1. Home
  2. Cisco
  3. 300-410

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Exam Details

  • Exam Code
    :300-410
  • Exam Name
    :Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)
  • Certification
    :CCNP Enterprise
  • Vendor
    :Cisco
  • Total Questions
    :925 Q&As
  • Last Updated
    :May 03, 2025

Cisco CCNP Enterprise 300-410 Questions & Answers

  • Question 501:

    Refer to the exhibit. An engineer must configure a LAN-to-LAN IPsec VPN between R1 and the remote router. Which IPsec Phase 1 configuration must the engineer use for the local router?

    A. crypto isakmp policy 5 authentication pre-share encryption 3des hash sha group 2 ! crypto isakmp key cisco123 address 200.1.1.3

    B. crypto isakmp policy 5 authentication pre-share encryption 3des hash md5 group 2 ! crypto isakmp key cisco123 address 200.1.1.3

    C. crypto isakmp policy 5 authentication pre-share encryption 3des hash md5 group 2 ! crypto isakmp key cisco123 address 199.1.1.1

    D. crypto isakmp policy 5 authentication pre-share encryption 3des hash md5 group 2 ! crypto isakmp key cisco123! address 199.1.1.1

  • Question 502:

    A CoPP policy is applied for receiving SSH traffic from the WAN interface on a Cisco ISR4321 router. However, the SSH response from the router is abnormal and stuck during the high link utilization. The problem is identified as SSH traffic does not match in the ACL. Which action resolves the issue?

    A. Rate-limit SSH traffic to ensure dedicated bandwidth.

    B. Apply CoPP on the control plane interface.

    C. Increase the IP precedence value of SSH traffic to 6.

    D. Apply CoPP on the WAN interface inbound direction.

  • Question 503:

    What are the two prerequisites to enable BFD on Cisco routers? (Choose two)

    A. A supported IP routing protocol must be configured on the participating routers.

    B. OSPF Demand Circuit must run BFD on all participating routers.

    C. ICMP must be allowed on all participating routers.

    D. UDP port 1985 must be allowed on all participating routers.

    E. Cisco Express Forwarding and IP Routing must be enabled on all participating routers.

  • Question 504:

    Refer to the exhibit. An OSPF neighbor relationship between R2 and R3 is showing stuck in EXCHANGE/EXSTART state. The neighbor is established between R1 and R2. The network engineer can ping from R2 to R3 and vice versa, but the neighbor is still down. Which action resolves the issue?

    A. Restore the Layer 2/Layer 3 conectivity issue in the ISP network.

    B. Match MTU on both router interfaces or ignore MTU.

    C. Administrative "shut then no shut" both router interfaces.

    D. Enable OSPF on the interface, which is required.

  • Question 505:

    Refer to the exhibit. A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer fails. Which action resolves this issue?

    A. The SSH service must be enabled with the crypto key generate rsa command.

    B. The SCP service must be enabled with the ip scp server enable command.

    C. The Python interpreter must first be enabled with the guestshell enable command.

    D. The SSH access must be allowed on the VTY lines using the transport input ssh command.

  • Question 506:

    Which two solutions are used to overcome a flapping link that causes a frequent label binding exchange between MPLS routers? (Choose two)

    A. Create link dampening on links to protect the session.

    B. Increase input queue on links to protect the session.

    C. Create targeted hellos to protect the session.

    D. Increase a hold-timer to protect the session.

    E. Increase a session delay to protect the session.

  • Question 507:

    What is the purpose of the DHCPv6 Guard?

    A. It messages between a DHCPv6 server and a DHCPv6 client ( or relay agent).

    B. It shows that clients of a DHCPv5 server are affected.

    C. It block DHCPv6 messages from relay agents to a DHCPv6 server.

    D. It allows DHCPv6 replay and advertisements from (rouge) DHCPv6 servers.

  • Question 508:

    Refer to the exhibit. Which command must be configured to make VRF CCNP work?

    A. interface Loopback0 vrf forwarding CCNP

    B. interface Loopback0 ip address 10.1.1.1 255.255.255.0

    C. interface Loopback0 ip address 10.1.1.1 255.255.255.0 vrf forwarding CCNP

    D. interface Loopback0 ip address 10.1.1.1 255.255.255.0 ip vrf forwarding CCNP

  • Question 509:

    Refer to the exhibit. An engineer configured NetFlow on R1, but the NMS server cannot see the flow from ethernet 0/0 of R1. Which configuration resolves the issue?

    A. flow monitor Flowmonitor1 source Ethernet0/0

    B. interface Ethernet0/1 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output

    C. interface Ethernet0/0 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output

    D. flow exporter FlowAnalyzer1 source Ethernet0/0

  • Question 510:

    Refer to the exhibit. An engineer is troubleshooting a TACACS problem. Which action resolves the issue?

    A. Configure a matching TACACS server IP.

    B. Configure a matching preshared key.

    C. Generate authentication from a relative source interface.

    D. Apply a configured AAA profile to the VTY.

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 300-410 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.