Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 391:

  An engineer configures PBR en R5 and wants to create a policy that matches traffic destined foward 10.10.10.0/24 and forwards it toward 10.1.1 1. This traffic must also have its IP precedence set to 5. All other traffic should be forwarded toward 10.1.1.2 and have its IP precedence set to 0.

  Which configuration meets the requirements?

  A. access-list 1 permit 10.10.10.0 0.0.0.255 access-list 2 permit any route-map CCNP permit 10 match ip address 1 set ip next-hop 10.1.1.1 set ip precedence 5 ! route-map CCNP permit 20 match ip address 2 set ip next-hop 10.1.1.2 set ip precedence 0route-map CCNP permit 30
  B. access-list 100 permit ip any 10.10.10.0 0.0.0.255 route-map CCNP permit 10 match ip address 100 set ip next-hop 10.1.1.1 set ip precedence 0 ! route-map CCNP permit 20 set ip next-hop 10.1.1.2 set ip precedence 5 ! route-map CCNP permit 30
  C. access-list 1 permit 10.10.10.0 0.0.0.255 route-map CCNP permit 10 match ip address 1 set ip next-hop 10.1.1.1 set ip precedence 5 ! route-map CCNP permit 20 set ip next-hop 10.1.1.2 set ip precedence 0
  D. access-list 100 permit ip any 10.10.10.0 0.0.0.255 route-map CCNP permit 10 match ip address 100 set ip next-hop 10.1.1.1 set ip precedence 5 ! route-map CCNP permit 20 set ip next-hop 10.1.1.2 set ip precedence 0
  D. access-list 100 permit ip any 10.10.10.0 0.0.0.255 route-map CCNP permit 10 match ip address 100 set ip next-hop 10.1.1.1 set ip precedence 5 ! route-map CCNP permit 20 set ip next-hop 10.1.1.2 set ip precedence 0

  ---

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/25ew/configuration/guide/conf/pbroute.pdf Classify traffic based on extended access list criteria.

• Question 392:

  Refer to the exhibit.

  

  AS65510 BGP is configured for directly connected neighbors. R4 cannot ping or traceroute network 192.168.100.0/24. Which action resolves this issue?

  A. Configure R1 as a route reflector server and configure R4 as a route reflector client
  B. Configure R4 as a route reflector server and configure R2 and R3 as route reflector clients.
  C. Configure R1 as a route reflector server and configure R2 and R3 as route reflector clients.
  D. Configure R4 as a route reflector server and configure R1 as a route reflector client.
  A. Configure R1 as a route reflector server and configure R4 as a route reflector client

  ---

• Question 393:

  What is the total length of an MPLS header?

  A. 16 bits
  B. 20 bits
  C. 28 bits
  D. 32 bits
  D. 32 bits

• Question 394:

  Examine the following access list:

  

  Which statement is NOT designed to prevent IP spoofing attacks from packets that appear to be sourced from inside the network, but are actually sourced from outside the network?

  A. access-list 110 deny ip 10.0.0.0 0.255.255.255 any
  B. access-list 110 deny ip 172.16.0.0 0.15.255.255 any
  C. access-list 110 deny ip 192.168.0.0 0.0.255.255 any
  D. access-list 110 deny ip 208.0.0.0 0.255.255.255 any
  D. access-list 110 deny ip 208.0.0.0 0.255.255.255 any

  ---

  Infrastructure access control lists are designed to prevent spoofing attacks from packets that appear to be sourced from inside the network when they are in fact sourced from outside the network. There are two groups of address that should be blocked at the edge of the network:

  The private address space, which are called RFC 1918 addresses Certain "special use addresses" as defined in RFC 3330

  The address 208.0.0.0 0.255.255.255 falls into neither of those categories.

  The RFC 1918 addresses that should be blocked are:

  10.0.0.0/24

  172.16.0.0/16

  192.168.0.0/16

  The RFC 3330 addresses that should be blocked are:

  0.0.0.0 127.0.0.0/8 192.0.2.0/24 224.0.0.0/4

  For more information about these special use addresses, see RFC 3330.

  Objective:

  Infrastructure Security

  Sub-Objective:

  Configure and verify router security features

  References:

  Home > Support > Technology Support > IP > IP addressing services > Technology information > Technology white paper >Protecting Your Core: Infrastructure Protection Access Control Lists

• Question 395:

  Refer to the following diagram of an OSPF network.

  

  Which of the following routers generate network link advertisements (NLA)? (Choose all that apply.)

  A. R3
  B. R4
  C. R7
  D. R8
  E. R9
  F. R13
  A. R3
  E. R9

  ---

  The R3 and the R9 routers in the scenario generate network link advertisements (NLA). An NLA or a Type 2 LSA is generated only by the designated router (DR) of a segment. Type 2 LSAs are generated only for those networks in which a DR has been selected. A DR is a router that has the highest OSPF priority on a segment. Until there are two OSPF routers on the segment, no Type 2 LSAs will be generated.

  Type 2 LSAs are flooded in the area that contains the network segment with the DR. These advertisements are used by the DR to represent the routers that are connected to the network. This type of LSA is sent to those routers that belong to the same network as the DR. Therefore, in this case, Type 2 LSAs are generated by the R3 and the R9 routers. R3 sends the LSAs to R1, R2, and R4, while R9 sends LSAs to R8, R10, and R11.

  R4, R7, or R8 will not send NLAs or Type 2 LSAs. These three routers are area border routers (ABR) for different OSPF areas. Like any other OSPF router, these routers generate Type 1 LSAs or router link advertisements (RLA). The LSAs contain the state of the routers that belong to same area. In this case, R4 generates and floods Type 1 LSAs into Area 0 and Area 10. Similarly, R7 and R8 flood Type 1 LSAs into Area 0 and Area 20, and Area 0 and Area 30, respectively.

  ABRs also generate Type 3 and Type 4 LSAs or summary link advertisements (SLA). These LSAs are flooded into other areas to and from the backbone area. Type 3 LSAs contain the list of networks that are exchanged between two areas. In this case, R4 floods Type 3 LSAs into Area 0 and Area 10; R7 floods these LSAs into Area 0 and Area 20; and R8 floods them into Area 0 and Area 30. Type 4 LSAs list the routes that point to autonomous system boundary router (ASBR).

  R13 will not generate Type 2 LSAs. R13 is an Area System Border Router (ASBR), which generate Type 5 LSAs apart from Type 1 LSAs. Type 5 LSAs, or external link advertisements, list the routes external to the AS; they are flooded throughout the OSPF domain except for stub areas.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify network types, area types, and router types

  References:

  Cisco > Home > Support > Technology Support > IP > IP Routing > Technology Information > Technology Whitepaper > OSPF Design Guide

• Question 396:

  You have configured a BGP network with several routers in the same autonomous system (AS). There are three possible routes from router A to router B in the network. The following conditions exist: All three routes have the same weight All three routes were originated locally through the use of the network command The bgp default local-preference 50 command is executed for all three routes All three routes have different lists of AS through which they travel

  Which of the following parameters is used to select the best path among the three routes?

  A. Weight
  B. MED
  C. LOCAL_PREF
  D. AS_Path
  D. AS_Path

  ---

  The AS_Path parameter is used to select the best path among the three routes. To select the best path from router A to router B, BGP analyses various BGP attributes that are set during the configuration of the network. The key BGP attributes and the order in which they are checked are as follows:

  1. Weight - highest weight is selected

  2. LOCAL_PREF - highest LOCAL_PREF is selected

  3. Locally originated routes - local routes are selected

  4. AS_PATH - shortest AS_PATH is selected

  5. Origin type - lowest origin type is selected

  6. Multi-exit Discriminator (MED) - lowest MED is selected

  Because the weight attribute is same for all three routes, BGP checks the value of the LOCAL_PREF attribute. However, this attribute is also same for the three routes because the bgp default local-preference 50 command was executed for the three routes, which sets the value of the LOCAL_PREF attribute to 50 for those routes.

  BGP then checks whether any of the routes were locally originated using either the network or aggregate commands. As stated in the scenario, all three routes were locally originated with the network command during BGP configuration. Consequently, BGP analyzes the value of the AS_PATH attribute. This attribute refers to a list of AS numbers that are traversed by a particular route. The route with the shortest AS_PATH is selected as the best path.

  The weight attribute is not used to select the best path in this case. The weight attribute for all three routes is the same. If this attribute were different for the three routes, then the route with the highest weight would be considered the best path.

  The MED attribute is not used to select the best path in this case. The MED, or multi-exit discriminator, specifies the route into an AS that has more than one entry points. A route with the lowest MED is selected as the best path. However, in this case, the MED attribute is not considered because the AS_PATH attribute is different for the three routes. If the AS_PATH attribute for the three routes were the same, then the MED attribute would have been considered. The LOCAL_PREF attribute is not used to

  select the best path. The LOCAL_PREF attribute is checked if the weight attribute for the routes is same. The LOCAL_PREF attribute refers to the local preference, which specifies the route that has preference to exit the AS for a given destination network. The route with the highest LOCAL_PREF value is selected as the best path. However, the bgp default local-preference 50 command was executed for all three routes. Hence, this attribute is not considered to select the best path between the BGP routers

  A and B.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Explain BGP attributes and best-path selection

  References:

  Cisco > Home > Support > Technology Support > IP > IP Routing > Design > Design TechNotes > BGP Best Path Selection Algorithm

• Question 397:

  An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

  A. Packets are not forwarded to the specific next hop.
  B. Packets are forwarded based on the routing table.
  C. Packets are forwarded based on a static route.
  D. Packets are forwarded to the specific next hop.
  D. Packets are forwarded to the specific next hop.

  ---

  The set ip default next-hop command verifies the existence of the destination IP address in the routing table, and...+ if the destination IP address exists, the command does not policy route the packet, but forwards the packet based on the routing table.+ if the destination IP address does not exist, the command policy routes the packet by sending it to the specified next hop.

• Question 398:

  You execute the following command.

  router(config-if)#ip helper-address 172.20.14.225

  Which of the following traffic types will NOT be forwarded to the IP address 172.20.14.225?

  A. TFTP
  B. SMTP
  C. DNS
  D. TACACS
  B. SMTP

  ---

  While the ip helper address command is typically used to forward DHCP broadcasts to a DHCP server located in a remote subnet, it will also forward the following broadcast packets by default as well:

  TFTP - UDP port 69

  Domain Name System (DNS) UDP port 53

  Time service - port 37

  NetBIOS Name Server - port137

  NetBIOS Datagram Server - port 138

  Bootstrap Protocol (BOOTP) - port 67

  TACACS UDP port 49

  Objective:

  Infrastructure Services

  Sub-Objective:

  Configure and verify IPv4 and IPv6 DHCP

  References:

  Cisco IOS IP Application Services Command Reference > ip accounting through ip sctp authenticate > ip helper-address

• Question 399:

  Refer to the exhibit.

  

  A network engineer notices that R1 and R2 cannot establish an eBGP peering. The following messages appear in the log:

  

  Which configuration must the engineer apply to R1 to restore the eBGP peering?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 400:

  While BGP internet routes are redistributed to a lower-class router via RIP, packets are being dropped and routes are failing to be distributed in RIP. Which action resolves the issue?

  A. Use OSPF instead of RIP to accept all BGP routes.
  B. Use the input-queue command to prevent the loss of packets.
  C. Use WFQ in the output queue of the high-performance router.
  D. Use RIP v2 to be able to use classless networks from BGP.
  D. Use RIP v2 to be able to use classless networks from BGP.