300-410 Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Question and Answers

The TACACS+ server expects “user”, but the NT client sends “domain/user”.

The TACACS+ server refuses the user because the user is set up for CHAP.

The TACACS+ server is down, and the user is in the local database.

The TACACS+ server is down, and the user is not in the local database.

IPv6 Snooping

IPv6 Destination Guard

IPv6 Prefix Guard

IPv6 Router Advertisement Guard

172.18.46.2

192.168.1.4

172.18.16.2

192.168.1.1

Tag Distribution Protocol (TDP)

Resource Reservation Protocol (RSVP)

Border Gateway Protocol (BGP)

Label Distribution Protocol (LDP)

Configure access-list 1 permit 10.1.1.0.0.0.0.3.

Configure access-list 1 permit 10.1.1.1.0.0.0.252.

Configure access-list 1 and match under route-map Leak-Route.

Configure route-map Leak-Route permit 10 and match access-list 1.

Configure route-map Leak-Route permit 20.

Resolve tacacs+ server host IP authentication miss configuration on the R1 router

Resolve tacacs+ server reachability from the R1 router.

Configure the tacacs+ server host IP on the R1 router

Configure authorization commands in the tacacs* server for the R1 router.

nonbroadcast multiaccess

packet switching

policy-based routing

forwarding information base

The flow exporter is configured but is not used.

The flow monitor is applied in the wrong direction.

The flow monitor is applied to the wrong interface.

The destination of the flow exporter is not reachable.

BGP

LLDP

EIGRP

NHRP

Option A

Option B

Option C

Option D

set ip next-hop

set ip default next-hop

set ip next-hop recursive

set ip next-hop verify-availability

shared risk link group-disjoint

linecard-disjoint

lowest-repair-path-metric

interface-disjoint

debug ip flow

debug ip sla error

debug ip routing

debug ip packet

Remove the exceed-rate command in the class map.

Remove the class map NMS from being part of control plane policing.

Configure the CIR rate to a lower value that accommodates all the NMS tools

Separate the NMS class map in multiple class maps based on the specific protocols with appropriate CoPP actions

It detects local link failure at layer 1 and updates routing table.

It detects local link failure at layer 2 and updates routing protocols.

It has sub-second failure detection for layer 1 and layer 3 problems.

It has sub-second failure detection for layer 1 and layer 2 problems.

20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

The template has an incorrect configuration.

The software version of the template is different from the software version of the device.

The changes to the template were not committed.

The tag that was used to filter the templates does not match the device tag.

show policy-map control-plane

show policy-map

show interface | inc drop

show ip route

An authentication error with the NTP server results in an incorrect timestamp.

The keyword localtime is not defined on the timestamp service command.

The NTP server is in a different time zone.

The system clock is set incorrectly to summer-time hours.

OSPF redistributes RIP routes only if they have a tag of one.

RIP learned routes are distributed to OSPF with a tag value of one.

R1 adds one to the metric for RIP learned routes before redistributing to OSPF.

RIP routes are redistributed to OSPF without any changes.

Configure the server to use DHCP on the network with default gateway 200 30.40.100.

Configure the server with a static IP address and default gateway.

Configure the router to exclude a server IP address.

Configure the server to use DHCP on the network with default gateway 200 30.30.100.

Configure the router to exclude a server IP address and default gateway.

Network 172.16.1.0/24 is not redistributed into OSPF.

Network 10.10 10.0/24 is not redistributed into OSPF

Network 172.16.1.0/24 is redistributed with administrative distance of 1.

Network 10.10.10.0/24 is redistributed with administrative distance of 20.

It does not offer protection in environments where IPv6 traffic is tunneled.

It cannot be configured on a switch port interface in the ingress direction.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

It is not supported in hardware when TCAM is programmed.

The ip nhrp redirect command is missing on the spoke routers.

The ip nhrp shortcut command is missing on the spoke routers.

The ip nhrp redirect commands is missing on the hub router.

The ip nhrp shortcut commands is missing on the hub router.

The ip nhrp map command is missing on the hub router.

It teams and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables

It teams and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables

It team and secures binding for stateless autoconfiguration addresses in Layer 2 neighbor tables.

IPsec

TACACS+

RTBH

RADIUS

Router ospf3 1 address-family ipv4

Router(config-router)#ospfv3 1 ipv4 area 0

Router(config-if)#ospfv3 1 ipv4 area 0

Router ospfv3 1 address-family ipv4 unicast

show snmp group

show snmp user

show snmp

show snmp view

Copy the file to the destination router with the copy tftp: flash: command

Enable the TFTP server on the source router with the tftp-server flash: < filename > command

TFTP is not supported in recent IOS versions, so an alternative method must be used

Configure a user on the source router with the username tftp password tftp command

Configure the TFTP authentication on the source router with the tftp-server authentication local command

Configure BGP in the COPP-CRITICAL-7600 ACL

Configure a higher value for CIR under the default class to allow more packets during peak traffic

Configure a higher value for CIR under the class COPP-CRITICAL-7600

Configure a three-color policer instead of two-color policer under class COPP-CRITICAL-7600

Configure IP CEF to CoPP policy and BGP to work

permit tcp port 443

permit udp port 465

permit tcp port 465

permit tcp port 22

sudo maglev-config update

sudo maglev install config update

sudo maglev reinstall

sudo update config install

show ip vrf

show ip route vrf

show run vrf

show ip protocols vrf

Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool

Configure the DHCP lease time to a smaller value

Configure the DHCP lease time to a bigger value

Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool

fragmentation

COPP

ICMP redirects

ICMP unreachable messages

Filter RIP routes back into RIP when redistributing into RIP in R2

Filter OSPF routes into RIP FROM EIGRP when redistributing into RIP in R2.

Filter all routes except RIP routes when redistributing into EIGRP in R2.

Filter RIP AND OSPF routes back into OSPF from EIGRP when redistributing into OSPF in R2

Filter all routes except EIGRP routes when redistributing into OSPF in R3.

The device must be resynced to Cisco DNA Center.

The software image for the device is in install mode.

The device has lost connectivity to Cisco DNA Center.

The software image for the device is in bundle mode

UDP

SCTP

TCP

RDP

Option A

Option B

Option C

Option D

Add the aaa authentication login default none command to the global configuration.

Replace the capital “C” with a lowercase “c” in the aaa authentication login Console local command.

Add the aaa authentication login default group tacacs+ local-case command to the globalconfiguration.

Add the login authentication Console command to the line configuration

The local preference value in another neighbor statement is higher than 250.

The local preference value should be set to the same value as the weight in the route map.

The route map is applied in the wrong direction.

The weight value in another neighbor statement is higher than 200.

Detect Mult

Required Min Echo RX Interval

Desired Min TX Interval

Required Min RX Interval

They support the exchange of MPLS labels

Different customers can have overlapping IP addresses on different VPNs

They support a maximum of 512.000 routes

Each customer has its own dedicated TCAM resources

Each customer has its own private routing table.

They support IS-IS

Match the hello interval timers.

Configure the same EIGRP process IDs.

Match the authentication keys.

Configure the same autonomous system numbers.

service timestamps log uptime

clock summer-time mst recurring 2 Sunday mar 2:00 1 Sunday nov 2:00

service timestamps log datetime localtime show-timezone

clock calendar-valid

Option A

Option B

Option C

Option D

Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3

Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.

Change the mode from mode tunnel to mode transport on R3

Change the mode from mode transport to mode tunnel on R2.

Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3

Option A

Option B

Option C

Option D

E1 and E2 subnets matching access list TO-OSPF

E1 and E2 subnets matching prefix list TO-OSPF

only E2 subnets matching access list TO-OSPF

only E1 subnets matching prefix listTO-OS1

R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2 10 track 1

R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2

R1(config)#ip sla track 1

R1(config)# ip route 0.0.0.0.0.0.0.0.1.1.1.1 track 1

It was obtained directly from the next-hop server.

Data packets are process switches for this mapping entry.

NHRP mapping is for networks that are local to this router.

The mapping entry was created in response to an NHRP registration request.

The NHRP mapping entry cannot be overwritten.

HQ_R3(config)# ip sla responderHQ_R3(config)# ip sla responder icmp-echo 172.16.35.1

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 192.168.100.2

HQ R3(config)# Ip sla responderHQ R3(config)# Ip sla responder Icmp-echo 172.16.35.5

BRANCH(config)# Ip sla 1BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1

10.2.2.0/24

10.1.4.0/26

10.1.2.0/24

10.2.3.0/26

IPv6 Router Advertisement Guard

IPv6 Destination Guard

DHCPv6 Guard

IPv6 MAC address filtering

Decrease the committed burst Size of the mgmt class map

Increase the CIR of the mgmt class map

Add a new class map to match TCP traffic

Add one new entry in the ACL 120 to permit the UDP port 161

Option A

Option B

Option C

Option D

R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.

Route reflector setup requires full IBGP mesh between the routers.

In route reflector setup, only classful prefixes are advertised to other clients.

In route reflector setups, prefixes are not advertised from one client to another.

Modify line 10 of the access list to permit instead of deny.

Remove line 60 from the access list.

Modify line 30 of the access list to permit instead of deny.

Remove line 70 from the access list.

Introduce an AS path filter on branch A routers so that only local prefixes are advertised into BGP

increase the local preference for all HQ prefixes received at branch B from the MPLS B network to be higher than the local preferences used on the MPLS A network

Introduce AS path prepending on the branch A MPLS B network connection so that any HQ advertisements from branch A toward the MPLS B network are prepended three times

Modify the weight of all HQ prefixes received at branch B from the MPLS B network to be higher than the weights used on the MPLS A network

route-mmap SETLP permit 10match ip address prefix-list PLIST1set local-preference 99route-map SETLP permit 20

route-map SETLP permit 10match ip address prefix-list PLIST1set local-preference 110route-map SETLP permit 20

router bgp 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.10.1 route-map SETLP out

router bap 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.20.2 route-map SE TLP in

The issue with using BGP must be resolved by using another protocol and redistributing it into EIGRP on R3

The routing loop must be fixed by reducing the admin distance of iBGP from 200 to 100 on R3

The routing loop must be fixed by reducing the admin distance of OSPF from 110 to 80 on R3

The issue with using iBGP must be fixed by running eBGP between R3 and R4

Configure TACACS+ synchronization with the Active Directory admin group

Configure the username from a local database

Configure full access for the username from TACACS+ server

Configure an authorized IP address for this user to access this router

Option A

Option B

Option C

Option D

It uses the populated binding table for allowing legitimate traffic.

It works independent from IPv6 neighbor discovery.

It denies traffic from unknown sources or unallocated addresses.

It denies traffic by inspecting neighbor discovery packets for specific pattern.

It blocks certain traffic by inspecting DHCP packets for specific sources.

The route map must have the keyword prefix-list to evaluate the prefix list entries

The OSPF process must have a metric when redistributing prefixes from EIGRP.

The route map EIGRP- > OSPF must have the 10.0.106.0/24 entry to exist in one of the three prefix lists to pass

EIGRP must redistribute the 10.0.106.0/24 route instead of using the network statement

Configure crypto isakmp key cisco address 0.0.0.0 on the hub.

Configure crypto isakmp key Cisco address 200.1.0.0 255.255.0.0 on the hub.

Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes.

Configure crypto isakmp key cisco address 0.0.0.0 on the spokes.

Remove the current autonomous system number on one of the routers and change to a different value.

Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.

ACE

ACLS

DHCP

Binding Table

Modify route-map ospf-to-eigrp permit 30 and match prefix-list ccnp2.

Modify route-map ospf-to-eigrp permit 10 and match prefix-list ccnp2.

Modify prefix-list ccnp3 to add 10.1.64.0/20 le 24

Modify prefix-list ccnp3 to add 10.1.64.0/20 ge 32

router bgp 64511aggregate-address 172.16.20.0 255.255.252.0 summary-only

router bgp 64511neighbor 192.168.100.1 summary-onlyneighbor 192.168.200.2 summary-only

interface E 0/0ip bgp suppress-map BLOCK_SPECIFIC!interface E 0/1ip bgp suppress-map BLOCK_SPECIFIC!ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC!router bgp 64511aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

requires IPv6 snooping on Layer 2 access or trunk ports

used in service provider deployments to protect DDoS attacks

requires the user to configure a static binding

requires that validate prefix be enabled

recovers missing binding table entries

Configure all devices for SNMPv3 informs with priv.

Configure all devices for SNMPv3 informs with auth.

Configure all devices for SNMPv3 traps with auth.

Configure all devices for SNMPv3 traps with priv.

Option A

Option B

Option C

Option D

Packets are not evaluated by sequence 10.

Packets are evaluated by sequence 10.

Packets are forwarded to the default gateway.

Packets are forwarded using normal route lookup.

Packets are dropped by the access list.

RIPv2 and OSPF

OSPF and EIGRP

OSPF and ISIS

ISIS and RIPv2

Option A

Option B

Option C

Option D

vrf definition Science！interface E 0/2ip address 192.168.1.1 255.255.255.0no shut！interface E 0/3ip address 192.168.2.1 255.255.255.0no shut

vrf definition Scienceaddress-family ipv4!interface E 0/2ip address 192.168.1.1 255.255.255.0vrf forwarding Scienceno shut!interface E 0/3ip address 192.168.2.1 255.255.255.0vrf forwarding Scienceno shut

vrf definition Scienceaddress-family ipv4!interface E 0/2ip address 192.168.1.1 255.255.255.0no shut!interface E 0/3ip address 192.168.2.1 255.255.255.0no shut

vrf definition Scienceaddress-family ipv4!interface E 0/2vrf forwarding Scienceip address 192.168.1.1 255.255.255.0no shut!interface E 0/3vrf forwarding Scienceip address 192.168.2.1

R2ip route 10.1.1.1 255.255.255.255 192.168.1.1！router bgp 200neighbor 10.1.1.1 tti-security hops 1neighbor 10.1.1.1 update-source loopback 0

R2ip route 10.1.1.1 255.255.255.255 192.168.1.1！router bgp 200neighbor 10.1.1.1 disable-connected-checkneighbor 10.1.1.1 update-source loopback 0

R2ip route 10.1.1.2 255.255.255.255 192.168.1.2！router bgp 100neighbor 10.1.1.2 ttl-security hops 1neighbor 10.1.1.2 update-source loopback 0

R1ip route 10.1.1.2 255.255.255.255 192.168.1.2！router bgp 100neighbor 10.1.1.1 ttl-security hops 1neighbor 10.1.1.2 update-source loopback 0

R1ip route 10.1.1.2 255.255.255.255 192.168.1.2！router bgp 100neighbor 10.1.1.2 disable-connected-checkneighbor 10.1.1.2 update-source Loopback0

Option A

Option B

Option C

Option D

Modify the access list to use the correct IP address.

Configure the correct time range.

Modify the access list to correct the subnet mask

Configure the access list in the outbound direction.

by IPv6 routing protocols to securely build neighborships without the need of authentication

by the recovery mechanism to recover the binding table in the event of a device reboot

by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways

by various IPv6 guard features to validate the data link layer address

by storing hashed keys for IPsec tunnels for the built-in IPsec features

Change the Administrative Distance of EIGRP to 5.

Add a static route on R1 using the next hop of R3.

Remove the static route on R1.

Redistribute theR1 route to EIGRP

Fix route dampening configured on the router.

Replace the SFP module because it is not supported.

Fix IP Event Dampening configured on the interface.

Correct the IP SLA probe that failed.

The label edge router swaps labels on the received packets.

Labels are imposed in packets after the Layer 3 header.

LDP uses TCP for reliable delivery of information.

An MPLS label is a short identifier that identifies a forwarding equivalence class.

A maximum of two labels can be imposed on an MPLS packet.

Configure transport input ssh

Configure transport output ssh

Configure ip ssh version 2

Configure ip ssh source-interface loopback0

Option A

Option B

Option C

Option D

Modify the access list to add a second line of permit ip any

Modify the access list to deny the route to 192.168.2.2.

Modify distribute list seq 10 to permit the route to 192.168.2.2.

Add a sequence 20 in the route map to permit access list 1.

Add a floating static route to reach to 192.168.2.2 with administrative distance higher than OSPF

VPN-IPv4 prefix combined with the 64-bit route distinguisher

48-bit route combining the IP and PE router-id

prefix that combines the ASN, PE router-id, and IP prefix

eBGP path association between the PE and CE sessions

Modify the CoPP policy to increase the configured exceeded limit for SNMP.

Modify the access list to include snmptrap.

Modify the CoPP policy to increase the configured CIR limit for SNMP.

Modify the access list to add a second line to allow udp any any eq snmp

Packets are not forwarded to the specific next hop.

Packets are forwarded based on the routing table.

Packets are forwarded based on a static route.

Packets are forwarded to the specific next hop.

Change the administrative distance of the external EIGRP to 90.

Apply the outbound distribution list on R5 toward R4 in OSPF.

Change the administrative distance of OSPF to 200 on R5.

Redistribute OSPF into EIGRP on R4

VACL blocking broadcast frames from nonauthorized hosts

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

PVLANs with community ports associated to route advertisements and isolated ports for nodes

IPv4 ACL blocking route advertisements from nonauthorized hosts

The RD and RT values must match under the VRR

The RD and RT values under a VRF must match on the remote PE router

The import and export RT values under a VRF must always be the same.

The label switch path must be available between the local and remote PE routers.

Configure the user name on the TACACS+ server

Configure the UDP port 1812 to be allowed on the TACACS+ server

Configure the TCP port 49 to be reachable by the router

Configure the same password between the TACACS+ server and router.

Configure transport input ssh on line vty and remove sequence 30 from access list 100.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.

Remove class-map ANY from service-policy CoPP

Configure transport output ssh on line vty and remove sequence 10 from access list 199.

Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199

Configure the correct authentication password using SNMPv3 authPriv .

Configure the correct authentication password using SNMPv3 authNoPriv.

Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.

Configure correct authentication and privacy passwords using SNMPv3 authPriv.

Configure the network command to network 172.16.0.1 0.0.0.0

Configure the network command under EIGRP address family vrf CLIENT1

Configure EIGRP metrics on interface FastEthernet0/3

Configure the network command under EIGRP address family ipv4

Configure the logging synchronous command

Configure the no logging console debugging command globally

Configure the logging synchronous level all command

Configure the term no mon command globally

Configure logging history 2

Configure logging history 3

Configure logging history 4

Configure logging history 5

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

Disable IPv6 on the E0/0 interface using the no ipv6 enable command

Enable the IPv4 address family under the E0/0 interface by using the address-family ipv4 unicast command

Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E0/0 interface

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction

NYrouter ospf 1area 0 authentication message-digest

LAinterface E 0/0ip ospf message-digest-key 1 md5 Cisco123

NYinterface E 0/0no ip ospf message-digest-key 1 md5 Cisco123ip ospf authentication-key Cisco123

LAinterface E 0/0ip ospf authentication-key Cisco123

LArouter ospf 1area 0 authentication message-digest

Option

Option

Option

Option

Modify the flow transport command transport udp 2055 to move under flow monitor profile.

Modify the interlace command to Ip flow monitor FLOW-MONITOR-1 Input.

Modify the udp port under flow exporter profile to Ip transport udp 4739.

Modify the flow record command record v4_r1 to move under flow exporter profile.

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

Set a tag in the route map when redistributing EIGRP into OSPF on R1, and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

The VPNv4 address is used to advertise the MPLS VPN label.

RD is prepended to the IPv4 route to make it unique.

MP-BGP is used to allow overlapping IPv4 addresses between customers to advertisethrough the network.

The IPv4 address is needed to tag the MPLS label.

The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4prefix.

RouterB(config-if)#lp helper-address 172.31.1.1

RouterBiconfig-ififclp helper-address 255.255 255 255

RouterB(config-if)#lp helper-address 172.16.1.1

RouterB(config-if)#lp helper-address 172.16.1.2

line con 0aaa authorization consoleauthorization exec!line vty 0 4transport input ssh

line con 0aaa authorization console!line vty 0 4authorization exec

line con 0aaa authorization console priv15!line vty 0 4authorization exec

line con 0aaa authorization consoleauthorization priv15!line vty 0 4transport input ssh

Enter the transport input ssh configuration command.

Enter the terminal monitor exec command.

Enter the logging console debugging configuration command.

Enter the aaa new-model configuration command.

Route distinguishes make a unique VPNv4 address across the MPLS network.

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishes are used for label bindings

Route distinguishes define which prefixes are imported and exported on the edge router

LSP

RSVP

ECMP

LDP

MPLS OAM

ip verify unicast source reachable-via rx

ip verify unicast source reachable-via any

ip verify unicast source reachable-via allow-default

ip verify unicast source reachable-via 12-src

Include the word external in the redistribute command

Use a route-map command to redistribute OSPF external routes defined in an access list

Include the word internal external in the redistribute command

Use a route-map command to redistribute OSPF external routes defined in a prefix list.

Configure router with NetFlow data

Configure router with the telemetry data

Configure router with routing to reach Cisco DNA Center

Configure router with SNMPv2c or SNMPv3 traps

Enable the IPv4 address family under the E 0/0 interface by using the address-family Ipv4 unicast command

Disable IPv6 on the E 0/0 interface using the no ipv6 enable command

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E 0/0 interface.

Option A

Option B

Option C

Option D

Match external type to type-1

Set tags before matching into EIGRP

Set a default metric in the route map

Match OSPF and EIGR IDs

Rectify the incorrect router ID in R2.

Enable split-horizon.

Configure the network statement on the neighbor.

Resolve the incorrect metric on the link.

P and associated PE routers with IGP populate the VRF table in different VPNs.

CE routers connect to the provider network and perform LSP functionality

P routers provide connectivity between PE devices with MPLS switching.

P routers support PE to PE VPN tunnel without LSP functionality

R1 is a route reflector client of a RR with a router ID of 1.1.1.1. and the originator of the prefix has a router ID of 3.3.3.3. Both routers belong to different ASs. The prefix is not advertised to any peer and must be advertised using the network statement on R3.

R1 is a route reflector with a router ID of 3.3.3.3. and the originator of the prefix is a route reflector client, which has a router ID of 3.3.3.3. Both routers belong to the same AS Configure an aggregate address on the router with ID 1.1.1.1 for the prefix

R1 is a route reflector with a router ID of 1.111. and the originator of the prefix is a route reflector client, which has a router ID of 3.3.3.3. Both routers belong to the same AS Configure an aggregate address on the router with ID 1.1.1.1 for the prefix

R1 is a route reflector client of a RR with a router ID of 1.1.1.1. and the originator of the prefix has a router ID of 3.3.3.3. Both routers belong to the same AS. Configure an aggregate address on the router with ID 3 3.3.3 for the prefix.

Remove " local " from the aaa authentication command.

Enable AAA authorization to allow SSH connections.

Configure the username in RADIUS server database.

Modify the aaa command to replace TACACS+ with RADIUS.

Configure active FTP traffic.

Modify FTP-SERVER access list to remove established at the end.

Modify traffic filter FTP-SERVER in to the outbound direction.

Configure to permit TCP ports higher than 1023.

When a VPN route is learned from a CE device and injected into IGP, a VPN route distinguisher attribute is associated with it.

When a destination PE device receives a labeled packet, it pops the label and uses it to forward the packet to the correct CE device.

When an EIGRP internal route is redistributed into BGP by one PE and then back into EIGRP by another PE, the originating router ID for the route is changed to the router ID of the first PE

When a PE device forwards a packet received from a CE device across the provider network, it labels the packet with the label learned from the source PE device.

Change Area 11 to Area 0 between routers B and C.

Add a static route for 2001: db8:0:6::1/64 on router B RIB.

Advertise the 2001:db8: e::e/64 route on the router D OSPF process.

Enable default information to originate in IPv6 AF on router B.

R2(config-router)#no area 21 stub

R2(config_router)#area 21 virtual-link 192.168.125.5

R3(config-router)#area 21 virtual-link 192.168.125.5

R3(config-router)#no area 21 stub

Option A

Option B

Option C

Option D

Use OSPF instead of RIP to accept all BGP routes.

Use the input-queue command to prevent the loss of packets.

Use WFQ in the output queue of the high-performance router.

Use RIP V2 to be able to use classless networks from BGP

Option

Option

Option

Option

ip access-list extended R2WANpermit tcp any any eq 68

ip access-list extended R2WANpermit udp any any eq 68

ip access-list extended R2WANpermit udp any any eq 67

interface GigabitEthernet0/0ip access-group R2WAN out

Option A

Option B

Option C

Option D

Option A

Option B

Option C

Option D

Configure to match the OSPF interface speed and duplex settings on both routers.

Configure to match the OSPF interface MTU settings on both routers.

Configure to match the OSPF interface unique IP address and subnet mask on both routers.

Configure to match the OSPF interface network types on both routers.

Option A

Option B

Option C

Option D

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2interface Ethernet0/3ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2interface Ethernet0/1ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2!interface Ethernet0/3ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2!interface Ethernet0/1ip policy route-map PBR1

Unicast hellos are sent to directly connected neighbors IP addresses.

Multicast hellos are sent to the 224.0.0.2 group address.

Broadcasts hellos are sent to the 255.255.255.255 broadcast address.

Multicast hellos are sent to the 224.0.0.5 group address.

interface Loopback0vrf forwarding CCNP

interface Loopback0ip address 10.1.1.1 255.255.255.0

interface Loopback0ip address 10.1.1.1 255.255.255.0vrf forwarding CCNP

interface Loopback0ip address 10.1.1.1 255.255.255.0ip vrf forwarding CCNP

Option

Option

Option

Option

neighbor 10.103.88.14 ebgp-multihop

neighbor 10.103.88.14 next -hop-self all

neighbor 10.103.88.14 disable-connected-check

neighbor 10.103.88.14 allowas-in

Increase the bandwidth of the link between London and Barcelona

Use the network statement on London to inject the 172 16 X 0/24 networks into EIGRP.

Change the administrative distance of RIP to 150

Use the network statement on Rome to inject the 172 16 X 0/24 networks into EIGRP

Add set ip next hop 10.1.1.1 in route-map RED permit 20.

Add the continue statement in route-map RED permit 10 instead of continue 20.

Remove match ip address prefix-list 1 from route-map RED permit 10.

Remove the continue 20 statement from route-map RED permit 10

to allow intra-area routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network

to correct OSPF backdoor routing when OSPF is used as the PE-CE connection protocol *i an MPLS VPN network

to correct OSPF backdoor routing when OSPF is used as the PE-PE connection protocol m an MPLS VPN network

to allow inter-area routing when OSPF is used as the PE-CE connection protocol in a MPLS VPN network

A supported IP routing protocol must be configured on the participating routers.

OSPF Demand Circuit must run BFD on all participating routers.

ICMP must be allowed on all participating routers.

UDP port 1985 must be allowed on all participating routers.

Cisco Express Forwarding and IP Routing must be enabled on all participating routers.

R2:router eigrp 10network 181.16.0.0redistribute rip metric 1 1 1 1 1distribute-list 1 in s1!router ripnetwork 178.1.0.0redistribute eigrp 10 metric 2!access-list 1 deny 192.168.1.0access-list 1 permit anyR5:router eigrp 10network 181.16.0.0redistribute rip metric 1 1 1 1 1distribute-list 1 in s0!router ripnetwork 178.1.0.0redistribute eigrp 10 metric 2!access-list 1 deny 192.168.1.0access-list 1 permit any

R2:router eigrp 10network 181.16.0.0redistribute rip metric 1 1 1 1 1distribute-list 1 in s0!router ripnetwork 178.1.0.0redistribute eigrp 10 metric 2!access-list 1 deny 192.168.1.0access-list 1 permit anyR5:router eigrp 10network 181.16.0.0redistribute rip metric 1 1 1 1 1distribute-list 1 in s0!router ripnetwork 178.1.0.0redistribute eigrp 10 metric 2!access-list 1 deny 192.168.1.0access-list 1 permit any

R2:router eigrp 10network 181.16.0.0redistribute rip metric 1 1 1 1 1distribute-list 1 in s0!router ripnetwork 178.1.0.0redistribute eigrp 10 metric 2!access-list 1 deny 192.168.1.0access-list 1 permit anyR5:router eigrp 10network 181.16.0.0redistribute rip metric 1 1 1 1 1distribute-list 1 in s1!router ripnetwork 178.1.0.0redistribute eigrp 10 metric 2!access-list 1 deny 192.168.1.0access-list 1 permit any

R2:router eigrp 7network 181.16.0.0redistribute rip metric 1 1 1 1 1distribute-list 1 in s1!router ripnetwork 178.1.0.0redistribute eigrp 7 metric 2!access-list 1 deny 192.168.1.0access-list 1 permit anyR5:router eigrp 7network 181.16.0.0redistribute rip metric 1 1 1 1 1distribute-list 1 in s1!router ripnetwork 178.1.0.0redistribute eigrp 7 metric 2!access-list 1 deny 192.168.1.0access-list 1 permit any

R1(config)# ip sla 700R1(config-track)# delay down 30 up 20

R1(config)# ip sla 700R1(config-track)# delay down 20 up 30

R1(config)# track 700 ip sla 700R1(config-track)# delay down 30 up 20

R1(config)# track 700 ip sla 700R1(config-track)# delay down 20 up 30

Permit the route in route-map sequence 20.

Add the route in access-list 10.

Match the tag 666 for the route in the route map.

Remove route-map sequence 20.

ip access-list extended OSPF permit ospf any any

policy-map COPP class OSFP police 8000 conform-action transmit exceed-action transmit violate-action drop

control-plane service-policy input COPP

class-map match-all OSFP match access-group name OSPF

Option A

Option B

Option C

Option D

Remove the access list from the interface GigabrtEthernet 0/0

Modify the uRPF mode from strict to loose

Enable Cisco Express Forwarding to ensure that uRPF is functioning correctly

Add a floating static route to the source on R1 to the GigabitEthernet 0/1 interface

Configure reported distance greater than the feasible distance

Configure feasible distance greater than the successor ' s feasible distance.

Configure reported distance greater than the successor ' s feasible distance.

Configure feasible distance greater than the reported distance

interface E0/0no service-policy input PM-COPP!control-planeservice-policy input PM-COPP

policy-map PM-COPPclass CM-ADMINno police 500000 conform-action transmitpolice 500 conform-action transmit!control-planeservice-policy input PM-COPP

no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80

no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80access-list 100 permit tcp host 172.16.1.99 any eq 443

policy-map PM-COPPclass CM-ADMINno police 500000 conform-action transmitpolice 500 conform-action transmit

Modify the ip prefix-list ElGRP seq 10 permit 10.0.0.0/8 le 9 command.

Modify the command Modify the Ip prefix-list ElGRP seq 10 permit 10.0.0.0/8 le 32 command.

Modify the Ip prefix-list ElGRP seq 20 permit 0.0.0.0/0 le 32 command.

Modify the ip prefix-list ElGRP seq 20 permit 10.0.0.0/8 ge 9 command

It provides uniform failure detection regardless of media type.

It creates high CPU utilization on hardware deployments.

It negotiates to the highest version if the neighbor version differs.

It provides uniform failure detection on the same media type.

Change the interface configuration FLOW-MONITOR-1 from input to output.

Configure a flow exporter under flow FLOW-MONITOR-1.

Configure more than one flow exporter destination addresses.

Change the flow exporter transport protocol from UDP to TCP

authentication pre-share Test address 0.0.0.0 0.0.0.0

set pre-share Test address 0.0.0.0 0.0.0.0

crypto Ipsec key Test address 0.0.0.0 0.0.0.0

crypto isakmp key Test address 0.0.0.0 0.0.0.0

Option A

Option B

Option C

Option D

Rediscover all the router interfaces through SNMP after the router is reloaded

Save the router configuration to startup-config before reloading the router

Configure SNMP to use static OlDs referring to individual router interfaces

Configure SNMP interface index persistence on the router

Tunnel mode ipv6ip 6to4

Tunnel mode ipv6ip isatap

Tunnel mode ipv6ip auto-tunnel

Tunnel mode ipv6ip 6rd

Option A

Option B

Option C

Option D

RD(config)#router bgp B5201RD(config-router)# neighbor 10.10.10.2 update-source loopback 0

RD(config-router)# neighbor bgp 65101RB(config-router)# neighbor 10.10.10.3 ebgp-multihop 3

RB(config)# router bgp 65101RB(config)#neighbor 10.10.10.3 update-source loopback 0

RD(config)# router bgp 65201RDI(config-router)# neighbor 10.10.10.2 ebgp-multihop 3

Option A

Option B

Option C

Option D

R6(config)# ip sla responder

R6(config)# ip sla responder udp-echo ip address 10.10.10.1 port 5000

R6(config)# ip access-list extended DDOSR6(config ext-nac)# 5 permit icmp host 10.66 66.66 host 10.10.10.1

R6(config)# ip access-list extended DDOSR6(confg ext-nac)# 5 permit icmp host 10.10.10.1 host 10.66.66.66

TCP traffic will reach the destination via R2 without any changes

Add a permit 20 statement in the route map to allow TCP traffic

Allow TCP in the access list with no changes to the route map

Set IP next-hop to 10.10.12.2 under the route-map permit 10 to allow TCP traffic.

snmp user

debug snmp engine-id

debug snmpv3 engine-id

debug snmp packet

showsnmpv3 user

interface Tunnel0tunnel mode gre multipoint

interface Tunnel0 tunnel mode dvmrp

interface Tunnel0 tunnel mode ipsec ipv4

interface Tunnel0 tunnel mode ip

Option A

Option B

Option C

Option D

Option A

Option B

Option C

Option D

Option A

Option B

Option C

Option D

Dynamic ARP Inspection

IPv6 RA Guard

IPv6 ND Inspection

DHCPv6 Guard

Configure the next hop of 10.20.20.1 in the prefix list DMZ-STATIC

Configure the next-hop interface at the end of the static router for it to get redistributed

Configure a permit 20 statement to the route map to redistribute the static route

Configure the subnets keyword in the redistribution command

notification message

session message

extended discovery message

advertisement message

Configure SSH service on the router

Configure transport input all on the VTY lines to allow SSH

Configure to use the Telnet user database for SSH as well

Configure the VTY lines with login local

ip verify unicast source reachable-via rx

ip verify unicast reverse-path

ip verify unicast source reachable-via any

ip verify unicast reverse-path any

Allow stub network 10.10.202.168/30 on router R3 OSPF.

Decrease the AD to 5 OSPF route 192.168.94.0 on R1.

Increase the AD to 200 of static route 192.168.94.0 on R3.

Configure a reverse route on R1 for PC1 172.16.1.0/24.

Option A

Option B

Option C

Option D

Insert a /16 floating static route on R2 toward R3 with metric 254

Insert a /24 floating static route on R2 toward R3 with metric 254

Enable auto summarization on all three routers R1, R2, and R3

Disable auto summarization on R2

no snmp trap link-status

snmp trap link-status down

snmp trap ip verify drop-rate

ip verify drop-rate notify hold-down 60

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network.

Route distinguishers define which prefixes are imported and exported on the edge router.

Set the administrative distance 100 under the RIP process on R2.

Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.

Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.

Redistribute the directly connected interfaces on R2.

R1 sees 192.168.130.0/24 as two AS hops away instead of one AS hop away.

R1 does not accept any routes other than 192.168.130.0/24

R1 does not forward traffic that is destined for 192.168.30.0/24

Network 192.168.130.0/24 is not allowed in the R1 table

show frequency

show track

show reachability

show threshold