Cisco 300-410 Online Practice Questions and Exam Preparation

Cisco 300-410 Online Questions & Answers

• Question 931:

  DRAG DROP

  Drag and drop the LDP features from the left onto the descriptions on the right

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Implicit null Label : LSR receives an MPLS header with the label set to 3 Ref :https://www.ciscopress.com/articles/article.asp?p=680824andseqNum=2 Explicit Null Label : packet is encapsulated in MPLS with the option of copying the IP precedence to EXP bit

  [Ref: https://www.ciscopress.com/articles/article.asp?p=680824andseqNum=2 ]

  Inbound Label Binding Filtering : Controls the amount of memory used to store Label Distribution Protocol (LDP) label bindings advertised by other devices.

  [Ref: : https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_ldp/configuration/15-sy/mp-ldp-15-sy-book/mp-ldp-inbound-filtr.html ]

  Entropy label : provides ways of improving load balancing by eliminating the need for DPI at transit Label Switching Routers (LSRs).

  [ Ref: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_ldp/configuration/xe-16-8/mp-ldp-xe-16-8-book/mp-ldp-entropy.html ]

• Question 932:

  What is an advantage of using BFD?

  A. It detects local link failure at layer 1 and updates routing table.
  B. It detects local link failure at layer 2 and updates routing protocols.
  C. It has sub-second failure detection for layer 1 and layer 3 problems.
  D. It has sub-second failure detection for layer 1 and layer 2 problems.
  D. It has sub-second failure detection for layer 1 and layer 2 problems.

  ---

• Question 933:

  Refer to the exhibit.

  

  An engineer is troubleshooting a TACACS problem.

  Which action resolves the issue?

  A. Configure a matching TACACS server IP.
  B. Configure a matching preshared key.
  C. Generate authentication from a relative source interface.
  D. Apply a configured AAA profile to the VTY.
  B. Configure a matching preshared key.

  ---

  https://community.cisco.com/t5/network-access-control/issues-with-tacacs-authentication/td-p/3412001

  The last line shows us the reason, which is "Invalid AUTHEN packet (check keys)" so the most likely cause of this problem is key mismatch.

• Question 934:

  You are configuring Netflow on various network elements in order to gain visibility into the traffic types used. How many export destinations can this Network data be sent to?

  A. Up to 2
  B. Up to 4
  C. Up to 8
  D. There is no limitation on the number of flow data export destinations.
  A. Up to 2

• Question 935:

  Refer to the exhibit.

  

  A customer reports that networks in the 10.0.1.0/24 space do not appear in the RIP database. What action resolves the issue?

  A. Remove summarization of 10.0.0.078.
  B. Permit 10.0.1.0/24 address in the ACL.
  C. Remove ACL on R1 blocking 10.0.1.0/24 network.
  D. Configure 10.0.1.0/24 network under RIP.
  A. Remove summarization of 10.0.0.078.

• Question 936:

  DRAG DROP

  Drag and drop the packet types from the left onto the correct descriptions on the right.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Unlike legacy network technologies such as ISDN, Frame Relay, and ATM that defined separate data and control channels, IP carries all packets within a single pipe. Thus, IP network devices such as routers and switches must be able to distinguish between data plane, control plane, and management plane packets to treat each packet appropriately. From an IP traffic plane perspective, packets may be divided into four distinct, logical groups:

  1. Data plane packets -End-station, user-generated packets that are always forwarded by network devices to other end-station devices. From the perspective of the network device, data plane packets always have a transit destination IP address and can be handled by normal, destination IP address- based forwarding processes.

  2. Control plane packets -Network device generated or received packets that are used for the creation and operation of the network itself. From the perspective of the network device, control plane packets always have a receive destination IP address and are handled by the CPU in the network device route processor. Examples include protocols such as ARP, BGP, OSPF, and other protocols that glue the network together.

  3. Management plane packets -Network device generated or received packets, or management station generated or received packets that are used to manage the network. From the perspective of the network device, management plane packets always have a receive destination IP address and are handled by the CPU in the network device route processor. Examples include protocols such as Telnet, Secure Shell (SSH), TFTP, SNMP, FTP, NTP, and other protocols used to manage the device and/or network.

  4. Services plane packets -A special case of data plane packets, services plane packets are also user- generated packets that are also forwarded by network devices to other end-station devices, but that require high-touch handling by the network device (above and beyond normal, destination IP address-based forwarding) to forward the packet.

  Examples of high-touch handling include such functions as GRE encapsulation, QoS, MPLS VPNs, and SSL/IPsec encryption/decryption, etc. From the perspective of the network device, services plane packets may have a transit destination IP address, or may have a receive destination IP address (for example, in the case of a VPN tunnel endpoint).

  Reference: https://tools.cisco.com/security/center/resources/copp_best_practices

• Question 937:

  You have configured router R1 with multiple VRF's in order to support multiple customer VPN networks. If you wanted to see the best path for the 10.1.1.0.24 route in VRF Blue, what command would you use?

  A. show ip route vrf Blue 10.1.1.0
  B. show ip route 10.1.1.0 vrf Blue
  C. show route all 10.1.1.0
  D. show ip route all 10.1.1.0
  A. show ip route vrf Blue 10.1.1.0

• Question 938:

  Which IP precedence value does BFD use to prioritize traffic within an infrastructure device?

  A. 4
  B. 5
  C. 6
  D. 7
  D. 7

• Question 939:

  What is the downstream unsolicited distribution method in MPLS?

  A. It advertises labels to peers only when the peer requests.
  B. It sends a unicast hello message to a specific LSR.
  C. It sends a unicast hello message to a specific LER.
  D. It advertises labels to peers without peer request.
  D. It advertises labels to peers without peer request.

  ---

  Unsolicited Downstream :

  The MPLS architecture also allows an LSR to distribute bindings to LSRs that have not explicitly requested them. This is known as "unsolicited downstream" label distribution. This method is used in LDP and BGP-LU( RFC 3107)

• Question 940:

  Refer to the exhibit.

  

  When an FTP client attempts to use passive FTP to connect to the FTP server, the file transfers fail Which action resolves the issue?

  A. Configure active FTP traffic.
  B. Modify FTP-SERVER access list to remove established at the end.
  C. Modify traffic filter FTP-SERVER in to the outbound direction.
  D. Configure to permit TCP ports higher than 1023.
  D. Configure to permit TCP ports higher than 1023.

  ---

  https://community.cisco.com/t5/switching/ftp-and-access-lists/td-p/1525257