Improve Your Knowledge with 300-410 Exam Dumps

Category:

Comments:

0 Comments

Post Date:

February 19, 2023

Practicing with 300-410 questions can help you identify areas where you need to improve your knowledge. By answering 300-410 questions and reviewing your responses, you can identify gaps in your understanding and focus your study efforts on those areas. The 300-410 exam has a strict time limit, and you need to manage your time effectively to answer all the questions. Practicing with Cisco 300-410 dumps questions can help you develop time management skills by simulating the exam's time constraints. You'll learn how to pace yourself, manage your time effectively, and ensure that you complete the 300-410 exam within the allotted time. Test Cisco 300-410 exam free dumps below.

Page 1 of 18

1. Refer to the exhibit.

In which circumstance does the BGP neighbor remain in the idle condition?

if prefixes are not received from the BGP peer

if prefixes reach the maximum limit

if a prefix list is applied on the inbound direction

if prefixes exceed the maximum limit

2. Refer to the exhibit.

The engineer configured route redistribution in the network but soon received reports that R2 cannot access 192 168 7 0/24 and 192 168 15 0/24 subnets.

Which configuration resolves the issue?

Option A

Option B

Option C

Option D

3. Refer to the exhibit.

A customer finds that traffic from the application server (192.168.1.1) to the HUB site passes through a congested path that causes random packet drops. The NOC team influences the BGP path with MED on RB. but RD still sees that traffic coming from RA is not taking an alternate route.

Which configuration resolves the issue?

A)

Option A

Option B

Option C

Option D

4. Refer to the exhibit.

Which two actions restrict access to router R1 by SSH? (Choose two.)

Configure transport input ssh on line vty and remove sequence 30 from access list 100.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.

Remove class-map ANY from service-policy CoPP

Configure transport output ssh on line vty and remove sequence 10 from access list 199.

Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199

5. Refer to the exhibit.

A network engineer receives a report that Spoke 1 users can perform bank transactions with the server located at the Center site, but Spoke 2 users cannot.

Which action resolves the issue?

Configure the Spoke 2 users IP on the router B OSPF domain

Configure encapsulation dot1q 78 on the router C interface.

Configure IPv6 on the routers B and C interfaces

Configure OSPFv2 on the routers B and C interfaces

6. An engineer notices that R1 does not hold enough log messages to Identity the root cause during troubleshooting.

Which command resolves this issue?

#logging buffered 4096 critical

(config)#logging buffered 16000 informational

#logging buffered 16000 critical

(config)#logging buffered 4096 informational

7. Which transport layer protocol is used to form LDP sessions?

UDP

SCTP

TCP

RDP

8. DRAG DROP

Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.

9. Refer to the exhibit.

Which two commands provide the administrator with the information needed to resolve the issue? (Choose two.)

snmp user

debug snmp engine-id

debug snmpv3 engine-id

debug snmp packet

showsnmpv3 user

10. What are two functions of IPv6 Source Guard? (Choose two.)

It uses the populated binding table for allowing legitimate traffic.

It works independent from IPv6 neighbor discovery.

It denies traffic from unknown sources or unallocated addresses.

It denies traffic by inspecting neighbor discovery packets for specific pattern.

It blocks certain traffic by inspecting DHCP packets for specific sources.

Page 2 of 18

11. Refer to the exhibit.

Which configuration command establishes an EIGRP neighbor adjacency between the hub and spoke?

connected 10.1.2.192 command on spoke router

network 10.1.2.192 command on spoke router

eigrp-peer 10.1.2.192 command on the hub router

neighbor 10.1.2.192 command on hub router

12. Refer to the exhibit.

A network administrator notices these console messages from host 10.11.110.12 originating from interface E1/0. The administrator considers this an unauthorized attempt to access SNMP on R1.

Which action prevents the attempts to reach R1 E1/0?

Configure IOS control plane protection using ACL 90 on interface E1/0

Configure IOS management plane protection using ACL 90 on interface E1/0

Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12

Add a permit statement including the host 10.11.110.12 into ACL 90

13. Network engineer must configure an ElGRP stub router at a site that advertises only connected and summary routes.

Which configuration performs this task?

A)

Option A

Option B

Option C

Option D

14. Refer to the exhibit.

The forwarding entries how that the next hop for prefixes from the 172.16.0.0/16 network is set to 10.2.2.2 instead of 10.1.1.1.

Which action resolves the issue?

Add set ip next hop 10.1.1.1 in route-map RED permit 20.

Add the continue statement in route-map RED permit 10 instead of continue 20.

Remove match ip address prefix-list 1 from route-map RED permit 10.

Remove the continue 20 statement from route-map RED permit 10

15. DRAG DROP

Drag and drop the LDP features from the left onto the descriptions on the right

16. DRAG DROP

Drag and drop the MPLS VPN device types from me left onto the definitions on the right.

17. Refer to the exhibit.

The SNMP server with IP address 172.16 4 4 cannot access host router A.

Which configuration command on router A resolves the issue?

snmp-server community ccnp

access-list 4 permit 172.16.4.0 0.0.0.3

access-list 4 permit host 172.16.4.4

snmp-server host 172.16.4.4 ccnp

18. A customer reports that traffic is not passing on an EIGRP enabled multipoint interface on a router configured as below:

interface Serial0/0

no ip address

interface Server0/0/0.9 multipoint

ip address 10.1.1.1 255.255.255.248

ip split-horizon eigrp 1

Which action resolves the issue?

Enable poison reverse

Enable split horizon

Disable poison reverse

Disable split horizon

19. Refer to the exhibit.

The Customer Edge rouler wants to use AS 100 as the preferred ISP for all external routes and ISP-2 as a backup.

After this configuration, all the backup routes have disappeared from the BGP table on the Customer Edge router.

Which set of configurations resolves the issue on the Customer Edge router?

A)

Option A

Option B

Option C

Option D

20. Which two statements about VRF-Lite configurations are true? (Choose two.)

They support the exchange of MPLS labels

Different customers can have overlapping IP addresses on different VPNs

They support a maximum of 512.000 routes

Each customer has its own dedicated TCAM resources

Each customer has its own private routing table.

They support IS-IS

Page 3 of 18

21. What is the function of BFD?

It provides uniform failure detection regardless of media type.

It creates high CPU utilization on hardware deployments.

It negotiates to the highest version if the neighbor version differs.

It provides uniform failure detection on the same media type.

22. Refer to the exhibit.

Which action makes 10.1.3.2 the feasible successor to reach 10. 200. 1 0/24 for location S42T447E33F95?

Increase path bandwidth lower than 1011 2 and lower than 1012 2 between RtrA and the destination

Increase path bandwidth higher than 10.1 2 2 and lower than 101.1.2 between RtrA and the destination.

Increase path bandwidth higher than 1011 2 and lower than 1012 2 between RtrA and the destination

Increase path bandwidth higher than 10.1 2 2 and higher than 10.1.1.2 between RtrA and the destination

23. Refer to the exhibit.

An engineer notices a connectivity problem between routers R1 and R2. The frequency of this problem is high during peak business hours.

Which action resolves the issue?

Increase the MTU on the interfaces that connect R1 and R2.

Increase the available bandwidth between R1 and R2.

Decrease the EIGRP keepallve and hold down timers on R1 and R2.

Set static EIGRP neighborship between R1 and R2.

24. Refer to the exhibit.

Troubleshoot and ensure that branch B only ever uses the MPLS B network to reach HQ.

Which action achieves this requirement?

Introduce an AS path filter on branch A routers so that only local prefixes are advertised into BGP

increase the local preference for all HQ prefixes received at branch B from the MPLS B network to be higher than the local preferences used on the MPLS A network

Introduce AS path prepending on the branch A MPLS B network connection so that any HQ advertisements from branch A toward the MPLS B network are prepended three times

Modify the weight of all HQ prefixes received at branch B from the MPLS B network to be higher than the weights used on the MPLS A network

25. A network administrator performed a Compact Flash Memory upgrade on a Cisco Catalyst 6509 Switch. Everything is functioning normally except SNMP, which was configured to monitor the bandwidth of key interfaces but the interface indexes are changed.

Which global configuration resolves the issue?

snmp-server ifindex permanent

snmp ifindex permanent

snmp-server ifindex persist

snmp ifindex persist

26. Refer to the exhibit.

An engineer is trying to block the route to 192.168.2.2 from the routing table by using the configuration that is shown. The route is still present in the routing table as an OSPF route.

Which action blocks the route?

Use an extended access list instead of a standard access list.

Change sequence 10 in the route-map command from permit to deny.

Use a prefix list instead of an access list in the route map.

Add this statement to the route map: route-map RM-OSPF-DL deny 20.

27. Refer to the exhibit.

The R1 OSPF neighbor is not receiving type 5 external LSAs for 132.108.2.0/24 and 132.108.3.0/24 networks.

Which configuration command resolves the issue?

access-list 1 permit 132.108.0.0 0.0.1.255

access-list 1 permit 132.108.0.0 0.0.3.255

access-list 1 permit 132.108.2.0 0.0.0.255

access-list 1 permit 132.108.4.0 0.0.3.255

28. Refer to the exhibit.

BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1. Users report packet loss and interruption of service to applications hosted on the 10.1.1.0724 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command.

Which action stabilizes the service?

Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.

Repeat the test from R4 using ICMP ping on the local 10.1.1.0/24 prefix, and fix any Layer 2 errors on the host or switch side of the subnet. ^

Place an OSPF distribute-list outbound on R3 to block the 10.1.10/24 prefix from being advertised back to R3.

Reduce frequent OSPF SPF calculations on R3 that cause a high CPU and packet loss on traffic traversing R3.

29. Refer to the exhibit.

An engineer configured R2 and R5 as route reflectors and noticed that not all routes are sent to R1 to advertise to the eBGP peers.

Which iBGP routers must be configured as route reflectors to advertise all routes to restore reachability across all networks?

R1 and R4

R1 and R5

R4 and R5

R2 and R5

30. Refer to the exhibit.

An engineer noticed that the router log messages do not have any information about when the event occurred.

Which action should the engineer take when enabling service time stamps to improve the logging functionality at a granular level?

Configure the debug uptime option

Configure the msec option

Configure the timezone option

Configure the tog uptime option

Page 4 of 18

31. Refer to the exhibit.

Which action adds the 10 1 7.6-32 route to the BGP table?

Add a static roue for the 10 1 7 &32 network

Add the network 10.1.7.6 mask 255.255.255.255 backdoor command

Add summaty-address10.1.7.6.255.255.2550

Add the network 10.1.7.6 mask 255.255.255.255 command

32. Refer to the exhibit.

The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host 192.168.10.10cannot SSH to host 192.168.100.10 even though the flow is permitted.

Which action resolves the issue without opening full access to this router?

Move the SSH entry to the beginning of the ACL

Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works

Temporarily remove the ACL from the interface to see if the flow works

Run the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it

33. Which statement about IPv6 RA Guard is true?

It does not offer protection in environments where IPv6 traffic is tunneled.

It cannot be configured on a switch port interface in the ingress direction.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

It is not supported in hardware when TCAM is programmed.

34. A network administrator is troubleshooting a high utilization issue on the route processor of a router that was reported by NMS The administrator logged into the router to check the control plane policing and observed that the BGP process is dropping a high number of routing packets and causing thousands of routes to recalculate frequently.

Which solution resolves this issue?

Police the cir for BGP, conform-action transmit, and exceed action transmit.

Shape the pir for BGP, conform-action set-prec-transmit, and exceed action set-frde-transmit.

Shape the cir for BG

conform-action transmit, and exceed action transmit.

Police the pir for BGP, conform-action set-prec-transmit, and exceed action set-clp-transmit.

35. Refer to the exhibit.

Which routes from OSPF process 5 are redistributed into EIGRP?

E1 and E2 subnets matching access list TO-OSPF

E1 and E2 subnets matching prefix list TO-OSPF

only E2 subnets matching access list TO-OSPF

only E1 subnets matching prefix listTO-OS1

36. A network administrator is troubleshooting a failed AAA login issue on a Cisco Catalyst c3560 switch. When the network administrator tries to log in with SSH using TACACS+ username and password credentials, the switch is no longer authenticating and is failing back to the local account.

Which action resolves this issue?

Configure ip tacacs source-interface GigabitEthernet 1/1

Configure ip tacacs source-ip 192.168.100.55

Configure ip tacacs-server source-ip 192.168.100.55

Configure ip tacacs-server source-interface GigabitEthernet 1/1

37. Refer to the exhibit.

An engineer configures router A to mark all inside to outside traffic from network 192 168 1 0, except from host 192 168 1 1. with critical IP precedence. The policy did not work as expected.

Which configuration resolves the issue?

A)

Option

38. What is the role of LDP in MPLS networks?

It enables label binding that exchanges route descriptors

It creates MPLS packet forwarding along with the IGP routes.

It disables label binding information to exchange with peer LSRs.

It enables label binding information to exchange with peer LSRs

39. Refer to the exhibit.

A customer reports that networks in the 10.0.1.0/24 space do not appear in the RIP database.

What action resolves the issue?

Remove summarization of 10.0.0.078.

Permit 10.0.1.0/24 address in the AC

Remove ACL on R1 blocking 10.0.1.0/24 network.

Configure 10.0.1.0/24 network under RI

40. How do devices operate in MPLS L3VPN topology?

P and associated PE routers with IGP populate the VRF table in different VPNs.

CE routers connect to the provider network and perform LSP functionality

P routers provide connectivity between PE devices with MPLS switching.

P routers support PE to PE VPN tunnel without LSP functionality

Page 5 of 18

41. Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

multi-paths eibgp 2

maximum-paths 2

Maximum-paths ibgp 2

multi-paths 2

42. Refer to the exhibit.

Users from the 192 168.2.0/24 network cannot connect to the 172.16 2 32/28 network.

Which configuration resolves the issue'?

A)

Option

43. DRAG DROP

Drag and drop the addresses from the left onto the correct IPv6 filter purposes on the right.

44. Which feature minimizes DoS attacks on an IPv6 network?

IPv6 Binding Security Table

IPv6 Router Advertisement Guard

IPv6 Prefix Guard

IPv6 Destination Guard

45. Refer to the exhibit.

Router R2 should be learning the route for 10.123.187.0/24 via EIGRP.

Which action resolves the issue without introducing more issues?

Use distribute-list to modify the route as an internal EIGRP route

Redistribute the route in EIGRP with metric, delay, and reliability

Use distribute-list to filter the external router in OSPF

Remove route redistribution in R2 for this route in OSPF

46. 16.0.0/16

The network administrator on R1 must improve convergence by blocking all subnets of 172-16.0.0/16 major network with a mask lower than 23 from coming in.

Which set of configurations accomplishes the task on R1?

ip prefix-list PL-1 deny 172.16.0.0/16 le 23 ip prefix-list PL-1 permit 0.0.0.0/0 le 32 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in

ip prefix-list PL-1 deny 172.16.0.0/16 ge 23 ip prefix-list PL-1 permit 0.0.0.0/0 le 32 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in

access-list 1 deny 172.16.0.0 0.0.254.255 access-list 1 permit any ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 distribute-list 1 in

ip prefix-list PL-1 deny 172.16.0.0/16 ip prefix-list PL-1 permit 0.0.0.0/0 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in

47. Refer to the exhibit.

The security department recently installed a monitoring device between routers R3 and R5, which a loss of network connectivity for users connected to R5. Troubleshooting revealed that the monitoring device cannot forward multicast packets. The team already updated R5 with the correct configuration.

Which configuration must be implemented on R3 to resolve the problem by ensuring R3 as the DR for the R3-R5 segment?

interface fastethernet0/0 ip address 10.99.53.1 255.255.255.252 ip access-group 122 in ip ospf network non-broadcast ip ospf priority 0 ! router ospf 10 router-id 10.10.3.255 neighbor 10.99.53.2 ! access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1 access-list 122 deny 89 any any access-list 122 permit tcp any any access-list 122 permit udp any any access-list 122 permit icmp any any

interface fastethernet0/0 ip address 10.99.53.1 255.255.255.252 ip access-group 122 in ip ospf network non-broadcast ip ospf priority 0 ! router ospf 10 router-id 10.10.3.255 network 10.99.53.0 0.0.0.3 area 0 neighbor 10.99.53.2 ! access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1 access-list 122 deny 89 any any access-list 122 permit tcp any any access-list 122 permit udp any any access-list 122 permit icmp any any

interface fastethernet0/0 ip address 10.99.53.1 255.255.255.252 ip access-group 122 in ip ospf network non-broadcast ip ospf priority 100 ! router ospf 10 router-id 10.10.3.255 network 10.99.53.0 0.0.0.3 area 0 neighbor 10.99.53.2 access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1 access-list 122 deny 89 any any access-list 122 permit tcp any any access-list 122 permit udp any any access-list 122 permit icmp any any

interface fastethernet0/0 ip address 10.99.53.1 255.255.255.252 ip access-group 122 in ip ospf network point-to-point ip ospf priority 100 ! router ospf 10 router-id 10.10.3.255 network 10.99.53.0 0.0.0.3 area 0 neighbor 10.99.53.2 ! access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1 access-list 122 deny 89 any any access-list 122 permit tcp any any access-list 122 permit udp any any access-list 122 permit icmp any any

48. Refer to the exhibit.

Which action resolves the issue?

Establish connectivity between the NTP server and the switch.

Configure the local time on Cisco DNA Center

Configure the local time on the SW1 device

Establish connectivity between the NTP server and Cisco DNA Center.

49. Refer to the exhibit.

Not all connected and static routes of router B are received by router A even though EIGRP neighborship is established between the routers.

Which configuration resolves the issue?

A)

Option A

Option B

Option C

Option D

50. Refer to the exhibit.

An engineer configured SNMP communities on the Core_SW1, but the SNMP server cannot obtain information from Core_SW1.

Which configuration resolves this issue?

snmp-server group NETVIEW v2c priv read NETVIEW access 20

access-list 20 permit 10.221.10.11

access-list 20 permit 10.221.10.12

snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22

Page 6 of 18

51. Refer to the exhibit.

A network engineer applied a filter for LSA traffic on OSPFv3 interarea routes on the area 5 ABR to protect advertising the internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes. After the respective route filtering configuration is applied on the ABR, area 5 routes are not visible on any of the areas.

How must the filter list be applied on the ABR to resolve this issue?

in the “in” direction for area 5 on router R1

in the “out” direction for area 5 on router R1

in the “in” direction for area 20 on router R2

in the “out” direction for area 20 on router R2

52. Refer to the exhibit.

Users report that IP addresses cannot be acquired from the DHCP server. The DHCP

server is configured as shown. About 300 total nonconcurrent users are using this DHCP server, but none of them are active for more than two hours per day.

Which action fixes the issue within the current resources?

Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool

Configure the DHCP lease time to a smaller value

Configure the DHCP lease time to a bigger value

Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool

53. In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router.

Which command is required on both spoke routers to communicate directly to one another?

ip nhrp map dynamic

ip nhrp shortcut

ip nhrp nhs multicast

ip nhrp redirect

54. Refer to the exhibit.

In Cuco DNA Center, a network engineer identifies that BGP-learned networks are repeatedly withdrawn from peers.

Which configuration must the engineer apply to resolve the Issue?

A)

Option A

Option B

Option C

Option D

55. Refer to the exhibit.

An engineer must redistribute networks 192.168.10.0/24 and 192.168.20.0/24 into OSPF from EIGRP. where the metric must be added when traversing through multiple hops to start an external route of 20 The engineer notices that the external metric is fixed and does not add at each hop.

Which configuration resolves the issue?

Option A

Option B

Option C

Option D

56. Configure individual VRFs for each customer according to the topology to achieve these goals:

SW1

SW2

SW3

57. Which two solutions are used to overcome a flapping link that causes a frequent label binding exchange between MPLS routers? (Choose two)

Create link dampening on links to protect the session.

Increase input queue on links to protect the session.

Create targeted hellos to protect the session.

Increase a hold-timer to protect the session.

Increase a session delay to protect the session.

58. Refer to the exhibit.

An engineer is trying to connect to R1 via Telnet with no success.

Which configuration resolves the issue?

Option A

Option B

Option C

Option D

59. Refer to the exhibit.

An engineer is troubleshooting an OSPF adjacency issue between directly connected routers R1 and R2.

Which configuration resolves the issue?

A)

Option A

Option B

Option C

Option D

60. Refer to the exhibit.

Network operations cannot read or write any configuration on the device with this configuration from the operations subnet.

Which two configurations fix the issue? (Choose two.)

Configure SNMP rw permission in addition to community ciscotest.

Modify access list 1 and allow operations subnet in the access list.

Modify access list 1 and allow SNMP in the access list.

Configure SNMP rw permission in addition to version 1.

Configure SNMP rw permission in addition to community ciscotest 1.

Page 7 of 18

61. Refer to the exhibit.

The authentication is not working as desired and the user drops into user-exec mode.

Which configuration resolves the issue?

Option A

Option B

Option C

Option D

62. Refer to the exhibit.

When an FTP client attempts to use passive FTP to connect to the FTP server, the file transfers fail.

Which action resolves the issue?

Configure active FTP traffic.

Modify FTP-SERVER access list to remove established at the end.

Modify traffic filter FTP-SERVER in to the outbound direction.

Configure to permit TCP ports higher than 1023.

63. A CoPP policy is applied for receiving SSH traffic from the WAN interface on a Cisco ISR4321 router. However, the SSH response from the router is abnormal and stuck during the high link utilization. The problem is identified as SSH traffic does not match in the ACL.

Which action resolves the issue?

Rate-limit SSH traffic to ensure dedicated bandwidth.

Apply CoPP on the control plane interface.

Increase the IP precedence value of SSH traffic to 6.

Apply CoPP on the WAN interface inbound direction.

64. Refer to the exhibit.

The administrator noticed that the connection was flapping between the two ISPs instead of switching to ISP2 when the ISP1 failed.

Which action resolves the issue?

Include a valid source-interface keyword in the icmp-echo statement.

Reference the track object 1 on the default route through ISP2 instead of ISP1.

Modify the static routes to refer both to the next hop and the outgoing intertace.

Modify the threshold to match the administrative distance of the ISP2 route.

65. Refer to the exhibit.

The network administrator configured the Chicago router to mutually redistribute the LA and NewYork routes with OSPF routes to be summarized as a single route in EIGRP using the longest summary mask:

After the configuration, the New York router receives all the specific LA routes but the summary route.

Which set of configurations resolves the issue on the Chicago router?

Option A

Option B

Option C

Option D

66. Refer to the exhibit.

An administrator configures a router to stop using a particular default route if the DNS server 8.8.8.8 is not reachable through that route. However, this configuration did not work as desired and the default route still works even if the DNS server 8.8.8 8 is unreachable.

Which two configuration changes resolve the issue? (Choose two.)

Configure two static routes for the 8.8.8.8/32 destination to match the IP SLA probe for each IS

Associate every IP SLA probe with the proper WAN address of the router.

Reference the proper exit interfaces along with the next hops in both static default routes.

Use a separate track object to reference the existing IP SLA 1 probe for every static route.

Use a separate IP SLA probe and track object for every static route

67. Refer to the exhibit.

When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic to pass through the interface.

Which command must be configured to resolve the issue?

access-class INTERNET in

ipv6 traffic-filter INTERNET in

ipv6 access-class INTERNET in

ip access-group INTERNET in

68. The network administrator must implement IPv6 in the network to allow only devices that not only have registered IP addresses but are also connecting from assigned locations.

Which security feature must be implemented?

IPv6 Snooping

IPv6 Destination Guard

IPv6 Prefix Guard

IPv6 Router Advertisement Guard

69. When provisioning a device in Cisco DNA Center, the engineer sees the error message “Cannot select the device. Not compatible with template”.

What is the reason for the error?

The template has an incorrect configuration.

The software version of the template is different from the software version of the device.

The changes to the template were not committed.

The tag that was used to filter the templates does not match the device tag.

70. Refer to the exhibit.

The network administrator can see the DHCP discovery packet in R1. but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the Fa0/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC.

Which two commands resolve this issue? (Choose two.)

service dhcp-relay command on R1

ip dhcp option 82 command on R2

service dhcp command on R1

ip dhcp relay information enable command on R1

ip dhcp relay information trust-all command on R2

Page 8 of 18

71. How are MPLS Layer 3 VPN services deployed?

The RD and RT values must match under the VRR

The RD and RT values under a VRF must match on the remote PE router

The import and export RT values under a VRF must always be the same.

The label switch path must be available between the local and remote PE routers.

72. Refer to the exhibit.

After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and hub were not establishing.

Which two actions resolve the issue? (Choose two.)

Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3

Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.

Change the mode from mode tunnel to mode transport on R3

Change the mode from mode transport to mode tunnel on R2.

Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3

73. Refer to the exhibit.

The traffic from spoke to hub is dropping.

The operations team observes:

✑ R2-R3 link is down due to the fiber cut.

✑ R2 and R5 receive traffic from R1 in AS 65101.

✑ R3 and R5 receive traffic from R4 in AS 65201.

Which configuration resolves the issue?

A)

Option A

Option B

Option C

Option D

74. Refer to the exhibit.

After a security audit, the administrator implemented an ACL in the route reflector. The RR became unreachable from any router in the network.

Which two actions resolve the issue? (Choose two.)

Enable the ND proxy feature on the default gateway.

Configure a link-local address on the Ethernet0/1 interface.

Permit ICMPv6 neighbor discovery traffic in the AC

Remove the ACL entry 80.

Change the next hop of the default route to the link-local address of the default gateway.

75. Refer to the exhibit.

The administrator configured the network devices for end-to-end reachability, but the ASBRs are not propagating routes to each other.

Which set of configurations resolves this issue?

Option A

Option B

Option C

Option D

76. Refer to the exhibit.

The Customer Edge router (AS 65500) wants to use ASC100 as the preferred ISP for all external routes.

This configuration failed to send routes to AS 100 as the preferred path.

Which set of configuration resolves the issue?

Option A

Option B

Option C

Option D

77. A DMVPN network is preconfigured with tunnel 0 IP address 192.168.1.254 on the HUB, IP connectivity, crypto policies, profiles, and EIGRP AS 100. The NHRP password is ccnp123, and the network ID and tunnel key is EIGRP ASN Do not introduce a static route.

Configure DMVPN connectivity between routers BR1 and BR2 to the HUB router using physical interface as the tunnel source to achieve these goals:

78. When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device.

Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction

79. Refer to the exhibit.

The control plane is heavily impacted after the CoPP configuration is applied to the router.

Which command removal lessens the impact on the control plane?

access-list 120 permit udp any any eq pim-auto-rp

access-list 120 permit eigrp any host 224.0.0.10

access-list 120 permit ospf any

access-list 120 permit tcp any gt 1024 eq bgp log

80. What must a network architect consider for RTs when planning for a single customer full-mesh VPN m an MPLS Layer 3 network?

RT must be globally unique within the same VPN

RT must be globally identical within the same VPN

RT values must be Afferent from the RD values in the same VPN

Each RT value must be identical to an RD value within the same VP

Page 9 of 18

81. DRAG DROP

Drag and drop the MPLS concepts from the left onto the descriptions on the right.

82. Refer to the exhibit.

The administrator successfully logs into R1 but cannot access privileged mode commands.

What should be configured to resolve the issue?

aaa authorization reverse-access

secret cisco123! at the end of the username command instead of password cisco123!

matching password on vty lines as cisco123!

enable secret or enable password commands to enter into privileged mode

83. Refer to the exhibit.

During troubleshooting it was discovered that the device is not reachable using a secure web browser.

What is needed to fix the problem?

permit tcp port 443

permit udp port 465

permit tcp port 465

permit tcp port 22

84. What is a function of IPv6 ND inspection?

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

85. What is a MPLS PHP label operation?

Downstream node signals to remove the label.

It improves P router performance by not performing multiple label lookup.

It uses implicit-NULL for traffic congestion from source to destination forwarding

PE removes the outer label before sending to the P router.

86. Refer to the exhibit.

An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead of current best path.

Which action resolves the issue?

Configure AS_PATH prepend for the desired best path

Configure higher MED to select as the best path.

Configure lower LOCAL_PREF to select as the best path.

Configure AS_PATH prepend for the current best path

87. Refer to the exhibit.

Which command must be configured to make VRF CCNP work?

interface Loopback0 vrf forwarding CCNP

interface Loopback0 ip address 10.1.1.1 255.255.255.0

interface Loopback0 ip address 10.1.1.1 255.255.255.0 vrf forwarding CCNP

interface Loopback0 ip address 10.1.1.1 255.255.255.0 ip vrf forwarding CCNP

88. Refer to the exhibit.

The neighbor relationship is not coming up.

Which two configurations bring the adjacency up? (Choose two)

NY router ospf 1 area 0 authentication message-digest

LA interface E 0/0 ip ospf message-digest-key 1 md5 Cisco123

NY interface E 0/0 no ip ospf message-digest-key 1 md5 Cisco123 ip ospf authentication-key Cisco123

LA interface E 0/0 ip ospf authentication-key Cisco123

LA router ospf 1 area 0 authentication message-digest

89. Refer to the exhibit.

Traffic from R3 to the central site does not use alternate paths when R3 cannot reach 10 10 10 2 Traffic on R3 destined to R4 takes an alternate route via 10 10 10.6 when 10 10 10 4 is not accessible from R3.

Which configuration switches traffic destined to 10 10 10 2 from R3 on the alternate path’’

R3(config)#ip route 192.168.10.1 255.255.265.255 10.10.10.2 track 20

R2(config)#ip route 10.10 10 3 255 255.255 255 10.0.0.6

R3(config)#track (20 ip sla 20 reachability

R6(config)#ip route 10.10.10 3 255.255.255.255 10.0.0.30

90. Refer to the exhibit.

Mutual redistribution is enabled between RIP and EIGRP on R2 and R5.

Which configuration resolves the routing loop for the 192.168.1.0/24 network?

R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any

R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any

R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any

R2: router eigrp 7 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 7 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 7 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 7 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any

Page 10 of 18

91. Which SNMP verification command shows the encryption and authentication protocols that are used in SNMPV3?

show snmp group

show snmp user

show snmp

show snmp view

92. Refer to the exhibit.

A network administrator is trying to switch to the privileged EXEC level on R1 but failed.

Which configuration resolves the issue?

Enable password Cisco@123

tacass server enable-password Cisco@123

tacacs-server enable-password Cisco@123

enable-password Cisco@123

93. Refer to the exhibit.

The network administrator must mutually redistribute routes at the Chicago router to the LA and NewYork routers.

The configuration of the Chicago router is this:

After the configuration, the LA router receives all the NewYork routes, but NewYork router does not receive any LA routes.

Which set of configurations fixes the problem on the Chicago router?

A. router ospf 1

redistribute eigrp 100 metric 20

B. router eigrp 100

redistribute ospf 1 metric 10 10 10 10 10

C. router eigrp 100

redistribute ospf 1 subnets

D. router ospf 1

redistribute eigrp 100 subnets

A. Option A

B. Option B

C. Option C

D. Option D

94. Refer to the exhibit.

An IT staff member comes into the office during normal office hours and cannot access devices through SSH.

Which action should be taken to resolve this issue?

Modify the access list to use the correct IP address.

Configure the correct time range.

Modify the access list to correct the subnet mask

Configure the access list in the outbound direction.

95. Refer to the exhibit.

A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands.

Which action resolves the issue?

Configure TACACS+ synchronization with the Active Directory admin group

Configure the username from a local database

Configure full access for the username from TACACS+ server

Configure an authorized IP address for this user to access this router

96. Refer to the exhibit.

TCP traffic should be reaching host 10.10.10.10/24 via R2.

Which action resolves the issue?

TCP traffic will reach the destination via R2 without any changes

Add a permit 20 statement in the route map to allow TCP traffic

Allow TCP in the access list with no changes to the route map

Set IP next-hop to 10.10.12.2 under the route-map permit 10 to allow TCP traffic.

97. Refer to the exhibit.

A network engineer must establish communication between three different customer sites with these requirements:

✑ Site-A: must be restricted to access to any users at Site-B or Site-C.

✑ Site-B and Site-C must be able to communicate between sites and share routes using OSPF.

Which configuration meets the requirements?

Option A

Option B

Option C

Option D

98. Which two labet distribution methods are used by routers in MPLS? (Choose two)

targeted hello message

LDP discovery hello message

LDP session protection message

downstream unsolicited

downstream on demand

99. Refer to the exhibit.

The ISP router is fully configured for customer A and customer B using the VRF-Lite feature.

What is the minimum configuration required for customer A to communicate between routers A1 and A2?

A1 interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0

A1 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0

A1 interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0

A1 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 vrf A net 172.31.200.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 vrf A net 172.31.200.1 0.0.0.255 area 0

100. What does IPv6 Source Guard utilize to determine if IPv6 source addresses should be forwarded?

ACE

ACLS

DHCP

Binding Table

Page 11 of 18

101. Refer to the exhibit.

R1 and R2 cannot establish an EIGRP adjacency.

Which action establishes EIGRP adjacency?

Remove the current autonomous system number on one of the routers and change to a different value.

Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.

102. Refer to the exhibit.

An engineer has configured R1 as EIGRP stub router. After the configuration, router R3 failed to reach to R2 loopback address.

Which action advertises R2 loopback back into the R3 routing table?

Add a static route for R2 loopback address in R1 and redistribute it to advertise to R3.

Use a leak map on R1 that matches the required prefix and apply it with the distribute list command toward R3.

Use a leak map on R3 that matches the required prefix and apply it with the EIGRP stub feature.

Add a static null route for R2 loopback address in R1 and redistribute it to advertise to R3.

103. A. Redistribute the static metric in EIGRP.

B. Add the eigrp stub connected static command.

C. Redistribute the connected metric in EIGRP.

D. Remove the eigrp stub connected command.

104. Refer to the exhibit.

An engineer must establish multipoint GRE tunnels between hub router R6 and branch routers R1, R2, and R3.

Which configuration accomplishes this task on R1?

A)

Option A

Option B

Option C

Option D

105. Refer to the exhibit.

An engineer configures the router 10.1.100.10 for EIGRP auto summarization so that R1 should receive the summary route of 10.0.0.0/8. However, R1 receives more specific /24 routes.

Which action resolves this issue?

Router R1 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

Router R1 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are received on R1.

Router 10.1.100.10 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are summarized toward R1.

Router 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

106. Users report issues with reachability between areas as soon as an engineer configured summary routes between areas in a multiple area OSPF autonomous system.

Which action resolves the issue?

Configure the summary-address command on the ASB

Configure the summary-address command on the AB

Configure the area range command on the AB

Configure the area range command on the ASB

107. Refer to the exhibit.

A network engineer is provisioning end-to-end traffic service for two different enterprise networks with these requirements

✑ The OSPF process must differ between customers on HQ and Branch office routers, and adjacencies should come up instantly.

✑ The enterprise networks are connected with overlapping networks between HO and a branch office

Which configuration meets the requirements for a customer site?

A)

Option A

Option B

Option C

Option D

108. What is an advantage of using BFD?

It detects local link failure at layer 1 and updates routing table.

It detects local link failure at layer 2 and updates routing protocols.

It has sub-second failure detection for layer 1 and layer 3 problems.

It has sub-second failure detection for layer 1 and layer 2 problems.

109. Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

VACL blocking broadcast frames from nonauthorized hosts

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

PVLANs with community ports associated to route advertisements and isolated ports for nodes

IPv4 ACL blocking route advertisements from nonauthorized hosts

110. Refer to the exhibit.

An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+.

Which action produces the desired configuration?

Add the aaa authentication login default none command to the global configuration.

Replace the capital “C” with a lowercase “c” in the aaa authentication login Console local command.

Add the aaa authentication login default group tacacs+ local-case command to the global configuration.

Add the login authentication Console command to the line configuration

Page 12 of 18

111. Refer to the exhibit.

AS111 is receiving its own routes from AS200 causing a loop in the network.

Which configuration provides loop prevention?

A)

Option A

Option B

Option C

Option D

112. Refer to the exhibit.

An administrator can log in to the device using Telnet but the attempts to log in to the same device using SSH with the same credentials fail.

Which action resolves this issue?

Configure SSH service on the router

Configure transport input all on the VTY lines to allow SSH

Configure to use the Telnet user database for SSH as well

Configure the VTY lines with login local

113. Which Cisco VPN technology can use multipoint tunnel, resulting in a single GRE tunnel interface on the hub, to support multiple connections from multiple spoke devices?

DMVPN

GETVPN

Cisco Easy VPN

FlexVPN

114. Refer to the exhibit.

A network engineer is troubleshooting an AAA authentication issue for R1 from R2 When an engineer tries to open a telnet connection to R1 it opens the connection but shows a %Authorization failed error message on the terminal and closes the connection silently.

Which action resolves the issue?

Resolve tacacs+ server host IP authentication miss configuration on the R1 router

Resolve tacacs+ server reachability from the R1 router.

Configure the tacacs+ server host IP on the R1 router

Configure authorization commands in the tacacs* server for the R1 router.

115. Refer to the exhibit.

An engineer configured IP SLA to monitor a next hop on a router for reachability When the next hop is unreachable, the router is executing tracking and failing over another route, but packet loss is experienced because the reachability is flapping.

Which action resolves the issue?

Append delay up 0 down Ovto the track command

Increase the timeout of the sla probe to 6000

Append delay up SO down 60vto the track command

Increase the frequency of the sla probe to 60.

116. What is a function of IPv6 Source Guard?

It works with address glean or ND to find existing addresses.

It inspects ND and DHCP packets to build an address binding table.

It denies traffic from known sources and allocated addresses.

It notifies the ND protocol to inform hosts if the traffic is denied by it.

117. Refer to the exhibit.

After an engineer modified the configuration for area 7 to permit type 1 2 and 7 LSAs only users connected to router R9 reported that they could no longer access the internet.

Which configuration restores internet access to users on R9 and permits only LSA type 1,2, and 7?

A)

Option A

Option B

Option C

Option D

118. Refer to the exhibit.

ISP 1 and ISP 2 directly connect to the Internet. A customer is tracking both ISP links to achieve redundancy and cannot see the Cisco IOS IP SLA tracking output on the router console.

Which command is missing from the IP SLA configuration?

Start-time 00:00

Start-time 0

Start-time immediately

Start-time now

119. Refer to the exhibit.

After a misconfiguration by a junior engineer, the console access to router A is not working.

Which configuration allows access to router A?

A)

Option A

Option B

Option C

120. Refer to the exhibit.

EIGRP adjacency between router A and router C is not working as expected.

Which two configurations resolve the issue? (Choose two)

A)

Option A

Option B

Option C

Option D

Option E

Page 13 of 18

121. Refer to the exhibit.

An engineer configures a static route on a router, but when the engineer checks the route to the destination, a different next hop is chosen.

What is the reason for this?

Dynamic routing protocols always have priority over static routes.

The metric of the OSPF route is lower than the metric of the static route.

The configured AD for the static route is higher than the AD of OSP

The syntax of the static route is not valid, so the route is not considered.

122. Refer to the exhibit.

After configuring OSPF in R1, some external destinations in the network became unreachable.

Which action resolves the issue?

Clear the OSPF process on R1 to flush stale LSAs sent by other routers.

Change the R1 router ID from 10.255.255.1 to a unique value and clear the process.

Increase the SPF delay interval on R1 to synchronize routes.

Disconnect the router with the OSPF router ID 0.0.0.0 from the network.

123. Refer to the exhibit.

To provide reachability to network 10.1.1.0 /24 from R5, the network administrator redistributes EIGRP into OSPF on R3 but notices that R4 is now taking a ........... path through R5 to reach 10.1.1.0/24 network.

Which action fixes the issue while keeping the reachability from R5 to 10.1.1.0/24 network?

Change the administrative distance of the external EIGRP to 90.

Apply the outbound distribution list on R5 toward R4 in OSP

Change the administrative distance of OSPF to 200 on R5.

Redistribute OSPF into EIGRP on R4

124. The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps.

Any traffic that exceeds this limit must be dropped.

access-list 100 permit ip host 172.16.1.99 any

!

class-map CM-ADMIN

match access-group 100

!

policy-map PM-COPP

class CM-ADMIN

police 500000 conform-action transmit

!

interface E0/0

service-policy input PM-COPP

CoPP failed to capture the desired traffic and the CPU load is getting higher.

Which two configurations resolve the issue? (Choose two.)

interface E0/0 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP

policy-map PM-COPP class CM-ADMIN no police 500000 conform-action transmit police 500 conform-action transmit ! control-plane service-policy input PM-COPP

no access-list 100 access-list 100 permit tcp host 172.16.1.99 any eq 80

no access-list 100 access-list 100 permit tcp host 172.16.1.99 any eq 80 access-list 100 permit tcp host 172.16.1.99 any eq 443

policy-map PM-COPP class CM-ADMIN no police 500000 conform-action transmit police 500 conform-action transmit

125. Refer to the exhibit.

Which configuration resolves the issue?

A)

Option A

Option B

Option C

Option D

126. Refer to the exhibit.

A network engineer for AS64512 must remove the inbound and outbound traffic from link A during maintenance without closing the BGP session so that there ............ a backup link over link A toward the ASN.

Which BGP configuration on R1 accomplishes this goal?

A)

Option A

Option B

Option C

Option D

127. Refer to the exhibit.

An engineer configured SNMP traps to record spoofed packets drop of more than 48000 a minute on the ethernet0/0 interlace. During an IP spoofing attack, the engineer noticed that no notifications have been received by the SNMP server.

Which configuration resolves the issue on R1?

ip verity unicast notification threshold 48000

ip verify unicast notification threshold 8000

ip verify unicast notification threshold 800

ip verify unicast notification threshold 80

128. Refer to the exhibit. An engineer is trying to log in to R1 via R3 loopback address.

Which action resolves the issue?

Add transport input SCP

Add transport input none

Remove the IPv6 traffic filter from R1, which is blocking the Telnet.

Remove the IPv6 traffic from R1, which is blocking the SSH

129. Refer to the exhibit.

A NOC team receives a ticket that data traffic from RA to RF is not forwarded when the link between the RC-RE path goes down. All routers learn loopback IP through the IGP protocol.

Which configuration resolves?

RD(config)#router bgp B5201 RD(config-router)# neighbor 10.10.10.2 update-source loopback 0

RD(config-router)# neighbor bgp 65101 RB(config-router)# neighbor 10.10.10.3 ebgp-multihop 3

RB(config)# router bgp 65101 RB(config)#neighbor 10.10.10.3 update-source loopback 0

RD(config)# router bgp 65201 RDI(config-router)# neighbor 10.10.10.2 ebgp-multihop 3

130. Which protocol does MPLS use to support traffic engineering?

Tag Distribution Protocol (TDP)

Resource Reservation Protocol (RSVP)

Border Gateway Protocol (BGP)

Label Distribution Protocol (LDP)

Page 14 of 18

131. What is a role of route distinguishers in an MPLS network?

Route distinguishers define which prefixes are imported and exported on the edge router

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network

132. Refer to the exhibit.

Router R4 is configured correctly with default OSPF values. A network engineer configured R7 for OSPF. R7 must not be elected as a DR for the segment between R4-R7. The adjacency between R4 and R7 failed to form.

Which configuration resolves the issue?

Option A

Option B

Option C

Option D

133. Refer to the exhibit.

An engineer must configure EIGRP between R1 and R2 with no summary route.

Which configuration resolves the issue?

A)

Option A

Option B

Option C

Option D

134. What is an advantage of implementing BFD?

BFD provides faster updates for any flapping route.

BFD provides millisecond failure detection

BFD is deployed without the need to run any routing protocol

BFD provides better capabilities to maintain the routing table

135. The network administrator configured R1 to authenticate Telnet connections based on Cisco ISE using TACACS+. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1(192.168.1.1) with a shared secret password of Cisco123.

The administrator cannot authenticate to R1 based on ISE.

Which configuration fixes the issue?

ip tacacs-server host 192.168.1.5 key Cisco123

line vty 0 4 login authentication TAC-SERV

line vty 0 4 login authentication telnet

tacacs-server host 192.168.1.5 key Cisco123

136. Refer to the exhibit.

An engineer Is troubleshooting a routing loop on the network to reach the 172.16.3.0/16 from the OSPF domain.

Which configuration on router R1 resolves the Issue?

A)

Option A

Option B

Option C

Option D

137. Refer to the exhibit.

An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R1 as the primary default gateway When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192.168.20.0/24.

Which set of configurations resolves the issue?

HQ_R3(config)# ip sla responder HQ_R3(config)# ip sla responder icmp-echo 172.16.35.1

BRANCH(config)# ip sla 1 BRANCH(config-ip-sla)# icmp-echo 192.168.100.2

HQ R3(config)# Ip sla responder HQ R3(config)# Ip sla responder Icmp-echo 172.16.35.5

BRANCH(config)# Ip sla 1 BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1

138. Refer to the exhibits.

London must reach Rome using a faster path via EIGRP if all the links are up but it failed to take this path.

Which action resolves the issue?

Increase the bandwidth of the link between London and Barcelona

Use the network statement on London to inject the 172 16 X 0/24 networks into EIGR

Change the administrative distance of RIP to 150

Use the network statement on Rome to inject the 172 16 X 0/24 networks into EIGRP

139. Refer to the exhibit.

A network administrator configured an IPv6 access list to allow TCP return frame only, but it is not working as expected.

Which changes resolve this issue?

ipv6 access-list inbound permit tcp any any syn deny ipv6 any any log ! interface gi0/0 ipv6 traffic-filter inbound out

ipv6 access-list inbound permit tcp any any syn deny ipv6 any any log ! interface gi0/0 ipv6 traffic-filter inbound in

ipv6 access-list inbound permit tcp any any established deny ipv6 any any log ! interface gi0/0 ipv6 traffic-filter inbound in

ipv6 access-list inbound permit tcp any any established deny ipv6 any any log ! interface gi0/0 ipv6 traffic-filter inbound out

140. While troubleshooting connectivity issues to a router, these details are noticed:

✑ Standard pings to all router interfaces, including loopbacks, are successful.

✑ Data traffic is unaffected.

✑ SNMP connectivity is intermittent.

✑ SSH is either slow or disconnects frequently.

Which command must be configured first to troubleshoot this issue?

show policy-map control-plane

show policy-map

show interface | inc drop

show ip route

Page 15 of 18

141. Refer to the exhibit.

Which action resolves the issue?

Configure host IP address in access-list 16

Configure SNMPv3 on the router

Configure SNMP authentication on the router

Configure a valid SNMP community string

142. Refer to the exhibit.

A network engineer receives a fault ticket about traffic drops from BANK SITE to BANK

Users can reach BANK SITE Y from router RA as a source.

Routers RB and RD are acting as route reflectors.

Which configuration resolves the issue?

RC(config)#router bgp 65201 RC(config-router)#neighbor 10.10.10.4 route-reflector-client

RF(config)#router bgp 65201 RF(config-router)#neighbor 10.10.10.6 route-reflector-client

RC(config)#router bgp 65201 RC(config-router)#neighbor 10.10.10.2 route-reflector-client

RB(config)router bgp 65201 RB(config-router)#neighbor 10.10.10.3 route-reflector-client

143. Refer to the exhibit.

An administrator noticed that after a change was made on R1, the timestamps on the system logs did not match the clock.

What is the reason for this error?

An authentication error with the NTP server results in an incorrect timestamp.

The keyword localtime is not defined on the timestamp service command.

The NTP server is in a different time zone.

The system clock is set incorrectly to summer-time hours.

144. Refer to the exhibit.

An engineer must advertise routes into IPv6 MP-BGP and failed.

Which configuration resolves the issue on R1?

router bgp 65000 no bgp default ipv4-unicast address-family ipv6 multicast network 2001:DB8::/64

router bgp 65000 no bgp default ipv4-unicast address-family ipv6 unicast network 2001:DB8::/64

router bgp 64900 no bgp default ipv4-unicast address-family ipv6 unicast network 2001:DB8::/64

router bgp 64900 no bgp default ipv4-unicast address-family ipv6 multicast neighbor 2001:DB8:7000::2 translate-update ipv6 multicast

145. An administrator attempts to download the pack NBAR2 file using TFTP from the CPE router to another device over the Gi0/0 interface.

The CPE is configured as below:

The transfer fails.

Which action resolves the issue?

Change the WAN ACL to permit the UDP port 69 to allow TFTP

Make the permit udp any eq tftp any entry the last entry in the WAN AC

Change the WAN ACL to permit the entire UDP destination port range

Shorten the file name to the 8+3 naming convention.

146. Refer to the exhibit.

An engineer configures two ASBRs 10 4 17.6 and 10 4 15 5 in an OSPF network to redistribute routes from EIGRP However, both ASBRs show the EIGRP routes as equal costs even though the next-hop router 10 4 17 6 is closer to R1.

How should the network traffic to the EIGRP prefixes be sent via 10 4.17.6?

A. The administrative distance should be raised to 120 from the ASBR 10.4.15 5.

B. The redistributed prefixes should be advertised as Type 1

C. The ASBR 10 4 17 6 should assign a tag to match and assign a lower metnc on R1

D. The administrative distance should be raised to 120 from the ASBR 104.17.6

A. The admitstrative distance should be raised to 120 from the ASBR 104 15.5.

B. The redistributed prefixes should be advertised as Type 1.

C. The ASBR 10 4 17 6 should assign a tag to match and assign a tower metnc on R1

D. The administrative distance should be raised to 120 from the ASBR 104 17 6

147. Refer to the exhibit.

R1 is configured with uRPF, and ping to R1 is failing from a source present in the R1 routing table via the GigatxtEthernet 0/0 interface.

Which action resolves the issue?

Remove the access list from the interface GigabrtEthernet 0/0

Modify the uRPF mode from strict to loose

Enable Cisco Express Forwarding to ensure that uRPF is functioning correctly

Add a floating static route to the source on R1 to the GigabitEthernet 0/1 interface

148. How does LDP operate in an MPLS network?

When topology changes occur such as a router failure, LDP generates peer discovery messages that terminate the LDP season to propagate an LSP change.

When an adjacent LSR receives LDP discovery messages. TCP two-way handshake ensures that the LDP session has unidirectional connectivity.

Peer routers establish the LDP session, and the LDP neighbors maintain and terminate the session by exchanging messages

LDP notification messages allow LERs to exchange label information to determine the next hops within a particular LS

149. Refer to the exhibit.

A network engineer notices that R1 and R2 cannot establish an eBGP peering.

The following messages appear in the log:

Which configuration must the engineer apply to R1 to restore the eBGP peering?

A)

Option A

Option B

Option C

Option D

150. While working with software images, an engineer observes that Cisco DNA Center cannot upload its software image directly from the device.

Why is the image not uploading?

The device must be resynced to Cisco DNA Center.

The software image for the device is in install mode.

The device has lost connectivity to Cisco DNA Center.

The software image for the device is in bundle mode

Page 16 of 18

151. Which table is used to map the packets in an MPLS LSP that exit from the same interface, via the same next hop, and have the same queuing policies?

RIB

FEC

LDP

CEF

152. Which Layer 3 VPN attribute installs customer routes in the VRF?

extended-community

MPLS label

153. Which rouler takes an active role between two LDP neighbors when initiating LDP session negotiation and LDP TCP connection establishment?

with the higher IP address

with the larger number of LDP TCP neighbors

with the lowest IP address

with one interface in the MPLS backbone

154. Refer to the exhibit.

While troubleshooting a BGP route reflector configuration, an engineer notices that reflected routes are missing from neighboring routers.

Which two BGP configurations are needed to resolve the issue? (Choose two)

neighbor 10.1.1.14 route-reflector-client

neighbor R2 route-reflector-client

neighbor 10.1.1.2 allowas-in

neighbor R4 route-reflector-client

neighbor 10.1.1.2 route-reflector-client

155. Which control plane process allows the MPLS forwarding state to recover when a secondary RP takes over from a failed primary RP?

MP-BGP uses control plane services for label prefix bindings in the MPLS forwarding table

LSP uses NSF to recover from disruption *i control plane service

FEC uses a control plane service to distribute information between primary and secondary processors

LDP uses SSO to recover from disruption in control plane service

156. Refer to the exhibit.

Which action ensures that 10 10 10 0/24 reaches 10 10 20 0/24 through the direct link between R1 and R2?

Configure R1 and R2 LAN links as nonpassive.

Configure R1 and R2 links under area 1

Configure OSPF link cost to 1 between R1 and R2

Configure OSPF path cost to 3 between R1 and R2

157. Refer to the exhibit.

The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new IP address.

Which two actions must be taken to resolve this Issue? (Choose two.)

Configure the server to use DHCP on the network with default gateway 200 30.40.100.

Configure the server with a static IP address and default gateway.

Configure the router to exclude a server IP address.

Configure the server to use DHCP on the network with default gateway 200 30.30.100.

Configure the router to exclude a server IP address and default gateway.

158. An engineer creates a default static route on a router with a hop of 10.1.1.1. On inspection, the engineer finds the router has two VRFs, Red and Blue. The next hop is valid for both VRFs and exists in each assigned VRF.

Which configuration achieves connectivity?

ip route vrf BLUE 0.0.0.0 255.255.255.255 10.1.1.1 ip route vrf RED 0.0.0.0 255.255.255.255 10.1.1.1

ip route vrf Red 0.0.0.0 0.0.0.0 10.1.1.1 ip route vrf Blue 0.0.0.0 0.0.0.0 10.1.1.1

ip route vrf 0.0.0.0 0.0.0.0 10.1.1.1

ip route vrf Red 0.0.0.0 255.255.255.255 10.1.1.1 ip route vrf Blue 0.0.0.0 255.255.255.255 10.1.1.1

159. Which security feature can protect DMVPN tunnels?

IPsec

TACACS+

RTBH

RADIUS

160. Refer to the exhibit.

An IP SLA is configured to use the backup default route when the primary is down, but it is not working as desired.

Which command fixes the issue?

R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2 10 track 1

R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2

R1(config)#ip sla track 1

R1(config)# ip route 0.0.0.0.0.0.0.0.1.1.1.1 track 1

Page 17 of 18

161. Refer to the exhibit.

An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established and did not meet the requirement.

Which action resolves the issue?

Replace OSPF process 10 on the interface with OSPF process 1, and configure an additional router ID with IPv6 address.

Replace OSPF process 10 on the interface with OSPF process 1, for the VPv6 addressma nd remove process route ID with IPv6 address.

Replace OSPF process 10 on the interface with OSPF process 1, and remove process 10 from the global configuration.

Replace OSPF process 10 on the interface with OSPF process 1 for the IPv4 address, and remove process 10 from the global configuration.

162. An engineer creates a Cisco DNA Center cluster with three nodes, but all the services are running on one host node.

Which action resolves this issue?

Restore the link on the switch interface that is connected to a cluster link on the Cisco DNA Center

Click the master host node with all the services and select services to be moved to other hosts

Enable service distribution from the Systems 360 page.

Click system updates, and upgrade to the latest version of Cisco DNA Center.

163. Refer to the exhibit.

While troubleshooting an EIGRP neighbor adjacency problem, the network engineer notices that the interface connected to the neighboring router is not participating in the EIGRP process.

Which action resolves the issues?

Configure the network command to network 172.16.0.1 0.0.0.0

Configure the network command under EIGRP address family vrf CLIENT1

Configure EIGRP metrics on interface FastEthernet0/3

Configure the network command under EIGRP address family ipv4

164. Which two technologies optimize MPLS infrastructure using bandwidth protection services when experiencing slow response7 (Choose two.)

IPLFA

MPLS OAM

VPLS

SO-MPLS

Fast-Rwoute

165. Refer to the Exhibit.

A network is configured for EIGRP equal-cost load balancing, but the traffic destined to the servers is not load balanced. Link metrics from router R2 to R3 and R4 are the same.

Which delay value must be configured to resolve the issue?

208 oon R3 E0/0

120 on R4 E0/1

120/on R3 E0/1

2200 on R4 E0/1

166. Refer to the exhibit.

The administrator can see the traps for the failed login attempts, but cannot see the traps of successful login attempts.

What command is needed to resolve the issue?

Configure logging history 2

Configure logging history 3

Configure logging history 4

Configure logging history 5

167. Refer to the exhibit.

An engineer applies a prefix-list filter that filters most of the network 10 prefixes instead of allowing them.

Which action resolves the issue?

Modify the ip prefix-list ElGRP seq 10 permit 10.0.0.0/8 le 9 command.

Modify the command Modify the Ip prefix-list ElGRP seq 10 permit 10.0.0.0/8 le 32 command.

Modify the Ip prefix-list ElGRP seq 20 permit 0.0.0.0/0 le 32 command.

Modify the ip prefix-list ElGRP seq 20 permit 10.0.0.0/8 ge 9 command

168. Refer to the exhibit.

An engineer is trying to redistribute OSPF to BGP, but not all of the routes are redistributed.

What is the reason for this issue?

By default, only internal routes and external type 1 routes are redistributed into BGP

Only classful networks are redistributed from OSPF to BGP

BGP convergence is slow, so the route will eventually be present in the BGP table

By default, only internal OSPF routes are redistributed into BGP

169. Refer to the exhibit.

An administrator is attempting to disable the automatic logout after a period of inactivity. After logging out the console stopped responding to all keyword inputs.

Remote access through SSH still work resolves the issue?

Configure the exec command on line con 0.

Configure the absolute-timeout command on line con 0.

Configure the default exec-timeout command on line con 0.

Configure the no exec-timeout command on line con 0.

170. Refer to the exhibit.

Reachability between servers in a network deployed with DHCPv6 is unstable.

Which command must be removed from the configuration to make DHCPv6 function?

ipv6 dhcp server DHCPPOOL

ipv6 address 2001:0:1:4::/64

ipv6 nd ra suppress

address prefix 2001:0:1:4::/64 lifetime infinite infinite

Page 18 of 18

171. Refer to the exhibit.

An engineer sets up a DMVPN connection to connect branch 1 and branch 2 to HQ branch 1 and branch 2 cannot communicate with each other.

Which change must be made to resolve this issue?

Option A

Option B

Option C

Option D

172. Refer to the exhibit.

An engineer configured route exchange between two different companies for a migration project EIGRP routes were learned in router C but no OSPF routes were learned in router A.

Which configuration allows router A to receive OSPF routes?

(config-router-af)#redistribute ospf 10 1000000 10 255 1 1500

(config-routeraf-topology)#redistribute ospf 10 metric 1000000 10 255 1 1500

(config-router-af-topology)#redistribute connected

(config-router-af-topology )£no redistribute ospf 10 match external 1 external 2 metric 1000000 10 255 1 1500

173. How are CE advertised routes segmented from other CE routers on an MPLS PE router?

with a combination of VRF-Lite and MP-BGP

by pushing MPLS labels advertised by LDP on customer routes

by enabling multiple instances of BG

one for each CE router

by assigning CE-facing interfaces to different VRFs

174. Refer to the exhibit.

An engineer configured router R3 to redistribute the prefix 10.10.10.0/24 from OSPF into EIGRP R1 has no connectivity to the prefix.

Which action enables receipt of prefixes on R1?

R3 is advertising the 10.20.20 0'24 prefix with a TTL of 1, R3 must set the TTL to 2 for this prefix.

R1 docs not have a neighbor relationship with R2. The EIGRP process should be cleared on R1.

Duplicate router IDs on R1 and R3, R1 should modify its router I

R1 is not receiving the next-hop IP address of R3. R2 must enable the network 10 20.20.0V24 within EIGR

175. Refer to the exhibit.

An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead of current best path.

Which action resolves the issue?

Configure AS_PATH prepend for the current best path

Configure higher MED to select as the best path

Configure AS_PATH prepend for the desired best path

Configure lower LOCAL_PREF to select as the best path

TAGS:

300-410, 300-410 exam dumps

Notify of

Label

Name*

Email*

Website

Label

Name*

Email*

Website

0 Comments

Oldest

Newest Most Voted

Inline Feedbacks

View all comments

Get 300-410 Dumps Full Version

Q&As: 573
Versions: PDF and Software Download Now

About Dumpsinfo

Dumpsinfo is a good platform providing the latest exam information and dumps questions for all IT certification exams. You can study all the latest exam dumps questions online.

[email protected]

Mon - Sat 9:00am - 6:00pm

Improve Your Knowledge with 300-410 Exam Dumps

Related

Posts

100-160 Dumps Guarantee You Pass 100-160 Exam Easily

Pass 300-815 Exam to Get Cisco Certification

Test Online 300-445 Dumps Questions to Be Certified

Improve Your Knowledge with 300-540 Exam Dumps

About Us

EMAIL

Services

Opening Hours