Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 591:

  Which parameter does EIGRP use to compute the bandwidth part of the metric?

  A. The maximum bandwidth link in the path, in kilobits per second
  B. The minimum bandwidth link in the path, in kilobits per second
  C. The average bandwidth of all the links in the path, in kilobits per second
  D. The average bandwidth of all the links in the path, in kilobytes per second
  B. The minimum bandwidth link in the path, in kilobits per second

  ---

  The minimum bandwidth link, in kilobits per second, is used in the EIGRP metric calculation, because this is the limiting factor in the overall speed of delivery over the path.

  BW = (10,000,000 / bandwidth in Kbps) x 256

  Delay = (delay in microseconds / 10) x 256

  The formula for calculating the EIGRP metric is shown below:

  [K1 x BW + (K2 X BW) / (256 - load) + K3 x delay] X [K5 / (reliability + K4)]

  You should note, however, that when K5 = 0 (as it is by default), a slightly different formula applies.

  When K5 = 0, the EIGRP metric is [K1 X BW + (K2 X BW) / (256 - load) + K3 x delay]

  By default, K1 = 1, K3 = 1, and K2, K4, and K5 = 0.

  Therefore, the default EIGRP metric is BW + Delay, where "BW" and "Delay" are determined according to the formula above.

  The final formula is shown below:

  [10,000,000 / (bandwidth in Kbps) + (delay in microseconds) / 10] * 256

  These usually are derived from the values listed in the show interfaces command.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Describe and optimize EIGRP metrics

  References:

  Cisco > Home > Support > Technology Support > IP Routing > Technology Information > Technology White Paper > Enhanced Interior Gateway Routing Protocol > Using The Metrics

• Question 592:

  The network administrator configured the router for Control Plane Policrg so that inbound SSH traffic is policed to 500 kbps This policy must apply to traffic coming in from 101010 0<24 and 192 168 10.0/24 networks

  access-list 100 permit ip 10.10.10.0 0.0.0.255 any access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 23 ! class-map CLASS-SSH match access-group 100 ! policy-map PM-COPP class CLASS-SSH police 500000 conform-action transmit ! interface E0/0 service-policy input PM-COPP ! interface E0/1 service-policy input PM-COPP

  The Control Rane Policing is not applied to SSH traffic and SSH is open to use any bandwidth available. Which configuration resolves this issue?

  A. no access-list 100 access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22 access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22
  B. interface E0/0 no service-policy input PM-COPP ! interface E0/1 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP
  C. no access-list 100 access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22 access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22 ! policy-map PM-COPP class CLASS-SSH no police 500000 conform-action transmit police 500000 conform-action transmit exceed-action drop
  D. no access-list 100 access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22 access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22 ! interface E0/0 no service-policy input PM-COPP ! interface E0/1 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP
  D. no access-list 100 access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22 access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22 ! interface E0/0 no service-policy input PM-COPP ! interface E0/1 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP

• Question 593:

  Refer to the exhibit.

  

  After a RADIUS server fails AAA authentication, an engineer is trying to reestablish console access to a switch using the local password. Which configuration reestablishes the console access to switch SW1 via AAA?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

  ---

  Password 7 expects an ENCRYPTED string after the command, you cannot just type the password. this is usually used to copy configuration from one switch to antoher.

  R5(config-router)#metric weights ? <0-8> Type (Only TOS 0 supported)

  R5(config-router)#metric weights 0 ? <0-255> K1

  R5(config-router)#metric weights 0 1 ? <0-255> K2

  R5(config-router)#metric weights 0 1 0 ? <0-255> K3

  R5(config-router)#metric weights 0 1 0 1 ? <0-255> K4

  R5(config-router)#metric weights 0 1 0 1 0 ? <0-255> K5

• Question 594:

  Refer to the exhibit.

  

  An engineer configured user login based on authentication database on the router, but no one can log into the router. Which configuration resolves the issue?

  A. aaa authentication login default enable
  B. aaa authorization network default local
  C. aaa authentication login default local
  D. aaa authorization exec default local
  C. aaa authentication login default local

• Question 595:

  Users report web connectivity problems on the server (10.1.1.10). Which IP SLA configuration captures the failure details through the network to resolve the issue?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 596:

  Out of the below options regarding DMVPN and FLEXVPN, select the correct one.

  A. FlexVPN uses a new key management protocol - IKEv2, while most traditional DMVPN networks use IKEv1
  B. FlexVPN uses a new key management protocol - IKEv1, while most traditional DMVPN networks use IKEv2
  C. With FlexVPN there's multiple standard way of NHRP and routing protocols operations as opposed to 1 phase of DMVPN
  D. Flex VPN and DMVPN both are supported only on Firewalls.
  A. FlexVPN uses a new key management protocol - IKEv2, while most traditional DMVPN networks use IKEv1

  ---

• Question 597:

  Refer to the exhibit. The branch router is configured with a default route toward the Internet and has no routes configured for the HQ site that is connected through interface G2/0. The HQ router is fully configured and does not require changes.

  

  Which configuration on the branch router makes the intranet website (TCP port 80) available to the branch office users?

  A. access-list 101 permit tcp any any eq 80 access-list 102 permit tcp any host intranet-webserver-ip ! route-map pbr permit 10 match ip address 101 set ip next-hop 192.168.2.2 route-map pbr permit 20 match ip address 102 set ip next-hop 192.168.2.2 ! interface G2/0 ip policy route-map pbr
  B. access-list 100 permit tcp host intranet-webserver-ip eq 80 any ! route-map pbr permit 10 match ip address 100 set ip next-hop 192.168.2.2 ! interface G1/0 ip policy route-map pbr
  C. access-list 100 permit tcp any host intranet-webserver-ip eq 80 ! route-map pbr permit 10 match ip address 100 set ip next-hop 192.168.2.2 ! interface G2/0 ip policy route-map pbr
  D. access-list 101 permit tcp any any eq 80 access-list 102 permit tcp any host intranet-webserver-ip ! route-map pbr permit 10 match ip address 101 102 set ip next-hop 192.168.2.2 ! interface G1/0 ip policy route-map pbr
  D. access-list 101 permit tcp any any eq 80 access-list 102 permit tcp any host intranet-webserver-ip ! route-map pbr permit 10 match ip address 101 102 set ip next-hop 192.168.2.2 ! interface G1/0 ip policy route-map pbr

  ---

  The ACL 101 matches all HTTP pakects while the ACL 102 matches TCP packets destined

  to Intranet webserver. These packets will be sent to HQ router. If amatchcommand refers to several objects in one command, either of them should match (the logical OR algorithm is applied). Forexample, in thematch ip address 101 102 command, a route is permitted if it is permitted by access list 101 or access list 102.

• Question 598:

  Refer to the exhibit.

  

  The services at branch B are down. An engineer notices mal rouler A and router B are not exchanging any routes

  Which configuration resolves the issue on router B?

  A. router eigrp 100 network 192.168.168.0 key chain CCNP key 1 key-string EIGRP interface serial0/0/0 ip address 192.168.168.2 255.255.255.0 ip authentication mode eigrp 100 md5 ip authentication key-chain eigrp 100 EIGRP negotiation auto
  B. router eigrp 100 network 192.168.168.0 key chain EIGRP key 1 key-string CCNP interface serial0/0/0 ip address 192.168.168.2 255.255.255.0 ip authentication mode eigrp 100 md5 negotiation auto
  C. router eigrp 100 network 192.168.168.0 key chain EIGRP key 1 key-string CCNP interface serial0/0/0 ip address 192.168.168.2 255.255.255.0 ip authentication mode eigrp 100 md5 ip authentication key-chain eigrp 100 EIGRP negotiation auto
  D. router eigrp 100 network 192.168.168.0 key chain EIGRP key 1 key-string CCNP interface serial0/0/0 ip address 192.168.168.2 255.255.255.0 ip authentication key-chain eigrp 100 EIGRP negotiation auto
  C. router eigrp 100 network 192.168.168.0 key chain EIGRP key 1 key-string CCNP interface serial0/0/0 ip address 192.168.168.2 255.255.255.0 ip authentication mode eigrp 100 md5 ip authentication key-chain eigrp 100 EIGRP negotiation auto

  ---

• Question 599:

  Refer to the exhibit.

  

  Bangkok is using ECMP to reach the 172.20.2.0/24 network. The network administrator must configure it in such a way that traffic from 172.16.2.0/24 network uses the Singapore router as the preferred route. Which set of configurations accomplishes this task?

  A. Bangkok access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 ! interface Ethernet0/1 ip policy route-map PBR1
  B. Dubai access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 set ip next-hop peer-address ! interface Ethernet0/0 ip policy route-map PBR1
  C. Bangkok access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 ! interface Ethernet0/2 ip policy route-map PBR1
  D. Dubai access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 ! interface Ethernet0/0 ip policy route-map PBR1
  C. Bangkok access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 ! interface Ethernet0/2 ip policy route-map PBR1

• Question 600:

  Network operations report issues with receiving too many external routes, which caused CPU spike on routers with smaller memories. Which action resolves the issue?

  A. Configure the area range command when redistributing on ASBR.
  B. Configure the summary-address command when redistributing on ABR.
  C. Configure the area range command when redistributing on ABR.
  D. Configure the summary-address command when redistributing on ASBR.
  D. Configure the summary-address command when redistributing on ASBR.

  ---

  https://www.geeksforgeeks.org/configuring-ospf-route-summarization-in-cisco/

  ASBR summary-address [not-advertise]

  ABR area range [advertise |not-advertise]

  E1/E2 come from ASBR.