Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 911:

  Which statement about IPv6 ND inspection is true?

  A. It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.
  B. It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.
  C. It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.
  D. It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.
  B. It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

  ---

  IPv6 ND inspection learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables. IPv6 ND inspection analyzes neighbor discovery messages in order to build a trusted binding table database, and IPv6 neighbor discovery messages that do not have valid bindings are dropped. A neighbor discovery message is considered trustworthy if its IPv6-to-MAC mapping is verifiable. This feature mitigates some of the inherent vulnerabilities for the neighbor discovery mechanism, such as attacks on duplicate address detection (DAD), address resolution, device discovery, and the neighbor cache.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-s/ip6f-15-s-book/ip6-snooping.pdf

• Question 912:

  The summary route is not shown in the Router_B routing table after this below configuration on Router_A:

  interface ethernet 0 description location ID:S4318T3E77F02 ip address 192.168.3.1 255.255.255.0 ip summary-address eigrp 1 172.16.80.0 255.255.240.0

  Which Router_A configuration resolves the issue by advertising the summary route to Router_B?

  A. interface loopback 0 ip address 172.18.81.1 255.255.255.0 interface Ethernet 0 ip address 192.168.3.1 255.255.255.0 ip summary-address eigrp 1 172.16.80.0 255.255.240.0
  B. interface loopback 0 ip address 172.16.79.1 255.255.255.0 interface Ethernet 0 ip address 192.168.3.1 255.255.255.0 ip summary-address eigrp 1 172.16.80.0 255.255.240.0
  C. interface loopback 0 ip address 172.16.81.1 255.255.255.0 interface Ethernet 0 ip address 192.168.3.1 255.255.255.0 ip summary-address eigrp 1 172.16.80.0 255.255.240.0
  D. interface loopback 0 ip address 172.16.96.1 255.255.255.0 interface Ethernet 0 ip address 192.168.3.1 255.255.255.0 ip summary-address eigrp 1 172.16.80.0 255.255.240.0
  C. interface loopback 0 ip address 172.16.81.1 255.255.255.0 interface Ethernet 0 ip address 192.168.3.1 255.255.255.0 ip summary-address eigrp 1 172.16.80.0 255.255.240.0

• Question 913:

  DRAG DROP

  Drag and drop the DHCP messages from the left onto the correct uses on the right.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  + server-to-client communication, refusing the request for configuration parameters: DHCPNAK

  + client-to-server communication, indicating that the network address is already in use: DHCPDECLINE

  + server-to-client communication with configuration parameters, including committed network address: DHCPACK

  + client-to-server communication, asking for only local configuration parameters that the client has already externally configured as an address: DHCPINFORM

  DHCPINFORM: If a client has obtained a network address through some other means or has a manually configured IP address, a client workstation may use a DHCPINFORM request message to obtain other local configuration parameters, such as the domain name and Domain Name Servers (DNSs). DHCP servers receiving a DHCPINFORM message construct a DHCPACK message with any local configuration parameters appropriate for the client without allocating a new IP address. This DHCPACK will be sent unicast to the client.

  DHCPNAK: If the selected server is unable to satisfy the DHCPREQUEST message, the DHCP server will respond with a DHCPNAK message. When the client receives a DHCPNAK message, or does not receive a response to a DHCPREQUEST message, the client restarts the configuration process by going into the Requesting state. The client will retransmit the DHCPREQUEST at least four times within 60 seconds before restarting the Initializing state.

  DHCPACK: After the DHCP server receives the DHCPREQUEST, it acknowledges the request with a DHCPACK message, thus completing the initialization process. DHCPDECLINE: The client receives the DHCPACK and will optionally perform a final check on the parameters. The client performs this procedure by sending Address Resolution Protocol (ARP) requests for the IP address provided in the DHCPACK. If the client detects that the address is already in use by receiving a reply to the ARP request, the client will send a DHCPDECLINE message to the server and restart the configuration process by going into the Requesting state.

  Reference https://www.cisco.com/c/en/us/support/docs/ip/dynamic-address-allocation-resolution/27470-100.html

• Question 914:

  Refer to the exhibit.

  

  A router is receiving BGP routing updates from multiple neighbors for routes in AS 690.

  What is the reason that the router still sends traffic that is destined to AS 690 to a neighbor other than 10.222.1.1?

  A. The local preference value in another neighbor statement is higher than 250.
  B. The local preference value should be set to the same value as the weight in the route map.
  C. The route map is applied in the wrong direction.
  D. The weight value in another neighbor statement is higher than 200.
  D. The weight value in another neighbor statement is higher than 200.

  ---

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-3se/3850/irg-xe-3se-3850-book/irg-prefix-filter.html

• Question 915:

  You want to implement AAA on router R1 for a more robust authentication and authorization system. What is typically the first global command used to do this?

  A. aaa new-model
  B. aaa enable
  C. aaa server-group
  D. aaa authentication login
  A. aaa new-model

• Question 916:

  Refer to the exhibit.

  

  Which action ensures that 10.10.10.0/24 reaches 10.10.20.0/24 through the direct link between R1 and R2?

  A. Configure R1 and R2 LAN links as nonpassive.
  B. Configure R1 and R2 links under area 1.
  C. Configure OSPF link cost to 1 between R1 and R2.
  D. Configure OSPF path cost to 3 between R1 and R2.
  B. Configure R1 and R2 links under area 1.

• Question 917:

  Refer to the exhibit.

  

  An engineer configures two ASBRs, 10.4.17.6 and 10.4.15.5, in an OSPF network to redistribute routes from EIGRP. However, both ASBRs show the EIGRP routes as equal costs even though the next-hop router 10.4.17.6 is closer to R1. How should the network traffic to the EIGRP prefixes be sent via 10.4.17.6?

  A. The administrative distance should be raised to 120 from the ASBR 10.4.17.6.
  B. The redistributed prefixes should be advertised as Type 1.
  C. The ASBR 10.4.17.6 should assign a tag to match and assign a lower metric on R1.
  D. The administrative distance should be raised to 120 from the ASBR 10.4.15.5.
  B. The redistributed prefixes should be advertised as Type 1.

• Question 918:

  Refer to the exhibit.

  

  Which two actions restrict access to router R1 by SSH? (Choose two.)

  A. Remove class-map ANY from service-policy CoPP.
  B. Configure transport output ssh on line vty and remove sequence 20 from access list 100.
  C. Configure transport input ssh on line vty and remove sequence 30 from access list 100.
  D. Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199.
  E. Configure transport output ssh on line vty and remove sequence 10 from access list 199.
  A. Remove class-map ANY from service-policy CoPP.
  C. Configure transport input ssh on line vty and remove sequence 30 from access list 100.

  ---

• Question 919:

  Refer to the exhibit.

  

  A network engineer receives a report that Spoke 1 users can perform bank transactions with the server located at the Center site, but Spoke 2 users cannot.

  Which action resolves the issue?

  A. Configure the Spoke 2 users IP on the router B OSPF domain
  B. Configure encapsulation dot1q 78 on the router C interface.
  C. Configure IPv6 on the routers B and C interfaces
  D. Configure OSPFv2 on the routers B and C interfaces
  C. Configure IPv6 on the routers B and C interfaces

• Question 920:

  A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company's security policy. The administrator can still ping to www.cisco.com Which interface should the access list 101 be applied to resolve this issue?

  

  When R2 and R5 are route reflectors (RRs), routes from R4 and R8 are advertised to R5 and R5 advertises to R2. But R2 would drop them as R2 is also a RR. Thereforesome routes are missing on R1 to advertise to eBGP peers.

  Good reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2015/pdf/TECRST-2310.pdf

  Route reflectors (RR) must be fully iBGP meshed so we cannot configure RR on both R1 and R5.

  A. Interface G0/48 in the incoming direction
  B. Interface G0/0 in the outgoing direction.
  C. Interface S1/0 in the outgoing direction.
  D. Interface G0/0 in the incoming direction.
  D. Interface G0/0 in the incoming direction.