Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 891:

  Which configuration enables the VRF that is labeled "Inet" on FastEthernet0/0?

  A. R1(config)# ip vrf Inet R1(config-vrf)#ip vrf FastEthernet0/0
  B. R1(config)#ip vrf Inet FastEthernet0/0
  C. R1(config)# ip vrf Inet R1(config-vrf)#interface FastEthernet0/0 R1(config-if)#ip vrf forwarding Inet
  D. R1(config)#router ospf 1 vrf Inet R1(config-router)#ip vrf forwarding FastEthernet0/0
  C. R1(config)# ip vrf Inet R1(config-vrf)#interface FastEthernet0/0 R1(config-if)#ip vrf forwarding Inet

• Question 892:

  Refer to the exhibit.

  

  An engineer is trying to log in to R1 via R3 loopback address. Which action resolves the issue?

  A. Add transport input SCP.
  B. Remove the IPv6 traffic filter from R1, which is blocking the SSH.
  C. Remove the IPv6 traffic filter from R1, which is blocking the Telnet.
  D. Add transport input none.
  C. Remove the IPv6 traffic filter from R1, which is blocking the Telnet.

  ---

  The exhibit on the right is show ping is working and the user is using telnet to connect sourcing the loopback interface.

• Question 893:

  Which of the following are commonly used ports when implementing RADIUS based authentication and accounting? (Choose two.)

  A. UDP port 1644 for authentication
  B. UDP port 1812 for authentication
  C. TCP port 1812 for authentication
  D. UDP port 1813 for accounting
  E. TCP port 1813 for accounting
  F. UDP port 1644 for accounting
  B. UDP port 1812 for authentication
  D. UDP port 1813 for accounting

• Question 894:

  Yesterday one of your associates made some change to the syslog configuration on the router R69. Today, while working on the router you received this syslog message:

  000019: %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36)

  Based on this output, which of the following commands did the associate execute?

  A. service sequence-numbers
  B. service timestamps log
  C. service timestamps log datetime msec
  D. logging console 4
  A. service sequence-numbers

  ---

  The associate must have executed the service sequence-numbers command during his changes. This command instructs the syslog system to add a sequence number to each message, which can help to organize a timeline when messages are sent to a syslog server from various sources.

  The associate could not have executed the service timestamps log command. This command enables time stamps on log messages, showing the time since the system was rebooted. If this had been done, a time stamp similar to the following would have been added to the message:

  *Mar 1 18:46:11: %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36)

  The associate could not have executed the service timestamps log datetime msec command. This command enables time stamps on log messages, showing the time since the system was rebooted in milliseconds. If this had been done, a time stamp similar to the following would have been added to the message:

  *Mar 1 18:46:11:058 %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36)

  The associate could not have executed the logging console 4 command. This command instructs the syslog system to only display messages of levels 4, 3, 2 and 1 in severity. Since the message displayed is a level 5 message, this command could not have been executed.

  Objective:

  Infrastructure Services

  Sub-Objective:

  Configure and verify logging

  References:

  Cisco > Catalyst 4500 Series Switch Software Configuration Guide, IOS XE 3.7.0E and IOS 15.2(3) > Configuring System Message Logging > System Log Message Format

• Question 895:

  Refer to the exhibit.

  

  An engineer must configure the hub router to add new offices in the same infrastructure without performing any further configurations at the hub router. Which tunnel mode configuration on the hub router meets this requirement?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 896:

  Refer to the exhibit.

  

  An administrator can log in to the device using Telnet but the attempts to log in to the same device using SSH with the same credentials fail. Which action resolves this issue?

  A. Configure the VTY lines with login local.
  B. Configure transport input all on the VTY lines to allow SSH.
  C. Configure SSH service on the router.
  D. Configure to use the Telnet user database for SSH as well.
  A. Configure the VTY lines with login local.

• Question 897:

  Refer to the exhibit. PC-2 failed to establish a Telnet connection to the terminal server. Which configuration resolves the issue?

  

  A. Gateway-Router(config)#ipv6 access-list Default_Access Gateway-Router(config-ipv6-acl)#sequence 15 permit tcp host 2018:DB1:A:B::2 host 2018:DB1:A:C::1 eq telnet
  B. Gateway-Router(config)#ipv6 access-list Default_Access Gateway-Router(config-ipv6-acl)#permit tcp host 2018:D81:A:B::2 host 2018:DB1:A:C::1 eq telnet
  C. Gateway-Router(config)#ipv6 access-list Default_Access Gateway-Router(config-ipv6-acl)#no sequence 20 Gateway-Router(config-ipv6-acl)#sequence 5 permit tcp host 2018:DB1:A:B::2 host 2018:DB1:A:C::1 eq telnet
  D. Gateway-Router(config)#ipv6 access-list Default_Access Gateway-Router(config-ipv6-acl)#sequence 25 permit tcp host 2018:DB1:A:B::2 host 2018:DB1:A:C::1 eq telnet
  A. Gateway-Router(config)#ipv6 access-list Default_Access Gateway-Router(config-ipv6-acl)#sequence 15 permit tcp host 2018:DB1:A:B::2 host 2018:DB1:A:C::1 eq telnet

• Question 898:

  An administrator is setting up a DMVPN tunnel between their offices and he is getting below output when he is running the command "show crypto isakmp sa":

  

  What command will you run to identify the issue?

  A. Debug ip icmp
  B. Debug crypto isakmp
  C. Debug crypto ipsec sa
  D. Debug ssh
  B. Debug crypto isakmp

• Question 899:

  Which command can you use to display the topological database maintained by an OSPF router?

  A. show ip ospf topology
  B. show ip ospf database
  C. show ip ospf [process-id]
  D. show ip ospf border-routers
  B. show ip ospf database

  ---

  The correct answer is show ip ospf database. Partial output is shown below:

  

  Issuing the show ip ospf database command will show you a summary of the database; however, to obtain details you must use a keyword with the command, such as router, network, summary, or external.

  The following commands are available to verify OSPF configurations:

  show ip route - displays known routes and from which protocol the routes were discovered for all routing protocols.

  show ip ospf - displays the number of times the SPF algorithm has run and the default Link State Update (LSU) interval.

  show ip ospf database - displays the router ID, the OSPF process ID, and the contents of the topological database.

  There is no show ip ospf topology command.

  The show ip ospf [process-id] command can be used to view the number of times the SPF algorithm has been executed, but not to view the database.

  The show ip ospf border-routers command display the ABRs and the routes to them, but not the contents of the database.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify OSPF path preference

  References:

  Cisco IOS Master Command List, Release 12.4T > sa ipsec through show ip route dhcp > show ip ospf database

• Question 900:

  Examine the following output.

  

  What possible reason(s) can cause the state of the first entry in the adjacency table? (Choose all that apply.)

  A. the interface is a multipoint interface
  B. the clear ip arp command was executed
  C. the Layer 3 information is unknown
  D. the clear adjacency command was executed
  B. the clear ip arp command was executed
  D. the clear adjacency command was executed

  ---

  If either the clear ip arp or the clear adjacency commands were issued, the entry would temporarily be listed as incomplete in the adjacency table. The adjacency table is used by Cisco Express Forwarding (CEF) to maintain Layer 2 information about the next hop to remote networks. In CEF, an adjacency refers to a control structure that holds Layer 2 information for an IP address on a particular interface. When that information is not available the entry will be listed as incomplete, as shown in the example.

  Layer 2 information normally comes from the ARP process. Therefore, if the ARP table is cleared with the clear ip arp command, the Layer 2 information will be temporarily unavailable until the ARP process re-learns it the next time a frame must be sent to that hop. Moreover, if the adjacency table is emptied with the clear adjacency command, the entry must be created again. This will also result in the entry being marked incomplete for a short period of time until the ARP table can be consulted and the Layer

  2 information re- added.

  The interface in the scenario is not a multipoint interface. A multipoint interface would include entries for multiple next hops, since a multipoint interface connects to multiple Layer 3 destinations. An example of this is shown below in sample output from a Frame Relay interface:

  

  The layer 3 information of the next hop is present in the entry in the scenario example. It is 10.10.10.2.

  Objective:

  Network Principles

  Sub-Objective:

  Identify Cisco Express Forwarding concepts

  References:

  Home > Support > Technology support > IP > IP switching > Troubleshoot and alerts > Troubleshooting Technotes > Troubleshooting Incomplete Adjacencies with CEF