Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 91:

  In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router.

  Which command is required on both spoke routers to communicate directly to one another?

  A. ip nhrp map dynamic
  B. ip nhrp shortcut
  C. ip nhrp nhs multicast
  D. ip nhrp redirect
  B. ip nhrp shortcut

• Question 92:

  Refer to the exhibit.

  

  A CoPP policy is implemented to allow specific control traffic, but the traffic is not matching as expected and is getting unexpected behavior of control traffic. Which action resolves the issue?

  A. Use match-any instruction in class-map.
  B. Create a separate class map against each ACL.
  C. Create a separate class map for ICMP traffic.
  D. Use default-class to match ICMP traffic.
  A. Use match-any instruction in class-map.

  ---

  match-all in class-map statement means that all ACLs have to match match-any in class-map statement means that at least one ACL has to match.

  For this reason why no traffic was matching.

• Question 93:

  Routers R1 and R2 have been configured to use Bidirectional Forwarding Detection? What is the advantage of doing this?

  A. It is able to discover local link failures at layer 1 and provide automatic re-routing
  B. It is able to discover local link failures at layer 1 and provide automatic re-routing
  C. It is able to discover local link failures at layer 1 only and provides detection for this in less than one second.
  D. It is able to discover local link failures at layers 1 and 2 and provides detection for this in less than one second.
  D. It is able to discover local link failures at layers 1 and 2 and provides detection for this in less than one second.

• Question 94:

  Which of the following is NOT true of the PPP Session Phase of PPPoE?

  A. PPP options are negotiated
  B. BNG sends a PPPoE Active Discovery Offer to the client
  C. Authentication is performed
  D. Once link setup is complete, data will be transferred across the PPP link within PPPoE headers
  B. BNG sends a PPPoE Active Discovery Offer to the client

  ---

  The Broadband Network Gateway does not send a PPPoE Active Discovery Offer to the client during the PPP Session Phase. That action occurs during the Active Discovery Phase.

  During the PPP Session Phase, the following steps occur:

  PPP options are negotiated.

  Authentication is performed.

  Network Control Protocols (NCP) for any Layer 3 protocols that will traverse the link are started, and these Layer 3 packets will be transmitted within PPPoE headers.

  Objective:

  Layer 2 Technologies

  Sub-Objective:

  Configure and verify PPP

  References:

  Cisco Support Community > ASR9000 BNG debugging PPPoE sessions Cisco > Cisco Security Appliance Command Line Configuration Guide, Version 8.0 > Configuring the PPPoE Client > PPPoE Client Overview

• Question 95:

  You manage the EIGRP subnet in your organization. You have enabled EIGRP for IPv6 on all the routers in the EIGRP AS 355 using the following commands on all the routers: The ipv6 unicast-routing command in global configuration mode The interface command in global configuration mode The ipv6 enable command in interface configuration mode The ipv6 eigrp command in interface configuration mode The ipv6 router eigrp command in global configuration mode The eigrp router-id command in global configuration mode During verification, you discover that EIGRP for IPv6 is not running on the routers. Which of the following should be done to fix the issue?

  A. The ipv6 address command should be executed in interface configuration mode.
  B. The ipv6 address command should be executed in router configuration mode.
  C. The eigrp router-id command should be executed in interface configuration mode.
  D. The eigrp router-id command should be executed in router configuration mode.
  D. The eigrp router-id command should be executed in router configuration mode.

  ---

  The eigrp router-id command should be executed in router configuration mode to fix the issue. This command specifies a fixed router IPv4 address to the router. If this command is missing or incorrectly configured on the router, EIGRP for IPv6 will not run properly.

  Another command that you should perform so that EIGRP for IPv6 runs on the routers is the no shutdown command. You should execute this command in interface configuration mode. The no shutdown command is necessary because all the interfaces with EIGRP for IPv6 enabled on them are in a shutdown state by default.

  A sample configuration to implement EIGRP for IPv6 on a router is as follows:

  rtrA(config)# ipv6 unicast-routing

  rtrA(config) # interface Fa0/1

  rtrA(config-if) # ipv6 enable

  rtrA(config-if) # ipv6 eigrp 355

  rtrA(config-if)# no shutdown

  rtrA(config-if) # exit

  rtrA(config)# ipv6 router eigrp 355

  rtrA(config-rtr)# eigrp router-id 1.1.1.1

  The two options stating that the ipv6 address command should be executed on the routers are incorrect. EIGRP for IPv6 can be configured on router interfaces without explicitly specifying a global unicast IPv6 address. If you specify the ipv6 enable command, as in this scenario, then the ipv6 address command is not required.

  The option stating that the eigrp router-id command should be executed in interface configuration mode is incorrect. This command should be executed in router configuration mode instead of interface or global configuration modes.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Identify IPv6 addressing and subnetting

  References:

  Cisco IPv6 Implementation Guide, Release 15.2MandT > Implementing EIGRP for IPv6 > How to Implement EIGRP for IPv6 > Enabling EIGRP for IPv6 on an Interface

• Question 96:

  Refer to the exhibit.

  

  The network administrator can see the DHCP discovery packet in R1, but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the Fa0/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two)

  A. service dhcp command on R1
  B. ip dhcp relay information trust-all command on R2
  C. service dhcp-relay command on R1
  D. ip dhcp option 82 command on R2
  E. ip dhcp relay information enable command on R1
  A. service dhcp command on R1
  B. ip dhcp relay information trust-all command on R2

• Question 97:

  Refer to the exhibit.

  

  An engineer must troubleshoot an issue with AAA authentication that affected the user's login to router R1. Which command allows the configured user to authenticate?

  A. aaa authentication login default group radius local
  B. aaa authentication login default group radius tacacs+
  C. aaa authentication login default group tacacs+
  D. aaa authentication login default group radius
  C. aaa authentication login default group tacacs+

• Question 98:

  The following command was executed on the router R61.

  R61#debug ip packet detail 105

  What type of information will this debug command generate?

  A. all information on packets that are not fast switched by the router named 105
  B. all information on packets that are not fast switched by the local router
  C. information on packets that are not fast switched as filtered by the access list 105
  D. information on packets sent from router 105
  C. information on packets that are not fast switched as filtered by the access list 105

  ---

  This debug command will generate information on packets that are not fast switched as filtered by the access list 105. The output of certain debug commands can generate a tremendous amount of output, and in most cases a lot of information you don't need. It can even impact the performance of the router while the debug command is in effect. The best way to reduce this output is to filter it through an extended access list.

  To do this, you create the access list as you would any other access list and then reference the access list number when you execute the debug command. For example, to restrict the output of the debug ip packet detail command to the traffic generate between the devices with the IP addresses 10.10.10.2 and 13.1.1.1, you would create the following extended access list:

  access-list 105 permit icmp host 10.10.10.2 host 13.1.1.1

  access-list 105 permit icmp host 13.1.1.1 host 10.10.10.2

  When you then execute the debug ip packet detail command and reference the list number of 105, it will only display debug output concerning communications between these IP addresses.

  The number 105 in the command does not reference a router name or number. It references an access list number.

  The command will not display all information on packets that are not fast switched by the local router. It will be limited to information as filtered in the access list 105.

  The command will not list information on packets sent from router 105. The number 105 refers to an access list number, not a router.

  Objective:

  Infrastructure Security

  Sub-Objective:

  Configure and verify router security features

  References:

  Home > Support > Technology support > Dial and access > Integrated services digital networks (isdn), channel-associated signaling (cas) > Troubleshoot and alerts > Important Information on Debug Commands Cisco > Cisco IOS Debug Command Reference - Commands I through L > debug ip packet

• Question 99:

  Refer to the exhibit. An engineer is trying to connect to R1 via Telnet with no success.

  

  Which configuration resolves the issue?

  A. tacacs server prod address ipv4 10.221.10.10 exit
  B. ip route 10.221.10.10 255.255.255.255 ethernet 0/1
  C. ip route 10.221.10.11 255.255.255.255 ethernet 0/1
  D. tacacs server prod address ipv4 10.221.10.11 exit
  D. tacacs server prod address ipv4 10.221.10.11 exit

  ---

  Looking at the debug output, second to the last line, the log suggests that it is attempting to use server x.x.10.10 when the diagram specifies that the server is actually x.x.10.11.

  This would require the tacacs group to be modified to use the correct server:

  `tacacs server prod`

  `address ipv4 x.x.10.11`

  `exit`

• Question 100:

  Which of the following are valid TFTP error codes? (Choose two.)

  A. Error Code 1 - File not found
  B. Error Code 2 - Unknown error
  C. Error code 3 - Invalid user
  D. Error code 6 - File already exists
  E. Error code 8 - Undefined error
  A. Error Code 1 - File not found
  D. Error code 6 - File already exists

  ---