ExamGecko
Search Search Login
Home Home / Cisco / 300-410
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Refer to the exhibit. Refer to the exhibit. R1 uses SP1 as the primary path. A network engineer must force all SSH traffic generated from R1 toward SP2. Which configuration accomplishes the task?
LAB SIMULATION WAN CORE MGMT
Refer to the exhibit. Refer to the exhibit After an engineer modified the configuration for area 7 to permit type 1 2 and 7 LSAs only users connected to router R9 reported that they could no longer access the internet. Which configuration restores internet access to users on R9 and permits only LSA type 1,2, and 7? A) B) C) D)
Refer to the exhibit. Refer to the exhibit. Which configuration resolves the issue? A) B) C) D)
Refer to the exhibit. An engineer is trying to block the route to 192.168.2.2 from the routing table by using the configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?
Refer to the exhibit. Users in the branch network of 2001:db8:0:4::/64 report that they cannot access the Internet. Which command is issued in IPv6 router EIGRP 100 configuration mode to solve this issue?
Refer to the exhibit. An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established and did not meet the requirement. Which action resolves the issue?
Refer to the exhibit. Refer to the exhibit Which command must be configured to make VRF CCNP work?
An engineer configured a router with this configuration ip access-hst DENY TELNET 10 deny tcp any any eq 23 log-input The router console starts receiving log message :%SEC-6-IPACCESSLOGP: list DENY_TELNET denied tcp 192.168.1.10(1022)(FastEthernet1/0 D508.89gb.003f) ->192.168.2.20(23), 1 packet" Which action stops messages on the console while still denying Telnet?
Refer to the exhibit. R2 is a route reflector, and R1 and R3 are route reflector clients. The route reflector learns the route to 172.16.25.0/24 from R1, but it does not advertise to R3. What is the reason the route is not advertised?

Question 285 - 300-410 discussion

Report
Export

Refer to the exhibit.

An engineer must configure a LAN-to-LAN IPsec VPN between R1 and the remote router. Which IPsec Phase 1 configuration must the engineer use for the local router?

A.

crypto isakmp policy 5

authentication pre-share

encryption 3des

hash sha

group 2

!

crypto isakmp key cisco123 address 200.1.1.3

Answers
A.

crypto isakmp policy 5

authentication pre-share

encryption 3des

hash sha

group 2

!

crypto isakmp key cisco123 address 200.1.1.3

B.

crypto isakmp policy 5

authentication pre-share

encryption 3des

hash md5

group 2

!

crypto isakmp key cisco123 address 200.1.1.3

Answers
B.

crypto isakmp policy 5

authentication pre-share

encryption 3des

hash md5

group 2

!

crypto isakmp key cisco123 address 200.1.1.3

C.

crypto isakmp policy 5

authentication pre-share

encryption 3des

hash md5

group 2

!

crypto isakmp key cisco123 address 199.1.1.1

Answers
C.

crypto isakmp policy 5

authentication pre-share

encryption 3des

hash md5

group 2

!

crypto isakmp key cisco123 address 199.1.1.1

D.

crypto isakmp policy 5

authentication pre-share

encryption 3des

hash md5

group 2

!

crypto isakmp key cisco123! address 199.1.1.1

Answers
D.

crypto isakmp policy 5

authentication pre-share

encryption 3des

hash md5

group 2

!

crypto isakmp key cisco123! address 199.1.1.1

Suggested answer: A

Explanation:

In the "crypto isakmp key Ö address " command, the address must be of the IP address of the other end (which is 200.1.1.3 in this case) so Option A and Option B are correct. The difference between these two options are in the hash SHA or MD5 method but both of them can be used although SHA is better than MD5 so we choose Option A the best answer.

Note: Cisco no longer recommends using 3DES, MD5 and DH groups 1, 2 and 5.

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_imgmt/configuration/xe-16-5/sec-ipsec-management-xe-16-5-book/sec-ipsec-usability-enhance.html

Show Answer
asked 07/10/2024
Pedro Faro
29 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms