Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 471:

  A network engineer is investigating a flapping (up/down) interface issue on a core switch that is synchronized to an NTP server. Log output currently does not show the time of the flap. Which command allows the logging on the switch to show the time of the flap according to the clock on the device?

  A. service timestamps log uptime
  B. clock summer-time mst recurring 2 Sunday mar 2:00 1 Sunday nov 2:00
  C. service timestamps log datetime localtime show-timezone
  D. clock calendar-valid
  C. service timestamps log datetime localtime show-timezone

  ---

  By default, Catalyst switches add a simple uptime timestamp to logging messages. This is a cumulative counter that shows the hours, minutes, and seconds since the switch has been booted up

• Question 472:

  What are the two major components of an MPLS-based VPN? (Choose two.)

  A. VPN route distinguisher
  B. MP-BGP peering of VPN community CE devices
  C. MP-BGP peering of VPN community P devices
  D. MP-BGP peering of VPN community PE devices
  E. VPN route target communities
  F. VPN route reflectors
  D. MP-BGP peering of VPN community PE devices
  E. VPN route target communities

• Question 473:

  Refer to the exhibit.

  

  A network administrator is using the DNA Assurance Dashboard panel to troubleshoot an OSPF adjacency that failed between Edge_NYC Interface GigabitEthernet1/3 with Neighbor Edge_SNJ. The administrator observes that the neighborship is stuck in exstart state. How does the administrator fix this issue?

  A. Configure to match the OSPF interface network types on both routers.
  B. Configure to match the OSPF interface speed and duplex settings on both routers.
  C. Configure to match the OSPF interface MTU settings on both routers.
  D. Configure to match the OSPF interface unique IP address and subnet mask on both routers.
  C. Configure to match the OSPF interface MTU settings on both routers.

  ---

  https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13684-12.html

  After two OSPF neighboring routers establish bi-directional communication and complete DR/BDR election (on multi-access networks), the routers transition to the exstart state. In this state, the neighboring routers establish a master/slave relationship and determine the initial database descriptor (DBD) sequence number to use while exchanging DBD packets. Neighbors Stuck in Exstart/Exchange State The problem occurs most frequently when attempting to run OSPF between a Cisco router and another vendor's router. The problem occurs when the maximum transmission unit (MTU) settings for neighboring router interfaces don't match. If the router with the higher MTU sends a packet larger that the MTU set on the neighboring router, the neighboring router ignores the packet.

• Question 474:

  Which feature drops packets if the source address is not found in the snooping table?

  A. IPv6 Source Guard
  B. IPv6 Destination Guard
  C. IPv6 Prefix Guard
  D. Binding Table Recovery
  A. IPv6 Source Guard

• Question 475:

  Which two solutions are used to overcome a flapping link that causes a frequent label binding exchange between MPLS routers? (Choose two)

  A. Create link dampening on links to protect the session.
  B. Increase input queue on links to protect the session.
  C. Create targeted hellos to protect the session.
  D. Increase a hold-timer to protect the session.
  E. Increase a session delay to protect the session.
  A. Create link dampening on links to protect the session.
  C. Create targeted hellos to protect the session.

  ---

  To avoid having to rebuild the LDP session altogether, you can protect it. When the LDP session between two directly connected LSRs is protected, a targeted LDP session is built between the two LSRs. When the directly connected link does go down between the two LSRs, the targeted LDP session is kept up as long as an alternative path exists between the two LSRs. For the protection to work, you need to enable it on both the LSRs. If this is not possible, you can enable it on one LSR, and the other LSR can accept the targeted LDP Hellos by configuring the command mpls ldp discovery targeted-hello accept

  https://www.ccexpert.us/mpls-network/mpls-ldp-session-protection.html Or from the reference at https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/5eU6DfQV/TECMPL-3201.pdf Troubleshooting LDP Issues Problem:

  I. When a link flaps (for a short time), Solution:

  + When LDP session supported by link hello is setup, create atargeted hello to protect the session.

• Question 476:

  What is the minimum time gap required by the local system before putting a BFD control packet on the wire?

  A. Detect Mult
  B. Required Min Echo RX Interval
  C. Desired Min TX Interval
  D. Required Min RX Interval
  C. Desired Min TX Interval

  ---

  Desired Min TX Interval: This is the minimum interval, in microseconds, that the local system would like to use when transmitting BFD Control packets, less any jitterapplied. The value zero is reserved. Required Min Echo RX Interval: This is the minimum interval, in microseconds, between received BFD Echo packets that this system is capable of supporting, less anyjitter applied by the sender. If this value is zero, the transmitting system does not support the receipt of BFD Echo packets.

• Question 477:

  Refer to the exhibit.

  

  An enterprise user reports an access issue with IPv6 content on the Internet.

  The user can access IPv4 content that is at the data center.

  Which action resolves the issue with IPv6 content?

  A. Change Area 11 to Area 0 between routers B and C.
  B. Add a static route for 2001: db8:0:6::1/64 on router B RIB.
  C. Advertise the 2001:db8: e::e/64 route on the router D OSPF process.
  D. Enable default information to originate in IPv6 AF on router B.
  D. Enable default information to originate in IPv6 AF on router B.

• Question 478:

  The network administrator configured R1 to authenticate Telnet connections based on Cisco ISE using TACACS+. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1(192.168.1.1) with a shared secret password of Cisco123.

  The administrator has configured this on R1:

  aaa new-model 
  !
  tacacs server ISE1
   address ipv4 192.168.1.5
   key Cisco123 
  !
  aaa group server tacacs+ TAC-SERV 
   server name ISE1 
  !
  aaa authentication login telnet group TAC-SERV 

  The network administrator cannot authenticate to R1 based on ISE. Which configuration fixes the issue?

  A.

  ip tacacs-server host 192.168.1.5 key Cisco123

  
  B.

  line vty 0 4 login authentication TAC-SERV

  
  C.

  line vty 0 4 login authentication telnet

  
  D.

  tacacs-server host 192.168.1.5 key Cisco123

  C.

  line vty 0 4 login authentication telnet

  ---

  The last command "aaa authentication login telnet group TAC-SERV" created the method list name telnet so we need to assign itto line vty. Reference:https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200208-Configure-ISE-2-0-IOS-TACACS-Authentic.html

• Question 479:

  Refer to the exhibit

  

  The route to 192 168 200 0 is flapping between R1 and R2 Which set of configuration changes resolves the flapping route?

  

  A. R2(config)#router ospf 100 R2(config-router)#no redistribute eigrp 100 R2(config-router)#redistribute eigrp 100 metric 1 subnets
  B. R1(config)#no router rip R1(config)#ip route 192.168.200.0 255.255.255.0 10.40.0.2
  C. R2(config)#router eigrp 100 R2(config-router)#no redistribute ospf 100 R2(config-router)#redistribute rip
  D. R1(config)#router ospf 100 R1(config-router)#redistribute rip metric 1 metric-type 1 subnets
  D. R1(config)#router ospf 100 R1(config-router)#redistribute rip metric 1 metric-type 1 subnets

  ---

  R1 just redistribute RIP in EIGRP. R2 learn 192.168.200.0 route from EIGRP and R2 redistribute EIGRP in OSPF, then R2 advertive 192.168.200.0 to R1. R1 learns 192.168.200.0 from R2 via OSPF. OSPF has AD 90 and RIP 120, so OSPF route become better than RIP route, but, for a route redistribution there is a rule that says the route must be in routing table and the source of redistribution must be the source of this route in route table, in this case, the RIP. When R1 learn this route in OSPF, the OSPF route replace the RIP route in route table, so the rule is broken and the redistribution stop working, then R1 stops redistribuing 192.168.200.0 to EIGRP and R2 stop reciving this route and R2 stops redistribute this route in OSPF so R1 won't recive this route from OSPF anymore, then OSPF route is removed from LSDB and RIB so RIP route go to the route table and the redistribution to EIGRP starts again and the problem starts over and over

  If you redistribute RIP in OSPF in R1, R2 is gonna have this route as the best route from OSPF, so it does not matter if R2 learns it from EIGRP or NOT, because OSPF has AD 90 and External EIGRP 170.

• Question 480:

  A DMVPN single hub topology is using IPsec + mGRE with OSPF. What should be configured on the hub to ensure it will be the designated router?

  A. tunnel interface of the hub with ip nhrp ospf dr
  B. OSPF priority to 0
  C. route map to set the metrics of learned routes to 110
  D. OSPF priority greater than 1
  D. OSPF priority greater than 1

  ---

  By default, the priority is 1 on all routers so we can set the OSPF priority of the hub to a value which is greater than 1 to make sure it would become the DR.