Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 371:

  DRAG DROP

  Refer to the exhibit.

  

  Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are used.

  Select and Place:

  

  

  ---

  Explanation/Reference:vty 0:

  + cisco

  + 0csic

  vty 1:

  + no username

  + no password

  The command “aaa authentication login default none” means no authentication is required when access to the device via Console/VTY/AUX so if one interface does not specify another login authentication method (via the “login authentication …” command), it will allow to access without requiring username or password. In this case VTY 1 does not specify another authentication login method so it will use the default method (which is “none” in this case).

• Question 372:

  Which of the following OSPF Link State Advertisements (LSA's) were created for IPV6 and do not apply to IPv4 OSPF networks? (Choose two.)

  A. Link LSA (Type 8)
  B. Summary LSA (Type 3)
  C. Router LSA (Type 2)
  D. Intra-Area Prefix LSA (Type 9)
  E. Opaque LSA (Type 9)
  A. Link LSA (Type 8)
  D. Intra-Area Prefix LSA (Type 9)

• Question 373:

  Examine the following partial output of the show run command.

  

  Which of the following statements is true?

  A. NTP broadcasts will be sent on E0
  B. NTP broadcasts will be received on E0
  C. NTP broadcasts will be received on E1
  D. NTP broadcasts will be sent on E2
  B. NTP broadcasts will be received on E0

  ---

  NTP broadcasts will be received on E0. This information is indicated by the presence of the command ntp broadcast client under that interface:

  interface Ethernet0

  ip address 10.10.88.50 255.255.255.254

  ntp broadcast client

  !

  The ntp broadcast client command configures a device to listen to NTP broadcast messages.at that interface.

  NTP broadcasts will be received, not sent, on E0.

  NTP broadcasts will be sent, not received, on E1, because the ntp broadcast command was applied to the Ethernet1 interface:

  interface Ethernet1

  ip address 10.86.194.176 255.255.254.0

  ntp broadcast

  The required command to receive broadcasts, ntp broadcast client, is present under the E0 interface, not the E1 interface.

  NTP broadcasts will not be sent on E2. There are no ntp commands under that interface.

  Objective:

  Infrastructure Services

  Sub-Objective:

  Configure and verify Network Time Protocol (NTP)

  References:

  Cisco > Cisco IOS Basic System Management Command Reference > ntp broadcast Cisco > Cisco IOS Basic System Management Command Reference > ntp broadcast client

• Question 374:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  A company is connected to an ISP and some of the networks between the ISP and the company are not reachable. Troubleshoot and resolve the issues to achieve these goals:

  1. A single /16 is advertised for all infrastructure-connected interfaces that belong to the 10.20.x.x network using BGP network commands from border routers connected to the ISP. Configuration modification is allowed in R4 and R5 to achieve the results. Do not use the BGP aggregate command.

  2. R6 receives the ISP R2 Loopback2 from R4 and receives a summary address for both Loopbacks of ISP R2 from R4 or R5. Use BGP attribute local-preference, add , for example, for R6, use “default+6 = value to be used”. Use the existing prefix lists or route maps with the sequence numbering starting at 10 and added in increments of 10.

  3. R6 receives the ISP R2 Loopback1 from R5 and receives a summary address for both Loopbacks of ISP R2 from R4 or R5 using the same guidelines.

  4. R6 advertises its Loopback1 /24 address through BGP.

  A. See the solution below in Explanation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the solution below in Explanation.

  ---

  

  

• Question 375:

  What is a function of the IPv6 DHCP Guard feature for DHCP messages?

  A. If the device is configured as a DHCP server, no message is switched.
  B. All client messages are always switched regardless of the device role.
  C. It blocks only DHCP request messages.
  D. Only access lists are supported for matching traffic.
  B. All client messages are always switched regardless of the device role.

  ---

  DHCPv6 Guard Overview The DHCPv6 Guard feature blocks reply and advertisement messages that come from unauthorized DHCP servers and relay agents. Packets are classified into one of the three DHCP type messages. All client messages are always switched regardless of device role. DHCP server messages are only processed further if the device role is set to server. Further processing of server messages includes DHCP server advertisements(for source validation and server preference) and DHCP server replies (for permitted prefixes). If the device is configured as a DHCP server, all the messages need to be switched, regardless of the device role configuration. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-sy/dhcp-15-sy-book/ip6-dhcpv6-guard.pdf

• Question 376:

  An engineer must override the normal routing behavior of a router for Telnet traffic that is destined to 10.10.10.10 from 10.10.1.0/24 via a next hop of 10.4.4.4. which is directly connected to the router that is connected to the 10.1.1.0/24 subnet

  Which configuration reroutes traffic according to this requirement?

  A. access-list 100 deny tcp 10.10.1.0 0.0.0.255 host 10.10.10.10 eq 23 ! route-map POLICY permit 10 match ip address 100 set ip next-hop 10.4.4.4 route-map POLICY permit 20
  B. access-list 100 permit tcp 10.10.1.0 0.0.0.255 host 10.10.10.10 eq 23 ! route-map POLICY permit 10 match ip address 100 set ip next-hop 10.4.4.4 route-map POLICY permit 20
  C. access-list 100 permit tcp 10.10.1.0 0.0.0.255 host 10.10.10.10 eq 23 ! route-map POLICY permit 10 match ip address 100 set ip next-hop recursive 10.4.4.4 route-map POLICY permit 20
  D. access-list 100 permit tcp 10.10.1.0 0.0.0.255 host 10.10.10.10 eq 23 ! route-map POLICY permit 10 match ip address 100 set ip next-hop recursive 10.4.4.4
  D. access-list 100 permit tcp 10.10.1.0 0.0.0.255 host 10.10.10.10 eq 23 ! route-map POLICY permit 10 match ip address 100 set ip next-hop recursive 10.4.4.4

  ---

• Question 377:

  Refer to the exhibit. Which interface configuration must be configured on the spoke A router to enable a dynamic DMVPN tunnel with the spoke B router?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  The command ip nhrp map multicast dynamic should be only used on Hub router, not spoke. If we are running dynamic routing protocols based on multicast (like RIP, OSPF, EIGRP ...) we have to add the command ip nhrp map multicast dynamic in Hub to replicate all multicast traffic to all dynamic entries in the NHRP table (multicast will be proceeded as unicast traffic) - The tunnel source FastEthernet0/0 is equivalent to tunnel source 172.17.0.2, which is the NBMA address of Spoke A.

• Question 378:

  Refer to the exhibit. ISP 1 and ISP 2 directly connect to the Internet. A customer is tracking both ISP links to achieve redundancy and cannot see the Cisco IOS IP SLA tracking output on the router console. Which command is missing from the IP SLA configuration?

  

  A. Start-time 00:00
  B. Start-time 0
  C. Start-time immediately
  D. Start-time now
  D. Start-time now

  ---

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsla/configuration/15-mt/sla-15-mt-book/sla_icmp_echo.html

• Question 379:

  Earlier today you created and applied an access list designed to restrict remote access to the router R62 ONLY from the device at 2001:DB8:0:4:: 32. During testing, you discover that it is not having the desired effect. You execute the show run command and see the following partial output that is relevant to the issue: Why is the access list not functioning correctly?

  

  A. the IPv6 address in the list is not formatted correctly
  B. the list is not applied to the proper interface
  C. the list is missing a deny statement
  D. the ipv6 access-group command should be used to apply the list
  B. the list is not applied to the proper interface

  ---

  The list is applied to the wrong interface. An access list that is designed to control remote access should be applied to the VTY lines, not to one of the physical interfaces. If the command were formatted correctly, the show run output would appear as follows:

  

  The IPv6 address is formatted correctly. Although it has been shortened in format, it follows all of the shortening rules. It omits only leading zeros and it utilizes the double colon only once.

  The access list does not require a deny statement. There is an implicit deny all at the end of the list.

  The ipv6 access-group command should not be used to apply the list. This command is used when an access list is applied to a physical interface, not the VTY lines.

  Objective:

  Infrastructure Security

  Sub-Objective:

  Configure and verify router security features

  References:

  Cisco > IPv6 Configuration Guide, Cisco IOS Release 15.0S > Implementing Traffic Filters and Firewalls for IPv6 Security > Access Control Lists for IPv6 Traffic Filtering Cisco > Security Configuration Guide: Access Control Lists, Cisco IOS Release 15S > Controlling Access to a Virtual Terminal Line

• Question 380:

  Refer to the exhibit.

  

  The administrator can see the traps for the failed login attempts, but cannot see the traps of successful login attempts. What command is needed to resolve the issue?

  A. Configure logging history 2
  B. Configure logging history 3
  C. Configure logging history 4
  D. Configure logging history 5
  D. Configure logging history 5

  ---

  By default, the maximum severity sent as a syslog trap is warning. That is why you see syslog traps for login failures. Since a login success is severity 5 (notifications), those syslog messages will not be converted to traps. To fix this, configure:

  

  Note:

  The syntax of login block is:

  login block-for seconds attempts tries within seconds