Pass the Cisco CCNP Enterprise 300-410 Questions and answers with CertsForce

Viewing page 7 out of 13 pages
Viewing questions 91-105 out of questions
Questions # 91:

Refer to the exhibit.

Question # 91

Troubleshoot and ensure that branch B only ever uses the MPLS B network to reach HQ. Which action achieves this requirement?

Options:

A.

Introduce an AS path filter on branch A routers so that only local prefixes are advertised into BGP


B.

increase the local preference for all HQ prefixes received at branch B from the MPLS B network to be higher than the local preferences used on the MPLS A network


C.

Introduce AS path prepending on the branch A MPLS B network connection so that any HQ advertisements from branch A toward the MPLS B network are prepended three times


D.

Modify the weight of all HQ prefixes received at branch B from the MPLS B network to be higher than the weights used on the MPLS A network


Expert Solution
Questions # 92:

A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company’s security policy. The administrator can still ping to www.cisco.com Which interface should the access list 101 be applied to resolve this issue?

Question # 92

Options:

A.

Interface G0/48 in the incoming direction


B.

Interface G0/0 in the outgoing direction.


C.

Interface S1/0 in the outgoing direction.


D.

Interface G0/0 in the incoming direction.


Expert Solution
Questions # 93:

Refer to the exhibits.

Question # 93

When DMVPN is configured, which configuration allows spoke-to-spoke communication using loopback as a tunnel source?

Options:

A.

Configure crypto isakmp key cisco address 0.0.0.0 on the hub.


B.

Configure crypto isakmp key Cisco address 200.1.0.0 255.255.0.0 on the hub.


C.

Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes.


D.

Configure crypto isakmp key cisco address 0.0.0.0 on the spokes.


Expert Solution
Questions # 94:

Question # 94

Refer to the exhibit. R1 and R2 cannot establish an EIGRP adjacency. Which action establishes EIGRP adjacency?

Options:

A.

Remove the current autonomous system number on one of the routers and change to a different value.


B.

Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.


C.

Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.


D.

Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.


Expert Solution
Questions # 95:

Question # 95

Question # 95

Refer to the exhibit. The Los Angeles and New York routers are receiving routes from Chicago but not from each other. Which configuration fixes the issue?

Options:

A.

Interface Tunnel1no ip split-horizon eigrp 111


B.

Interface Tunnel1Ip next-hop-self elgrp 111


C.

Interface Tunnel1tunnel mode Ipsec Ipv4


D.

Interface Tunnel1tunnel protection ipsec profile IPSec-PROFILE


Expert Solution
Questions # 96:

Refer to the exhibit.

Question # 96

The network administrator configured redistribution on an ASBR to reach to all WAN networks but failed Which action resolves the issue?

Options:

A.

The route map must have the keyword prefix-list to evaluate the prefix list entries


B.

The OSPF process must have a metric when redistributing prefixes from EIGRP.


C.

The route map EIGRP->OSPF must have the 10.0.106.0/24 entry to exist in one of the three prefix lists to pass


D.

EIGRP must redistribute the 10.0.106.0/24 route instead of using the network statement


Expert Solution
Questions # 97:

Question # 97

Refer to the exhibit. The OSPF neighbor relationship is not coming up What must be configured to restore OSPF neighbor adjacency?

Options:

A.

OSPF on the remote router


B.

matching hello timers


C.

use router ID


D.

matching MTU values


Expert Solution
Questions # 98:

Refer to the exhibit.

Question # 98

PC-2 failed to establish a Telnet connection to the terminal server. Which configuration resolves the issue?

Question # 98

Options:

A.

Option A


B.

Option B


C.

Option C


D.

Option D


Expert Solution
Questions # 99:

Drag and drop the actions from the left into the correct order on the right to configure a policy to avoid following packet forwarding based on the normal routing path.

Question # 99


Expert Solution
Questions # 100:

Question # 100

Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).

router bgp 64511

network 172.16.20.0 mask 255.255.255.0

network 172.16.21.0 mask 255.255.255.0

network 172.16.22.0 mask 255.255.255.0

network 172.16.23.0 mask 255.255.255.0

aggregate-address 172.16.20.0 255.255.252.0

After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?

Options:

A.

router bgp 64511aggregate-address 172.16.20.0 255.255.252.0 summary-only


B.

router bgp 64511neighbor 192.168.100.1 summary-onlyneighbor 192.168.200.2 summary-only


C.

interface E 0/0ip bgp suppress-map BLOCK_SPECIFIC!interface E 0/1ip bgp suppress-map BLOCK_SPECIFIC!ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC


D.

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC!router bgp 64511aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC


Expert Solution
Questions # 101:

Exhibit:

Question # 101

An engineer configured R2 and R5 as route reflectors and noticed that not all routes are sent to R1 to advertise to the eBGP peers. Which iBGP routers must be configured as route reflectors to advertise all routes to restore reachability across all networks?

Options:

A.

R1 and R4


B.

R1 and R5


C.

R4 and R5


D.

R2 and R5


Expert Solution
Questions # 102:

An engineer needs dynamic routing between two routers and is unable to establish OSPF adjacency. The output of the show ip ospf neighbor command shows that the neighbor state is EXSTART/EXCHANGE. Which action should be taken to resolve this issue?

Options:

A.

match the passwords


B.

match the hello timers


C.

match the MTUs


D.

match the network types


Expert Solution
Questions # 103:

Refer to the exhibit.

Question # 103

Which two actions restrict access to router R1 by SSH? (Choose two.)

Options:

A.

Configure transport input ssh on line vty and remove sequence 30 from access list 100.


B.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.


C.

Remove class-map ANY from service-policy CoPP


D.

Configure transport output ssh on line vty and remove sequence 10 from access list 199.


E.

Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199


Expert Solution
Questions # 104:

An engineer must configure a Cisco router to initiate secure connections from the router to other devices in the network but kept failing. Which two actions resolve the issue? (Choose two.)

Options:

A.

Configure a source port for the SSH connection to initiate


B.

Configure a TACACS+ server and enable it


C.

Configure transport input ssh command on the console


D.

Configure a domain name


E.

Configure a crypto key to be generated


Expert Solution
Questions # 105:

Question # 105

Refer to the exhibit. A network administrator configured an IPv6 access list to allow TCP return traffic only, but it is not working as expected. Which changes resolve this issue?

Options:

A.

ipv6 access-list inboundpermit tcp any any syndeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound out


B.

ipv6 access-list inboundpermit tcp any any syndeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound in


C.

ipv6 access-list inboundpermit tcp any any establisheddeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound in


D.

ipv6 access-list inboundpermit tcp any any establisheddeny ipv6 any any log!interface gi0/0ipv6 traffic-filter inbound out


Expert Solution
Viewing page 7 out of 13 pages
Viewing questions 91-105 out of questions