Offering Free access to CCNP Enterprise 300-410 Exam Questions Pool Bank

Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Questions and Answers

Testing Engine

Product Type: Testing Engine

$49 ~~$139.99~~

Add to Cart

PDF + Testing Engine

Product Type: PDF + Testing Engine

$64.75 ~~$184.99~~

Add to Cart

PDF Study Guide

Product Type: PDF Study Guide

$42 ~~$119.99~~

Add to Cart

Question 1

Drag and drop the DHCP messages from the left onto the correct uses on the right.

Options:

Answer:

Explanation:

DHCPACK

The server-to-client communication with configuration parameters, including committed network address.

DHCPINFORM

The client-to-server communication, asking for only local configuration parameters that the client already has externally configured as an address.

DHCPNAK

The server-to-client communication, refusing the request for configuration parameter.

DHCPDECLINE

The client-to-server communication, indicating that the network address is already in use

[Reference: https://www.cisco.com/c/en/us/support/docs/ip/dynamic-address-allocation-resolution/27470-100.html, DHCPINFORM: If a client has obtained a network address through some other means or has a manually configured IP address, a client workstation may use a DHCPINFORM request message to obtain other local configuration parameters, such as the domain name and Domain Name Servers (DNSs). DHCP servers receiving a DHCPINFORM message construct a DHCPACK message with any local configuration parameters appropriate for the client without allocating a new IP address. This DHCPACK will be sent unicast to the client., DHCPNAK: If the selected server is unable to satisfy the DHCPREQUEST message, the DHCP server will respond with a DHCPNAK message. When the client receives a DHCPNAK message, or does not receive a response to a DHCPREQUEST message, the client restarts the configuration process by going into the Requesting state. The client will retransmit the DHCPREQUEST at least four times within 60 seconds before restarting the Initializing state., DHCPACK: After the DHCP server receives the DHCPREQUEST, it acknowledges the request with a DHCPACK message, thus completing the initialization process., DHCPDECLINE: The client receives the DHCPACK and will optionally perform a final check on the parameters. The client performs this procedure by sending Address Resolution Protocol (ARP) requests for the IP address provided in the DHCPACK. If the client detects that the address is already in use by receiving a reply to the ARP request, the client will send a DHCPDECLINE message to the server and restart the configuration process by going into the Requesting state., , Reference:, https://www.cisco.com/c/en/us/support/docs/ip/dynamic-address-allocation-resolution/27470-100.html, , ]

Question 2

Refer to the exhibit.

The network administrator configured VRF lite for customer A. The technician at the remote site misconfigured VRF on the router. Which configuration will resolve connectivity for both sites of customer_a?

Options:

Option A

Option B

Option C

Option D

Question 3

Refer to the exhibit.

Users in the branch network of 2001:db8:0:4::/64 report that they cannot access the Internet. Which command is issued in IPv6 router EIGRP 100 configuration mode to solve this issue?

Options:

Issue the eigrp stub command on R1

Issue the no neighbor stub command on R2.

Issue the eigrp command on R2.

Issue the no eigrp stub command on R1.

Question 4

Which security feature can protect DMVPN tunnels?

Options:

IPsec

TACACS+

RTBH

RADIUS

Question 5

Which command is used to check IP SLA when an interface is suspected to receive lots of traffic with options?

Options:

show track

show threshold

show timer

show delay

Question 6

Refer to the exhibit.

An IP SLA is configured to use the backup default route when the primary is down, but it is not working as desired. Which command fixes the issue?

Options:

R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2 10 track 1

R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2

R1(config)#ip sla track 1

R1(config)# ip route 0.0.0.0.0.0.0.0.1.1.1.1 track 1

Question 7

What is the output of the following command:

show ip vrf

Options:

Show's default RD values

Displays IP routing table information associated with a VRF

Show's routing protocol information associated with a VRF.

Displays the ARP table (static and dynamic entries) in the specified VRF

Question 8

Refer to the exhibit.

Which configuration configures a policy on R1 to forward any traffic that is sourced from

the 192.168.130.0/24 network to R2?

Options:

Option A

Option B

Option C

Option D

Question 9

Refer to the exhibit.

Which statement about R1 is true?

Options:

OSPF redistributes RIP routes only if they have a tag of one.

RIP learned routes are distributed to OSPF with a tag value of one.

R1 adds one to the metric for RIP learned routes before redistributing to OSPF.

RIP routes are redistributed to OSPF without any changes.

Question 10

Which protocol does VRF-Lite support?

Options:

IS-IS

ODR

EIGRP

IGRP

Question 11

Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.

Options:

Question 12

Which protocol does MPLS use to support traffic engineering?

Options:

Tag Distribution Protocol (TDP)

Resource Reservation Protocol (RSVP)

Border Gateway Protocol (BGP)

Label Distribution Protocol (LDP)

Question 13

Refer to the exhibit.

During troubleshooting it was discovered that the device is not reachable using a secure

web browser. What is needed to fix the problem?

Options:

permit tcp port 443

permit udp port 465

permit tcp port 465

permit tcp port 22

Question 14

Which command displays the IP routing table information that is associated with VRF-Lite?

Options:

show ip vrf

show ip route vrf

show run vrf

show ip protocols vrf

Question 15

Refer to the exhibit.

Which subnet is redistributed from EIGRP to OSPF routing protocols?

Options:

10.2.2.0/24

10.1.4.0/26

10.1.2.0/24

10.2.3.0/26

Question 16

Refer to the exhibit.

An administrator that is connected to the console does not see debug messages when

remote users log in. Which action ensures that debug messages are displayed for remote logins?

Options:

Enter the transport input ssh configuration command.

Enter the terminal monitor exec command.

Enter the logging console debugging configuration command.

Enter the aaa new-model configuration command.

Question 17

Refer to the exhibit.

Why is user authentication being rejected?

Options:

The TACACS+ server expects “user”, but the NT client sends “domain/user”.

The TACACS+ server refuses the user because the user is set up for CHAP.

The TACACS+ server is down, and the user is in the local database.

The TACACS+ server is down, and the user is not in the local database.

Question 18

Which is statement about IPv6 inspection is true?

Options:

It teams and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables

It teams and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables

It team and secures binding for stateless autoconfiguration addresses in Layer 2 neighbor tables.

Question 19

Refer to the exhibit.

The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host

192.168.10.10cannot SSH to host 192.168.100.10 even though the flow is permitted. Which action

resolves the issue without opening full access to this router?

Options:

Move the SSH entry to the beginning of the ACL

Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works

Temporarily remove the ACL from the interface to see if the flow works

Run the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it

Question 20

Refer to the exhibit.

An engineer has configured DMVPN on a spoke router. What is the WAN IP address of another spoke router within the DMVPN network?

Options:

172.18.46.2

192.168.1.4

172.18.16.2

192.168.1.1

Question 21

Which method changes the forwarding decision that a router makes without first changing the routing table or influencing the IP data plane?

Options:

nonbroadcast multiaccess

packet switching

policy-based routing

forwarding information base

Question 22

Refer to the exhibit.

R2 is a route reflector, and R1 and R3 are route reflector clients. The route reflector learns the route to 172.16.25.0/24 from R1, but it does not advertise to R3. What is the reason the route is not advertised?

Options:

R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.

Route reflector setup requires full IBGP mesh between the routers.

In route reflector setup, only classful prefixes are advertised to other clients.

In route reflector setups, prefixes are not advertised from one client to another.

Question 23

Refer to the exhibit.

Which interface configuration must be configured on the spoke A router to enable a dynamic DMVPN tunnel with the spoke B router?

Options:

Option A

Option B

Option C

Option D

Question 24

Refer to the exhibit.

Which configuration denies Telnet traffic to router 2 from 198A:0:200C::1/64?

Options:

Option A

Option B

Option C

Option D

Question 25

Which statement about IPv6 RA Guard is true?

Options:

It does not offer protection in environments where IPv6 traffic is tunneled.

It cannot be configured on a switch port interface in the ingress direction.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

It is not supported in hardware when TCAM is programmed.

Question 26

Which statement about route distinguishers in an MPLS network is true?

Options:

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network.

Route distinguishers define which prefixes are imported and exported on the edge router.

Question 27

Refer to the exhibit.

An engineer configures a static route on a router, but when the engineer checks the route

to the destination, a different next hop is chosen. What is the reason for this?

Options:

Dynamic routing protocols always have priority over static routes.

The metric of the OSPF route is lower than the metric of the static route.

The configured AD for the static route is higher than the AD of OSPF.

The syntax of the static route is not valid, so the route is not considered.

Question 28

Refer to the exhibit.

After redistribution is enabled between the routing protocols; PC2, PC3, and PC4 cannot reach PC1. Which action can the engineer take to solve the issue so that all the PCs are reachable?

Options:

Set the administrative distance 100 under the RIP process on R2.

Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.

Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.

Redistribute the directly connected interfaces on R2.

Question 29

Which label operations are performed by a label edge router?

Options:

SWAP and POP

SWAP and PUSH

PUSH and PHP

PUSH and POP

Question 30

When provisioning a device in Cisco DNA Center, the engineer sees the error message “Cannot select the device. Not compatible with template”.

What is the reason for the error?

Options:

The template has an incorrect configuration.

The software version of the template is different from the software version of the device.

The changes to the template were not committed.

The tag that was used to filter the templates does not match the device tag.

Question 31

Which protocol is used in a DMVPN network to map physical IP addresses to logical IP addresses?

Options:

BGP

LLDP

EIGRP

NHRP

Question 32

Drag and drop the OSPF adjacency states from the left onto the correct descriptions on the right.

Options:

Answer:

Explanation:

Table Description automatically generated

[Reference: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html, , Down, This is the first OSPF neighbor state. It means that no information (hellos) has been received from this neighbor, but hello packets can still be sent to the neighbor in this state., During the fully adjacent neighbor state, if a router doesn't receive hello packet from a neighbor within the Router Dead Interval time (RouterDeadInterval = 4*HelloInterval by default) or if themanually configured neighbor is being removed from the configuration, then the neighbor state changes from Full to Down., Attempt, This state is only valid for manually configured neighbors in an NBMA environment. In Attempt state, the router sends unicast hello packets every poll interval to the neighbor, from which hellos have not been received within the dead interval., Init, This state specifies that the router has received a hello packet from its neighbor, but the receiving router's ID was not included in the hello packet. When a router receives a hello packet from a neighbor, it should list the sender's router ID in its hello packet as an acknowledgment that it received a valid hello packet., 2-Way, This state designates that bi-directional communication has been established between two routers. Bi-directional means that each router has seen the other's hello packet. This state is attained when the router receiving the hello packet sees its own Router ID within the received hello packet's neighbor field. At this state, a router decides whether to become adjacent with this neighbor. On broadcast media and non-broadcast multiaccess networks, a router becomes full only with the designated router (DR) and the backup designated router (BDR); it stays in the 2-way state with all other neighbors. On Point-to-point and Point-to-multipoint networks, a router becomes full with all connected routers., At the end of this stage, the DR and BDR for broadcast and non-broadcast multiaccess networks are elected. For more information on the DR election process, refer to DR Election., Note: Receiving a Database Descriptor (DBD) packet from a neighbor in the init state will also a cause a transition to 2-way state., Exstart, Once the DR and BDR are elected, the actual process of exchanging link state information can start between the routers and their DR and BDR. (ie. Shared or NBMA networks)., In this state, the routers and their DR and BDR establish a master-slave relationship and choose the initial sequence number for adjacency formation. The router with the higher router ID becomes the master and starts the exchange, and as such, is the only router that can increment the sequence number. Note that one would logically conclude that the DR/BDR with the highest router ID will become the master during this process of master-slave relation. Remember that the DR/BDR election might be purely by virtue of a higher priority configured on the router instead of highest router ID. Thus, it is possible that a DR plays the role of slave. And also note that master/slave election is on a per-neighbor basis., Exchange, In the exchange state, OSPF routers exchange database descriptor (DBD) packets. Database descriptors contain link-state advertisement (LSA) headers only and describe the contents of the entire link-state database. Each DBD packet has a sequence number which can be incremented only by master which is explicitly acknowledged by slave. Routers also send link-state requestpackets and link-state update packets (which contain the entire LSA) in this state. The contents of the DBD received are compared to the information contained in the routers link-state database to check if new or more current link-state information is available with the neighbor., Loading, In this state, the actual exchange of link state information occurs. Based on the information provided by the DBDs, routers send link-state request packets. The neighbor then provides the requested link-state information in link-state update packets. During the adjacency, if a router receives an outdated or missing LSA, it requests that LSA by sending a link-state request packet. All link-state update packets are acknowledged., Full, In this state, routers are fully adjacent with each other. All the router and network LSAs are exchanged and the routers' databases are fully synchronized., Full is the normal state for an OSPF router. If a router is stuck in another state, it is an indication that there are problems in forming adjacencies. The only exception to this is the 2-way state, which is normal in a broadcast network. Routers achieve the FULL state with their DR and BDR in NBMA/broadcast media and FULL state with every neighbor in the remaining media such as point-to-point and point-to-multipoint., Note: The DR and BDR that achieve FULL state with every router on the segment will display FULL/DROTHER when you enter the show ip ospf neighbor command on either a DR or BDR. This simply means that the neighbor is not a DR or BDR, but since the router on which the command was entered is either a DR or BDR, this shows the neighbor as FULL/DROTHER., Reference: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html, Reference: http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080093f0e.shtml), Reference: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html, , , , ]

Question 33

Refer to the exhibit.

After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both

spoke-to-spoke and hub were not establishing. Which two actions resolve the issue? (Choose two.)

Options:

Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3

Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.

Change the mode from mode tunnel to mode transport on R3

Change the mode from mode transport to mode tunnel on R2.

Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3

Question 34

Drag and drop the operations from the left onto the locations where the operations are performed on the right.

Options:

Question 35

Drag and drop the addresses from the left onto the correct IPv6 filter purposes on the right.

Options:

Question 36

What is a role of route distinguishers in an MPLS network?

Options:

Route distinguishers define which prefixes are imported and exported on the edge router

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network

Question 37

While working with software images, an engineer observes that Cisco DNA Center cannot upload its software image directly from the device. Why is the image not uploading?

Options:

The device must be resynced to Cisco DNA Center.

The software image for the device is in install mode.

The device has lost connectivity to Cisco DNA Center.

The software image for the device is in bundle mode

Question 38

What is a limitation of IPv6 RA Guard?

Options:

It is not supported in hardware when TCAM is programmed

It does not offer protection in environments where IPv6 traffic is tunneled.

It cannot be configured on a switch port interface in the ingress direction

Packets that are dropped by IPv6 RA Guard cannot be spanned

Question 39

Refer the exhibit.

Which action resolves intermittent connectivity observed with the SNMP trap

packets?

Options:

Decrease the committed burst Size of the mgmt class map

Increase the CIR of the mgmt class map

Add a new class map to match TCP traffic

Add one new entry in the ACL 120 to permit the UDP port 161

Question 40

Which component of MPLS VPNs is used to extend the IP address so that an engineer is able to

identify to which VPN it belongs?

Options:

VPNv4 address family

LDP

Question 41

Which transport layer protocol is used to form LDP sessions?

Options:

UDP

SCTP

TCP

RDP

Question 42

Which two methods use IPsec to provide secure connectivity from the branch office to the headquarters office? (Choose two.)

Options:

DMVPN

MPLS VPN

Virtual Tunnel Interface (VTI)

SSL VPN

PPPoE

Question 43

Drag and drop the MPLS VPN device types from me left onto the definitions on the right.

Options:

Question 44

An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1.255.255.255.252 along with the summary route. After finishing configuration, the customer complained not receiving summary route with specific loopback address. Which two configurations will fix it? (Choose two.)

Options:

Configure access-list 1 permit 10.1.1.0.0.0.0.3.

Configure access-list 1 permit 10.1.1.1.0.0.0.252.

Configure access-list 1 and match under route-map Leak-Route.

Configure route-map Leak-Route permit 10 and match access-list 1.

Configure route-map Leak-Route permit 20.

Question 45

Which configuration adds an IPv4 interface to an OSPFv3 process in OSPFv3 address family configuration?

Options:

Router ospf3 1 address-family ipv4

Router(config-router)#ospfv3 1 ipv4 area 0

Router(config-if)#ospfv3 1 ipv4 area 0

Router ospfv3 1 address-family ipv4 unicast

Question 46

Which SNMP verification command shows the encryption and authentication protocols that are used in

SNMPV3?

Options:

show snmp group

show snmp user

show snmp

show snmp view

Question 47

Which statement about MPLS LDP router ID is true?

Options:

If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.

The loopback with the highest IP address is selected as the router ID.

The MPLS LDP router ID must match the IGP router ID.

The force keyword changes the router ID to the specified address without causing any impact.

Question 48

Which statement about IPv6 ND inspection is true?

Options:

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Question 49

Refer to the exhibit.

What is the result of applying this configuration?

Options:

The router can form BGP neighborships with any other device.

The router cannot form BGP neighborships with any other device.

The router cannot form BGP neighborships with any device that is matched by the access list named “BGP”.

The router can form BGP neighborships with any device that is matched by the access list named “BGP”.

Question 50

Which list defines the contents of an MPLS label?

Options:

20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

Question 51

Refer to the exhibit. an engineer is trying to get 192.168.32.100 forwarded through 10.1.1.1, but it was forwarded through 10.1.1.2. What action forwards the packets through 10.1.1.1?

Options:

Configure EIGRP to receive 192.168.32.0 route with lower admin distance.

A. Configure EIGRP to receive 192.168.32.0 route with longer prefix than /19.

A. Configure EIGRP to receive 192.168.32.0 route with lower metric.

A. Configure EIGRP to receive 192.168.32.0 route with equal or longer prefix than /24.

Question 52

After some changes in the routing policy, it is noticed that the router in AS 45123 is being used as a transit AS router for several service provides. Which configuration ensures that the branch router in AS 45123 advertises only the local networks to all SP neighbors?

Options:

Option A

Option B

Option C

Option D

Question 53

Refer to the exhibit.

Users report that IP addresses cannot be acquired from the DHCP server. The DHCP

server is configured as shown. About 300 total nonconcurrent users are using this DHCP server, but none of them are active for more than two hours per day. Which action fixes the issue within the current resources?

Options:

Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool

Configure the DHCP lease time to a smaller value

Configure the DHCP lease time to a bigger value

Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool

Question 54

Refer to the exhibit.

An engineer is trying to block the route to 192.168.2.2 from the routing table by using the

configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?

Options:

Use an extended access list instead of a standard access list.

Change sequence 10 in the route-map command from permit to deny.

Use a prefix list instead of an access list in the route map.

Add this statement to the route map: route-map RM-OSPF-DL deny 20.

Question 55

An engineer is trying to copy an IOS file from one router to another router by using TFTP. Which two actions are needed to allow the file to copy? (Choose two.)

Options:

Copy the file to the destination router with the copy tftp: flash: command

Enable the TFTP server on the source router with the tftp-server flash: command

TFTP is not supported in recent IOS versions, so an alternative method must be used

Configure a user on the source router with the username tftp password tftp command

Configure the TFTP authentication on the source router with the tftp-server authentication local command

Question 56

Refer to the exhibit.

Why is the remote NetFlow server failing to receive the NetFlow data?

Options:

The flow exporter is configured but is not used.

The flow monitor is applied in the wrong direction.

The flow monitor is applied to the wrong interface.

The destination of the flow exporter is not reachable.

Question 57

Refer to the exhibit.

A network engineer for AS64512 must remove the inbound and outbound traffic from link A during maintenance without closing the BGP session so that there ............ a backup link over link A toward the ASN. Which BGP configuration on R1 accomplishes this goal?

Options:

Option A

Option B

Option C

Option D

Question 58

Refer to the exhibit.

An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+. Which action produces the desired configuration?

Options:

Add the aaa authentication login default none command to the global configuration.

Replace the capital “C” with a lowercase “c” in the aaa authentication login Console local command.

Add the aaa authentication login default group tacacs+ local-case command to the globalconfiguration.

Add the login authentication Console command to the line configuration

Question 59

What is a prerequisite for configuring BFD?

Options:

Jumbo frame support must be configured on the router that is using BFD.

All routers in the path between two BFD endpoints must have BFD enabled.

Cisco Express Forwarding must be enabled on all participating BFD endpoints.

To use BFD with BGP, the timers 3 9 command must first be configured in the BGP routing process.

Question 60

Refer to Exhibit.

Which statement about redistribution from BGP into OSPF process 10 is true?

Options:

Network 172.16.1.0/24 is not redistributed into OSPF.

Network 10.10 10.0/24 is not redistributed into OSPF

Network 172.16.1.0/24 is redistributed with administrative distance of 1.

Network 10.10.10.0/24 is redistributed with administrative distance of 20.

Question 61

Refer to the exhibit. The remote server is failing to receive the NetFlow data Which action resolves the issue?

Options:

Modify the flow transport command transport udp 2055 to move under flow monitor profile.

Modify the interlace command to Ip flow monitor FLOW-MONITOR-1 Input.

Modify the udp port under flow exporter profile to Ip transport udp 4739.

Modify the flow record command record v4_r1 to move under flow exporter profile.

Question 62

Refer to the exhibit.

To provide reachability to network 10.1.1.0 /24 from R5, the network administrator redistributes EIGRP into OSPF on R3 but notices that R4 is now taking a ........... path through R5 to reach 10.1.1.0/24 network. Which action fixes the issue while keeping the reachability from R5 to 10.1.1.0/24 network?

Options:

Change the administrative distance of the external EIGRP to 90.

Apply the outbound distribution list on R5 toward R4 in OSPF.

Change the administrative distance of OSPF to 200 on R5.

Redistribute OSPF into EIGRP on R4

Question 63

Refer to the exhibit. A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source The configuration did not work as desired Which service must be enabled to resolve the issue?

Options:

Enter the service timestamps log datetime localtime global command.

Enter the service timestamps log datetime synchronize global command.

Enter the service timestamps log datetime console global command.

Enter the service timestamps log datetime clock-period global command

Question 64

Refer to the exhibit.

The network administrator must mutually redistribute routes at the Chicago router to the LA and NewYork routers. The configuration of the Chicago router is this:

After the configuration, the LA router receives all the NewYork routes, but NewYork router does not receive any LA routes. Which set of configurations fixes the problem on the Chicago router?

Options:

Option A

Option B

Option C

Option D

Question 65

Refer to the exhibit.

An engineer wanted to set a tag of 30 to route 10 1.80.65/32 but it failed How is the issue fixed?

Options:

Modify route-map ospf-to-eigrp permit 30 and match prefix-list ccnp2.

Modify route-map ospf-to-eigrp permit 10 and match prefix-list ccnp2.

Modify prefix-list ccnp3 to add 10.1.64.0/20 le 24

Modify prefix-list ccnp3 to add 10.1.64.0/20 ge 32

Question 66

Refer to the exhibit. Which action restores the routes from neighbors while still filtering 1.1.1.0/24?

Options:

Add a second line in the access list to permit any.

Modify the route map to permit the access list instead of deny it

Modify the access list to deny instead of permit it.

Add a second sequence in the route map permit 20

Question 67

An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network. Which BGP attribute must the engineer configure to avoid using the high-delay ISP link if the second ISP link is up?

Options:

LOCAL_PREF

MED

WEIGHT

AS-PATH

Question 68

Refer to Exhibit.

A network administrator added one router in the Cisco DNA Center and checked its discovery and health from the Network Health Dashboard. The network administrator observed that the router is still showing up as unmonitored. What must be configured on the router to mount it in the Cisco DNA Center?

Options:

Configure router with NetFlow data

Configure router with the telemetry data

Configure router with routing to reach Cisco DNA Center

Configure router with SNMPv2c or SNMPv3 traps

Question 69

What is the minimum time gap required by the local system before putting a BFD control packet on the wire?

Options:

Detect Mult

Required Min Echo RX Interval

Desired Min TX Interval

Required Min RX Interval

Question 70

Refer to the exhibit.

A client is concerned that passwords are visible when running this show archive log config all.

Which router configuration is needed to resolve this issue?

Options:

MASS-RTR(config-archive-log-cfg)#password encryption aes

MASS-RTR(config)#aaa authentication arap

MASS-RTR(config)#service password-encryption

MASS-RTR(config-archive-log-cfg)#hidekeys

Question 71

Clients on ALS2 receive IPv4 and IPv6 addresses but clients on ALS1 receive only IPv4 addresses and not IPv6 addresses. Which action on DSW1 allows clients on ALS1 to receive IPv6 addresses?

Options:

Configure DSW1(config-if)#ipv6 helper address 2002:404:404::404:404

Configure DSW1(dhcp-config)#default-router 2002:A04:A01::A04:A01

Configure DSW1(config)#ipv6 route 2002:404:404:404:404/128 FastEthernet1/0

Configure DSW1(config-if)#ipv6 dhcp relay destination 2002:404:404::404:404 GigabitEthernet1/2

Option A

Option B

Option C

Question 72

Refer to the exhibit.

A user has set up an IP SLA probe to test if a non-SLA host web server on IP address 10.1.1.1 accepts HTTP sessions prior to deployment. The probe is failing. Which action should the network administrator recommend for the probe to succeed?

Options:

Re-issue the ip sla schedule command.

Add icmp-echo command for the host.

Add the control disable option to the tcp connect.

Modify the ip sla schedule frequency to forever.

Question 73

Refer to the exhibit.

A user cannot SSH to the router. What action must be taken to resolve this issue?

Options:

Configure transport input ssh

Configure transport output ssh

Configure ip ssh version 2

Configure ip ssh source-interface loopback0

Question 74

Refer to the exhibit.

Which two actions restrict access to router R1 by SSH? (Choose two.)

Options:

Configure transport input ssh on line vty and remove sequence 30 from access list 100.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.

Remove class-map ANY from service-policy CoPP

Configure transport output ssh on line vty and remove sequence 10 from access list 199.

Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199

Question 75

Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).

router bgp 64511

network 172.16.20.0 mask 255.255.255.0

network 172.16.21.0 mask 255.255.255.0

network 172.16.22.0 mask 255.255.255.0

network 172.16.23.0 mask 255.255.255.0

aggregate-address 172.16.20.0 255.255.252.0

After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?

Options:

router bgp 64511aggregate-address 172.16.20.0 255.255.252.0 summary-only

router bgp 64511neighbor 192.168.100.1 summary-onlyneighbor 192.168.200.2 summary-only

interface E 0/0ip bgp suppress-map BLOCK_SPECIFIC!interface E 0/1ip bgp suppress-map BLOCK_SPECIFIC!ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC!router bgp 64511aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

Question 76

Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

Options:

VACL blocking broadcast frames from nonauthorized hosts

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

PVLANs with community ports associated to route advertisements and isolated ports for nodes

IPv4 ACL blocking route advertisements from nonauthorized hosts

Question 77

Refer to the exhibit.

Which interface configuration must be configured on the HUB router to enable MVPN with mGRE mode?

Options:

Option A

Option B

Option C

Option D

Question 78

Exhibit:

NTP is configured across the network infrastructure and Cisco DNA Center. An NTP issue was reported on the Cisco DNA Center at 17:15. Which action resolves the issue?

Options:

Check and resolve reachability between the WLC and the NTP server

Reset the NTP server to resolve any synchronization issues for all devices

Check and resolve reachability between Cisco DNA Center and the NTP server

Check and configure NTP on the WLC and synchronize with Cisco DNA Center

Question 79

How are MPLS Layer 3 VPN services deployed?

Options:

The RD and RT values must match under the VRR

The RD and RT values under a VRF must match on the remote PE router

The import and export RT values under a VRF must always be the same.

The label switch path must be available between the local and remote PE routers.

Question 80

What are two functions of MPLS Layer 3 VPNs? (Choose two.)

Options:

LDP and BGP can be used for Pseudowire signaling.

It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.

BGP is used for signaling customer VPNv4 routes between PE nodes.

A packet with node segment ID is forwarded along with shortest path to destination.

Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

Question 81

Refer to the exhibit.

When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic to pass through the interface Which command must be configured to resolve the issue?

Options:

access-class INTERNET in

ipv6 traffic-filter INTERNET in

ipv6 access-class INTERNET in

ip access-group INTERNET in

Question 82

A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company’s security policy. The administrator can still ping to Which interface should the access list 101 be applied to resolve this issue?

Options:

Interface G0/48 in the incoming direction

Interface G0/0 in the outgoing direction.

Interface S1/0 in the outgoing direction.

Interface G0/0 in the incoming direction.

Question 83

Refer to the exhibit.

SanFrancisco and Boston routers are choosing slower links to reach each other despite the direct links being up Which configuration fixes the issue?

Options:

Option A

Option B

Option C

Option D

Question 84

What are two characteristics of VRF instance? (Choose two.)

Options:

All VRFs share customers routing and CEF tables .

An interface must be associated to one VRF.

Each VRF has a different set of routing and CEF tables

It is defined by the VPN membership of a customer site attached to a P device.

A customer site can be associated to different VRFs

Question 85

An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted. Which action resolves the issue?

Options:

Configure all devices for SNMPv3 informs with priv.

Configure all devices for SNMPv3 informs with auth.

Configure all devices for SNMPv3 traps with auth.

Configure all devices for SNMPv3 traps with priv.

Question 86

Refer to Exhibit:

AS 111 wanted to use AS 200 as the preferred path for 172.20.5.0/24 and AS 100 as the backup. After the configuration, AS 100 is not used for any other routes. Which configuration resolves the issue?

Options:

route-mmap SETLP permit 10match ip address prefix-list PLIST1set local-preference 99route-map SETLP permit 20

route-map SETLP permit 10match ip address prefix-list PLIST1set local-preference 110route-map SETLP permit 20

router bgp 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.10.1 route-map SETLP out

router bap 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.20.2 route-map SE TLP in

Question 87

Refer to the exhibit. The DHCP client is unable to receive an IP address from the DHCP server RouterB is configured as follows:

Interface fastethernet 0/0

description Client DHCP ID 394482431

Ip address 172 31 11 255 255.255 0

ip route 172.16.1.0 255 255 255.0 10.1.1.2

Which command is required on the fastethernet 0/0 interface of RouterB to resolve this issue?

Options:

RouterB(config-if)#lp helper-address 172.31.1.1

RouterBiconfig-ififclp helper-address 255.255 255 255

RouterB(config-if)#lp helper-address 172.16.1.1

RouterB(config-if)#lp helper-address 172.16.1.2

Question 88

Exhibit:

Bangkok is using ECMP to reach to the 192.168.5.0/24 network. The administrator must configure Bangkok in such a way that Telnet traffic from 192.168.3.0/24 and192.168.4.0/24 networks uses the HongKong router as the preferred router. Which set of configurations accomplishes this task?

Options:

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2interface Ethernet0/3ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2interface Ethernet0/1ip policy route-map PBR1

Question 89

Drag and drop the MPLS concepts from the left onto the descriptions on the right.

Options:

Question 90

Refer to Exhibit.

Which two configurations allow clients to get dynamic ip addresses assigned?

Options:

Configure access-list 100 permit udp any any eq 61 as the first line

Configure access-list 100 permit udp any any eq 86 as the first line

Configure access-list 100 permit udp any any eq 68 as the first line

Configure access-list 100 permit udp any any eq 69 as the first line

Configure access-list 100 permit udp any any eq 67 as the first line

Question 91

Refer to the exhibit.

The administrator successfully logs into R1 but cannot access privileged mode commands. What should be configured to resolve the issue?

Options:

aaa authorization reverse-access

secret cisco123! at the end of the username command instead of password cisco123!

matching password on vty lines as cisco123!

enable secret or enable password commands to enter into privileged mode

Question 92

Refer to the exhibit.

The network administrator can see the DHCP discovery packet in R1. but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the FaO/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two.)

Options:

service dhcp-relay command on R1

ip dhcp option 82 command on R2

service dhcp command on R1

ip dhcp relay information enable command on R1

ip dhcp relay information trust-all command on R2

Answer:

C, E

Explanation:

1. R1 received DHCP packet and its interface was configured with the DHCP helper address. But we are not sure if R1 forward DHCP packet to R2 or not. 2. If we connect PC directly to R2 then this problem will not appear -> DHCP Server function was configured on R2.

From these facts, the most likely problem is related to Option 82. Maybe R2 ignored DHCP request packets because it was receiving these packets with the giant field set to 0.0.0.0.

By default Cisco IOS devices reject packets with zero “giaddr” and by default Cisco Catalyst switches use “giaddr” of zero when configured for DHCP snooping! Reference:

If we can run the “debug ip dhcp server packet” on R2, we may see these messages:

*Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, input feature, MCI Check(64), rtype 0, forus FALSE, sendself FALSE, mtu 0, fw dchk FALSE *Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, rcvd 2 *Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, stop process pak for forus packet

*Feb 22 23:54:57.759: DHCPD: inconsistent relay information. *Feb 22 23:54:57.759: DHCPD: relay information option exists, but giaddr is zero

We are receiving the DHCP packet from R1, source 0.0.0.0, and destination 255.255.255.255 broadcast, but if you notice from the debug output, R2, our DHCP Server, is complaining that the relay information is inconsistent. Option 82, Information Option, is contained in the packet but the GIADDR is zero. The GIADDR stands for Gateway IP Address, which is the IP Address of the relaying agent. The Option 82, Information Option, would then contain the receiving port and hostname of the Relaying Agent by default.

R2 sees the Option 82 information, signalling that the DHCP packet might have been relayed, BUT there is no relaying IP Address. This is the behavior of DHCP Snooping when enabling it on a switch, and since the switchport does not contain an IP Address, since it’s Layer 2, no GIADDR will be added.

Instead, just the Option 82 Information is added and this is the problem we have, but there are options:

1. You could trust all on R2 the DHCP Server, which will cause the server to not be so suspicious: – ip dhcp relay information trust-all – ip dhcp relay information trusted 2. Disable theaddition of Option 82 information on SW: – no ip dhcp snooping information option 3. Trust the port that is receiving the DHCP Discover: – ip dhcp snooping trust

Any of these options will fix our predicament.

[Reference: https://evilttl.com/wiki/DHCP-Snooping, But in the answer choices, we only have 1 correct answer which is the command “ip dhcp relay information trust-all”. We checked if we need any “service dhcp…” command on both IOS version 12.4 and 15.1:, , , , Therefore we only have the “service dhcp” command, we don’t have any “service dhcp-relay” command available. But the description of the “service dhcp” command says that it enables both DHCP server and relay agent so this is the best answer left., , , , ]

Question 93

Refer to the exhibit.

PC-2 failed to establish a Telnet connection to the terminal server. Which configuration resolves the issue?

Options:

Option A

Option B

Option C

Option D

Question 94

Which two protocols work in the control plane of P routers across the MPLS cloud? (choose two)

Options:

LSP

RSVP

ECMP

LDP

MPLS OAM

Question 95

Which Ipv6 first-hop security feature helps to minimize denial of service attacks?

Options:

IPv6 Router Advertisement Guard

IPv6 Destination Guard

DHCPv6 Guard

IPv6 MAC address filtering

Question 96

Drag and drop the LDP features from the left onto the descriptions on the right

Options:

Question 97

Refer to the exhibit. A network administrator redistributed the default static route into OSPF toward all internal routers to reach to Internet. Which set of commands restores reachability to the Internet by internal routers?

Options:

router ospf 1default-information originate

router ospf 1network 0.0.0.0 0.0.0.0 area 0

router ospf 1redistribute connected 0.0.0.0

router ospf 1redistribute static subnets

Question 98

Refer to the exhibit. R1 and R2 cannot establish an EIGRP adjacency. Which action establishes EIGRP adjacency?

Options:

Remove the current autonomous system number on one of the routers and change to a different value.

Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.

Question 99

In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.)

Options:

by IPv6 routing protocols to securely build neighborships without the need of authentication

by the recovery mechanism to recover the binding table in the event of a device reboot

by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways

by various IPv6 guard features to validate the data link layer address

by storing hashed keys for IPsec tunnels for the built-in IPsec features

Question 100

What are two functions of IPv6 Source Guard? (Choose two.)

Options:

It uses the populated binding table for allowing legitimate traffic.

It works independent from IPv6 neighbor discovery.

It denies traffic from unknown sources or unallocated addresses.

It denies traffic by inspecting neighbor discovery packets for specific pattern.

It blocks certain traffic by inspecting DHCP packets for specific sources.

Question 101

Refer to the exhibit.

Troubleshoot and ensure that branch B only ever uses the MPLS B network to reach HQ. Which action achieves this requirement?

Options:

Introduce an AS path filter on branch A routers so that only local prefixes are advertised into BGP

increase the local preference for all HQ prefixes received at branch B from the MPLS B network to be higher than the local preferences used on the MPLS A network

Introduce AS path prepending on the branch A MPLS B network connection so that any HQ advertisements from branch A toward the MPLS B network are prepended three times

Modify the weight of all HQ prefixes received at branch B from the MPLS B network to be higher than the weights used on the MPLS A network

Question 102

Refer to the exhibit.

An engineer identifier a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?

Options:

no spanning-tree uplinkfast

spanning-tree loopguard default

spanning-tree backbonesfast

spanning-tree portfast bpduguard

Question 103

Refer to the exhibits.

A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router. Which set of configurations fixes the issue?

Options:

Option A

Option B

Option C

Option D

Question 104

An engineer configured Reverse Path Forwarding on an interface and noticed that the routes are dropped when a route lookup fails on that interface for a prefix that is available in the routing table Which interface configuration resolves the issue?

Options:

ip verify unicast source reachable-via rx

ip verify unicast source reachable-via any

ip verify unicast source reachable-via allow-default

ip verify unicast source reachable-via 12-src

Question 105

Refer to the exhibit.

Which two actions should be taken to access the server? (Choose two.)

Options:

Modify the access list to add a second line of permit ip any

Modify the access list to deny the route to 192.168.2.2.

Modify distribute list seq 10 to permit the route to 192.168.2.2.

Add a sequence 20 in the route map to permit access list 1.

Add a floating static route to reach to 192.168.2.2 with administrative distance higher than OSPF

Question 106

Refer to the exhibits. An engineer filtered messages based on severity to minimize log messages. After applying the filter, the engineer noticed that it filtered required messages as well. Which action must the engineer take to resolve the issue?

Options:

Configure syslog level 2.

Configure syslog level 3.

Configure syslog level 4.

Configure syslog level 5.

Question 107

An engineer is troubleshooting on the console session of a router and turns on multiple debug commands. The console screen is filled with scrolling debug messages that none of the commands can be verified if entered correctly or display any output. Which action allows the engineer to see entered console commands while still continuing the analysis of the debug messages?

Options:

Configure the logging synchronous command

Configure the no logging console debugging command globally

Configure the logging synchronous level all command

Configure the term no mon command globally

Question 108

Refer to the exhibit.

A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands Which action resolves the issue?

Options:

Configure TACACS+ synchronization with the Active Directory admin group

Configure the username from a local database

Configure full access for the username from TACACS+ server

Configure an authorized IP address for this user to access this router

Question 109

Refer to the exhibit.

A company with autonomous system number AS65401 has obtained IP address block 209.165.200.224/27 fro, ARIN. The company needed more IP addresses and was assigned block209.165.202.128/27 from ISP2. An engineer is ISP1 reports they are receiving ISP2 routes from AS65401. Which configuration onR1 resolves the issue?

Options:

Option A

Option B

Option C

Option D

Question 110

Drag and drop the MPLS VPN device types from the left onto the definitions on the right.

Options:

Question 111

Refer to the exhibit.

Which action resolves the failed authentication attempt to the router?

Options:

Configure aaa authorization login command on line vty 0 4

Configure aaa authorization login command on line console 0

Configure aaa authorization console global command

Configure aaa authorization console command on line vty 0 4

Question 112

Refer to exhibit.

Routing protocols are mutually redistributed on R3 and R1. Users report intermittent connectivity to services hosted on the 10.1.1.0/24 prefix. Significant routing update changes are noticed on R3 when the show ip route profile

command is run. How must the services be stabilized?

Options:

The issue with using BGP must be resolved by using another protocol and redistributing it into EIGRP on R3

The routing loop must be fixed by reducing the admin distance of iBGP from 200 to 100 on R3

The routing loop must be fixed by reducing the admin distance of OSPF from 110 to 80 on R3

The issue with using iBGP must be fixed by running eBGP between R3 and R4

Question 113

When determining if a system is capable of support, what is the minimum time spacing required for a BFD control packet to receive once a control packet is arrived?

Options:

Desired Min TX Interval

Detect Mult

Required Min RX Interval

Required Min Echo RX Interval

Question 114

Refer to the exhibit.

R1 is connected with R2 via GigabitEthernet0/0, and R2 cannot ping R1. What action will fix the issue?

Options:

Fix route dampening configured on the router.

Replace the SFP module because it is not supported.

Fix IP Event Dampening configured on the interface.

Correct the IP SLA probe that failed.

Question 115

An engineer configured access list NON-CISCO in a policy to influence routes

What are the two effects of this route map configuration? (Choose two.)

Options:

Packets are not evaluated by sequence 10.

Packets are evaluated by sequence 10.

Packets are forwarded to the default gateway.

Packets are forwarded using normal route lookup.

Packets are dropped by the access list.

Question 116

Refer to the exhibit.

An IPv6 network was newly deployed in the environment and the help desk reports that R3 cannot SSH to the R2s Loopback interface. Which action resolves the issue?

Options:

Modify line 10 of the access list to permit instead of deny.

Remove line 60 from the access list.

Modify line 30 of the access list to permit instead of deny.

Remove line 70 from the access list.

Question 117

Drag and drop the actions from the left into the correct order on the right to configure a policy to avoid following packet forwarding based on the normal routing path.

Options:

Question 118

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

Options:

Packets are not forwarded to the specific next hop.

Packets are forwarded based on the routing table.

Packets are forwarded based on a static route.

Packets are forwarded to the specific next hop.

Question 119

Which IGPs are supported by the MPLS LDP autoconfiguration feature?

Options:

RIPv2 and OSPF

OSPF and EIGRP

OSPF and ISIS

ISIS and RIPv2

Question 120

What does the PE router convert the Ipv4 prefix to within an MPLS VPN?

Options:

VPN-IPv4 prefix combined with the 64-bit route distinguisher

48-bit route combining the IP and PE router-id

prefix that combines the ASN, PE router-id, and IP prefix

eBGP path association between the PE and CE sessions

Question 121

Refer to the exhibit.

After the network administrator rebuilds the IPv6 DHCP server, clients are not getting the IPv6 address lease. Which action resolves the issue?

Options:

Remove FE80 A8BB CCFF FEOO 5000 assigned by the IPV6 DHCP server.

Add Ipv6 dhcp sarver MY_POOL under the interface ethernet 0/0 on H1.

Add Ipv6 dhcp server MY_POOL under the interface ethernet 0/0 on R1.

Configure FF02::1:2 to discover al IPv6 OHCP cfcents

Question 122

Refer to the exhibit.

A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using SNMP and TFTP servers.

Which configuration prevents changes from unauthorized NMS and TFTP servers?

Options:

access-list 20 permit 10.221.10.11access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20snmp-server community Cisc0Us3r RO 20snmp-server community Cisc0wrus3r RW 20snmp-server tftp-server-list 20

access-list 20 permit 10.221.10.11access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20snmp-server community Cisc0wrus3r RO 20snmp-server community Cisc0Us3r RW 20snmp-server tftp-server-list 20

access-list 20 permit 10.221.10.11access-list 20 deny any log

access-list 20 permit 10.221.10.11

Question 123

Refer to the exhibit. An administrator must upload the packages conf Me to an FTP server. However, the FTP server rejected anonymous service and required users to authenticate What are the two ways to resolve the issue? (Choose two.)

Options:

Use is ftp username and ip ftp password configuration commands to specify valid FTP server credentials.

Use the copy flash:packages.conf scp: command instead and enter the FTP server credentials when prompted.

Enter the FTP server credentials directly In the FTP URL using the ftp://username:passwordQ192.0.2.40/ syntax .

Create a user on the rooter matching the username and password on the FTP server and log in before attempting the copy

Use the copy flash-packages conf ftp: command instead and enter the FTP server credent-ais when prompted.

Question 124

Refer to the exhibit.

Which two commands provide the administrator with the information needed to resolve the issue? (Choose two.)

Options:

snmp user

debug snmp engine-id

debug snmpv3 engine-id

debug snmp packet

showsnmpv3 user

Question 125

:577

Refer to the exhibit. R3 is dual-homed to two service providers for traffic redundancy. R3 prefers its outbound traffic via R2. Which set of configurations achieves this goal?

Options:

Option A

Option B

Option C

Option D

Question 126

Refer to the exhibit.

The R2 loopback interface is advertised with RIP and EIGRP using default values. Which configuration changes make R1 reach the R2 loopback using RIP?

Options:

R1(config)# router ripR1(config-router)# distance 90

R1(config)# router ripR1(config-router)# distance 100

R1(config)# router eigrp 1R1(config-router)# distance eigrp 130 120

R1(config)# router eigrp 1R1(config-router)# distance eigrp 120 120

Question 127

Which rouler takes an active role between two LDP neighbors when initiating LDP session negotiation and LDP TCP connection establishment?

Options:

with the higher IP address

with the larger number of LDP TCP neighbors

with the lowest IP address

with one interface in the MPLS backbone

Question 128

Refer to the exhibit.

An administrator is configuring a GRE tunnel to establish an EIGRP neighbor to a remote router. The

other tunnel endpoint is already configured. After applying the configuration as shown, the tunnel

started flapping. Which action resolves the issue?

Options:

Modify the network command to use the Tunnel0 interface netmask

Advertise the Loopback0 interface from R2 across the tunnel

Stop sending a route matching the tunnel destination across the tunnel

Readdress the IP network on the Tunnel0 on both routers using the /31 netmask

Question 129

A CoPP policy is applied for receiving SSH traffic from the WAN interface on a Cisco ISR4321 router.

However, the SSH response from the router is abnormal and stuck during the high link utilization. The problem is identified as SSH traffic does not match in the ACL. Which action resolves the issue?

Options:

Rate-limit SSH traffic to ensure dedicated bandwidth.

Apply CoPP on the control plane interface.

Increase the IP precedence value of SSH traffic to 6.

Apply CoPP on the WAN interface inbound direction.

Question 130

Refer to the exhibit. An engineer configured route exchange between two different companies for a migration project EIGRP routes were learned in router C but no OSPF routes were learned in router A. Which configuration allows router A to receive OSPF routes?

Options:

(config-router-af)#redistribute ospf 10 1000000 10 255 1 1500

(config-routeraf-topology)#redistribute ospf 10 metric 1000000 10 255 1 1500

(config-router-af-topology)#redistribute connected

(config-router-af-topology )£no redistribute ospf 10 match external 1 external 2 metric 1000000 10 255 1 1500

Question 131

A network administrator added a new spoke site with dynamic IP on the DMVPN network. Which configuration command passes traffic on the DMVPN tunnel from the spoke router?

Options:

ip nhrp registration ignore

ip nhrp registration no-registration

ip nhrp registration dynamic

ip nhrp registration no-unique

Question 132

Refer to the exhibit An engineer configured NetFlow but cannot receive the flows from R1 Which two configurations resolve the issue? (Choose two )

Options:

Option A

Option B

Option C

Option D

Option E

Question 133

Refer to the exhibit.

R1 is configured with uRPF, and ping to R1 is failing from a source present in the R1 routing table via the GigatxtEthernet 0/0 interface. Which action resolves the issue?

Options:

Remove the access list from the interface GigabrtEthernet 0/0

Modify the uRPF mode from strict to loose

Enable Cisco Express Forwarding to ensure that uRPF is functioning correctly

Add a floating static route to the source on R1 to the GigabitEthernet 0/1 interface

Question 134

Refer to the exhibit R1 cannot establish a neighbor relationship with R2 Which action resolves the issue"?

Options:

Configure the mtu Ignore command on the Interfaces of R1 and R2

Configure the ip ospf network point-to-point command on the interfaces of R1 and R2

Configure the ip ospf network broadcast command on the interfaces of R1 and R2

Configure the neighbor 2.2.2.2 command on R1 under the OSPF process

Question 135

Refer to the exhibit A network engineer notices that R1 and R2 cannot establish an eBGP peering. The following messages appear in the log:

Which configuration must the engineer apply to R1 to restore the eBGP peering?

Options:

Option A

Option B

Option C

Option D

Question 136

A customer is running an mGRE DMVPN tunnel over WAN infrastructure between hub and spoke sites. The existing configuration allows NHRP to add spoke routers automatically to the multicast NHRP mappings. The customer is migrated the network from IPv4 to the IPv6 addressing scheme for those spokes’ routers that support IPv6 and can run DMVPN tunnel over the IPv6 network. Which configuration must be applied to support IPv4 and IPv6 DMVPN tunnel on spoke routers?

Options:

Tunnel mode ipv6ip 6to4

Tunnel mode ipv6ip isatap

Tunnel mode ipv6ip auto-tunnel

Tunnel mode ipv6ip 6rd

Question 137

Refer to the exhibit. An engineer configured summarization for the R1 loopback addresses and failed. Which action permits the successful advertisement of the R1 loopback addresses?

Options:

Configure EIGRP 100 with a network statement for loopback 0 and configure and redistribute the static route for loopback 50.

Configure EIGRP 100 with a network statement for loopback 0 and redistribute the connected route for loopback 50.

Configure EIGRP 100 with a network statement for loopback 0 and remove the leak map for loopback 50.

Configure 100.1.1.1 permit statement in the prefix list LOPPBACK50 and redistribute the connected route for loopback 50.

Question 138

In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router. Which command is required on both spoke routers to communicate directly to one another?

Options:

ip nhrp map dynamic

ip nhrp shortcut

ip nhrp nhs multicast

ip nhrp redirect

Question 139

Refer to the exhibit.

An engineer configured NetFlow to capture traffic information through the router, but it iOS not working as expected. Which action captures the flow information from this router to the collector?

Options:

Change the interface configuration FLOW-MONITOR-1 from input to output.

Configure a flow exporter under flow FLOW-MONITOR-1.

Configure more than one flow exporter destination addresses.

Change the flow exporter transport protocol from UDP to TCP

Question 140

Refer to the exhibit.

The static route is not present in the routing table of an adjacent OSPF neighbor router. Which action resolves the issue?

Options:

Configure the next hop of 10.20.20.1 in the prefix list DMZ-STATIC

Configure the next-hop interface at the end of the static router for it to get redistributed

Configure a permit 20 statement to the route map to redistribute the static route

Configure the subnets keyword in the redistribution command

Question 141

Refer to the exhibit.

A network engineer applied a filter for LSA traffic on OSPFv3 interarea routes on the area 5 ABR to protect advertising the internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes. After the respective route filtering configuration is applied on the ABR, area 5 routes are not visible on any of the areas. How must the filter list be applied on the ABR to resolve this issue?

Options:

in the “in” direction for area 5 on router R1

in the “out” direction for area 5 on router R1

in the “in” direction for area 20 on router R2

in the “out” direction for area 20 on router R2

Question 142

Refer to the exhibit. An engineer applied filter on R1 The interface flapped between R1 and R2 and cleaning the BGP session did not restore the BGP session and failed Which action must the engineer take to restore the BGP session from R2 to R1?

Options:

Apply the IPv6 traffic filter in the outbound direction on the interface

ICMPv6 must be permitted by the IPv6 traffic filter

Enable the BGP session, which went down when the session was cleared.

Swap the source and destination IP addresses in the IPv6 traffic filter

Question 143

Exhibit.

Refer to the exhibit. A network is configured for EIGRP equal-cost load balancing, but the traffic destined to the servers is not load balanced. Link metrics from router R2 to R3 and R4 are the same. Which delay value must be configured to resolve the issue?

Options:

208 oon R3 E0/0

120 on R4 E0/1

120/on R3 E0/1

2200 on R4 E0/1

Question 144

Refer to the exhibit.

The connected routers do not show up as OSPF neighbors. Which action resolves the issue?

Options:

Change the R1 dead timer to 20.

Change the R2 dead timer to 20.

Change the R2 hello timer to 20.

Change the R1 hello timer to 20.

Question 145

Refer to the exhibit. An engineer Is troubleshooting a routing loop on the network to reach the 172.16.3.0/16 from the OSPF domain. Which configuration on router R1 resolves the Issue?

Options:

Option A

Option B

Option C

Option D

Question 146

Refer to the exhibit. An engineer is investigating an OSPF issue reported by the Cisco DNA Assurance Center. Which action resolves the issue?

Options:

One of the neighbor links is down Bring the interface up by running shut and no shut

One of the interfaces is using the wrong MTU Match interface MTU on both links

An ACL entry blocking multicast on the interfaces Allow multicast through the interface ACL

One of the interfaces is using the wrong authentication Match interface authentication on both links

Question 147

Refer to the exhibit. An engineer configured SNMP traps to record spoofed packets drop of more than 48000 a minute on the ethernet0/0 interlace. During an IP spoofing attack, the engineer noticed that no notifications have been received by the SNMP server. Which configuration resolves the issue on R1?

Options:

ip verity unicast notification threshold 48000

ip verify unicast notification threshold 8000

ip verify unicast notification threshold 800

ip verify unicast notification threshold 80

Question 148

Refer to the exhibit. After recovering from a power failure. Ethernet0/1 stayed down while Ethernet0/0 returned to the up/up state The default route through ISP1 was not reinstated m the routing table until Ethernet0/1 also came up Which action resolves the issue?

Options:

Reference the track object 1 in both static default routes

Remove the references to the interface names from both static default routes

Configure the default route through ISP1 with a higher administrative distance than 2.

Add a static route to the 8 8.8 8/32 destination through the next hop 203.0.113.1

Question 149

Refer to the exhibit.

An engineer configured NetFlow on R1, but the NMS server cannot see the flow from R1. Which configuration resolves the issue?

Options:

flow monitor Flowmonitor1destination 10.221.10.11

flow exporter FlowAnalyzer1destination 10.221.10.11

interface Ethernet0/1flow-destination 10.221.10.11

interface Ethernet0/0flow-destination 10.221.10.11

Question 150

A network administrator is troubleshooting a failed AAA login issue on a Cisco Catalyst c3560 switch. When the network administrator tries to log in with SSH using TACACS+ username and password credentials, the switch is no longer authenticating and is failing back to the local account. Which action resolves this issue?

Options:

Configure ip tacacs source-interface GigabitEthernet 1/1

Configure ip tacacs source-ip 192.168.100.55

Configure ip tacacs-server source-ip 192.168.100.55

Configure ip tacacs-server source-interface GigabitEthernet 1/1

Question 151

Refer to the exhibit.

A network administrator is troubleshooting IPv6 address assignment for a DHCP client that is not getting an IPv6 address from the server.

Which configuration retrieves the client IPv6 address from the DHCP server?

Options:

ipv6 address autoconfig command on the interface

ipv6 dhcp server automatic command on DHCP server

ipv6 dhcp relay-agent command on the interface

service dhcp command on DHCP server

Question 152

Which IPv6 first hop security feature controls the traffic necessary for proper discovery of neighbor device operation and performance?

Options:

RA Throttling

Source or Destination Guard

ND Multicast Suppression

IPv6 Snooping

Question 153

A DMVPN network is preconfigured with tunnel 0 IP address 192.168.1.254 on the HUB, IP connectivity, crypto policies, profiles, and EIGRP AS 100. The NHRP password is ccnp123, and the network ID and tunnel key is EIGRP ASN Do not introduce a static route. Configure DMVPN connectivity between routers BR1 and BR2 to the HUB router using physical interface as the tunnel source to achieve these goals:

Options:

Question 154

Refer to the exhibit. Which configuration resolves the issue?

Options:

Option A

Option B

Option C

Option D

Question 155

Network engineer must configure an ElGRP stub router at a site that advertises only connected and summary routes. Which configuration performs this task?

Options:

Option A

Option B

Option C

Option D

Question 156

Refer to the Exhibit.

R1 and R2 use IGP protocol to route traffic between AS 100 and AS 200 despite being configured to use BGP. Which action resolves the issue and ensures the use of BGP?

Options:

Configure distance to 100 under the EIGRP process of R1 and R2.

Remove distance commands under BGP AS 100 and AS 200.

Remove distance commands under BGP AS 100.

Configure distance to 100 under the OSPF process of R1 and R2

Question 157

Refer to the exhibit.

An administrator is attempting to disable the automatic logout after a period of inactivity. After logging out the console stopped responding to all keyword inputs. Remote access through SSH still work resolves the issue?

Options:

Configure the exec command on line con 0.

Configure the absolute-timeout command on line con 0.

Configure the default exec-timeout command on line con 0.

Configure the no exec-timeout command on line con 0.

Question 158

:586

While BGP internet routes are redistributed to a lower class of router via RIP. packets are being dropped and routes are failing to be distributed in RIP. Which action resolves the issue?

Options:

Use OSPF instead of RIP to accept all BGP routes.

Use the input-queue command to prevent the loss of packets.

Use WFQ in the output queue of the high-performance router.

Use RIP V2 to be able to use classless networks from BGP

Question 159

Options:

Question 160

Refer lo lhe exhibit. The Customer Edge rouler wants to use AS 100 as the preferred ISP for all external routes and ISP-2 as a backup.

After this configuration, all the backup routes have disappeared from the BGP table on the Customer Edge router. Which set of configurations resolves the issue on the Customer Edge router?

Options:

Option A

Option B

Option C

Option D

Question 161

Refer to the exhibit.

An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead

of current best path. Which action resolves the issue?

Options:

Configure AS_PATH prepend for the current best path

Configure higher MED to select as the best path

Configure AS_PATH prepend for the desired best path

Configure lower LOCAL_PREF to select as the best path

Question 162

What is the function of BFD?

Options:

It provides uniform failure detection regardless of media type.

It creates high CPU utilization on hardware deployments.

It negotiates to the highest version if the neighbor version differs.

It provides uniform failure detection on the same media type.

Question 163

What is considered the primary advantage of running BFD?

Options:

reduction in time needed to detect Layer 2 switched neighbor failures

reduction in time needed to detect Layer 3 routing neighbor failures

reduction in CPU needed to detect Layer 2 switch neighbor failures

reduction in CPU needed to detect Layer 3 routing neighbor failures

Question 164

Which routing protocol is used by the PE router to advertise routes to a CE router without redistribution or static after removing the RD tag from the P router?

Options:

IS-IS

OSPF

BGPIPv4

MP-BGP

Question 165

A customer reports that traffic is not passing on an EIGRP enabled multipoint interface on a router configured as below:

interface Serial0/0

no ip address

interface Server0/0/0.9 multipoint

ip address 10.1.1.1 255.255.255.248

ip split-horizon eigrp 1

Which action resolves the issue?

Options:

Enable poison reverse

Enable split horizon

Disable poison reverse

Disable split horizon

Question 166

What is LDP label binding?

Options:

neighboring router with label

source prefix with label

destination prefix with label

two routers with label distribution session

Question 167

Options:

access-list 20 permit 10.221.10.12

snmp-server group NETVIEW v2c priv read NETVIEW access 20

snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22

access-list 20 permit 10.221.10.11

Question 168

Refer to the exhibit.

A prefix list is created to filter routes inbound to an EIGRP process except for network 10 prefixes After the prefix list is applied no network 10 prefixes are visible in the routing table from EIGRP. Which configuration resolves the issue?

Options:

ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9.

ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8

ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9 ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

Question 169

Refer to lhe exhibit. APC is configured to obtain an IP address automatically, but it receives an IP address only from the 169.254.0.0 subnet The DHCP server logs contained no DHCPDISCOVER message from the MAC address of the PC. Which action resolves the issue?

Options:

Configure an ip helper-address on the router to forward DHCP messages to the server.

Configure DHCP Snooping on the switch to forward DHCP messages to the server.

Configure a DHCP reservation on the server for the PC.

Configure a static IP address on the PC and exclude it from the DHCP pool.

Question 170

Refer to the exhibit.

During ISP router maintenance, the network produced many alerts because of the flapping interface. Which configuration on R1 resolves the issue?

Options:

no snmp trap link-status

snmp trap link-status down

snmp trap ip verify drop-rate

ip verify drop-rate notify hold-down 60

Question 171

Refer to the exhibit.

The none area 0 routers in OSPF still receive more specific routes of 10.1.1.0.10.1.2.0.10.1.3.0 from area 0. Which action resolves the issue?

Options:

Configure route summarization on OSPF-enabled interfaces.

Summarize by using the summary-address 10.1.0.0 255.255.252.0 command.

Summarize by using the area range command on ABRs

Configure the summary-address 10.1.0.0 255.255.252.0 command under OSPF process.

Question 172

Refer to the exhibit. A customer finds that traffic from the application server (192.168.1.1) to the HUB site passes through a congested path that causes random packet drops. The NOC team influences the BGP path with MED on RB. but RD still sees that traffic coming from RA is not taking an alternate route. Which configuration resolves the issue?

Options:

Option A

Option B

Option C

Option D

Question 173

Refer to the exhibit.

A network administrator notices these console messages from host 10.11.110.12 originating from interface E1/0. The administrator considers this an unauthorized attempt to access SNMP on R1. Which action prevents the attempts to reach R1 E1/0?

Options:

Configure IOS control plane protection using ACL 90 on interface E1/0

Configure IOS management plane protection using ACL 90 on interface E1/0

Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12

Add a permit statement including the host 10.11.110.12 into ACL 90

Question 174

Refer to me exhibit Traffic from R3 to the central site does not use alternate paths when R3 cannot reach 10 10 10 2 Traffic on R3 destined to R4 takes an alternate route via 10 10 10.6 when 10 10 10 4 is not accessible from R3 Which configuration switches traffic destined to 10 10 10 2 from R3 on the alternate path’’

Options:

R3(config)#ip route 192.168.10.1 255.255.265.255 10.10.10.2 track 20

R2(config)#ip route 10.10 10 3 255 255.255 255 10.0.0.6

R3(config)#track( 20 ip sla 20 reachability

R6(config)#ip route 10.10.10 3 255.255.255.255 10.0.0.30

Question 175

Refer to the exhibit.

A loop occurs between R1, R2, and R3 while EIGRP is run with poison reverse enabled. Which action prevents the loop between R1, R2, and R3?

Options:

Configure route tagging

Enable split horizon

Configure R2 as stub receive-only

Configure route filtering

Question 176

The summary route is not shown in the RouterB routing table after this below configuration on Router_A

Which Router_A configuration resolves the issue by advertising the summary route to Router B?

Options:

Option A

Option B

Option C

Option D

Question 177

Refer to the exhibit. An engineer must configure a per VRF for TACACS+ for company A. Which configuration on RTG-1 accomplishes the task?

Options:

Option A

Option B

Option C

Option D

Question 178

Which table is used to map the packets in an MPLS LSP that exit from the same interface, via the same next hop, and have the same queuing policies?

Options:

RIB

FEC

LDP

CEF

Question 179

Refer to the exhibit After a misconfiguration by a junior engineer, the console access to router A is not working Which configuration allows access to router A?

Options:

Option A

Option B

Option C

Option D

Question 180

An engineer must establish a connection between two CE routers for two customers with overlapping IP addresses Customer_a is connected to interfaces Gig0/0, and Customer_b is connected to interfaces Gig0/1. Routers CE1 and CE2 are configured as follows:

Drag and drop the code snippets from the right onto the boxes in the configuration to establish the needed connection. Snippets may be used more than once.

Options:

Load More 300-410 Questions

Summer Special Flat 65% Limited Time Discount offer - Ends in 0d 00h 00m 00s - Coupon code: netdisc

Cisco 300-410 Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Exam Practice Test

Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Questions and Answers

Testing Engine

PDF + Testing Engine

PDF Study Guide

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

Options:

Answer: