Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 871:

  Refer to the exhibit.

  

  An engineer identifier a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?

  A. no spanning-tree uplinkfast
  B. spanning-tree loopguard default
  C. spanning-tree backbonesfast
  D. spanning-tree portfast bpduguard
  B. spanning-tree loopguard default

• Question 872:

  Refer to the exhibit.

  

  

  A bank ATM site has difficulty connecting with the bank server. A network engineer troubleshoots the issue and finds that R4 has no active route to the bank ATM site. Which action resolves the issue?

  A. EIGRP peering between R1 and R2 to be fixed.
  B. Advertise 10.10.30.0/24 subnet in R3 EIGRP AS.
  C. Advertise 10.10.30.0/24 subnet in R1 EIGRP AS.
  D. EIGRP peering between R3 and R4 to be fixed.
  D. EIGRP peering between R3 and R4 to be fixed.

  ---

  https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/118974-technote-eigrp-00.html https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKRST-2331.pdf

• Question 873:

  Which statement about IPv6 RA Guard is true?

  A. It does not offer protection in environments where IPv6 traffic is tunneled.
  B. It cannot be configured on a switch port interface in the ingress direction.
  C. Packets that are dropped by IPv6 RA Guard cannot be spanned.
  D. It is not supported in hardware when TCAM is programmed.
  A. It does not offer protection in environments where IPv6 traffic is tunneled.

  ---

  Restrictions for IPv6 RA Guard

  The IPv6 RA Guard feature does not offer protection in environments where IPv6 traffic is tunneled.

  This feature is supported only in hardware when the ternary content addressable memory (TCAM) is programmed.

  This feature can be configured on a switch port interface in the ingress direction.

  This feature supports host mode and router mode.

  This feature is supported only in the ingress direction; it is not supported in the egress direction.

  This feature is not supported on EtherChannel and EtherChannel port members.

  This feature is not supported on trunk ports with merge mode.

  This feature is supported on auxiliary VLANs and private VLANs (PVLANs). In the case of PVLANs,primary VLAN features are inherited and merged with port features.

  Packets dropped by the IPv6 RA Guard feature can be spanned.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16/ip6f-xe-16-book/ip6-ra-guard.pdf

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-3s/ip6f-xe-3s-book/ip6-ra-guard.pdf

• Question 874:

  Which command sets the OSPF priority value of a router interface to 10?

  A. Router(config)# ospf priority 10
  B. Router(config-if)# ospf priority 10
  C. Router(config)# ip ospf priority 10
  D. Router(config-if)# ip ospf priority 10
  D. Router(config-if)# ip ospf priority 10

  ---

  The correct syntax for the ip ospf priority command is shown below:

  Router(config-if)# ip ospf priority {number}

  The number is a value from 0 to 255, and 1 is the default priority. A priority value of 0 means that the interface cannot be elected as the designated router (DR) or backup designated router (BDR). The higher the priority, the more preferred the router is when there is an election for DR and BDR for that network.

  NOTE: The ip ospf priority command is entered in interface configuration mode, not router configuration mode.

  All other options either use incorrect syntax or are executed at an incorrect prompt.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify network types, area types, and router types

  References:

  Cisco IOS Master Command List, Release 12.4 > i through k > ip ospf priority

• Question 875:

  DRAG DROP

  Drag and drop the IPv6 first hop security device roles from the left onto the corresponding descriptions on the right.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NXOS_Security_Configuration_Guide_7x_chapter_011011.pdf

• Question 876:

  Your network team is assessing options available to translate IPv6 address to IPv4 addresses. You have focused your attention on the variants of NAT64. One of your requirements is the conservation of IPv4 addresses. Which of the following versions of NAT 64 helps to conserve IPv4 addresses?

  A. stateless
  B. manual
  C. static
  D. stateful
  D. stateful

  ---

  One of the characteristics of stateful NAT64 is that it conserves IPv4 addresses. NAT64 is a version of network address translation that translates IPv6 address to IPv4 and vice versa. It has two variants, stateless and stateful. The following table describes some of the major differences between the two:

  

  NAT64 has neither the variant static nor the variant manual. Objective:

  Infrastructure Services

  Sub-Objective:

  Describe IPv6 NAT

  References:

  Home > Products and services > Cisco IOS and NX-OS software > Cisco IOS technologies > Enterprise ipv6 solution > Data sheets and literature > White papers > NAT64 Technology: Connecting IPv6 and IPv4 Networks > Technologies Facilitating IPv6/IPv4 Translation

• Question 877:

  When the auth keyword is used in the snmp-server host command, which of the flowing must be configured with an authentication mechanism?

  A. the interface
  B. the host
  C. the user
  D. the group
  C. the user

  ---

  The auth keyword specifies that the user should be authenticated using either the HMAC-MD5 or HMAC-SHA algorithms. These algorithms are specified during the creation of the SNMP user.

  For example, the following command creates a user named V3User that will be a member of the SNMP group V3Group and will use HMAC-MD5 with a password of MyPassword:

  snmp-server user V3User V3Group v3 auth md5 MyPassword

  The authentication mechanism is not configured on the interface. All SNMP commands are executed at the global configuration prompt.

  The authentication mechanism is not configured at the host level. The version and security model (authentication, authentication and encryption, or neither) are set at the host level.

  The authentication mechanism is not configured at the SNMP group level. The group level is where access permissions like read and write are set. This is why a user account must be a member of a group to derive an access level, even if it is a group of one.

  Objective:

  Infrastructure Services

  Sub-Objective:

  Configure and verify SNMP

  References:

  Configuring SNMP Support > Understanding SNMP > SNMP Versions Cisco IOS Network Management Command Reference > snmp-server engineID local through snmp trap link- status > snmp-server host

• Question 878:

  Which label operations are performed by a label edge router?

  A. SWAP and POP
  B. SWAP and PUSH
  C. PUSH and PHP
  D. PUSH and POP
  D. PUSH and POP

  ---

  A label edge router (LER, also known as edge LSR) is a router that operates at the edge of an MPLS network and acts as the entry and exit points for the network. LERs push an MPLS label onto an incoming packet and pop it off an outgoing packet.

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx- os/mpls/configuration/guide/mpls_cg/mp_mpls_overview.pdf

• Question 879:

  Refer to the exhibit. A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands

  

  Which action resolves the issue?

  A. Configure TACACS+ synchronization with the Active Directory admin group
  B. Configure the username from a local database
  C. Configure full access for the username from TACACS+ server
  D. Configure an authorized IP address for this user to access this router
  C. Configure full access for the username from TACACS+ server

• Question 880:

  Refer to Exhibit.

  

  PC2 is directly connected to R1. A user at PC2 cannot Telnet to 2001:db8:a:b::10. The user can ping 2001:db8:a:b::10 and receive DHCP-related information from the DHCP server. Which action resolves the issue?

  A. Remove sequence 10 and put it back as sequence 25.
  B. Remove sequence 20 and put it back as sequence 45.
  C. Remove sequence 30 and put it back as sequence 5.
  D. Remove sequence 40 and put it back as sequence 15.
  A. Remove sequence 10 and put it back as sequence 25.