Refer to the exhibit. A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?

Set a tag in the route map when redistributing EIGRP into OSPF on R1, and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

Set a tag in the route map when redistributing EIGRP into OSPF on R1, and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

Refer to the exhibit. A network administrator is discovering a Cisco Catalyst 9300 and a Cisco WLC 3504 in Cisco DNA Center. The Catalyst 9300 is added successfully However the WLC is showing [ error "uncontactable" when the administrator tries to add it in Cisco DNA Center. Which action discovers WLC in Cisco DNA Center successfully?

Copy the .pern file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

Copy the .cert file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

Delete the WLC 3504 from Cisco DNA Center and add it to Cisco DNA Center again.

Add the WLC 3504 under the hierarchy of the Catalyst 9300 connected devices.

Copy the .pern file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

Refer to the exhibit. A user has set up an IP SLA probe to test if a non-SLA host web server on IP address 10.1.1.1 accepts HTTP sessions prior to deployment. The probe is failing. Which action should the network administrator recommend for the probe to succeed?

Add the control disable option to the tcp connect.

Re-issue the ip sla schedule command.

Add icmp-echo command for the host.

Add the control disable option to the tcp connect.

Modify the ip sla schedule frequency to forever.

Refer to the exhibit. An IPv6 network was newly deployed in the environment and the help desk reports that R3 cannot SSH to the R2s Loopback interface. Which action resolves the issue?

Modify line 30 of the access list to permit instead of deny.

Modify line 10 of the access list to permit instead of deny.

Remove line 60 from the access list.

Modify line 30 of the access list to permit instead of deny.

Remove line 70 from the access list.

An engineer configured SNMP notifications sent to the management server using authentication and encrypting data with DES. An error in the response PDU is received as "UNKNOWNUSERNAME.WRONGDIGEST". Which action resolves the issue?

Configure correct authentication and privacy passwords using SNMPv3 authPriv.

Configure the correct authentication password using SNMPv3 authPriv .

Configure the correct authentication password using SNMPv3 authNoPriv.

Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.

Configure correct authentication and privacy passwords using SNMPv3 authPriv.

Refer to the exhibits. When DMVPN is configured, which configuration allows spoke-to-spoke communication using loopback as a tunnel source?

Configure crypto isakmp key cisco address 0.0.0.0 on the spokes.

Configure crypto isakmp key cisco address 0.0.0.0 on the hub.

Configure crypto isakmp key Cisco address 200.1.0.0 255.255.0.0 on the hub.

Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes.

Configure crypto isakmp key cisco address 0.0.0.0 on the spokes.

What are two functions of IPv6 Source Guard? (Choose two.)

It uses the populated binding table for allowing legitimate traffic.

It denies traffic from unknown sources or unallocated addresses.

It uses the populated binding table for allowing legitimate traffic.

It works independent from IPv6 neighbor discovery.

It denies traffic from unknown sources or unallocated addresses.

It denies traffic by inspecting neighbor discovery packets for specific pattern.

It blocks certain traffic by inspecting DHCP packets for specific sources.

An engineer configured access list NON-CISCO in a policy to influence routes What are the two effects of this route map configuration? (Choose two.)

Packets are evaluated by sequence 10.

Packets are forwarded to the default gateway.

Packets are not evaluated by sequence 10.

Packets are evaluated by sequence 10.

Packets are forwarded to the default gateway.

Packets are forwarded using normal route lookup.

Packets are dropped by the access list.

Refer to the exhibit. Which two actions restrict access to router R1 by SSH? (Choose two.)

Configure transport input ssh on line vty and remove sequence 30 from access list 100.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.

Configure transport input ssh on line vty and remove sequence 30 from access list 100.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.

Remove class-map ANY from service-policy CoPP

Configure transport output ssh on line vty and remove sequence 10 from access list 199.

Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199

A network administrator is tasked to permit http and https traffic only toward the internet from theUser1 laptop to adhere to company's security policy. The administrator can still ping towww.cisco.com Which interface should the access list 101 be applied to resolve this issue?

Interface G0/0 in the incoming direction.

Interface G0/48 in the incoming direction

Interface G0/0 in the outgoing direction.

Interface S1/0 in the outgoing direction.

Interface G0/0 in the incoming direction.

Refer to Exhibit. Traffic from the branch network should route through HQ R1 unless the path is unavailable. An engineer tests this functionality by shutting down interface on the BRANCH router toward HQ_R1 router but 192.168.20.0/24 is no longer reachable from the branch router. Which set of configurations resolves the issue?

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.2

HQ_R1(config)# ip sla responderHQ_R1(config)# ip sla responder icmp-echo 172.16.35.2

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.1

HQ_R2(config)# ip sla responderHQ_R2(config)# ip sla responder icmp-echo 172.16.35.5

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.2

Refer to Exhibit. Which two configurations allow clients to get dynamic ip addresses assigned?

Configure access-list 100 permit udp any any eq 68 as the first line

Configure access-list 100 permit udp any any eq 67 as the first line

Configure access-list 100 permit udp any any eq 61 as the first line

Configure access-list 100 permit udp any any eq 86 as the first line

Configure access-list 100 permit udp any any eq 68 as the first line

Configure access-list 100 permit udp any any eq 69 as the first line

Configure access-list 100 permit udp any any eq 67 as the first line

Which Ipv6 first-hop security feature helps to minimize denial of service attacks?

IPv6 Router Advertisement Guard

Refer to Exhibit.A network administrator has successfully configured DMVPN topology between a hub and two spoke routers. Which two configuration commands should establish direct communications between spoke 1 and spoke 2 without going through the hub? (Choose two).

At the hub router, configure ip nhrp redirect the command

At the spoke routers, configure the ip nhrp shortcut command.

At the hub router, configure the ip nhrp shortcut command.

At the spoke routers, configure the ip nhrp spoke-tunnel command.

At the hub router, configure ip nhrp redirect the command

At the spoke routers, configure the ip nhrp shortcut command.

At the hub router, configure tne Ip nhrp spoke-tunnel command

Refer to the exhibit. Which action restores the routes from neighbors while still filtering 1.1.1.0/24?

Modify the route map to permit the access list instead of deny it

Add a second line in the access list to permit any.

Modify the route map to permit the access list instead of deny it

Modify the access list to deny instead of permit it.

Add a second sequence in the route map permit 20

Which two components are needed for a service provider to utilize the LVPN MPLS application?(Choose two.)

The PE routers must be configured for MP-iBGP with other PE routers

The P and PE routers must be configured with LDP or RSVP

The P routers must be configured for MP-iBGP toward the PE routers

The P routers must be configured with RSVP.

The PE routers must be configured for MP-iBGP with other PE routers

The PE routers must be configured for MP-eBGP to connect to CEs

The P and PE routers must be configured with LDP or RSVP

What are two characteristics of VRF instance? (Choose two.)

An interface must be associated to one VRF.

Each VRF has a different set of routing and CEF tables

All VRFs share customers routing and CEF tables .

An interface must be associated to one VRF.

Each VRF has a different set of routing and CEF tables

It is defined by the VPN membership of a customer site attached to a P device.

A customer site can be associated to different VRFs

Refer to the exhibit. A network administrator redistributed the default static route into OSPF toward all internal routers to reach to Internet. Which set of commands restores reachability to the Internet by internal routers?

router ospf 1 default-information originate

router ospf 1 network 0.0.0.0 0.0.0.0 area 0

router ospf 1 redistribute connected 0.0.0.0

router ospf 1 redistribute static subnets

Refer to the exhibit. The network administrator configured the branch router for IPv6 on the E 0/0 interface The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on the branch router to bring the IPv6 neighbors up?

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

Enable the IPv4 address family under the E 0/0 interface by using the address-family Ipv4 unicast command

Disable IPv6 on the E 0/0 interface using the no ipv6 enable command

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E 0/0 interface.

Refer to the exhibit. The DHCP client is unable to receive an IP address from the DHCP server RouterB is configured as follows:Interface fastethernet 0/0 description Client DHCP ID 394482431 Ip address 172 31 11 255 255.255 0 !i p route 172.16.1.0 255 255 255.0 10.1.1.2 Which command is required on the fastethernet 0/0 interface of RouterB to resolve this issue?

RouterB(config-if)#lp helper-address 172.16.1.2

RouterB(config-if)#lp helper-address 172.31.1.1

RouterBiconfig-ififclp helper-address 255.255 255 255

RouterB(config-if)#lp helper-address 172.16.1.1

RouterB(config-if)#lp helper-address 172.16.1.2

What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)

RD is prepended to the IPv4 route to make it unique.

The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4 prefix.

The VPNv4 address is used to advertise the MPLS VPN label.

RD is prepended to the IPv4 route to make it unique.

MP-BGP is used to allow overlapping IPv4 addresses between customers to advertise through the network.

The IPv4 address is needed to tag the MPLS label.

The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4 prefix.

Refer to the exhibit. The Los Angeles and New York routers are receiving routes from Chicago but not from each other Which configuration fixes the issue?

Interface Tunnel1 no ip split-horizon eigrp 111

Interface Tunnel1Ip next-hop-self elgrp 111

Interface Tunnel1 tunnel mode Ipsec Ipv4

Interface Tunnel1 tunnel protection ipsec profile IPSec-PROFILE

Refer to the exhibit. An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R1 as the primary default gateway When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192.168.20.0/24. Which set of configurations resolves the issue?

BRANCH(config)# Ip sla 1BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1

HQ_R3(config)# ip sla responderHQ_R3(config)# ip sla responder icmp-echo 172.16.35.1

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 192.168.100.2

HQ R3(config)# Ip sla responderHQ R3(config)# Ip sla responder Icmp-echo 172.16.35.5

BRANCH(config)# Ip sla 1BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1

What are two functions of MPLS Layer 3 VPNs? (Choose two.)

BGP is used for signaling customer VPNv4 routes between PE nodes.

Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

LDP and BGP can be used for Pseudowire signaling.

It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.

BGP is used for signaling customer VPNv4 routes between PE nodes.

A packet with node segment ID is forwarded along with shortest path to destination.

Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction

Refer to the exhibit. The administrator configured route advertisement to a remote low resources router to use only the default route to reach any network but failed. Which action resolves this issue?

Remove the line with the sequence number 5 from the prefix list.

Change the direction of the distribute-list command from out to in.

Remove the line with the sequence number 5 from the prefix list.

Remove the prefix keyword from the distribute-list command.

Remove the line with the sequence number 10 from the prefix list.

Refer to the exhibit. The remote server is failing to receive the NetFlow data Which action resolves the issue?

Modify the interlace command to Ip flow monitor FLOW-MONITOR-1 Input.

Modify the flow transport command transport udp 2055 to move under flow monitor profile.

Modify the interlace command to Ip flow monitor FLOW-MONITOR-1 Input.

Modify the udp port under flow exporter profile to Ip transport udp 4739.

Modify the flow record command record v4_r1 to move under flow exporter profile.

A DMVPN single hub topology is using IPsec + mGRE with OSPF. What should be configured on the hub to ensure it will be the designated router?

tunnel interface of the hub with ip nhrp ospf dr

route map to set the metrics of learned routes to 110

Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200). router bgp 64511 network 172.16.20.0 mask 255.255.255.0 network 172.16.21.0 mask 255.255.255.0 network 172.16.22.0 mask 255.255.255.0 network 172.16.23.0 mask 255.255.255.0 aggregate-address 172.16.20.0 255.255.252.0 After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?

router bgp 64511 aggregate-address 172.16.20.0 255.255.252.0 summary-only

router bgp 64511 neighbor 192.168.100.1 summary-only neighbor 192.168.200.2 summary-only

interface E 0/0 ip bgp suppress-map BLOCK_SPECIFIC !i nterface E 0/1 ip bgp suppress-map BLOCK_SPECIFIC !i p prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24 ! route-map BLOCK_SPECIFIC permit 10 match ip address prefix-list PL_BLOCK_SPECIFIC

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22 ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22 ! route-map BLOCK_SPECIFIC permit 10 match ip address prefix-list PL_BLOCK_SPECIFIC ! router bgp 64511 aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

Cisco 300-410 Practice Test 4 - Free Online Exam Prep & Questions

Question 1 / 40

An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted.

Which action resolves the issue?

Configure all devices for SNMPv3 informs with priv.

Configure all devices for SNMPv3 informs with auth.

Configure all devices for SNMPv3 traps with auth.

Configure all devices for SNMPv3 traps with priv.

Comment (0)

Cisco 300-410 Practice Test 4

Question

Cisco 300-410 Practice Tests

Practice Tests