192.168.100.10 even though the flow is permitted. Which action

resolves the issue without opening full access to this router?

Options:

Move the SSH entry to the beginning of the ACL

Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works

Temporarily remove the ACL from the interface to see if the flow works

Run the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it

Question 168

Refer to the exhibit.

Which subnet is redistributed from EIGRP to OSPF routing protocols?

Options:

10.2.2.0/24

10.1.4.0/26

10.1.2.0/24

10.2.3.0/26

Question 169

During the maintenance window an administrator accidentally deleted the Telnet-related

configuration that permits a Telnet connection from the inside network (Eth0/0) to the outside of the networking between Friday – Sunday night hours only. Which configuration resolves the issue?

Options:

Option A

Option B

Option C

Option D

Question 170

Refer to the exhibit.

An engineer is monitoring reachability of the configured default routes to ISP1 and ISP2. The default route from ISP1 is preferred if available. How is this issue resolved?

Options:

Use the icmp-echo command to track both default routes

Use the same AD for both default routes

Start IP SLA by matching numbers for track and ip sla commands

Start IP SLA by defining frequency and scheduling it

Question 171

Users were moved from the local DHCP server to the remote corporate DHCP server. After the move,

none of the users were able to use the network.

Which two issues will prevent this setup from working properly? (Choose two)

Options:

Auto-QoS is blocking DHCP traffic.

The DHCP server IP address configuration is missing locally

802.1X is blocking DHCP traffic

The broadcast domain is too large for proper DHCP propagation

The route to the new DHCP server is missing

Question 172

Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPV3 categories on the right.

Options:

Question 173

Refer to the exhibit.

After redistribution is enabled between the routing protocols; PC2, PC3, and PC4 cannot reach PC1. Which action can the engineer take to solve the issue so that all the PCs are reachable?

Options:

Set the administrative distance 100 under the RIP process on R2.

Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.

Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.

Redistribute the directly connected interfaces on R2.

Question 174

Drag and Drop the IPv6 First-Hop Security features from the left onto the definitions on the right.

Options:

Question 175

Which component of MPLS VPNs is used to extend the IP address so that an engineer is able to

identify to which VPN it belongs?

Options:

VPNv4 address family

LDP

Question 176

What is a function of IPv6 ND inspection?

Options:

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

Question 177

What is the role of a route distinguisher via a VRF-Lite setup implementation?

Options:

It extends the IP address to identify which VFP instance it belongs to.

It manages the import and export of routes between two or more VRF instances

It enables multicast distribution for VRF-Lite setups to enhance EGP routing protocol capabilities

It enables multicast distribution for VRF-Lite setups to enhance IGP routing protocol capabilities

Question 178

What is a role of route distinguishers in an MPLS network?

Options:

Route distinguishers define which prefixes are imported and exported on the edge router

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network

Question 179

Which attribute eliminates LFAs that belong to protected paths in situations where links in a network are connected through a common fiber?

Options:

shared risk link group-disjoint

linecard-disjoint

lowest-repair-path-metric

interface-disjoint

Question 180

Which SNMP verification command shows the encryption and authentication protocols that are used in

SNMPV3?

Options:

show snmp group

show snmp user

show snmp

show snmp view

Question 181

Which method changes the forwarding decision that a router makes without first changing the routing table or influencing the IP data plane?

Options:

nonbroadcast multiaccess

packet switching

policy-based routing

forwarding information base

Question 182

Which option is the best for protecting CPU utilization on a device?

Options:

fragmentation

COPP

ICMP redirects

ICMP unreachable messages

Question 183

Refer to the exhibit.

An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?

Options:

no ip ssh disable

ip ssh enable

ip ssh version 2

crypto key generate rsa

Question 184

Drag and drop the MPLS terms from the left onto the correct definitions on the right.

Options:

Load More 300-410 Questions

Summer Special Flat 65% Limited Time Discount offer - Ends in 0d 00h 00m 00s - Coupon code: suredis

Cisco 300-410 Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Exam Practice Test

Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options: