Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 671:

  Refer to the exhibit. Which configuration configures a policy on R1 to forward any traffic that is sourced from the 192.168.130.0/24 network to R2?

  

  A. access-list 1 permit 192.168.130.0 0.0.0.255 ! interface Gi0/2 ip policy route-map test ! route-map test permit 10 match ip address 1 set ip next-hop 172.20.20.2
  B. access-list 1 permit 192.168.130.0 0.0.0.255 ! interface Gi0/1 ip policy route-map test ! route-map test permit 10 match ip address 1 set ip next-hop 172.20.40.2
  C. access-list 1 permit 192.168.130.0 0.0.0.255 ! interface Gi0/2 ip policy route-map test ! r oute-map test permit 10 match ip address 1 set ip next-hop 172.20.20.1
  D. access-list 1 permit 192.168.130.0 0.0.0.255 ! interface Gi0/1 ip policy route-map test ! route-map test permit 10 match ip address 1 set ip next-hop 172.20.40.1
  E. access-list 1 permit 192.168.130.0 0.0.0.255 ! interface Gi0/1 ip policy route-map test ! route-map test permit 10 match ip address 1 set ip next-hop 172.20.20.1
  D. access-list 1 permit 192.168.130.0 0.0.0.255 ! interface Gi0/1 ip policy route-map test ! route-map test permit 10 match ip address 1 set ip next-hop 172.20.40.1

• Question 672:

  Refer to the following exhibit, where three routers have EIGRP for IPv6 enabled on them:

  

  What is the next-hop address when rtrB advertises the 2001:5050:D402:B333::/64 IPv6 subnet to rtrC?

  A. FE80::3030:3030:3030/64
  B. FE80::3230:3030:3030/64
  C. FE80::3030:30FF:FE30:3030/64
  D. FE80::3230:30FF:FE30:3030/64
  D. FE80::3230:30FF:FE30:3030/64

  ---

  The next-hop address when rtrB advertises the 2001:5050:D402:B333::/64 IPv6 subnet to rtrC is FE80::3230:30FF:FE30:3030/64. In routers with EIGRP for IPv6 enabled on them, the next-hop address is the IP address of the interface that advertises routes. The next-hop addresses should be link-local addresses. Link-local addresses are IPv6 unicast addresses that are automatically assigned to the router interfaces. These addresses have the FE80::/10 prefix and the EUI-64 standard interface address. EUI-64 is an IEEE standard that allows the determination of an IPv6 address from the MAC address of an interface. The 64 most significant bits should be specified in the ipv6 address command. The 64 least significant bits are determined by using the EUI-64 standard. The steps to determine the 64 least significant bits are as follows:

  1. Divide the 48-bit MAC address into two 24-bit parts.

  2. Embed FFFE (16 bits) between the two parts resulting in a 64-bit address.

  3. If required, toggle the seventh bit of the first octet in the address. In EUI-64 format, if the seventh bit is 0, then the address is local. If the seventh bit is 1, the address is global.

  In this case, when rtrB advertises any route to rtrC, it advertises the interface with the MAC address 3030.3030.3030 as the next-hop. When the given steps are performed on the MAC address, it result in the EUI-64 standard address 3230.30FF.FE30:3030. This address is then appended to the FE80::/10 prefix. The resultant IPv6 link-local address of the interface is FE80::3230.30FF.FE30:3030/10.

  The remaining three options are incorrect as their interface address is not in the EUI-64 standard.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Identify IPv6 addressing and subnetting

  References:

  Cisco IPv6 Configuration Guide, Release 15.2 > IPv6 Neighbor Redirect Message Cisco IPv6 Configuration Guide, Release 15.2 > IPv6 Unicast Routing > Aggregatable Global Address

• Question 673:

  Refer to the exhibit.

  

  EIGRP peering was lost.

  Which configuration resolves the issue?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 674:

  Your assistant is interested in gathering statistics about connection-oriented operations. Which of the following should be done to enhance the accuracy of the information gathered?

  A. configure an IP SLA responder on the destination device
  B. configure an IP SLA responder on the source device
  C. schedule the operation on the destination device
  D. add the verify-data command to the configuration of the operation
  A. configure an IP SLA responder on the destination device

  ---

  Any IP SLA operations accuracy can be enhanced by configure an IP SLA responder on the destination device. It is important to note that only Cisco devices support the configuration as a responder.

  You do not configure an IP SLA responder on the source device. You schedule the operation on the source device and the destination device is the one that is configured as a responder. You do not schedule the operation on the destination device. You schedule the operation on the source device and the destination device is the one that is configured as a responder.

  Adding the verify-data command to the configuration of the operation will not enhance the accuracy of the information gathered. When data verification is enabled, each operation response is checked for corruption. Use the verify-data command with caution during normal operations because it generates unnecessary overhead.

  Objective:

  Infrastructure Services

  Sub-Objective:

  Configure and verify IP SLA

  References:

  IP SLAs Configuration Guide, Cisco IOS Release 15M > Configuring IP SLAs TCP Connect Operations

• Question 675:

  You have applied the following configuration to Router71, as indicated in the following partial output of the show run command:

  

  Which of the following statements is true of this configuration?

  A. This is a GLBP configuration
  B. 171.16.6.100 is the IP address of the HSRP group
  C. The numeral 1 is the number of the HSRP group
  D. This router will be prevented from taking back over as active router when it recovers from a loss of its Serial0 interface
  C. The numeral 1 is the number of the HSRP group

  ---

  One is the number of the HSRP group. Hot Standby Routing Protocol (HSRP) can be used to provide default gateway redundancy for computers sharing the same gateway. At least two routers are gathered into a routing group, which in this case is numbered 1. One of the routers will answer ARP requests for the standby IP address (in this case 171.16.6.100), which is the address the computers will have configured as their default gateway. That router is called the active router.

  If that router goes down, then the other router will start answering ARP requests for the standby IP address.

  This is not a Gateway Load Balancing Protocol configuration. That is an alternative to HSRP which allows both routers to be used while still providing backup to one another. That configuration would be different in that it uses GLBP groups rather than standby groups, among other differences.

  This router will be not prevented from taking back over as active router when it recovers from an outage of its Serial 0 interface. The presence of the command standby 1 preempt indicates that the router can take back over or preempt the other router when it recovers from an outage of its Serial 0 interface. The command standby 1 track Serial0 tells the router to track the up/down state of its Serial 0 interface. If it goes down, it knows to decrement its HSRP priority by 10 (the decrement value). This will drop

  its HSRP priority to 95. We do not see the priority of the other router in the group, but if for example its priority is 100, this configuration would allow it to take over as active router.

  Objective:

  Infrastructure Services

  Sub-Objective:

  Configure and verify tracking objects

  References:

  Home > Support > Technology support > IP > IP application services > Troubleshoot and alerts > Troubleshooting Technotes > How to Use the standby preempt and standby track Commands

• Question 676:

  Which of the following IPv6 access list statements would permit SSH traffic from 2001:DB8:0:4::32 when applied to the VTY lines?

  A. permit ipv6 2001:DB3:0:5::/48 any eq ssh
  B. permit ipv6 2001:DB8:0:4::/64 any eq ssh
  C. permit ipv6 host 2001:DB8:0:4::32 any eq 23
  D. permit ipv6 2001:DE8:0:4:::/48 any eq 22
  B. permit ipv6 2001:DB8:0:4::/64 any eq ssh

  ---

  The only statement that would allow SSH traffic from 2001:DB8:0:4::32 is permit ipv6 2001:DB8:0:4::/64 any eq ssh. It would match because it specifies the 2001:DB8:0:4:: subnet as a result of the /64 prefix. With that prefix, traffic must match in the first four hextets. Since the address 2001:DB8:0:5::32 matches in the first four hextets, it is allowed.

  The statement permit ipv6 2001:DB3:0:5::/48 any eq ssh will not permit traffic from 2001:DB8:0:4::32. With a /48 subnet mask, the address must match in the first three hextets, and it does not do

  Objective:

  Infrastructure Security

  Sub-Objective:

  Configure and verify router security features

  References:

  Catalyst 3750 Software Configuration Guide, Release 12.2(55)SE > Configuring IPv6 ACLs Cisco > Cisco IOS IPv6 Command Reference > permit (IPv6)

• Question 677:

  Which two components are needed for a service provider to utilize the L3VPN MPLS application? (Choose two.)

  A. The P routers must be configured for MP-iBGP toward the PE routers
  B. The P routers must be configured with RSVP.
  C. The PE routers must be configured for MP-iBGP with other PE routers
  D. The PE routers must be configured for MP-eBGP to connect to CEs
  E. The P and PE routers must be configured with LDP or RSVP
  C. The PE routers must be configured for MP-iBGP with other PE routers
  E. The P and PE routers must be configured with LDP or RSVP

  ---

  +

  IGP: OSPF, EIGRP, IS-IS on core facing and core links+ RSVP and/or LDP on core and/or core facing links ->

  +

  MP-iBGP on PE devices (for MPLS services), MP-BGP: Multiprotocol Border Gateway Protocol, used for MPLS L3 VPN -> .

• Question 678:

  Refer to the exhibit.

  

  Which command must beconfigured to make VRF CCNP work?

  A. interface Loopback0 vrf forwarding CCNP
  B. interface Loopback0 ip address 10.1.1.1 255.255.255.0
  C. interface Loopback0 ip address 10.1.1.1 255.255.255.0 vrf forwarding CCNP
  D. interface Loopback0 ip address10.1.1.1 255.255.255.0 ip vrf forwarding CCNP
  B. interface Loopback0 ip address 10.1.1.1 255.255.255.0

  ---

  From the exhibit, we learn that the command "ip address 10.1.1.1 255.255.255.0" has been issued before the command "ip vrf forwarding CCNP". But the second command removed the IP address configured in the first command so we have to retype the IP address command.

• Question 679:

  Which command displays the IP routing table information that is associated with VRF-Lite?

  A. show ip vrf
  B. show ip route vrf
  C. show run vrf
  D. show ip protocols vrf
  B. show ip route vrf

  ---

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/50sg/configuration/guide/Wrapper-46SG/vrf.html#wp1045708

• Question 680:

  Refer to the exhibit.

  

  R1 uses SP1 as the primary path. A network engineer must force all SSH traffic generated from R1 toward SP2. Which configuration accomplishes the task?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---