Pre-Summer Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: best70

300-410 Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Questions and Answers

Questions 4

An engineer is trying to copy an IOS file from one router to another router by using TFTP. Which two actions are needed to allow the file to copy? (Choose two.)

Options:

A.

Copy the file to the destination router with the copy tftp: flash: command

B.

Enable the TFTP server on the source router with the tftp-server flash: < filename > command

C.

TFTP is not supported in recent IOS versions, so an alternative method must be used

D.

Configure a user on the source router with the username tftp password tftp command

E.

Configure the TFTP authentication on the source router with the tftp-server authentication local command

Buy Now
Questions 5

Refer to the exhibit.

300-410 Question 5

An engineer is trying to redistribute OSPF to BGP, but not all of the routes are

redistributed. What is the reason for this issue?

Options:

A.

By default, only internal routes and external type 1 routes are redistributed into BGP

B.

Only classful networks are redistributed from OSPF to BGP

C.

BGP convergence is slow, so the route will eventually be present in the BGP table

D.

By default, only internal OSPF routes are redistributed into BGP

Buy Now
Questions 6

Which method changes the forwarding decision that a router makes without first changing the routing table or influencing the IP data plane?

Options:

A.

nonbroadcast multiaccess

B.

packet switching

C.

policy-based routing

D.

forwarding information base

Buy Now
Questions 7

300-410 Question 7

Refer to the exhibit. an engineer is trying to get 192.168.32.100 forwarded through 10.1.1.1, but it was forwarded through 10.1.1.2. What action forwards the packets through 10.1.1.1?

Options:

A.

Configure EIGRP to receive 192.168.32.0 route with lower admin distance.

B.

A. Configure EIGRP to receive 192.168.32.0 route with longer prefix than /19.

C.

A. Configure EIGRP to receive 192.168.32.0 route with lower metric.

D.

A. Configure EIGRP to receive 192.168.32.0 route with equal or longer prefix than /24.

Buy Now
Questions 8

Refer to the following output:

Router#show ip nhrp detail

10.1.1.2/8 via 10.2.1.2, Tunnel1 created 00:00:12, expire 01:59:47

TypE. dynamic, Flags: authoritative unique nat registered used

NBMA address: 10.12.1.2

What does the authoritative flag mean in regards to the NHRP information?

Options:

A.

It was obtained directly from the next-hop server.

B.

Data packets are process switches for this mapping entry.

C.

NHRP mapping is for networks that are local to this router.

D.

The mapping entry was created in response to an NHRP registration request.

E.

The NHRP mapping entry cannot be overwritten.

Buy Now
Questions 9

During the maintenance window an administrator accidentally deleted the Telnet-related

configuration that permits a Telnet connection from the inside network (Eth0/0) to the outside of the networking between Friday – Sunday night hours only. Which configuration resolves the issue?

A)

300-410 Question 9

B)

300-410 Question 9

C)

300-410 Question 9

D)

300-410 Question 9

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 10

Refer to the exhibit.

300-410 Question 10

The network administrator configured VRF lite for customer A. The technician at the remote site misconfigured VRF on the router. Which configuration will resolve connectivity for both sites of customer_a?

300-410 Question 10

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 11

Which two protocols can cause TCP starvation? (Choose two)

Options:

A.

TFTP

B.

SNMP

C.

SMTP

D.

HTTPS

E.

FTP

Buy Now
Questions 12

Refer to the exhibit.

300-410 Question 12

What is the result of applying this configuration?

Options:

A.

The router can form BGP neighborships with any other device.

B.

The router cannot form BGP neighborships with any other device.

C.

The router cannot form BGP neighborships with any device that is matched by the access list named “BGP”.

D.

The router can form BGP neighborships with any device that is matched by the access list named “BGP”.

Buy Now
Questions 13

What is an advantage of using BFD?

Options:

A.

It detects local link failure at layer 1 and updates routing table.

B.

It detects local link failure at layer 2 and updates routing protocols.

C.

It has sub-second failure detection for layer 1 and layer 3 problems.

D.

It has sub-second failure detection for layer 1 and layer 2 problems.

Buy Now
Questions 14

Refer to the exhibit.

300-410 Question 14

After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both

spoke-to-spoke and hub were not establishing. Which two actions resolve the issue? (Choose two.)

Options:

A.

Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3

B.

Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.

C.

Change the mode from mode tunnel to mode transport on R3

D.

Change the mode from mode transport to mode tunnel on R2.

E.

Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3

Buy Now
Questions 15

Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

Options:

A.

multi-paths eibgp 2

B.

maximum-paths 2

C.

Maximum-paths ibgp 2

D.

multi-paths 2

Buy Now
Questions 16

Which option is the best for protecting CPU utilization on a device?

Options:

A.

fragmentation

B.

COPP

C.

ICMP redirects

D.

ICMP unreachable messages

Buy Now
Questions 17

Refer to the exhibit.

300-410 Question 17

An engineer has configured DMVPN on a spoke router. What is the WAN IP address of another spoke router within the DMVPN network?

Options:

A.

172.18.46.2

B.

192.168.1.4

C.

172.18.16.2

D.

192.168.1.1

Buy Now
Questions 18

An engineer configured the wrong default gateway for the Cisco DNA Center enterprise interface during the install. Which command must the engineer run to correct the configuration?

Options:

A.

sudo maglev-config update

B.

sudo maglev install config update

C.

sudo maglev reinstall

D.

sudo update config install

Buy Now
Questions 19

Refer to the exhibit.

300-410 Question 19

Users report that IP addresses cannot be acquired from the DHCP server. The DHCP

server is configured as shown. About 300 total nonconcurrent users are using this DHCP server, but none of them are active for more than two hours per day. Which action fixes the issue within the current resources?

Options:

A.

Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool

B.

Configure the DHCP lease time to a smaller value

C.

Configure the DHCP lease time to a bigger value

D.

Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool

Buy Now
Questions 20

Refer to the exhibit.

300-410 Question 20

Which configuration denies Telnet traffic to router 2 from 198A:0:200C::1/64?

A)

300-410 Question 20

B)

300-410 Question 20

C)

300-410 Question 20

D)

300-410 Question 20

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 21

Refer to the exhibit.

300-410 Question 21

Which routes from OSPF process 5 are redistributed into EIGRP?

Options:

A.

E1 and E2 subnets matching access list TO-OSPF

B.

E1 and E2 subnets matching prefix list TO-OSPF

C.

only E2 subnets matching access list TO-OSPF

D.

only E1 subnets matching prefix listTO-OS1

Buy Now
Questions 22

Refer to the exhibit.

300-410 Question 22

An administrator noticed that after a change was made on R1, the timestamps on the system logs did not match the clock. What is the reason for this error?

Options:

A.

An authentication error with the NTP server results in an incorrect timestamp.

B.

The keyword localtime is not defined on the timestamp service command.

C.

The NTP server is in a different time zone.

D.

The system clock is set incorrectly to summer-time hours.

Buy Now
Questions 23

Refer to the exhibit.

300-410 Question 23

During troubleshooting it was discovered that the device is not reachable using a secure

web browser. What is needed to fix the problem?

Options:

A.

permit tcp port 443

B.

permit udp port 465

C.

permit tcp port 465

D.

permit tcp port 22

Buy Now
Questions 24

What statement about route distinguishes in an MPLS network is true?

Options:

A.

Route distinguishes make a unique VPNv4 address across the MPLS network.

B.

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

C.

Route distinguishes are used for label bindings

D.

Route distinguishes define which prefixes are imported and exported on the edge router

Buy Now
Questions 25

Refer to the exhibit.

300-410 Question 25

Which action resolves the adjacency issue?

Options:

A.

Match the hello interval timers.

B.

Configure the same EIGRP process IDs.

C.

Match the authentication keys.

D.

Configure the same autonomous system numbers.

Buy Now
Questions 26

Refer to the exhibit.

300-410 Question 26

Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are uf SLA by defining frequency and schedulingsed

300-410 Question 26

Options:

Buy Now
Questions 27

Which command is used to check IP SLA when an interface is suspected to receive lots of traffic with options?

Options:

A.

show track

B.

show threshold

C.

show timer

D.

show delay

Buy Now
Questions 28

Refer to the exhibit.

300-410 Question 28

A company is evaluating multiple network management system tools. Trending graphs generated by SNMP data are returned by the NMS and appear to have multiple gaps. While troubleshooting the issue, an engineer noticed the relevant output. What solves the gaps in the graphs?

Options:

A.

Remove the exceed-rate command in the class map.

B.

Remove the class map NMS from being part of control plane policing.

C.

Configure the CIR rate to a lower value that accommodates all the NMS tools

D.

Separate the NMS class map in multiple class maps based on the specific protocols with appropriate CoPP actions

Buy Now
Questions 29

Refer to the exhibit.

300-410 Question 29

AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server Which action resolves this issue?

Options:

A.

Match the authentication port

B.

Match the accounting port

C.

Correct the timeout value.

D.

Correct the shared secret.

Buy Now
Questions 30

Refer to the exhibit.

300-410 Question 30

Which control plane policy limits BGP traffic that is destined to the CPU to 1 Mbps and

ignores BGP traffic that is sent at higher rate?

Options:

A.

policy-map SHAPE_BGP

B.

policy-map LIMIT_BGP

C.

policy-map POLICE_BGP

D.

policy-map COPP

Buy Now
Questions 31

Refer to Exhibit:

300-410 Question 31

300-410 Question 31

AS 111 wanted to use AS 200 as the preferred path for 172.20.5.0/24 and AS 100 as the backup. After the configuration, AS 100 is not used for any other routes. Which configuration resolves the issue?

Options:

A.

route-mmap SETLP permit 10match ip address prefix-list PLIST1set local-preference 99route-map SETLP permit 20

B.

route-map SETLP permit 10match ip address prefix-list PLIST1set local-preference 110route-map SETLP permit 20

C.

router bgp 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.10.1 route-map SETLP out

D.

router bap 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.20.2 route-map SE TLP in

Buy Now
Questions 32

Refer to the exhibits.

300-410 Question 32

When DMVPN is configured, which configuration allows spoke-to-spoke communication using loopback as a tunnel source?

Options:

A.

Configure crypto isakmp key cisco address 0.0.0.0 on the hub.

B.

Configure crypto isakmp key Cisco address 200.1.0.0 255.255.0.0 on the hub.

C.

Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes.

D.

Configure crypto isakmp key cisco address 0.0.0.0 on the spokes.

Buy Now
Questions 33

Which attribute eliminates LFAs that belong to protected paths in situations where links in a network are connected through a common fiber?

Options:

A.

shared risk link group-disjoint

B.

linecard-disjoint

C.

lowest-repair-path-metric

D.

interface-disjoint

Buy Now
Questions 34

Refer to the exhibit.

300-410 Question 34

R1 is connected with R2 via GigabitEthernet0/0, and R2 cannot ping R1. What action will fix the issue?

Options:

A.

Fix route dampening configured on the router.

B.

Replace the SFP module because it is not supported.

C.

Fix IP Event Dampening configured on the interface.

D.

Correct the IP SLA probe that failed.

Buy Now
Questions 35

What is a role of route distinguishers in an MPLS network?

Options:

A.

Route distinguishers define which prefixes are imported and exported on the edge router

B.

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

C.

Route distinguishers are used for label bindings.

D.

Route distinguishers make a unique VPNv4 address across the MPLS network

Buy Now
Questions 36

Refer to the exhibit.

300-410 Question 36

Which interface configuration must be configured on the spoke A router to enable a dynamic DMVPN tunnel with the spoke B router?

300-410 Question 36

300-410 Question 36

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 37

Users were moved from the local DHCP server to the remote corporate DHCP server. After the move,

none of the users were able to use the network.

Which two issues will prevent this setup from working properly? (Choose two)

Options:

A.

Auto-QoS is blocking DHCP traffic.

B.

The DHCP server IP address configuration is missing locally

C.

802.1X is blocking DHCP traffic

D.

The broadcast domain is too large for proper DHCP propagation

E.

The route to the new DHCP server is missing

Buy Now
Questions 38

Drag and drop the packet types from the left onto the correct descriptions on the right.

300-410 Question 38

Options:

Buy Now
Questions 39

Drag and drop the MPLS VPN device types from me left onto the definitions on the right.

300-410 Question 39

Options:

Buy Now
Questions 40

Which protocol does VRF-Lite support?

Options:

A.

IS-IS

B.

ODR

C.

EIGRP

D.

IGRP

Buy Now
Questions 41

While working with software images, an engineer observes that Cisco DNA Center cannot upload its software image directly from the device. Why is the image not uploading?

Options:

A.

The device must be resynced to Cisco DNA Center.

B.

The software image for the device is in install mode.

C.

The device has lost connectivity to Cisco DNA Center.

D.

The software image for the device is in bundle mode

Buy Now
Questions 42

Refer to the exhibit.

300-410 Question 42

Network operations cannot read or write any configuration on the device with this configuration from the operations subnet. Which two configurations fix the issue? (Choose two.)

Options:

A.

Configure SNMP rw permission in addition to community ciscotest.

B.

Modify access list 1 and allow operations subnet in the access list.

C.

Modify access list 1 and allow SNMP in the access list.

D.

Configure SNMP rw permission in addition to version 1.

E.

Configure SNMP rw permission in addition to community ciscotest 1.

Buy Now
Questions 43

Refer to the exhibit.

300-410 Question 43

Which statement about R1 is true?

Options:

A.

OSPF redistributes RIP routes only if they have a tag of one.

B.

RIP learned routes are distributed to OSPF with a tag value of one.

C.

R1 adds one to the metric for RIP learned routes before redistributing to OSPF.

D.

RIP routes are redistributed to OSPF without any changes.

Buy Now
Questions 44

Drag and drop the addresses from the left onto the correct IPv6 filter purposes on the right.

300-410 Question 44

Options:

Buy Now
Questions 45

Which Cisco VPN technology can use multipoint tunnel, resulting in a single GRE tunnel interface on the hub, to support multiple connections from multiple spoke devices?

Options:

A.

DMVPN

B.

GETVPN

C.

Cisco Easy VPN

D.

FlexVPN

Buy Now
Questions 46

Refer to the exhibit.

300-410 Question 46

An administrator that is connected to the console does not see debug messages when

remote users log in. Which action ensures that debug messages are displayed for remote logins?

Options:

A.

Enter the transport input ssh configuration command.

B.

Enter the terminal monitor exec command.

C.

Enter the logging console debugging configuration command.

D.

Enter the aaa new-model configuration command.

Buy Now
Questions 47

Exhibit:

300-410 Question 47

BGP is flapping after the Copp policy is applied. What are the two solutions to fix the issue?

(Choose two)

Options:

A.

Configure BGP in the COPP-CRITICAL-7600 ACL

B.

Configure a higher value for CIR under the default class to allow more packets during peak traffic

C.

Configure a higher value for CIR under the class COPP-CRITICAL-7600

D.

Configure a three-color policer instead of two-color policer under class COPP-CRITICAL-7600

E.

Configure IP CEF to CoPP policy and BGP to work

Buy Now
Questions 48

What is the role of a route distinguisher via a VRF-Lite setup implementation?

Options:

A.

It extends the IP address to identify which VFP instance it belongs to.

B.

It manages the import and export of routes between two or more VRF instances

C.

It enables multicast distribution for VRF-Lite setups to enhance EGP routing protocol capabilities

D.

It enables multicast distribution for VRF-Lite setups to enhance IGP routing protocol capabilities

Buy Now
Questions 49

Refer to the exhibit.

300-410 Question 49

The output of the trace route from R5 shows a loop in the network. Which configuration

prevents this loop?

A)

300-410 Question 49

B)

300-410 Question 49

C)

300-410 Question 49

D)

300-410 Question 49

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 50

An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table. What should be configured to accomplish this task?

Options:

A.

set ip next-hop

B.

set ip default next-hop

C.

set ip next-hop recursive

D.

set ip next-hop verify-availability

Buy Now
Questions 51

Refer to the exhibits.

300-410 Question 51

Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two

commands are missing? (Choose two.)

Options:

A.

The ip nhrp redirect command is missing on the spoke routers.

B.

The ip nhrp shortcut command is missing on the spoke routers.

C.

The ip nhrp redirect commands is missing on the hub router.

D.

The ip nhrp shortcut commands is missing on the hub router.

E.

The ip nhrp map command is missing on the hub router.

Buy Now
Questions 52

Refer to the exhibit.

300-410 Question 52

An engineer is trying to block the route to 192.168.2.2 from the routing table by using the

configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?

Options:

A.

Use an extended access list instead of a standard access list.

B.

Change sequence 10 in the route-map command from permit to deny.

C.

Use a prefix list instead of an access list in the route map.

D.

Add this statement to the route map: route-map RM-OSPF-DL deny 20.

Buy Now
Questions 53

Which security feature can protect DMVPN tunnels?

Options:

A.

IPsec

B.

TACACS+

C.

RTBH

D.

RADIUS

Buy Now
Questions 54

Refer to the exhibit.

300-410 Question 54

A junior engineer updated a branch router configuration. Immediately after the change, the engineer receives calls from the help desk that branch personnel cannot reach any network destinations. Which configuration restores service and continues to block 10.1.1.100/32?

Options:

A.

route-map FILTER-IN deny 5

B.

ip prefix-list 102 seq 15 permit 0.0.0.0/32 le 32

C.

ip prefix-list 102 seq 5 permit 0.0.0.0/32 le 32

D.

route-map FILTER-IN permit 20

Buy Now
Questions 55

Drag and drop the operations from the left onto the locations where the operations are performed on the right.

300-410 Question 55

Options:

Buy Now
Questions 56

Drag and Drop the IPv6 First-Hop Security features from the left onto the definitions on the right.

300-410 Question 56

Options:

Buy Now
Questions 57

Refer to the exhibit.

300-410 Question 57

Why is the remote NetFlow server failing to receive the NetFlow data?

Options:

A.

The flow exporter is configured but is not used.

B.

The flow monitor is applied in the wrong direction.

C.

The flow monitor is applied to the wrong interface.

D.

The destination of the flow exporter is not reachable.

Buy Now
Questions 58

Drag and drop the OSPF adjacency states from the left onto the correct descriptions on the right.

300-410 Question 58

Options:

Buy Now
Questions 59

Refer to the exhibit.

300-410 Question 59

An engineer configures a static route on a router, but when the engineer checks the route

to the destination, a different next hop is chosen. What is the reason for this?

Options:

A.

Dynamic routing protocols always have priority over static routes.

B.

The metric of the OSPF route is lower than the metric of the static route.

C.

The configured AD for the static route is higher than the AD of OSPF.

D.

The syntax of the static route is not valid, so the route is not considered.

Buy Now
Questions 60

An engineer is troubleshooting on the console session of a router and turns on multiple debug commands. The console screen is filled with scrolling debug messages that none of the commands can be verified if entered correctly or display any output. Which action allows the engineer to see entered console commands while still continuing the analysis of the debug messages?

Options:

A.

Configure the logging synchronous command

B.

Configure the no logging console debugging command globally

C.

Configure the logging synchronous level all command

D.

Configure the term no mon command globally

Buy Now
Questions 61

300-410 Question 61

Refer to the exhibit. Which action restores the routes from neighbors while still filtering 1.1.1.0/24?

Options:

A.

Add a second line in the access list to permit any.

B.

Modify the route map to permit the access list instead of deny it

C.

Modify the access list to deny instead of permit it.

D.

Add a second sequence in the route map permit 20

Buy Now
Questions 62

300-410 Question 62

Refer to the exhibit. The remote server is failing to receive the NetFlow data Which action resolves the issue?

Options:

A.

Modify the flow transport command transport udp 2055 to move under flow monitor profile.

B.

Modify the interlace command to Ip flow monitor FLOW-MONITOR-1 Input.

C.

Modify the udp port under flow exporter profile to Ip transport udp 4739.

D.

Modify the flow record command record v4_r1 to move under flow exporter profile.

Buy Now
Questions 63

An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network. Which BGP attribute must the engineer configure to avoid using the high-delay ISP link if the second ISP link is up?

Options:

A.

LOCAL_PREF

B.

MED

C.

WEIGHT

D.

AS-PATH

Buy Now
Questions 64

Refer to Exhibit.

300-410 Question 64

A network administrator added one router in the Cisco DNA Center and checked its discovery and health from the Network Health Dashboard. The network administrator observed that the router is still showing up as unmonitored. What must be configured on the router to mount it in the Cisco DNA Center?

Options:

A.

Configure router with NetFlow data

B.

Configure router with the telemetry data

C.

Configure router with routing to reach Cisco DNA Center

D.

Configure router with SNMPv2c or SNMPv3 traps

Buy Now
Questions 65

Refer to the exhibit.

300-410 Question 65

A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer fails. Which action resolves this issue?

Options:

A.

The SSH service must be enabled with the crypto key generate rsa command.

B.

The SCP service must be enabled with the ip scp server enable command.

C.

The Python interpreter must first be enabled with the guestshell enable command.

D.

The SSH access must be allowed on the VTY lines using the transport input ssh command.

Buy Now
Questions 66

Refer to the exhibit.

300-410 Question 66

R1 is being monitored using SNMP and monitoring devices are getting only partial information. What action should be taken to resolve this issue?

Options:

A.

Modify the CoPP policy to increase the configured exceeded limit for SNMP.

B.

Modify the access list to include snmptrap.

C.

Modify the CoPP policy to increase the configured CIR limit for SNMP.

D.

Modify the access list to add a second line to allow udp any any eq snmp

Buy Now
Questions 67

Which Ipv6 first-hop security feature helps to minimize denial of service attacks?

Options:

A.

IPv6 Router Advertisement Guard

B.

IPv6 Destination Guard

C.

DHCPv6 Guard

D.

IPv6 MAC address filtering

Buy Now
Questions 68

Refer to Exhibit.

300-410 Question 68

Traffic from the branch network should route through HQ R1 unless the path is unavailable. An engineer tests this functionality by shutting down interface on the BRANCH router toward HQ_R1 router but 192.168.20.0/24 is no longer reachable from the branch router. Which set of configurations resolves the issue?

Options:

A.

HQ_R1(config)# ip sla responderHQ_R1(config)# ip sla responder icmp-echo 172.16.35.2

B.

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.1

C.

HQ_R2(config)# ip sla responderHQ_R2(config)# ip sla responder icmp-echo 172.16.35.5

D.

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.2

Buy Now
Questions 69

300-410 Question 69

Refer to the exhibit. A network administrator configured an IPv6 access list to allow TCP return traffic only, but it is not working as expected. Which changes resolve this issue?

Options:

A.

ipv6 access-list inboundpermit tcp any any syndeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound out

B.

ipv6 access-list inboundpermit tcp any any syndeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound in

C.

ipv6 access-list inboundpermit tcp any any establisheddeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound in

D.

ipv6 access-list inboundpermit tcp any any establisheddeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound out

Buy Now
Questions 70

Drag and drop the MPLS VPN device types from the left onto the definitions on the right.

300-410 Question 70

Options:

Buy Now
Questions 71

Refer to the exhibit.

300-410 Question 71

An IT staff member comes into the office during normal office hours and cannot access devices through SSH Which action should be taken to resolve this issue?

Options:

A.

Modify the access list to use the correct IP address.

B.

Configure the correct time range.

C.

Modify the access list to correct the subnet mask

D.

Configure the access list in the outbound direction.

Buy Now
Questions 72

Refer to the exhibit.

300-410 Question 72

To provide reachability to network 10.1.1.0 /24 from R5, the network administrator redistributes EIGRP into OSPF on R3 but notices that R4 is now taking a ........... path through R5 to reach 10.1.1.0/24 network. Which action fixes the issue while keeping the reachability from R5 to 10.1.1.0/24 network?

Options:

A.

Change the administrative distance of the external EIGRP to 90.

B.

Apply the outbound distribution list on R5 toward R4 in OSPF.

C.

Change the administrative distance of OSPF to 200 on R5.

D.

Redistribute OSPF into EIGRP on R4

Buy Now
Questions 73

When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on

that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

Options:

A.

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction

B.

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

C.

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction

D.

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction

Buy Now
Questions 74

What are two functions of MPLS Layer 3 VPNs? (Choose two.)

Options:

A.

LDP and BGP can be used for Pseudowire signaling.

B.

It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.

C.

BGP is used for signaling customer VPNv4 routes between PE nodes.

D.

A packet with node segment ID is forwarded along with shortest path to destination.

E.

Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

Buy Now
Questions 75

Refer the exhibit.

300-410 Question 75

Which action resolves intermittent connectivity observed with the SNMP trap

packets?

Options:

A.

Decrease the committed burst Size of the mgmt class map

B.

Increase the CIR of the mgmt class map

C.

Add a new class map to match TCP traffic

D.

Add one new entry in the ACL 120 to permit the UDP port 161

Buy Now
Questions 76

300-410 Question 76

Refer to the exhibit. The engineer configured and connected Router2 to Router1. The link came up but could not establish a Telnet connection to Router1 IPv6 address of 2001:DB8::1. Which configuration allows Router2 to establish a Telnet connection to Router1?

Options:

A.

jpv6 unicast-routing

B.

permit ICMPv6 on access list INGRESS for Router2 to obtain IPv6 address

C.

permit ip any any on access list EGRESS2 on Router1

D.

IPv6 address on GigabitEthernet0/0

Buy Now
Questions 77

In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.)

Options:

A.

by IPv6 routing protocols to securely build neighborships without the need of authentication

B.

by the recovery mechanism to recover the binding table in the event of a device reboot

C.

by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways

D.

by various IPv6 guard features to validate the data link layer address

E.

by storing hashed keys for IPsec tunnels for the built-in IPsec features

Buy Now
Questions 78

Refer to the exhibit.

300-410 Question 78

A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands Which action resolves the issue?

Options:

A.

Configure TACACS+ synchronization with the Active Directory admin group

B.

Configure the username from a local database

C.

Configure full access for the username from TACACS+ server

D.

Configure an authorized IP address for this user to access this router

Buy Now
Questions 79

What does IPv6 Source Guard utilize to determine if IPv6 source addresses should be forwarded?

Options:

A.

ACE

B.

ACLS

C.

DHCP

D.

Binding Table

Buy Now
Questions 80

Refer to the exhibit.

300-410 Question 80

BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1. Users report packet loss and interruption of service to applications hosted onthe 10.1.1.0724 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command. Which action stabilizes the service?

Options:

A.

Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.

B.

Repeat the test from R4 using ICMP ping on the local 10.1.1.0/24 prefix, and fix any Layer 2 errors on the host or switch side of the subnet.

C.

Place an OSPF distribute-list outbound on R3 to block the 10.1.10/24 prefix from being advertised back to R3.

D.

Reduce frequent OSPF SPF calculations on R3 that cause a high CPU and packet loss on traffic traversing R3.

Buy Now
Questions 81

Refer to the exhibit.

300-410 Question 81

Which action resolves the failed authentication attempt to the router?

Options:

A.

Configure aaa authorization login command on line vty 0 4

B.

Configure aaa authorization login command on line console 0

C.

Configure aaa authorization console global command

D.

Configure aaa authorization console command on line vty 0 4

Buy Now
Questions 82

Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.

300-410 Question 82

Options:

Buy Now
Questions 83

Which protocol does MPLS use to support traffic engineering?

Options:

A.

Tag Distribution Protocol (TDP)

B.

Resource Reservation Protocol (RSVP)

C.

Border Gateway Protocol (BGP)

D.

Label Distribution Protocol (LDP)

Buy Now
Questions 84

Which protocol is used to determine the NBMA address on the other end of a tunnel when mGRE is used?

Options:

A.

NHRP

B.

IPsec

C.

MP-BGP

D.

OSPF

Buy Now
Questions 85

Refer to the exhibit.

300-410 Question 85

A network administrator reviews the branch router console log to troubleshoot the OSPF adjacency issue with the DR router. Which action resolves this issue?

Options:

A.

Advertise the branch WAN interface matching subnet for the DR site.

B.

Configure matching hello and dead intervals between sites.

C.

Configure the WAN interface for DR site in the related OSPF area.

D.

Stabilize the DR site flapping link to establish OSPF adjacency.

Buy Now
Questions 86

A DMVPN single hub topology is using IPsec + mGRE with OSPF. What should be configured on the hub to ensure it will be the designated router?

Options:

A.

tunnel interface of the hub with ip nhrp ospf dr

B.

OSPF priority to 0

C.

route map to set the metrics of learned routes to 110

D.

OSPF priority greater than 1

Buy Now
Questions 87

How are MPLS Layer 3 VPN services deployed?

Options:

A.

The RD and RT values must match under the VRR

B.

The RD and RT values under a VRF must match on the remote PE router

C.

The import and export RT values under a VRF must always be the same.

D.

The label switch path must be available between the local and remote PE routers.

Buy Now
Questions 88

An engineer configured Reverse Path Forwarding on an interface and noticed that the routes are dropped when a route lookup fails on that interface for a prefix that is available in the routing table Which interface configuration resolves the issue?

Options:

A.

ip verify unicast source reachable-via rx

B.

ip verify unicast source reachable-via any

C.

ip verify unicast source reachable-via allow-default

D.

ip verify unicast source reachable-via 12-src

Buy Now
Questions 89

Which two components are needed for a service provider to utilize the LVPN MPLS application? (Choose two.)

Options:

A.

The P routers must be configured for MP-iBGP toward the PE routers

B.

The P routers must be configured with RSVP.

C.

The PE routers must be configured for MP-iBGP with other PE routers

D.

The PE routers must be configured for MP-eBGP to connect to CEs

E.

The P and PE routers must be configured with LDP or RSVP

Buy Now
Questions 90

When determining if a system is capable of support, what is the minimum time spacing required for a BFD control packet to receive once a control packet is arrived?

Options:

A.

Desired Min TX Interval

B.

Detect Mult

C.

Required Min RX Interval

D.

Required Min Echo RX Interval

Buy Now
Questions 91

Refer to Exhibit.

300-410 Question 91

The network administrator configured the branch router for IPv6 on the E0/0 interface. The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on the branch router to bring the IPv6 neighbors up?

Options:

A.

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

B.

Disable IPv6 on the E0/0 interface using the no ipv6 enable command

C.

Enable the IPv4 address family under the E0/0 interface by using the address-family ipv4 unicast command

D.

Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E0/0 interface

Buy Now
Questions 92

Exhibit:

300-410 Question 92

Bangkok is using ECMP to reach to the 192.168.5.0/24 network. The administrator must configure Bangkok in such a way that Telnet traffic from 192.168.3.0/24 and192.168.4.0/24 networks uses the HongKong router as the preferred router. Which set of configurations accomplishes this task?

Options:

A.

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2interface Ethernet0/3ip policy route-map PBR1

B.

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2interface Ethernet0/1ip policy route-map PBR1

C.

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2!interface Ethernet0/3ip policy route-map PBR1

D.

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2!interface Ethernet0/1ip policy route-map PBR1

Buy Now
Questions 93

Which two protocols work in the control plane of P routers across the MPLS cloud? (choose two)

Options:

A.

LSP

B.

RSVP

C.

ECMP

D.

LDP

E.

MPLS OAM

Buy Now
Questions 94

Refer to the exhibit.

300-410 Question 94

Which interface configuration must be configured on the HUB router to enable MVPN with mGRE mode?

300-410 Question 94

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 95

300-410 Question 95

300-410 Question 95

Refer to the exhibit. R2 has two paths to reach 192.168.13.0/24. but traffic is sent only through R3. Which action allows traffic to use both paths?

Options:

A.

Configure the bandwidth 2000 command under interface FastEthernet0/0 on R2.

B.

Configure the variance 4 command under the EIGRP process on R2.

C.

Configure the delay 1 command under interface FastEthernet0/0 on R2.

D.

Configure the variance 2 command under the EIGRP process on R2

Buy Now
Questions 96

Refer to the exhibit.

300-410 Question 96

A user cannot SSH to the router. What action must be taken to resolve this issue?

Options:

A.

Configure transport input ssh

B.

Configure transport output ssh

C.

Configure ip ssh version 2

D.

Configure ip ssh source-interface loopback0

Buy Now
Questions 97

What are two MPLS label characteristics? (Choose two.)

Options:

A.

The label edge router swaps labels on the received packets.

B.

Labels are imposed in packets after the Layer 3 header.

C.

LDP uses TCP for reliable delivery of information.

D.

An MPLS label is a short identifier that identifies a forwarding equivalence class.

E.

A maximum of two labels can be imposed on an MPLS packet.

Buy Now
Questions 98

Which configuration adds an IPv4 interface to an OSPFv3 process in OSPFv3 address family configuration?

Options:

A.

Router ospf3 1 address-family ipv4

B.

Router(config-router)#ospfv3 1 ipv4 area 0

C.

Router(config-if)#ospfv3 1 ipv4 area 0

D.

Router ospfv3 1 address-family ipv4 unicast

Buy Now
Questions 99

Which statement about IPv6 RA Guard is true?

Options:

A.

It does not offer protection in environments where IPv6 traffic is tunneled.

B.

It cannot be configured on a switch port interface in the ingress direction.

C.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

D.

It is not supported in hardware when TCAM is programmed.

Buy Now
Questions 100

300-410 Question 100

Refer to the exhibit. The DHCP client is unable to receive an IP address from the DHCP server RouterB is configured as follows:

Interface fastethernet 0/0

description Client DHCP ID 394482431

Ip address 172 31 11 255 255.255 0

!

ip route 172.16.1.0 255 255 255.0 10.1.1.2

Which command is required on the fastethernet 0/0 interface of RouterB to resolve this issue?

Options:

A.

RouterB(config-if)#lp helper-address 172.31.1.1

B.

RouterBiconfig-ififclp helper-address 255.255 255 255

C.

RouterB(config-if)#lp helper-address 172.16.1.1

D.

RouterB(config-if)#lp helper-address 172.16.1.2

Buy Now
Questions 101

300-410 Question 101

Refer to the exhibit. A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source The configuration did not work as desired Which service must be enabled to resolve the issue?

Options:

A.

Enter the service timestamps log datetime localtime global command.

B.

Enter the service timestamps log datetime synchronize global command.

C.

Enter the service timestamps log datetime console global command.

D.

Enter the service timestamps log datetime clock-period global command

Buy Now
Questions 102

Refer to the exhibits.

300-410 Question 102

A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router. Which set of configurations fixes the issue?

A)

300-410 Question 102

B)

300-410 Question 102

C)

300-410 Question 102

D)

300-410 Question 102

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 103

Refer to the exhibit.

300-410 Question 103

SanFrancisco and Boston routers are choosing slower links to reach each other despite the direct links being up Which configuration fixes the issue?

300-410 Question 103

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 104

Refer to the exhibit.

300-410 Question 104

A network administrator is discovering a Cisco Catalyst 9300 and a Cisco WLC 3504 in Cisco DNA Center. The Catalyst 9300 is added successfully However the WLC is showing [ error " uncontactable " when the administrator tries to add it in Cisco DNA Center. Which action discovers WLC in Cisco DNA Center successfully?

Options:

A.

Copy the .cert file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

B.

Delete the WLC 3504 from Cisco DNA Center and add it to Cisco DNA Center again.

C.

Add the WLC 3504 under the hierarchy of the Catalyst 9300 connected devices.

D.

Copy the .pern file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

Buy Now
Questions 105

How does an MPLS Layer 3 VPN function?

Options:

A.

set of sites use multiprotocol BGP at the customer site for aggregation

B.

multiple customer sites interconnect through service provider network to create secure tunnels between customer edge devices

C.

set of sites interconnect privately over the Internet for security

D.

multiple customer sites interconnect through a service provider network using customer edge to provider edge connectivity

Buy Now
Questions 106

Which feature drops packets if the source address is not found in the snooping table?

Options:

A.

IPv6 Source Guard

B.

IPv6 Destination Guard

C.

IPv6 Prefix Guard

D.

Binding Table Recovery

Buy Now
Questions 107

Refer to the exhibit.

300-410 Question 107

The neighbor relationship is not coming up Which two configurations bring the adjacency up? (Choose two)

Options:

A.

NYrouter ospf 1area 0 authentication message-digest

B.

LAinterface E 0/0ip ospf message-digest-key 1 md5 Cisco123

C.

NYinterface E 0/0no ip ospf message-digest-key 1 md5 Cisco123ip ospf authentication-key Cisco123

D.

LAinterface E 0/0ip ospf authentication-key Cisco123

E.

LArouter ospf 1area 0 authentication message-digest

Buy Now
Questions 108

What are two characteristics of VRF instance? (Choose two.)

Options:

A.

All VRFs share customers routing and CEF tables .

B.

An interface must be associated to one VRF.

C.

Each VRF has a different set of routing and CEF tables

D.

It is defined by the VPN membership of a customer site attached to a P device.

E.

A customer site can be associated to different VRFs

Buy Now
Questions 109

300-410 Question 109

Refer to the exhibit. The administrator configured route advertisement to a remote low resources router to use only the default route to reach any network but failed. Which action resolves this issue?

Options:

A.

Change the direction of the distribute-list command from out to in.

B.

Remove the line with the sequence number 5 from the prefix list.

C.

Remove the prefix keyword from the distribute-list command.

D.

Remove the line with the sequence number 10 from the prefix list.

Buy Now
Questions 110

An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted. Which action resolves the issue?

Options:

A.

Configure all devices for SNMPv3 informs with priv.

B.

Configure all devices for SNMPv3 informs with auth.

C.

Configure all devices for SNMPv3 traps with auth.

D.

Configure all devices for SNMPv3 traps with priv.

Buy Now
Questions 111

Refer to the exhibit.

300-410 Question 111

A network administrator configured an IPv6 access list to allow TCP return frame only, but it is not working as expected. Which changes resolve this issue?

300-410 Question 111

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 112

Refer to Exhibit.

300-410 Question 112

Which two configurations allow clients to get dynamic ip addresses assigned?

Options:

A.

Configure access-list 100 permit udp any any eq 61 as the first line

B.

Configure access-list 100 permit udp any any eq 86 as the first line

C.

Configure access-list 100 permit udp any any eq 68 as the first line

D.

Configure access-list 100 permit udp any any eq 69 as the first line

E.

Configure access-list 100 permit udp any any eq 67 as the first line

Buy Now
Questions 113

What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)

Options:

A.

The VPNv4 address is used to advertise the MPLS VPN label.

B.

RD is prepended to the IPv4 route to make it unique.

C.

MP-BGP is used to allow overlapping IPv4 addresses between customers to advertisethrough the network.

D.

The IPv4 address is needed to tag the MPLS label.

E.

The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4prefix.

Buy Now
Questions 114

Exhibit:

300-410 Question 114

Which action resolves the authentication problem?

Options:

A.

Configure the user name on the TACACS+ server

B.

Configure the UDP port 1812 to be allowed on the TACACS+ server

C.

Configure the TCP port 49 to be reachable by the router

D.

Configure the same password between the TACACS+ server and router.

Buy Now
Questions 115

Refer to the exhibit.

300-410 Question 115

An engineer receives this error message when trying to access another router in-band from the serial interface connected to the console of R1. Which configuration is needed on R1 to resolve this issue?

300-410 Question 115

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 116

Refer to the exhibit.

300-410 Question 116

300-410 Question 116

An engineer configured BGP between routers R1 and R3 The BOP peers cannot establish neighbor adjacency to be able to exchange routes. Which configuration resolves this issue?

Options:

A.

R3router bgp 6502address-family ipv6neighbor AB01:2011:7:100::1 activate

B.

R1router bgp 6501address-family ipv6neighbor AB01:2011:7:100;:3 activate

C.

R3router bgp 6502neighbor AB01:2011:7:100::1 ebgp-muttlhop 255

D.

R1router bgp 6501 neighborAB01:2011:7:100::3ebgp-multihop255

Buy Now
Questions 117

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

Options:

A.

Packets are not forwarded to the specific next hop.

B.

Packets are forwarded based on the routing table.

C.

Packets are forwarded based on a static route.

D.

Packets are forwarded to the specific next hop.

Buy Now
Questions 118

300-410 Question 118

Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).

router bgp 64511

network 172.16.20.0 mask 255.255.255.0

network 172.16.21.0 mask 255.255.255.0

network 172.16.22.0 mask 255.255.255.0

network 172.16.23.0 mask 255.255.255.0

aggregate-address 172.16.20.0 255.255.252.0

After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?

Options:

A.

router bgp 64511aggregate-address 172.16.20.0 255.255.252.0 summary-only

B.

router bgp 64511neighbor 192.168.100.1 summary-onlyneighbor 192.168.200.2 summary-only

C.

interface E 0/0ip bgp suppress-map BLOCK_SPECIFIC!interface E 0/1ip bgp suppress-map BLOCK_SPECIFIC!ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC

D.

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC!router bgp 64511aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

Buy Now
Questions 119

Refer to the exhibit.

300-410 Question 119

The network administrator configured redistribution on an ASBR to reach to all WAN networks but failed Which action resolves the issue?

Options:

A.

The route map must have the keyword prefix-list to evaluate the prefix list entries

B.

The OSPF process must have a metric when redistributing prefixes from EIGRP.

C.

The route map EIGRP- > OSPF must have the 10.0.106.0/24 entry to exist in one of the three prefix lists to pass

D.

EIGRP must redistribute the 10.0.106.0/24 route instead of using the network statement

Buy Now
Questions 120

300-410 Question 120

Refer to the exhibit. The network administrator configured the branch router for IPv6 on the E 0/0 interface The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on the branch router to bring the IPv6 neighbors up?

Options:

A.

Enable the IPv4 address family under the E 0/0 interface by using the address-family Ipv4 unicast command

B.

Disable IPv6 on the E 0/0 interface using the no ipv6 enable command

C.

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

D.

Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E 0/0 interface.

Buy Now
Questions 121

An engineer configured access list NON-CISCO in a policy to influence routes

300-410 Question 121

What are the two effects of this route map configuration? (Choose two.)

Options:

A.

Packets are not evaluated by sequence 10.

B.

Packets are evaluated by sequence 10.

C.

Packets are forwarded to the default gateway.

D.

Packets are forwarded using normal route lookup.

E.

Packets are dropped by the access list.

Buy Now
Questions 122

Refer to the exhibit.

300-410 Question 122

A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?

Options:

A.

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

B.

Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

C.

Set a tag in the route map when redistributing EIGRP into OSPF on R1, and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

D.

Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

Buy Now
Questions 123

300-410 Question 123

An engineer sets up a DMVPN connection to connect branch 1 and branch 2 to HQ branch 1 and branch 2 cannot communicate with each other. Which change must be made to resolve this issue?

300-410 Question 123

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 124

Refer to Exhibit.

A network administrator has successfully configured DMVPN topology between a hub and two spoke routers. Which two configuration commands should establish direct communications between spoke 1 and spoke 2 without going through the hub? (Choose two).

300-410 Question 124

Options:

A.

At the hub router, configure the ip nhrp shortcut command.

B.

At the spoke routers, configure the ip nhrp spoke-tunnel command.

C.

At the hub router, configure ip nhrp redirect the command

D.

At the spoke routers, configure the ip nhrp shortcut command.

E.

At the hub router, configure tne Ip nhrp spoke-tunnel command

Buy Now
Questions 125

Which statement about IPv6 ND inspection is true?

Options:

A.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

B.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

C.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

D.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Buy Now
Questions 126

What is a prerequisite for configuring BFD?

Options:

A.

Jumbo frame support must be configured on the router that is using BFD.

B.

All routers in the path between two BFD endpoints must have BFD enabled.

C.

Cisco Express Forwarding must be enabled on all participating BFD endpoints.

D.

To use BFD with BGP, the timers 3 9 command must first be configured in the BGP routing process.

Buy Now
Questions 127

Which two statements about VRF-Lite configurations are true? (Choose two.)

Options:

A.

They support the exchange of MPLS labels

B.

Different customers can have overlapping IP addresses on different VPNs

C.

They support a maximum of 512.000 routes

D.

Each customer has its own dedicated TCAM resources

E.

Each customer has its own private routing table.

F.

They support IS-IS

Buy Now
Questions 128

Which SNMP verification command shows the encryption and authentication protocols that are used in

SNMPV3?

Options:

A.

show snmp group

B.

show snmp user

C.

show snmp

D.

show snmp view

Buy Now
Questions 129

Refer to the exhibit.

300-410 Question 129

An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead

of current best path. Which action resolves the issue?

Options:

A.

Configure AS_PATH prepend for the current best path

B.

Configure higher MED to select as the best path

C.

Configure AS_PATH prepend for the desired best path

D.

Configure lower LOCAL_PREF to select as the best path

Buy Now
Questions 130

Refer to the exhibit.

300-410 Question 130

A network engineer must establish communication between three different customer sites with these requirements:

Site-A: must be restricted to access to any users at Site-B or Site-C.

Site-B and Site-C must be able to communicate between sites and share routes using OSPF.

300-410 Question 130

Which configuration meets the requirements?

300-410 Question 130

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 131

Drag and drop the descriptions from the left onto the IPv6 first hop security features on the right. Not all options are used.

300-410 Question 131

Options:

Buy Now
Questions 132

300-410 Question 132

Refer to the exhibit. An engineer is troubleshooting suboptimal communication from the 192.168.5.32/28 subnet to the 172.16.3.16/28 segment using the slowest links. Which configuration resolves the suboptimal routing issue?

Options:

A.

R1(config-router)#router elgrp 100

R1(config-router)#redistribute ospf 1 metric 1000000 1111

B.

R2{config-router)#router ospf 1

R2{config-roiiter)#default-metric 1

R1(config-router)#router ospf 1

R1(config-router)#default-metric 10

C.

R2(config-router)#ro liter eigrp 100

R2(config-router)#redistribute ospf 1 metric 1000000 1111

D.

R2(config-router)#ro uter ospf 1

R2(config-router)#default-metric 10

R1(config-router)#router ospf 1

R1(config-router)#default-metric 1

Buy Now
Questions 133

300-410 Question 133

300-410 Question 133

Refer to the exhibit. An administrator must harden a router, but the administrator failed to test the SSH access successfully to the router. Which action resolves the issue?

Options:

A.

Configure SSH on the remote device to log m using SSH

B.

SSH syntax must be ssh -I user ip to log in to the remote device

C.

Configure enable secret to log in to the device

D.

SSH must be allowed with the transport output ssh command

Buy Now
Questions 134

300-410 Question 134

Refer to the exhibit. An engineer must configure a per VRF for TACACS+ for company A. Which configuration on RTG-1 accomplishes the task?

300-410 Question 134

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 135

Refer to the exhibit.

300-410 Question 135

A network administrator successfully logs in to a switch using SSH from a (RADIUS server When the network administrator uses a console port to access the switch the RADIUS server returns shell:priv-lvl=15’’ and the switch asks to enter the enable command \ the command is entered, it gets rejected. Which command set is used to troubleshoot and reserve this issue?

Options:

A.

line con 0aaa authorization consoleauthorization exec!line vty 0 4transport input ssh

B.

line con 0aaa authorization console!line vty 0 4authorization exec

C.

line con 0aaa authorization console priv15!line vty 0 4authorization exec

D.

line con 0aaa authorization consoleauthorization priv15!line vty 0 4transport input ssh

Buy Now
Questions 136

What is a function of an end device configured with DHCPv6 guard?

Options:

A.

If it is configured as a server, only prefix assignments are permitted.

B.

If it is configured as a relay agent, only prefix assignments are permitted.

C.

If it is configured as a client, messages are switched regardless of the assigned role.

D.

If it is configured as a client, only DHCP requests are permitted.

Buy Now
Questions 137

300-410 Question 137

Refer to the exhibit After a misconfiguration by a junior engineer, the console access to router A is not working Which configuration allows access to router A?

A)

300-410 Question 137

B)

300-410 Question 137

C)

300-410 Question 137

D)

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 138

Refer to the exhibit.

300-410 Question 138

Which action makes 10.1.3.2 the feasible successor to reach 10. 200. 1 0/24 for location S42T447E33F95?

Options:

A.

Increase path bandwidth lower than 1011 2 and lower than 1012 2 between RtrA and the destination

B.

Increase path bandwidth higher than 10.1 2 2 and lower than 101.1.2 between RtrA and the destination.

C.

Increase path bandwidth higher than 1011 2 and lower than 1012 2 between RtrA and the destination

D.

Increase path bandwidth higher than 10.1 2 2 and higher than 10.1.1.2 between RtrA and the destination

Buy Now
Questions 139

An engineer creates a default static route on a router with a hop of 10.1.1.1. On inspection, the engineer finds the router has two VRFs, Red and Blue. The next hop is valid for both VRFs and exists in each assigned VRF. Which configuration achieves connectivity?

A)

300-410 Question 139

B)

300-410 Question 139

C)

300-410 Question 139

D)

300-410 Question 139

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 140

Which feature is required for IPv6 Source Guard to block traffic arriving on the server interface from unknown sources?

Options:

A.

Dynamic ARP Inspection

B.

IPv6 RA Guard

C.

IPv6 ND Inspection

D.

DHCPv6 Guard

Buy Now
Questions 141

300-410 Question 141

Refer to the exhibit. The 130.130.130.0/24 route shows in the R2 routing table but is getting filtering toward R3. Which action resolves the issue?

Options:

A.

Automatic route summarization must be enabled on R2.

B.

The incoming filter list for all interfaces must be set on R2.

C.

IGP synchronization must be disabled on R2.

D.

The outgoing filter list for all interfaces must be set on R2.

Buy Now
Questions 142

Refer to Exhibit.

300-410 Question 142

PC2 is directly connected to R1. A user at PC2 cannot Telnet to 2001:db8:a:b::10. The user can ping

2001:db8:a:b::10 and receive DHCP-related information from the DHCP server. Which action resolves

the issue?

Options:

A.

Remove sequence 10 and put it back as sequence 25.

B.

Remove sequence 20 and put it back as sequence 45.

C.

Remove sequence 30 and put it back as sequence 5.

D.

Remove sequence 40 and put it back as sequence 15.

Buy Now
Questions 143

A newly installed spoke router is configured for DMVPN with the ip mtu 1400 command. Which configuration allows the spoke to use fragmentation with the maximum negotiated TCP MTU over GRE?

Options:

A.

ip tcp adjust-mss 1360crypto ipsec fragmentation after-encryption

B.

ip tcp adjust-mtu 1360crypto ipsec fragmentation after-encryption

C.

ip tcp adjust-mss 1360crypto ipsec fragmentation mtu-discovery

D.

ip tcp adjust-mtu 1360crypto ipsec fragmentation mtu-discovery

Buy Now
Questions 144

300-410 Question 144

Refer to the exhibit. A network engineer receives a report that Spoke 1 users can perform bank transactions with the server located at the Center site, but Spoke 2 users cannot. Which action resolves the issue?

Options:

A.

Configure the Spoke 2 users IP on the router B OSPF domain

B.

Configure encapsulation dot1q 78 on the router C interface.

C.

Configure IPv6 on the routers B and C interfaces

D.

Configure OSPFv2 on the routers B and C interfaces

Buy Now
Questions 145

What is the purpose of the DHCPv6 Guard?

Options:

A.

It messages between a DHCPv6 server and a DHCPv6 client ( or relay agent).

B.

It shows that clients of a DHCPv5 server are affected.

C.

It block DHCPv6 messages from relay agents to a DHCPv6 server.

D.

It allows DHCPv6 replay and advertisements from (rouge) DHCPv6 servers.

Buy Now
Questions 146

:590

300-410 Question 146

Refer to the exhibit The R2 OSPF route 10 2 2 0/24 shows in the R1 EIGRP routing table without route redistribution performed between OSPF and EIGRP routing protocols Which configuration is required on router R2 to resolve the issue?

Options:

A.

passive-interface FastEthernet 0/0 command in OSPF1.

B.

Add the no auto-summary command in EIGRP 100.

C.

Replace the network 10.0.0.0 command with FastEthernet0/0network in EIGRP 100.

D.

Addthe passive-interface FastEthernet 1/0 command in EIGRP 100

Buy Now
Questions 147

Refer to the exhibit.

300-410 Question 147

An engineer must configure PBR on R1 to reach to 10.2.2.0/24 via R3 AS64513 as the primary path and a backup route through default route via R2 AS64513. All BGP routes are in the routing table of R1. but a static default route overrides BGP routes. Which PBR configuration achieves the objective?

300-410 Question 147

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 148

A network administrator is troubleshooting a failed AAA login issue on a Cisco Catalyst c3560 switch. When the network administrator tries to log in with SSH using TACACS+ username and password credentials, the switch is no longer authenticating and is failing back to the local account. Which action resolves this issue?

Options:

A.

Configure ip tacacs source-interface GigabitEthernet 1/1

B.

Configure ip tacacs source-ip 192.168.100.55

C.

Configure ip tacacs-server source-ip 192.168.100.55

D.

Configure ip tacacs-server source-interface GigabitEthernet 1/1

Buy Now
Questions 149

Refer to the exhibit.

300-410 Question 149

300-410 Question 149

AS111 is receiving its own routes from AS200 causing a loop in the network. Which configuration provides loop prevention?

A)

300-410 Question 149

B)

300-410 Question 149

C)

300-410 Question 149

D)

300-410 Question 149

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 150

Which router attaches the VPN label to incoming packets from CE routing?

Options:

A.

CE router

B.

core router

C.

P router

D.

PE router

Buy Now
Questions 151

What are the two benefits of using BFD? (Choose two.)

Options:

A.

forwarding path failure detection

B.

supports all routing protocols

C.

synchronous path determination

D.

supports UDL failure

E.

subsecond failure detection

Buy Now
Questions 152

Refer to the exhibit.

300-410 Question 152

A network engineer applied a filter for LSA traffic on OSPFv3 interarea routes on the area 5 ABR to protect advertising the internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes. After the respective route filtering configuration is applied on the ABR, area 5 routes are not visible on any of the areas. How must the filter list be applied on the ABR to resolve this issue?

Options:

A.

in the “in” direction for area 5 on router R1

B.

in the “out” direction for area 5 on router R1

C.

in the “in” direction for area 20 on router R2

D.

in the “out” direction for area 20 on router R2

Buy Now
Questions 153

:589

Aswitchhas been configured to provide DHCP relay on VLAN 100 to a server with an IP address of 10.1.1.1. The DHCP server is sending syslog reports of multiple TFTP requests that also originate from the switch. As a result, the server CPU exceeded a configured threshold. Which action does the network administrator recommend to bring the server CPU threshold down?

Options:

A.

Configure the switch with an access list on VLAN100 to deny TFTP.

B.

Configure the switch with a VACL on VLAN100 to deny TFTP.

C.

Configure the switch with ip forward-protocol udp 67 globally.

D.

Configure the switch with no ip forward-protocol udp 69 on VLAN100.

Buy Now
Questions 154

Refer to the exhibit.

300-410 Question 154

An error message " an OSPF-4-FLOOD_WAR” is received on SW2 from SW1. SW2 is repeatedly receiving its own link-state advertisement and flushes it from the network. Which action resolves the issue?

Options:

A.

Change area 5 to a normal area from a nonstub area

B.

Resolve different subnet mask issue on the link

C.

Configure Layer 3 port channel on interfaces between switches

D.

Resolve duplicate IP address issue in the network

Buy Now
Questions 155

Refer to the exhibit.

300-410 Question 155

An engineer is troubleshooting failed access by contractors to the business application server via Telnet or HTTP during the weekend. Which configuration resolves the issue?

A)

300-410 Question 155

B)

300-410 Question 155

C)

300-410 Question 155

D)

300-410 Question 155

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Buy Now
Questions 156

Refer to the exhibit.

300-410 Question 156

An engineer configures two ASBRs 10 4 17.6 and 10 4 15 5 in an OSPF network to redistribute routes from EIGRP However, both ASBRs show the EIGRP routes as equal costs even though the next-hop router 10 4 17 6 is closer to R1 How should the network traffic to the EIGRP prefixes be sent via 10 4.17.6?

Options:

A.

The administrative distance should be raised to 120 from the ASBR 10.4.15 5.

B.

The redistributed prefixes should be advertised as Type 1

C.

The ASBR 10 4 17 6 should assign a tag to match and assign a lower metnc on R1

D.

The administrative distance should be raised to 120 from the ASBR 104.17.6

E.

The admitstrative distance should be raised to 120 from the ASBR 104 15.5.

F.

The redistributed prefixes should be advertised as Type 1.

G.

The ASBR 10 4 17 6 should assign a tag to match and assign a tower metnc on R1

Buy Now
Questions 157

300-410 Question 157

Refer to the exhibit. After reloading the router an administrator discovered that the interface utilization graphs displayed inconsistencies with their previous history in the NMS. Which action prevents this issue from occurring after another router reload in the future?

Options:

A.

Rediscover all the router interfaces through SNMP after the router is reloaded

B.

Save the router configuration to startup-config before reloading the router

C.

Configure SNMP to use static OlDs referring to individual router interfaces

D.

Configure SNMP interface index persistence on the router

Buy Now
Questions 158

Refer to the exhibit.

300-410 Question 158

An administrator is troubleshooting a time synchronization problem for the router time to another Cisco IOS XE-based device that has recently undergone hardening. Which action resolves the issue?

Options:

A.

Allow NTP in the ingress ACL on 10.1.225.40 by permitting UDP destined to port 123.

B.

Ensure that he CPE router has a valid route to 10.1.255. 40 for NTP and rectify if not reachable.

C.

NTP service is disabled and must be enabled on 10.1.225.40.

D.

Allow NTP in the ingress ACL on 10.1.255.40 by permitting TCP destined to port 123.

Buy Now
Questions 159

Refer to the exhibit.

300-410 Question 159

An engineer recently implemented uRPF by configuring the ip verify unicast source reachable-via rx command on interface gi0/3 The engineer noticed right after implementing F that an inbound packet on the giO-3 interface with a source address of 172 16 3 251 was dropped. Which action resolves the issue?

Options:

A.

Configure uRPF loose mode to forward the packet.

B.

Permit the 172.16.3.251 in the inbound ACL on interface gi0/3.

C.

Permit the 172.16.3.251 in the inbound ACL on interface gi0/3 to allow 172.16.3.251.

D.

Configure uRPF strict mode to forward the packet

Buy Now
Questions 160

Refer to the exhibit.

300-410 Question 160

R1 test its directly connected EIGRP peer 172.16.33.2 (SW1). Which configuration resolves the issue1?

Options:

A.

key chain EIGRP key 1 key-string Cisco!interface Gigabit Ethernet 2 IP authentication mode elgrp 88 md5 IP authentication key-chain elgrp 88 EIGRP

B.

key chain EIGRP key1 key-string Cisco!interface Gigabit Ethernet 2.10 IP authentication mode eigrp 88 md5 IP authentication key-chain eigrp 88 Cisco

C.

key chain EIGRP key 1 key-string Cisco !interface Gigabit Ethernet 2.10 IP authentication mode elgrp 88 md5 IP authentication key-chain eigrp 88 EIGRP

D.

key chain EIGRP key1 key-string Cisco !interface Gigabit Ethernet 2 IP authentication mode eigrp 88 md5 IP authentication key-chain elgrp 88 Cisco

Buy Now
Questions 161

Refer to the exhibit.

300-410 Question 161

An engineer cannot copy the IOS.bin file from the FTP server to the switch.

Which action resolves the issue?

Options:

A.

Allow file permissions to download the file from the FTP server.

B.

Add the IOS.bin file, which does not exist on FTP server.

C.

Make memory space on the switch flash or USB drive to download the file.

D.

Use the copy flash:/ ftp://cisco@10.0.0.2/IOS.bin command.

Buy Now
Questions 162

Refer to the exhibit.

300-410 Question 162

Although summarization is configured for R1 to receive 10.0.0.0/8. more specific routes are received by R1. How should the 10.0.0.0/8 summary route be received from the neighbor, attached to R1 via Fast Ethernet0/0 interface?

Options:

A.

R1 should configure the ip summary-address eigrp < AS number > 10.0.0.0.255.0.0.0 command under the Fast Ethernet 0/0 interface.

B.

The summarization condition is not met Router 10 1 100.10 requires a route for 10 0.0.0/8 that points to null 0

C.

The summarization condition is not met. The network 10.1.100.0/24 should be changed to 172.16.0.0/24.

D.

R1 should configure the ip summary-address eigrp < AS number > 10.0.0.0 0.0.0.255 command under the Fast Ethernet 0/0 interface.

Buy Now
Questions 163

Refer to the exhibit.

300-410 Question 163

A network engineer is adding a new spoke router into an existing DMVPN Phase 3 tunnel with a hub router to provide secure communication between sites Which additional configuration must the engineer apply to enable the tunnel to come up?

Options:

A.

ip nhrp registration no-unique

B.

ip nhrp server-only non-caching

C.

ip nhrp responder tunnel

D.

ip nhrpnhs 172.23.5.1

Buy Now
Questions 164

The network administrator configured R1 for Control Plane Policing so that the inbound Telnet traffic is policed to 100 kbps. This policy must not apply to traffic coming in from 10.1.1.1/32 and 172.16.1.1/32. The administrator has configured this:

300-410 Question 164

The network administrator is not getting the desired results. Which set of configurations resolves this issue?

Options:

A.

control-planeno service-policy input PM-CoPP!interface Ethernet 0/0service-policy input PM-CoPP

B.

control-planeno service-policy input PM-CoPPservice-policy input PM-CoPP

C.

no access-list 101access-list 101 deny tcp host 10,1,1.1 any eq 23access-list 101 deny tcp host 172,16.1.1 any eq 23access-list 101 permit ip any any

D.

no access-list 101access-list 101 deny tcp host 10,1.1.1 any eq 23access-list 101 deny tcp host 172.16.1.1 any eq 23access-list 101 permit ip any any!interface E0/0service-policy input PM-CoPP

Buy Now
Questions 165

Which technique removes the outermost label of an MPLS-tagged packet before the packet is forwarded to an adjacent LER?

Options:

A.

label swap

B.

explicit-null

C.

label imposition

D.

PHP

Buy Now
Questions 166

IPv6 is enabled in the infrastructure to support customers with an IPv6 network over WAN and to connect the head office to branch offices in the local network. One of the customers is already running IPv6 and wants to enable IPv6 over the DMVPN network infrastructure between the headend and branch sites. Which configuration command must be applied to establish an mGRE IPv6 tunnel neighborship?

Options:

A.

tunnel protection mode ipv6

B.

ipv6 unicast-routing

C.

ipv6 nhrp holdtime 30

D.

tunnel mode gre multipoint ipv6

Buy Now
Questions 167

300-410 Question 167

Refer to the exhibit. The default route is not advertised to the neighboring router. Which action resolves the issue?

Options:

A.

Configure the redistribute static metric 200 subnets command under OSPF.

B.

Configure OSPF on the Dialer0 interface.

C.

Configure the network 0.0.0.0 255.255.255.255 area 0 command under OSPF.

D.

Configure the default-information originate command under OSPF.

Buy Now
Questions 168

300-410 Question 168

A network administrator is trying to access a branch router using TACACS+ username and password credentials, but the administrator cannot log in to the router because the WAN connectivity is down. The branch router has following AAA configuration:

300-410 Question 168

Which command will resolve this problem when WAN connectivity is down?

Options:

A.

aaa authentication login default group tacacs+ local

B.

aaa authentication login default group tacacs+ enable

C.

aaa authentication login default group tacacs+ console

D.

aaa authentication login console group tacacs+ enable

Buy Now
Questions 169

:588

300-410 Question 169

Refer to the exhibit. An engineer must filter prefixes that originate from AS65412. but it is not working correctty. Which configuration must the engineer apply to R1 to resolve the issue?

300-410 Question 169

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 170

What does the MP-BGP OPEN message contain?

Options:

A.

MPLS labels and the IP address of the router that receives the message

B.

the version number and the AS number to which the router belongs

C.

IP routing information and the AS number to which the router belongs

D.

NLRI, path attributes, and IP addresses of the sending and receiving routers

Buy Now
Questions 171

The network administrator configured the router for Control Plane Policing to limit OSPF traffic to be

policed to 1 Mbps. Any traffic that exceeds this limit must also be allowed at this point for traffic

analysis. The router configuration is:

access-list 100 permit ospf any any

!

class-map CM-OSPF

match access-group 100

!

policy-map PM-COPP

class CM-OSPF

police 1000000 conform-action transmit

!

control-plane

service-policy output PM-COPP

The Control Plane Policing failed to monitor and police OSPF traffic. Which configuration resolves this

issue?

300-410 Question 171

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 172

Refer to the exhibit.

300-410 Question 172

A bank ATM site has difficulty connecting with the bank server. A network engineer troubleshoots the issue and finds that R4 has no active route to the bank ATM site. Which action resolves the issue?

Options:

A.

Advertise 10.10.30.0/24 subnet in R1 EIGRP AS.

B.

EIGRP peering between R3 and R4 to be fixed.

C.

EIGRP peering between R1 and R2 to be fixed.

D.

Advertise 10.10.30.0/24 subnet in R3 EIGRP AS.

Buy Now
Questions 173

An engineer configured VRF-Lite on a router for VRF blue and VRF red. OSPF must be enabled on each VRF to peer to a directly connected router in each VRF. Which configuration forms OSPF neighbors over the network 10.10.10.0/28 for VRF blue and 192.168.0.0/30 for VRF red?

300-410 Question 173

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 174

Refer to the exhibit.

300-410 Question 174

A network administrator is trying to switch to the privileged EXEC level on R1 but failed. Which configuration resolves the issue?

Options:

A.

Enable password Cisco@123

B.

tacass server enable-password Cisco@123

C.

tacacs-server enable-password Cisco@123

D.

enable-password Cisco@123

Buy Now
Questions 175

Which Layer 3 VPN attribute allows different customers to connect to the same MPLS network wrth overlapping IP ranges?

Options:

A.

VRF

B.

RT

C.

MP-BGP

D.

RD

Buy Now
Questions 176

Refer to the exhibit.

300-410 Question 176

A network administrator must configure DMVPN tunnels between the hub and spoke with dynamic spoke-to-spoke tunnel capabilities using EIGRP. Which tunnel interface command must the network administrator configure to establish an EIGRP peer?

Options:

A.

no ip next-hop-self eigrp 1

B.

ip next-hop-self eigrp 1

C.

no Ip nhrp ntxt-hop-self

D.

ip nhrp next-hop-self

Buy Now
Questions 177

An engineer creates a Cisco DNA Center cluster with three nodes, but all the services are running on one host node. Which action resolves this issue?

Options:

A.

Restore the link on the switch interface that is connected to a cluster link on the Cisco DNA Center

B.

Click the master host node with all the services and select services to be moved to other hosts

C.

Enable service distribution from the Systems 360 page.

D.

Click system updates, and upgrade to the latest version of Cisco DNA Center.

Buy Now
Questions 178

300-410 Question 178

Refer to the exhibit An enterprise operations team must monitor all application server traffic in the data center The team finds that traffic coming from the hub site from R3 and R6 rs monitored successfully but traffic destined to the application server is not monitored Which action resolves the issue?

A)

300-410 Question 178

B)

300-410 Question 178

C)

300-410 Question 178

D)

300-410 Question 178

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 179

Refer to the exhibit.

300-410 Question 179

300-410 Question 179

An engineer is troubleshooting a failed Telnet session from PC to the DHCP server. Which action resolves the issue?

Options:

A.

Remove sequence 30 and add it back to the IPv6 traffic filter as sequence 5.

B.

Remove sequence 20 and add it back to the IPv6 traffic filter as sequence 5.

C.

Remove sequence 10 to add the PC source IP address and add it back as sequence 10.

D.

Remove sequence 20 for sequence 40 in the access list to allow Telnet.

Buy Now
Questions 180

Refer to the exhibit.

300-410 Question 180

The Internet traffic should always prefer Site-A ISP-1 if the link and BGP connection are up; otherwise, all Internet traffic should go to ISP-2 Redistribution is configured between BGP and OSPF routing protocols and it is not working as expected. What action resolves the issue?

Options:

A.

Set metric-type 2 at Site-A RTR1, and set metric-type 1 at Site-B RTR2

B.

Set OSPF cost 100 at Site-A RTR1, and set OSPF Cost 200 at Site-B RTR2

C.

Set OSPF cost 200 at Site: A RTR1 and set OSPF Cost 100 at Site-B RTR2

D.

Set metric-type 1 at Site-A RTR1, and set metric-type 2 at Site-B RTR2

Buy Now
Questions 181

Refer to the exhibit.

300-410 Question 181

A network administrator is troubleshooting IPv6 address assignment for a DHCP client that is not getting an IPv6 address from the server.

Which configuration retrieves the client IPv6 address from the DHCP server?

Options:

A.

ipv6 address autoconfig command on the interface

B.

ipv6 dhcp server automatic command on DHCP server

C.

ipv6 dhcp relay-agent command on the interface

D.

service dhcp command on DHCP server

Buy Now
Questions 182

300-410 Question 182

300-410 Question 182

Refer to the exhibit A customer reported a failure and intermittent disconnection between two office buildings site X and site Y The network team finds that site X and site Y are exchanging email application traffic with the data center network Which configuration resolves the issue between site X and site Y?

A)

300-410 Question 182

B)

300-410 Question 182

C)

300-410 Question 182

D)

300-410 Question 182

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 183

Which Layer 3 VPN attribute allows different customers to connect to the same MPLS network with overlapping IP ranges?

Options:

A.

MP-BGP

B.

VRF

C.

RT

D.

RD

Buy Now
Questions 184

300-410 Question 184

Refer to the exhibit. The users from subnet 172.16.1.16/28 are experiencing connectivity issues to subnet 172.16.2.32/48. Which configuration resolves the issue?

Options:

A.

R1(config)#route-map REDIST permit 10

R1(config-route-map) #match Ip address 15

R1 (config-route-map) #exit

R1(config)# access-list 15 permit 172.16.0.0 0.0.255.255

R1(config-router) #router eigrp 100

R1(config-router) #redistrlbute ospf 1 route-map REDIST

B.

R1(oonfig-router) #router ospf 1

R2(config-router) #redistribute eigrp 100 subnets metric 100C.

C.

R1(config-router > #routereigrp 100

R1(config-router > #redistribute ospf 1 metric 1000000 1111

D.

R1(config)#route-map REDIST permit 10

R1(config-roule-map) #match ip address 15

R1 (config-route-map) #exlt

R1(config)# access-list 15 permit 172.16.0.0 0.0.255.255

R1(config-router) #router ospf 1

R1(config-router) #redistrlbute elgrp 100 subnets route-map REDIST

Buy Now
Questions 185

300-410 Question 185

300-410 Question 185

Refer to the exhibit. Site1 must perform unequal cost load balancing toward the segments behind Site2 and Site3. Some of the routes are getting load balanced but others are not. Which configuration allows Site1 to load balance toward all the LAN segments of the remote routers?

300-410 Question 185

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 186

How are MPLS Layer 3 VPN services deployed?

Options:

A.

The RD and RT values must match under the VRF.

B.

The label switch path must be available between the local and remote PE routers.

C.

The import and export RT values under a VRF must always be the same.

D.

The RD and RT values under a VRF must match on the remote PE router.

Buy Now
Questions 187

What action is performed for untagged outgoing labels in an MPLS router?

Options:

A.

Convert the incoming MPLS packet to an untagged packet and then do a FIB lookup

B.

Convert the incoming MPLS packet to an untagged packet and then do a RIB lookup.

C.

Convert the untagged packet to a labeled packet and forward it to the next router

D.

Convert the incoming MPLS packet to an IP packet and forward it to the next router.

Buy Now
Questions 188

What must a network architect consider for RTs when planning for a single customer full-mesh VPN m an MPLS Layer 3 network?

Options:

A.

RT must be globally unique within the same VPN

B.

RT must be globally identical within the same VPN

C.

RT values must be Afferent from the RD values in the same VPN

D.

Each RT value must be identical to an RD value within the same VPN.

Buy Now
Questions 189

A network administrator is troubleshooting a high utilization issue on the route processor of a router that was reported by NMS The administrator logged into the router to check the control plane policing and observed that the BGP process is dropping a high number of routing packets and causing thousands of routes to recalculate frequently. Which solution resolves this issue?

Options:

A.

Police the cir for BGP, conform-action transmit, and exceed action transmit.

B.

Shape the pir for BGP, conform-action set-prec-transmit, and exceed action set-frde-transmit.

C.

Shape the cir for BGP. conform-action transmit, and exceed action transmit.

D.

Police the pir for BGP, conform-action set-prec-transmit, and exceed action set-clp-transmit.

Buy Now
Questions 190

A network engineer must configure a DMVPN network so that a spoke establishes a direct path to another spoke if the two must send traffic to each other. A spoke must send traffic directly to the hub if required Which configuration meets this requirement?

300-410 Question 190

300-410 Question 190

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Buy Now
Questions 191

Refer to the exhibit.

300-410 Question 191

An engineer noticed that the router log messages do not have any information about when the event occurred. Which action should the engineer take when enabling service time stamps to improve the logging functionality at a granular level?

Options:

A.

Replace OSPF process 10 on the interfaces with OSPF process 1 and configure an additional router IO with IPv6 address

B.

Replace OSPF process 10 on the interfaces with OSPF process 1. and remove process 10 from the global configuration

C.

Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv6 address and remove process 10 from the global configuration

D.

Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv4 address and remove process 10 from the global configuration

Buy Now
Questions 192

300-410 Question 192

Refer to the exhibit. A network engineer configured routers R1 and R2 with MP-BGP. The engineer noticed that the routers cannot exchange any IPv6 routes, however, the IPv4 neighbor relationship is working fine. Which configuration must the engineer apply to router R2 to exchange IPv6 routes?

Options:

A.

Ipv6cef I Interface Loopback100Ipv6 address 2001: DB8:128::2/128 Interface GigabitEthernet1/0Ipv6 address 2001:DB8:1::2/64 I router bgp 65002no bgp default ipv4-unlcastneighbor 2001: DB8:1::1 emote-as 65001Iaddress-family ipv6network 2001:DB8:128::2/128neighbor 2001:DB8:1::1 activate

B.

Ipv6 unicast-routingipv6 cefInterface Loopback100ipv6 address 2001: DB8:12C:2 129Iinterface GigabitEthernet1/0ipv6 address 2001: DB8:1::2 64description AS65001 ID B466:A83D:3D7::1!router bgp 65002no bgp default Ipv4-unicastneighbor 2001: DB8:1::1 remote-as 65001!address-family Ipv4neighbor 2001:DB8:1::1 activate

C.

Ipv6 unicast-routingipvG cefIInterface Loopback100Ipv6 address 2001:DB8:128::2/128 I interface GigabitEthernet1/0ipv6 address 2001:DB8:1::2/64!router bgp 65002 no bgp default ipv4-unicast neighbor 2001: DB8:1::1 remote-as 65001 !address-family ipv6 network 2001:DB8:128::2I128

D.

Ipv6 unicast-routing Ipv6 cef Iinterface Loopback100 ipv6 address 2001: DB8:128::2/128 !interface GigabitEthernet1/0 ipv6 address 2001:DB8:1::2/64 irouter bgp 65002 no bgp default ipv4-unicast neighbor 2001: DB8:1::1 remote-as 65001 !address-family ipv6 network 2001:DB8:128::2/128 neighbor 2001:DB8:1::1 activate

Buy Now
Exam Code: 300-410
Exam Name: Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI)
Last Update: Jun 4, 2026
Questions: 642

PDF + Testing Engine

$144.99

Testing Engine

$109.99

PDF (Q&A)

$94.99