Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 231:

  Refer to the exhibit.

  

  

  R1 should have BGP routes marked with an "i" (IGP origin code).

  Which configuration resolves the issue?

  A. R1 route-map RC permit 10 match ip address 1 set metric 1
  B. R1 route-map RC permit 10 match ip address 1 set origin igp
  C. R7 route-map RC permit 10 match ip address 1 set origin igp
  D. R7 route-map RC permit 10 match ip address 1 set metric 1
  B. R1 route-map RC permit 10 match ip address 1 set origin igp

• Question 232:

  Refer to the exhibit.

  

  Router R2 VLAN 10 users cannot get dynamic IP addresses from R1. Which action resolves the issue?

  A. Eliminate the port security feature on the ports of switch SW2.
  B. Identify the host with the duplicate IP address.
  C. Configure the IP helper feature on the Interface GigabitEthernet 0/2 of router R2.
  D. Expand the address scope of VLAN 10.
  D. Expand the address scope of VLAN 10.

• Question 233:

  You have two autonomous systems connected by more than one ASBR.

  Which strategy does Cisco recommend in this situation?

  A. Use two-way redistribution.
  B. Use a default route in both directions.
  C. Allow routes to be exchanged in one direction, and use a default route in the other direction.
  D. Manually configure routes in all ASBRs, and update the configuration each time there is a change in either AS.
  C. Allow routes to be exchanged in one direction, and use a default route in the other direction.

  ---

  If there is a single autonomous system border router (ASBR) connecting two autonomous systems (AS), Cisco generally recommends full two-way route redistribution. But when there are multiple ASBRs, as in this scenario, two-way route redistribution may result in routing loops. One solution is to use a default route in one direction and allow routes to be exchanged in the other direction.

  Default routes in both directions will almost certainly cause routing loops.

  Manual configuration of static routes would work, but the administrative maintenance necessary when there are changes would be considerable.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify redistribution between any routing protocols or routing sources

  References:

  Cisco > Home > Support > Technology Support > IP Routing > Technology Information > Technology White Paper > OSPF Design Guide > OSPF Design Tips

• Question 234:

  You need to resolve a route-selection problem in a redistributed network by increasing the administrative distance to several networks for a protocol, other than EIGRP or BGP, so that these routes will not be used. You create access list 5 to identify the relevant networks, and access the routing protocol configuration prompt.

  Which command will set the administrative distance to these networks to 220 for the selected protocol?

  A. Router(config-router)# list 5 distance 220
  B. Router(config-router)# admin 220 access-list 5
  C. Router(config-router)# distance 220 0.0.0.0 255.255.255.255 5
  D. Router(config-router)# increase 0.0.0.0 255.255.255.255 admin 220 list 5
  C. Router(config-router)# distance 220 0.0.0.0 255.255.255.255 5

  ---

  The correct command is Router(config-router)# distance 220 0.0.0.0 255.255.255.255 5. This command instructs the router to change the AD for any networks specified in the access list 5 to 220.

  The correct syntax for the distance command is shown below:

  distance weight [address mask [ access-list-number | name]

  The weight parameter is the administrative distance (AD), which is a number from 10 to 255. Note: Distances 0 through 9 are reserved for system use.

  To change the administrative distance for an entire routing protocol, use the distance command, as shown below:

  Router(config)# router rip

  Router(config-router)# distance 125

  To change the AD for only selected networks, use an access list with the distance command as shown below:

  Router(config)#access-list 5 permit 10.0.0.0 255.0.0.0

  Router(config)#access-list 5 permit 11.0.0.0 255.0.0.0

  Router(config)#access-list 5 permit 12.0.0.0 255.0.0.0

  Router(config)#router rip

  Router(config-router)# distance 220 0.0.0.0 255.255.255.255 5

  The 0.0.0.0 255.255.255.255 portion included with the distance command could hold an address/mask combination for a single address, but it is more common to use an access list.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Describe administrative distance

  References:

  Cisco > Cisco IOS IP Routing: Protocol-Independent Command Reference > distance (ip)

• Question 235:

  Refer to the exhibit.

  

  Why is the remote NetFlow server failing to receive the NetFlow data?

  A. The flow exporter is configured but is not used.
  B. The flow monitor is applied in the wrong direction.
  C. The flow monitor is applied to the wrong interface.
  D. The destination of the flow exporter is not reachable.
  A. The flow exporter is configured but is not used.

  ---

  flow exporter EXPORTER-1 destination 172.16.10.2 transport udp 90 exit flow monitor FLOW-MONITOR-1 record netflow ipv4 original-input exporter EXPORTER-2 exporter EXPORTER-1

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-mt/fnf-15-mt-book/cfg-de-fnflow-exprts.html

• Question 236:

  Refer to the exhibit.

  

  The network administrator configured the Chicago router to mutually redistribute the LA and NewYork routes with OSPF routes to be summarized as a single route in EIGRP using the longest summary mask:

  

  After the configuration, the New York router receives all the specific LA routes but the summary route. Which set of configurations resolves the issue on the Chicago router?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 237:

  An engineer configured SNMP notifications sent to e management server using authentication and encrypting data with DES. An error in e response PDU is received as "UNKNOWNUSERNAME, WRONGDIGEST". Which action resolves the issue?

  A. Configure the correct authentication password using SNMPv3 authNoPriv.
  B. Configure correct authentication and privacy passwords using SNMPv3 authPriv.
  C. Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.
  D. Configure the correct authentication password using SNMPv3 authPriv.
  B. Configure correct authentication and privacy passwords using SNMPv3 authPriv.

  ---

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-3se/3850/snmp-xe-3se-3850-book/nm There are three SNMP security levels (for SNMPv1, SNMPv2c, and SNMPv3):

  +

  noAuthNoPriv: Security level that does not provide authentication or encryption.

  +

  authNoPriv: Security level that provides authentication but does not provide encryption.

  +

  authPriv: Security level that provides both authentication and encryption. For SNMPv3, "noAuthNoPriv" level uses a username match for authentication.

• Question 238:

  Refer to the exhibit.

  

  After a security hardening was performed on a router, the administrator cannot access the command line of any remote device. Which action resolves the issue?

  A. Remove the transport output none command from the line con 0 section.
  B. Remove the egress ACL blocking Telnet and SSH on the router interfaces.
  C. Move Telnet and SSH commands to a nonzero privilege level.
  D. Modify the AAA policy to allow the user to run the Telnet and SSH commands.
  B. Remove the egress ACL blocking Telnet and SSH on the router interfaces.

• Question 239:

  When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

  A. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction
  B. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction
  C. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction
  D. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction
  B. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

• Question 240:

  Refer to the exhibit.

  

  An engineer must configure EIGRP between R1 and R2 with no summary route. Which configuration resolves the issue?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---