Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 261:

  Refer to the exhibits. All the serial links between R1, R2, and R3 have the same bandwidth. Users on the 192.168.1.0/24 network report slow response times while they access resources on network 192.168.3.0/24. When a traceroute is run on the path, it shows that the packet is getting forwarded via R2 to R3 although the link between R1 and R3 is still up. What must the network administrator do to fix the slowness?

  

  A. Add a static route on R1 using the next hop of R3.
  B. Remove the static route on R1.
  C. Change the Administrative Distance of EIGRP to 5.
  D. Redistribute the R1 static route to EIGRP.
  B. Remove the static route on R1.

• Question 262:

  A customer is running an mGRE DMVPN tunnel over WAN infrastructure between hub and spoke sites. The existing configuration allows NHRP to add spoke routers automatically to the multicast NHRP mappings. The customer is migrating the network from IPv4 to the IPv6 addressing scheme for those spokes' routers that support IPv6 and can run DMVPN tunnel over the IPv6 network.

  Which configuration must be applied to support IPv4 and IPv6 DMVPN tunnels on spoke routers?

  A. tunnel mode ipv6ip 6to4
  B. tunnel mode ipv6ip auto-tunnel
  C. tunnel mode ipv6ip 6rd
  D. tunnel mode ipv6ip isatap
  B. tunnel mode ipv6ip auto-tunnel

  ---

  tunnel mode ipv6ip auto-tunnel Example: Router(config-if)# tunnel mode ipv6ip auto-tunnel

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/interface/configuration/15-s/ir-15-s-book/ip6-auto-comp-tun.pdf

• Question 263:

  Refer to the exhibit. The neighbor relationship is not coming up. Which two configurations bring the adjacency up? (Choose two)

  

  A. LA interface E 0/0 ip ospf authentication-key Cisco123
  B. NY interface E 0/0 no ip ospf message-digest-key 1 md5 Cisco123 ip ospf authentication-key Cisco123
  C. LA interface E 0/0 ip ospf message-digest-key 1 md5 Cisco123
  D. LA router ospf 1 area 0 authentication message-digest
  E. NY router ospf 1 area 0 authentication message-digest
  C. LA interface E 0/0 ip ospf message-digest-key 1 md5 Cisco123
  D. LA router ospf 1 area 0 authentication message-digest

  ---

  The configuration on NY router is good for OSPF authentication. So we must enable OSPF authentication on LA router with the following commands:

  router ospf 1 area 0 authentication message-digest interface E0/0 ip ospf message-digest-key 1 md5 Cisco123

• Question 264:

  Refer to the exhibit.

  

  An engineer implemented an access list on R1 to allow anyone to Telnet except R2 Loopback0 to R1 Loopback4 How must sequence 20 be replaced on the R1 access list to resolve the issue?

  A. sequence 20 permit tcp host 1001:ABC:2011:7::1 host 400A:0:400C::1 eq telnet
  B. sequence 20 deny tcp host 400A:0:400C::1 host 1001:ABC:2011:7::1 eq telnet C. sequence 20 permit tcp host 400A:0:400C::1 host 1001:ABC:2011:7::1 eq telnet
  D. sequence 20 deny tcp host 1001:ABC:2011:7::1 host 400A:0:400C::1 eq telnet
  D. sequence 20 deny tcp host 1001:ABC:2011:7::1 host 400A:0:400C::1 eq telnet

• Question 265:

  You recently implemented SNMPv3 to increase the security of your network management system. A partial output of the show run command displays the following output that relates to SNMP.

  snmp-server group NORMAL v3 noauth read NORMAL write NORMAL

  Which of the following statements is true of this configuration?

  A. it provides encryption, but it does not provide authentication
  B. it provides neither authentication nor encryption
  C. it provides authentication, but it does not provide encryption
  D. it provides both authentication and encryption
  B. it provides neither authentication nor encryption

  ---

  It provides neither authentication nor encryption. In SNMPv3 there are three combinations of security that can be used:

  noAuthNoPriv- no authentication and no encryption noauth keyword in the configuration AuthNoPriv - messages are authenticated but not encrypted auth keyword in the configuration AuthPriv - messages are authenticated and encrypted priv keyword in the configuration In this case, the keyword noauth in the configuration indicates that no authentication and no encryption are provided. This makes the implementation no more secure than SNMPv1 or SNMPv2.

  In SNMPv1 and SNMPv2, authentication is performed using a community string. When you implement SNMP using the noauth keyword, it does not use community strings for authentication. Instead it uses the configured user or group name (in this case NORMAL). Regardless, it does not provide either authentication or encryption.

  Objective:

  Infrastructure Services

  Sub-Objective:

  Configure and verify SNMP

  References:

  SNMP Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3850 Switches) > SNMPv3

• Question 266:

  Refer to the exhibit.

  

  An engineer configured NetFlow on R1, but the NMS server cannot see the flow from ethernet0/0 of R1. Which configuration resolves the issue?

  A. flow monitor Flowmonitor1 source Ethernet0/0
  B. interface Ethernet0/1 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output
  C. interface Ethernet0/0 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output
  D. flow exporter FlowAnalyzer1 source Ethernet0/0
  C. interface Ethernet0/0 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output

• Question 267:

  Unicast Reverse Path Forwarding (uRPF) has been configured on a service provider network to protect itself from spoofed based attacks. Which of the following are valid uRPF modes? (Choose two.)

  A. Strict mode
  B. Open mode
  C. Closed mode
  D. Block mode
  E. Loose mode
  A. Strict mode
  E. Loose mode

• Question 268:

  Refer to the exhibit.

  

  An engineer applied filter on R1 The interface flapped between R1 and R2 and cleaning the BGP session did not restore the BGP session and failed

  Which action must the engineer take to restore the BGP session from R2 to R1?

  A. Apply the IPv6 traffic filter in the outbound direction on the interface.
  B. ICMPv6 must be permitted by the IPv6 traffic filter.
  C. Enable the BGP session, which went down when the session was cleared.
  D. Swap the source and destination IP addresses in the IPv6 traffic filter.
  B. ICMPv6 must be permitted by the IPv6 traffic filter.

  ---

• Question 269:

  Refer to the exhibit.

  

  A prefix list is created to filter routes inbound to an EIGRP process except for network 10 prefixes After the prefix list is applied no network 10 prefixes are visible in the routing table from EIGRP. Which configuration resolves the issue?

  A. ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9.
  B. ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32
  C. ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8
  D. ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9 ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32
  C. ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8

  ---

• Question 270:

  Refer to the exhibit.

  

  Which action restores the routes from neighbors while still filtering 1.1.1.0/24?

  A. Add a second line in the access list to permit any.
  B. Modify the route map to permit the access list instead of deny it
  C. Modify the access list to deny insteac of permit it.
  D. Add a second sequence in the route map permit 20
  D. Add a second sequence in the route map permit 20