Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 341:

  Refer to the exhibits.

  

  A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router. Which set of configurations fixes the issue?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

  ---

• Question 342:

  Refer to the exhibit.

  

  A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log messages stream, it is impossible to capture the problem.

  Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two.)

  A. debug condition ospf neighbor
  B. debug condition interface
  C. debug condition session-id ADJCHG
  D. debug condition all
  E. debug condition ip
  B. debug condition interface
  C. debug condition session-id ADJCHG

  ---

  sw#debug condition os % Unrecognized command sw#debug condition session-id <1-4294967295> Session Number for debug filtering

• Question 343:

  Which of the following are used to validate the source of IPv6 traffic and are considered IPv6 layer 2 snooping features? (Choose two.)

  A. DHCPv6 Guard
  B. DHCPv6 Root Guard
  C. IPv6 Source Guard
  D. IPv6 Prefix Guard
  C. IPv6 Source Guard
  D. IPv6 Prefix Guard

• Question 344:

  DRAG DROP

  Drag and drop the descriptions from the left onto the IPv6 first hop security features on the right. Not all options are used.

  Select and Place:

  

  

  Explanation:

• Question 345:

  You are configuring a DHCP server to service a group of clients that are located on a different subnet than the DHCP server itself. What else must you configure to ensure a successful setup?

  A. Relay agent
  B. Multicast routing
  C. Unicast routing
  D. Access list
  A. Relay agent

  ---

  If a DHCP server needs to service clients in a different subnet, you will need to configure a relay agent. The relay agent service is enable by default but does not function unless you provide the IP address of the remote DHCP server, which is done by executing the ip helper address command on the interface where the address needs to be announced.

  The fact that the clients are on a different subnet indicates that there is a router between the DHCP server and the clients. The DHCP discover packet that a client sends out is in the form of a broadcast. Routers do not forward broadcast traffic from one segment to the other. Without a relay agent, the DHCP server would never receive the requests.

  A relay agent resides on the same segment as the clients. When a client sends out a discover packet, the relay agent takes the request, converts it to a unicast packet, and forwards the request to the DHCP server on the other network segment. The relay agent can also be activated on the router that separates the two network segments. To enable the relay agent service on a Cisco router where 172.16.10.2 is the IP address of the DHCP server, use the following command:

  Router(config-if)# ip helper-address 172.16.10.2

  A relay agent can also be used to assist in the auto configuration of a switch. Auto configuration is a process whereby:

  1. A switch boots up.

  2. The switch obtains an IP address, subnet mask, and gateway address (optional).

  3. The switch uses the DNS server to locate the TFTP server.

  4. The switch connects to the TFTP server, downloads the configuration file, and applies it.

  When the switch must broadcast to locate the DHCP, DNS, or TFTP server, IP helper addresses can be provided for all of these. When the switch broadcasts, a unicast will be sent to all of these addresses.

  In following illustration, the FastEthernet0 interface of the router is connected to the subnet containing the switch and the FastEthernet1 interface of the router is connected to the subnet containing the DHCP, DNS, and TFTP servers. The addresses involved are: Switch - 10.2.2.2 Router - F0 10.2.21, F2 20.2.2.2 DHCP - 20.2.2.5 DNS - 20.2.2.6 TFTP - 20.2.2.7

  The router that is located between the subnet containing the switch and the subnet containing the DHCP, DNS, and TFTP servers should be configured as shown below:

  

  Regardless of whether the ip helper-address command has been used to aid in the DHCP configuration of a switch utilizing auto configuration, or to aid DHCP clients in a different subnet from the DHCP server, the DHCP relay service will provide relay services for the following UDP protocols by default:

  Trivial File Transfer Protocol (TFTP) (port 69)

  Domain Naming System (DNS) (port 53)

  Time service (port 37)

  NetBIOS Name Server (port 137)

  NetBIOS Datagram Server (port 138)

  Boot Protocol (BOOTP) client and server packets (ports 67 and 68) TACACS service (port 49)

  IEN-116 Name Service (port 42)

  This default behavior can be altered with the IP forward-protocol udp command executed in global configuration mode.

  Multicast routing, unicast routing and access lists do not aid in the DHCP communication process.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Identify, configure, and verify IPv4 addressing and subnetting

  References:

  Cisco > IP Addressing: DHCP Configuration Guide > Configuring the Cisco IOS DHCP Relay Agent

• Question 346:

  DRAG DROP

  The steps for configuring BGP on Cisco IOS Router:

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 347:

  The network administrator must configure R1 to authenticate Telnet connections based on Cisco ISE using RADIUS. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1 (192.168.1.1) with a shared secret password of Cisco123.

  The administrator has configured this on R1:

  aaa new-model ! radius server ISE1 address ipv4 192.168.1.5 key Cisco123 ! aaa group server tacacs+ RAD-SERV server name ISE1 ! aaa authentication login default group RAD-SERV

  The network administrator cannot authenticate to access R1 based on ISE. Which set of configurations fixes the issue?

  A. line vty 0 4 login authentication RAD-SERV
  B. aaa group server tacacs+ ISE1 server name RAD-SERV
  C. aaa group server radius RAD-SERV server name ISE1
  D. line vty 0 4 login authentication default
  C. aaa group server radius RAD-SERV server name ISE1

  ---

  aaa new-model aaa authentication login default group radius ! aaa group server radius RAD server name SERV_RADIUS ! radius server SERV_RADIUS address ipv4 key !

• Question 348:

  Reler Iothe exhibit.

  

  The engineer is trying to transfer the new IOS file to the router R3 but is getting an error. Which configuration achieves the file transfer?

  A. R4(config)# no access-list 120 permit udp host 172.16.1.2 host 172.16.2.19 eq 69 R3(config)# no ip tftp source-interface GigabitEthernet0/3
  B. R4(config)# no access-list 120 permit udp host 172.16.1.2 host 172.16.2.19 eq 69 R4(config)# access-list 120 permit udp host 172.16.1.17 host 172.16.2.19 eq 69 R4(config)# access-list 120 permit tcp any any
  C. R4(config)# no access-list 120 permit udp host 172.16.1.2 host 172.16.2.19 eq 69 R4(config)# no access-list 120 deny udp any any eq tftp R4(config)# access-list 120 permit tcp any any
  D. R4(config)# no access-list 120 permit udp host 172.16.1.2 host 172.16.2.19 eq 69 R4(config)# access-list 120 permit tcp host 172.16.1.17 host 172.16.2.19 eq 69 R4(config)# access-list 120 permit tcp any any
  B. R4(config)# no access-list 120 permit udp host 172.16.1.2 host 172.16.2.19 eq 69 R4(config)# access-list 120 permit udp host 172.16.1.17 host 172.16.2.19 eq 69 R4(config)# access-list 120 permit tcp any any

• Question 349:

  Refer to the exhibit.

  

  The forwarding entries how that the next hop for prefixes from the 172.16.0.0/16 network is set to 10.2.2.2 instead of 10.1.1.1. Which action resolves the issue?

  A. Add set ip next hop 10.1.1.1 in route-map RED permit 20.
  B. Add the continue statement in route-map RED permit 10 instead of continue 20.
  C. Remove match ip address prefix-list 1 from route-map RED permit 10.
  D. Remove the continue 20 statement from route-map RED permit 10
  D. Remove the continue 20 statement from route-map RED permit 10

• Question 350:

  Refer to the exhibit.

  

  An engineer uses NetFlow to troubleshoot a voice quality issue from the branch office and notices that the traffic is not arriving in the correct format to the collector.

  Which configuration resolves the issue?

  A. R2(config-flow-exporter)#export-protocol netflow-v5 R2(config)#flow exporter CCNPEXP1
  B. R2(config-flow-exporter)#export-protocol netflow-v9 R2(config)#flow exporter CCNPEXP1
  C. R2(config-flow-exporter)#export-protocol netflow-v9 R2(config-flow-monitor)#flow exporter CCNPEXP1 R2(config-flow-monitor)#no exporter CCNPEXP1 R2(config)#flow monitor CCNPMON1
  D. R2(config-flow-exporter)#export-protocol ipfix R2(config-flow-monitor)#flow exporter CCNPEXP1 R2(config-flow-monitor)#no exporter CCNPEXP1 R2(config)#flow monitor CCNPMON1
  C. R2(config-flow-exporter)#export-protocol netflow-v9 R2(config-flow-monitor)#flow exporter CCNPEXP1 R2(config-flow-monitor)#no exporter CCNPEXP1 R2(config)#flow monitor CCNPMON1