Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 461:

  You have recently joined a company as the network administrator. You have been asked to complete the configuration on the border routers for an automatic 6-to-4 tunnel between several IPv6 network domains. The commands that are currently configured on the routers are as follows:

  ipv6 route tunnel interface tunnel ipv6 address tunnel source

  Which of the following additional commands is required to complete the configuration of automatic 6-to-4 tunnel on the border routers?

  A. tunnel mode ipv6ip
  B. tunnel mode ipv6ip 6to4
  C. tunnel mode ipv6ip auto-tunnel
  D. tunnel mode ipv6ip isatap
  B. tunnel mode ipv6ip 6to4

  ---

  The correct answer is to use the tunnel mode ipv6ip 6to4 command to complete the configuration of an automatic 6-to-4 tunnel. This command requires the use of IPv6 unicast addresses that have the 2002::/16 prefix.

  The types of tunneling mechanisms supported by IPv6 are:

  Automatic 6-to-4 tunnel

  ISATAP tunnel

  Manually configured tunnel

  GRE tunnel

  Apart from using a tunneling mechanism, interoperability between IPv4 and IPv6 can be provided by using a dual-stack infrastructure or Network Address Translation-Protocol Translation (NAT-PT). A dual-stack infrastructure allows you to use both IPv4 and IPv6 addresses on the same router/host. NAT-PT is used to translate IPv4 addresses to IPv6 and vice versa.

  The tunnel mode ipv6ip command should not be used to complete the configuration because this command specifies IPv6 as the passenger protocol and creates a manually configured tunnel.

  The tunnel mode ipv6ip auto-tunnel command is not required to enable automatic 6-to-4 tunneling on the border routers. This command creates an automatic IPv4-compatible IPv6 tunnel between the routers.

  The tunnel mode ipv6ip isatap command should not be used because this command creates an ISATAP tunnel.

  Objective:

  Network Principles

  Sub-Objective:

  Recognize proposed changes to the network

  References:

  Cisco IOS IPv6 Configuration Guide; Implementing Tunneling for IPv6 > Configuring Manual IPv6 Tunnels Cisco > Cisco IOS IPv6 Command Reference > tunnel mode ipv6ip

• Question 462:

  The following configuration was applied to the router R66:

  

  What is the interface ID and the IP address of the subinterface created to host the virtual network named red? (Choose two.)

  A. FastEthernet1/0/0.3
  B. FastEthernet0/0/0.red
  C. FastEthernet0/0/3
  D. 10.1.1.3
  E. 10.1.1.1
  F. 10.0.0.3
  A. FastEthernet1/0/0.3
  E. 10.1.1.1

  ---

  The interface ID of the subinterface created to host the virtual network named red will be FastEthernet1/0/0.3, and the IP address will be 10.1.1.1. When a virtual routing and forwarding (VRF) instance is defined, it will have a name and a tag number. The tag number is used by the router to dynamically create a subinterface on the specified physical interface of the EVN trunk. The tag number is appended to the physical interface ID. Since the virtual network (vnet) trunk was defined as FastEthernet1/0/0, the

  subinterface for vrf red will be FastEthernet1/0/0.3. All subinterfaces on the trunk will use the same IP address as the physical interface defined as the trunk.

  Easy virtual networking (EVN) is a technology that allows for multiple logical networks to use the same physical infrastructure. EVN trunks carry the traffic of multiple VRFs. While the subinterfaces dedicated to each VRF use the same IP address (that of the physical interface of the EVN trunk), no IP address conflicts ever occur because each VRF maintains its own routing and forwarding tables, and while on the trunk, each uses a VRF tag to separate the traffic from each VRF.

  Objective:

  VPN Technologies

  Sub-Objective:

  Describe Easy Virtual Networking (EVN)

  References:

  Cisco > Easy Virtual Network Configuration Guide, Cisco IOS XE Release 3S > Overview of Easy Virtual Network

• Question 463:

  Which IPv6 feature enables a device to reject traffic when it is originated from an address that is not stored in the device binding table?

  A. IPv6 Snooping
  B. IPv6 Source Guard
  C. IPv6 DAD Proxy
  D. IPv6 RA Guard
  B. IPv6 Source Guard

  ---

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-3s/ip6f-xe-3sbook/ip6-src-guard.html

• Question 464:

  You are planning the configuration of Easy Virtual Networking (EVN).

  Which of the following statements is true of an interface that will be an EVN trunk?

  A. It must support 802.1q encapsulation
  B. The interface can also be configured for VRF-Lite
  C. The interface will support OSPFv3
  D. The interface can support RIP
  A. It must support 802.1q encapsulation

  ---

  The interface must be able to support 802.1q encapsulation. The EVN trunk carries the traffic of multiple virtual routing and forwarding (VRF) instances, with the traffic of each instance tagged with an ID called the virtual network tag. Since the VLAN ID field of an 802.1q encapsulated packet is used for this ID, the link must be one that supports 802.1q.

  Easy Virtual networking is a technology that allows for the creation of separate networks with separate routing tables and routing instances using the same physical topology. The IP addressing for the networks can even overlap with no problem. The networks are kept separate using the network ID tags in a similar fashion to the way switches keep VLANs separate by using VLAN tags.

  An EVN trunk interface cannot also be configured for VRF-Lite. VRF-Lite is an earlier technology that accomplishes the same goal, but lacks the simplicity of EVN.

  Neither RIP nor OSPFv3 is supported in Easy Virtual Networking EVN at all.

  Objective:

  VPN Technologies

  Sub-Objective:

  Describe Easy Virtual Networking (EVN)

  References:

  Cisco > Easy Virtual Network Configuration Guide, Cisco IOS XE Release 3S > Overview of Easy Virtual Network

• Question 465:

  Which method provides failure detection in BFD?

  A. short duration, high overhead
  B. short duration, low overhead
  C. long duration, high overhead
  D. long duration, low overhead
  B. short duration, low overhead

• Question 466:

  Refer to the exhibit. What does the imp-null tag represent in the MPLS VPN cloud?

  

  A. Pop the label
  B. Impose the label
  C. Include the EXP bit
  D. Exclude the EXP bit
  A. Pop the label

  ---

  The imp-null (implicit null) tag instructs the upstream router to pop the tag entry off the tag stack before forwarding the packet. Note: pop means remove the top MPLS label

• Question 467:

  Based on the following partial output of the show ip ospf database command, which router roles(s) is Router7 performing? (Choose all that apply.)

  

  A. ABR
  B. ASBR
  C. BR
  D. IR
  A. ABR
  C. BR

  ---

  Router7 is an area border router (ABR) and a backbone router (BR). The output reveals the link state databases for two areas, area 0 and area 2. Only ABR routers will display multiple databases when you execute this command.

  If Router7 is an ABR, then it is also connected to the backbone and will be a backbone router.

  Router 7 is not an autonomous system boundary router (ASBR) because it only displays sections in the output for Type 1 and Type 2 link-state advertisements (LSAs). ASBRs will also have a section for Type 4 LSAs, which would have its own heading at the end of the output.

  Router7 is not an internal router. A router is either an internal router or an ABR and Router 7 is an ABR.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify OSPF neighbor relationship and authentication

  References:

  Cisco > Cisco IOS IP Routing: OSPF Command Reference > show ip ospf database

• Question 468:

  Refer to the exhibit.

  

  A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source. The configuration did not work as desired. Which service must be enabled to resolve the issue?

  A. Enter the service timestamps log datetime localtime global command.
  B. Enter the service timestamps log datetime synchronize global command.
  C. Enter the service timestamps log datetime console global command.
  D. Enter the service timestamps log datetime clock-period global command
  A. Enter the service timestamps log datetime localtime global command.

  ---

  If a router is configured to get the time from a Network Time Protocol (NTP) server, the times in the router's log entries may be different from the time on the systemclock if the [localtime] option is not in the service timestamps log command. To solve this issue, add the [localtime] option to the service timestamps log command. Thetimes should now be synchronized between the system clock and the log message timestamps.

• Question 469:

  Refer to the exhibit.

  

  A customer reports that user traffic of bank XYZ to the AAA server is not using the primary path via the R3-R2 link. The network team observes:

  No fiber is cut on links R2 and R3.

  As101 and AS 201 routers established BGP peering.

  Which configuration resolves the issue?

  A. R2(config)#route-map BGP-Path permit 10 R2(config-route-map)# set metric 200 R2(config)#router bgp 65101 R2(config-router)# neighbor 10.10.10.3 route-map BGP-Path out
  B. R6(config)#router bgp 65201 R6(config-router)#no neighbor 10.10.10.5 weight 32769
  C. R4(config)#router bgp 65201 R4(config-router)#no neighbor 10.10.10.5 weight 32769
  D. R1(config)#route-map BGP-Path permit 10 R1(config-route-map)# set local-preference 200 R1(config)#router bgp 65101 R1(config-router)# neighbor 10.10.10.2 route-map BGP-Path out
  A. R2(config)#route-map BGP-Path permit 10 R2(config-route-map)# set metric 200 R2(config)#router bgp 65101 R2(config-router)# neighbor 10.10.10.3 route-map BGP-Path out

  ---

• Question 470:

  An associate creates the following access list that she plans to apply to an interface on a router:

  access-list 100 permit ip any any log

  What type of traffic could cause this ACL to place a heavy load on the CPU of the router, and what command could be used to reduce the impact of the ACL? (Choose two.)

  A. traffic that is CEF switched
  B. traffic that is process switched
  C. traffic that is fast switched
  D. ip access-list log-update threshold
  E. ip access-list logging interval
  F. logging rate limit
  B. traffic that is process switched
  E. ip access-list logging interval

  ---

  There are two contributors to the CPU load increase from ACL logging: process switching of packets that match log-enabled access control entries (ACEs), and the generation and transmission of the log messages. To reduce the impact of process switched traffic, the ip access-list logging interval command can be used. The interval is specified in milliseconds and represents how often a single packet is process switched. While the messages in the generated log entries may not be as comprehensive after this command is executed, the counter values that are generated by the show access-list and show ip-access list commands will still be accurate.

  Packets that are not process switched (CEF switched and fast switched) will examined or accounted for in the logging, so they are not the source of the problem.

  The ip access-list log-update threshold command is used to configure how often syslog messages are generated and sent after the initial packet match. While this would be a beneficial command to run, as it addresses the second source of CPU congestion that is the sending of the syslog messages, that was not listed as a traffic type option. Therefore, this would not be a solution to the issue presented by packet switched traffic.

  The logging rate limit command also will reduce the impact of log generation and transmission on the CPU, but again, it does not address the issue presented by process switched traffic.

  Objective: Infrastructure Security Sub-Objective: Configure and verify router security features

  References: Understanding Access Control List Logging Cisco > Cisco IOS Security Command Commands D to L > ip-group