Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 571:

  Refer to the exhibit.

  

  The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new IP address. Which two actions must be taken to resolve this Issue? (Choose two.)

  A. Configure the server to use DHCP on the network with default gateway 200 30.40.100.
  B. Configure the server with a static IP address and default gateway.
  C. Configure the router to exclude a server IP address.
  D. Configure the server to use DHCP on the network with default gateway 200 30.30.100.
  E. Configure the router to exclude a server IP address and default gateway.
  B. Configure the server with a static IP address and default gateway.
  C. Configure the router to exclude a server IP address.

• Question 572:

  Which attribute eliminates LFAs that belong to protected paths in situations where links in a network are connected through a common fiber?

  A. Shared Risk Link Group (SRLG)-disjoint
  B. linecard-disjoint
  C. lowest-repair-path-metric
  D. interface-disjoint
  A. Shared Risk Link Group (SRLG)-disjoint

  ---

  LFA Tie-Breaking Rules

  When there are multiple candidate LFAs for a given primary path, EIGRP uses a tie-breaking rule to select one LFA per primary path per prefix. A tie-breaking rule considers LFAs that satisfy certain conditions or have certain attributes.

  EIGRP uses the following four attributes to implement tie-breaking rules:

  Interface-disjoint-Eliminates LFAs that share the outgoing interface with the protected path.

  Linecard-disjoint-Eliminates LFAs that share the line card with the protected path.

  Lowest-repair-path-metric-Eliminates LFAs whose metric to the protected prefix is high. Multiple LFAs with the same lowest path metric may remain in the routing table after this tie-breaker is applied.

  - Shared Risk Link Group (SRLG)-disjoint-Eliminates LFAs that belong to any of the protected path SRLGs. SRLGs refer to situations where links in a network share a common fiber (or a common physical attribute). If one link fails, other links in the group may also fail. Therefore, links in a group share risks.

  Source : https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/xe-3s/asr1000/ire-xe-3s-asr1000/ire-ipfrr.html

• Question 573:

  In the Active Discovery phase of PPPoE, which of the following is NOT verified by the Broadband Network gateway (BNG) to prevent spoofing?

  A. source MAC address
  B. arriving access interface
  C. PPPoE session ID
  D. destination MAC address
  D. destination MAC address

  ---

  The destination MAC address is the address of the BNG, so there is no need for it to be verified. If the traffic arrived on the BNG interface, it is correct.

  PPPoE is composed of two main phases, the Active Discovery Phase and the PPP Session Phase. The Active Discovery phase consists of the following communications between the PPPoE client and the BNG:

  1. The client sends a PPPoE Active Discovery Initiation (PADI) broadcast signal to the remote device (BNG).

  2. The remote device sends back a PPPoE Active Discovery Offer (PADO) that contains the MAC address of the BNG and destination MAC address of the subscriber (client).

  3. The subscriber (client) send a PPPoE Active Discovery Request (PADR) continuing the destination MAC address of the BNG to which it wishes to establish a session.

  4. The BNG responds with a PPPoE Active Discovery Session-Confirmation (PADS) containing the PPPoE session ID.

  Once this process is complete, the session moves on to the PPP Session Phase in which Link Control Protocol (LCP) parameters such as maximum transmission unit (MTU) are agreed to, authentication is performed, and Network Control Protocols (NCP) for any Layer 3 protocol that will traverse the link are started.

  Objective:

  Layer 2 Technologies

  Sub-Objective:

  Configure and verify PPP

  References:

  Cisco Support Community > ASR9000 BNG debugging PPPoE sessions Cisco > Cisco Security Appliance Command Line Configuration Guide, Version 8.0 > Configuring the PPPoE Client > PPPoE Client Overview

• Question 574:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Do not replace existing routing policies or configurations.

  7. Save your configurations to NVRAM before moving to the next item.

  8. Click Next at the bottom of the screen to submit this lab and move to the next question.

  9. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  Configure individual VRFs for each customer according to the topology to achieve these goals:

  

  Tasks

  Configure individual VRFs for each customer according to the topology to achieve these goals:

  1. VRF “cu-red” has interfaces on routers R1 and R2. Both routers are preconfigured with IP addressing, VRFs, and BGP. Do not use the BGP network statement for advertisement.

  2. VRF “cu-green” has interfaces on routers R1 and R2.

  3. BGP on router R1 populates VRF routes between router R1 and R2.

  4. BGP on router R2 populates VRF routes between router R1 and R2.

  5. LAN to LAN is reachable between SW1 and SW3 for VRF “cu-red” and between SW2 and SW4 for VRF “cu-green”’. All switches are preconfigured.

  

  

  

  

  

  

  A. See the solution below in explanation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the solution below in explanation.

  ---

  >>> Use cu-red under interfaces facing SW1 and SW3:

  On R1:

  interface Ethernet0/0

  ip vrf forwarding cu-red

  ip address 192.168.1.254 255.255.255.0

  Check reachability to SW1:

  R1#ping vrf cu-red 192.168.1.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

  On R2:

  interface Ethernet0/0

  ip vrf forwarding cu-red

  ip address 192.168.2.254 255.255.255.0

  Check reachability to SW3:

  R2#ping vrf cu-red 192.168.2.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

  !!!!!

  >>> Use vrf cu-green for SW2 and SW4:

  On R1:

  interface Ethernet0/1

  ip vrf forwarding cu-green

  ip address 192.168.20.254 255.255.255.0

  Test reachability to SW2:

  R1#ping vrf cu-green 192.168.20.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.22.1, timeout is 2 seconds:

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

  On R2:

  interface Ethernet0/1

  ip vrf forwarding cu-green

  ip address 192.168.22.254 255.255.255.0

  Test reachability to SW4:

  R2#ping vrf cu-green 192.168.22.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

  >>> On R1

  interface Ethernet0/2.100 mpls ip ! interface Ethernet0/2.200 mpls ip !

  R1 Configure BGP:

  router bgp 65000 neighbor 10.10.10.2 remote-as 65000 neighbor 10.10.20.2 remote-as 65000 ! address-family vpnv4 neighbor 10.10.10.2 activate neighbor 10.10.20.2 activate exit-address-family ! address-family ipv4 vrf cu-green redistribute connected exit-address-family ! address-family ipv4 vrf cu-red redistribute connected exit-address-family !

  R1(config)#ip vrf cu-red

  R1(config-vrf)#route-target both 65000:100 !

  R1(config)#ip vrf cu-green

  R1(config-vrf)#route-target both 65000:200

  >>> On R2

  interface Ethernet0/2.100 mpls ip ! interface Ethernet0/2.200 mpls ip ! router bgp 65000 neighbor 10.10.10.1 remote-as 65000 neighbor 10.10.20.1 remote-as 65000 ! address-family vpnv4 neighbor 10.10.10.1 activate neighbor 10.10.20.1 activate exit-address-family ! address-family ipv4 vrf cu-green redistribute connected exit-address-family ! address-family ipv4 vrf cu-red redistribute connected exit-address-family

  R2(config)#ip vrf cu-red

  R2(config-vrf)#route-target both 65000:100 !

  R2(config)#ip vrf cu-green

  R2(config-vrf)#route-target both 65000:200

  >>> Verification:

  From SW1 to SW3: SW1#ping 192.168.1.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

  But can’t Reach SW2 or SW4 in VRF cu-green:SW1#ping 192.168.22.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.22.1, timeout is 2 seconds:

  U.U.U

  Success rate is 0 percent (0/5)

  SW1#ping 192.168.20.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:

  U.U.U

  Success rate is 0 percent (0/5)

  Same Test for SW2:

  From SW2 to SW4:

  SW2#ping 192.168.20.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

  But can’t Reach SW3 or SW1 in VRF cu-red: SW2#ping 192.168.1.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

  U.U.U

  Success rate is 0 percent (0/5)

  SW2#ping 192.168.2.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

  U.U.U

  Success rate is 0 percent (0/5)

  Both R1 and R2 has separate tables for VRFs cu-red and cu-green.

• Question 575:

  Examine the following output of the show ip ospf interface command.

  

  What would be the effect of executing the auto-cost reference bandwidth 2000 command on Router43 in router OSPF mode?

  A. the cost of the Serial interface would increase to 20
  B. the cost of the FastEthernet interfaces would increase to 2000
  C. the cost of the Serial interface would increase to 647
  D. the cost of the FastEthernet interfaces would increase to 20
  D. the cost of the FastEthernet interfaces would increase to 20

  ---

  If the auto-cost reference bandwidth 2000 command is executed in router OSPF mode it will result in a cost to the FastEthernet interfaces of 20. The formula for arriving at the cost is:

  reference bandwidth / interface bandwidth = cost

  The default reference bandwidth for FastEthernet is 100 Mbps. If the reference bandwidth is set at 2000 Mbps using the auto-cost reference command, and the FastEthernet interface has a bandwidth of 100 Mbps, the resulting cost is 20 (2000 / 100 = 20).

  The auto-cost reference bandwidth command is executed in router OSPF mode to affect all interfaces. Alternatively, the cost of each interface can be set separately with the ip ospf cost command issued in interface configuration mode. The two commands can also be used in combination: you can set all interfaces with the auto-cost reference bandwidth command, and then set a single interface to a different cost with the ip ospf cost command.

  The command would not result in the cost of the Serial interface increasing to 20 or to 647. With a reference bandwidth of 2000 Mbps and interface bandwidth of 1544 kbps (the default bandwidth of a serial interface), the resulting cost would be 1294.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify OSPF path preference

  References:

  Cisco > Home > Support > Technology Support > IP > IP Routing > Technology Information > Technology White Paper > OSPF Design Guide > OSPF Cost Cisco > Cisco IOS IP Routing: OSPF Command Reference > show ip ospf interface Cisco > Cisco IOS IP Routing: OSPF Command Reference > auto-cost

• Question 576:

  Which type of ports are protected by IPv6 Source Guard?

  A. Layer 2 ports
  B. access ports
  C. Layer 3 ports
  D. trunk ports
  B. access ports

• Question 577:

  What is a prerequisite for configuring BFD?

  A. Jumbo frame support must be configured on the router that is using BFD.
  B. All routers in the path between two BFD endpoints must have BFD enabled.
  C. Cisco Express Forwarding must be enabled on all participating BFD endpoints.
  D. To use BFD with BGP, the timers 3 9 command must first be configured in the BGP routing process.
  C. Cisco Express Forwarding must be enabled on all participating BFD endpoints.

  ---

  https://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/fs_bfd.html#wp1043332

• Question 578:

  Refer to the exhibit.

  

  A network administrator wants to block all traffic toward the Internet after business hours and on weekends. When the administrator applies an access list on interface Gi0/1, all traffic is blocked and there is no access to the Internet at any time. Which action resolves the issue?

  A. Add the permit ip any any time-range no-conn statement after the deny udp any any time-range no-conn command in the access list.
  B. Add the permit ip any any statement after the deny icmp any any time-range no-conn command in the access list.
  C. Add the permit allowed time-range no-conn statement after the deny icmp any any time-range no-conn command in the access list.
  D. Add the permit ip any any time-range no-conn statement after the deny icmp any any time-range no-conn command in the access list.
  B. Add the permit ip any any statement after the deny icmp any any time-range no-conn command in the access list.

• Question 579:

  Router R1 is configured using VRF's to support customer VPN's. Some customers are using the same private IP address space. Which of the following is used to ensure that these routes are unique when advertised throughout the VPN?

  A. Route Distinguisher
  B. Route Targets
  C. MP-BGP
  D. LDP
  A. Route Distinguisher

• Question 580:

  Refer to the exhibit.

  

  R3 is dual-homed to two service providers for traffic redundancy. R3 prefers its outbound traffic via R2. Which set of configurations achieves this goal?

  A. route-map R1 permit 10 set metric 200 ! route-map R2 permit 10 set metric 100
  B. route-map R1 permit 10 set metric 100 ! route-map R2 permit 10 set metric 200
  C. route-map R1 permit 10 set AS-Path Prepend 200 ! route-map R2 permit 10 set AS-Path Prepend 100
  D. route-map R1 permit 10 set AS-Path Prepend 100 ! route-map R2 permit 10 set AS-Path Prepend 200
  D. route-map R1 permit 10 set AS-Path Prepend 100 ! route-map R2 permit 10 set AS-Path Prepend 200