What are two characteristics of IPv6 Source Guard? (Choose two.)

requires that validate prefix be enabled

recovers missing binding table entries

requires IPv6 snooping on Layer 2 access or trunk ports

used in service provider deployments to protect DDoS attacks

requires the user to configure a static binding

requires that validate prefix be enabled

recovers missing binding table entries

Refer to the exhibit. R1 is configured with uRPF, and ping to R1 is failing from a source present in the R1 routing table via the GigatxtEthernet 0/0 interface. Which action resolves the issue?

Modify the uRPF mode from strict to loose

Remove the access list from the interface GigabrtEthernet 0/0

Modify the uRPF mode from strict to loose

Enable Cisco Express Forwarding to ensure that uRPF is functioning correctly

Add a floating static route to the source on R1 to the GigabitEthernet 0/1 interface

Which function does LDP provide in an MPLS topology?

It provides hop-by-hop forwarding in an MPLS topology for LSRs.

It enables a MPLS topology to connect multiple VPNs to P routers.

It provides hop-by-hop forwarding in an MPLS topology for LSRs.

It exchanges routes for MPLS VPNs across different VRFs.

It provides a means for LSRs to exchange IP routes.

An engineer is implementing a coordinated change with a server team As part of the change, the engineer must configure interlace GigabitEthernet2 in an existing VRF "RED" then move the interface to an existing VRF "BLUE" when the server team is ready. The engineer configured interface GigabitEthemet2 in VRF "RED" Which configuration completes the change?

interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE ip address 10.0.0.0 255.255.255.254

interface GigabitEthernet2 no ip address vrf forwarding BLUE

interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE ip address 10.0.0.0 255.255.255.254

interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE

interface GigabitEthernet2 no ip address ip address 10.0.0.0 255.255.255.254 vrf forwarding BLUE

Refer to the exhibit. An engineer configured NetFlow on R1, but the NMS server cannot see the flow from R1. Which configuration resolves the issue?

flow exporter FlowAnalyzer1 destination 10.221.10.11

flow monitor Flowmonitor1 destination 10.221.10.11

flow exporter FlowAnalyzer1 destination 10.221.10.11

interface Ethernet0/1 flow-destination 10.221.10.11

interface Ethernet0/0 flow-destination 10.221.10.11

Refer to the exhibit. An engineer configured NetFlow on R1, but the NMS server cannot see the flow from ethernet 0/0 of R1. Which configuration resolves the issue?

interface Ethernet0/0 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output

flow monitor Flowmonitor1 source Ethernet0/0

interface Ethernet0/1 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output

interface Ethernet0/0 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output

flow exporter FlowAnalyzer1 source Ethernet0/0

Refer to the exhibit. An engineer configures DMVPN and receives the hub location prefix of 10.1.1.0724 on R2 and R3 The R3 prefix of 10 1.3.0/24 is not received on R2. and the R2 prefix 10.1,2.0/24 is not received on R3.Which action reserves the issue?

Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the command no ip split-horizon eigrp 10 on the tunnel interface of R1

There is no spoke-to-spoke connection DMVPN configuration should be modified to enable a tunnel connection between R2 and R3 and neighbor relationship confirmed by use of the show ip eigrp neighbor command

Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the no ip split-horizon eigrp 10 command on the Gi0/0 interface of R1.

There is no spoke-to-spoke connection DMVPN configuration should be modified with a manual neighbor relationship configured between R2 and R3 and confirmed bb use of the show ip eigrp neighbor command.

Refer to the exhibit. The ISP router is fully configured for customer A and customer B using the VRFLite feature. What is the minimum configuration required for customer A to communicate between routers A1 and A2?

A1:interface fa0/0description To->ISPip vrf forwarding Aip add 172.31.100.1 255.255.255.0no shutrouter ospf 100 vrf Anet 172.31.100.1 0.0.0.255 area 0A2:interface fa0/0description To->ISPip vrf forwarding Aip add 172.31.200.1 255.255.255.0no shutrouter ospf 100 vrf Anet 172.31.200.1 0.0.0.255 area 0

A1:interface fa0/0description To->ISPip vrf forwarding Aip add 172.31.100.1 255.255.255.0no shut!router ospf 100net 172.31.100.1 0.0.0.255 area 0A2:interface fa0/0description To->ISPip vrf forwarding Aip add 172.31.200.1 255.255.255.0no shut!router ospf 100net 172.31.200.1 0.0.0.255 area 0

A1:interface fa0/0description To->ISPip add 172.31.200.1 255.255.255.0no shut!router ospf 100net 172.31.200.1 0.0.0.255 area 0A2:interface fa0/0description To->ISPip add 172.31.100.1 255.255.255.0no shutrouter ospf 100net 172.31.100.1 0.0.0.255 area 0

A1:interface fa0/0description To->ISPip vrf forwarding Aip add 172.31.100.1 255.255.255.0no shutrouter ospf 100 vrf Anet 172.31.100.1 0.0.0.255 area 0A2:interface fa0/0description To->ISPip vrf forwarding Aip add 172.31.200.1 255.255.255.0no shutrouter ospf 100 vrf Anet 172.31.200.1 0.0.0.255 area 0

A1:interface fa0/0description To->ISPip add 172.31.100.1 255.255.255.0no shutrouter ospf 100net 172.31.100.1 0.0.0.255 area 0A2:interface fa0/0description To->ISPip add 172.31.200.1 255.255.255.0no shutrouter ospf 100net 172.31.200.1 0.0.0.255 area 0

The network administrator configured R1 for Control Plane Policing so that the inbound Telnet traffic is policed to 100 kbps. This policy must not apply to traffic coming in from 10.1.1.1/32 and 172.16.1.1/32. The administrator has configured this: The network administrator is not getting the desired results. Which set of configurations resolves this issue?

no access-list 101access-list 101 deny tcp host 10,1,1.1 any eq 23access-list 101 deny tcp host 172,16.1.1 any eq 23access-list 101 permit ip any any

control-planeno service-policy input PM-CoPP!interface Ethernet 0/0service-policy input PM-CoPP

control-planeno service-policy input PM-CoPPservice-policy input PM-CoPP

no access-list 101access-list 101 deny tcp host 10,1,1.1 any eq 23access-list 101 deny tcp host 172,16.1.1 any eq 23access-list 101 permit ip any any

no access-list 101access-list 101 deny tcp host 10,1.1.1 any eq 23access-list 101 deny tcp host 172.16.1.1 any eq 23access-list 101 permit ip any any!interface E0/0service-policy input PM-CoPP

Refer to the exhibit. An OSPF neighbor relationship between R2 and R3 is showing stuck in EXCHANGE/EXSTART state.The neighbor is established between R1 and R2. The network engineer can ping from R2 to R3 and vice versa, but the neighbor is still down. Which action resolves the issue?

Match MTU on both router interfaces or ignore MTU.

Restore the Layer 2/Layer 3 conectivity issue in the ISP network.

Match MTU on both router interfaces or ignore MTU.

Administrative "shut then no shut" both router interfaces.

Enable OSPF on the interface, which is required.

Refer to the exhibit. An engineer is troubleshooting a failed Telnet session from PC to the DHCP server. Which action resolves the issue?

Remove sequence 10 to add the PC source IP address and add it back as sequence 10.

Remove sequence 30 and add it back to the IPv6 traffic filter as sequence 5.

Remove sequence 20 and add it back to the IPv6 traffic filter as sequence 5.

Remove sequence 10 to add the PC source IP address and add it back as sequence 10.

Remove sequence 20 for sequence 40 in the access list to allow Telnet.

Refer to the exhibit. The administrator noticed that the connection was flapping between the two ISPs instead of switching to ISP2 when the ISP1 failed. Which action resolves the issue?

Modify the threshold to match the administrative distance of the ISP2 route.

Include a valid source-interface keyword in the icmp-echo statement.

Reference the track object 1 on the default route through ISP2 instead of ISP1.

Modify the static routes to refer both to the next hop and the outgoing intertace.

Modify the threshold to match the administrative distance of the ISP2 route.

Refer to the exhibit. After a security audit, the administrator implemented an ACL in the route reflector. The RR became unreachable from any router in the network. Which two actions resolve the issue? (Choose two.)

Permit ICMPv6 neighbor discovery traffic in the ACL.

Enable the ND proxy feature on the default gateway.

Configure a link-local address on the Ethernet0/1 interface.

Permit ICMPv6 neighbor discovery traffic in the ACL.

Change the next hop of the default route to the link-local address of the default gateway.

Refer to the exhibit. Which command must be configured to make VRF CCNP work?

interface Loopback0 ip address 10.1.1.1 255.255.255.0

interface Loopback0 vrf forwarding CCNP

interface Loopback0 ip address 10.1.1.1 255.255.255.0

interface Loopback0 ip address 10.1.1.1 255.255.255.0 vrf forwarding CCNP

interface Loopback0 ip address 10.1.1.1 255.255.255.0 ip vrf forwarding CCNP

What is an advantage of implementing BFD?

BFD provides millisecond failure detection

BFD provides faster updates for any flapping route.

BFD provides millisecond failure detection

BFD is deployed without the need to run any routing protocol

BFD provides better capabilities to maintain the routing table

What is a function of IPv6 Source Guard?

It works with address glean or ND to find existing addresses.

It inspects ND and DHCP packets to build an address binding table.

It denies traffic from known sources and allocated addresses.

It notifies the ND protocol to inform hosts if the traffic is denied by it.

What is the purpose of the DHCPv6 Guard?

It messages between a DHCPv6 server and a DHCPv6 client ( or relay agent).

It shows that clients of a DHCPv5 server are affected.

It block DHCPv6 messages from relay agents to a DHCPv6 server.

It allows DHCPv6 replay and advertisements from (rouge) DHCPv6 servers.

Refer to the exhibit. R5 should not receive any routes originated in the EIGRP domain. Which set of configuration changes removes the EIGRP routes from the R5 routing table to fix the issue?

R4route-map O2R deny 10match tag 111route-map O2R permit 20!router ripredistribute ospf 1 route-map O2R metric 1

R2route-map E20 deny 20R4route-map O2R deny 10match tag 111!router ripredistribute ospf 1 route-map O2R metric 1

R4route-map O2R permit 10match tag 111route-map O2R deny 20!router ripredistribute ospf 1 route-map O2R metric 1

R4route-map O2R deny 10match tag 111router ripredistribute ospf 1 route-map O2R metric 1

Refer to the exhibit. An engineer has configured R1 as EIGRP stub router. After the configuration, router R3 failed to reach to R2 loopback address.Which action advertises R2 loopback back into the R3 routing table?

Use a leak map on R1 that matches the required prefix and apply it with the distribute list command toward R3.

Add a static route for R2 loopback address in R1 and redistribute it to advertise to R3.

Use a leak map on R1 that matches the required prefix and apply it with the distribute list command toward R3.

Use a leak map on R3 that matches the required prefix and apply it with the EIGRP stub feature.

Add a static null route for R2 loopback address in R1 and redistribute it to advertise to R3.

Refer to the exhibit. An engineer configures the router 10.1.100.10 for EIGRP autosummarization so that R1 should receive the summary route of 10.0.0.0/8. However, R1 receives more specific /24 routes.Which action resolves this issue?

Router 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

Router R1 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

Router R1 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are received on R1.

Router 10.1.100.10 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are summarized toward R1.

Router 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

Refer to the exhibit. An engineer is troubleshooting a TACACS problem.Which action resolves the issue?

Configure a matching preshared key.

Configure a matching TACACS server IP.

Configure a matching preshared key.

Generate authentication from a relative source interface.

Apply a configured AAA profile to the VTY.

The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped.access-list 100 permit ip host 172.16.1.99 any! class-map CM-ADMIN match access-group 100! policy-map PM-COPP class CM-ADMIN police 500000 conform-action transmit!i nterface E0/0 service-policy input PM-COPPCoPP failed to capture the desired traffic and the CPU load is getting higher.Which two configurations resolve the issue? (Choose two.)

interface E0/0no service-policy input PM-COPP!control-planeservice-policy input PM-COPP

no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80access-list 100 permit tcp host 172.16.1.99 any eq 443

interface E0/0no service-policy input PM-COPP!control-planeservice-policy input PM-COPP

policy-map PM-COPPclass CM-ADMINno police 500000 conform-action transmitpolice 500 conform-action transmit!control-planeservice-policy input PM-COPP

no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80

no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80access-list 100 permit tcp host 172.16.1.99 any eq 443

policy-map PM-COPPclass CM-ADMINno police 500000 conform-action transmitpolice 500 conform-action transmit

Refer to the exhibit. While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured.Which command resolves this issue?

ipv6 traffic-filter INTERNET in

Refer to the exhibit. A network administrator is troubleshooting IPv6 address assignment for a DHCP client that is not getting an IPv6 address from the server.Which configuration retrieves the client IPv6 address from the DHCP server?

ipv6 address autoconfig command on the interface

ipv6 dhcp server automatic command on DHCP server

ipv6 dhcp relay-agent command on the interface

service dhcp command on DHCP server

Refer to the exhibit. A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using SNMP and TFTP servers.Which configuration prevents changes from unauthorized NMS and TFTP servers?

access-list 20 permit 10.221.10.11access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20snmp-server community Cisc0Us3r RO 20snmp-server community Cisc0wrus3r RW 20snmp-server tftp-server-list 20

access-list 20 permit 10.221.10.11access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20snmp-server community Cisc0wrus3r RO 20snmp-server community Cisc0Us3r RW 20snmp-server tftp-server-list 20

access-list 20 permit 10.221.10.11access-list 20 deny any log

access-list 20 permit 10.221.10.11

Refer to the exhibit. An engineer cannot copy the IOS.bin file from the FTP server to the switch.Which action resolves the issue?

Add the IOS.bin file, which does not exist on FTP server.

Allow file permissions to download the file from the FTP server.

Add the IOS.bin file, which does not exist on FTP server.

Make memory space on the switch flash or USB drive to download the file.

Use the copy flash:/ ftp://cisco@10.0.0.2/IOS.bin command.

What does the MP-BGP OPEN message contain?

the version number and the AS number to which the router belongs

MPLS labels and the IP address of the router that receives the message

the version number and the AS number to which the router belongs

IP routing information and the AS number to which the router belongs

NLRI, path attributes, and IP addresses of the sending and receiving routers

Refer to the exhibit. Although summarization is configured for R1 to receive 10.0.0.0/8. more specific routes are received by R1. How should the 10.0.0.0/8 summary route be received from the neighbor, attached to R1 via Fast Ethernet0/0 interface?

R1 should configure the ip summary-address eigrp <AS number> 10.0.0.0 0.0.0.255 command under the Fast Ethernet 0/0 interface.

R1 should configure the ip summary-address eigrp <AS number> 10.0.0.0.255.0.0.0 command under the Fast Ethernet 0/0 interface.

The summarization condition is not met Router 10 1 100.10 requires a route for 10 0.0.0/8 that points to null 0

The summarization condition is not met. The network 10.1.100.0/24 should be changed to 172.16.0.0/24.

R1 should configure the ip summary-address eigrp <AS number> 10.0.0.0 0.0.0.255 command under the Fast Ethernet 0/0 interface.

Refer to the exhibit. A prefix list is created to filter routes inbound to an EIGRP process except for network 10 prefixes After the prefix list is applied no network 10 prefixes are visible in the routing table from EIGRP.Which configuration resolves the issue?

ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8

ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9.

ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8

ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9 ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

Refer to the exhibit. An engineer must establish a point-to-point GRE VPN between R1 and the remote site. Which configuration accomplishes the task for the remote site?

Interface Tunnel1tunnel source 200.1.1.3tunnel destination 199.1.1.1ip address 192.168.1.3.255.255.255.0

Interface Tunnel1tunnel source 199.1.1.1tunnel destination 200.1.1.3ip address 192.168.1.3 255.255.255.0

Interface Tunnel1tunnel source 200.1.1.3tunnel destination 199.1.1.1ip address 192.168.1.1.255.255.255.0

Interface Tunnel1tunnel source 200.1.1.3tunnel destination 199.1.1.1ip address 192.168.1.3.255.255.255.0

Interface Tunnellunnel source 199.1.1.1tunnel destination 200.1.1.3ip address 192.168.1.1.255.255.255.0

What are the two prerequisites to enable BFD on Cisco routers? (Choose two)

ICMP must be allowed on all participating routers.

Cisco Express Forwarding and IP Routing must be enabled on all participating routers.

A supported IP routing protocol must be configured on the participating routers.

OSPF Demand Circuit must run BFD on all participating routers.

ICMP must be allowed on all participating routers.

UDP port 1985 must be allowed on all participating routers.

Cisco Express Forwarding and IP Routing must be enabled on all participating routers.

Refer to the exhibit. The network engineer configured the summarization of the RIP routes into the OSPF domain on R5 but still sees four different 172.16.0.0/24 networks on R4. Which action resolves the issue?

R5(config)#router ospf 1R5(config-router)#no areaR5(config-router)#summary-address 172.16.0.0 255.255.252.0

R4(config)#router ospf 99R4(config-router)#network 172.16.0.0 0.255.255.255 area 56R4(config-router)#area 56 range 172.16.0.0 255,255.255.0

R4(config)#router ospf 1R4(config-router)#no areaR4(config-router)#summary-address 172.16.0.0 255.255.252.0

R5(config)#router ospf 99R5(config-router)#network 172.16.0.0 0.255.255.255 area 56R5(config-router)#area 56 range 172.16.0.0 255.255.255.0

The network administrator configured the router for Control Plane Policing to limit OSPF traffic to be policed to 1 Mbps. Any traffic that exceeds this limit must also be allowed at this point for traffic analysis. The router configuration is:access-list 100 permit ospf any any! class-map CM-OSPF match access-group 100! policy-map PM-COPP class CM-OSPF police 1000000 conform-action transmit! control-plane service-policy output PM-COPPThe Control Plane Policing failed to monitor and police OSPF traffic. Which configuration resolves this issue?

policy-map PM-COPPclass CM-OSPFno police 1000000 conform-action transmitpolice 1000000 conform-action transmitexceed-action transmit!control-planeno service-policy output PM-COPP

policy-map PM-COPPclass CM-OSPFno police 1000000 conform-action transmitpolice 1000000 conform-action transmitexceed-action transmit

control-planeno service-policy output PM-COPPservice-policy input PM-COPP

no access-list 100access-list 100 deny ospf any anyaccess-list 100 permit ip any any!policy-map PM-COPPclass CM-OSPFno police 1000000 conform-action transmitpolice 1000000 conform-action transmitexceed-action drop!control-planeno service-policy output PM-COPPservice-policy input PM-COPP

Which feature minimizes DoS attacks on an IPv6 network?

IPv6 Router Advertisement Guard

Refer to Exhibit. PC2 is directly connected to R1. A user at PC2 cannot Telnet to 2001:db8:a:b::10. The user can ping 2001:db8:a:b::10 and receive DHCP-related information from the DHCP server. Which action resolves the issue?

Remove sequence 10 and put it back as sequence 25.

Remove sequence 20 and put it back as sequence 45.

Remove sequence 30 and put it back as sequence 5.

Remove sequence 40 and put it back as sequence 15.

Cisco 300-410 Practice Test 7 - Free Online Exam Questions 241-280

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Cisco 300-410 Practice Test 7

Question

Drag and Drop

Hot Area

Cisco 300-410 Practice Tests

Practice Tests