Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 81:

  Refer to the Exhibit.

  

  R1 and R2 use IGP protocol to route traffic between AS 100 and AS 200 despite being configured to use BGP. Which action resolves the issue and ensures the use of BGP?

  A. Configure distance to 100 under the EIGRP process of R1 and R2.
  B. Remove distance commands under BGP AS 100 and AS 200.
  C. Remove distance commands under BGP AS 100.
  D. Configure distance to 100 under the OSPF process of R1 and R2
  B. Remove distance commands under BGP AS 100 and AS 200.

• Question 82:

  Refer to the exhibit.

  

  Users in VLAN46 cannot get the IP from the DHCP server. Assume that all the parameters are configured properly in VLAN 10 and on the DHCP server Which command on interlace VLAN46 allows users to receive IP from the DHCP server?

  A. ip dhcp-addreos 10.221.10.10
  B. ip dhcp server 10.221.10.10
  C. ip helper-addrets 10.221.10.10
  D. ip dhcp relay information trust-all
  C. ip helper-addrets 10.221.10.10

• Question 83:

  What is the use of IPv6 snooping?

  A. captures IPv6 routing protocol packets to analyze
  B. requires an external IPv6 packet analyzer
  C. required for the operation of IPv6 RA Guard
  D. captures any type of user traffic to create a binding table
  D. captures any type of user traffic to create a binding table

  ---

  IPv6 Snooping

  IPv6 snooping captures the IPv6 traffic and helps in populating the binding table. It gathers addresses in control messages such as Neighbor Discovery Protocol (NDP) or Dynamic Host Configuration Protocol (DHCP) packets. Depending on the security level, it blocks unwanted messages such as Router Advertisements (RA) or DHCP replies. This feature is a pre-requisite to the remaining security features mentioned here.

  https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/15S/configuration/guide/7600_15_0s_book/IPv6_Security.html

• Question 84:

  What must be configured by the network engineer to circumvent AS_PATH loop prevention mechanism in IP/VPN Hub and Spoke deployment scenarios?

  A. Use allowas-in at the PE_Hub.
  B. Use allowas-in and as-override at all PEs.
  C. Use allowas-in and as-override at the PE_Hub.
  D. Use as-override at the PE_Hub.
  D. Use as-override at the PE_Hub.

  ---

  Purpose: This is used to replace occurrences of the AS number of the provider edge (PE) router with the AS number of the remote AS, typically in the context of BGP VPNs. Typical Use: This is often used by service providers in a BGP/MPLS VPN to prevent loops in the customer's network when the customer is using the same AS number at multiple sites.

• Question 85:

  Refer to the exhibit.

  

  A network engineer for AS64512 must remove the inbound and outbound traffic from link A during maintenance without closing the BGP session so that there is still a backup link over link A toward the ASN. Which BGP configuration on R1 accomplishes this goal?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  Local preference is used to choose the path to external BGP neighbors. An example of using local-preference is shown below:

  

  In this case all BGP prefixes advertised via Link B will have a local preference of 200, which is higher than the default value (100) so Link B is preferred over Link A to send traffic.

• Question 86:

  Which method should you use to block all routing updates from being sent into a network through an interface?

  A. Static route
  B. Default route
  C. Passive interface
  D. Route-update filtering
  C. Passive interface

  ---

  To stop all outbound routing updates from an interface, you can use the passive-interface command. The effect of the passive-interface command is dependent on the routing protocol running on the interface. For EIGRP, the router will not only stop sending routing updates, but also hellos, which means that it will not form a neighbor relationship with another EIGRP router on that interface. This is also the case with OSPF and IS-IS. With RIP, however, the router will continue to send hellos even as it stops

  sending routing updates and it will still receive routing updates.

  There are numerous reasons to use the passive-interface command. For instance, suppose that you have a LAN with only end hosts on it and no other router. Additionally, there is no reason to send EIGRP packets, but you want EIGRP to advertise that the network can be reached. The combination of a network statement for that interface plus a passive-interface command would be appropriate.

  Route-update filtering can block all routing updates if you prefer, but it is really intended for selective filtering of updates. If your goal is to block all updates, the passive-interface command is best.

  Default routes and static routes can be used as ways around having to send routing updates out an interface. However, if your goal is to block updates, you should issue the passive-interface command.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Troubleshoot passive interfaces

  References:

  Cisco > Cisco IOS IP Routing: Protocol-Independent Command Reference > passive-interface Cisco > Home > Support > Technology Support > IP > IP Routing > Design > Design Technotes > How Does the Passive Interface Feature Work in EIGRP?

• Question 87:

  For a non-ISP autonomous system (AS), which combination of two conditions will require redistribution from BGP into Interior Gateway Protocol (IGP)? (Choose two.)

  A. All routers run BGP.
  B. Not all routers run BGP.
  C. No knowledge of external routes is required inside the AS.
  D. Routers inside the AS require knowledge of external routes.
  B. Not all routers run BGP.
  D. Routers inside the AS require knowledge of external routes.

  ---

  For non-ISP autonomous systems (AS), redistribution into IGP is required when BOTH of the following conditions exist:

  Not all routers run BGP

  Knowledge of external routes is required inside the AS

  Note: Redistribution of any BGP routes into your IGP can cause serious problems, even if your internal routers can handle the load. This should be done rarely, if at all. If you do decide to do this, configure heavy filtering to allow only very few routes into OSPF or EIGRP so as not to overwhelm those protocols. For instance, do it only for a select group of networks for which optimal routing is critical.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify redistribution between any routing protocols or routing sources

  References:

  Cisco > Support > Technology Support > IP > IP Routing > Design > Design Technotes > BGP Case Studies > Document ID: 26634 > Static Routes and Redistribution Cisco > Cisco IOS IP Routing: BGP Configuration Guide, Release 12.4 > Cisco BGP Overview > Information About Cisco BGP > BGP Autonomous Systems

• Question 88:

  Refer to the exhibit. R5 should not receive any routes originated in the EIGRP domain.

  

  Which set of configuration changes removes the EIGRP routes from the R5 routing table to fix the issue?

  A. R4 route-map O2R deny 10 match tag 111 route-map O2R permit 20 ! router rip redistribute ospf 1 route-map O2R metric 1
  B. R2 route-map E20 deny 20 R4 route-map O2R deny 10 match tag 111 ! router rip redistribute ospf 1 route-map O2R metric 1
  C. R4 route-map O2R permit 10 match tag 111 route-map O2R deny 20 ! router rip redistribute ospf 1 route-map O2R metric 1
  D. R4 route-map O2R deny 10 match tag 111 ! router rip redistribute ospf 1 route-map O2R metric 1
  A. R4 route-map O2R deny 10 match tag 111 route-map O2R permit 20 ! router rip redistribute ospf 1 route-map O2R metric 1

• Question 89:

  Refer to the exhibit.

  

  Which configuration resolves the route filtering issue on R1 to redistribute all the routes except 172.16.2.48/28?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 90:

  Refer to the exhibit.

  

  It was noticed that after NetFlow is configured in the router, the collector stopped receiving flow information. Which action resolves the issue?

  A. Apply the ip flow egress command to the loopback2 interface.
  B. Modify the source through the ip flow-export source loopback1 command.
  C. Configure an IP address on the loopback2 interface to use as a source.
  D. Change the IP address of the loopback 2 interface to a public IP address.
  D. Change the IP address of the loopback 2 interface to a public IP address.