Cisco 300-410 Practice Test - Questions Answers, Page 6

List of questions
Question 51

Refer to the exhibit.
Network operations cannot read or write any configuration on the device with this configuration from the operations subnet. Which two configurations fix the issue? (Choose two.)
Configure SNMP rw permission in addition to community ciscotest.
Modify access list 1 and allow operations subnet in the access list.
Modify access list 1 and allow SNMP in the access list.
Configure SNMP rw permission in addition to version 1.
Configure SNMP rw permission in addition to community ciscotest 1.
Question 52

Refer to the exhibit.
Why is the remote NetFlow server failing to receive the NetFlow data?
The flow exporter is configured but is not used.
The flow monitor is applied in the wrong direction.
The flow monitor is applied to the wrong interface.
The destination of the flow exporter is not reachable.
Question 53

Refer to the exhibit.
A router receiving BGP routing updates from multiple neighbors for routers in AS 690. What is the reason that the router still sends traffic that is destined to AS 690 to a neighbor other than 10.222.1.1?
The local preference value in another neighbor statement is higher than 250.
The local preference value should be set to the same value as the weight in the route map.
The route map is applied in the wrong direction.
The weight value in another neighbor statement is higher than 200.
Question 54

Refer to the exhibit. an engineer is trying to get 192.168.32.100 forwarded through 10.1.1.1, but it was forwarded through 10.1.1.2. What action forwards the packets through 10.1.1.1?
Configure EIGRP to receive 192.168.32.0 route with lower admin distance.
A. Configure EIGRP to receive 192.168.32.0 route with longer prefix than /19.
A. Configure EIGRP to receive 192.168.32.0 route with lower metric.
A. Configure EIGRP to receive 192.168.32.0 route with equal or longer prefix than /24.
Question 55

What is a limitation of IPv6 RA Guard?
It is not supported in hardware when TCAM is programmed
It does not offer protection in environments where IPv6 traffic is tunneled.
It cannot be configured on a switch port interface in the ingress direction
Packets that are dropped by IPv6 RA Guard cannot be spanned
Restrictions for IPv6 RA Guard
The IPv6 RA Guard feature does not offer protection in environments where IPv6 traffic is tunneled.
This feature is supported only in hardware when the ternary content addressable memory (TCAM) is programmed.
This feature can be configured on a switch port interface in the ingress direction.
This feature supports host mode and router mode.
This feature is supported only in the ingress direction; it is not supported in the egress direction.
This feature is not supported on EtherChannel and EtherChannel port members.
This feature is not supported on trunk ports with merge mode.
This feature is supported on auxiliary VLANs and private VLANs (PVLANs). In the case of PVLANs, primary VLAN features are inherited and merged with port features.
Packets dropped by the IPv6 RA Guard feature can be spanned.
Reference:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16-10/ip6f-xe-16-10-book/ip6-ra-guard.html#GUID-589AF00C-7499-439F-AD23-51005D61CAB7
Question 56

Refer to the exhibit.
An IP SLA is configured to use the backup default route when the primary is down, but it is not working as desired. Which command fixes the issue?
R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2 10 track 1
R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2
R1(config)#ip sla track 1
R1(config)# ip route 0.0.0.0.0.0.0.0.1.1.1.1 track 1
Reference:
Note: By default Static Router AD value-1 hence ip route 0.0.0.0. 0.0.0.0. 1.1.1.1 track 1 means AD-1 which must be less than of back up route AD.
Define the backup route to use when the tracked object is unavailable.
!--- The administrative distance of the backup route must be greater than !--- the administrative distance of the tracked route.
!--- If the primary gateway is unreachable, that route is removed
!--- and the backup route is installed in the routing table
!--- instead of the tracked route.
https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200785-ISP-Failover-with-defaultroutes-using-I.html
https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generationfirewalls/118962-configure-asa-00.html
Question 57

Which label operations are performed by a label edge router?
SWAP and POP
SWAP and PUSH
PUSH and PHP
PUSH and POP
A label edge router (LER, also known as edge LSR) is a router that operates at the edge of an MPLS network and acts as the entry and exit points for the network. LERs push an MPLS label onto an incoming packet and pop it off an outgoing packet.
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nxos/mpls/configuration/guide/mpls_cg/mp_mpls_overview.pdf
Question 58

Refer to the exhibit.
A junior engineer updated a branch router configuration. Immediately after the change, the engineer receives calls from the help desk that branch personnel cannot reach any network destinations.
Which configuration restores service and continues to block 10.1.1.100/32?
route-map FILTER-IN deny 5
ip prefix-list 102 seq 15 permit 0.0.0.0/32 le 32
ip prefix-list 102 seq 5 permit 0.0.0.0/32 le 32
route-map FILTER-IN permit 20
By using "deny" keyword in a route-map, we can filter out the prefix specified in the prefix-list.
But there is an implicit "deny all" statement in the prefix-list so we must permit other prefixes with "permit" keyword in the route-map.
Question 59

An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1.255.255.255.252 along with the summary route. After finishing configuration, the customer complained not receiving summary route with specific loopback address.
Which two configurations will fix it? (Choose two.)
Configure access-list 1 permit 10.1.1.0.0.0.0.3.
Configure access-list 1 permit 10.1.1.1.0.0.0.252.
Configure access-list 1 and match under route-map Leak-Route.
Configure route-map Leak-Route permit 10 and match access-list 1.
Configure route-map Leak-Route permit 20.
When you configure an EIGRP summary route, all networks that fall within the range of your summary are suppressed and no longer advertised on the interface. Only the summary route is advertised. But if we want to advertise a network that has been suppressed along with the summary route then we can use leak-map feature. The below commands will fix the configuration in this question:
R1( config)#access-list 1 permit 10.1.1.0 0.0.0.3 R1(config)#route-map Leak-Route permit 10 // this command will also remove the "route_map Leak-Route deny 10" command.
R1(config-route-map)#match ip address 1
Question 60

Refer to the exhibit.
An engineer is monitoring reachability of the configured default routes to ISP1 and ISP2. The default route from ISP1 is preferred if available. How is this issue resolved?
Use the icmp-echo command to track both default routes
Use the same AD for both default routes
Start IP SLA by matching numbers for track and ip sla commands
Start IP SLA by defining frequency and scheduling it
Reference: https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200785-ISP-Failover-withdefault-routes-using-I.htmlIn the above configuration we have not had activated our IP SLA operation. We can start it withthis command:
R1(config)#ip sla schedule 100 life forever start-time now
Also we should specific the rate of ICMP echo:
R1(config-ip-sla-echo)#frequency 5 // Send ICMP echo every 5 seconds
Question