Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 501:

  Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

  A. multi-paths eibgp 2
  B. maximum-paths 2
  C. maximum-paths ibgp 2
  D. multi-paths 2
  C. maximum-paths ibgp 2

  ---

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/mpls/configuration/guide/mpls_cg/mp_vpn_multipath.html

• Question 502:

  You are configuring a 6to4 tunnel. You want to translate the IPv4 address 192.168.50.4 to the IPv6 address for the tunnel. What would be the correct translation?

  A. 2002:c0a8:3204::/16
  B. 2002:c0a8:9901::/48
  C. 2002:c0a8:3204::/48
  D. c0a8:3204:2002::/16
  C. 2002:c0a8:3204::/48

  ---

  When implementing an automatic 6to4 tunnel, each IPv6 site receives a /48-bit prefix. The hexadecimal equivalent of the IPv4 address of the edge router is appended to 0x2002 and followed with the prefix to identify each end of the tunnel. In this case, if the edge router's IPv4 address were 192.168.50.4, the hexadecimal equivalent of the address (c0a8:3204) would be inserted between 0X2002 and the /48 prefix, resulting in 2002:c0a8:3204::/48 to arrive at the tunnel endpoint address.

  The correct address would not be 2002:c0a8:3204::/16. The prefix is 48, not 16.

  The correct address would not be 2002:c0a8:9901::/48. The hexadecimal equivalent of the address 192.168.50.4 is c0a8:3204, not c0a8:9901.

  The correct address would not be c0a8:3204:2002::/16. It has an incorrect prefix (/16) and the values in the other sections are out of order.

  Objective:

  Network Principles

  Sub-Objective:

  Recognize proposed changes to the network

  References:

  Cisco IPv6 Implementation Guide, Release 15.2MandT > Implementing Tunneling for IPv6 > Implementing Tunneling for IPv6 > Configuration Examples for Implementing Tunneling for IPv6

• Question 503:

  Which of the following are valid DHCP options that DHCP servers can be configured to use with DHCP clients when offering a lease? (Choose two.)

  A. DHCP Option 1: subnet mask
  B. DHCP Option 3: Lease Duration
  C. DHCP Option 4: Client host name
  D. DHCP Option 6: DNS servers
  A. DHCP Option 1: subnet mask
  D. DHCP Option 6: DNS servers

• Question 504:

  Refer to the exhibit.

  

  After a new regional office is set up,not all guests can access the internet via guest WiFi. Clients are getting the correct IP address from guest Wi-Fi VLAN 364.

  Which action resolves the issue ?

  A. Allow 10.66.46.0/23 in the outbound ACL
  B. Allow DNS traffic through the outbound ACL
  C. Allow DNS traffic through the inbound ACL
  D. Allow 10.66.46.0/23 in the inbound ACL
  C. Allow DNS traffic through the inbound ACL

  ---

• Question 505:

  Refer to the exhibit

  

  The SNMP server with IP address 172.16.4.4 cannot access host router A.

  Which configuration command on router A resolves the issue?

  A. snmp-server community ccnp
  B. access-list 4 permit 172.16.4.0 0.0.0.3
  C. access-list 4 permit host 172.16.4.4
  D. snmp-server host 172.16.4.4 ccnp
  C. access-list 4 permit host 172.16.4.4

• Question 506:

  Refer to the Exhibit. A network administrator enables DHCP snooping on the Cisco Catalyst 3750-X switch and configures the uplink port (Port-channel2) as a trusted port. Clients are not receiving an IP address, but when DHCP snooping is disabled, clients start receiving IP addresses.

  

  Which global command resolves the issue?

  A. No ip dhcp snooping information option
  B. ip dhcp snooping
  C. ip dhcp relay information trust portchannel2
  D. ip dhcp snooping trust
  A. No ip dhcp snooping information option

  ---

  https://community.cisco.com/t5/switching/dhcp-snooping-clients-not-getting-ip-address/td-p/1749969

• Question 507:

  How is VPN routing information distributed in an MPLS network?

  A. It is controlled through the use of RD.
  B. The top level of the customer data packet directs it to the correct CE device.
  C. It is established using VPN IPsec peers.
  D. It is controlled using of VPN target communities.
  D. It is controlled using of VPN target communities.

  ---

  The distribution of virtual private network (VPN) routing information is controlled through the use of VPN route target communities, implemented by Border Gateway Protocol (BGP) extended communities. Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l3_vpns/configuration/15-mt/mp-l3-vpns-15-mt-book/mp-cfg-layer3-vpn.html

• Question 508:

  By default, how often are EIGRP hello packets sent on a LAN?

  A. 5 seconds
  B. 10 seconds
  C. 30 seconds
  D. 60 seconds
  A. 5 seconds

  ---

  The EIGRP default hello time over a LAN or high-speed dedicated WAN link is five seconds.

  On multipoint circuits with less than T1 bandwidth, EIGRP hello packets are sent every 60 seconds. EIGRP sets the default hello interval to five seconds to ensure that it can quickly sense if connectivity to a neighboring router has been cut. If a router does not hear from a neighboring EIGRP router in 15 seconds, it will declare that neighbor as no longer reachable.

  The five-second hello interval is shorter than the default values for OSPF hellos (10 seconds), RIP updates (30), or IGRP updates (90). As a result, EIGRP senses network faults faster by default than do other protocols.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify EIGRP neighbor relationship and authentication

  References:

  Internetworking Technology Handbook > Enhanced Interior Gateway Routing Protocol (EIGRP) > Underlying Processes and Technologies

• Question 509:

  After an associate configured a DMVPN hub, you execute the following command on the hub router:

  

  Which of the following statements is true of this output?

  A. The NMBA address was statically configured
  B. The NHRP information did not come from the NHS
  C. The mapping was created through an NHRP registration request
  D. The device at 10.1.1.2 is behind a NAT router
  C. The mapping was created through an NHRP registration request

  ---

  The mapping was created through an NHRP registration request, as indicated by the flag setting registered. Next Hop Resolution Protocol (NHRP) can be used in place of static IP address to NBMA address mappings to allow the spoke routers in an mGRE hub-and-spoke configuration to discover one another's physical IP addresses.

  When the output of the show nhrp detail command shows the registered flag listed, it means that the mapping was created dynamically and was learned through a registration request to the next hop server (NHS).

  The mapping was not created statically. Had it been created statically, the Type field would not be listed as dynamic. It would say static.

  The NHRP information DID come from the next hop server (NHS). That is indicated by the presence of the authoritative flag. The NHS is the next hop to the destination as indicated by the routing table.

  The device at 10.1.1.2 is not necessarily behind a NAT router. The presence of the nat flag in the output indicates that the device at 10.1.1.2 supports the NHRP NAT extension type for supporting dynamic spoke-to- spoke tunnels to or from spokes behind a NAT router. This flag does not mean that the spoke (NHS client) is behind a NAT router.

  Objective:

  VPN Technologies

  Sub-Objective:

  Describe DMVPN (single hub)

  References:

  Home > Support > Product support > Cisco IOS and NX-OS software > Cisco IOS software releases 12.4 mainline > Configure > Feature Guides > NHRP

• Question 510:

  A network administrator is troubleshooting a failed AAA login issue on a Cisco Catalyst c3560 switch. When the network administrator tries to log in with SSH using TACACS+ username and password credentials, the switch is no longer authenticating and is failing back to the local account. Which action resolves this issue?

  A. Configure ip tacacs source-interface GigabitEthernet 1/1
  B. Configure ip tacacs source-ip 192.168.100.55
  C. Configure ip tacacs-server source-ip 192.168.100.55
  D. Configure ip tacacs-server source-interface GigabitEthernet 1/1
  A. Configure ip tacacs source-interface GigabitEthernet 1/1

  ---

  R2(config)#ip tacacs so R2(config)#ip tacacs source-interface ? Async Async interface Auto-Template Auto-Template interface BVI Bridge-Group Virtual Interface CDMA-Ix CDMA Ix interface CTunnel CTunnel interface Dialer Dialer interface FastEthernet FastEthernet IEEE 802.3 Lex Lex interface Loopback Loopback interface MFR Multilink Frame Relay bundle interface Multilink Multilink-group interface Null Null interface Port-channel Ethernet Channel of interfaces SSLVPN-VIF SSLVPN Virtual Interface Tunnel Tunnel interface Vif PGM Multicast Host interface Virtual-PPP Virtual PPP interface Virtual-Template Virtual Template interface Virtual-TokenRing Virtual TokenRing vmi Virtual Multipoint Interface

  R2(config)#ip tacacs source-interface