Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 171:

  Refer to the exhibit.

  

  A user cannot SSH to the router. What action must be taken to resolve this issue?

  A. Configure transport input ssh
  B. Configure transport output ssh
  C. Configure ip ssh version 2
  D. Configure ip ssh source-interface loopback0
  A. Configure transport input ssh

  ---

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960- x_cg_chapter_01001.html

• Question 172:

  When an EIGRP router starts, it sends a hello packet out of all interfaces. Which type of packet do neighboring routers send in response?

  A. ACK
  B. Hello
  C. Query
  D. Reply
  E. Update
  E. Update

  ---

  When an EIGRP router starts, it sends hello packets out of each interface. Neighboring routers respond with update packets. These update packets are sent reliably, and must be acknowledged with an ACK packet from the EIGRP router.

  EIGRP makes neighbor relationships simple. If a router hears a hello from a new neighbor, it sends that neighbor updates for all routes that it knows. This is different from Open Shortest Path First (OSPF), which has a complex series of rules governing how neighbor relationships are formed and how databases are synchronized. When changes to the network occur in OSPF, updates packets route reliable change information only to the affected routes.

  Queries and replies in EIGRP only occur when a router loses a route to a network and is actively seeking a replacement route.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Describe EIGRP packet types

  References:

  Internetworking Technology Handbook > Enhanced Interior Gateway Routing Protocol (EIGRP) > EIGRP Packet Types

• Question 173:

  Refer to the exhibit. Troubleshoot and ensure that branch B only ever uses the MPLS B network to reach HQ. Which action achieves this requirement?

  

  A. Introduce an AS path filter on branch A routers so that only local prefixes are advertised into BGP
  B. increase the local preference for all HQ prefixes received at branch B from the MPLS B network to be higher than the local preferences used on the MPLS A network
  C. Introduce AS path prepending on the branch A MPLS B network connection so that any HQ advertisements from branch A toward the MPLS B network are prepended three times
  D. Modify the weight of all HQ prefixes received at branch B from the MPLS B network to be higher than the weights used on the MPLS A network
  A. Introduce an AS path filter on branch A routers so that only local prefixes are advertised into BGP

  ---

  If we modify the weight, increase local preference or use AS path prepending then we can only make MPLS B prefer over MPLS A.

  But when MPLS B is down then MPLS A will be used which does not meet the requirement of this question. Only with AS path filtering we can deny prefixes from certain AS and make sure branch B never uses MPLS A to reach HQ.

• Question 174:

  What does the MP-BGP OPEN message contain?

  A. MPLS labels and the IP address of the router that receives the message
  B. the version number and the AS number to which the router belongs
  C. IP routing information and the AS number to which the router belongs
  D. NLRI, path attributes, and IP addresses of the sending and receiving routers
  B. the version number and the AS number to which the router belongs

  ---

  The OPEN message contains the BGP version number, ASN of the originating router, Hold Time, BGP Identifier, and other optional parameters that establish the session capabilities.

• Question 175:

  Refer to the exhibit.

  

  An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R1 as the primary default gateway. When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192.168.20.0/24.

  Which set of configurations resolves the issue?

  A. HQ_R3(config)# ip sla responder HQ_R3(config)# ip sla responder icmp-echo 172.16.35.1
  B. BRANCH(config)# ip sla 1 BRANCH(config-ip-sla)# icmp-echo 192.168.100.2
  C. HQ R3(config)# Ip sla responder HQ R3(config)# Ip sla responder Icmp-echo 172.16.35.5
  D. BRANCH(config)# Ip sla 1 BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1
  D. BRANCH(config)# Ip sla 1 BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1

• Question 176:

  You need to configure eBGP on the rtrA and rtrB routers, as shown in the following image:

  

  You have configured eBGP on rtrA through the following commands:

  rtrA(config)# router bgp 501 rtrA(config)# neighbor 201.60.3.2 remote-as 505

  While configuring eBGP on rtrB, you need to ensure that updates about the 192.168.58.0/24 and the 192.168.127.0/24 subnets are sent to rtrA with a metric of 300. In addition, rtrB should send updates about the 172.161.94.0/24 subnet are sent with a metric of 500.

  Which of the following set of commands would NOT be part of the set used to correctly configure eBGP on rtrB?

  A. access-list 1 permit 192.168.0.0 0.0.255.255 access-list 2 permit 172.161.94.0 0.0.0.255 router bgp 505 neighbor 201.60.3.1 remote-as 501 neighbor 201.60.3.1 route-map change_parameters in
  B. access-list 1 permit 192.168.0.0 0.0.255.255 access-list 2 permit 172.161.94.0 0.0.0.255 router bgp 505 neighbor 201.60.3.1 remote-as 501 neighbor 201.60.3.1 route-map change_parameters out
  C. route-map change_parameters permit 10 match ip-address 2 set metric 500
  D. route-map change_parameters permit 20 match ip-address 1 set metric 300
  A. access-list 1 permit 192.168.0.0 0.0.255.255 access-list 2 permit 172.161.94.0 0.0.0.255 router bgp 505 neighbor 201.60.3.1 remote-as 501 neighbor 201.60.3.1 route-map change_parameters in

  ---

  The following command set would NOT be used because it only applies the access list route-map change_parameters inbound instead of outbound, as would be required:

  

  The ACL 1 allows the 192.168.58.0/24 and the 192.168.127.0/24 subnets, while the ACL 2 allows the 172.161.94.0/24 subnet. The neighbor route-map command specifies a route-map named change_parameters for the 201.60.3.1 BGP peer. The out keyword at the end of the command indicates that the route-map is applied only to the updates sent by rtrB, and not received by rtrB.

  In the following command, the route map change_parameters is defined with the permit keyword. The permit keyword indicates that if a match occurs, the actions specified in the set sub-command are executed:

  route-map change_parameters permit 10

  match ip-address 2

  set metric 500

  In this case, this command checks if the IP address of the subnets advertised to rtrA is in the 172.161.94.0/24 subnet (specified by ACL 2). If the IP address matches, then the metric of those routes are set to 500.

  In the following command, the route map change_parameters is defined with the permit keyword:

  route-map change_parameters permit 20

  match ip-address 1

  set metric 300

  In this case, this command checks if the IP address of the subnets advertised to rtrA is in the 192.168.58.0/24 or the 192.168.127.0/24 subnets (specified by ACL 1) If the IP address matches, then the metric of those routes are set to 300.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify eBGP (IPv4 and IPv6 address families)

  References:

  Cisco > Home > Support > Technology Support > IP > IP Routing > Design > Design Technotes > BGP Case Studies > Route Maps

  Cisco > Cisco IOS IP Routing: Protocol-Independent Command Reference > route-map

• Question 177:

  Refer to the exhibit.

  

  An engineer configured SNMP communities on the Core Sw1, but the SNMP server cannot obtain information from Core_Sw1. Which configuration resolves this issue?

  A. snmp-server group NETVIEW v2c priv read NETVIEW access 20
  B. access-list 20 permit 10.221.10.11
  C. access-list 20 permit 10.221.10.12
  D. snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22
  B. access-list 20 permit 10.221.10.11

  ---

  The SNMP server configuration ties ACL 20 to the list of allowed SNMP servers that can pull data from the switch. The IP address of the NMS server needs to be added to this ACL.

• Question 178:

  Refer to the exhibit.

  

  Which configuration is required for R2 to get the IP address from the DHCP server.

  A. ip access-list extended R2WAN permit tcp any any eq 68
  B. ip access-list extended R2WAN permit udp any any eq 67
  C. interface GigabitEthernet0/0 ip access-group R2WAN out
  D. ip access-list extended R2WAN permit udp any any eq 68
  D. ip access-list extended R2WAN permit udp any any eq 68

• Question 179:

  Refer to the exhibit.

  

  A prefix of 10.1.1.0/31 is assigned for the DWDM circuit between R1 and R2 to connect the two attached VRFs on each router.

  Which configuration provides the required connectivity on R1?

  A. interface EthernetO/0 no ip address ! interface Eth erne to. -0.10 encapsulation dotlQ 10 ip vrf forwarding CCNP ip address 10.1.1.0 255.255.255.252 ! interface EthernetO/0.20 encapsulation dotlQ 20 ip vrf forwarding CCNA ip address 10.1.1.0 255.255.255.252
  B. interface EthernetO/0 ip address 10.1.1.0 255.255.255.252 ! Interface Loopback 0 ip vrf forwarding CCNP ! Interface Loopback 1 ip vrf forwarding CCNA ! interface TunnelO tunnel source Loopback 0 tunnel mode gre IP Ip vrf forwarding CCNP tunnel destination 10.1.1.1 interface Tunnell tunnel source Loopback 1 tunnel mode gre IP Ip vrf forwarding CCNA tunnel destination 10.1.1.1
  C. Interface ElhernetO/0 ip address 10.1.1.0 255.255.255.254 ! Interface Loopback 0 Ip vi f forwarding CCNP ! Interface Loopback 1 ip vrf forwarding CCNA ! interface TunnelO tunnel source Loopback 0 tunnel mode gre IP Ip vrf forwarding CCNP tunnel destination 10.1.1.1 ! interface Tunned tunnel source Loopback 1 tunnel mode gre IP Ip vrf forwarding CCNA tunnel destination 10.1.1.1
  D. Interface EthernetO/0 no ip address ! interface EthernetO/0.10 encapsulation dotlQ 10 ip vrf forwarding CCNP ip address 10.1.1.0 255.255.255.254 ! interface EthernetO/0.20 encapsulation dotlQ 20 Ip vrf forwarding CCNA ip address 10.1.1.0 255.255.255.254
  C. Interface ElhernetO/0 ip address 10.1.1.0 255.255.255.254 ! Interface Loopback 0 Ip vi f forwarding CCNP ! Interface Loopback 1 ip vrf forwarding CCNA ! interface TunnelO tunnel source Loopback 0 tunnel mode gre IP Ip vrf forwarding CCNP tunnel destination 10.1.1.1 ! interface Tunned tunnel source Loopback 1 tunnel mode gre IP Ip vrf forwarding CCNA tunnel destination 10.1.1.1

• Question 180:

  Examine the following output of the show ip route command and the partial output of the show run command from the router R64:

  

  What will the router do with a packet with a source address of 10.2.1.7/24 and a destination address of 10.11.11.50/ 24 that arrives on the Serial0 interface?

  A. forward it out the Serial0/0 interface
  B. forward it out the Tunnel0 interface
  C. drop the packet
  D. forward it out the Ethernet0/0 interface
  D. forward it out the Ethernet0/0 interface

  ---

  It will forward the packet out the Ethernet 0/0 interface. The partial output of the show run command shows that the ip verify unicast source reachable via any command has been executed on the Serial 0/0 interface. This enables the Unicast Reverse Path Forwarding (Unicast RPF) feature. This feature prevents IP spoofing by verifying from the routing table that there is a valid return path to the source IP address. If there is not valid return path, you can assume the IP has been spoofed.

  When the ip verify unicast source reachable via command ends with the key word any , it means the return path can be through any interface, not just the one where the command was executed. This is called loose mode. It also includes the parameter allow-default which removes the requirement that the network be specifically mentioned in the routing table.

  Since there is a routing table entry for the source network leading to the Serial0/0 interface, the packet will be forwarded to the destination network reachable using the route via the E0/0 interface.

  The router will not send the packet to either the Serial0/0 or the Tunnel0 interfaces because the destination network, 10.11.11.0/24, is not a reachable destination on those interfaces.

  It will not send the packet to the Ethernet0/1 interface because that is the interface used by the default route. Because there is a route in the table to the 10.11.11.0/24 network, it would be sent to the Ethernet 0/0 interface.

  Objective:

  Infrastructure Security

  Sub-Objective:

  Configure and verify router security features

  References:

  Cisco IOS Security Configuration Guide, Release 12.2 > Configuring Unicast Reverse Path Forwarding Cisco > Configuring Unicast Reverse Path Forwarding