Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 601:

  Refer to the exhibit.

  

  Which action fixes the OSPF routes redistribution into EIGRP?

  A. Match external type to type-1
  B. Set tags before matching into EIGRP
  C. Set a default metric in the route map
  D. Match OSPF and EIGR IDs
  B. Set tags before matching into EIGRP

  ---

• Question 602:

  Users were moved from the local DHCP server to the remote corporate DHCP server. After the move, none of the users were able to use the network.Which two issues will prevent this setup from working properly? (Choose two)

  A. Auto-QoS is blocking DHCP traffic.
  B. The DHCP server IP address configuration is missing locally
  C. 802.1X is blocking DHCP traffic
  D. The broadcast domain is too large for proper DHCP propagation
  E. The route to the new DHCP server is missing
  B. The DHCP server IP address configuration is missing locally
  E. The route to the new DHCP server is missing

• Question 603:

  Which of the following commands must be present in the configuration to support Unicast RFP?

  A. bandwidth
  B. ip cef
  C. ip route 0.0.0.0 0.0.0.0
  D. log
  B. ip cef

  ---

  The command ip cef must be present in the configuration to support Unicast Reverse Path Forwarding (RPF). If the router is set to its defaults, it will be present. Unicasts RPF uses the tables created by CEF to validate packet source addresses. Therefore, it must be enabled. Unicast RPF can be enabled in three modes:

  Strict mode - The source address must be must be reachable on the interface where the packet arrived. Loose mode - Traffic is allowed if the source address is reachable via any interface on the router as indicted in the routing table.

  VRF mode - Evaluates an incoming packet's source IP address against the VRF table configured for an eBGP neighbor.

  The bandwidth command, while desirable to ensure proper cost calculation of the interface for routing purposes, is not a requirement for Unicast RPF.

  The ip route 0.0.0.0 0.0.0 command creates a default route. A default route does not need to be present for Unicast RPF to function.

  The log command is not required. This command should be used with caution with any access list, as it causes an increase in CPU usage in the router.

  Objective:

  Infrastructure Security

  Sub-Objective:

  Configure and verify router security features

  References:

  Cisco IOS Security Configuration Guide, Release 12.2 > Part 5: Other Security Features > Configuring Unicast Reverse Path Forwarding Cisco > Cisco IOS IP Switching Command Reference > ip cef

• Question 604:

  Refer the exhibit.

  

  Which action resolves intermittent connectivity observed with the SNMP trap packets?

  A. Decrease the committed burst Size of the mgmt class map
  B. Increase the CIR of the mgmt class map
  C. Add a new class map to match TCP traffic
  D. Add one new entry in the ACL 120 to permit the UDP port 161
  B. Increase the CIR of the mgmt class map

  ---

• Question 605:

  Refer to the exhibit.

  

  Which routes from OSPF process 5 are redistributed into EIGRP?

  A. E1 and E2 subnets matching access list TO-OSPF
  B. E1 and E2 subnets matching prefix list TO-OSPF
  C. only E2 subnets matching access list TO-OSPF
  D. only E1 subnets matching prefix listTO-OS1
  A. E1 and E2 subnets matching access list TO-OSPF

• Question 606:

  Refer to the exhibit.

  

  A network engineer lost remote access to the router due to a network problem. The engineer used the console to access the router and noticed continuous logs on the console terminal. Which configuration limits the number of log messages on the console to critical and higher severity level messages?

  A. logging console 2
  B. logging console 5
  C. no logging console
  D. term no monitor
  A. logging console 2

  ---

  0.

  Emergency

  1. Alert

  2. Critical

  3. Error

  4. Warning

  5. Notice

  6. Informational

  7.

  Debug

• Question 607:

  An engineer sets up a DMVPN connection to connect branch 1 and branch 2 to HQ branch 1 and branch 2 cannot communicate with each other. Which change must be made to resolve this issue?

  

  A. R1(config)#int eth1/1 R1(config-if)#no ip split-horizon eigrp 100
  B. R2(config)#router eigrp 100 R2(config-router)#tneighbor 172.16.1.3
  C. R3(config)#router eigrp 100 R3(config-router)#neighbor 172.16.1.2
  D. R1(config)#int tunnel 1 R1(config-if)#no ip split-horizon eigrp 100
  D. R1(config)#int tunnel 1 R1(config-if)#no ip split-horizon eigrp 100

• Question 608:

  Which of the following IPv6 addresses correctly represent the shortened version of the IP address 2031:0000:0000:130F:0000:0000:876A:130B? (Choose two.)

  A. 2031::130F::876A:130B
  B. 2031::130F:0:0:876A:130B
  C. 2031:0:130F::876A:130B
  D. 2031:0:0:130F::876A:130B
  B. 2031::130F:0:0:876A:130B
  D. 2031:0:0:130F::876A:130B

  ---

  2031:0000:0000:130F:0000:0000:876A:130B can be shortened to either 2031::130F:0:0:876A:130B or 2031:0:0:130F::876A:130B.

  IPv6 addresses are written in 16-bit hexadecimal number fields separated by a colon (:). There are a total of eight 16-bit fields, making each IPv6 address a total of 128 bits. The hexadecimal letters are NOT case sensitive.

  You can shorten an IPv6 address by removing the leading zeros in any address field. You can only remove zeros that are the first character in an address field. For example, FFC0:02C0: is the same as FFC0:2C0:.

  However, FFC0:8020 is not the same as FFC0:802:.

  If a 16-bit address field contains all zeros, then it can be represented by a single zero. For example, FF80:0000: is the same as FF80:0:.

  You can use double colons (::) to represent successive address fields of zeros. An address parser can determine the number of missing fields and then insert the proper number of zeros to complete the address. For example, FF80:0000:0000:0000:0000:0000:0000:0001 is the same as FF80::1, and 0000:0000:0000:0000:0000:0000:0000:0001 could be written as ::1. However, you can only have one set of double colons (::) in an address; therefore, FF80:0000:0000:0CB0:0000:0000:0000:0001 cannot be

  written as F80::0CB0::1.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Identify IPv6 addressing and subnetting

  References:

  Cisco > IPv6 Addressing and Basic Connectivity Configuration Guide > IPv6 Addressing and Basic Connectivity

  Cisco > IPv6 Addressing at a Glance (PDF)

• Question 609:

  Which of the following is true regarding IPsec Pre-fragmentation (Look-Ahead Fragmentation)? (Choose two.)

  A. Operates in tunnel mode only
  B. Operates in transport mode only
  C. Is used to help in the overall IPsec throughput since the end host is able to avoid packet reassembly after packet decryption.
  D. Is not dependent on the MTU of the physical interface used for IPsec.
  E. Does not support Path MTU Discovery
  A. Operates in tunnel mode only
  C. Is used to help in the overall IPsec throughput since the end host is able to avoid packet reassembly after packet decryption.

• Question 610:

  Refer to the exhibit.

  

  Users are experiencing slow response times from critical application servers connected to the network. The engineer determined from the console log that there is a DoS attack on interface GigabitEthernet0/0. Which action must the engineer take to resolve the issue?

  A. Configure an access group on GigabitEthernet0/0 to block traffic from 192.168.1.1.
  B. Configure an access group on GigabitEthernet0/0 to block traffic from 172.17.132.95.
  C. Restrict CoPP traffic on the management interface from 172.17.132.95 and 192.168.1.1.
  D. Configure QoS on FastEthernet0/0 to restrict bandwidth usage for 172.17.132.95 and 192.168.1.1.
  D. Configure QoS on FastEthernet0/0 to restrict bandwidth usage for 172.17.132.95 and 192.168.1.1.