Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 611:

  Two MPLS routers, R1 and R2, are not directly connected and have an established LDP session running between them. What type of LDP session is this?

  A. Remote LDP session
  B. Direct LDP session
  C. Tunneled LDP session
  D. Targeted LDP session
  D. Targeted LDP session

• Question 612:

  Refer to the exhibit. The Los Angeles and New York routers are receiving routes from Chicago but not from each other. Which configuration fixes the issue?

  

  A. Interface Tunnel1 no ip split-horizon eigrp 111
  B. Interface Tunnel1 Ip next-hop-self elgrp 111
  C. Interface Tunnel1 tunnel mode Ipsec Ipv4
  D. Interface Tunnel1 tunnel protection ipsec profile IPSec-PROFILE
  A. Interface Tunnel1 no ip split-horizon eigrp 111

  ---

  In this topology, Chicago router (Hub) will receive advertisements from Los Angeles (Spoke1) router on its tunnel interface. The problem here is that it also has a connection with New York (Spoke2) on that same tunnel interface. If we don't disable EIGRP split-horizon, then the Hub will not relay routes from Spoke1 to Spoke2 and the other way around. That is because it received those routes on interface Tunnel1 and therefore it cannot advertise back out that same interface (splithorizon rule). Therefore we must disable split-horizon on the Hub router to make sure the Spokes know about each other.

• Question 613:

  Refer to the exhibit. An engineer must troubleshoot an issue affecting the communication from router R2 to the TACACS server. Which configuration resolves the issue?

  

  A. R1 (config)#tacacs-server packet maxsize 43974
  B. R2(config)#tacacs server advrt R2 (config-server-tacacs)#key xyz123
  C. R2(config)#tacacs-server packet maxsize 43974
  D. R1 (config)#tacacs server advrt R1 (config-server-tacacs)#kty xyz123
  B. R2(config)#tacacs server advrt R2 (config-server-tacacs)#key xyz123

• Question 614:

  Refer to the exhibit.

  

  An engineer has configured DMVPN on a spoke router.

  What is the WAN IP address of another spoke router within the DMVPN network?

  A. 172.18.46.2
  B. 192.168.1.4
  C. 172.18.16.2
  D. 192.168.1.1
  A. 172.18.46.2

  ---

• Question 615:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Do not replace existing routing policies or configurations.

  7. Save your configurations to NVRAM before moving to the next item.

  8. Click Next at the bottom of the screen to submit this lab and move to the next question.

  9. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  A DMVPN network is preconfigured with tunnel 0 IP address 192.168.1.254 on the HUB, IP connectivity, crypto policies, profiles, and EIGRP AS 100. The NHRP password is cсnp123, and the network ID and tunnel key is EIGRP ASN. Do not introduce a static route. Configure DMVPN connectivity between routers BR1 and BR2 to the HUB router using physical interface as the tunnel source to achieve these goals:

  1. Configure NHRP authentication, static IP-to-NBMA address maps, hold time 5 minutes, network ID, and server on branch router BR1.

  2. Configure NHRP authentication, static IP-to-NBMA address maps, hold time 5 minutes, network ID, and server on branch router BR2.

  3. Ensure that packet fragmentation is done before encryption to account for GRE and IPsec header and allow a maximum TCP segment size of 1360 on an IP MTU of 1400 on the tunnel interfaces of both branch routers.

  4. Apply an IPsec profile to the tunnel. Verify that direct spoke-to-spoke tunnel is functional between branch routers BR1 and BR2 by using traceroute to Ethernet 0/0 IP address to get a full score.

  A. See the solution below in Explanation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the solution below in Explanation.

  ---

  

• Question 616:

  An administrator wants to implement security on his company's router. Please select three options that you will use on your router to secure it. (Choose three.)

  A. Control Access to the router
  B. Restrict all traffic through the router
  C. Restrict SNMP
  D. Enable all unused services
  E. Encrypt all passwords
  F. Disable logging
  A. Control Access to the router
  C. Restrict SNMP
  E. Encrypt all passwords

• Question 617:

  DRAG DROP

  Drag and drop the ICMPv6 neighbor discovery messages from the left onto the correct packet types on the right.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 618:

  Refer to the exhibit.

  

  In which circumstance does the BGP neighbor remain in the idle condition?

  A. if prefixes are not received from the BGP peer
  B. if prefixes reach the maximum limit
  C. if a prefix list is applied on the inbound direction
  D. if prefixes exceed the maximum limit
  D. if prefixes exceed the maximum limit

  ---

  https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/25160-bgp- maximum-prefix.html#b

• Question 619:

  What is the role of a route distinguisher via a VRF-Lite setup implementation?

  A. It extends the IP address to identify which VFP instance it belongs to.
  B. It manages the import and export of routes berween two or more VRF instances
  C. It enables multicast distribution for VRF-Lite setups to enhance EGP routing protocol capabilities
  D. It enables multicast distribution for VRF-Lite setups to enhance IGP routing protocol capabilities
  A. It extends the IP address to identify which VFP instance it belongs to.

• Question 620:

  During the maintenance window, an administrator accidentally deleted the Telnet-related configuration that permits a Telnet connection from the inside network (Eth0/0) to the outside of the network between Friday - Sunday night hours only. Which configuration resolves the issue?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  telnet is TCP and it has friday thru sunday in the config