Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 651:

  The exhibit is a frame relay hub-and-spoke topology with router A as the hub.

  

  You want to use the OSPF routing protocol between all three locations. Which interface configuration commands are required on router A? (Choose three.)

  A. ip ospf network broadcast
  B. ip ospf network point-to-point
  C. ip ospf network point-to-multipoint
  D. frame-relay map 10.20.10.21 221
  E. frame-relay map 10.20.10.22 222
  F. frame-relay map ip 10.20.10.21 221 broadcast
  G. frame-relay map ip 10.20.10.22 222 broadcast
  C. ip ospf network point-to-multipoint
  F. frame-relay map ip 10.20.10.21 221 broadcast
  G. frame-relay map ip 10.20.10.22 222 broadcast

  ---

  In OSPF point-to-multipoint mode, the routers will automatically identify each neighbor. The election of a designated router (DR) and backup designated router (BDR) are not required. This RFC compliant mode of operation is commonly found in partial mesh topologies, such as hub-and-spoke designs. In the diagram shown in the scenario, router A is the hub.

  The frame relay serial interface has one DLCI to each spoke location. DLCI 221 is used by router A to communicate with router C and DLCI 222 is used to communicate with router B. On router A's serial interface, point-to-multipoint mode is enabled with the ip ospf network configuration command. The following is the syntax of the ip ospf network command:

  ip ospf network [{broadcast | nonbroadcast | point-to-multipoint | point-to-multipoint nonbroadcast}]

  The command parameters are as follows:

  broadcast - This mode enables the interface to emulate a LAN. This mode requires a full or partial mesh topology.

  nonbroadcast - This RFC 2328 compliant mode is also referred to as NBMA mode. The neighbors must be statically configured.

  point-to-multipoint - This RFC 2328 compliant mode is used in partial mesh topologies, such as hub-and- spoke. Routers use additional LSAs to discover neighboring routers instead of manually defining DRs and BDRs. The hub router floods link state updates (LSUs) by duplicating the update to be sent to each routers using the respective DLCI.

  point-to-multipoint nonbroadcast - This is a Cisco extension to the point-to-multipoint mode.

  This mode is useful when the frame relay virtual circuits do not support broadcast traffic. Neighbors are manually defined.

  There is no point-to-point parameter for the ip ospf command. Creating a point-to-point configuration differs in that the point-to-point parameter is executed as a parameter of the command that creates the subinterface that hosts the point-to- point connection as shown below:

  Router(config)# interface serial 0.1 point-to-point

  When configuring a serial interface without sub-interfaces, OSPF will check the encapsulation to determine the network type. HDLC and PPP default to point-to-point while Frame-Relay encapsulation defaults to nonbroadcast.

  The frame-relay map command identifies the mapping between the Layer 3 address (IP address) and the Layer 2 address (DLCI). The frame relay virtual circuits from the hub router are identified as supporting broadcast traffic by using the frame-relay map command with the broadcast keyword.

  Objective:

  Layer 2 Technologies

  Sub-Objective:

  Explain Frame Relay

  References:

  Cisco > Home > Support > Support Technology > Support > IP Routing > Configure > Configuration Examples and Technotes > Initial Configurations for OSPF over Frame Relay Subinterfaces Cisco > Cisco IOS Wide-Area Networking Command Reference > frame-relay lapf n201 through fr-atm connect dlci > frame-relay map

• Question 652:

  What is a characteristic of an MPLS LSP tunnel?

  A. bidirectional tunnel
  B. secured bidirectional tunnel
  C. hop-by-hop tunnel
  D. unidirectional tunnel
  D. unidirectional tunnel

• Question 653:

  Refer to the exhibit.

  

  An IP SLA is configured to use the backup default route when the primary is down, but it is not working as desired. Which command fixes the issue?

  A. R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2 10 track 1
  B. R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2
  C. R1(config)#ip sla track 1
  D. R1(config)# ip route 0.0.0.0.0.0.0.0.1.1.1.1 track 1
  D. R1(config)# ip route 0.0.0.0.0.0.0.0.1.1.1.1 track 1

  ---

  Note: By default Static Router AD value-1 hence ip route 0.0.0.0. 0.0.0.0. 1.1.1.1 track 1 means AD-1 which must be less than of back up route AD.

  Define the backup route to use when the tracked object is unavailable.

  !--- The administrative distance of the backup route must be greater than

  !--- the administrative distance of the tracked route.

  !--- If the primary gateway is unreachable, that route is removed

  !--- and the backup route is installed in the routing table

  !--- instead of the tracked route.

  https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200785-ISP-Failover-with-default-routes-using-I.html

  https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118962-configure-asa-00.html

• Question 654:

  Which feature of the Cisco DNA Center allows you to run diagnostic CLI commands to the devices that are managed by DNA Center for troubleshooting purposes?

  A. Command Runner
  B. DNA Spaces
  C. DNA Advantage
  D. Intelligent Capture
  A. Command Runner

• Question 655:

  Which show command displays the status of all of a router's Border Gateway Protocol (BGP) connections in a concise format?

  A. show ip bgp
  B. show ip bgp summary
  C. show ip bgp connections
  D. show ip bgp neighbor's summary
  B. show ip bgp summary

  ---

  The correct answer is show ip bgp summary.

  Although show ip bgp neighbors will show you the status of your connections to neighbors, only show ip bgp summary shows it to you in a concise, summarized format, with one neighbor listed per line. It displays both iBGP and eBGP neighbors and the number of prefixes that have been learned from the neighbor. Below is an example of the output of the show ip bgp summary command:

  

  The following information can be obtained from this output:

  The BGP session to 192.168.5.1 is established. A number in the State column indicates that the session is established. This number indicates the number of prefixes received from the neighbor. Router6 is attempting to establish a BGP peering session with the 192.168.6.1 neighbor. This is indicated by the keyword Active in the State column.

  Several show commands can be used to verify BGP configuration and operation:

  show ip bgp - displays the contents of the BGP routing table show ip bgp summary - displays the status of BGP connections in a summary format show ip bgp neighbors - displays information about the TCP and BGP connections to neighbors

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Describe, configure, and verify BGP peer relationships and authentication

  References:

  Cisco IOS Master Command List, Release 12.4 > a through b > BGP > Commands: show ip through T > show ip bgp summary

• Question 656:

  Refer to the exhibit

  

  An engineer must ensure that R3 sees only type 1 and 2 LSAs in area 1. Which command must the engineer apply on R2?

  A. Area 1 stub nssa
  B. Area 1 nssa no-summary
  C. Area 1 stub no-summary
  D. Area 1 stub
  C. Area 1 stub no-summary

  ---

• Question 657:

  Refer to the exhibit. Which action restores OSPF adjacency between R1 and R2?

  

  A. Change the IP MTU of R1 Fa1/0 to 1300
  B. Change the IP MTU of R2 Fa0/0 to 1300
  C. Change the IP MTU of R1 Fa1/0 to 1500
  D. Change the IP MTU of R2 Fa0/0 to 1500
  D. Change the IP MTU of R2 Fa0/0 to 1500

  ---

• Question 658:

  Refer to the exhibit. An engineer must configure a LAN-to-LAN IPsec VPN between R1 and the remote router. Which IPsec Phase 1 configuration must the engineer use for the local router?

  

  A. crypto isakmp policy 5 authentication pre-share encryption 3des hash sha group 2 ! crypto isakmp key cisco123 address 200.1.1.3
  B. crypto isakmp policy 5 authentication pre-share encryption 3des hash md5 group 2 ! crypto isakmp key cisco123 address 200.1.1.3
  C. crypto isakmp policy 5 authentication pre-share encryption 3des hash md5 group 2 ! crypto isakmp key cisco123 address 199.1.1.1
  D. crypto isakmp policy 5 authentication pre-share encryption 3des hash md5 group 2 ! crypto isakmp key cisco123! address 199.1.1.1
  A. crypto isakmp policy 5 authentication pre-share encryption 3des hash sha group 2 ! crypto isakmp key cisco123 address 200.1.1.3

  ---

  In the "crypto isakmp key ... address " command, the address must be of the IP address of the other end (which is 200.1.1.3 in this case) so Option A and Option B are correct. The difference between these two options are in the hash SHA or MD5 method but both of them can be used although SHA is better than MD5 so we choose Option A the best answer. Note: Cisco no longer recommends using 3DES, MD5 and DH groups 1, 2 and 5.

• Question 659:

  Which protocol must be secured with MD-5 authentication across the MPLS cloud to prevent hackers from introducing bogus routers?

  A. RSVP
  B. ALSO
  C. LDP
  D. MP-BGP
  C. LDP

  ---

  The Label Distribution Protocol (LDP) can also be secured with MD-5 authentication across the MPLS cloud. This prevents hackers from introducing bogus routers, which would participate in the LDP. https://www.cisco.com/c/en/us/td/docs/net_mgmt/vpn_solutions_center/2-0/mpls/provisioning/guide/PGmpls1.html

• Question 660:

  Refer to the exhibit.

  

  An engineer is trying to redistribute OSPF to BGP, but not all of the routes are redistributed. What is the reason for this issue?

  A. By default, only internal routes and external type 1 routes are redistributed into BGP
  B. Only classful networks are redistributed from OSPF to BGP
  C. BGP convergence is slow, so the route will eventually be present in the BGP table
  D. By default, only internal OSPF routes are redistributed into BGP
  D. By default, only internal OSPF routes are redistributed into BGP

  ---

  If you configure the redistribution of OSPF into BGP without keywords, only OSPF intra-area and inter-area routes are redistributed into BGP, by default.

  You can redistribute both internal and external (type-1 and type-2) OSPF routes via this command:

  Router(config-router)#redistribute ospf 1 match internal external 1 external 2