ExamGecko
Login
Home / Cisco / 300-410 / List of questions
Ask Question

Cisco 300-410 Practice Test - Questions Answers, Page 4

Add to Whishlist

List of questions

Question 31

Report Export Collapse

Refer to the exhibits.

Cisco 300-410 image Question 31 110977 10072024005413000000

Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two commands are missing? (Choose two.)

The ip nhrp redirect command is missing on the spoke routers.

The ip nhrp redirect command is missing on the spoke routers.

The ip nhrp shortcut command is missing on the spoke routers.

The ip nhrp shortcut command is missing on the spoke routers.

The ip nhrp redirect commands is missing on the hub router.

The ip nhrp redirect commands is missing on the hub router.

The ip nhrp shortcut commands is missing on the hub router.

The ip nhrp shortcut commands is missing on the hub router.

The ip nhrp map command is missing on the hub router.

The ip nhrp map command is missing on the hub router.

Suggested answer: B, C
asked 07/10/2024
Vasil Ishmatov
49 questions

Question 32

Report Export Collapse

Which protocol is used to determine the NBMA address on the other end of a tunnel when mGRE is used?

NHRP

NHRP

IPsec

IPsec

MP-BGP

MP-BGP

OSPF

OSPF

Suggested answer: A
asked 07/10/2024
Borja Arranz Palenzuela
47 questions

Question 33

Report Export Collapse

Refer to the exhibit.

Cisco 300-410 image Question 33 110979 10072024005413000000

Which configuration denies Telnet traffic to router 2 from 198A:0:200C::1/64?


Cisco 300-410 image Question 33 Answer 1 110979 10072024005413000000


Cisco 300-410 image Question 33 Answer 1 110979 10072024005413000000


Cisco 300-410 image Question 33 Answer 2 110979 10072024005413000000


Cisco 300-410 image Question 33 Answer 2 110979 10072024005413000000


Cisco 300-410 image Question 33 Answer 3 110979 10072024005413000000


Cisco 300-410 image Question 33 Answer 3 110979 10072024005413000000


Cisco 300-410 image Question 33 Answer 4 110979 10072024005413000000


Cisco 300-410 image Question 33 Answer 4 110979 10072024005413000000

Suggested answer: A
asked 07/10/2024
Penny Chang
52 questions

Question 34

Report Export Collapse

Refer to the exhibit.

Cisco 300-410 image Question 34 110980 10072024005413000000

During troubleshooting it was discovered that the device is not reachable using a secure web browser. What is needed to fix the problem?

permit tcp port 443

permit tcp port 443

permit udp port 465

permit udp port 465

permit tcp port 465

permit tcp port 465

permit tcp port 22

permit tcp port 22

Suggested answer: A
asked 07/10/2024
Sasha Grib
40 questions

Question 35

Report Export Collapse

Refer to the exhibit.

Cisco 300-410 image Question 35 110981 10072024005413000000

An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+. Which action produces the desired configuration?

Add the aaa authentication login default none command to the global configuration.

Add the aaa authentication login default none command to the global configuration.

Replace the capital "C" with a lowercase "c" in the aaa authentication login Console local command.

Replace the capital "C" with a lowercase "c" in the aaa authentication login Console local command.

Add the aaa authentication login default group tacacs+ local-case command to the global configuration.

Add the aaa authentication login default group tacacs+ local-case command to the global configuration.

Add the login authentication Console command to the line configuration

Add the login authentication Console command to the line configuration

Suggested answer: D
Explanation:

Reference:

https://community.cisco.com/t5/switching/how-to-define-login-local-for-console-0/td-p/2949493

asked 07/10/2024
Andres Romo
50 questions

Question 36

Report Export Collapse

Refer to the exhibit.

Cisco 300-410 image Question 36 110982 10072024005413000000

An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?

no ip ssh disable

no ip ssh disable

ip ssh enable

ip ssh enable

ip ssh version 2

ip ssh version 2

crypto key generate rsa

crypto key generate rsa

Suggested answer: D
asked 07/10/2024
Jorge Diaz
38 questions

Question 37

Report Export Collapse

Which statement about IPv6 ND inspection is true?

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Suggested answer: B
Explanation:

IPv6 ND inspection learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables. IPv6 ND inspection analyzes neighbor discovery messages in order to build a trusted binding table database, and IPv6 neighbor discovery messages that do not have valid bindings are dropped. A neighbor discovery message is considered trustworthy if its IPv6-to-MAC mapping is verifiable.

This feature mitigates some of the inherent vulnerabilities for the neighbor discovery mechanism, such as attacks on duplicate address detection (DAD), address resolution, device discovery, and the neighbor cache.

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-s/ip6f-15-s-book/ip6-snooping.pdf

asked 07/10/2024
Ronald Buffing
44 questions

Question 38

Report Export Collapse

While troubleshooting connectivity issues to a router, these details are noticed:

Standard pings to all router interfaces, including loopbacks, are successful.

Data traffic is unaffected.

SNMP connectivity is intermittent.

SSH is either slow or disconnects frequently.

Which command must be configured first to troubleshoot this issue?

show policy-map control-plane

show policy-map control-plane

show policy-map

show policy-map

show interface | inc drop

show interface | inc drop

show ip route

show ip route

Suggested answer: A
asked 07/10/2024
Kingsley Tibs
46 questions

Question 39

Report Export Collapse

Refer to the exhibit.

Cisco 300-410 image Question 39 110985 10072024005413000000

Why is user authentication being rejected?

The TACACS+ server expects "user", but the NT client sends "domain/user".

The TACACS+ server expects "user", but the NT client sends "domain/user".

The TACACS+ server refuses the user because the user is set up for CHAP.

The TACACS+ server refuses the user because the user is set up for CHAP.

The TACACS+ server is down, and the user is in the local database.

The TACACS+ server is down, and the user is in the local database.

The TACACS+ server is down, and the user is not in the local database.

The TACACS+ server is down, and the user is not in the local database.

Suggested answer: D
Explanation:

Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controlleraccesscontrol-system-tacacs-/13864-tacacs-pppdebug.html

asked 07/10/2024
Adrian Petrisoaia
44 questions

Question 40

Report Export Collapse

Refer to the exhibit.

Cisco 300-410 image Question 40 110986 10072024005413000000

Which control plane policy limits BGP traffic that is destined to the CPU to 1 Mbps and ignores BGP traffic that is sent at higher rate?

policy-map SHAPE_BGP

policy-map SHAPE_BGP

policy-map LIMIT_BGP

policy-map LIMIT_BGP

policy-map POLICE_BGP

policy-map POLICE_BGP

policy-map COPP

policy-map COPP

Suggested answer: D
asked 07/10/2024
Pablo Magallanes
46 questions
Total 592 questions
Go to page: of 60
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Refer to the exhibit. Users in the branch network of 2001:db8:0:4::/64 report that they cannot access the Internet. Which command is issued in IPv6 router EIGRP 100 configuration mode to solve this issue?
Refer to the exhibit. The output of the trace route from R5 shows a loop in the network. Which configuration prevents this loop?
Which two labet distribution methods are used by routers in MPLS? (Choose two )
Refer to the exhibit. ISP 1 and ISP 2 directly connect to the Internet. A customer is tracking both ISP links to achieve redundancy and cannot see the Cisco IOS IP SLA tracking output on the router console. Which command is missing from the IP SLA configuration?
Refer to the exhibit. Refer to lhe exhibit After an engineer configured a new Cisco rouler as a DHCP server, users reponed iwo primary issues: Devices in the HR subnet have intermittent connectivity problems. Workstations in the LEGAL subnet cannot obtain IP addresses. Which configurations must the engineer apply to ROUTER_1 to restore connectivity for the affected devices?
R2 has a locally originated prefix 192.168.130.0/24 and has these configurations: What is the result when the route-map OUT command is applied toward an eBGP neighbor R1 (1.1.1.1) by using the neighbor 1.1.1.1 route-map OUT out command?
When provisioning a device in Cisco DNA Center, the engineer sees the error message "Cannot select the device. Not compatible with template". What is the reason for the error?
Refer to the exhibit. What is the result of applying this configuration?
Refer to the exhibit. Refer to the exhibit An engineer observes that every time the ICMP packet is lost at a polling interval, track 1 goes down, which causes unnecessary disruption and instability in the network. The engineer does not want the traffic to be rerouted if the loss of ICMP packets is negligible. If the packet loss is persistent for a longer duration, the track must go down and the traffic must be rerouted. Which action resolves the issue?
Refer to the exhibit. The network operation team observes a traffic forwarding issue between R2 and R3: Ping and traceroute of loopback IP address from R2 to R3 is successful. iBGP peering in AS 65101 and AS 65201 is up. Which configuration resolves the issue?