Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 101:

  Refer to the exhibit.

  

  An IT staff member comes into the office during normal office hours and cannot access devices through SSH Which action should be taken to resolve this issue?

  A. Modify the access list to use the correct IP address.
  B. Configure the correct time range.
  C. Modify the access list to correct the subnet mask
  D. Configure the access list in the outbound direction.
  A. Modify the access list to use the correct IP address.

  ---

  To ACL should be permit tcp 101 10.1.1.1 0.0.0.0

• Question 102:

  Which OSI model is used to insert an MPLS label?

  A. between Layer 2 and Layer 3
  B. between Layer 5 and Layer 6
  C. between Layer 1 and Layer 2
  D. between Layer 3 and Layer 4
  A. between Layer 2 and Layer 3

• Question 103:

  Which Ipv6 first-hop security feature helps to minimize denial of service attacks?

  A. IPv6 Router Advertisement Guard
  B. IPv6 Destination Guard
  C. DHCPv6 Guard
  D. IPv6 MAC address filtering
  B. IPv6 Destination Guard

  ---

  The Destination Guard feature helps in minimizing denial-of-service (DoS) attacks. It performs address resolutions only for those addresses that are active on the link,and requires the FHS binding table to be populated with the help of the IPv6 snooping feature.The feature enables the filtering of IPv6 traffic based on the destinationaddress, and blocks the NDP resolution for destination addresses that are not found in the binding table. By default, the policy drops traffic coming for an unknowndestination.

• Question 104:

  How does an MPLS Layer 3 VPN differentiate the IP address space used between each VPN?

  A. by RT
  B. by address family
  C. by RD
  D. by MP-BGP
  C. by RD

• Question 105:

  Refer to the exhibit. R2 is a route reflector, and R1 and R3 are route reflector clients. The route reflector learns the route to 172.16.25.0/24 from R1, but it does not advertise to R3. What is the reason the route is not advertised?

  

  A. R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.
  B. Route reflector setup requires full IBGP mesh between the routers.
  C. In route reflector setup, only classful prefixes are advertised to other clients.
  D. In route reflector setups, prefixes are not advertised from one client to another.
  A. R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.

• Question 106:

  Refer to the exhibit. A network engineer applied a filter for LSA traffic on OSPFv3 interarea routes on the area 5 ABR to protect advertising the internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes. After the respective route filtering configuration is applied on the ABR, area 5 routes are not visible on any of the areas. How must the filter list be applied on the ABR to resolve this issue?

  

  A. in the "out" direction for area 20 on router R2
  B. in the "in" direction for area 5 on router R1
  C. in the "out" direction for area 5 on router R1
  D. in the "in" direction for area 20 on router R2
  D. in the "in" direction for area 20 on router R2

  ---

• Question 107:

  You are the network administrator for a corporate organization. You changed the BGP configuration, then executed the following command on the rtrA router:

  clear ip bgp 172.161.18.5 soft out

  What is the result of this command?

  A. The outbound session between rtrA and 172.161.18.5 is cleared and reset.
  B. The inbound session between rtrA and 172.161.18.5 is cleared and reset.
  C. The outbound session between rtrA and 172.161.18.5 is cleared.
  D. The inbound session between rtrA and 172.161.18.5 is cleared.
  C. The outbound session between rtrA and 172.161.18.5 is cleared.

  ---

  The outbound TCP session between rtrA and 172.161.18.5 is cleared as a result of the given command. The given command is a variation of the clear ip bgp command.

  The clear ip bgp command allows you to clear and reset the sessions or routing updates in BGP routers so that changes in the BGP configuration can take effect. You can use this command to clear and reset the sessions for all neighbors, a specific neighbor, or a group of neighbors. Use an asterisk (*) or the group name instead of the IP address to apply the command on all the neighbors of a router or a particular peer group, respectively.

  For example, if you execute the clear ip bgp * command, all the sessions currently active are cleared and reset. If you use the clear ip bgp 172.161.18.5 command on rtrA, the current session between rtrA and its neighbor 172.161.18.5 is cleared and reset. Such a reset of sessions is known as hard reset. When hard resets are performed, the neighbor relationship is broken and must be reestablished.

  The soft keyword, which is optional, indicates a soft reset. This keyword allows you to clear the BGP table without resetting the session. If you do not use this keyword, the sessions are cleared and then reset with a hard reset.

  The out keyword specifies that the command should be applied to only outbound sessions. If you use the in keyword, the command is applied to only inbound sessions.

  The outbound TCP session between rtrA and 172.161.18.5 is not cleared and reset by the given command. If the clear ip bgp 172.161.18.5 out command was used, then the outbound session between rtrA and 172.161.18.5 would be both cleared and reset.

  The inbound TCP session between rtrA and 172.161.18.5 is not cleared and reset by the given command. If the clear ip bgp 172.161.18.5 in command were used, then the inbound TCP session between rtrA and 172.161.18.5 would be cleared and then reset.

  The inbound TCP session between rtrA and 172.161.18.5 is not cleared by the given command. If the in keyword were used instead of the out keyword in the given command, the outbound TCP session between the rtrA and 172.161.18.5 would be cleared.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Describe, configure, and verify BGP peer relationships and authentication

  References:

  Cisco IOS IP Routing: BGP Command Reference > clear ip bgp

• Question 108:

  What are two features of BFD? (Choose two.)

  A. reliable
  B. replaces hello messages
  C. requires routing protocols
  D. scalable
  E. intensive on CPU for Layer 2 links
  B. replaces hello messages
  D. scalable

• Question 109:

  Which of the following statements are true regarding two EIGRP routers to become neighbors?

  A. Must have identical hello and dead timers
  B. Must utilize unique router ID's
  C. Must have matching MTU's on the physical network links that connect the routers.
  D. Must use the same ASN.
  D. Must use the same ASN.

• Question 110:

  When configuring a DMVPN solution, which of the following technologies makes it possible for the spoke routers to use dynamic IP addressing?

  A. IPsec
  B. mGRE
  C. NHRP
  D. Dynamic routing protocols
  C. NHRP

  ---

  Next Hop Resolution Protocol (NHRP) allows the spoke routers to register their IP addresses with the NHRP server, which is the hub router. It also allows the spoke routers to then learn the physical IP addresses of the other spoke routers from the hub router, allowing for GRE links to be built dynamically as needed between the spokes. This eliminates the need for the traffic to go through the hub router.

  Dynamic Multipoint VPN (DMVPN) technology leverages the following associated technologies:

  IPsec

  mGRE

  Dynamic routing protocols

  NHRP

  Cisco Express Forwarding

  It makes it possible to build the hub router once, and add spokes later, making no additional changes to the hub. The spokes are able to register with the hub and dynamically build their own connections to other spokes using the IP addresses learned from the hub using NHRP. DMVPN also allows IPsec point-to-point GRE tunnels to be built to new spokes with no IPsec peering configuration. The multipoint GRE technology (mGRE) allows a single physical interface on the hub to be used for all spoke

  connections.

  Finally, the routing protocols used by DMVPN allow the routers to share routing information, while Cisco Express Forwarding (CEF) is a switching technology that improves performance while reducing the load on the CPUs of the routers.

  Objective:

  VPN Technologies

  Sub-Objective:

  Describe DMVPN (single hub)

  References:

  Cisco > Dynamic Multipoint VPN (DMVPN) Design Guide (Version 1.1) > DMVPN Design Overview