ExamGecko
Home Home / Cisco / 300-410

Cisco 300-410 Practice Test - Questions Answers, Page 25

Question list
Search
Search

List of questions

Search

Related questions











What are two characteristics of IPv6 Source Guard? (Choose two.)

A.

requires IPv6 snooping on Layer 2 access or trunk ports

A.

requires IPv6 snooping on Layer 2 access or trunk ports

Answers
B.

used in service provider deployments to protect DDoS attacks

B.

used in service provider deployments to protect DDoS attacks

Answers
C.

requires the user to configure a static binding

C.

requires the user to configure a static binding

Answers
D.

requires that validate prefix be enabled

D.

requires that validate prefix be enabled

Answers
E.

recovers missing binding table entries

E.

recovers missing binding table entries

Answers
Suggested answer: D, E

Explanation:

IPv6 Source Guard uses the IPv6 First-Hop Security Binding Table to drop traffic from unknown sources or bogus IPv6 addresses not in the binding table. The switch also tries to recover from lost address information, querying DHCPv6 server or using IPv6 neighbor discovery to verify the source IPv6 address after dropping the offending packet(s).Reference: https://blog.ipspace.net/2013/07/first-hop-ipv6-security-features-in.html

How does an MPLS Layer 3 VPN differentiate the IP address space used between each VPN?

A.

by RD

A.

by RD

Answers
B.

by address family

B.

by address family

Answers
C.

by MP-BGP

C.

by MP-BGP

Answers
D.

byRT

D.

byRT

Answers
Suggested answer: A

Refer to the exhibit.

R1 is configured with uRPF, and ping to R1 is failing from a source present in the R1 routing table via the GigatxtEthernet 0/0 interface. Which action resolves the issue?

A.

Remove the access list from the interface GigabrtEthernet 0/0

A.

Remove the access list from the interface GigabrtEthernet 0/0

Answers
B.

Modify the uRPF mode from strict to loose

B.

Modify the uRPF mode from strict to loose

Answers
C.

Enable Cisco Express Forwarding to ensure that uRPF is functioning correctly

C.

Enable Cisco Express Forwarding to ensure that uRPF is functioning correctly

Answers
D.

Add a floating static route to the source on R1 to the GigabitEthernet 0/1 interface

D.

Add a floating static route to the source on R1 to the GigabitEthernet 0/1 interface

Answers
Suggested answer: B

Which 0S1 model is used to insert an MPLS label?

A.

between Layer 5 and Layer 6

A.

between Layer 5 and Layer 6

Answers
B.

between Layer 1 and Layer 2

B.

between Layer 1 and Layer 2

Answers
C.

between Layer 3 and Layer 4

C.

between Layer 3 and Layer 4

Answers
D.

between Layer 2 and Layer 3

D.

between Layer 2 and Layer 3

Answers
Suggested answer: D

Which function does LDP provide in an MPLS topology?

A.

It enables a MPLS topology to connect multiple VPNs to P routers.

A.

It enables a MPLS topology to connect multiple VPNs to P routers.

Answers
B.

It provides hop-by-hop forwarding in an MPLS topology for LSRs.

B.

It provides hop-by-hop forwarding in an MPLS topology for LSRs.

Answers
C.

It exchanges routes for MPLS VPNs across different VRFs.

C.

It exchanges routes for MPLS VPNs across different VRFs.

Answers
D.

It provides a means for LSRs to exchange IP routes.

D.

It provides a means for LSRs to exchange IP routes.

Answers
Suggested answer: B

Explanation:

LDP provides a standard methodology for hop-by-hop, or dynamic label, distribution in an MPLS network by assigning labels to routes that have been chosen by the underlying Interior Gateway Protocol (IGP) routing protocols. The resulting labeled paths, called label switch paths (LSPs), forward label traffic across an MPLS backbone to particular destinations.Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_ldp/configuration/12-4t/mp-ldp-12-4t-book.pdf

An engineer is implementing a coordinated change with a server team As part of the change, the engineer must configure interlace GigabitEthernet2 in an existing VRF "RED" then move the interface to an existing VRF "BLUE" when the server team is ready. The engineer configured interface GigabitEthemet2 in VRF "RED"

Which configuration completes the change?

A.

interface GigabitEthernet2 no ip address vrf forwarding BLUE

A.

interface GigabitEthernet2 no ip address vrf forwarding BLUE

Answers
B.

interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE ip address 10.0.0.0 255.255.255.254

B.

interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE ip address 10.0.0.0 255.255.255.254

Answers
C.

interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE

C.

interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE

Answers
D.

interface GigabitEthernet2 no ip address ip address 10.0.0.0 255.255.255.254 vrf forwarding BLUE

D.

interface GigabitEthernet2 no ip address ip address 10.0.0.0 255.255.255.254 vrf forwarding BLUE

Answers
Suggested answer: B

Refer to the exhibit.

The branch router is configured with a default route toward the internet and has no routes configured for the HQ site that is connected through interface G2/0. The HQ router is fully configured and does not require changes. Which configuration on the branch router makes the intranet website (TCP port 80) available to the branch office users?

A.


A.


Answers
B.


B.


Answers
C.


C.


Answers
D.


D.


Answers
Suggested answer: B

Explanation:

the ACL 101 matches all HTTP pakects while the ACL 102 matches TCP packets destined to Intranet webserver. These packets will be sent to HQ router.If a match command refers to several objects in one command, either of them should match (the logical OR algorithm is applied). For example, in the match ip address 101 102 command, a route is permitted if it is permitted by access list 101 or access list 102.

Refer to the exhibit.

An engineer configured NetFlow on R1, but the NMS server cannot see the flow from R1. Which configuration resolves the issue?

A.

flow monitor Flowmonitor1 destination 10.221.10.11

A.

flow monitor Flowmonitor1 destination 10.221.10.11

Answers
B.

flow exporter FlowAnalyzer1 destination 10.221.10.11

B.

flow exporter FlowAnalyzer1 destination 10.221.10.11

Answers
C.

interface Ethernet0/1 flow-destination 10.221.10.11

C.

interface Ethernet0/1 flow-destination 10.221.10.11

Answers
D.

interface Ethernet0/0 flow-destination 10.221.10.11

D.

interface Ethernet0/0 flow-destination 10.221.10.11

Answers
Suggested answer: B

Explanation:

From the output we notice that the destination IP address is not correct. The NMS server IP address should be 10.221.10.11, not 10.221.10.10. Therefore we have to change this information under ìflow exporter Öî configuration.NetFlow configuration reference: https://www.cisco.com/c/en/us/td/docs/iosxml/ios/fnetflow/configuration/15-mt/fnf-15-mt-book/cfg-de-fnflow-exprts.html

Refer to the exhibit.

An engineer configured NetFlow on R1, but the NMS server cannot see the flow from ethernet 0/0 of R1. Which configuration resolves the issue?

A.

flow monitor Flowmonitor1 source Ethernet0/0

A.

flow monitor Flowmonitor1 source Ethernet0/0

Answers
B.

interface Ethernet0/1 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output

B.

interface Ethernet0/1 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output

Answers
C.

interface Ethernet0/0 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output

C.

interface Ethernet0/0 ip flow monitor Flowmonitor1 input ip flow monitor Flowmonitor1 output

Answers
D.

flow exporter FlowAnalyzer1 source Ethernet0/0

D.

flow exporter FlowAnalyzer1 source Ethernet0/0

Answers
Suggested answer: C

Refer to the exhibit.

An engineer configures DMVPN and receives the hub location prefix of 10.1.1.0724 on R2 and R3 The R3 prefix of 10 1.3.0/24 is not received on R2. and the R2 prefix 10.1,2.0/24 is not received on R3.

Which action reserves the issue?

A.

Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the command no ip split-horizon eigrp 10 on the tunnel interface of R1

A.

Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the command no ip split-horizon eigrp 10 on the tunnel interface of R1

Answers
B.

There is no spoke-to-spoke connection DMVPN configuration should be modified to enable a tunnel connection between R2 and R3 and neighbor relationship confirmed by use of the show ip eigrp neighbor command

B.

There is no spoke-to-spoke connection DMVPN configuration should be modified to enable a tunnel connection between R2 and R3 and neighbor relationship confirmed by use of the show ip eigrp neighbor command

Answers
C.

Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the no ip split-horizon eigrp 10 command on the Gi0/0 interface of R1.

C.

Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the no ip split-horizon eigrp 10 command on the Gi0/0 interface of R1.

Answers
D.

There is no spoke-to-spoke connection DMVPN configuration should be modified with a manual neighbor relationship configured between R2 and R3 and confirmed bb use of the show ip eigrp neighbor command.

D.

There is no spoke-to-spoke connection DMVPN configuration should be modified with a manual neighbor relationship configured between R2 and R3 and confirmed bb use of the show ip eigrp neighbor command.

Answers
Suggested answer: A

Explanation:

In this topology, the Hub router will receive advertisements from R2 Spoke router on its tunnel interface. The problem here is that it also has a connection with R3 Spoke on that same tunnel interface. If we donít disable split-horizon, then the Hub will not relay routes from R2 to R3 and the other way around. That is because it received those routes on the same interface tunnel and therefore it cannot advertise back out that same interface (split-horizon rule). Therefore we must disable splithorizon on the Hub router to make sure the Spokes know about each other.

Total 570 questions
Go to page: of 57