Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 201:

  Refer to the exhibit.

  

  When the FastEthemet0/1 goes down, the route to 172.29.0.0/16 via 192.168.253.2 is not installed in the RIB, Which action resolves the issue?

  A. Configure feasible distance greater than the successor's feasible distance.
  B. Configure reported distance greater than the successor's feasible distance.
  C. Configure feasible distance greater than the reported distance.
  D. Configure reported distance greater than the feasible distance.
  C. Configure feasible distance greater than the reported distance.

  ---

  From the exhibit, we notice network 172.29.0.0/16 was learned via two routes:

  + From 192.168.254.2 with FD = 307200 and AD = 281600 + From 192.168.253.2 with FD = 410200 and AD = 352300

  The first route is installed into the RIB as the successor route because of lower FD. When the first route fails, router will not use the second route as it does not satisfy the feasibility condition. The feasibility condition states that, the Advertised Distance (AD, also called the reported distance) of a route must be lower than the feasible distance of the current successor route.

• Question 202:

  What is the purpose of an OSPF sham-link?

  A. to allow inter-area routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
  B. to allow intra-area routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
  C. to correct OSPF backdoor routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
  D. to correct OSPF backdoor routing when OSPF is used as the PE-PE connection protocol in an MPLS VPN network
  C. to correct OSPF backdoor routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network

  ---

  "Although OSPF PE-CE connections assume that the only path between two client sites is across the MPLS VPN backbone, backdoor paths between VPN sites (shown in grey in the figure below) may exist. If these sites belong to the same OSPF area, the path over a backdoor link will always be selected because OSPF prefers intraarea paths to interarea paths. (PE routers advertise OSPF routes learned over the VPN backbone as interarea paths.) For this reason, OSPF backdoor links between VPN sites must be taken into account so that routing is performed based on policy. "

• Question 203:

  Examine the following diagram:

  

  Routing updates are not being received on Router A from Router D. The partial output of the show run command for Router B and Router C is shown below:

  

  What commands should you run to ensure that routing updates are getting to Router A from Router D? (Choose all that apply.)

  A. routerC(config-router)# area 1 virtual-link 2.2.2.2
  B. routerC(config-router)# no area 1 virtual-link 4.4.4.4 routerC(config-router)# area 0 virtual-link 2.2.2.2
  C. routerB(config-router)# area 0 virtual-link 3.3.3.3
  D. routerB(config-router)# area 1 virtual-link 3.3.3.3
  E. routerC(config-router)# no area 1 virtual-link 4.4.4.4 routerC(config-router)# area 1 virtual-link 2.2.2.2
  F. routerB(config-router)# area 1 virtual-link 4.4.4.4
  G. routerB(config-router)# no area 1 virtual-link 4.4.4.4
  D. routerB(config-router)# area 1 virtual-link 3.3.3.3
  E. routerC(config-router)# no area 1 virtual-link 4.4.4.4 routerC(config-router)# area 1 virtual-link 2.2.2.2

  ---

  The problem is that the virtual link that provides a connection from area 2 to area 0 is misconfigured on Router C, and is missing entirely from Router B. The current configuration on Router C uses the router ID 4.4.4.4 in the virtual link statement, but the neighbor that is on the other end of the link (Router B) has an ID of 2.2.2.2. Therefore, you must remove the incorrect statement with this command:

  routerC(config-router)# no area 1 virtual-link 4.4.4.4

  Then, you would recreate it correctly with the following command:

  routerC(config-router)# area 1 virtual-link 2.2.2.2

  The configuration of the virtual link on Router B is missing completely. To add it, you would use the area 1 virtual-link command and configure the neighbor as Router C at 3.3.3.3:

  routerB(config-router)# area 1 virtual-link 3.3.3.3

  You should not run the following command on Router C:

  routerC(config-router)# area 1 virtual-link 2.2.2.2

  This would apply a correct statement, but leave in the incorrect statement.

  You should not run any of the following sets of commands:

  routerC(config-router)# no area 1 virtual-link 4.4.4.4

  routerC(config-router)# area 0 virtual-link 2.2.2.2

  or

  routerB(config-router)# area 0 virtual-link 3.3.3.3

  These commands all incorrectly include the area 0 syntax. The area in the command should be the area being transited to get to area 0, which is area 1.

  You should not run the routerB(config-router)# area 1 virtual-link 4.4.4.4 command on Router B. This command uses an incorrect router ID. The neighbor for Router B should be Router C, 3.3.3.3

  You should not run the routerB(config-router)# no area 1 virtual-link 4.4.4.4 command on Router B. There is no virtual link to remove from Router B.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify network types, area types, and router types

  References:

  Home>Support>Technology Support>IP>IP Routing>Configure>Configuration Examples and Technotes>OSPF virtual link

  Cisco > Home > Support > Technology Support > IP > IP Routing > Design > Design Technotes > What Are OSPF Areas and Virtual Links?

• Question 204:

  Refer to the exhibit.

  

  Users in the branch network of 2001:db8:0:4::/64 report that they cannot access the Internet. Which command is issued in IPv6 router EIGRP 100 configuration mode to solve this issue?

  A. Issue the eigrp stub command on R1.
  B. Issue the no eigrp stub command on R1.
  C. Issue the eigrp stub command on R2.
  D. Issue the no eigrp stub command on R2.
  B. Issue the no eigrp stub command on R1.

  ---

  By observing the routing table we can determine that:

  1) the default static route isn't learned on the branch router

  2) R1 networks were learned. This concludes that on R1 we have eigrp stub connected which advertises only connected networks to Branch router.

• Question 205:

  An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1.255.255.255.252 along with the summary route. After finishing configuration, the customer complained not receiving summary route with specific loopback address.

  Which two configurations will fix it? (Choose two.)

  router eigrp 1 ! route-map Leak-Route deny 10 ! interface Serial 0/0 ip summary-address eigrp 1 10.0.0.0 255.0.0.0 leak-map Leak-Route

  A. Configure access-list 1 permit 10.1.1.0.0.0.0.3.
  B. Configure access-list 1 permit 10.1.1.1.0.0.0.252.
  C. Configure access-list 1 and match under route-map Leak-Route.
  D. Configure route-map Leak-Route permit 10 and match access-list 1.
  E. Configure route-map Leak-Route permit 20.
  A. Configure access-list 1 permit 10.1.1.0.0.0.0.3.
  D. Configure route-map Leak-Route permit 10 and match access-list 1.

  ---

  When you configure an EIGRP summary route, all networks that fall within the range of your summary are suppressed and no longer advertised on the interface. Only the summary route is advertised. But if we want to advertise a network that has been suppressed along with the summary route then we can use leak-map feature. The below commands will fix the configuration in this question: R1(config)#access-list 1 permit 10.1.1.0 0.0.0.3 R1(config)#route-map Leak-Route permit 10 // this command will also remove the "route_map Leak-Route deny 10" command. R1(config-route-map)#match ip address 1

• Question 206:

  Refer to lhe exhibit

  

  An engineer must filter EIGRP updates that are received to block all 10 10 10.0/24 prefixes

  The engineer tests the distribute list and finds one associated prefix. Which action resolves the issue?

  A. There is a permit in the ACL that allows this prefix into EIGRP. The ACL should be modified to deny 10.10.10.0 255.255.255.0.
  B. There is a permit in the ACL that allows this prefix into EIGRP. The ACL should be modified to deny 10.10.10.0 0.0.0.255.
  C. There is a permit in the route map that allows this prefix. A deny 20 statement is required with a match condition to match a new ACL that denies all prefixes.
  D. There is a permit in the route map that allows this prefix. A deny 20 statement is required with no match condition to block the prefix.
  B. There is a permit in the ACL that allows this prefix into EIGRP. The ACL should be modified to deny 10.10.10.0 0.0.0.255.

• Question 207:

  Refer to the exhibit.

  

  The BGP connection went from Established to Active when a new router was provisioned between CSR301 and its eBGP peers. Which command resolves the IPv4 peering problem?

  A. neighbor 10.103.88.14 ebgp-multihop
  B. neighbor 10.103.88.14 next-hop-self all
  C. neighbor 10.103.88.14 disable-connected-check
  D. neighbor 10.103.88.14 allowas-in
  A. neighbor 10.103.88.14 ebgp-multihop

• Question 208:

  Refer to the exhibit.

  

  An engineer must filter prefixes that originate from AS65412, but it is not working correctty. Which configuration must the engineer apply to R1 to resolve the issue?

  A. route-map FILTER permit 10 match as-path 1 route-map FILTER permit 20
  B. no ip as-path access-list 1 ip as-path access-list 1 deny 65412_ ip as-path access-list 1 permit .*
  C. router bgp 64560 neighbor 10.10.10.10 route-map FILTER out
  D. no ip as-path access-list 1 ip as-path access-list 1 deny _65412$ ip as-path access-list 1 permit .*
  D. no ip as-path access-list 1 ip as-path access-list 1 deny _65412$ ip as-path access-list 1 permit .*

• Question 209:

  Refer to the exhibit. During ISP router maintenance, the network produced many alerts because of the flapping interface. Which configuration on R1 resolves the issue?

  

  A. snmp trap ip verify drop-rate
  B. no snmp trap link-status
  C. ip verify drop-rate notify hold-down 60
  D. snmp trap link-status down
  B. no snmp trap link-status

  ---

  The command "snmp trap link-status" (and "no" form) enables or disable the sending of SNMP traps when an interface goes up and down. This command is useful on interfaces that you expect to change state frequently (for example, dial-on- demand interfaces). You may not want to send an SNMP trap to your network management stations whenever these interfaces change state.

  https://www.oreilly.com/library/view/cisco-ios-in/0596008694/re785.html

  Note: The command "ip verify drop-rate notify hold-down ..." configures the minimum time, in seconds, between Unicast RPF drop-rate notifications. But RPF is not a concern in this question.

• Question 210:

  Refer to the exhibit.

  

  The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host 192.168.10.10 cannot SSH to host 192.168.100.10 even though the flow is permitted. Which action resolves the issue without opening full access to this router?

  A. Move the SSH entry to the beginning of the ACL
  B. Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works
  C. Temporarily remove the ACL from the interface to see if the flow works
  D. Run the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it
  A. Move the SSH entry to the beginning of the ACL

  ---