Cisco 300-410 Exam Questions Free Practice Test

Viewing page 11 out of 13 pages

Viewing questions 151-165 out of questions

Questions # 151:

What are two features of BFD? (Choose two.)

Options:

scalable

replaces hello messages

reliable

intensive on CPU for Layer 2 links

requires routing protocols

Expert Solution

Questions # 152:

A network administrator opens a telnet connection to the router and gets the message:

R1#telnet 10.1.1.2

Trying 10 1.1 2 Open

(Connection to 10.1.1.2 closed by foreign host)

Router R2 is configured with enable secret and password commands. Which action resolves the issue?

Options:

Configure the logging synchronous command on line vty.

Configure the exec command on line vty.

Configure the login local command on line vty

Configure the enable password command on line vty.

Expert Solution

Questions # 153:

Refer to the exhibit.

Question # 153

Refer to the exhibit R1 cannot authenticate via TACACS Which configuration resolves the issue?

Question # 153

Options:

Option A

Option B

Option C

Option D

Expert Solution

Questions # 154:

Question # 154

Refer to the exhibit. Which action resolves the issue?

Options:

Establish connectivity between the NTP server and the switch.

Configure the local time on Cisco DNA Center

Configure the local time on the SW1 device

Establish connectivity between the NTP server and Cisco DNA Center.

Expert Solution

Questions # 155:

Refer to the exhibit.

Question # 155

An engineer must block access to the console ports for all corporate remote Cisco devices based on the recent corporate security policy but the security team stilt can connect through the console port. Which configuration on the console port resolves the issue?

Options:

transport input telnet

no exec

exec 0.0

Expert Solution

Questions # 156:

Refer to the exhibit.

Question # 156

An engineer cannot copy the IOS.bin file from the FTP server to the switch.

Which action resolves the issue?

Options:

Allow file permissions to download the file from the FTP server.

Add the IOS.bin file, which does not exist on FTP server.

Make memory space on the switch flash or USB drive to download the file.

Use the copy flash:/ ftp://cisco@10.0.0.2/IOS.bin command.

Expert Solution

Questions # 157:

Which router attaches the VPN label to incoming packets from CE routing?

Options:

CE router

core router

P router

PE router

Expert Solution

Questions # 158:

Question # 158

Refer to the exhibit An engineer must ensure that R3 sees only type 1 and 2 LSAs in area 1. Which command must the engineer apply on R2?

Options:

Area 1 stub nssa

Area 1nssa no-summary

Area a stub no-summary

Area 1 stub

Expert Solution

Questions # 159:

A company is expanding business by opening 35 branches over the Internet. A network engineer must configure DMVPN at the branch routers to connect with the hub router and allow NHRP to add spoke routers securely to the multicast NHRP mappings automatically Which configuration meets this requirement at the hub router?

Question # 159

Options:

Option A

Option B

Option C

Option D

Expert Solution

Questions # 160:

Refer to the exhibit.

Question # 160

After a new regional office is set up,not all guests can access the internet via guest Wi

Fi. Clients are getting the correct IP address from guest Wi-Fi VLAN 364. which action resolves the issue ?

Options:

Allow 10.66.46.0/23 in the outbound ACL

Allow DNS traffic through the outbound ACL

Allow DNS traffic through the inbound ACL

Allow 10.66.46.0/23 in the inbound ACL

Expert Solution

Questions # 161:

An engineer is implementing a coordinated change with a server team. As part of the change, the engineer must configure interlace GigabitEthernet2 in an existing VRF "RED" then move theinterface to an existing VRF "BLUE" when the server team is ready. The engineer configured interface GigabitEthemet2 in VRF "RED"

Question # 161

Which configuration completes the change?

Options:

interface GigabitEthernet2no ip addressvrf forwarding BLUE

interface GigabitEthernet2no vrf forwarding REDvrf forwarding BLUEip address 10.0.0.0 255.255.255.254

interface GigabitEthernet2no vrf forwarding REDvrf forwarding BLUE

interface GigabitEthernet2no ip addressip address 10.0.0.0 255.255.255.254vrf forwarding BLUE

Expert Solution

Questions # 162:

Refer to the exhibit.

Question # 162

An administrator configured a Cisco router for TACACS authentication, but the router is using the local enable password instead Which action resolves the issue?

Options:

Configure the aaa authentication login admin group admin local enable command instead.

Configure the aaa authentication login admin group tacacs* local enable none command instead.

Configure the aaa authentication login admin group tacacs* local if-authenticated command instead.

Configure the aaa authentication login default group admin local if-authenticated command instead.

Expert Solution

Questions # 163:

Configure individual VRFs for each customer according to the topology to achieve these goals :

Question # 163

SW1

Question # 163

SW2

Question # 163

SW3

Question # 163

Expert Solution

Answer

Answer:

See the solution below in Explanation.

Explanation

Solution:

Use cu-red under interfaces facing SW1 & SW3:

On R1:

interface Ethernet0/0

ip vrf forwarding cu-red

ip address 192.168.1.254 255.255.255.0

Check reachability to SW1:

R1#ping vrf cu-red 192.168.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

On R2:

interface Ethernet0/0

ip vrf forwarding cu-red

ip address 192.168.2.254 255.255.255.0

Check reachability to SW3:

R2#ping vrf cu-red 192.168.2.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Use vrf cu-green for SW2 & SW4:

On R1:

interface Ethernet0/1

ip vrf forwarding cu-green

ip address 192.168.20.254 255.255.255.0

Test reachability to SW2:

R1#ping vrf cu-green 192.168.20.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.22.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

On R2:

interface Ethernet0/1

ip vrf forwarding cu-green

ip address 192.168.22.254 255.255.255.0

Test reachability to SW4:

R2#ping vrf cu-green 192.168.22.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

On R1:

interface Ethernet0/2.100

mpls ip

interface Ethernet0/2.200

mpls ip

Configure BGP:

router bgp 65000

neighbor 10.10.10.2 remote-as 65000

neighbor 10.10.20.2 remote-as 65000

address-family vpnv4

neighbor 10.10.10.2 activate

neighbor 10.10.20.2 activate

exit-address-family

address-family ipv4 vrf cu-green

redistribute connected

exit-address-family

address-family ipv4 vrf cu-red

redistribute connected

exit-address-family

R1(config)#ip vrf cu-red

R1(config-vrf)#route-target both 65000:100

R1(config)#ip vrf cu-green

R1(config-vrf)#route-target both 65000:200

On R2:

interface Ethernet0/2.100

mpls ip

interface Ethernet0/2.200

mpls ip

router bgp 65000

neighbor 10.10.10.1 remote-as 65000

neighbor 10.10.20.1 remote-as 65000

address-family vpnv4

neighbor 10.10.10.1 activate

neighbor 10.10.20.1 activate

exit-address-family

address-family ipv4 vrf cu-green

redistribute connected

exit-address-family

address-family ipv4 vrf cu-red

redistribute connected

exit-address-family

R2(config)#ip vrf cu-red

R2(config-vrf)#route-target both 65000:100

R2(config)#ip vrf cu-green

R2(config-vrf)#route-target both 65000:200

Verification:

From SW1 to SW3:

SW1#ping 192.168.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

But can’t Reach SW2 or SW4 in VRF cu-green:

SW1#ping 192.168.22.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.22.1, timeout is 2 seconds:

U.U.U

Success rate is 0 percent (0/5)

SW1#ping 192.168.20.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:

U.U.U

Success rate is 0 percent (0/5)

Same Test for SW2:

From SW2 to SW4:

SW2#ping 192.168.20.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

But can’t Reach SW3 or SW1 in VRF cu-red:

SW2#ping 192.168.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

U.U.U

Success rate is 0 percent (0/5)

SW2#ping 192.168.2.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

U.U.U

Success rate is 0 percent (0/5)

Both R1 & R2 has separate tables for VRFs cu-red and cu-green.

Questions # 164:

What is a function of IPv6 Source Guard?

Options:

It works with address glean or ND to find existing addresses.

It inspects ND and DHCP packets to build an address binding table.

It denies traffic from known sources and allocated addresses.

It notifies the ND protocol to inform hosts if the traffic is denied by it.

Expert Solution

Questions # 165:

Question # 165

Refer to the exhibit. An engineer configured NetFlow on R1, but the flows do not reach the NMS server from R1. Which configuration resolves this Issue?

Question # 165

Options:

Option A

Option B

Option C

Option D

Expert Solution

Viewing page 11 out of 13 pages

Viewing questions 151-165 out of questions

Pass the Cisco CCNP Enterprise 300-410 Questions and answers with CertsForce