Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 51:

  Refer to the exhibit

  

  BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1. Users report packet loss and interruption of service to applications hosted on the 10.1.1.0/24 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command. Which action stabilizes the service?

  A. Reduce frequent OSPF SPF calculations on R3 that cause a high CPU and packet loss on traffic traversing R3.
  B. Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.
  C. Repeat the test from R4 using ICMP ping on the local 10.1.1.0/24 prefix, and fix any Layer 2 errors on the host or switch side of the subnet.
  D. Place an OSPF distribute-list outbound on R3 to block the 10.1.1.0/24 prefix from being advertised back to R3.
  B. Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.

• Question 52:

  Refer to the exhibit.

  

  

  An engineer is troubleshooting failed access by contractors to the business application server via Telnet or HTTP during the weekend. Which configuration resolves the issue?

  A. R1 no access-list 101 permit tcp 10.3.3.0 0.0.0.255 host 10.1.1.3 eq telnet time-range Contractor
  B. R1 time-range Contractor no periodic weekdays 8:00 to 16:30 periodic daily 8:00 to 16:30
  C. R4 time-range Contractor no periodic weekdays 17:00 to 23:59 periodic daily 8:00 to 16:30
  D. R4 no access-list 101 permit top 10.3.3.0 0.0.0.255 host 10.1.1.3 eq telnet time-range Contractor
  B. R1 time-range Contractor no periodic weekdays 8:00 to 16:30 periodic daily 8:00 to 16:30

• Question 53:

  Refer to the exhibit.TCP traffic should be reaching host 10.10.10.10/24 via R2. Which action resolves the issue?

  

  A. Allow TCP in the access list with no changes to the route map.
  B. Set IP next-hop to 10.10.12.2 under the route-map permit 10 to allow TCP traffic.
  C. Add a permit 20 statement in the route map to allow TCP traffic.
  D. TCP traffic will reach the destination via R2 without any changes.
  A. Allow TCP in the access list with no changes to the route map.

  ---

  If we add a "permit 20" statement in the route-map then we will allow other traffic to pass through (in fact Policy-based routing allows other traffic to pass through by default). But the bandwidth of R1-R4 is higher than that of R1-R2 so TCP traffic might go through R4 instead of R2. Therefore we should allow TCP in the ACL so that TCP traffic is forwarded via R2.

• Question 54:

  Refer to the exhibit

  

  An engineer configured NetFlow but cannot receive the flows from R1.

  Which two configurations resolve the issue? (Choose two )

  A. R3(config)#ip access-list extended DDOS R3(config-ext-nacl)#5 permit udp any host 10.66.66.66 eq 1090
  B. R4(config)#flow exporter FlowExporter1 R4(config-flow-exporter)#destination 10.66.66.66
  C. R3(config)#flow exporter FlowExporter1 R3(config-flow-exporter)#destination 10.66.66.66
  D. R1(config)#flow exporter FlowExporter1 R1(config-flow-exporter)#destination 10.66.60.66
  E. R4(config)#ip access-list extended DDOS R4(config-ext-naci)#5 permit udp any host 10.66.66.66 eq 1090
  A. R3(config)#ip access-list extended DDOS R3(config-ext-nacl)#5 permit udp any host 10.66.66.66 eq 1090
  E. R4(config)#ip access-list extended DDOS R4(config-ext-naci)#5 permit udp any host 10.66.66.66 eq 1090

• Question 55:

  Refer to me exhibit.

  

  The hub and spoke are connected via two DMVPN tunnel interfaces The NHRP is configured and the tunnels are detected on the hub and the spoke Which configuration command adds an IPsec profile on both tunnel interfaces to encrypt traffic?

  A. tunnel protection ipsec profile DMVPN multipoint
  B. tunnel protection ipsec profile DMVPN tunnel1
  C. tunnel protection ipsec profile DMVPN shared
  D. tunnel protection ipsec profile DMVPN unique
  C. tunnel protection ipsec profile DMVPN shared

• Question 56:

  DRAG DROP

  Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPV3 categories on the right.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Both SNMPv1 and v2 did not focus much on security and they provide security based on community string only. Community string is really just a clear text password (without encryption). Any data sent in clear text over a network is vulnerable to packet sniffing and interception. There are two types of community strings in SNMPv2c:

  + Read-only (RO): gives read-only access to the MIB objects which is safer and preferred to other method.

  + Read-write (RW): gives read and write access to the MIB objects. This method allows SNMP Manager to change the configuration of the managed router/switch so be careful with this type.

  The community string defined on the SNMP Manager must match one of the community strings on the Agents in order for the Manager to access the Agents.

  SNMPv3 provides significant enhancements to address the security weaknesses existing in the earlier versions. The concept of community string does not exist in this version. SNMPv3 provides a far more secure communication using entities, users and groups. This is achieved by implementing three new major features:

  + Message integrity: ensuring that a packet has not been modified in transit.

  + Authentication: by using password hashing (based on the HMAC-MD5 or HMAC-SHA algorithms) to ensure the message is from a valid source on the network.

  + Privacy (Encryption): by using encryption (56-bit DES encryption, for example) to encrypt the contents of a packet.

• Question 57:

  Refer to the exhibit.

  

  The network administrator configured the branch router for IPv6 on the E 0/0 interface The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on the branch router to bring the IPv6 neighbors up?

  A. Enable the IPv4 address family under the E 0/0 interface by using the address-family Ipv4 unicast command
  B. Disable IPv6 on the E 0/0 interface using the no ipv6 enable command
  C. Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command
  D. Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E 0/0 interface.
  C. Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

  ---

  Once again, Cisco changed the IOS configuration commands required for OSPFv3 configuration. The new OSPFv3 configuration uses the "ospfv3" keyword instead of the earlier "ipv6 router ospf" routing process command and "ipv6 ospf" interface commands. The Open Shortest Path First version 3 (OSPFv3) address families feature enables both IPv4 and IPv6 unicast traffic to be supported. With this feature, users may have two processes per interface, but only one process per address family (AF).

• Question 58:

  Refer to the exhibit.

  

  AS111 is receiving its own routes from AS200 causing a loop in the network.

  Which configuration provides loop prevention?

  A. router bgp 111 neighbor 195.1.1.1 as-override neighbor 195.1.2.2 as-override
  B. router bgp 111 neighbor 195.1.1.1 as-override no neighbor 195.1.2.2 allows-in
  C. router bgp 111 no neighbor 195.1.1.1 allows-in no neighbor 195.1.2.2 allows-in
  D. router bgp 111 neighbor 195.1.2.2 as-override no neighbor 195.1.1.1 allows-in
  C. router bgp 111 no neighbor 195.1.1.1 allows-in no neighbor 195.1.2.2 allows-in

• Question 59:

  An engineer configured a router with this configuration

  ip access-hst DENY TELNET 10 deny tcp any any eq 23 log-input The router console starts receiving log message : %SEC-6-IPACCESSLOGP: list DENY_TELNET denied tcp

  192.168.1.10(1022)(FastEthernet1/0 D508.89gb.003f) ->192.168.2.20(23), 1 packet Which action stops messages on the console while still denying Telnet?

  A. Configure a 20 permit ip any any command
  B. Remove log-Input keyword from the access list.
  C. Replace log-input keyword with the log keyword in the access list.
  D. Configure a 20 permit ip any any log-input command.
  B. Remove log-Input keyword from the access list.

• Question 60:

  You manage the company network, as shown in the network diagram below:

  

  You executed the following command on RouterA:

  routerA(config)# ip route 0.0.0.0 0.0.0.0 S0/0 routerA(config)# router eigrp 200 routerA(config-router)# redistribute static metric 1000 1 255 1 1500

  Which of the following statements are TRUE about the given set of commands? (Choose two.)

  A. A static default route is created on RouterA
  B. A summary default route is created on RouterA
  C. The default route is redistributed into the EIGRP network
  D. The default route is not advertised to the EIGRP network
  A. A static default route is created on RouterA
  C. The default route is redistributed into the EIGRP network

  ---

  The given set of commands creates a static default route on RouterA and redistributes this route into the EIGRP company network. The ip route 0.0.0.0 0.0.0.0 S0/0 command executed in the global configuration mode creates a static default route on the router. The ip route command allows you to specify a static route. The redistribute static metric 1000 1 255 1 1500 command then redistributes the static default route into the EIGRP autonomous system (AS) 200. This implies that the EIGRP network

  identifies the default route as an external route, and traffic to all unknown destination subnets will be diverted to the default route.

  Alternatively, default routes can be advertised into EIGRP networks by either of the following methods:

  Using the network 0.0.0.0 command on the router

  Using the ip summary-address eigrp 200 0.0.0.0 0.0.0.0 command on the router

  A summary default route is not created on RouterA in the scenario. If the ip summary-address eigrp 200 0.0.0.0 0.0.0.0 command was used on RouterA, then a summary default route would be created. The summary default route points to the 0.0.0.0 network with the null0 interface as the next-hop interface. Summary default routes are helpful for providing remote networks with a default route.

  The default route is advertised to the EIGRP network because the redistribute command was executed. This command is used to advertise the default route to the EIGRP network.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify default routing

  References:

  Cisco > Support > Technology Support > IP > IP Routing > Design > Design TechNotes > Configuring a Gateway of Last Resort Using IP Commands Cisco > Support > Technology Support > IP > IP Routing > Technology Information > Technology White Paper > Enhanced Interior Gateway Routing Protocol