Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 251:

  Refer to the exhibit. An engineer must block access to the console ports for all corporate remote Cisco devices based on the recent corporate security policy but the security team still can connect through the console port.

  

  Switch# ! line con 0 logging synchronous line aux 0 line vty 0 4 password cisco@123 login transport input ssh telnet ! end

  Which configuration on the console port resolves the issue?

  A. login and password
  B. exec 0 0
  C. transport input telnet
  D. no exec
  D. no exec

  ---

  "no exec" will disable access to a line. It is used if we want to allow only outgoing session (and disable incoming session) so this command will block all console port access. There is no "exec 0 0" command. We can only find the "exec prompt" command in IOS Version 15.4(2)T4.

  

  The most similar command is "exec-timeout 0 0" command, which is used to prevent Telnet/SSH sessions from timing out.

• Question 252:

  Which list defines the contents of an MPLS label?

  A. 20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL
  B. 32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL
  C. 20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit
  D. 32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit
  A. 20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

  ---

  The first 20 bits constitute a label, which can have 2^20 values. Next comes 3 bit value called Traffic Class. It was formerly called as experimental (EXP) field. Now it has been renamed to Traffic Class (TC). This field is used for QoS related functions. Ingress router can classify the packet according to some criterion and assign a 3 bit value to this filed. If an incoming packet is marked with some IP Precedence or DSCP value and the ingress router may use such a field to assign an FEC to the packet. Next bit is Stack bit which is called bottom-of-stack bit. This field is used when more than one label is assigned to a packet, as in the case of MPLS VPNs or MPLS TE. Next byte is MPLS TTL field which serves the same purpose as that of IP TTL byte in the IP header

  https://tools.ietf.org/html/rfc5462

• Question 253:

  Refer to the exhibit.

  

  The security department recently installed a monitoring device between routers R3 and R5, which a loss of network connectivity for users connected to R5. Troubleshooting revealed that the monitoring device cannot forward multicast packets. The team already updated R5 with the correct configuration. Which configuration must be implemented on R3 to resolve the problem by ensuring R3 as the DR for the R3-R5 segment?

  A. interface FastEthernet0/0 ip address 10.99.53.1 255.255.255.252 ip access-group 122 in ip ospf network non-broadcast ip ospf priority 100 ! router ospf 10 router-id 10.10.3.255 network 10.99.53.0 0.0.0.3 area 0 neighbor 10.99.53.2 ! access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1 access-list 122 deny 89 any any access-list 122 permit tcp any any access-list 122 permit udp any any access-list 122 permit icmp any any
  B. interface FastEthernet0/0 ip address 10.99.53.1 255.255.255.252 ip access-group 122 in ip ospf network non-broadcast ip ospf priority 0 ! router ospf 10 router-id 10.10.3.255 neighbor 10.99.53.2 ! access-list 122 permit 88 host 10.99.53.2 host 10.99.53.1 access-list 122 deny 88 any any access-list 122 permit tcp any any access-list 122 permit udp any any access-list 122 permit icmp any any
  C. interface FastEthernet0/0 ip address 10.99.53.1 255.255.255.252 ip access-group 122 in ip ospf network non-broadcast ip ospf priority 0 ! router ospf 10 router-id 10.10.3.255 network 10.99.53.0 0.0.0.3 area 0 neighbor 10.99.53.2 ! access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1 access-list 122 deny 89 any any access-list 122 permit tcp any any access-list 122 permit udp any any access-list 122 permit icmp any any
  D. interface FastEthernet0/0 ip address 10.99.53.1 255.255.255.252 ip access-group 122 in ip ospf network point-to-point ip ospf priority 0 ! router ospf 10 router-id 10.10.3.255 network 10.99.53.0 0.0.0.3 area 0 neighbor 10.99.53.2 ! access-list 122 permit 88 host 10.99.53.2 host 10.99.53.1 access-list 122 deny 88 any any access-list 122 permit tcp any any access-list 122 permit udp any any access-list 122 permit icmp any any
  A. interface FastEthernet0/0 ip address 10.99.53.1 255.255.255.252 ip access-group 122 in ip ospf network non-broadcast ip ospf priority 100 ! router ospf 10 router-id 10.10.3.255 network 10.99.53.0 0.0.0.3 area 0 neighbor 10.99.53.2 ! access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1 access-list 122 deny 89 any any access-list 122 permit tcp any any access-list 122 permit udp any any access-list 122 permit icmp any any

  ---

• Question 254:

  With Internal BGP, there is a requirement for all peers to be logically fully meshed, where all IBGP routers must peer with all other IBGP routers. For scaling purposes, there are two mechanisms that were developed to bypass this requirement. What are they? (Choose two.)

  A. Confederations
  B. IBGP to EBGP route redistribution
  C. BGP peer filtering
  D. Route reflectors.
  A. Confederations
  D. Route reflectors.

• Question 255:

  

  Routers R1 and R2 are being added to the network shown in the exhibit.

  The addresses of their respective interfaces have already been configured as follows:

  R1: E0 192.168.4.5/30

  R2: E0 192.168.4.6/30

  R2: E1 192.168.72.6/30

  You have been assigned to complete the following as a part of implementing OSPF area 5:

  The E0 interface on R1 should be in area 5.

  The E0 interface on R2 should be in area 5.

  The mask used with the OSPF configuration should only include the addresses for R1 and R2. Area 5 should not allow any external or inter-area routes (except for the default route).

  Which commands are required to accomplish this set of requirements? (Choose all that apply.)

  A. R1# configure terminal R1(config)# router OSPF 1 R1(config-router)# network 192.168.4.4 0.0.0.3 area 5 R1(config-router)# area 5 stub R1(config-router)# end R1# copy running-config startup-config
  B. R1# configure terminal R1(config)# router OSPF 1 R1(config-router)# network 192.168.4.4 0.0.0.3 area 5 R1(config-router)# area 5 stub no-summary R1(config-router)# end R1#copy running-config startup-config
  C. R1# configure terminal R1(config)# router OSPF 1 R1(config-router)# network 192.168.4.4 0.0.0.4 area 5 R1(config-router)# area 5 stub R1(config-router)# end R1# copy running-config startup-config
  D. R2# configure terminal R2(config)# router OSPF 1 R2(config-router)# network 192.168.4.4 0.0.0.3 area 5 R2(config-router)# area 5 stub no-summary R2(config-router)# end R2# copy running-config startup-config
  E. R2# configure terminal R2(config)# router OSPF 1 R2(config-router)# network 192.168.4.4 0.0.0.3 area 0 R2(config-router)# area 0 stub no-summary R2(config-router)# end R2# copy running-config startup-config
  F. R2# configure terminal R2(config)# router OSPF 1 R2(config-router)# network 192.168.4.4 0.0.0.3 area 5 R2(config-router)# area 5 stub R2(config-router)# end R2# copy running-config startup-config
  A. R1# configure terminal R1(config)# router OSPF 1 R1(config-router)# network 192.168.4.4 0.0.0.3 area 5 R1(config-router)# area 5 stub R1(config-router)# end R1# copy running-config startup-config
  D. R2# configure terminal R2(config)# router OSPF 1 R2(config-router)# network 192.168.4.4 0.0.0.3 area 5 R2(config-router)# area 5 stub no-summary R2(config-router)# end R2# copy running-config startup-config

  ---

  The following set of commands will configure R1 properly and satisfy the requirements:

  R1# configure terminal R1(config)# router OSPF 1 R1(config-router)# network 192.168.4.4 0.0.0.3 area 5 R1(config-router)# area 5 stub R1(config-router)# end R1# copy running-config startup-config

  The configure terminal command enters global configuration mode, from which the router ospf 1 command can be executed to enable OSPF process 1. The network command allows the192.168.4.4/30 network to join OSPF area 5 and uses a wildcard mask (0.0.0.3) that only includes the E0 interfaces on R1 and R2. The area 5 stub command configures R1 as an internal router in a totally stubby area, which is necessary because no external or inter-area routes are allowed. The final two commands exit OSPF configuration mode and save the configuration.

  The following set of commands will configure R2 properly and satisfy the requirements:

  R2# configure terminal R2(config)# router OSPF 1 R2(config-router)# network 192.168.4.4 0.0.0.3 area 5 R2(config-router)# area 5 stub no-summary R2(config-router)# end

  R2# copy running-config startup-config The configure terminal command enters global configuration mode, from which the router ospf 1 command can be executed to enable OSPF process 1. The network command allows the192.168.4.4/30 network to join OSPF area 5, and uses a wildcard mask (0.0.0.3) that only includes the E0 interfaces on R1 and R2. The area 5 stub no-summary command configures R2 as an area border router (ABR) in a totally stubby area, which is necessary because no external or inter-area routes are allowed. The final two commands exit OSPF configuration mode and save the configuration.

  The wildcard mask on both network statements, 0.0.0.3, is the wildcard equivalent of a 255.255.255.252 mask (/30). When used with the network address 192.168.4.4, this mask will only allow two addresses in the area, 192.168.4.5 and 192.168.4.6, as per the scenario requirements.

  The command set that executes the area 5 stub no-summary command on router R1 is incorrect because R1 is an internal router and does not require the no-summary keyword. The no-summary keyword is only required on the ABR when configuring a totally stubby area.

  The command set that executes the network 192.168.4.4 0.0.0.4 area 5 command on router R1 has the wrong wildcard mask.

  The command set that executes the network 192.168.4.4 0.0.0.3 area 0 command on router R2 is incorrect because the area should be area 5, not area 0.

  The command set that executes the area 5 stub command on router R2 is incorrect becauseR2 is an ABR router and requires the no-summary keyword when configuring a totally stubby area.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify network types, area types, and router types

  References:

  Cisco > Home > Support > Technology Support > IP Routing > Design > Design Technotes > What Are OSPF Areas and Virtual Links? > What Are Areas, Stub Areas, and Not-So-Stubby Areas? Cisco > Cisco IOS IP Routing: OSPF Command Reference > area stub

• Question 256:

  Refer to the exhibit. While troubleshooting a BGP route reflector configuration, an engineer notices that reflected routes are missing from neighboring routers. Which two BGP configurations are needed to resolve the issue? (Choose two)

  

  A. neighbor 10.1.1.14 route-reflector-client
  B. neighbor R2 route-reflector-client
  C. neighbor 10.1.1.2 allowas-in
  D. neighbor R4 route-reflector-client
  E. neighbor 10.1.1.2 route-reflector-client
  A. neighbor 10.1.1.14 route-reflector-client
  E. neighbor 10.1.1.2 route-reflector-client

  ---

• Question 257:

  Refer to the exhibit.

  

  Which configuration allows the operation level 1 team of 10 engineers to log in at least three at a time to router R3 using network credentials over HTTP?

  A. R3(config)#ip http authentication enable R3(config)#no access-list 20 permit 172.16.10.48 0.0.0.15 R3(config)#access-list 20 permit 172.16.10.48 0.0.0.7
  B. R3(config)#ip http max-connections 3 R3(config)#ip http accounting commands 3 default
  C. R3(config)#ip http authentication aaa R3(config)#ip http max-connections 3
  D. R3(config)#ip http authentication aaa R3(config)#no access-list 20 permit 172.16.10.48 0.0.0.15 R3(config)#access-list 20 permit 172.16.10.48 0.0.0.7
  C. R3(config)#ip http authentication aaa R3(config)#ip http max-connections 3

• Question 258:

  A company is expanding business by opening 35 branches over the Internet. A network engineer must configure DMVPN at the branch routers to connect with the hub router and allow NHRP to add spoke routers securely to the multicast NHRP mappings automatically

  Which configuration meets this requirement at the hub router?

  A. interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nbrp authentication KEY1 ip nhrp nhs dynamic ip nhop network-id 10 tunnel mode mgre auto
  B. interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp authentication KEY1 ip nhrp registration no-unique ip nhrp network-id 10 tunnel mode gre nmba
  C. interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp authentication KEY1 ip nhrp map multicast dynamic ip nbrp network-id 10 tunnel mode gre multipoint
  D. interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp authentication KEY1 ip nhrp map multicast 224.0.0.0 ip nhrp network-id 10 tunnel mode gre ipv4
  C. interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp authentication KEY1 ip nhrp map multicast dynamic ip nbrp network-id 10 tunnel mode gre multipoint

  ---

  The command "ip nhrp map multicast dynamic" allows NHRP to automatically add spoke routers to the multicast NHRP mappings.

• Question 259:

  Which statement about route distinguishers in an MPLS network is true?

  A. Route distinguishers allow multiple instances of a routing table to coexist within the edge router.
  B. Route distinguishers are used for label bindings.
  C. Route distinguishers make a unique VPNv4 address across the MPLS network.
  D. Route distinguishers define which prefixes are imported and exported on the edge router.
  C. Route distinguishers make a unique VPNv4 address across the MPLS network.

• Question 260:

  Refer to the exhibits.

  

  An engineer filtered messages based on severity to minimize log messages. After applying the filter, the engineer noticed that it filtered required messages as well. Which action must the engineer take to resolve the issue?

  A. Configure syslog level 2.
  B. Configure syslog level 3.
  C. Configure syslog level 4.
  D. Configure syslog level 5.
  D. Configure syslog level 5.