Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 731:

  Refer to the exhibit.

  

  The users from subnet 172.16.1.16/28 are experiencing connectivity issues to subnet 172.16.2.32/48.

  Which configuration resolves the issue?

  A. R1(config)#route-map REDIST permit 10 R1(config-route-map) #match Ip address 15 R1 (config-route-map) #exit R1(config)# access-list 15 permit 172.16.0.0 0.0.255.255 R1(config-router) #router eigrp 100 R1(config-router) #redistrlbute ospf 1 route-map REDIST
  B. R1(oonfig-router) #router ospf 1 R2(config-router) #redistribute eigrp 100 subnets metric 100C.
  C. R1(config-router>#routereigrp 100 R1(config-router>#redistribute ospf 1 metric 1000000 1111
  D. R1(config)#route-map REDIST permit 10 R1(config-roule-map) #match ip address 15 R1 (config-route-map) #exlt R1(config)# access-list 15 permit 172.16.0.0 0.0.255.255 R1(config-router) #router ospf 1 R1(config-router) #redistrlbute elgrp 100 subnets route-map REDIST
  D. R1(config)#route-map REDIST permit 10 R1(config-roule-map) #match ip address 15 R1 (config-route-map) #exlt R1(config)# access-list 15 permit 172.16.0.0 0.0.255.255 R1(config-router) #router ospf 1 R1(config-router) #redistrlbute elgrp 100 subnets route-map REDIST

• Question 732:

  Examine the following output of the show ip route command and the partial output of the show run command from the router R63:

  

  What will the router do with a packet with a source address of 192.168.5.5/24 and a destination address of 10.11.11.20/ 24 that arrives on the Serial0/0 interface?

  A. forward it out the Ethernet0/0 interface
  B. forward it out the Tunnel0 interface
  C. drop the packet
  D. forward it out the Ethernet0/1 interface
  C. drop the packet

  ---

  It will drop the packet. The partial output of the show run command shows that the ip verify unicast source reachable via rx command has been executed on the Serial 0/0 interface. This enables the Unicast Reverse Path Forwarding (Unicast RPF) feature. This feature prevents IP spoofing by verifying from the routing table that there is a valid return path to the source IP address. If there is not valid return path, you can assume the IP address has been spoofed. When the command ends in the keyword rx, it

  means that there must be a return path through the interface where the command was executed. This is called strict mode.

  The packet arrived on the Serial0/0 interface. The routing table shows that there is no routing entry for the 192.168.5.0/24 network that leads back through the entry interface of Serial0/0. In fact, in this instance there is no routing table entry for that network leading to any interface. When this occurs, the router will drop the packet.

  The router will not send the packet to either the Ethernet0/0 or the Tunnel0 interfaces because the destination network, 10.11.11.0/24, is not a reachable destination on those interfaces. Even if it were reachable, the Unicast Reverse Path Forwarding (Unicast RPF) feature will drop the packet because it has been spoofed.

  It will not send the packet to the Ethernet0/1 interface. The Unicast Reverse Path Forwarding (Unicast RPF) feature will drop the packet because it has been spoofed. If the packet were not spoofed, it would be sent to the Ethernet0/1 interface because that is the interface used by the default route. Because there is no route in the table to the 10.11.11.0/24 network, it would be sent to the default route.

  Objective:

  Infrastructure Security

  Sub-Objective:

  Configure and verify router security features

  References:

  Cisco IOS Security Configuration Guide, Release 12.2 > Configuring Unicast Reverse Path Forwarding Cisco > Configuring Unicast Reverse Path Forwarding

• Question 733:

  Refer to the exhibit.

  

  Which action resolves the issue?

  A. Establish connectivity between the NTP server and the switch.
  B. Configure the local time on the SW1 device.
  C. Configure the local time on Cisco DNA Center.
  D. Establish connectivity between the NTP server and Cisco DNA Center.
  A. Establish connectivity between the NTP server and the switch.

• Question 734:

  Refer to the exhibit. Which configuration enables OSPF for area 0 interfaces to establish adjacency with a neighboring router with the same VRF?

  

  A. router ospf 1 vrf CCNP network 10.1.1.1 0.0.0.0 area 0 network 10.2.2.2 0.0.0.0 area 0
  B. router ospf 1 interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0
  C. router ospf 1 vrf CCNP interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0
  D. router ospf 1 vrf CCNP network 10.0.0.0 0.0.255.255 area 0
  B. router ospf 1 interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0

  ---

• Question 735:

  Refer to the exhibit

  

  After a misconfiguration by a junior engineer, the console access to router A is not working. Which configuration allows access to router A?

  A. RouterA(config)#aaa new-model RouterA(config)#aaa authentication login my-auth-list tacacs+
  B. RouterA(config)#line console 0 RouterA(config-line)#password cisco RouterA(config-line)#end
  C. RouterA(config)#line console 0 RouterA(config-line)#password cisco RouterA(config-line)#login local RouterA(config-line)#end
  C. RouterA(config)#line console 0 RouterA(config-line)#password cisco RouterA(config-line)#login local RouterA(config-line)#end

• Question 736:

  Refer to the exhibit

  

  R2 has been receiving routes from R4 that originated outside AS300.

  A network engineer configured an AS-Path ACL to avoid adding these routes to the R2 BGP table, but the routes are still present in the R2 routing table.

  Which action resolves the issue?

  A. Replace as-path access-list 1 with the ip as-path access-list 1 permit A300$ command
  B. Replace as-path access-list 1 with the ip as-path access-list 1 permit ..300. command.
  C. Replace as-path access-list 1 with the ip as-path access-list 1 permit A300_ command.
  D. Replace as-path access-list 1 with the ip as-path access-list 1 permit A300. command.
  B. Replace as-path access-list 1 with the ip as-path access-list 1 permit ..300. command.

  ---

• Question 737:

  If the following protocols are redistributed into OSPF, which protocol will receive a metric of 1 if none is specified, rather than the default metric of 20?

  A. EIGRP
  B. RIP
  C. IGRP
  D. BGP
  D. BGP

  ---

  Border Gateway Protocol (BGP) routes that are redistributed into OSPF will be marked with a metric of 1 if no other metric is specified. All other routing protocols will receive a metric of 20 when redistributed into OSPF.

  A metric can be manually specified when redistributing the route, as shown below:

  router5(config)# router ospf 10

  router5(config-router)# redistribute bgp 120 metric 5

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify redistribution between any routing protocols or routing sources

  References:

  Cisco Press > Articles > Network Technology > General Networking > Cisco OSPF Route Redistribution Cisco > Support > Technology Support > IP > IP Routing > Design > Design Technotes > Redistributing Routing Protocols > Document

  ID: 8606

• Question 738:

  Refer to the exhibit.

  

  Which action adds the 10.1.7.6/32 route to the BGP table?

  A. Add a static route for the 10.1.7.6/32 network.
  B. Add summary-address 10.1.7.6 255.255.255.0.
  C. Add the network 10.1.7.6 mask 255.255.255.255 backdoor command.
  D. Add the network 10.1.7.6 mask 255.255.255.255 command.
  D. Add the network 10.1.7.6 mask 255.255.255.255 command.

• Question 739:

  A network administrator recently redistributed RIP routes into an OSPF domain. However, the administrator wants to configure the network so that instead of 32 external type-5 LSAs flooding into the OSPF network, there is only one.

  

  What must the administrator do to accomplish this?

  A. Configure summarization on R1 with area 1 range 172.16.32.0 255.255.224.0
  B. Configure summarization on R1 with summary-address 172.16.32.0 255.255.224.0
  C. Configure area 1 as a stub area with area 1 stub
  D. Configure area 1 as a NSSA area with area 1 stub nssa
  B. Configure summarization on R1 with summary-address 172.16.32.0 255.255.224.0

  ---

  In many cases, the router doesn't even need specific routes to each and every subnet (for example, 172.16.1.0/24).

  It would be just as happy if it knew how to get to the major network (for example, 172.16.0.0/16) and let another router take it from there. In our telephone network example, the local telephone switch should only need to know to route a phone call to the switch for the called area code. Similarly, a router's ability to take a group of subnetworks and summarize them as one network (in other words, one advertisement) is called route summarization. Besides reducing the number of routing entries that a router

  must keep track of, route summarization can also help protect an external router from making multiple changes to its routing table due to instability within a particular subnet.

  For example, let's say that we were working on a router that connected to 172.16.2.0/24. As we were working on the router, we rebooted it several times. If we were not summarizing our routes, an external router would see each time 172.16.2.0/24 went away and came back. Each time, it would have to modify its own routing table. However, if our external router were receiving only a summary route (i.e., 172.16.0.0/16), then it wouldn't have to be concerned with our work on one particular subnet. This is

  especially a problem for EIGRP, which can create stuck in active (SIA) routes that can lead to a network melt-down.

  Summarization Example We have the following networks that we want to advertise as a single summary route:

  * 172.16.100.0/24 * 172.16.101.0/24 * 172.16.102.0/24 * 172.16.103.0/24 * 172.16.104.0/24 * 172.16.105.0/24 * 172.16.106.0/24

• Question 740:

  Company A recently acquired Company B and the network infrastructures are being merged. Both organizations used non-overlapping globally unique network addressing but different Interior Gateway Protocols (IGPs). Initially, multiple WAN links will connect the two organizations. Company A will maintain its core routing protocol, and Company B's routing protocol will be the edge routing protocol. Two-way redistribution will be used to ensure full network routing capability.

  What additional routing configuration should be performed to prevent routing loops and suboptimal routing?

  A. Manually configure static routes.
  B. Manually configure default routes.
  C. Manually adjust the administrative distances.
  D. Manually adjust the local preference attribute.
  C. Manually adjust the administrative distances.

  ---

  When routes are being redistributed from the core into the edge and from the edge into the core, the administrative distance (AD) associated with external routes should be modified. This lessens the possibility of sub-optimal routing when multiple routing protocols advertise different paths to the same network. The AD associated with the externally advertised routes should be higher than the internal IGP's AD. To change the AD for an entire routing protocol, use the distance command. An example and the

  command syntax are shown below:

  router(config)#router rip

  router(config-router)#distance 125

  The complete syntax of the distance command is:

  distance weight [address mask [ access-list-number | name]

  The weight parameter is the AD, which can be a number from 10 to 255. Note that distances 0 through 9 are reserved for system use.

  To change only the AD for selected networks, use an access list with the distance command as shown below:

  router(config)# access-list 5 permit 10.0.0.0 255.0.0.0

  router(config)# access-list 5 permit 11.0.0.0 255.0.0.0

  router(config)# access-list 5 permit 12.0.0.0 255.0.0.0

  router(config)# router rip

  router(config-router)# distance 220 0.0.0.0 255.255.255.255 5

  The 0.0.0.0 255.255.255.255 portion included with the distance command could hold an address/mask combination for a single address, but it is more common to use an access list.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify redistribution between any routing protocols or routing sources

  References:

  Cisco > Cisco IOS IP Routing: Protocol-Independent Command Reference > distance (ip) Cisco > Support > Technology Support > IP > IP Routing > Design > Design Technotes > What Is Administrative Distance? > Document ID: 26634