In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.)

by the recovery mechanism to recover the binding table in the event of a device reboot

by various IPv6 guard features to validate the data link layer address

by IPv6 routing protocols to securely build neighborships without the need of authentication

by the recovery mechanism to recover the binding table in the event of a device reboot

by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways

by various IPv6 guard features to validate the data link layer address

by storing hashed keys for IPsec tunnels for the built-in IPsec features

Refer to the exhibit. A network administrator configured an IPv6 access list to allow TCP return traffic only, but it is not working as expected. Which changes resolve this issue?

ipv6 access-list inbound permit tcp any any established deny ipv6 any any log !i nterface gi0/0 ipv6 traffic-filter inbound in

ipv6 access-list inbound permit tcp any any syn deny ipv6 any any log !i nterface gi0/0 ipv6 traffic-filter inbound out

ipv6 access-list inbound permit tcp any any syn deny ipv6 any any log !i nterface gi0/0 ipv6 traffic-filter inbound in

ipv6 access-list inbound permit tcp any any established deny ipv6 any any log !i nterface gi0/0 ipv6 traffic-filter inbound in

ipv6 access-list inbound permit tcp any any established deny ipv6 any any log !i nterface gi0/0 ipv6 traffic-filter inbound out

Refer to the exhibit. A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source The configuration did not work as desired Which service must be enabled to resolve the issue?

Enter the service timestamps log datetime synchronize global command.

Enter the service timestamps log datetime localtime global command.

Enter the service timestamps log datetime synchronize global command.

Enter the service timestamps log datetime console global command.

Enter the service timestamps log datetime clock-period global command

Refer to the exhibit. The engineer configured and connected Router2 to Router1. The link came up but could not establish a Telnet connection to Router1 IPv6 address of 2001:DB8::1. Which configuration allows Router2 to establish a Telnet connection to Router1?

IPv6 address on GigabitEthernet0/0

permit ICMPv6 on access list INGRESS for Router2 to obtain IPv6 address

permit ip any any on access list EGRESS2 on Router1

IPv6 address on GigabitEthernet0/0

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

Packets are forwarded to the specific next hop.

Packets are not forwarded to the specific next hop.

Packets are forwarded based on the routing table.

Packets are forwarded based on a static route.

Packets are forwarded to the specific next hop.

Refer to the exhibit. R2 has two paths to reach 192.168.13.0/24. but traffic is sent only through R3.Which action allows traffic to use both paths?

Configure the variance 4 command under the EIGRP process on R2.

Configure the bandwidth 2000 command under interface FastEthernet0/0 on R2.

Configure the variance 4 command under the EIGRP process on R2.

Configure the delay 1 command under interface FastEthernet0/0 on R2.

Configure the variance 2 command under the EIGRP process on R2

Refer to the exhibit. A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

Refer to the exhibit. R1 and R2 cannot establish an EIGRP adjacency. Which action establishes EIGRP adjacency?

Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

Remove the current autonomous system number on one of the routers and change to a different value.

Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.

When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction

Refer to Exhibit. The network administrator configured the branch router for IPv6 on the E0/0 interface. The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on the branch router to bring the IPv6 neighbors up?

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

Disable IPv6 on the E0/0 interface using the no ipv6 enable command

Enable the IPv4 address family under the E0/0 interface by using the address-family ipv4 unicast command

Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E0/0 interface

An engineer is troubleshooting on the console session of a router and turns on multiple debug commands. The console screen is filled with scrolling debug messages that none of the commands can be verified if entered correctly or display any output. Which action allows the engineer to see entered console commands while still continuing the analysis of the debug messages?

Configure the logging synchronous command

Configure the no logging console debugging command globally

Configure the logging synchronous level all command

Configure the term no mon command globally

An engineer must configure a Cisco router to initiate secure connections from the router to other devices in the network but kept failing. Which two actions resolve the issue? (Choose two.)

Configure a crypto key to be generated

Configure a source port for the SSH connection to initiate

Configure a TACACS+ server and enable it

Configure transport input ssh command on the console

Configure a crypto key to be generated

Exhibit: Bangkok is using ECMP to reach to the 192.168.5.0/24 network. The administrator must configure Bangkok in such a way that Telnet traffic from 192.168.3.0/24 and192.168.4.0/24 networks uses the HongKong router as the preferred router.Which set of configurations accomplishes this task?

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.18.1.2 !i nterface Ethernet0/3 ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.18.1.2 interface Ethernet0/3 ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.18.1.2 interface Ethernet0/1 ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.18.1.2 !i nterface Ethernet0/3 ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.18.1.2 !i nterface Ethernet0/1 ip policy route-map PBR1

Exhibit: Which action resolves the authentication problem?

Configure the same password between the TACACS+ server and router.

Configure the user name on the TACACS+ server

Configure the UDP port 1812 to be allowed on the TACACS+ server

Configure the TCP port 49 to be reachable by the router

Configure the same password between the TACACS+ server and router.

Refer to the exhibit. The administrator successfully logs into R1 but cannot access privileged mode commands. What should be configured to resolve the issue?

enable secret or enable password commands to enter into privileged mode

aaa authorization reverse-access

secret cisco123! at the end of the username command instead of password cisco123!

matching password on vty lines as cisco123!

enable secret or enable password commands to enter into privileged mode

Refer to exhibit. Routing protocols are mutually redistributed on R3 and R1. Users report intermittent connectivity to services hosted on the 10.1.1.0/24 prefix. Significant routing update changes are noticed on R3 when the show ip route profile command is run. How must the services be stabilized?

The routing loop must be fixed by reducing the admin distance of iBGP from 200 to 100 on R3

The issue with using BGP must be resolved by using another protocol and redistributing it into EIGRP on R3

The routing loop must be fixed by reducing the admin distance of iBGP from 200 to 100 on R3

The routing loop must be fixed by reducing the admin distance of OSPF from 110 to 80 on R3

The issue with using iBGP must be fixed by running eBGP between R3 and R4

Refer to Exhibit. A network administrator added one router in the Cisco DNA Center and checked its discovery and health from the Network Health Dashboard. The network administrator observed that the router is still showing up as unmonitored. What must be configured on the router to mount it in the Cisco DNA Center?

Configure router with the telemetry data

Configure router with NetFlow data

Configure router with the telemetry data

Configure router with routing to reach Cisco DNA Center

Configure router with SNMPv2c or SNMPv3 traps

Exhibit: NTP is configured across the network infrastructure and Cisco DNA Center. An NTP issue was reported on the Cisco DNA Center at 17:15. Which action resolves the issue?

Check and configure NTP on the WLC and synchronize with Cisco DNA Center

Check and resolve reachability between the WLC and the NTP server

Reset the NTP server to resolve any synchronization issues tor all devices

Check and resolve reachability between Cisco DNA Center and the NTP server

Check and configure NTP on the WLC and synchronize with Cisco DNA Center

Refer to Exhibit. A network administrator enables DHCP snooping on the Cisco Catalyst 3750-X switch and configures the uplink port (Port-channel2) as a trusted port. Clients are not receiving an IP address, but when DHCP snooping is disabled, clients start receiving IP addresses. Which global command resolves the issue?

No ip dhcp snooping information option

ip dhcp relay information trust portchannel2

Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

VACL blocking broadcast frames from nonauthorized hosts

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

PVLANs with community ports associated to route advertisements and isolated ports for nodes

IPv4 ACL blocking route advertisements from nonauthorized hosts

Refer to Exhibit: AS 111 wanted to use AS 200 as the preferred path for 172.20.5.0/24 and AS 100 as the backup. After the configuration, AS 100 is not used for any other routes. Which configuration resolves the issue?

route-mmap SETLP permit 10 match ip address prefix-list PLIST1 set local-preference 99 route-map SETLP permit 20

route-map SETLP permit 10 match ip address prefix-list PLIST1 set local-preference 110 route-map SETLP permit 20

router bgp 111 no neighbor 192.168.10.1 route-map SETLP in neighbor 192.168.10.1 route-map SETLP out

router bap 111 no neighbor 192.168.10.1 route-map SETLP in neighbor 192.168.20.2 route-map SE TLP in

Refer to the exhibit. The Math and Science departments connect through the corporate. IT router but users in the Math department must not be able to reach the Science department and vice versa Which configuration accomplishes this task?

vrf definition Scienceaddress-family ipv4!interface E 0/2vrf forwarding Scienceip address 192.168.1.1 255.255.255.0no shut!interface E 0/3vrf forwarding Scienceip address 192.168.2.1

vrf definition Science!interface E 0/2ip address 192.168.1.1 255.255.255.0no shut!interface E 0/3ip address 192.168.2.1 255.255.255.0no shut

vrf definition Scienceaddress-family ipv4!nterface E 0/2ip address 192.168.1.1 255.255.255.0vrf forwarding Scienceno shut!interface E 0/3ip address 192.168.2.1 255.255.255.0vrf forwarding Scienceno shut

vrf definition Scienceaddress-family ipv4!interface E 0/2ip address 192.168.1.1 255.255.255.0no shut!interface E 0/3ip address 192.168.2.1 255.255.255.0no shut

vrf definition Scienceaddress-family ipv4!interface E 0/2vrf forwarding Scienceip address 192.168.1.1 255.255.255.0no shut!interface E 0/3vrf forwarding Scienceip address 192.168.2.1

An engineer configured Reverse Path Forwarding on an interface and noticed that the routes are dropped when a route lookup fails on that interface for a prefix that is available in the routing table Which interface configuration resolves the issue?

ip verify unicast source reachable-via any

ip verify unicast source reachable-via rx

ip verify unicast source reachable-via any

ip verify unicast source reachable-via allow-default

ip verify unicast source reachable-via 12-src

Refer to the exhibit. The neighbor relationship is not coming up Which two configurations bring the adjacency up?(Choose two)

LA interface E 0/0 ip ospf message-digest-key 1 md5 Cisco123

LA router ospf 1 area 0 authentication message-digest

NY router ospf 1 area 0 authentication message-digest

LA interface E 0/0 ip ospf message-digest-key 1 md5 Cisco123

NY interface E 0/0 no ip ospf message-digest-key 1 md5 Cisco123 ip ospf authentication-key Cisco123

LA interface E 0/0 ip ospf authentication-key Cisco123

LA router ospf 1 area 0 authentication message-digest

Refer to the exhibit. A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands Which action resolves the issue?

Configure full access for the username from TACACS+ server

Configure TACACS+ synchronization with the Active Directory admin group

Configure the username from a local database

Configure full access for the username from TACACS+ server

Configure an authorized IP address for this user to access this router

Refer to the exhibit. When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic to pass through the interface Which command must be configured to resolve the issue?

ipv6 traffic-filter INTERNET in

Refer to the exhibit. The network administrator configured redistribution on an ASBR to reach to all WAN networks but failed Which action resolves the issue?

The route map must have the keyword prefix-list to evaluate the prefix list entries

The OSPF process must have a metric when redistributing prefixes from EIGRP.

The route map EIGRP->OSPF must have the 10.0.106.0/24 entry to exist in one of the three prefix lists to pass

EIGRP must redistribute the 10.0.106.0/24 route instead of using the network statement

How does an MPLS Layer 3 VPN function?

multiple customer sites interconnect through a service provider network using customer edge to provider edge connectivity

set of sites use multiprotocol BGP at the customer site for aggregation

multiple customer sites interconnect through service provider network to create secure tunnels between customer edge devices

set of sites interconnect privately over the Internet for security

multiple customer sites interconnect through a service provider network using customer edge to provider edge connectivity

Refer to the exhibit. Which action resolves the failed authentication attempt to the router?

Configure aaa authorization console global command

Configure aaa authorization login command on line vty 0 4

Configure aaa authorization login command on line console 0

Configure aaa authorization console global command

Configure aaa authorization console command on line vty 0 4

Refer to the exhibit. Troubleshoot and ensure that branch B only ever uses the MPLS B network to reach HQ. Which action achieves this requirement?

Introduce an AS path filter on branch A routers so that only local prefixes are advertised into BGP

increase the local preference for all HQ prefixes received at branch B from the MPLS B network to be higher than the local preferences used on the MPLS A network

Introduce AS path prepending on the branch A MPLS B network connection so that any HQ advertisements from branch A toward the MPLS B network are prepended three times

Modify the weight of all HQ prefixes received at branch B from the MPLS B network to be higher than the weights used on the MPLS A network

Refer to the exhibit. The OSPF routing protocol is redistributed into the BGP routing protocol, but not all the OSPF routes are distributed into BGP Which action resolves the issue?

Include the word internal external in the redistribute command

Include the word external in the redistribute command

Use a route-map command to redistribute OSPF external routes defined in an access list

Include the word internal external in the redistribute command

Use a route-map command to redistribute OSPF external routes defined in a prefix list.

What statement about route distinguishes in an MPLS network is true?

Route distinguishes make a unique VPNv4 address across the MPLS network.

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishes are used for label bindings

Route distinguishes define which prefixes are imported and exported on the edge router

Cisco 300-410 Practice Test 5 - Free Online Exam Prep & Questions

What are two MPLS label characteristics? (Choose two.)

A.

The label edge router swaps labels on the received packets.

B.

Labels are imposed in packets after the Layer 3 header.

C.

LDP uses TCP for reliable delivery of information.

D.

An MPLS label is a short identifier that identifies a forwarding equivalence class.

E.

A maximum of two labels can be imposed on an MPLS packet.

Cisco 300-410 Practice Test 5

Question

Cisco 300-410 Practice Tests

Practice Tests