Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 331:

  Which technology uses the many-to-one method of mapping IP addresses?

  A. static NAT
  B. dynamic NAT
  C. NAT-PT
  D. PAT
  D. PAT

• Question 332:

  Which configuration adds an IPv4 interface to an OSPFv3 process in OSPFv3 address family configuration?

  A. router ospfv3 1 address-family ipv4
  B. Router(config-router)#ospfv3 1 ipv4 area 0
  C. Router(config-if)#ospfv3 1 ipv4 area 0
  D. router ospfv3 1 address-family ipv4 unicast
  C. Router(config-if)#ospfv3 1 ipv4 area 0

• Question 333:

  You instructed your associate to configure Router R2 to reject a redistribution of the 20.0.0.0/8 network, while still receiving routes from other networks connected to Router R1. The diagram below displays the network in place:

  

  When he is finished, you find that the 20.0.0.0/8 network still being advertised and traffic from the 20.0.0.0/8 network is not reaching Router2. You execute the show running-configuration command and see the following output:

  

  What is the problem?

  A. The access list was applied to the wrong interface.
  B. The access list should have been configured as a distribute list.
  C. The access list has an incorrect wildcard mask.
  D. The access list is applied in the wrong direction.
  B. The access list should have been configured as a distribute list.

  ---

  The access list should have been created as a distribute list to control route redistribution from the other area. This configuration would prevent the redistribution of the 20.0.0.0/8 network by applying the list as a distribute list under the Border Gateway Protocol (BGP). The proper commands would be:

  Router2(config)# router bgp 94688

  Router2(config-router)# distribute-list 101 in

  To correct the problem with traffic not arriving from the 20.0.0.0/8 network, you must remove the application of the list under interface S0 as well. This would be done by executing the following command set:

  Router2(config)# interface Serial1

  Router2(config-int)# no ip access-group 101 in

  The access list was not applied to the wrong interface. It should not have been applied directly to any interface. When applied directly as an access list to an interface, it will prevent traffic, but not the redistribution of routes.

  The access list does not have an incorrect wildcard mask. To prevent the redistribution of a Class C network, the correct wildcard mask is 0.0.0.255.

  The access list was not applied in the wrong direction. It should be applied incoming, but should be applied as an incoming distribute list, and it should be applied under the BGP protocol.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify filtering with any protocol

  References:

  Cisco IOS Master Command List, Release 12.4T > d > distribute-list in (IP) Cisco > Home > Support > Technology Support > IP > IP Routing > Design > Design Technotes > Filtering Routing Updates on Distance Vector IP Routing Protocols

• Question 334:

  Your network team is assessing options available to translate IPv6 address to IPv4 addresses.

  Which of the following is an advantage of NAT64 over NAT-PT as a translation option?

  A. DNS64 and NAT64 functions are completely separated
  B. DNS64 and NAT64 functions are completely integrated
  C. NAT64 only works over an Ethernet network
  D. NAT64 will be unable to reconstruct fragments packets if they are fragmented by an intermediate IPv4 router
  A. DNS64 and NAT64 functions are completely separated

  ---

  DNS64 and NAT64 functions are completely separated when using NAT64. In NAT-PT these two functions are tightly coupled, which reduces flexibility and is why NAT-PT has been deprecated, with the IETF proposing NAT64 as its viable successor.

  DNS64 and NAT64 functions are not completely integrated in NAT64, so this is not an advantage of NAT64 over NAT-PT as a translation option.

  NAT64 works over non- Ethernet networks. It is NAT-PT that does only works on Ethernet networks.

  Therefore, this is not an advantage of NAT 64 over NAT-PT.

  NAT64 can reconstruct fragments packets if they are fragmented by an intermediate IPv4 router. It is NAT-PT that will be unable to reconstruct fragments packets if they are fragmented by an intermediate IPv4 router, so this is not an advantage of NAT 64 over NAT-PT.

  Objective:

  Infrastructure Services

  Sub-Objective:

  Describe IPv6 NAT

  References:

  Home > Products and services > Cisco IOS and NX-OS software > Cisco IOS technologies > Enterprise IPv6 solution > Data sheets and literature > White papers > NAT64 Technology: Connecting IPv6 and IPv4 Networks > Technologies Facilitating IPv6/IPv4 Translation

• Question 335:

  Refer to the exhibit.

  

  Traffic from R3 to the central site does not use alternate paths when R3 cannot reach 10.10.10.2. Traffic on R3 destined to R4 takes an alternate route via 10.10.10.6 when 10.10.10.4 is not accessible from R3. Which configuration switches traffic destined to 10.10.10.2 from R3 on the alternate path?

  A. R3(config)#ip route 192.168.10.1 255.255.255.255 10.10.10.2 track 20
  B. R6(config)#ip route 10.10.10.3 255.255.255.255 10.0.0.30
  C. R3(config)#track 20 ip sla 20 reachability
  D. R2(config)#ip route 10.10.10.3 255.255.255.255 10.0.0.6
  A. R3(config)#ip route 192.168.10.1 255.255.255.255 10.10.10.2 track 20

• Question 336:

  Which security feature can protect DMVPN tunnels?

  A. IPsec
  B. TACACS+
  C. RTBH
  D. RADIUS
  A. IPsec

• Question 337:

  Which rouler takes an active role between two LDP neighbors when initiating LDP session negotiation and LDP TCP connection establishment?

  A. with the higher IP address
  B. with the larger number of LDP TCP neighbors
  C. with the lowest IP address
  D. with one interface in the MPLS backbone
  A. with the higher IP address

• Question 338:

  Refer to the exhibit. The output of the trace route from R5 shows a loop in the network. Which configuration prevents this loop?

  

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

• Question 339:

  Refer to the exhibit. The Math and Science departments connect through the corporate IT router but users in the Math department must not be able to reach the Science department and vice versa Which configuration accomplishes this task?

  

  A. vrf definition Science address-family ipv4 ! interface E 0/2 vrf forwarding Science ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 vrf forwarding Science ip address 192.168.2.1 255.255.255.0 no shut
  B. vrf definition Science address family ipv4 ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 no shut
  C. vrf definition Science ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 no shut
  D. vrf definition Science address-family ipv4 ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 vrf forwarding Science no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 vrf forwarding Science no shut
  A. vrf definition Science address-family ipv4 ! interface E 0/2 vrf forwarding Science ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 vrf forwarding Science ip address 192.168.2.1 255.255.255.0 no shut

• Question 340:

  An engineer configured a company's multiple area OSPF Head Office router and Site A Cisco routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone:

  Head Office & Site A
   ip cef
   ip vrf abc
   rd 101:101
   !
   interface FastEthernet0/0
   ip vrf forwarding abc
   ip address 172.16.16.X 255.255.255.252
   !
   router ospf 1 vrf abc
   log-adjacency-changes
   network 172.16.16.0 0.0.0.255 area 1
  

  After finishing both site router configurations, none of the LSA 3, 4, 5, and 7 are installed at Site A router.

  Which configuration resolves this issue?

  A.

  configure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc

  
  B.

  configure capability vrf-lite on Head Office and its connected PE router under router ospf 1 vrf abc

  
  C.

  configure capability vrf-lite on both PE routers connected to Head Office and Site A routers under routtr ospf 1 vrf abc

  
  D.

  configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc

  D.

  configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc

  ---