Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 861:

  Refer to the exhibit.

  

  Which address would successfully summarize only the networks seen?

  A. 192.168.0.0/24
  B. 192.168.8.0/20
  C. 192.168.8.0/21
  D. 192.168.12.0/20
  E. 192.168.16.0/21
  F. These networks cannot be summarized
  C. 192.168.8.0/21

• Question 862:

  Which of the following commands enables Unicast Reverse Path forwarding in loose mode?

  A. ip verify unicast source reachable-via rx
  B. ip verify unicast source reachable-via any
  C. ip verify unicast source reachable-via rx allow default
  D. ip verify unicast source reachable-via allow default
  B. ip verify unicast source reachable-via any

  ---

  The command ip verify unicast source reachable-via any enables Unicast Reverse Path Forwarding (RPF) in loose mode. In loose mode, traffic is allowed if the source address is reachable via any interface on the router as indicted in the routing table. Unicast Reverse Path forwarding uses the source IP address when it validates the packet. Packets are validated when the source address is contained in the routing table and is reachable either via the ingress interface (strict mode) or via any interface (loose

  mode).

  The command ip verify unicast source reachable-via rx enables Unicast RPF in strict mode, not loose mode. The rx keyword indicates the source must be reachable on the interface where the packet arrived.

  The command ip verify unicast source reachable-via rx allow default enables Unicast RPF in strict mode. The inclusion of the allow default keyword indicates the source can be reachable via a default route to be accepted.

  The command ip verify unicast source reachable-via allow default is syntactically incorrect. The allow default keyword cannot be present by itself. It must follow either the rx or any keywords.

  Objective:

  Infrastructure Security

  Sub-Objective:

  Configure and verify router security features

  References:

  Understanding Unicast Reverse Path Forwarding

  Cisco > Cisco IOS Security Command Commands D to L > ip verify unicast source reachable-via

• Question 863:

  Refer to the exhibit.

  

  Which action installs route 192.168.2.2/32 in the routing table?

  A. Redistribute connected networks into BGP on the local router.
  B. Configure NAT on the local router to translate private IP addresses.
  C. Configure the next-hop-self attribute for the peering on the local router.
  D. Configure the next-hop-self attribute for the peering on the peer router.
  D. Configure the next-hop-self attribute for the peering on the peer router.

• Question 864:

  Examine the exhibit.

  

  You have determined that RTR2 is not advertising the CIDR summary address 192.168.0.0 to the other routers in AS 65100. Which set of configuration commands will enable the BGP router RTR2 to announce the network prefix 192.168.0.0/16 to the other routers in the AS 65100?

  A. router bgp 65100 neighbor 172.16.1.2 remote-as 65100 neighbor 192.168.3.2 remote-as 65100 network 192.168.3.0
  B. router bgp 65100 neighbor 172.16.1.2 remote-as 65101 neighbor 192.168.3.2 remote-as 65100 network 192.168.0.0
  C. router bgp 65100 neighbor 172.16.1.2 remote-as 65100 neighbor 192.168.3.2 remote-as 65100 network 192.168.0.0 mask 255.255.0.0 ip route 192.0.0.0 255.0.0.0 null 0
  D. router bgp 65100 neighbor 172.16.1.2 remote-as 65101 neighbor 192.168.3.2 remote-as 65100 network 192.168.0.0 mask 255.255.0.0 ip route 192.168.0.0 255.255.0.0 null 0
  D. router bgp 65100 neighbor 172.16.1.2 remote-as 65101 neighbor 192.168.3.2 remote-as 65100 network 192.168.0.0 mask 255.255.0.0 ip route 192.168.0.0 255.255.0.0 null 0

  ---

  Issuing the following commands will cause RTR2 to advertise the CIDR block 192.168.0.0/16 to the other routers by using BGP:

  RTR2(config)# router bgp 65100

  RTR2(config-router)# neighbor 172.16.1.2 remote-as 65101

  RTR2(config-router)# neighbor 192.168.3.2 remote-as 65100

  RTR2(config-router)# network 192.168.0.0 mask 255.255.0.0

  RTR2(config-router)# ip route 192.168.0.0 255.255.0.0 null 0

  The network command specifies the address that will be inserted into the BGP table. Without the mask keyword, the classful network will be assumed. Because 255.255.0.0, or /16, is not the natural mask for any Class C address, the mask keyword must also be specified. Thus, 192.168.0.0 and 255.255.0.0 identify the desired address and mask of the 192.168.0.0/16 network prefix.

  The router checks the IP forwarding table for an exact match before it advertises the route. Without a matching entry in the IP forwarding table, that route will not be advertised. RTR2 must be able to advertise a CIDR block and not the individual subnets. A static route is required because BGP requires that a match of the network prefix be present in the forwarding table when using the network command with the mask keyword. Therefore, to ensure an exact match for the identified prefix exists in the IP

  forwarding table, and to ensure that the prefix will always be advertised, a static route for 192.168.0.0/16 to null 0 is also required.

  The syntax for the network command is shown below:

  network network-number [ mask network-mask ] [ route-map map-tag ]

  The parameters are:

  mask - This parameter is optional and identifies the network or subnetwork to advertise. route-map - This parameter is optional and identifies a preconfigured route-map that will be used to filter specific addresses from being advertised.

  The following command set is missing the mask keyword in the network command and the command to create a static route to null 0. The address used in the network command is also incorrect. It should 192.168.0.0:

  router bgp 65100

  neighbor 172.16.1.2 remote-as 65100

  neighbor 192.168.3.2 remote-as 65100

  network 192.168.3.0

  The following command set is missing the mask keyword in the network command and the command to create a static route to null 0:

  router bgp 65100

  neighbor 172.16.1.2 remote-as 65101

  neighbor 192.168.3.2 remote-as 65100

  network 192.168.0.0

  The following command set uses an incorrect mask (255.0.0.0) in the command that creates the static route to null 0. It should be 255.255.0.0:

  router bgp 65100

  neighbor 172.16.1.2 remote-as 65100

  neighbor 192.168.3.2 remote-as 65100

  network 192.168.0.0 mask 255.255.0.0

  ip route 192.0.0.0 255.0.0.0 null 0

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Describe, configure, and verify BGP peer relationships and authentication

  References:

  Internetworking Case Studies > Using the Border Gateway Protocol for Interdomain Routing > Controlling the Flow of BGP Updates > CIDR and Aggregate Addresses > Aggregation and Static Routes

• Question 865:

  R2 has a locally originated prefix 192.168.130.0/24 and has these configurations:

  

  What is the result when the route-map OUT command is applied toward an eBGP neighbor R1 (1.1.1.1) by using the neighbor 1.1.1.1 route-map OUT out command?

  A. R1 sees 192.168.130.0/24 as two AS hops away instead of one AS hop away.
  B. R1 does not accept any routes other than 192.168.130.0/24
  C. R1 does not forward traffic that is destined for 192.168.30.0/24
  D. Network 192.168.130.0/24 is not allowed in the R1 table
  A. R1 sees 192.168.130.0/24 as two AS hops away instead of one AS hop away.

• Question 866:

  Refer to the exhibit.

  

  With the partial configuration of a router-on-a-stick, clients in VLAN 10 on Gi2 cannot obtain IP configuration from the central DHCP server. The DHCP server is reachable by a successful ping from the router. Which action resolves the issue?

  A. Configure the ip helper-address 192.168.255.3 command on the Gi2.10 subinterface.
  B. Configure a valid IP address on the Gi2 interface so that DHCP requests can be forwarded.
  C. Configure the ip dhcp pool 1 and network 192.168.210.0 255.255.255.0 commands.
  D. Configure the ip dhcp excluded-address 192.168.255.3 command on the Gi2.10 subinterface.
  A. Configure the ip helper-address 192.168.255.3 command on the Gi2.10 subinterface.

• Question 867:

  How does BFD protocol work?

  A. When BFD declares a failure on the primary IGP path, the router on the peer router chooses to use the secondary path.
  B. BFD operates on the route processor module and impacts the route processor CPU utilization.
  C. BFD control packets are sent via UDP port 3784 to the destination router.
  D. BFD echo packets are sent to the same source IP and different destination IP with TCP port of 3786.
  C. BFD control packets are sent via UDP port 3784 to the destination router.

• Question 868:

  You are configuring NAT64 to allow communication between a host running IPv6 and a server running IPv4. The router R1 sits between the host and the server. The router's Fa0/2/7 interface is connected to the IPv6 host, and the Fa0/2/6 interface is connected to the IPv4 server. The IPv6 host has an IPv6 address of 2001::a00:1/128 and the IPv4 server is at 10.0.0.1. Below is the relevant configuration on R1:

  

  When the IPv4 server responds to the IPv6 host, what IPv6 address will be in the source address in the packet?

  A. 2001::a001
  B. 2001::A00:B
  C. 3001::a00:1
  D. 2001::A00:A
  C. 3001::a00:1

  ---

  NAT64 is a solution when IPv6 hosts need to communicate with IPv4-only servers. When the translation occur on the router the IPv4 address 10.0.0.1 will converted to hex as a00:1 and will be attached to the end of the stateful prefix of 3001::/96 that was configured on the router interface connected to the IPv4 server. The result will be 3001::a00:1.

  The address will not be 2001::a001. The prefix that will be attached to the hex version of 10.0.0.1 will not be that of the interface fa0/2/7 but will be the prefix that was configured on that interface for nat64 translation which is 3301::/96. The address will not be 2001::a00:b. That is the IPv6 address on the interface connected to the IPv6 host, but that address is not used for IPv4 to IPv6 communication. A translated address will be generated by converting the IPv4 address of the IPv4 host to hex and attaching it

  to the IPv6 prefix configured on the interface connected to the IPv4 server.

  The address will not be 2001::A00:A. That is the IPv6 address of the IPv6 host. That was statically mapped to 10.0.0.10 in the configuration and as such will be the IPv4 address used by the IPv6 host on the IPv4 side of the router.

  Objective:

  Infrastructure Services

  Sub-Objective:

  Describe IPv6 NAT

  References:

  Stateful Network Address Translation 64 (PDF)

• Question 869:

  An engineer is trying to copy an IOS file from one router to another router by using TFTP. Which two actions are needed to allow the file to copy? (Choose two.)

  A. Copy the file to the destination router with the copy tftp: flash: command
  B. Enable the TFTP server on the source router with the tftp-server flash: command
  C. TFTP is not supported in recent IOS versions, so an alternative method must be used
  D. Configure a user on the source router with the username tftp password tftp command
  E. Configure the TFTP authentication on the source router with the tftp-server authentication local command
  A. Copy the file to the destination router with the copy tftp: flash: command
  B. Enable the TFTP server on the source router with the tftp-server flash: command

• Question 870:

  Which two methods use IPsec to provide secure connectivity from the branch office to the headquarters office? (Choose two.)

  A. DMVPN
  B. MPLS VPN
  C. Virtual Tunnel Interface (VTI)
  D. SSL VPN
  E. PPPoE
  A. DMVPN
  C. Virtual Tunnel Interface (VTI)