Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 11:

  Which command is used to check IP SLA when an interface is suspected to receive lots of traffic with options?

  A. show track
  B. show threshold
  C. show timer
  D. show delay
  A. show track

• Question 12:

  RouterA and RouterB are both in OSPF area 2, and RouterA is connected directly to the backbone. Their router IDs are shown below:

  RouterA - 165.165.20.15 RouterB - 165.165.10.12

  Which commands should be executed on RouterA and RouterB to create a virtual link between the two routers?

  A. RouterA(config-router)# area 2 virtual-link 165.165.10.12 RouterB(config-router)# area 2 virtual-link 165.165.20.15
  B. RouterA(config-router)# area 2 virtual-link 165.165.10.12 RouterB(config-router)# area 0 virtual-link 165.165.20.15
  C. RouterA(config-router)# area 0 virtual-link 165.165.20.15 RouterB(config-router)# area 2 virtual-link 165.165.10.12
  D. RouterA(config-router)# area 0 virtual-link 165.165.10.12 RouterB(config-router)# area 0 virtual-link 165.165.20.15
  A. RouterA(config-router)# area 2 virtual-link 165.165.10.12 RouterB(config-router)# area 2 virtual-link 165.165.20.15

  ---

  The area virtual-link command should specify the area to be traversed and the ID of the router to which the router being configured will connect. Therefore, the correct answer is:

  RouterA(config-router)# area 2 virtual-link 165.165.10.12

  RouterB(config-router)# area 2 virtual-link 165.165.20.15

  A virtual link is used to make a virtual connection of an area border router (ABR) to the backbone. It is used in situations where an area does not physically border the backbone area. The virtual link provides logical connectivity of the area to the backbone. If the virtual link appears not to be functional, which would manifest itself in Router A not having all of Router B's networks in its routing table, the state of the link can be verified on Router A by executing the show ip ospf virtual- link command. An example

  is shown below. The state of the link as shown in line 1 of the output should be up.

  RouterA# show ip ospf virtual-links

  Virtual Link to router 172.16.8.2 is up

  Transit area 0.0.0.1, via interface Ethernet0, Cost of using 10 Transmit Delay is 1 sec, State POINT_TO_POINT

  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 0:00:08

  Adjacency State FULL

  The configuration below is incorrect because area 0 is referenced in the second line. It should reference area 2, the area being traversed.

  RouterA(config-router)# area 2 virtual-link 165.165.10.12

  RouterB(config-router)# area 0 virtual-link 165.165.20.15

  The configuration below is incorrect because area 0 is referenced in the first line. It should reference area 2, the area being traversed.

  RouterA(config-router)# area 0 virtual-link 165.165.20.15

  RouterB(config-router)# area 2 virtual-link 165.165.10.12

  The configuration below is incorrect because area 0 is referenced in both lines. Both should reference area 2, the area being traversed.

  RouterA(config-router)# area 0 virtual-link 165.165.10.12

  RouterB(config-router)# area 0 virtual-link 165.165.20.15

  If the virtual link is incorrectly configured the following error will be generated:

  *Dec 10 00:31.146: %OSPF-4-ERRRCV: Received invalid packet mismatch area ID, from backbone area must be virtual link but not found from 165.165.10.5, Serial 0

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify network types, area types, and router types

  References:

  Cisco > Home > Support > Technology Support > IP Routing > Design > Design Technotes > What Are OSPF Areas and Virtual Links?

• Question 13:

  What are two characteristics of IPv6 Source Guard? (Choose two.)

  A. requires the user to configure a static binding
  B. used in service provider deployments to protect DDoS attacks
  C. requires that validate prefix be enabled
  D. requires IPv6 snooping on Layer 2 access or trunk ports
  E. recovers missing binding table entries
  A. requires the user to configure a static binding
  D. requires IPv6 snooping on Layer 2 access or trunk ports

  ---

  This is how I see it: For source guard to operate, binding table entries need to exists. So, A or D are required.

  A) static binding -> yes, or use ipv6 snooping #security-level glean to populate the binding table

  B) to protect against DDOS -> yes, but not just for service providers (it's rather prefix guard)

  C) can be configured with validate address or validate prefix (not explicitly needed)

  D) snooping on L2 access or trunk -> yes, or create static bindings

  E) not source guard itself, but the snooping feature glean recovers missing binding table entries

• Question 14:

  There is an issue between two nodes within your network, and you are using Cisco DNA Center Path Trace to help troubleshoot the problem. Which of the following statements are true regarding the Path Trace tool?

  A. Overlapping IP addresses are supported.
  B. Path trace between a fabric client and a non-fabric client is supported
  C. Path trace between a wired client and a wireless client is supported
  D. Only TCP traffic is supported.
  C. Path trace between a wired client and a wireless client is supported

  ---

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-assurance/2-2-2/b_cisco_dna_assurance_2_2_2_ug/b_cisco_dna_assurance_2_2_2_ug_chapter_01111.html

• Question 15:

  Refer to the exhibit.

  

  A user has set up an IP SLA probe to test if a non SLA host web server on IP address 10.1.1.1 accepts HTTP sessions prior to deployment. The probe is failing. Which action should the network administrator recommend for the probe to succeed?

  A. Re-issue the ip sla schedule command.
  B. Add the control disable option to the tcp connect.
  C. Modify the ip sla schedule frequency to forever.
  D. Add icmp-echo command for the host.
  B. Add the control disable option to the tcp connect.

  ---

  You should disable control packets whenever the other side is not a responder, so if you were running TCP connect to a real web server you would have to disable it because it would not be running as a responder.

• Question 16:

  The network administrator has configured router R2 to redistribute a newly installed EIGRP network into their core OSPF network. The redistributed networks and subnets are not properly appearing in the routing tables of the other routers.

  The following output displays partial configuration for router R2:

  router ospf 10 redistribute eigrp 50 metric 100 metric-type 1 network 192.16.31.0 0.0.0.255

  What two modifications would correct the problem? (Choose two.)

  A. Change the EIGRP AS number from 50 to 10
  B. Change the AS number specified for OSPF to 50
  C. Add the command network 10.0.0.0 0.0.0.255
  D. Add the command network 10.0.0.0 255.255.255.0
  E. Add the level-1-2 keyword to the redistribute command
  F. Add the subnets keyword to the redistribute command
  G. Change the command network 192.16.31.0 0.0.0.255 to include the area keyword and value
  F. Add the subnets keyword to the redistribute command
  G. Change the command network 192.16.31.0 0.0.0.255 to include the area keyword and value

  ---

  The R2 router will not form adjacencies with neighboring routers in the area if the area IDs do not match. The area keyword in the network command is missing from the initial router R2 configuration. The correct command would be:

  R2(config)# network 192.16.31.0 0.0.0.255 area 1

  Secondly, the subnets keyword should be used in the redistribute command to ensure that all of the subnets in the 10.0.0.0/8 are redistributed into OSPF. For example, you would use the following commands to redistribute EIGRP autonomous system (AS) 50 networks and subnetworks into OSPF with a metric of 100 and advertise them as external Type 1 routes:

  R2(config)# router ospf

  R2(config-router)# redistribute eigrp 50 metric 100 metric-type 1

  The complete syntax for the redistribute command when used in OSPF is as follows:

  redistribute protocol [process-id] [metric metric-value] [metric-type type-value] [subnets]

  The command parameters are:

  protocol - Identifies the source protocol, such as BGP, connected, EIGRP, IGRP, ISIS, OSPF, static, or rip. process-id - Depending on the routing protocol, identifies the source autonomous system number or process ID. metric - Identifies the seed metric for the redistributed route. The default is 0. metric-type - For OSPF, it identifies the redistributed routes as either external Type 1 or Type 2 routes. The default is Type 2. subnets - Optional keyword for use with OSPF to indicate that the scope of the networks

  to be redistributed also includes subnets.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify redistribution between any routing protocols or routing sources

  References:

  Cisco > Cisco IOS IP Routing: Protocol-Independent Command Reference > redistribute (ip)

• Question 17:

  Refer to the exhibit.

  

  Why is user authentication being rejected?

  A. The TACACS+ server expects "user", but the NT client sends "domain/user".
  B. The TACACS+ server refuses the user because the user is set up for CHAP.
  C. The TACACS+ server is down, and the user is in the local database.
  D. The TACACS+ server is down, and the user is not in the local database.
  D. The TACACS+ server is down, and the user is not in the local database.

  ---

  https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/13864-tacacs-pppdebug.html

• Question 18:

  Refer to the exhibit.

  

  R1#show ip route 1.0.0.0/32 is subnetted, 1 subnets C 1.1.1.1/32 is directly connected, Loopback0 2.0.0.0/32 is subnetted, 1 subnets O 2.2.2.2/32 [110/2] via 10.10.10.2, 00:09:30, GigabitEthernet0/0/0 10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks C 10.10.10.0/30 is directly connected, GigabitEthernet0/0/0 L 10.10.10.1/32 is directly connected, GigabitEthernet0/0/0 C 10.10.20.0/30 is directly connected, GigabitEthernet0/0/1 L 10.10.20.1/32 is directly connected, GigabitEthernet0/0/1 D 10.20.10.0/30 [90/3072] via 10.10.10.2, 00:09:30, GigabitEthernet0/0/0 O 10.30.10.0/30 [90/3328] via 10.10.10.2, 00:05:48, GigabitEthernet0/0/0 S 10.40.10.0/30 [1/0] via 10.10.20.2

  Routers R1, R2, R3, and R4 use EIGRP. However, traffic always prefers R1 to R5 backup links in non failure scenarios. Which configuration resolves the issue?

  A. R1(config)#no ip route 10.40.10.0 255.255.255.252 10.10.20.2 R1(config)#ip route 10.40.10.0 255.255.255.252 10.10.20.2 115
  B. R1(config)#int gigabitEthernet 0/0/0 R1 (config-if)#bandwidth 10000000
  C. R1(config-if)#int gigabitEthernet 0/0/0 R1(config-if)#bandwidth 10000
  D. R1(config)#no ip route 10.40.10.0 255.255.255.252 10.10.20.2 R1(config)#ip route 0.0.0.0 0.0.0.0 10.10.10.2
  A. R1(config)#no ip route 10.40.10.0 255.255.255.252 10.10.20.2 R1(config)#ip route 10.40.10.0 255.255.255.252 10.10.20.2 115

• Question 19:

  Which IGPs are supported by the MPLS LDP autoconfiguration feature?

  A. RIPv2 and OSPF
  B. OSPF and EIGRP
  C. OSPF and IS-IS
  D. ISIS and RIPv2
  C. OSPF and IS-IS

  ---

  The MPLS LDP Autoconfiguration feature enables you to globally enable Label Distribution Protocol (LDP) on every interface associated with an Interior Gateway Protocol (IGP) instance. This feature is supported on Open Shortest Path First (OSPF) and Intermediate System-to-Intermediate System (IS-IS) IGPS.

• Question 20:

  Refer to the exhibit.

  

  An engineer cannot determine the time of the problem on R1 due to a mismatch between the router local clock and legs. Which command synchronizes the time between new log entries and the local clock on R1?

  A. service timestamps debug datetime msec show.timezone
  B. service timestamps log datetime locatetime msec
  C. service timestamps datebug datetime localtime msec
  D. service timestamps log datetime msec show-timezone
  B. service timestamps log datetime locatetime msec