Winter Special Sale Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 713PS592

300-410 Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Questions and Answers

Questions 4

How does an MPLS Layer 3 VPN function?

Options:

A.

set of sites use multiprotocol BGP at the customer site for aggregation

B.

multiple customer sites interconnect through service provider network to create secure tunnels between customer edge devices

C.

set of sites interconnect privately over the Internet for security

D.

multiple customer sites interconnect through a service provider network using customer edge to provider edge connectivity

Buy Now
Questions 5

Refer to the exhibit.

300-410 Question 5

BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1. Users report packet loss and interruption of service to applications hosted onthe 10.1.1.0724 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command. Which action stabilizes the service?

Options:

A.

Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.

B.

Repeat the test from R4 using ICMP ping on the local 10.1.1.0/24 prefix, and fix any Layer 2 errors on the host or switch side of the subnet. ^ C. Place an OSPF distribute-list outbound on R3 to block the 10.1.10/24 prefix from being advertised back to R3.

C.

Reduce frequent OSPF SPF calculations on R3 that cause a high CPU and packet loss on traffic traversing R3.

Buy Now
Questions 6

Refer to the exhibit.

300-410 Question 6

The network administrator configured redistribution on an ASBR to reach to all WAN networks but failed Which action resolves the issue?

Options:

A.

The route map must have the keyword prefix-list to evaluate the prefix list entries

B.

The OSPF process must have a metric when redistributing prefixes from EIGRP.

C.

The route map EIGRP->OSPF must have the 10.0.106.0/24 entry to exist in one of the three prefix lists to pass

D.

EIGRP must redistribute the 10.0.106.0/24 route instead of using the network statement

Buy Now
Questions 7

An engineer configured SNMP notifications sent to the management server using authentication and encrypting data with DES. An error in the response PDU is received as "UNKNOWNUSERNAME. WRONGDIGEST". Which action resolves the issue?

Options:

A.

Configure the correct authentication password using SNMPv3 authPriv .

B.

Configure the correct authentication password using SNMPv3 authNoPriv.

C.

Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.

D.

Configure correct authentication and privacy passwords using SNMPv3 authPriv.

Buy Now
Questions 8

Refer to the exhibit.

300-410 Question 8

The administrator successfully logs into R1 but cannot access privileged mode commands. What should be configured to resolve the issue?

Options:

A.

aaa authorization reverse-access

B.

secret cisco123! at the end of the username command instead of password cisco123!

C.

matching password on vty lines as cisco123!

D.

enable secret or enable password commands to enter into privileged mode

Buy Now
Questions 9

Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

Options:

A.

VACL blocking broadcast frames from nonauthorized hosts

B.

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

C.

PVLANs with community ports associated to route advertisements and isolated ports for nodes

D.

IPv4 ACL blocking route advertisements from nonauthorized hosts

Buy Now
Questions 10

Refer to the exhibit.

300-410 Question 10

PC-2 failed to establish a Telnet connection to the terminal server. Which configuration resolves the issue?

300-410 Question 10

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 11

Refer to the exhibit.

300-410 Question 11

300-410 Question 11

All the serial between R1, R2, and R3 have the Same bandwidth. User on the 192.168.1.0/24 network report slow response times while they access resource on network 192.168.3.0/24. When a traceroute is run on the path. It shows that the packet is getting forwarded via R2 to R3 although the link between R1 and R3 is still up. What must the network administrator to fix the slowness?

Options:

A.

Change the Administrative Distance of EIGRP to 5.

B.

Add a static route on R1 using the next hop of R3.

C.

Remove the static route on R1.

D.

Redistribute theR1 route to EIGRP

Buy Now
Questions 12

Refer to the exhibit.

300-410 Question 12

Which two actions restrict access to router R1 by SSH? (Choose two.)

Options:

A.

Configure transport input ssh on line vty and remove sequence 30 from access list 100.

B.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.

C.

Remove class-map ANY from service-policy CoPP

D.

Configure transport output ssh on line vty and remove sequence 10 from access list 199.

E.

Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199

Buy Now
Questions 13

Refer to the exhibit.

300-410 Question 13

To provide reachability to network 10.1.1.0 /24 from R5, the network administrator redistributes EIGRP into OSPF on R3 but notices that R4 is now taking a ........... path through R5 to reach 10.1.1.0/24 network. Which action fixes the issue while keeping the reachability from R5 to 10.1.1.0/24 network?

Options:

A.

Change the administrative distance of the external EIGRP to 90.

B.

Apply the outbound distribution list on R5 toward R4 in OSPF.

C.

Change the administrative distance of OSPF to 200 on R5.

D.

Redistribute OSPF into EIGRP on R4

Buy Now
Questions 14

Refer to exhibit.

300-410 Question 14

Routing protocols are mutually redistributed on R3 and R1. Users report intermittent connectivity to services hosted on the 10.1.1.0/24 prefix. Significant routing update changes are noticed on R3 when the show ip route profile

command is run. How must the services be stabilized?

Options:

A.

The issue with using BGP must be resolved by using another protocol and redistributing it into EIGRP on R3

B.

The routing loop must be fixed by reducing the admin distance of iBGP from 200 to 100 on R3

C.

The routing loop must be fixed by reducing the admin distance of OSPF from 110 to 80 on R3

D.

The issue with using iBGP must be fixed by running eBGP between R3 and R4

Buy Now
Questions 15

300-410 Question 15

Refer to the exhibit. The DHCP client is unable to receive an IP address from the DHCP server RouterB is configured as follows:

Interface fastethernet 0/0

description Client DHCP ID 394482431

Ip address 172 31 11 255 255.255 0

!

ip route 172.16.1.0 255 255 255.0 10.1.1.2

Which command is required on the fastethernet 0/0 interface of RouterB to resolve this issue?

Options:

A.

RouterB(config-if)#lp helper-address 172.31.1.1

B.

RouterBiconfig-ififclp helper-address 255.255 255 255

C.

RouterB(config-if)#lp helper-address 172.16.1.1

D.

RouterB(config-if)#lp helper-address 172.16.1.2

Buy Now
Questions 16

Refer to Exhibit.

300-410 Question 16

A network administrator added one router in the Cisco DNA Center and checked its discovery and health from the Network Health Dashboard. The network administrator observed that the router is still showing up as unmonitored. What must be configured on the router to mount it in the Cisco DNA Center?

Options:

A.

Configure router with NetFlow data

B.

Configure router with the telemetry data

C.

Configure router with routing to reach Cisco DNA Center

D.

Configure router with SNMPv2c or SNMPv3 traps

Buy Now
Questions 17

Refer to the exhibit.

300-410 Question 17

AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server Which action resolves this issue?

Options:

A.

Match the authentication port

B.

Match the accounting port

C.

Correct the timeout value.

D.

Correct the shared secret.

Buy Now
Questions 18

Refer to the exhibit.

300-410 Question 18

The network administrator can see the DHCP discovery packet in R1. but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the FaO/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two.)

Options:

A.

service dhcp-relay command on R1

B.

ip dhcp option 82 command on R2

C.

service dhcp command on R1

D.

ip dhcp relay information enable command on R1

E.

ip dhcp relay information trust-all command on R2

Buy Now
Questions 19

Refer to the exhibit.

300-410 Question 19

Which configuration denies Telnet traffic to router 2 from 198A:0:200C::1/64?

A)

300-410 Question 19

B)

300-410 Question 19

C)

300-410 Question 19

D)

300-410 Question 19

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 20

Which configuration adds an IPv4 interface to an OSPFv3 process in OSPFv3 address family configuration?

Options:

A.

Router ospf3 1 address-family ipv4

B.

Router(config-router)#ospfv3 1 ipv4 area 0

C.

Router(config-if)#ospfv3 1 ipv4 area 0

D.

Router ospfv3 1 address-family ipv4 unicast

Buy Now
Questions 21

Refer to the exhibit.

300-410 Question 21

SanFrancisco and Boston routers are choosing slower links to reach each other despite the direct links being up Which configuration fixes the issue?

300-410 Question 21

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 22

An engineer configured Reverse Path Forwarding on an interface and noticed that the routes are dropped when a route lookup fails on that interface for a prefix that is available in the routing table Which interface configuration resolves the issue?

Options:

A.

ip verify unicast source reachable-via rx

B.

ip verify unicast source reachable-via any

C.

ip verify unicast source reachable-via allow-default

D.

ip verify unicast source reachable-via 12-src

Buy Now
Questions 23

Refer to the exhibit.

300-410 Question 23

The none area 0 routers in OSPF still receive more specific routes of 10.1.1.0.10.1.2.0.10.1.3.0 from area 0. Which action resolves the issue?

Options:

A.

Configure route summarization on OSPF-enabled interfaces.

B.

Summarize by using the summary-address 10.1.0.0 255.255.252.0 command.

C.

Summarize by using the area range command on ABRs

D.

Configure the summary-address 10.1.0.0 255.255.252.0 command under OSPF process.

Buy Now
Questions 24

Which protocol is used in a DMVPN network to map physical IP addresses to logical IP addresses?

Options:

A.

BGP

B.

LLDP

C.

EIGRP

D.

NHRP

Buy Now
Questions 25

Refer to the exhibit.

300-410 Question 25

R1 has a route map configured, which results in a loss of partial IPv6 prefixes for the BGP neighbor, resulting in service degradation. How can the full service be restored?

Options:

A.

The neighbor requires a soft reconfiguration, and this will clear the policy without resetting the BGP TCP connection.

B.

The prefix lit requires all prefixes that R1 is advertising to be added to it, and this will allow additional prefixes to be advertised.

C.

The route map requires a deny 20 statement without set conditions, and this will allow additional prefixes to be advertised.

D.

The route map requires a permit 20 statement without set conditions, and this will allow additional prefixes to be advertised.

Buy Now
Questions 26

Refer to the exhibit.

300-410 Question 26

An engineer configures two ASBRs 10 4 17.6 and 10 4 15 5 in an OSPF network to redistribute routes from EIGRP However, both ASBRs show the EIGRP routes as equal costs even though the next-hop router 10 4 17 6 is closer to R1 How should the network traffic to the EIGRP prefixes be sent via 10 4.17.6?

Options:

A.

The administrative distance should be raised to 120 from the ASBR 10.4.15 5.

B.

The redistributed prefixes should be advertised as Type 1

C.

The ASBR 10 4 17 6 should assign a tag to match and assign a lower metnc on R1

D.

The administrative distance should be raised to 120 from the ASBR 104.17.6

E.

The admitstrative distance should be raised to 120 from the ASBR 104 15.5.

F.

The redistributed prefixes should be advertised as Type 1.

G.

The ASBR 10 4 17 6 should assign a tag to match and assign a tower metnc on R1

Buy Now
Questions 27

300-410 Question 27

Refer to the exhibit. An engineer examines the BGP update for the IPv6 prefix 2001:db8::1/128. which should have been summarized into a /64 prefix. Which sequence of actions achieves the summarization?

Options:

A.

R1 is a route reflector client of a RR with a router ID of 1.1.1.1. and the originator of the prefix has a router ID of 3.3.3.3. Both routers belong to different ASs. The prefix is not advertised to any peer and must be advertised using the network statement on R3.

B.

R1 is a route reflector with a router ID of 3.3.3.3. and the originator of the prefix is a route reflector client, which has a router ID of 3.3.3.3. Both routers belong to the same AS Configure an aggregate address on the router with ID 1.1.1.1 for the prefix

C.

R1 is a route reflector with a router ID of 1.111. and the originator of the prefix is a route reflector client, which has a router ID of 3.3.3.3. Both routers belong to the same AS Configure an aggregate address on the router with ID 1.1.1.1 for the prefix

D.

R1 is a route reflector client of a RR with a router ID of 1.1.1.1. and the originator of the prefix has a router ID of 3.3.3.3. Both routers belong to the same AS. Configure an aggregate address on the router with ID 3 3.3.3 for the prefix.

Buy Now
Questions 28

300-410 Question 28

300-410 Question 28

Refer to the exhibit. Which configuration resolves the route filtering issue on R1 to redistribute all the routes except 172.16.2.48/28?

A)

300-410 Question 28

B)

300-410 Question 28

C)

300-410 Question 28

D)

300-410 Question 28

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 29

300-410 Question 29

Refer to the exhibit. An engineer must configure a per VRF for TACACS+ for company A. Which configuration on RTG-1 accomplishes the task?

300-410 Question 29

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 30

:585

Which type of ports are protected by IPv6 Source Guard?

Options:

A.

Layer 2 ports

B.

access ports

C.

Layer 3 ports

D.

trunk ports

Buy Now
Questions 31

In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router. Which command is required on both spoke routers to communicate directly to one another?

Options:

A.

ip nhrp map dynamic

B.

ip nhrp shortcut

C.

ip nhrp nhs multicast

D.

ip nhrp redirect

Buy Now
Questions 32

300-410 Question 32

Refer to the exhibit Which command must be configured to make VRF CCNP work?

300-410 Question 32

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 33

300-410 Question 33

Refer to the exhibit. The 130.130.130.0/24 route shows in the R2 routing table but is getting filtering toward R3. Which action resolves the issue?

Options:

A.

Automatic route summarization must be enabled on R2.

B.

The incoming filter list for all interfaces must be set on R2.

C.

IGP synchronization must be disabled on R2.

D.

The outgoing filter list for all interfaces must be set on R2.

Buy Now
Questions 34

Which Layer 3 VPN attribute allows different customers to connect to the same MPLS network wrth overlapping IP ranges?

Options:

A.

VRF

B.

RT

C.

MP-BGP

D.

RD

Buy Now
Questions 35

Refer to the exhibit.

300-410 Question 35

300-410 Question 35

The network administrator configured the network to connect two disjointed networks and ail the connectivity is up except the virtual link which causes area 250 to be unreachable. Which two configurations resolve this issue? (Choose two.)

Options:

A.

R2router ospf 1router-id 10.23.23.2

B.

R2router ospf 1no area area 234 virtual-link 10.34.34.4area 0 virtual-link 0.0.0.44

C.

R4router ospf 1no area 234 virtual-link 10.23.23.2area 234 virtual-link 0.0.0.22

D.

R2router ospf 1no area 234 virtual-link 10.34.34.4area 234 virtual-link 0.0.0.44

E.

R4router ospf 1no area area 234 virtual-link 10.23.23.2area 0 virtual-link 0.0.0.22

Buy Now
Questions 36

300-410 Question 36

300-410 Question 36

Refer to the exhibit. A customer finds that traffic from the application server (192.168.1.1) to the HUB site passes through a congested path that causes random packet drops. The NOC team influences the BGP path with MED on RB. but RD still sees that traffic coming from RA is not taking an alternate route. Which configuration resolves the issue?

A)

300-410 Question 36

B)

300-410 Question 36

C)

300-410 Question 36

D)

300-410 Question 36

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 37

Refer to the exhibit.

300-410 Question 37

An engineer must filter incoming EIGRP updates to allow only a set of specific prefixes. The distribute list is tested, and it filters out all routes except network 10.10.10.0/24. How should the engineer temporarily allow all prefixes to be learned by the routers again without adjusting the existing access list?

Options:

A.

A permit 20 statement should be added before completing the ACL with the required prefixes, and then the permit 20 statement can be removed.

B.

A permit any statement should be added before completing the ACL with the required prefixes and then the permit any statement can be removed.

C.

A continue statement should be added within the permit 10 statement before completing the ACL with the required prefixes, and then the continue statement can be removed.

D.

An extended access list must be used instead of a standard access list to accomplish the task

Buy Now
Questions 38

300-410 Question 38

Refer to lhe exhibit After an engineer configured a new Cisco rouler as a DHCP server, users reponed iwo primary issues:

Devices in the HR subnet have intermittent connectivity problems.

Workstations in the LEGAL subnet cannot obtain IP addresses.

Which configurations must the engineer apply to ROUTER_1 to restore connectivity for the affected devices?

300-410 Question 38300-410 Question 38

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 39

What are two characteristics of IPv6 Source Guard? (Choose two.)

Options:

A.

requires IPv6 snooping on Layer 2 access or trunk ports

B.

used in service provider deployments to protect DDoS attacks

C.

requires the user to configure a static binding

D.

requires that validate prefix be enabled

E.

recovers missing binding table entries

Buy Now
Questions 40

Refer to the exhibit.

300-410 Question 40

Reachability between servers in a network deployed with DHCPv6 is unstable. Which command must be removed from the configuration to make DHCPv6 function?

Options:

A.

ipv6 dhcp server DHCPPOOL

B.

ipv6 address 2001:0:1:4::/64

C.

ipv6 nd ra suppress

D.

address prefix 2001:0:1:4::/64 lifetime infinite infinite

Buy Now
Questions 41

Refer to the exhibit.

300-410 Question 41

R1 test its directly connected EIGRP peer 172.16.33.2 (SW1). Which configuration resolves the issue1?

Options:

A.

key chain EIGRP key 1 key-string Cisco!interface Gigabit Ethernet 2 IP authentication mode elgrp 88 md5 IP authentication key-chain elgrp 88 EIGRP

B.

key chain EIGRP key1 key-string Cisco!interface Gigabit Ethernet 2.10 IP authentication mode eigrp 88 md5 IP authentication key-chain eigrp 88 Cisco

C.

key chain EIGRP key 1 key-string Cisco !interface Gigabit Ethernet 2.10 IP authentication mode elgrp 88 md5 IP authentication key-chain eigrp 88 EIGRP

D.

key chain EIGRP key1 key-string Cisco !interface Gigabit Ethernet 2 IP authentication mode eigrp 88 md5 IP authentication key-chain elgrp 88 Cisco

Buy Now
Questions 42

Refer to the exhibit.

300-410 Question 42

A bank ATM site has difficulty connecting with the bank server. A network engineer troubleshoots the issue and finds that R4 has no active route to the bank ATM site. Which action resolves the issue?

Options:

A.

Advertise 10.10.30.0/24 subnet in R1 EIGRP AS.

B.

EIGRP peering between R3 and R4 to be fixed.

C.

EIGRP peering between R1 and R2 to be fixed.

D.

Advertise 10.10.30.0/24 subnet in R3 EIGRP AS.

Buy Now
Questions 43

A DMVPN network is preconfigured with tunnel 0 IP address 192.168.1.254 on the HUB, IP connectivity, crypto policies, profiles, and EIGRP AS 100. The NHRP password is ccnp123, and the network ID and tunnel key is EIGRP ASN Do not introduce a static route. Configure DMVPN connectivity between routers BR1 and BR2 to the HUB router using physical interface as the tunnel source to achieve these goals:

300-410 Question 43

300-410 Question 43

300-410 Question 43300-410 Question 43

Options:

Buy Now
Questions 44

:587

Which IP precedence value does BFD use to prioritize traffic within an infrastructure device?

Options:

A.

4

B.

5

C.

6

D.

7

Buy Now
Questions 45

A network administrator is troubleshooting a high utilization issue on the route processor of a router that was reported by NMS The administrator logged into the router to check the control plane policing and observed that the BGP process is dropping a high number of routing packets and causing thousands of routes to recalculate frequently. Which solution resolves this issue?

Options:

A.

Police the cir for BGP, conform-action transmit, and exceed action transmit.

B.

Shape the pir for BGP, conform-action set-prec-transmit, and exceed action set-frde-transmit.

C.

Shape the cir for BGP. conform-action transmit, and exceed action transmit.

D.

Police the pir for BGP, conform-action set-prec-transmit, and exceed action set-clp-transmit.

Buy Now
Questions 46

Refer to the exhibit.

300-410 Question 46

Which command must be configured to make VRF CCNP work?

Options:

A.

interface Loopback0vrf forwarding CCNP

B.

interface Loopback0ip address 10.1.1.1 255.255.255.0

C.

interface Loopback0ip address 10.1.1.1 255.255.255.0vrf forwarding CCNP

D.

interface Loopback0ip address 10.1.1.1 255.255.255.0ip vrf forwarding CCNP

Buy Now
Questions 47

Refer to the exhibit.

300-410 Question 47

Which two commands provide the administrator with the information needed to resolve the issue? (Choose two.)

Options:

A.

snmp user

B.

debug snmp engine-id

C.

debug snmpv3 engine-id

D.

debug snmp packet

E.

showsnmpv3 user

Buy Now
Questions 48

Refer to the exhibit.

A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log message stream it is impossible to capture the problem Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two)

Options:

A.

debug condition interface

B.

debug condition ip

C.

debug condition ospf neighbor

D.

debug condition session-id ADJCHG

E.

debug condition all

Buy Now
Questions 49

Which routing protocol is used by the PE router to advertise routes to a CE router without redistribution or static after removing the RD tag from the P router?

Options:

A.

IS-IS

B.

OSPF

C.

BGPIPv4

D.

MP-BGP

Buy Now
Questions 50

300-410 Question 50

Refer to the exhibit. An engineer configured SNMP Commîmes on UserSW2 switch, but the SNMP server cannot upload modified configurations to the switch. Which configuration resolves this issue?

Options:

A.

snmp-server community Ciscowruser RW 11

B.

snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22

C.

snmp-server community CiscOUs3r RW 11

D.

snmp-server group NETVIEW v2c priv read NETVIEW access 11

Buy Now
Questions 51

300-410 Question 51

Refer to the exhibit. The authentication is not working as desired and the user drops into user-exec mode. Which configuration resolves the issue?

300-410 Question 51

300-410 Question 51

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 52

Which two protocols are used by a P router to transfer VPN traffic between PE routers in an MPLS network? (Choose two.)

Options:

A.

BGP

B.

OSPF

C.

MP-BGP

D.

LDP

E.

RSVP

Buy Now
Questions 53

R1 and R2 are configured as eBGP neighbor , R1 is in AS100 and R2 is in AS200. R2 is advertising these networks to R1:

300-410 Question 53

The network administrator on R1 must improve convergence by blocking all subnets of 172-16.0.0/16 major network with a mask lower than 23 from coming in, Which set of configurations accomplishes the task on R1?

Options:

A.

ip prefix-list PL-1 deny 172.16.0.0/16 le 23ip prefix-list PL-1 permit 0.0.0.0/0 le 32!router bgp 100neighbor 192.168.100.2 remote-as 200neighbor 192.168.100.2 prefix-list PL-1 in

B.

ip prefix-list PL-1 deny 172.16.0.0/16 ge 23ip prefix-list PL-1 permit 0.0.0.0/0 le 32!router bgp 100neighbor 192.168.100.2 remote-as 200neighbor 192.168.100.2 prefix-list PL-1 in

C.

access-list 1 deny 172.16.0.0 0.0.254.255access-list 1 permit any!router bgp 100neighbor 192.168.100.2 remote-as 200neighbor 192.168.100.2 distribute-list 1 in

D.

ip prefix-list PL-1 deny 172.16.0.0/16ip prefix-list PL-1 permit 0.0.0.0/0!router bgp 100neighbor 192.168.100.2 remote-as 200neighbor 192.168.100.2 prefix-list PL-1 in

Buy Now
Questions 54

Refer to the exhibit.

300-410 Question 54

A network administrator must configure DMVPN tunnels between the hub and spoke with dynamic spoke-to-spoke tunnel capabilities using EIGRP. Which tunnel interface command must the network administrator configure to establish an EIGRP peer?

Options:

A.

no ip next-hop-self eigrp 1

B.

ip next-hop-self eigrp 1

C.

no Ip nhrp ntxt-hop-self

D.

ip nhrp next-hop-self

Buy Now
Questions 55

Refer to the exhibit.

300-410 Question 55

An engineer configured NetFlow on R1, but the NMS server cannot see the flow from R1. Which configuration resolves the issue?

Options:

A.

flow monitor Flowmonitor1destination 10.221.10.11

B.

flow exporter FlowAnalyzer1destination 10.221.10.11

C.

interface Ethernet0/1flow-destination 10.221.10.11

D.

interface Ethernet0/0flow-destination 10.221.10.11

Buy Now
Questions 56

300-410 Question 56

Options:

A.

access-list 20 permit 10.221.10.12

B.

snmp-server group NETVIEW v2c priv read NETVIEW access 20

C.

snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22

D.

access-list 20 permit 10.221.10.11

Buy Now
Questions 57

300-410 Question 57

Refer to the exhibit. R1 must advertise all loopback interfaces IP addresses to neighbors, but EIGRP neighbors receive a summary route. Which action resolves the issue?

Options:

A.

Redistribute connected routes into EIGRP Enable

B.

EIGRP on loopback Interfaces.

C.

Disable auto summarization on R1.

D.

Remove the 10.100.1.0/24 static route.

Buy Now
Questions 58

300-410 Question 58

Refer lo lhe exhibit. The Customer Edge rouler wants to use AS 100 as the preferred ISP for all external routes and ISP-2 as a backup.

300-410 Question 58

After this configuration, all the backup routes have disappeared from the BGP table on the Customer Edge router. Which set of configurations resolves the issue on the Customer Edge router?

A)

300-410 Question 58

B)

300-410 Question 58

C)

300-410 Question 58

D)

300-410 Question 58

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 59

What does the MP-BGP OPEN message contain?

Options:

A.

MPLS labels and the IP address of the router that receives the message

B.

the version number and the AS number to which the router belongs

C.

IP routing information and the AS number to which the router belongs

D.

NLRI, path attributes, and IP addresses of the sending and receiving routers

Buy Now
Questions 60

Refer to the exhibit.

300-410 Question 60

The branch router is configured with a default route toward the internet and has no routes configured for the HQ site that is connected through interface G2/0. The HQ router is fully configured and does not require changes. Which configuration on the branch router makes the intranet website (TCP port 80) available to the branch office users?

A)

300-410 Question 60

B)

300-410 Question 60

C)

300-410 Question 60

D)

300-410 Question 60

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 61

Which statement about MPLS LDP router ID is true?

Options:

A.

If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.

B.

The loopback with the highest IP address is selected as the router ID.

C.

The MPLS LDP router ID must match the IGP router ID.

D.

The force keyword changes the router ID to the specified address without causing any impact.

Buy Now
Questions 62

300-410 Question 62

300-410 Question 62

Refer to the exhibit A network engineer notices that the configured track option is down Which configuration resolves the issue*?

Options:

A.

ip sla schedule 10 start-time now

B.

ip sla schedule 10 start-time pending life forever

C.

ip sla schedule 10 no timeout

D.

ip sla schedule 10 no threshold

Buy Now
Questions 63

300-410 Question 63

Refer to the exhibit. The default route is not advertised to the neighboring router. Which action resolves the issue?

Options:

A.

Configure the redistribute static metric 200 subnets command under OSPF.

B.

Configure OSPF on the Dialer0 interface.

C.

Configure the network 0.0.0.0 255.255.255.255 area 0 command under OSPF.

D.

Configure the default-information originate command under OSPF.

Buy Now
Questions 64

Refer to the exhibit.

300-410 Question 64

300-410 Question 64

The network operation team observes a traffic forwarding issue between R2 and R3:

Ping and traceroute of loopback IP address from R2 to R3 is successful.

iBGP peering in AS 65101 and AS 65201 is up.

Which configuration resolves the issue?

Options:

A.

Configure MD5 password authentication on R2.

B.

Advertise R2 and R3 loopback IPs in AS 65101 and AS 65201.

C.

Remove MD5 password authentication on R3.

D.

Set up eBGP multihop on R2 and R3 routers.

Buy Now
Questions 65

300-410 Question 65

Refer to the exhibit. An enterprise user reports an access issue with IPv6 content on the Internet. The user can access IPv4 content that is at the data center. Which action resolves the issue with IPv6 content?

Options:

A.

Change Area 11 to Area 0 between routers B and C.

B.

Add a static route for 2001: db8:0:6::1/64 on router B RIB.

C.

Advertise the 2001:db8: e::e/64 route on the router D OSPF process.

D.

Enable default information to originate in IPv6 AF on router B.

Buy Now
Questions 66

300-410 Question 66

Refer to the exhibit. Which configuration resolves the issue?

A)

300-410 Question 66

B)

300-410 Question 66

C)

300-410 Question 66

D)

300-410 Question 66

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 67

300-410 Question 67

Refer to the exhibit. An engineer noticed that the router log messages do not have any information about when the event occurred. Which action should the engineer take when enabling service time stamps to improve the logging functionality at a granular level?

Options:

A.

Configure the debug uptime option

B.

Configure the msec option

C.

Configure the timezone option

D.

Configure the tog uptime option

Buy Now
Questions 68

300-410 Question 68

Refer to the exhibit. Which configuration resolves the IP SLA issue from R1 to the server?

Options:

A.

R6(config)#ip sla responder

B.

R6(config)#ip sla responder udp-echo ipaddress 10.60.60.6 po 5000

C.

R6(config)#ip sla 650 R6(config-ip-sla)ff udp-jitter 10.60.60.6

D.

R6(config)#ip sla schedule 10 life forever start-time now

Buy Now
Questions 69

Refer to the exhibit.

300-410 Question 69

Which routes from OSPF process 5 are redistributed into EIGRP?

Options:

A.

E1 and E2 subnets matching access list TO-OSPF

B.

E1 and E2 subnets matching prefix list TO-OSPF

C.

only E2 subnets matching access list TO-OSPF

D.

only E1 subnets matching prefix listTO-OS1

Buy Now
Questions 70

Refer to the exhibit.

300-410 Question 70

Redistribution is enabled between the routing protocols, and nowPC2 PC3, and PC4 cannot reach PC1. What are the two solutions to fix the problem? (Choose two.)

Options:

A.

Filter RIP routes back into RIP when redistributing into RIP in R2

B.

Filter OSPF routes into RIP FROM EIGRP when redistributing into RIP in R2.

C.

Filter all routes except RIP routes when redistributing into EIGRP in R2.

D.

Filter RIP AND OSPF routes back into OSPF from EIGRP when redistributing into OSPF in R2

E.

Filter all routes except EIGRP routes when redistributing into OSPF in R3.

Buy Now
Questions 71

What is a MPLS PHP label operation?

Options:

A.

Downstream node signals to remove the label.

B.

It improves P router performance by not performing multiple label lookup.

C.

It uses implicit-NULL for traffic congestion from source to destination forwarding

D.

PE removes the outer label before sending to the P router.

Buy Now
Questions 72

Refer to the exhibit.

300-410 Question 72

An engineer configures DMVPN and receives the hub location prefix of 10.1.1.0724 on R2 and R3 The R3 prefix of 10 1.3.0/24 is not received on R2. and the R2 prefix 10.1,2.0/24 is not received on R3. Which action reserves the issue?

Options:

A.

Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the command no ip split-horizon eigrp 10 on the tunnel interface of R1

B.

There is no spoke-to-spoke connection DMVPN configuration should be modified to enable a tunnel connection between R2 and R3 and neighbor relationship confirmed by use of the show ip eigrp neighbor command

C.

Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the no ip split-horizon eigrp 10 command on the Gi0/0 interface of R1.

D.

There is no spoke-to-spoke connection DMVPN configuration should be modified with a manual neighbor relationship configured between R2 and R3 and confirmed bb use of the show ip eigrp neighbor command.

Buy Now
Questions 73

300-410 Question 73

Refer to the exhibit. After recovering from a power failure. Ethernet0/1 stayed down while Ethernet0/0 returned to the up/up state The default route through ISP1 was not reinstated m the routing table until Ethernet0/1 also came up Which action resolves the issue?

Options:

A.

Reference the track object 1 in both static default routes

B.

Remove the references to the interface names from both static default routes

C.

Configure the default route through ISP1 with a higher administrative distance than 2.

D.

Add a static route to the 8 8.8 8/32 destination through the next hop 203.0.113.1

Buy Now
Questions 74

300-410 Question 74

300-410 Question 74

Refer to the exhibit SW100 cannot receive routes from R1 Which configuration resolves the issue?

300-410 Question 74

300-410 Question 74

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option C

Buy Now
Questions 75

:593

300-410 Question 75

Refer to the exhibit. Which two configurations are required on R2 to prevent a routing loop caused by the redistribution from OSPF back into EIGRP? (Choose two.)

300-410 Question 75

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

E.

Option E

Buy Now
Questions 76

300-410 Question 76

Refer to the exhibit.

A shoe retail company implemented the uRPF solution for an antispoofing attack. A network engineer received the call that the branch A server is under an IP spoofing attack. Which configuration must be implemented to resolve the attack?

A)

300-410 Question 76

B)

300-410 Question 76

C)

300-410 Question 76

D)

300-410 Question 76

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 77

A DMVPN network is preconfigured with tunnel 0 IP address 192.168.1.254 on the HUB, IP connectivity, crypto policies, profiles, and EIGRP AS 100. The NHRP password is ccnp123, and the network ID and tunnel key is EIGRP ASN Do not introduce a static route. Configure DMVPN connectivity between routers BR1 and BR2 to the HUB router using physical interface as the tunnel source to achieve these goals:

300-410 Question 77

300-410 Question 77

300-410 Question 77300-410 Question 77

Options:

Buy Now
Questions 78

Drag and drop the operations from the left onto the locations where the operations are performed on the right.

300-410 Question 78

Options:

Buy Now
Questions 79

Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.

300-410 Question 79

Options:

Buy Now
Questions 80

After some changes in the routing policy, it is noticed that the router in AS 45123 is being used as a transit AS router for several service provides. Which configuration ensures that the branch router in AS 45123 advertises only the local networks to all SP neighbors?

A)

300-410 Question 80

B)

300-410 Question 80

C)

300-410 Question 80

D)

300-410 Question 80

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 81

Which option is the best for protecting CPU utilization on a device?

Options:

A.

fragmentation

B.

COPP

C.

ICMP redirects

D.

ICMP unreachable messages

Buy Now
Questions 82

How does LDP operate in an MPLS network?

Options:

A.

When topology changes occur such as a router failure, LDP generates peer discovery messages that terminate the LDP season to propagate an LSP change.

B.

When an adjacent LSR receives LDP discovery messages. TCP two-way handshake ensures that the LDP session has unidirectional connectivity.

C.

Peer routers establish the LDP session, and the LDP neighbors maintain and terminate the session by exchanging messages

D.

LDP notification messages allow LERs to exchange label information to determine the next hops within a particular LSP.

Buy Now
Questions 83

Refer to the exhibit.

300-410 Question 83

A)

300-410 Question 83

B)

300-410 Question 83

C)

300-410 Question 83

D)

300-410 Question 83

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Buy Now
Questions 84

:583

300-410 Question 84

Refer to the exhibit. R1 is directly connected to R2 over network 10.100.14.0/24. An engineer configures R1 to advertise a static route that is connected to a local loopback for network 10.100.13.0/24. The network is not in the routing table of R2. Which action resolves the issue?

Options:

A.

The redistribution command isincorrect on R1 The default metric metric 200 should be inducted with the redistribution command.

B.

The Loopback interface on R1 is administratively down The interface should be enabled with the no shutdown command

C.

R2 must use a different OSPF process number and should be changed lo ospf 1 to match R1

D.

The redistribution command is incorrect on R1 The keyword subnets should be included with the redistribution command

Buy Now
Questions 85

300-410 Question 85

Refer to the exhibit. The traffic from spoke to hub is dropping. The operations team observes:

R2-R3 link is down due to the fiber cut.

R2 and R5 receive traffic from R1 in AS 65101.

R3 and R5 receive traffic from R4 in AS 65201.

Which configuration resolves the issue?

A)

300-410 Question 85

B)

300-410 Question 85

C)

300-410 Question 85

D)

300-410 Question 85

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 86

Refer to the exhibit.

300-410 Question 86

Which action adds the 10 1 7.6-32 route to the BGP table?

Options:

A.

Add a static roue for the 10 1 7 &32 network

B.

Add the network 10.1.7.6 mask 255.255.255.255 backdoor command

C.

Add summaty-address10.1.7.6.255.255.2550

D.

Add the network 10.1.7.6 mask 255.255.255.255 command

Buy Now
Questions 87

Refer to the exhibit.

300-410 Question 87

A network administrator notices these console messages from host 10.11.110.12 originating from interface E1/0. The administrator considers this an unauthorized attempt to access SNMP on R1. Which action prevents the attempts to reach R1 E1/0?

Options:

A.

Configure IOS control plane protection using ACL 90 on interface E1/0

B.

Configure IOS management plane protection using ACL 90 on interface E1/0

C.

Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12

D.

Add a permit statement including the host 10.11.110.12 into ACL 90

Buy Now
Questions 88

An engineer creates a default static route on a router with a hop of 10.1.1.1. On inspection, the engineer finds the router has two VRFs, Red and Blue. The next hop is valid for both VRFs and exists in each assigned VRF. Which configuration achieves connectivity?

A)

300-410 Question 88

B)

300-410 Question 88

C)

300-410 Question 88

D)

300-410 Question 88

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 89

Refer to the exhibit.

300-410 Question 89

A network engineer finds that PC1 is accessing the hotel website to do the booking but fails to make payment. Which action resolves the issue?

Options:

A.

Allow stub network 10.10.202.168/30 on router R3 OSPF.

B.

Decrease the AD to 5 OSPF route 192.168.94.0 on R1.

C.

Increase the AD to 200 of static route 192.168.94.0 on R3.

D.

Configure a reverse route on R1 for PC1 172.16.1.0/24.

Buy Now
Questions 90

Network engineer must configure an ElGRP stub router at a site that advertises only connected and summary routes. Which configuration performs this task?

A)

300-410 Question 90

B)

300-410 Question 90

C)

300-410 Question 90

D)

300-410 Question 90

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 91

300-410 Question 91

300-410 Question 91

Refer to the exhibit. Site1 must perform unequal cost load balancing toward the segments behind Site2 and Site3. Some of the routes are getting load balanced but others are not. Which configuration allows Site1 to load balance toward all the LAN segments of the remote routers?

300-410 Question 91

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 92

Refer to the exhibit.

300-410 Question 92

A customer reports that user traffic of bank XYZ to the AAA server is not using the primary path via the R3-R2 link. The network team observes:

No fiber is cut on links R2 and R3.

As101 and AS 201 routers established BGP peering.

Which configuration resolves the issue?

A)

300-410 Question 92

B)

300-410 Question 92

C)

300-410 Question 92

D)

300-410 Question 92

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 93

An engineer must establish a connection between two CE routers for two customers with overlapping IP addresses Customer_a is connected to interfaces Gig0/0, and Customer_b is connected to interfaces Gig0/1. Routers CE1 and CE2 are configured as follows:

300-410 Question 93

Drag and drop the code snippets from the right onto the boxes in the configuration to establish the needed connection. Snippets may be used more than once.

300-410 Question 93

Options:

Buy Now
Questions 94

Which method changes the forwarding decision that a router makes without first changing the routing table or influencing the IP data plane?

Options:

A.

nonbroadcast multiaccess

B.

packet switching

C.

policy-based routing

D.

forwarding information base

Buy Now
Questions 95

Drag and drop the MPLS VPN device types from me left onto the definitions on the right.

300-410 Question 95

Options:

Buy Now
Questions 96

What is the role of a route distinguisher via a VRF-Lite setup implementation?

Options:

A.

It extends the IP address to identify which VFP instance it belongs to.

B.

It manages the import and export of routes between two or more VRF instances

C.

It enables multicast distribution for VRF-Lite setups to enhance EGP routing protocol capabilities

D.

It enables multicast distribution for VRF-Lite setups to enhance IGP routing protocol capabilities

Buy Now
Questions 97

Refer to the exhibit.

300-410 Question 97

An administrator noticed that after a change was made on R1, the timestamps on the system logs did not match the clock. What is the reason for this error?

Options:

A.

An authentication error with the NTP server results in an incorrect timestamp.

B.

The keyword localtime is not defined on the timestamp service command.

C.

The NTP server is in a different time zone.

D.

The system clock is set incorrectly to summer-time hours.

Buy Now
Questions 98

What is a role of route distinguishers in an MPLS network?

Options:

A.

Route distinguishers define which prefixes are imported and exported on the edge router

B.

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

C.

Route distinguishers are used for label bindings.

D.

Route distinguishers make a unique VPNv4 address across the MPLS network

Buy Now
Questions 99

Drag and drop the operations from the left onto the locations where the operations are performed on the right.

300-410 Question 99

Options:

Buy Now
Questions 100

Which statement about route distinguishers in an MPLS network is true?

Options:

A.

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

B.

Route distinguishers are used for label bindings.

C.

Route distinguishers make a unique VPNv4 address across the MPLS network.

D.

Route distinguishers define which prefixes are imported and exported on the edge router.

Buy Now
Questions 101

Refer to the exhibit.

300-410 Question 101

An engineer has configured DMVPN on a spoke router. What is the WAN IP address of another spoke router within the DMVPN network?

Options:

A.

172.18.46.2

B.

192.168.1.4

C.

172.18.16.2

D.

192.168.1.1

Buy Now
Questions 102

Refer to the exhibit.

300-410 Question 102

An engineer is trying to generate a summary route in OSPF for network 10.0.0.0/8, but the

summary route does not show up in the routing table. Why is the summary route missing?

Options:

A.

The summary-address command is used only for summarizing prefixes between areas.

B.

The summary route is visible only in the OSPF database, not in the routing table.

C.

There is no route for a subnet inside 10.0.0.0/8, so the summary route is not generated.

D.

The summary route is not visible on this router, but it is visible on other OSPF routers in the same area.

Buy Now
Questions 103

Drag and drop the addresses from the left onto the correct IPv6 filter purposes on the right.

300-410 Question 103

Options:

Buy Now
Questions 104

300-410 Question 104

Refer to the exhibit. an engineer is trying to get 192.168.32.100 forwarded through 10.1.1.1, but it was forwarded through 10.1.1.2. What action forwards the packets through 10.1.1.1?

Options:

A.

Configure EIGRP to receive 192.168.32.0 route with lower admin distance.

B.

A. Configure EIGRP to receive 192.168.32.0 route with longer prefix than /19.

C.

A. Configure EIGRP to receive 192.168.32.0 route with lower metric.

D.

A. Configure EIGRP to receive 192.168.32.0 route with equal or longer prefix than /24.

Buy Now
Questions 105

Refer the exhibit.

300-410 Question 105

Which action resolves intermittent connectivity observed with the SNMP trap

packets?

Options:

A.

Decrease the committed burst Size of the mgmt class map

B.

Increase the CIR of the mgmt class map

C.

Add a new class map to match TCP traffic

D.

Add one new entry in the ACL 120 to permit the UDP port 161

Buy Now
Questions 106

Refer to the exhibit.

300-410 Question 106

A network engineer for AS64512 must remove the inbound and outbound traffic from link A during maintenance without closing the BGP session so that there ............ a backup link over link A toward the ASN. Which BGP configuration on R1 accomplishes this goal?

A)

300-410 Question 106

B)

300-410 Question 106

C)

300-410 Question 106

D)

300-410 Question 106

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 107

Refer to the exhibit.

300-410 Question 107

The network administrator configured VRF lite for customer A. The technician at the remote site misconfigured VRF on the router. Which configuration will resolve connectivity for both sites of customer_a?

300-410 Question 107

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 108

Refer to the exhibit.

300-410 Question 108

Which subnet is redistributed from EIGRP to OSPF routing protocols?

Options:

A.

10.2.2.0/24

B.

10.1.4.0/26

C.

10.1.2.0/24

D.

10.2.3.0/26

Buy Now
Questions 109

Which is statement about IPv6 inspection is true?

Options:

A.

It teams and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

B.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables

C.

It teams and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables

D.

It team and secures binding for stateless autoconfiguration addresses in Layer 2 neighbor tables.

Buy Now
Questions 110

Which protocol does VRF-Lite support?

Options:

A.

IS-IS

B.

ODR

C.

EIGRP

D.

IGRP

Buy Now
Questions 111

Which protocol does MPLS use to support traffic engineering?

Options:

A.

Tag Distribution Protocol (TDP)

B.

Resource Reservation Protocol (RSVP)

C.

Border Gateway Protocol (BGP)

D.

Label Distribution Protocol (LDP)

Buy Now
Questions 112

Drag and drop the DHCP messages from the left onto the correct uses on the right.

300-410 Question 112

Options:

Buy Now
Questions 113

Refer to the exhibit.

300-410 Question 113

The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new IP address. Which two actions must be taken to resolve this Issue? (Choose two.)

Options:

A.

Configure the server to use DHCP on the network with default gateway 200 30.40.100.

B.

Configure the server with a static IP address and default gateway.

C.

Configure the router to exclude a server IP address.

D.

Configure the server to use DHCP on the network with default gateway 200 30.30.100.

E.

Configure the router to exclude a server IP address and default gateway.

Buy Now
Questions 114

Refer to the exhibit.

300-410 Question 114

The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host

192.168.10.10cannot SSH to host 192.168.100.10 even though the flow is permitted. Which action

resolves the issue without opening full access to this router?

Options:

A.

Move the SSH entry to the beginning of the ACL

B.

Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works

C.

Temporarily remove the ACL from the interface to see if the flow works

D.

Run the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it

Buy Now
Questions 115

Refer to the exhibit.

300-410 Question 115

An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?

Options:

A.

no ip ssh disable

B.

ip ssh enable

C.

ip ssh version 2

D.

crypto key generate rsa

Buy Now
Questions 116

Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

Options:

A.

multi-paths eibgp 2

B.

maximum-paths 2

C.

Maximum-paths ibgp 2

D.

multi-paths 2

Buy Now
Questions 117

Refer to the following output:

Router#show ip nhrp detail

10.1.1.2/8 via 10.2.1.2, Tunnel1 created 00:00:12, expire 01:59:47

TypE. dynamic, Flags: authoritative unique nat registered used

NBMA address: 10.12.1.2

What does the authoritative flag mean in regards to the NHRP information?

Options:

A.

It was obtained directly from the next-hop server.

B.

Data packets are process switches for this mapping entry.

C.

NHRP mapping is for networks that are local to this router.

D.

The mapping entry was created in response to an NHRP registration request.

E.

The NHRP mapping entry cannot be overwritten.

Buy Now
Questions 118

An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table. What should be configured to accomplish this task?

Options:

A.

set ip next-hop

B.

set ip default next-hop

C.

set ip next-hop recursive

D.

set ip next-hop verify-availability

Buy Now
Questions 119

Which list defines the contents of an MPLS label?

Options:

A.

20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

B.

32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

C.

20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

D.

32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

Buy Now
Questions 120

Refer to the exhibit.

300-410 Question 120

Which interface configuration must be configured on the spoke A router to enable a dynamic DMVPN tunnel with the spoke B router?

300-410 Question 120

300-410 Question 120

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 121

Refer to the exhibit.

300-410 Question 121

In which circumstance does the BGP neighbor remain in the idle condition?

Options:

A.

if prefixes are not received from the BGP peer

B.

if prefixes reach the maximum limit

C.

if a prefix list is applied on the inbound direction

D.

if prefixes exceed the maximum limit

Buy Now
Questions 122

Refer to the exhibit.

300-410 Question 122

Network operations cannot read or write any configuration on the device with this configuration from the operations subnet. Which two configurations fix the issue? (Choose two.)

Options:

A.

Configure SNMP rw permission in addition to community ciscotest.

B.

Modify access list 1 and allow operations subnet in the access list.

C.

Modify access list 1 and allow SNMP in the access list.

D.

Configure SNMP rw permission in addition to version 1.

E.

Configure SNMP rw permission in addition to community ciscotest 1.

Buy Now
Questions 123

Refer to the exhibit.

300-410 Question 123

Which routes from OSPF process 5 are redistributed into EIGRP?

Options:

A.

E1 and E2 subnets matching access list TO-OSPF

B.

E1 and E2 subnets matching prefix list TO-OSPF

C.

only E2 subnets matching access list TO-OSPF

D.

only E1 subnets matching prefix listTO-OS1

Buy Now
Questions 124

Which statement about IPv6 ND inspection is true?

Options:

A.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

B.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

C.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

D.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Buy Now
Questions 125

Refer to the exhibit.

300-410 Question 125

An engineer configures a static route on a router, but when the engineer checks the route

to the destination, a different next hop is chosen. What is the reason for this?

Options:

A.

Dynamic routing protocols always have priority over static routes.

B.

The metric of the OSPF route is lower than the metric of the static route.

C.

The configured AD for the static route is higher than the AD of OSPF.

D.

The syntax of the static route is not valid, so the route is not considered.

Buy Now
Questions 126

What is a limitation of IPv6 RA Guard?

Options:

A.

It is not supported in hardware when TCAM is programmed

B.

It does not offer protection in environments where IPv6 traffic is tunneled.

C.

It cannot be configured on a switch port interface in the ingress direction

D.

Packets that are dropped by IPv6 RA Guard cannot be spanned

Buy Now
Questions 127

Refer to the exhibits.

300-410 Question 127

Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two

commands are missing? (Choose two.)

Options:

A.

The ip nhrp redirect command is missing on the spoke routers.

B.

The ip nhrp shortcut command is missing on the spoke routers.

C.

The ip nhrp redirect commands is missing on the hub router.

D.

The ip nhrp shortcut commands is missing on the hub router.

E.

The ip nhrp map command is missing on the hub router.

Buy Now
Questions 128

Which security feature can protect DMVPN tunnels?

Options:

A.

IPsec

B.

TACACS+

C.

RTBH

D.

RADIUS

Buy Now
Questions 129

Refer to the following output:

Router#show ip nhrp detail

10.1.1.2/8 via 10.2.1.2, Tunnel1 created 00:00:12, expire 01:59:47

TypE. dynamic, Flags: authoritative unique nat registered used

NBMA address: 10.12.1.2

What does the authoritative flag mean in regards to the NHRP information?

Options:

A.

It was obtained directly from the next-hop server.

B.

Data packets are process switches for this mapping entry.

C.

NHRP mapping is for networks that are local to this router.

D.

The mapping entry was created in response to an NHRP registration request.

E.

The NHRP mapping entry cannot be overwritten.

Buy Now
Questions 130

Which two statements about redistributing EIGRP into OSPF are true? (Choose two)

Options:

A.

The redistributed EIGRP routes appear as type 3 LSAs in the OSPF database

B.

The redistributed EIGRP routes appear as type 5 LSAs in the OSPF database

C.

The administrative distance of the redistributed routes is 170

D.

The redistributed EIGRP routes appear as OSPF external type 1

E.

The redistributed EIGRP routes as placed into an OSPF area whose area ID matches the EIGRPautonomous system number

F.

The redistributed EIGRP routes appear as OSPF external type 2 routes in the routing table

Buy Now
Questions 131

An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1.255.255.255.252 along with the summary route. After finishing configuration, the customer complained not receiving summary route with specific loopback address. Which two configurations will fix it? (Choose two.)

300-410 Question 131

Options:

A.

Configure access-list 1 permit 10.1.1.0.0.0.0.3.

B.

Configure access-list 1 permit 10.1.1.1.0.0.0.252.

C.

Configure access-list 1 and match under route-map Leak-Route.

D.

Configure route-map Leak-Route permit 10 and match access-list 1.

E.

Configure route-map Leak-Route permit 20.

Buy Now
Questions 132

Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPV3 categories on the right.

300-410 Question 132

Options:

Buy Now
Questions 133

Refer to the exhibit.

300-410 Question 133

ISP 1 and ISP 2 directly connect to the Internet. A customer is tracking both ISP links to

achieve redundancy and cannot see the Cisco IOS IP SLA tracking output on the router console. Which command is missing from the IP SLA configuration?

Options:

A.

Start-time 00:00

B.

Start-time 0

C.

Start-time immediately

D.

Start-time now

Buy Now
Questions 134

Which protocol does VRF-Lite support?

Options:

A.

IS-IS

B.

ODR

C.

EIGRP

D.

IGRP

Buy Now
Questions 135

Which statement about IPv6 RA Guard is true?

Options:

A.

It does not offer protection in environments where IPv6 traffic is tunneled.

B.

It cannot be configured on a switch port interface in the ingress direction.

C.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

D.

It is not supported in hardware when TCAM is programmed.

Buy Now
Questions 136

Refer to the exhibit.

300-410 Question 136

In which circumstance does the BGP neighbor remain in the idle condition?

Options:

A.

if prefixes are not received from the BGP peer

B.

if prefixes reach the maximum limit

C.

if a prefix list is applied on the inbound direction

D.

if prefixes exceed the maximum limit

Buy Now
Questions 137

Drag and drop the OSPF adjacency states from the left onto the correct descriptions on the right.

300-410 Question 137

Options:

Buy Now
Questions 138

Drag and Drop the IPv6 First-Hop Security features from the left onto the definitions on the right.

300-410 Question 138

Options:

Buy Now
Questions 139

During the maintenance window an administrator accidentally deleted the Telnet-related

configuration that permits a Telnet connection from the inside network (Eth0/0) to the outside of the networking between Friday – Sunday night hours only. Which configuration resolves the issue?

A)

300-410 Question 139

B)

300-410 Question 139

C)

300-410 Question 139

D)

300-410 Question 139

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 140

Refer to the exhibit.

300-410 Question 140

Which configuration configures a policy on R1 to forward any traffic that is sourced from

the 192.168.130.0/24 network to R2?

300-410 Question 140

300-410 Question 140

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 141

A network engineer needs to verify IP SLA operations on an interface that shows on indication of

excessive traffic.

Which command should the engineer use to complete this action?

Options:

A.

show frequency

B.

show track

C.

show reachability

D.

show threshold

Buy Now
Questions 142

Which statement about IPv6 ND inspection is true?

Options:

A.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

B.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

C.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

D.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Buy Now
Questions 143

Refer to the exhibit.

300-410 Question 143

What does the imp-null tag represent in the MPLS VPN cloud?

Options:

A.

Pop the label

B.

Impose the label

C.

Include the EXP bit

D.

Exclude the EXP bit

Buy Now
Questions 144

Refer to the exhibit.

300-410 Question 144

An engineer is trying to block the route to 192.168.2.2 from the routing table by using the

configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?

Options:

A.

Use an extended access list instead of a standard access list.

B.

Change sequence 10 in the route-map command from permit to deny.

C.

Use a prefix list instead of an access list in the route map.

D.

Add this statement to the route map: route-map RM-OSPF-DL deny 20.

Buy Now
Questions 145

Refer to the exhibit.

300-410 Question 145

Which interface configuration must be configured on the spoke A router to enable a dynamic DMVPN tunnel with the spoke B router?

300-410 Question 145

300-410 Question 145

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 146

Drag and drop the actions from the left into the correct order on the right to configure a policy to avoid following packet forwarding based on the normal routing path.

300-410 Question 146

Options:

Buy Now
Questions 147

An engineer is troubleshooting on the console session of a router and turns on multiple debug commands. The console screen is filled with scrolling debug messages that none of the commands can be verified if entered correctly or display any output. Which action allows the engineer to see entered console commands while still continuing the analysis of the debug messages?

Options:

A.

Configure the logging synchronous command

B.

Configure the no logging console debugging command globally

C.

Configure the logging synchronous level all command

D.

Configure the term no mon command globally

Buy Now
Questions 148

What are two functions of IPv6 Source Guard? (Choose two.)

Options:

A.

It uses the populated binding table for allowing legitimate traffic.

B.

It works independent from IPv6 neighbor discovery.

C.

It denies traffic from unknown sources or unallocated addresses.

D.

It denies traffic by inspecting neighbor discovery packets for specific pattern.

E.

It blocks certain traffic by inspecting DHCP packets for specific sources.

Buy Now
Questions 149

Refer to the exhibit.

300-410 Question 149

A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer fails. Which action resolves this issue?

Options:

A.

The SSH service must be enabled with the crypto key generate rsa command.

B.

The SCP service must be enabled with the ip scp server enable command.

C.

The Python interpreter must first be enabled with the guestshell enable command.

D.

The SSH access must be allowed on the VTY lines using the transport input ssh command.

Buy Now
Questions 150

How are MPLS Layer 3 VPN services deployed?

Options:

A.

The RD and RT values must match under the VRR

B.

The RD and RT values under a VRF must match on the remote PE router

C.

The import and export RT values under a VRF must always be the same.

D.

The label switch path must be available between the local and remote PE routers.

Buy Now
Questions 151

Which two protocols work in the control plane of P routers across the MPLS cloud? (choose two)

Options:

A.

LSP

B.

RSVP

C.

ECMP

D.

LDP

E.

MPLS OAM

Buy Now
Questions 152

300-410 Question 152

Refer to the exhibit. The administrator configured route advertisement to a remote low resources router to use only the default route to reach any network but failed. Which action resolves this issue?

Options:

A.

Change the direction of the distribute-list command from out to in.

B.

Remove the line with the sequence number 5 from the prefix list.

C.

Remove the prefix keyword from the distribute-list command.

D.

Remove the line with the sequence number 10 from the prefix list.

Buy Now
Questions 153

Refer to the exhibit.

300-410 Question 153

A company with autonomous system number AS65401 has obtained IP address block 209.165.200.224/27 fro, ARIN. The company needed more IP addresses and was assigned block209.165.202.128/27 from ISP2. An engineer is ISP1 reports they are receiving ISP2 routes from AS65401. Which configuration onR1 resolves the issue?

A)

300-410 Question 153

B)

300-410 Question 153

C)

300-410 Question 153

D)

300-410 Question 153

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 154

Refer to the exhibit.

300-410 Question 154

A network administrator reviews the branch router console log to troubleshoot the OSPF adjacency issue with the DR router. Which action resolves this issue?

Options:

A.

Advertise the branch WAN interface matching subnet for the DR site.

B.

Configure matching hello and dead intervals between sites.

C.

Configure the WAN interface for DR site in the related OSPF area.

D.

Stabilize the DR site flapping link to establish OSPF adjacency.

Buy Now
Questions 155

What are two characteristics of VRF instance? (Choose two.)

Options:

A.

All VRFs share customers routing and CEF tables .

B.

An interface must be associated to one VRF.

C.

Each VRF has a different set of routing and CEF tables

D.

It is defined by the VPN membership of a customer site attached to a P device.

E.

A customer site can be associated to different VRFs

Buy Now
Questions 156

What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)

Options:

A.

The VPNv4 address is used to advertise the MPLS VPN label.

B.

RD is prepended to the IPv4 route to make it unique.

C.

MP-BGP is used to allow overlapping IPv4 addresses between customers to advertisethrough the network.

D.

The IPv4 address is needed to tag the MPLS label.

E.

The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4prefix.

Buy Now
Questions 157

Drag and drop the MPLS concepts from the left onto the descriptions on the right.

300-410 Question 157

Options:

Buy Now
Questions 158

Refer to the exhibit.

300-410 Question 158

Which two actions should be taken to access the server? (Choose two.)

Options:

A.

Modify the access list to add a second line of permit ip any

B.

Modify the access list to deny the route to 192.168.2.2.

C.

Modify distribute list seq 10 to permit the route to 192.168.2.2.

D.

Add a sequence 20 in the route map to permit access list 1.

E.

Add a floating static route to reach to 192.168.2.2 with administrative distance higher than OSPF

Buy Now
Questions 159

An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted. Which action resolves the issue?

Options:

A.

Configure all devices for SNMPv3 informs with priv.

B.

Configure all devices for SNMPv3 informs with auth.

C.

Configure all devices for SNMPv3 traps with auth.

D.

Configure all devices for SNMPv3 traps with priv.

Buy Now
Questions 160

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

Options:

A.

Packets are not forwarded to the specific next hop.

B.

Packets are forwarded based on the routing table.

C.

Packets are forwarded based on a static route.

D.

Packets are forwarded to the specific next hop.

Buy Now
Questions 161

An engineer must configure a Cisco router to initiate secure connections from the router to other devices in the network but kept failing. Which two actions resolve the issue? (Choose two.)

Options:

A.

Configure a source port for the SSH connection to initiate

B.

Configure a TACACS+ server and enable it

C.

Configure transport input ssh command on the console

D.

Configure a domain name

E.

Configure a crypto key to be generated

Buy Now
Questions 162

Refer to the exhibit.

300-410 Question 162

A client is concerned that passwords are visible when running this show archive log config all.

Which router configuration is needed to resolve this issue?

Options:

A.

MASS-RTR(config-archive-log-cfg)#password encryption aes

B.

MASS-RTR(config)#aaa authentication arap

C.

MASS-RTR(config)#service password-encryption

D.

MASS-RTR(config-archive-log-cfg)#hidekeys

Buy Now
Questions 163

Refer to the exhibit.

300-410 Question 163

R1 is being monitored using SNMP and monitoring devices are getting only partial information. What action should be taken to resolve this issue?

Options:

A.

Modify the CoPP policy to increase the configured exceeded limit for SNMP.

B.

Modify the access list to include snmptrap.

C.

Modify the CoPP policy to increase the configured CIR limit for SNMP.

D.

Modify the access list to add a second line to allow udp any any eq snmp

Buy Now
Questions 164

What are two functions of LDP? (Choose two.)

Options:

A.

It is defined in RFC 3038 and 3039.

B.

It requires MPLS Traffic Engineering.

C.

It advertises labels per Forwarding Equivalence Class.

D.

It must use Resource Reservation Protocol.

E.

It uses Forwarding Equivalence Class

Buy Now
Questions 165

Drag and drop the MPLS VPN device types from the left onto the definitions on the right.

300-410 Question 165

Options:

Buy Now
Questions 166

Refer to the exhibit.

300-410 Question 166

The neighbor relationship is not coming up Which two configurations bring the adjacency up? (Choose two)

Options:

A.

NYrouter ospf 1area 0 authentication message-digest

B.

LAinterface E 0/0ip ospf message-digest-key 1 md5 Cisco123

C.

NYinterface E 0/0no ip ospf message-digest-key 1 md5 Cisco123ip ospf authentication-key Cisco123

D.

LAinterface E 0/0ip ospf authentication-key Cisco123

E.

LArouter ospf 1area 0 authentication message-digest

Buy Now
Questions 167

300-410 Question 167

Refer to the exhibit. The network administrator configured the branch router for IPv6 on the E 0/0 interface The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on the branch router to bring the IPv6 neighbors up?

Options:

A.

Enable the IPv4 address family under the E 0/0 interface by using the address-family Ipv4 unicast command

B.

Disable IPv6 on the E 0/0 interface using the no ipv6 enable command

C.

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

D.

Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E 0/0 interface.

Buy Now
Questions 168

Which feature drops packets if the source address is not found in the snooping table?

Options:

A.

IPv6 Source Guard

B.

IPv6 Destination Guard

C.

IPv6 Prefix Guard

D.

Binding Table Recovery

Buy Now
Questions 169

Refer to the exhibit.

300-410 Question 169

A network administrator is discovering a Cisco Catalyst 9300 and a Cisco WLC 3504 in Cisco DNA Center. The Catalyst 9300 is added successfully However the WLC is showing [ error "uncontactable" when the administrator tries to add it in Cisco DNA Center. Which action discovers WLC in Cisco DNA Center successfully?

Options:

A.

Copy the .cert file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

B.

Delete the WLC 3504 from Cisco DNA Center and add it to Cisco DNA Center again.

C.

Add the WLC 3504 under the hierarchy of the Catalyst 9300 connected devices.

D.

Copy the .pern file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

Buy Now
Questions 170

What does the PE router convert the Ipv4 prefix to within an MPLS VPN?

Options:

A.

VPN-IPv4 prefix combined with the 64-bit route distinguisher

B.

48-bit route combining the IP and PE router-id

C.

prefix that combines the ASN, PE router-id, and IP prefix

D.

eBGP path association between the PE and CE sessions

Buy Now
Questions 171

Refer to the exhibit.

300-410 Question 171

300-410 Question 171

An engineer configured BGP between routers R1 and R3 The BOP peers cannot establish neighbor adjacency to be able to exchange routes. Which configuration resolves this issue?

Options:

A.

R3router bgp 6502address-family ipv6neighbor AB01:2011:7:100::1 activate

B.

R1router bgp 6501address-family ipv6neighbor AB01:2011:7:100;:3 activate

C.

R3router bgp 6502neighbor AB01:2011:7:100::1 ebgp-muttlhop 255

D.

R1router bgp 6501 neighborAB01:2011:7:100::3ebgp-multihop255

Buy Now
Questions 172

Refer to Exhibit.

300-410 Question 172

Traffic from the branch network should route through HQ R1 unless the path is unavailable. An engineer tests this functionality by shutting down interface on the BRANCH router toward HQ_R1 router but 192.168.20.0/24 is no longer reachable from the branch router. Which set of configurations resolves the issue?

Options:

A.

HQ_R1(config)# ip sla responderHQ_R1(config)# ip sla responder icmp-echo 172.16.35.2

B.

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.1

C.

HQ_R2(config)# ip sla responderHQ_R2(config)# ip sla responder icmp-echo 172.16.35.5

D.

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.2

Buy Now
Questions 173

Refer to the exhibit.

300-410 Question 173

Which action resolves the adjacency issue?

Options:

A.

Match the hello interval timers.

B.

Configure the same EIGRP process IDs.

C.

Match the authentication keys.

D.

Configure the same autonomous system numbers.

Buy Now
Questions 174

A customer reports to the support desk that they cannot print from their PC to the local printer id:401987778. Which tool must be used to diagnose the issue using Cisco DNA Center Assurance?

Options:

A.

application trace

B.

path trace

C.

ACL trace

D.

device trace

Buy Now
Questions 175

Refer to the exhibit.

300-410 Question 175

When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic to pass through the interface Which command must be configured to resolve the issue?

Options:

A.

access-class INTERNET in

B.

ipv6 traffic-filter INTERNET in

C.

ipv6 access-class INTERNET in

D.

ip access-group INTERNET in

Buy Now
Questions 176

Refer to Exhibit.

A network administrator has successfully configured DMVPN topology between a hub and two spoke routers. Which two configuration commands should establish direct communications between spoke 1 and spoke 2 without going through the hub? (Choose two).

300-410 Question 176

Options:

A.

At the hub router, configure the ip nhrp shortcut command.

B.

At the spoke routers, configure the ip nhrp spoke-tunnel command.

C.

At the hub router, configure ip nhrp redirect the command

D.

At the spoke routers, configure the ip nhrp shortcut command.

E.

At the hub router, configure tne Ip nhrp spoke-tunnel command

Buy Now
Questions 177

An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network. Which BGP attribute must the engineer configure to avoid using the high-delay ISP link if the second ISP link is up?

Options:

A.

LOCAL_PREF

B.

MED

C.

WEIGHT

D.

AS-PATH

Buy Now
Questions 178

A DMVPN single hub topology is using IPsec + mGRE with OSPF. What should be configured on the hub to ensure it will be the designated router?

Options:

A.

tunnel interface of the hub with ip nhrp ospf dr

B.

OSPF priority to 0

C.

route map to set the metrics of learned routes to 110

D.

OSPF priority greater than 1

Buy Now
Questions 179

Refer to the exhibit.

300-410 Question 179

AS65510 iBGP is configured for directly connected neighbors. R4 cannot ping or traceroute network 192 168.100.0/24 Which action resolves this issue?

Options:

A.

Configure R4 as a route reflector server and configure R1 as a route reflector client

B.

Configure R1 as a route reflector server and configure R2 and R3 as route reflector clients

C.

Configure R4 as a route reflector server and configure R2 and R3 as route reflector clients.

D.

Configure R1 as a route reflector server and configure R4 as a route reflector client

Buy Now
Questions 180

300-410 Question 180

Refer to the exhibit. R1 and R2 cannot establish an EIGRP adjacency. Which action establishes EIGRP adjacency?

Options:

A.

Remove the current autonomous system number on one of the routers and change to a different value.

B.

Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

C.

Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

D.

Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.

Buy Now
Questions 181

Refer to the exhibit.

300-410 Question 181

300-410 Question 181

The administrator can see the traps for the failed login attempts, but cannot see the traps of successful login attempts. What command is needed to resolve the issue?

Options:

A.

Configure logging history 2

B.

Configure logging history 3

C.

Configure logging history 4

D.

Configure logging history 5

Buy Now
Questions 182

An engineer configured access list NON-CISCO in a policy to influence routes

300-410 Question 182

What are the two effects of this route map configuration? (Choose two.)

Options:

A.

Packets are not evaluated by sequence 10.

B.

Packets are evaluated by sequence 10.

C.

Packets are forwarded to the default gateway.

D.

Packets are forwarded using normal route lookup.

E.

Packets are dropped by the access list.

Buy Now
Questions 183

A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company’s security policy. The administrator can still ping to www.cisco.com Which interface should the access list 101 be applied to resolve this issue?

300-410 Question 183

Options:

A.

Interface G0/48 in the incoming direction

B.

Interface G0/0 in the outgoing direction.

C.

Interface S1/0 in the outgoing direction.

D.

Interface G0/0 in the incoming direction.

Buy Now
Questions 184

Refer to the exhibit.

300-410 Question 184

R1 is connected with R2 via GigabitEthernet0/0, and R2 cannot ping R1. What action will fix the issue?

Options:

A.

Fix route dampening configured on the router.

B.

Replace the SFP module because it is not supported.

C.

Fix IP Event Dampening configured on the interface.

D.

Correct the IP SLA probe that failed.

Buy Now
Questions 185

Refer to the exhibit.

300-410 Question 185

A user cannot SSH to the router. What action must be taken to resolve this issue?

Options:

A.

Configure transport input ssh

B.

Configure transport output ssh

C.

Configure ip ssh version 2

D.

Configure ip ssh source-interface loopback0

Buy Now
Questions 186

Refer to the exhibit.

300-410 Question 186

A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands Which action resolves the issue?

Options:

A.

Configure TACACS+ synchronization with the Active Directory admin group

B.

Configure the username from a local database

C.

Configure full access for the username from TACACS+ server

D.

Configure an authorized IP address for this user to access this router

Buy Now
Questions 187

300-410 Question 187

Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).

router bgp 64511

network 172.16.20.0 mask 255.255.255.0

network 172.16.21.0 mask 255.255.255.0

network 172.16.22.0 mask 255.255.255.0

network 172.16.23.0 mask 255.255.255.0

aggregate-address 172.16.20.0 255.255.252.0

After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?

Options:

A.

router bgp 64511aggregate-address 172.16.20.0 255.255.252.0 summary-only

B.

router bgp 64511neighbor 192.168.100.1 summary-onlyneighbor 192.168.200.2 summary-only

C.

interface E 0/0ip bgp suppress-map BLOCK_SPECIFIC!interface E 0/1ip bgp suppress-map BLOCK_SPECIFIC!ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC

D.

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC!router bgp 64511aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

Buy Now
Questions 188

When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on

that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

Options:

A.

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction

B.

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

C.

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction

D.

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction

Buy Now
Questions 189

Refer to the exhibit.

300-410 Question 189

The R1 and R2 configurations are:

300-410 Question 189

The neighbor is not coming up. Which two sets of configurations bring the neighbors up? (Choose two.)

Options:

A.

R2ip route 10.1.1.1 255.255.255.255 192.168.1.1!router bgp 200neighbor 10.1.1.1 tti-security hops 1neighbor 10.1.1.1 update-source loopback 0

B.

R2ip route 10.1.1.1 255.255.255.255 192.168.1.1!router bgp 200neighbor 10.1.1.1 disable-connected-checkneighbor 10.1.1.1 update-source loopback 0

C.

R2ip route 10.1.1.2 255.255.255.255 192.168.1.2!router bgp 100neighbor 10.1.1.2 ttl-security hops 1neighbor 10.1.1.2 update-source loopback 0

D.

R1ip route 10.1.1.2 255.255.255.255 192.168.1.2!router bgp 100neighbor 10.1.1.1 ttl-security hops 1neighbor 10.1.1.2 update-source loopback 0

E.

R1ip route 10.1.1.2 255.255.255.255 192.168.1.2!router bgp 100neighbor 10.1.1.2 disable-connected-checkneighbor 10.1.1.2 update-source Loopback0

Buy Now
Exam Code: 300-410
Exam Name: Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI)
Last Update: Nov 16, 2025
Questions: 630

PDF + Testing Engine

$74.6  $186.49

Testing Engine

$59.8  $149.49
buy now 300-410 testing engine

PDF (Q&A)

$55  $137.49
buy now 300-410 pdf