Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 141:

  Refer to the exhibit.

  

  A network engineer must establish communication between three different customer sites with these requirements:

  Site-A: must be restricted to access to any users at Site-B or Site-C.

  Site-B and Site-C must be able to communicate between sites and share routes using OSPF.

  PE interface configuration:

  interface FastEthernet0/0

  ip vrf forwarding Site-A

  !

  interface FastEthernet0/1

  ip vrf forwarding SharedSites

  !

  interface FastEthernet0/2

  ip vrf forwarding SharedSites

  Which configuration meets the requirements?

  A. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 10 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 1
  B. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 20 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 1
  C. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 10 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 0
  D. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 20 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 0
  D. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 20 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 0

• Question 142:

  Refer to the exhibit.

  

  An administrator must harden a router, but the administrator failed to test the SSH access successfully to the router. Which action resolves the issue?

  A. SSH must be allowed with the transport output ssh command.
  B. Configure enable secret to log in to the device.
  C. SSH syntax must be ssh -l user ip to log in to the remote device.
  D. Configure SSH on the remote device to log in using SSH.
  C. SSH syntax must be ssh -l user ip to log in to the remote device.

  ---

  https://community.cisco.com/t5/network-management/unable-to-ssh-to-router/td-p/4047453

• Question 143:

  Refer to the exhibit. The ISP router is fully configured for customer A and customer B using the VRF-Lite feature. What is the minimum configuration required for customer A to communicate between routers A1 and A2?

  

  A. A1: interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2: interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0
  B. A1: interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0 A2: interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0
  C. A1: interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 vrf A net 172.31.100.1 0.0.0.255 area 0 A2: interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 vrf A net 172.31.200.1 0.0.0.255 area 0
  D. A1: interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2: interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0
  D. A1: interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2: interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0

  ---

  A1 and A2 routers do not know they belong to VRF A. The two interfaces of ISP (which are connected to A1 and A2) should be configured like this (we only show the configure of one interface): ISP router: interface g0/0 description ISP->To_CustomerA ip vrf forwarding A ip address 172.31.100.2 255.255.255.0 router ospf100 vrf A network 172.31.200.2 0.0.0.255 area 0

• Question 144:

  Which of the following statements is TRUE concerning a 6to4 tunnel?

  A. The IPv6 packet is encapsulated in an IPv4 packet using an IPv4 protocol type of 41.
  B. The 6to4 tunnel method includes a 20-byte IPv6 header with no options and an IPv4 payload.
  C. The maximum transmission unit is increased by 20 octets with the 6to4 tunnel method.
  D. The IPv6 packet has its header removed and replaced with an IPv4 header with the 6to4 tunnel method.
  A. The IPv6 packet is encapsulated in an IPv4 packet using an IPv4 protocol type of 41.

  ---

  When an IPv6 packet is tunneled across a portion of the network that does not support IPv6, the IPv6 packet is encapsulated in an IPv4 packet using an IPv4 protocol type of 41. When it reaches the other end of the tunnel, the IPv4 portion is stripped off and the packet is routed the rest of the way by using the remaining IPv6 header.

  This method does not include a 20-byte IPv6 header with no options and an IPv4 payload. On the contrary, it includes a 20-byte IPv4 header with no options and an IPv6 payload.

  The maximum transmission unit is not increased by 20 octets with this method. Rather, it is decreased by 20 bytes due to the extra overhead.

  The IPv6 packet does not have its header removed and replaced with an IPv4 header. It encapsulates the entire IPv6 packet within an IPv4 header.

  Objective:

  Network Principles

  Sub-Objective:

  Recognize proposed changes to the network

  References:

  Cisco > Home > Support > Technology Support > IP > IP Version 6 > Configure > Configuration Examples and Technotes > Tunneling IPv6 through an IPv4 Network

• Question 145:

  Refer to the exhibit. After redistribution is enabled between the routing protocols; PC2, PC3, and PC4 cannot reach PC1.

  Which action can the engineer take to solve the issue so that all the PCs are reachable?

  

  A. Set the administrative distance 100 under the RIP process on R2.
  B. Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.
  C. Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.
  D. Redistribute the directly connected interfaces on R2.
  A. Set the administrative distance 100 under the RIP process on R2.

  ---

  This Config works: Answer A

  R2#sh run | s rip redistribute rip metric 1 1 1 1 1 router rip version 2 redistribute eigrp 100 metric 1 network 10.0.0.0 network 12.0.0.0 distance 100 no auto-summary

  R3#sh run | s router router eigrp 100 network 34.34.34.0 0.0.0.255 redistribute ospf 100 metric 1 1 1 1 1 router ospf 100 redistribute eigrp 100 subnets network 10.3.3.0 0.0.0.255 area 0 network 23.23.23.0 0.0.0.255 area 0

  Answer B is wrong: the Correct is to filter 10.1.1.10 when redistribute from EIGRP to OSPF: Configs are

  ip prefix-list DNA seq 5 deny 10.1.1.0/24 ip prefix-list DNA seq 10 permit 0.0.0.0/0 le 32 route-map DDD permit 10 match ip address prefix-list DNA ! router eigrp 100 network 34.34.34.0 0.0.0.255 redistribute ospf 100 metric 1 1 1 1 1 ! router ospf 100 redistribute eigrp 100 subnets route-map DDD network 10.3.3.0 0.0.0.255 area 0 network 23.23.23.0 0.0.0.255 area 0 !

• Question 146:

  Which of the following are valid IPv6 Router Advertisement (RA) Guard modes? (Choose two.)

  A. Guard mode
  B. Host mode
  C. Router mode
  D. Open mode
  E. Closed mode
  B. Host mode
  C. Router mode

• Question 147:

  Refer to the exhibit.

  

  After recovering from a power failure. Ethernet0/1 stayed down while Ethernet0/0 returned to the up/up state. The default route through ISP1 was not reinstated m the routing table until Ethernet0/1 also came up.

  Which action resolves the issue?

  A. Reference the track object 1 in both static default routes
  B. Remove the references to the interface names from both static default routes
  C. Configure the default route through ISP1 with a higher administrative distance than 2.
  D. Add a static route to the 8 8.8 8/32 destination through the next hop 203.0.113.1
  D. Add a static route to the 8 8.8 8/32 destination through the next hop 203.0.113.1

  ---

  IP SLA operation to check ISP-1 should not rely on ISP-2 interface/connection--reach 8.8.8.8 via ISP-2 in this case. in this case either;

  -the address for icmp-echo should be changed to 203.0.113.1 OR

  -Add static route 8.8.8.8/32 -->203.0.113.1

• Question 148:

  You are configuring Netflow and you are explaining its operation to your assistant. He wants to know what constitutes a flow.

  Which of the following items are NOT used to distinguish one flow from another?

  A. source IP address
  B. destination IP address
  C. source port number
  D. Layer 2 protocol type
  D. Layer 2 protocol type

  ---

  Layer 2 protocol type is not used to distinguish one flow from another. A flow in Netflow refers to an individual communication session between two devices. A flow is defined by the combination of the following seven key fields:

  Source IP address

  Destination IP address

  Source port number

  Destination port number

  Layer 3 protocol type

  Type of service (ToS)

  Input logical interface

  Objective:

  Infrastructure Services

  Sub-Objective:

  Configure and verify Cisco NetFlow

  References:

  NetFlow Configuration Guide, Cisco IOS Release 12.4T > Cisco IOS NetFlow Overview

• Question 149:

  Examine the exhibit.

  

  What additional EIGRP configuration is required to ensure that all destination networks are reachable if all routers are running pre- 15.0 versions of the IOS?

  A. The eigrp stub receive only command should be executed on routers A and B.
  B. A static route to 10.10.0.0/16 via the interface to router D should be configured at router C.
  C. The no auto-summary router configuration command should be executed on router C.
  D. The passive interface command should be executed on routers A and B.
  E. The no auto-summary command should be executed on routers A and B.
  E. The no auto-summary command should be executed on routers A and B.

  ---

  To ensure the full network is reachable, routers A and B must advertise their networks without first summarizing them to the class B 172.31.0.0/16 address in updates to router C. Otherwise, router C would incorrectly assume that it has two paths to the 172.31.0.0 classful network: one via router A and the other via router B. Therefore, routers A and B should be configured with the no auto-summary command so that they advertise 172.31.16.0/24 and 172.31.17.0/24, respectively. Starting with version 15,

  EIGRP auto summarization is disabled by default

  Summarization is beneficial in most cases. It reduces the number of routes in the neighboring router tables and effectively contains EIGRP queries. The problem with discontiguous networks (or subnets) using EIGRP is that EIGRP will automatically summarize on the classful network boundary. By configuring the router to disable automatic summarization with the no auto-summary command, the routers will be able to see all of the individual subnets, not just a summary.

  The no auto-summary command must be issued from router configuration mode as shown below:

  router(config-router)# no auto-summary

  Note that auto summarization is effective only on directly connected routes. For example, in the scenario exhibit, router C does not need to have auto summarization disabled in order to advertise the subnets to routers D and E. Since those subnet routes were learned via a route advertisement, they will be advertised to routers D and E without summarization.

  In some situations, it may be necessary to turn off auto summarization globally while still summarizing specific networks. If you need to manually summarize a set of networks, the following command when executed in EIGRP configuration mode can summarize those specific networks while auto summarization is disabled:

  ip summary-address [eigrp as-number] [address] [mask]

  For example:

  router10(config)# int Ethernet0/0

  router10(config-if)# ip summary-address eigrp

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify manual and autosummarization with any routing protocol

  References:

  Summarization and Auto-summarization in EIGRP

• Question 150:

  The network administrator configured the router for Control Plane Policing to limit OSPF traffic to be policed to 1 Mbps. Any traffic that exceeds this limit must also be allowed at this point for traffic analysis. The router configuration is:

  access-list 100 permit ospf any any ! class-map CM-OSPF match access-group 100 ! policy-map PM-COPP class CM-OSPF police 1000000 conform-action transmit ! control-plane service-policy output PM-COPP

  The Control Plane Policingfailed to monitor and police OSPF traffic. Which configuration resolves this issue?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A