Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 221:

  You have configured DHCP on a router and configured it to assign IP addresses in the range of 192.168.1.10 through 192.168.1.150. You just discovered that one of your print servers is using the address 192.168.1.100 and you cannot change it. What command can you use on the router to solve this problem?

  A. Router(config)# ip dhcp excluded-address
  B. Router(config)# access-list
  C. Router(dhcp-config)# ip dhcp excluded-address
  D. Router(config)# dhcp exclude-address
  E. Router(config)# service dhcp excluded-address
  A. Router(config)# ip dhcp excluded-address

  ---

  The ip dhcp excluded-address command will allow you to specify an address or group of addresses in a pool that the DHCP server will not assign. This is typically used when a host has a permanent address assigned that would conflict with addresses that the DHCP server would hand out. The proper syntax for this command is as follows:

  Router(config)# ip dhcp excluded-address low-address [high-address]

  The other options use improper syntax or are executed at an incorrect prompt. The ip dhcp excluded-address command should be executed at global configuration mode.

  Objective:

  Infrastructure Services

  Sub-Objective:

  Configure and verify IPv4 and IPv6 DHCP

  References:

  Cisco > Cisco IOS IP Addressing Services Command Reference > ip dhcp excluded-address

• Question 222:

  Refer to the exhibit.

  

  A network administrator is trying to access a branch router using TACACS+ usemame and password credentials, but the administrator cannot log in to the router because the WAN connectivity is down. The branch router has following AAA configuration:

  aaa new-model

  aaa authorization commands 15 default group tacacs+

  aaa accounting commands 1 default stop-only group tacacs+

  aaa accounting commands 15 default stop-only group tacacs+ tacacs-server host 10.100.50.99

  tacacs-server key Cisco123.

  Which command will resolve this problem when WAN connectivity is down?

  A. aaa authentication login default group tacacs+ local
  B. aaa authentication login console group tacacst enable
  C. aaa authentication login default group tacacs+ console
  D. aaa authentication login default group tacacst+ enable
  A. aaa authentication login default group tacacs+ local

  ---

  https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-accesscontrol-system-tacacs-/200606-aaa-authentication-login-default-local.html

• Question 223:

  What must a network architect consider for RTs when planning for a single customer full-mesh VPN m an MPLS Layer 3 network?

  A. RT must be globally unique within the same VPN
  B. RT must be globally identical within the same VPN
  C. RT values must be Afferent from the RD values in the same VPN
  D. Each RT value must be identical to an RD value within the same VPN.
  B. RT must be globally identical within the same VPN

  ---

• Question 224:

  Refer to the exhibit. The network administrator configured redistribution on an ASBR to reach to all WAN networks but failed Which action resolves the issue?

  

  A. The route map must have the keyword prefix-list to evaluate the prefix list entries
  B. The OSPF process must have a metric when redistributing prefixes from EIGRP.
  C. The route map EIGRP->OSPF must have the 10.0.106.0/24 entry to exist in one of the three prefix lists to pass
  D. EIGRP must redistribute the 10.0.106.0/24 route instead of using the network statement
  A. The route map must have the keyword prefix-list to evaluate the prefix list entries

  ---

  In order to use a prefix-list in a route-map, we must use the keyword "prefix-list" in the "match" statement. .

  For example:

  match ip address prefix-list WAN_PREFIXES

  Without this keyword, the router will try to find an access-list with the same name instead.

• Question 225:

  Refer to the exhibit.

  

  An engineer configures the router 10.1.100.10 for EIGRP autosummarization so that R1 should receive the summary route of 10.0.0.0/8. However, R1 receives more specific /24 routes. Which action resolves this issue?

  A. Router R1 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.
  B. Router R1 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are received on R1.
  C. Router 10.1.100.10 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are summarized toward R1.
  D. Router 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.
  D. Router 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

• Question 226:

  The following configuration is present on a router R1:

  

  Which part of the configuration provides many-to-one access for all devices on the defined segments to share a single IP address upon exiting the external interface?

  A. ip nat inside
  B. ip nat outside
  C. ip nat inside source list 7 serial0 overload
  D. access-list 7 permit 10.10.10.0 0.0.0.31 access-list 7 permit 10.10.20.0 0.0.0.31
  C. ip nat inside source list 7 serial0 overload

  ---

  The command ip nat inside source list 7 serial0 overload specifies the following:

  The translation should occur in the interface specified as inside. It should only be done for inside IP addresses that are specified in access list number 7. The IP address that inside addresses should be translated to belongs to the Serial0 interface. The translated IP address should be shared by all, as indicated by the overload keyword.

  The command ip nat inside identifies the inside interface. In this case, it indicates the one on which translation will take place.

  The command ip nat outside identifies the outside interface, which can be configured for translation. However, it has not been configured for translation in this scenario.

  The commands below define the inside IP addresses that are allowed to be translated:

  access-list 7 permit 10.10.10.0 0.0.0.31

  access-list 7 permit 10.10.20.0 0.0.0.31

  Objective:

  Infrastructure Services

  Sub-Objective:

  Configure and verify IPv4 Network Address Translation (NAT)

  References:

  Home > Support >Troubleshooting Technotes > Configuring Network Address Translation: Getting Started Cisco > Cisco IOS IP Application Services Command Reference > ip nat inside source

• Question 227:

  Which statement about MPLS LDP router ID is true?

  A. If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.
  B. The loopback with the highest IP address is selected as the router ID.
  C. The MPLS LDP router ID must match the IGP router ID.
  D. The force keyword changes the router ID to the specified address without causing any impact.
  B. The loopback with the highest IP address is selected as the router ID.

  ---

  In an MPLS (Multiprotocol Label Switching) network, the LDP (Label Distribution Protocol) router ID is used to uniquely identify a router within the MPLS domain. The correct statement about the LDP router ID is:

  The loopback with the highest IP address is selected as the router ID: By default, the LDP router ID is determined based on the loopback interface with the highest IP address configured on the router. This provides a stable and predictable router ID that is not tied to the operational state of physical interfaces.

• Question 228:

  Automatic 6-to-4 tunnels exist between dual-stack routers (A, B, and C). One router has the IPv6 address, 2002:D030:6BC0:173C::26:37D0/48 Which of the following addresses is the IPv4 address of the router with the IPv6 address 2002:D030:6BC0:173C::26:37D0/48?

  A. 10.176.15.131
  B. 10.200.80.67
  C. 208.48.107.192
  D. 208.138.16.110
  C. 208.48.107.192

  ---

  The IPv4 address of the IPv6 router is 208.48.107.192. In an automatic 6-to-4 tunnel, IPv6 addresses have the 2002::/16 prefix. The 32-bit IPv4 address of the IPv6 router is then embedded into the IPv6 address. The 32 bits of the IPv4 address is embedded in the second and third quartet of the IPv6 address. The second and third quarters in the IPv6 address correspond to D030:6BC0. The conversion of these hexadecimal digits into decimal is given as follows:

  

  The IPv6 router does not have 10.176.15.131 as its IPv4 address. The 10.176.15.131 address is the IPv4 equivalent of the second and third quarter (05B0:0F81) in the source IPv6 address.

  The other two IPv4 addresses are incorrect as they pertain to neither of the two IPv6 hosts.

  Objective:

  Network Principles

  Sub-Objective:

  Recognize proposed changes to the network

  References:

  Cisco IOS IPv6 Implementation Guide > Implementing Tunneling for IPv6

• Question 229:

  Refer to the exhibit.

  

  A network administrator configured an IPv6 access list to allow TCP return frame only, but it is not working as expected. Which changes resolve this issue?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/122_55_se/co nfiguration/guide/scg3750/swv6acl.html

• Question 230:

  How are CE advertised routes segmented from other CE routers on an MPLS PE router?

  A. with a combination of VRF-Lite and MP-BGP
  B. by pushing MPLS labels advertised by LDP on customer routes
  C. by enabling multiple instances of BGP, one for each CE router
  D. by assigning CE-facing interfaces to different VRFs
  D. by assigning CE-facing interfaces to different VRFs

  ---

  In an MPLS (Multiprotocol Label Switching) network, Customer Edge (CE) routers are typically connected to Provider Edge (PE) routers. To keep the routes from different CE routers segregated on the PE router, Virtual Routing and Forwarding (VRF) is commonly used. Each VRF acts as a separate routing table, effectively isolating routes from one CE router from routes of another CE router.