300-410 Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) sample Question + Exam 2025 Practice Exam Dumps

Question # 4

:580

An engneer must configure encrypted packets for a single router OSPF neighoorsMp Which configuration meets this requirement?

Option A

Option B

Option C

Option D

Full Access

Question # 5

Refer to the exhibit An engineer is troubleshooting an OSPF adjacency issue between directly connected routers R1 and R2 Which configuration resolves the issue?

Option A

Option B

Option C

Option D

Full Access

Question # 6

What are the two benefits of using BFD? (Choose two.)

forwarding path failure detection

supports all routing protocols

synchronous path determination

supports UDL failure

subsecond failure detection

Full Access

Question # 7

Which router attaches the VPN label to incoming packets from CE routing?

CE router

core router

P router

PE router

Full Access

Question # 8

How is a preshared key "Testâ€™â€™ for all the remote VPN rooters configured In a DMVPN using GRE over IPsec set up?

authentication pre-share Test address 0.0.0.0 0.0.0.0

set pre-share Test address 0.0.0.0 0.0.0.0

crypto Ipsec key Test address 0.0.0.0 0.0.0.0

crypto isakmp key Test address 0.0.0.0 0.0.0.0

Full Access

Question # 9

Refer to the exhibit. Which configuration resolves the route filtering issue on R1 to redistribute all the routes except 172.16.2.48/28?

Option A

Option B

Option C

Option D

Full Access

Question # 10

A company Is redesigning WAN infrastructure so that all branch sites must communicate via the head office and the head office can directly communicate with each site independently. The network engineer must configure the head office router by considering zero-touch technology when adding new sites in the same WAN infrastructure. Which configuration must be applied to the head office router to meet this requirement?

Option A

Option B

Option C

Option D

Full Access

Question # 11

Refer to the exhibit. An administrator wanted to make R1 always elected as DR. R2 as BDR. and R3 as DROTHER but could not achieve the desired results. Which two configurations resolve the issue? (Choose two.)

On the R1 FO/0 interface, configure OSPF priority to 255.

On the R2 FO/0 interface, configure OSPF priority to 201.

On the R1 F0/0 interface, configure OSPF priority to 202.

On the R3 FO'O interface, configure OSPF priority to 201.

On the R2 FO/0 interface, configure OSPF priority to 200.

Full Access

Question # 12

Which feature is used by LDP in the forwarding path within the MPLS cloud?

IP forwarding

TTL

TDP

LSP

Full Access

Question # 13

The network administrator configured CoPP so that all routing protocol traffic toward the router CPU is

limited to 1 mbps. All traffic that exceeds

this limit must be dropped. The router is running BGP and OSPF Management traffic for Telnet and SSH

must be limited to 500kbps.

access-list 100 permit tcp any any eq 179

access-list 100 permit tcp any any range 22 23

access-list 100 permit ospf any any

class-map CM-ROUTING

match access-group 100

class-map CM-MGMT

match access-group 100

policy-map PM-COPP

class CM-ROUTING

police 1000000 conform-action transmit

class CM-MGMT

police 500000 conform-action transmit

control-plane

service-policy output PM-COPP

No traffic is filtering through CoPP,which is resulting in high CPU utilization,which configuration resolves

the issue ?

no access-list 100access-list 100 permit tcp any any eq 179access-list 100 permit ospf any anyaccess-list 101 Permit tcp any any range 22 23!class-map CM-MGMTno match access-group 100match access-group 101

control-planeno service-policy output PM-COPPservice-policy input PM-COPP

No access-list 100access-list 100 permit tcp any any eq 179access-list 100 permit tcp any any range eq 22access-list 100 permit tcp any any range eq 23access-list 100 permit ospf any any

Full Access

Question # 14

Refer to the exhibit.

An engineer noticed that the router log messages do not have any information about when the event occurred. Which action should the engineer take when enabling service time stamps to improve the logging functionality at a granular level?

Replace OSPF process 10 on the interfaces with OSPF process 1 and configure an additional router IO with IPv6 address

Replace OSPF process 10 on the interfaces with OSPF process 1. and remove process 10 from the global configuration

Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv6 address and remove process 10 from the global configuration

Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv4 address and remove process 10 from the global configuration

Full Access

Question # 15

Refer to the exhibit.

Routers R1, R2, R3, and R4 use EIGRP However, traffic always prefers R1 to R5 backup links in nonfailure scenarios. Which configuration resolves the issue?

Option A

Option B

Option C

Option D

Full Access

Question # 16

Refer to the exhibit.

An OSPF neighbor relationship between R2 and R3 is showing stuck in EXCHANGE/EXSTART state. The neighbor is established between R1 and R2. The network engineer can ping from R2 to R3 and vice versa, but the

neighbor is still down. Which action resolves the issue?

Restore the Layer 2/Layer 3 conectivity issue in the ISP network.

Match MTU on both router interfaces or ignore MTU.

Administrative "shut then no shut" both router interfaces.

Enable OSPF on the interface, which is required.

Full Access

Question # 17

Refer to lhe exhibit An engineer must filter EIGRP updates that are received to block all 10 10 10.0/24 prefixes The engineer tests the distribute list and finds one associated prefix. Which action resolves the issue?

There is a permit in the route map that allows this prefix A deny 20 statement is required with a match condition to match a new ACL that denies all prefixes

There is a permit in the ACL that allows this prefix into EI6RP. The ACL should be modified to deny 10.10.10.0 0.0.0.255.

There is a permit in the route map that allows this prefix A deny 20 statement is required with no match condition to block the prefix.

There is a permit in the ACL that allows this prefix into EIGRP. The ACL should be modified to deny 10.10.10.0 255.255.255.0.

Full Access

Question # 18

Refer to the exhibit. The IT router has been configured with the Science VRF and the interfaces have been assigned to the VRF. Which set of configurations advertises Science-1 and Science-2 routes using EIGRPAS 111?

Option A

Option B

Option C

Option D

Full Access

Question # 19

Refer to the exhibit.

An engineer implemented CoPP but did not see OSPF traffic going through it. Which configuration resolves the issue?

ip access-list extended OSPF permit ospf any any

policy-map COPP class OSFP police 8000 conform-action transmit exceed-action transmit violate-action drop

control-plane service-policy input COPP

class-map match-all OSFP match access-group name OSPF

Full Access

Question # 20

Refer to the exhibit. An engineer Is troubleshooting a routing loop on the network to reach the 172.16.3.0/16 from the OSPF domain. Which configuration on router R1 resolves the Issue?

Option A

Option B

Option C

Option D

Full Access

Question # 21

Refer to the exhibit.

The network administrator configured the network to connect two disjointed networks and ail the connectivity is up except the virtual link which causes area 250 to be unreachable. Which two configurations resolve this issue? (Choose two.)

R2router ospf 1router-id 10.23.23.2

R2router ospf 1no area area 234 virtual-link 10.34.34.4area 0 virtual-link 0.0.0.44

R4router ospf 1no area 234 virtual-link 10.23.23.2area 234 virtual-link 0.0.0.22

R2router ospf 1no area 234 virtual-link 10.34.34.4area 234 virtual-link 0.0.0.44

R4router ospf 1no area area 234 virtual-link 10.23.23.2area 0 virtual-link 0.0.0.22

Full Access

Question # 22

An engineer configured a router with this configuration

ip access-hst DENY TELNET

10 deny tcp any any eq 23 log-input

The router console starts receiving log message :%SEC-6-IPACCESSLOGP: list DENY_TELNET denied tcp 192.168.1.10(1022)(FastEthernet1/0 D508.89gb.003f) ->192.168.2.20(23), 1 packet"

Which action stops messages on the console while still denying Telnet?

Configure a 20 permit ip any any command

Remove log-Input keyword from the access list.

Replace log-input keyword with the log keyword in the access list.

Configure a 20 permit ip any any log-input command.

Full Access

Question # 23

Refer to the exhibit.

Reachability between servers in a network deployed with DHCPv6 is unstable. Which command must be removed from the configuration to make DHCPv6 function?

ipv6 dhcp server DHCPPOOL

ipv6 address 2001:0:1:4::/64

ipv6 nd ra suppress

address prefix 2001:0:1:4::/64 lifetime infinite infinite

Full Access

Question # 24

Refer to the exhibit. A network engineer configured routers R1 and R2 with MP-BGP. The engineer noticed that the routers cannot exchange any IPv6 routes, however, the IPv4 neighbor relationship is working fine. Which configuration must the engineer apply to router R2 to exchange IPv6 routes?

Ipv6cef I Interface Loopback100Ipv6 address 2001: DB8:128::2/128 Interface GigabitEthernet1/0Ipv6 address 2001:DB8:1::2/64 I router bgp 65002no bgp default ipv4-unlcastneighbor 2001: DB8:1::1 emote-as 65001Iaddress-family ipv6network 2001:DB8:128::2/128neighbor 2001:DB8:1::1 activate

Ipv6 unicast-routingipv6 cefInterface Loopback100ipv6 address 2001: DB8:12C:2 129Iinterface GigabitEthernet1/0ipv6 address 2001: DB8:1::2 64description AS65001 ID B466:A83D:3D7::1!router bgp 65002no bgp default Ipv4-unicastneighbor 2001: DB8:1::1 remote-as 65001!address-family Ipv4neighbor 2001:DB8:1::1 activate

Ipv6 unicast-routingipvG cefIInterface Loopback100Ipv6 address 2001:DB8:128::2/128 I interface GigabitEthernet1/0ipv6 address 2001:DB8:1::2/64!router bgp 65002 no bgp default ipv4-unicast neighbor 2001: DB8:1::1 remote-as 65001 !address-family ipv6 network 2001:DB8:128::2I128

Ipv6 unicast-routing Ipv6 cef Iinterface Loopback100 ipv6 address 2001: DB8:128::2/128 !interface GigabitEthernet1/0 ipv6 address 2001:DB8:1::2/64 irouter bgp 65002 no bgp default ipv4-unicast neighbor 2001: DB8:1::1 remote-as 65001 !address-family ipv6 network 2001:DB8:128::2/128 neighbor 2001:DB8:1::1 activate

Full Access

Question # 25

Which router translates the customer routing information into VPNv4 routes to exchange VPNv4 routes with other devices through MP-BGP?

VPNv4 RR

Full Access

Question # 26

Refer to the exhibit. Which configuration advertises more specific routes to R1 without sending a BGP summary route?

R1#configure terminal

R1 (config)#rouler BGP 100

R1 (conflg-router)#no auto-summary

R1#configure terminal

R1 (config)#router BGP 100

R1 (config-router)#auto-summary

R2#configure terminal

R2 (conflg)#router BGP 100

R2 (config-rouler)Â»no auto-summary

R2#configure terminal

R2 (config)#router BGP 100

R2 (config-router)#auto-summary

Full Access

Question # 27

:581

The network administrator deployed the Binding Table Recovery feature. Which two devices recover the missing binding table entries? (Choose two.)

DHCP client

DHCP server

destination host

source host

DHCP relay agent

Full Access

Question # 28

Exhibits:

Refer to the exhibit The administrator configured the network devices for end-to-end reachability, but the ASBRs are not propagating routes to each other Which set of configurations resolves this issue?

Option A

Option B

Option C

Option D

Full Access

Question # 29

Which feature minimizes DoS attacks on an IPv6 network?

IPv6 Binding Security Table

IPv6 Router Advertisement Guard

IPv6 Prefix Guard

IPv6 Destination Guard

Full Access

Question # 30

Refer to the exhibit. The services at branch B are down. An engineer notices mal rouler A and router B are not exchanging any routes Which configuration resolves the issue on router B?

Option A

Option B

Option C

Option D

Full Access

Question # 31

Refer to the exhibit Which action resolves the issue?

Configure host IP address in access-list 16

Configure SNMPv3 on the router

Configure SNMP authentication on the router

Configure a valid SNMP community string

Full Access

Question # 32

A customer reports that traffic is not passing on an EIGRP enabled multipoint interface on a router configured as below:

interface Serial0/0

no ip address

interface Server0/0/0.9 multipoint

ip address 10.1.1.1 255.255.255.248

ip split-horizon eigrp 1

Which action resolves the issue?

Enable poison reverse

Enable split horizon

Disable poison reverse

Disable split horizon

Full Access

Question # 33

Refer to the exhibit.

An administrator configures a router to stop using a particular default route if the DNS server 8.8.8.8 is not reachable through that route. However, this configuration did not work as desired and the default route still works even if the DNS server 8.8.8 8 is unreachable. Which two configuration changes resolve the issue? (Choose two.)

Configure two static routes for the 8.8.8.8/32 destination to match the IP SLA probe for each ISP.

Associate every IP SLA probe with the proper WAN address of the router.

Reference the proper exit interfaces along with the next hops in both static default routes.

Use a separate track object to reference the existing IP SLA 1 probe for every static route.

Use a separate IP SLA probe and track object for every static route

Full Access

Question # 34

In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router. Which command is required on both spoke routers to communicate directly to one another?

ip nhrp map dynamic

ip nhrp shortcut

ip nhrp nhs multicast

ip nhrp redirect

Full Access

Question # 35

Refer to the exhibit.

R1 test its directly connected EIGRP peer 172.16.33.2 (SW1). Which configuration resolves the issue1?

key chain EIGRP key 1 key-string Cisco!interface Gigabit Ethernet 2 IP authentication mode elgrp 88 md5 IP authentication key-chain elgrp 88 EIGRP

key chain EIGRP key1 key-string Cisco!interface Gigabit Ethernet 2.10 IP authentication mode eigrp 88 md5 IP authentication key-chain eigrp 88 Cisco

key chain EIGRP key 1 key-string Cisco !interface Gigabit Ethernet 2.10 IP authentication mode elgrp 88 md5 IP authentication key-chain eigrp 88 EIGRP

key chain EIGRP key1 key-string Cisco !interface Gigabit Ethernet 2 IP authentication mode eigrp 88 md5 IP authentication key-chain elgrp 88 Cisco

Full Access

Question # 36

An engineer is implementing a coordinated change with a server team. As part of the change, the engineer must configure interlace GigabitEthernet2 in an existing VRF "RED" then move theinterface to an existing VRF "BLUE" when the server team is ready. The engineer configured interface GigabitEthemet2 in VRF "RED"

Which configuration completes the change?

interface GigabitEthernet2no ip addressvrf forwarding BLUE

interface GigabitEthernet2no vrf forwarding REDvrf forwarding BLUEip address 10.0.0.0 255.255.255.254

interface GigabitEthernet2no vrf forwarding REDvrf forwarding BLUE

interface GigabitEthernet2no ip addressip address 10.0.0.0 255.255.255.254vrf forwarding BLUE

Full Access

Question # 37

Refer to the exhibit.

The Internet traffic should always prefer Site-A ISP-1 if the link and BGP connection are up; otherwise, all Internet traffic should go to ISP-2 Redistribution is configured between BGP and OSPF routing protocols and it is not working as expected. What action resolves the issue?

Set metric-type 2 at Site-A RTR1, and set metric-type 1 at Site-B RTR2

Set OSPF cost 100 at Site-A RTR1, and set OSPF Cost 200 at Site-B RTR2

Set OSPF cost 200 at Site: A RTR1 and set OSPF Cost 100 at Site-B RTR2

Set metric-type 1 at Site-A RTR1, and set metric-type 2 at Site-B RTR2

Full Access

Question # 38

What is the minimum time gap required by the local system before putting a BFD control packet on the wire?

Detect Mult

Required Min Echo RX Interval

Desired Min TX Interval

Required Min RX Interval

Full Access

Question # 39

Refer to the exhibit.

When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic to pass through the interface Which command must be configured to resolve the issue?

access-class INTERNET in

ipv6 traffic-filter INTERNET in

ipv6 access-class INTERNET in

ip access-group INTERNET in

Full Access

Question # 40

Which two components are needed for a service provider to utilize the LVPN MPLS application? (Choose two.)

The P routers must be configured for MP-iBGP toward the PE routers

The P routers must be configured with RSVP.

The PE routers must be configured for MP-iBGP with other PE routers

The PE routers must be configured for MP-eBGP to connect to CEs

The P and PE routers must be configured with LDP or RSVP

Full Access

Question # 41

Refer to Exhibit.

A network administrator enables DHCP snooping on the Cisco Catalyst 3750-X switch and configures the uplink port (Port-channel2) as a trusted port. Clients are not receiving an IP address, but when DHCP snooping is disabled, clients start receiving IP addresses. Which global command resolves the issue?

No ip dhcp snooping information option

ip dhcp snooping

ip dhcp relay information trust portchannel2

ip dhcp snooping trust

Full Access

Question # 42

Refer to the exhibit. The DHCP client is unable to receive an IP address from the DHCP server RouterB is configured as follows:

Interface fastethernet 0/0

description Client DHCP ID 394482431

Ip address 172 31 11 255 255.255 0

ip route 172.16.1.0 255 255 255.0 10.1.1.2

Which command is required on the fastethernet 0/0 interface of RouterB to resolve this issue?

RouterB(config-if)#lp helper-address 172.31.1.1

RouterBiconfig-ififclp helper-address 255.255 255 255

RouterB(config-if)#lp helper-address 172.16.1.1

RouterB(config-if)#lp helper-address 172.16.1.2

Full Access

Question # 43

Refer to the exhibit.

Which two commands provide the administrator with the information needed to resolve the issue? (Choose two.)

snmp user

debug snmp engine-id

debug snmpv3 engine-id

debug snmp packet

showsnmpv3 user

Full Access

Question # 44

What does the PE router convert the Ipv4 prefix to within an MPLS VPN?

VPN-IPv4 prefix combined with the 64-bit route distinguisher

48-bit route combining the IP and PE router-id

prefix that combines the ASN, PE router-id, and IP prefix

eBGP path association between the PE and CE sessions

Full Access

Question # 45

Exhibit:

NTP is configured across the network infrastructure and Cisco DNA Center. An NTP issue was reported on the Cisco DNA Center at 17:15. Which action resolves the issue?

Check and resolve reachability between the WLC and the NTP server

Reset the NTP server to resolve any synchronization issues for all devices

Check and resolve reachability between Cisco DNA Center and the NTP server

Check and configure NTP on the WLC and synchronize with Cisco DNA Center

Full Access

Question # 46

Refer to the exhibit.

A company with autonomous system number AS65401 has obtained IP address block 209.165.200.224/27 fro, ARIN. The company needed more IP addresses and was assigned block209.165.202.128/27 from ISP2. An engineer is ISP1 reports they are receiving ISP2 routes from AS65401. Which configuration onR1 resolves the issue?

Option A

Option B

Option C

Option D

Full Access

Question # 47

Refer to Exhibit.

A network administrator has successfully configured DMVPN topology between a hub and two spoke routers. Which two configuration commands should establish direct communications between spoke 1 and spoke 2 without going through the hub? (Choose two).

At the hub router, configure the ip nhrp shortcut command.

At the spoke routers, configure the ip nhrp spoke-tunnel command.

At the hub router, configure ip nhrp redirect the command

At the spoke routers, configure the ip nhrp shortcut command.

At the hub router, configure tne Ip nhrp spoke-tunnel command

Full Access

Question # 48

What are two characteristics of VRF instance? (Choose two.)

All VRFs share customers routing and CEF tables .

An interface must be associated to one VRF.

Each VRF has a different set of routing and CEF tables

It is defined by the VPN membership of a customer site attached to a P device.

A customer site can be associated to different VRFs

Full Access

Question # 49

Refer to the exhibit.

An engineer identifier a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?

no spanning-tree uplinkfast

spanning-tree loopguard default

spanning-tree backbonesfast

spanning-tree portfast bpduguard

Full Access

Question # 50

Refer to the exhibit.

A network is under a cyberattack. A network engineer connected to R1 by SSH and enabled the terminal monitor via SSH session to find the source and destination of the attack. The session was flooded with messages, which made it impossible for the engineer to troubleshoot the issue. Which command resolves this issue on R1?

no terminal monitor

(config)#terminal no monitor

#terminal no monitor

(config)#no terminal monitor

Full Access

Question # 51

An engineer configured Reverse Path Forwarding on an interface and noticed that the routes are dropped when a route lookup fails on that interface for a prefix that is available in the routing table Which interface configuration resolves the issue?

ip verify unicast source reachable-via rx

ip verify unicast source reachable-via any

ip verify unicast source reachable-via allow-default

ip verify unicast source reachable-via 12-src

Full Access

Question # 52

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

Packets are not forwarded to the specific next hop.

Packets are forwarded based on the routing table.

Packets are forwarded based on a static route.

Packets are forwarded to the specific next hop.

Full Access

Question # 53

Refer to exhibit.

Routing protocols are mutually redistributed on R3 and R1. Users report intermittent connectivity to services hosted on the 10.1.1.0/24 prefix. Significant routing update changes are noticed on R3 when the show ip route profile

command is run. How must the services be stabilized?

The issue with using BGP must be resolved by using another protocol and redistributing it into EIGRP on R3

The routing loop must be fixed by reducing the admin distance of iBGP from 200 to 100 on R3

The routing loop must be fixed by reducing the admin distance of OSPF from 110 to 80 on R3

The issue with using iBGP must be fixed by running eBGP between R3 and R4

Full Access

Question # 54

Refer to the exhibit.

While troubleshooting an EIGRP neighbor adjacency problem, the network engineer notices that the interface connected to the neighboring router is not participating in the EIGRP process. Which action resolves the issues?

Configure the network command to network 172.16.0.1 0.0.0.0

Configure the network command under EIGRP address family vrf CLIENT1

Configure EIGRP metrics on interface FastEthernet0/3

Configure the network command under EIGRP address family ipv4

Full Access

Question # 55

An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network. Which BGP attribute must the engineer configure to avoid using the high-delay ISP link if the second ISP link is up?

LOCAL_PREF

MED

WEIGHT

AS-PATH

Full Access

Question # 56

Refer to the exhibit. A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source The configuration did not work as desired Which service must be enabled to resolve the issue?

Enter the service timestamps log datetime localtime global command.

Enter the service timestamps log datetime synchronize global command.

Enter the service timestamps log datetime console global command.

Enter the service timestamps log datetime clock-period global command

Full Access

Question # 57

Refer to Exhibit:

AS 111 wanted to use AS 200 as the preferred path for 172.20.5.0/24 and AS 100 as the backup. After the configuration, AS 100 is not used for any other routes. Which configuration resolves the issue?

route-mmap SETLP permit 10match ip address prefix-list PLIST1set local-preference 99route-map SETLP permit 20

route-map SETLP permit 10match ip address prefix-list PLIST1set local-preference 110route-map SETLP permit 20

router bgp 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.10.1 route-map SETLP out

router bap 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.20.2 route-map SE TLP in

Full Access

Question # 58

Refer to the exhibit.

A user has set up an IP SLA probe to test if a non-SLA host web server on IP address 10.1.1.1 accepts HTTP sessions prior to deployment. The probe is failing. Which action should the network administrator recommend for the probe to succeed?

Re-issue the ip sla schedule command.

Add icmp-echo command for the host.

Add the control disable option to the tcp connect.

Modify the ip sla schedule frequency to forever.

Full Access

Question # 59

Refer to the exhibit. The remote server is failing to receive the NetFlow data Which action resolves the issue?

Modify the flow transport command transport udp 2055 to move under flow monitor profile.

Modify the interlace command to Ip flow monitor FLOW-MONITOR-1 Input.

Modify the udp port under flow exporter profile to Ip transport udp 4739.

Modify the flow record command record v4_r1 to move under flow exporter profile.

Full Access

Question # 60

Refer to the exhibit.

The network administrator can see the DHCP discovery packet in R1. but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the FaO/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two.)

service dhcp-relay command on R1

ip dhcp option 82 command on R2

service dhcp command on R1

ip dhcp relay information enable command on R1

ip dhcp relay information trust-all command on R2

Full Access

Answer:

C, E

Explanation:

1. R1 received DHCP packet and its interface was configured with the DHCP helper address. But we are not sure if R1 forward DHCP packet to R2 or not. 2. If we connect PC directly to R2 then this problem will not appear -> DHCP Server function was configured on R2.

From these facts, the most likely problem is related to Option 82. Maybe R2 ignored DHCP request packets because it was receiving these packets with the giant field set to 0.0.0.0.

By default Cisco IOS devices reject packets with zero â€œgiaddrâ€ and by default Cisco Catalyst switches use â€œgiaddrâ€ of zero when configured for DHCP snooping! Reference: https://blog.ine.com/2009/07/22/understanding-dhcp-option-82

If we can run the â€œdebug ip dhcp server packetâ€ on R2, we may see these messages:

*Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, input feature, MCI Check(64), rtype 0, forus FALSE, sendself FALSE, mtu 0, fw dchk FALSE *Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, rcvd 2 *Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, stop process pak for forus packet

*Feb 22 23:54:57.759: DHCPD: inconsistent relay information. *Feb 22 23:54:57.759: DHCPD: relay information option exists, but giaddr is zero

We are receiving the DHCP packet from R1, source 0.0.0.0, and destination 255.255.255.255 broadcast, but if you notice from the debug output, R2, our DHCP Server, is complaining that the relay information is inconsistent. Option 82, Information Option, is contained in the packet but the GIADDR is zero. The GIADDR stands for Gateway IP Address, which is the IP Address of the relaying agent. The Option 82, Information Option, would then contain the receiving port and hostname of the Relaying Agent by default.

R2 sees the Option 82 information, signalling that the DHCP packet might have been relayed, BUT there is no relaying IP Address. This is the behavior of DHCP Snooping when enabling it on a switch, and since the switchport does not contain an IP Address, since itâ€™s Layer 2, no GIADDR will be added.

Instead, just the Option 82 Information is added and this is the problem we have, but there are options:

1. You could trust all on R2 the DHCP Server, which will cause the server to not be so suspicious: â€“ ip dhcp relay information trust-all â€“ ip dhcp relay information trusted 2. Disable theaddition of Option 82 information on SW: â€“ no ip dhcp snooping information option 3. Trust the port that is receiving the DHCP Discover: â€“ ip dhcp snooping trust

Any of these options will fix our predicament.

[Reference: https://evilttl.com/wiki/DHCP-Snooping, But in the answer choices, we only have 1 correct answer which is the command â€œip dhcp relay information trust-allâ€. We checked if we need any â€œservice dhcpâ€¦â€ command on both IOS version 12.4 and 15.1:, , , , Therefore we only have the â€œservice dhcpâ€ command, we donâ€™t have any â€œservice dhcp-relayâ€ command available. But the description of the â€œservice dhcpâ€ command says that it enables both DHCP server and relay agent so this is the best answer left., , , , , ]

Question # 61

What are two functions of LDP? (Choose two.)

It is defined in RFC 3038 and 3039.

It requires MPLS Traffic Engineering.

It advertises labels per Forwarding Equivalence Class.

It must use Resource Reservation Protocol.

It uses Forwarding Equivalence Class

Full Access

Question # 62

An engineer configured SNMP notifications sent to the management server using authentication and encrypting data with DES. An error in the response PDU is received as "UNKNOWNUSERNAME. WRONGDIGEST". Which action resolves the issue?

Configure the correct authentication password using SNMPv3 authPriv .

Configure the correct authentication password using SNMPv3 authNoPriv.

Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.

Configure correct authentication and privacy passwords using SNMPv3 authPriv.

Full Access

Question # 63

Refer to the exhibit.

A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer fails. Which action resolves this issue?

The SSH service must be enabled with the crypto key generate rsa command.

The SCP service must be enabled with the ip scp server enable command.

The Python interpreter must first be enabled with the guestshell enable command.

The SSH access must be allowed on the VTY lines using the transport input ssh command.

Full Access

Question # 64

A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to companyâ€™s security policy. The administrator can still ping to www.cisco.com Which interface should the access list 101 be applied to resolve this issue?

Interface G0/48 in the incoming direction

Interface G0/0 in the outgoing direction.

Interface S1/0 in the outgoing direction.

Interface G0/0 in the incoming direction.

Full Access

Question # 65

Refer to the exhibit.

R1 is connected with R2 via GigabitEthernet0/0, and R2 cannot ping R1. What action will fix the issue?

Fix route dampening configured on the router.

Replace the SFP module because it is not supported.

Fix IP Event Dampening configured on the interface.

Correct the IP SLA probe that failed.

Full Access

Question # 66

Exhibit:

Which action resolves the authentication problem?

Configure the user name on the TACACS+ server

Configure the UDP port 1812 to be allowed on the TACACS+ server

Configure the TCP port 49 to be reachable by the router

Configure the same password between the TACACS+ server and router.

Full Access

Question # 67

An engineer sets up a DMVPN connection to connect branch 1 and branch 2 to HQ branch 1 and branch 2 cannot communicate with each other. Which change must be made to resolve this issue?

Option A

Option B

Option C

Option D

Full Access

Question # 68

Refer to the exhibit.

Which action resolves the adjacency issue?

Match the hello interval timers.

Configure the same EIGRP process IDs.

Match the authentication keys.

Configure the same autonomous system numbers.

Full Access

Question # 69

Refer to the exhibit. The administrator configured route advertisement to a remote low resources router to use only the default route to reach any network but failed. Which action resolves this issue?

Change the direction of the distribute-list command from out to in.

Remove the line with the sequence number 5 from the prefix list.

Remove the prefix keyword from the distribute-list command.

Remove the line with the sequence number 10 from the prefix list.

Full Access

Question # 70

Drag and drop the MPLS concepts from the left onto the descriptions on the right.

Full Access

Question # 71

Refer to the exhibits.

When DMVPN is configured, which configuration allows spoke-to-spoke communication using loopback as a tunnel source?

Configure crypto isakmp key cisco address 0.0.0.0 on the hub.

Configure crypto isakmp key Cisco address 200.1.0.0 255.255.0.0 on the hub.

Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes.

Configure crypto isakmp key cisco address 0.0.0.0 on the spokes.

Full Access

Question # 72

Refer to the exhibit. The OSPF neighbor relationship is not coming up What must be configured to restore OSPF neighbor adjacency?

OSPF on the remote router

matching hello timers

use router ID

matching MTU values

Full Access

Question # 73

Refer to the exhibit.

An IPv6 network was newly deployed in the environment and the help desk reports that R3 cannot SSH to the R2s Loopback interface. Which action resolves the issue?

Modify line 10 of the access list to permit instead of deny.

Remove line 60 from the access list.

Modify line 30 of the access list to permit instead of deny.

Remove line 70 from the access list.

Full Access

Question # 74

Drag and drop the MPLS VPN device types from the left onto the definitions on the right.

Full Access

Question # 75

What are two MPLS label characteristics? (Choose two.)

The label edge router swaps labels on the received packets.

Labels are imposed in packets after the Layer 3 header.

LDP uses TCP for reliable delivery of information.

An MPLS label is a short identifier that identifies a forwarding equivalence class.

A maximum of two labels can be imposed on an MPLS packet.

Full Access

Question # 76

Refer to the exhibit.

A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands Which action resolves the issue?

Configure TACACS+ synchronization with the Active Directory admin group

Configure the username from a local database

Configure full access for the username from TACACS+ server

Configure an authorized IP address for this user to access this router

Full Access

Question # 77

Refer to the exhibit.

A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

Set a tag in the route map when redistributing EIGRP into OSPF on R1, and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

Full Access

Question # 78

Refer to the exhibit.

An engineer configured BGP between routers R1 and R3 The BOP peers cannot establish neighbor adjacency to be able to exchange routes. Which configuration resolves this issue?

R3router bgp 6502address-family ipv6neighbor AB01:2011:7:100::1 activate

R1router bgp 6501address-family ipv6neighbor AB01:2011:7:100;:3 activate

R3router bgp 6502neighbor AB01:2011:7:100::1 ebgp-muttlhop 255

R1router bgp 6501 neighborAB01:2011:7:100::3ebgp-multihop255

Full Access

Question # 79

Drag and drop the LDP features from the left onto the descriptions on the right

Full Access

Question # 80

Refer to the exhibit. R2 has two paths to reach 192.168.13.0/24. but traffic is sent only through R3. Which action allows traffic to use both paths?

Configure the bandwidth 2000 command under interface FastEthernet0/0 on R2.

Configure the variance 4 command under the EIGRP process on R2.

Configure the delay 1 command under interface FastEthernet0/0 on R2.

Configure the variance 2 command under the EIGRP process on R2

Full Access

Question # 81

Refer to the exhibit.

Which action resolves the failed authentication attempt to the router?

Configure aaa authorization login command on line vty 0 4

Configure aaa authorization login command on line console 0

Configure aaa authorization console global command

Configure aaa authorization console command on line vty 0 4

Full Access

Question # 82

Which Ipv6 first-hop security feature helps to minimize denial of service attacks?

IPv6 Router Advertisement Guard

IPv6 Destination Guard

DHCPv6 Guard

IPv6 MAC address filtering

Full Access

Question # 83

Refer to the exhibit.

An IT staff member comes into the office during normal office hours and cannot access devices through SSH Which action should be taken to resolve this issue?

Modify the access list to use the correct IP address.

Configure the correct time range.

Modify the access list to correct the subnet mask

Configure the access list in the outbound direction.

Full Access

Question # 84

Refer to the exhibit. The network administrator configured the branch router for IPv6 on the E 0/0 interface The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on the branch router to bring the IPv6 neighbors up?

Enable the IPv4 address family under the E 0/0 interface by using the address-family Ipv4 unicast command

Disable IPv6 on the E 0/0 interface using the no ipv6 enable command

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E 0/0 interface.

Full Access

Question # 85

How are MPLS Layer 3 VPN services deployed?

The RD and RT values must match under the VRR

The RD and RT values under a VRF must match on the remote PE router

The import and export RT values under a VRF must always be the same.

The label switch path must be available between the local and remote PE routers.

Full Access

Question # 86

Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).

router bgp 64511

network 172.16.20.0 mask 255.255.255.0

network 172.16.21.0 mask 255.255.255.0

network 172.16.22.0 mask 255.255.255.0

network 172.16.23.0 mask 255.255.255.0

aggregate-address 172.16.20.0 255.255.252.0

After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?

router bgp 64511aggregate-address 172.16.20.0 255.255.252.0 summary-only

router bgp 64511neighbor 192.168.100.1 summary-onlyneighbor 192.168.200.2 summary-only

interface E 0/0ip bgp suppress-map BLOCK_SPECIFIC!interface E 0/1ip bgp suppress-map BLOCK_SPECIFIC!ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC!router bgp 64511aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

Full Access

Question # 87

Refer to the exhibit.

Which two actions restrict access to router R1 by SSH? (Choose two.)

Configure transport input ssh on line vty and remove sequence 30 from access list 100.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.

Remove class-map ANY from service-policy CoPP

Configure transport output ssh on line vty and remove sequence 10 from access list 199.

Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199

Full Access

Question # 88

Refer to Exhibit.

The network administrator configured the branch router for IPv6 on the E0/0 interface. The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on the branch router to bring the IPv6 neighbors up?

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

Disable IPv6 on the E0/0 interface using the no ipv6 enable command

Enable the IPv4 address family under the E0/0 interface by using the address-family ipv4 unicast command

Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E0/0 interface

Full Access

Question # 89

How does an MPLS Layer 3 VPN function?

set of sites use multiprotocol BGP at the customer site for aggregation

multiple customer sites interconnect through service provider network to create secure tunnels between customer edge devices

set of sites interconnect privately over the Internet for security

multiple customer sites interconnect through a service provider network using customer edge to provider edge connectivity

Full Access

Question # 90

Refer to the exhibits.

A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router. Which set of configurations fixes the issue?

Option A

Option B

Option C

Option D

Full Access

Question # 91

Refer to the exhibit. An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R1 as the primary default gateway When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192.168.20.0/24. Which set of configurations resolves the issue?

HQ_R3(config)# ip sla responderHQ_R3(config)# ip sla responder icmp-echo 172.16.35.1

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 192.168.100.2

HQ R3(config)# Ip sla responderHQ R3(config)# Ip sla responder Icmp-echo 172.16.35.5

BRANCH(config)# Ip sla 1BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1

Full Access

Question # 92

Refer to the exhibit.

The administrator can see the traps for the failed login attempts, but cannot see the traps of successful login attempts. What command is needed to resolve the issue?

Configure logging history 2

Configure logging history 3

Configure logging history 4

Configure logging history 5

Full Access

Question # 93

An engineer configured access list NON-CISCO in a policy to influence routes

What are the two effects of this route map configuration? (Choose two.)

Packets are not evaluated by sequence 10.

Packets are evaluated by sequence 10.

Packets are forwarded to the default gateway.

Packets are forwarded using normal route lookup.

Packets are dropped by the access list.

Full Access

Question # 94

Refer to the exhibit.

BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1. Users report packet loss and interruption of service to applications hosted onthe 10.1.1.0724 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command. Which action stabilizes the service?

Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.

Repeat the test from R4 using ICMP ping on the local 10.1.1.0/24 prefix, and fix any Layer 2 errors on the host or switch side of the subnet. ^ C. Place an OSPF distribute-list outbound on R3 to block the 10.1.10/24 prefix from being advertised back to R3.

Reduce frequent OSPF SPF calculations on R3 that cause a high CPU and packet loss on traffic traversing R3.

Full Access

Question # 95

Refer to the exhibit.

A network administrator reviews the branch router console log to troubleshoot the OSPF adjacency issue with the DR router. Which action resolves this issue?

Advertise the branch WAN interface matching subnet for the DR site.

Configure matching hello and dead intervals between sites.

Configure the WAN interface for DR site in the related OSPF area.

Stabilize the DR site flapping link to establish OSPF adjacency.

Full Access

Question # 96

Refer to the exhibit. R1 and R2 cannot establish an EIGRP adjacency. Which action establishes EIGRP adjacency?

Remove the current autonomous system number on one of the routers and change to a different value.

Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.

Full Access

Question # 97

Refer to the exhibit.

The R1 and R2 configurations are:

The neighbor is not coming up. Which two sets of configurations bring the neighbors up? (Choose two.)

R2ip route 10.1.1.1 255.255.255.255 192.168.1.1ï¼router bgp 200neighbor 10.1.1.1 tti-security hops 1neighbor 10.1.1.1 update-source loopback 0

R2ip route 10.1.1.1 255.255.255.255 192.168.1.1ï¼router bgp 200neighbor 10.1.1.1 disable-connected-checkneighbor 10.1.1.1 update-source loopback 0

R2ip route 10.1.1.2 255.255.255.255 192.168.1.2ï¼router bgp 100neighbor 10.1.1.2 ttl-security hops 1neighbor 10.1.1.2 update-source loopback 0

R1ip route 10.1.1.2 255.255.255.255 192.168.1.2ï¼router bgp 100neighbor 10.1.1.1 ttl-security hops 1neighbor 10.1.1.2 update-source loopback 0

R1ip route 10.1.1.2 255.255.255.255 192.168.1.2ï¼router bgp 100neighbor 10.1.1.2 disable-connected-checkneighbor 10.1.1.2 update-source Loopback0

Full Access

Question # 98

Refer to Exhibit.

Traffic from the branch network should route through HQ R1 unless the path is unavailable. An engineer tests this functionality by shutting down interface on the BRANCH router toward HQ_R1 router but 192.168.20.0/24 is no longer reachable from the branch router. Which set of configurations resolves the issue?

HQ_R1(config)# ip sla responderHQ_R1(config)# ip sla responder icmp-echo 172.16.35.2

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.1

HQ_R2(config)# ip sla responderHQ_R2(config)# ip sla responder icmp-echo 172.16.35.5

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.2

Full Access

Question # 99

Refer to the exhibit.

R1 is being monitored using SNMP and monitoring devices are getting only partial information. What action should be taken to resolve this issue?

Modify the CoPP policy to increase the configured exceeded limit for SNMP.

Modify the access list to include snmptrap.

Modify the CoPP policy to increase the configured CIR limit for SNMP.

Modify the access list to add a second line to allow udp any any eq snmp

Full Access

Question # 100

Refer to the exhibit.

SanFrancisco and Boston routers are choosing slower links to reach each other despite the direct links being up Which configuration fixes the issue?

Option A

Option B

Option C

Option D

Full Access

Question # 101

Refer to the exhibit.

Why is user authentication being rejected?

The TACACS+ server expects â€œuserâ€, but the NT client sends â€œdomain/userâ€.

The TACACS+ server refuses the user because the user is set up for CHAP.

The TACACS+ server is down, and the user is in the local database.

The TACACS+ server is down, and the user is not in the local database.

Full Access

Question # 102

Refer to the exhibit.

What is the result of applying this configuration?

The router can form BGP neighborships with any other device.

The router cannot form BGP neighborships with any other device.

The router cannot form BGP neighborships with any device that is matched by the access list named â€œBGPâ€.

The router can form BGP neighborships with any device that is matched by the access list named â€œBGPâ€.

Full Access

Question # 103

While working with software images, an engineer observes that Cisco DNA Center cannot upload its software image directly from the device. Why is the image not uploading?

The device must be resynced to Cisco DNA Center.

The software image for the device is in install mode.

The device has lost connectivity to Cisco DNA Center.

The software image for the device is in bundle mode

Full Access

Question # 104

Refer to the exhibit.

In which circumstance does the BGP neighbor remain in the idle condition?

if prefixes are not received from the BGP peer

if prefixes reach the maximum limit

if a prefix list is applied on the inbound direction

if prefixes exceed the maximum limit

Full Access

Question # 105

Which transport layer protocol is used to form LDP sessions?

UDP

SCTP

TCP

RDP

Full Access

Question # 106

Refer to the exhibit.

Why is the remote NetFlow server failing to receive the NetFlow data?

The flow exporter is configured but is not used.

The flow monitor is applied in the wrong direction.

The flow monitor is applied to the wrong interface.

The destination of the flow exporter is not reachable.

Full Access

Question # 107

During the maintenance window an administrator accidentally deleted the Telnet-related

configuration that permits a Telnet connection from the inside network (Eth0/0) to the outside of the networking between Friday â€“ Sunday night hours only. Which configuration resolves the issue?

Option A

Option B

Option C

Option D

Full Access

Question # 108

What is a role of route distinguishers in an MPLS network?

Route distinguishers define which prefixes are imported and exported on the edge router

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network

Full Access

Question # 109

A network engineer needs to verify IP SLA operations on an interface that shows on indication of

excessive traffic.

Which command should the engineer use to complete this action?

show frequency

show track

show reachability

show threshold

Full Access

Question # 110

Which is statement about IPv6 inspection is true?

It teams and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables

It teams and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables

It team and secures binding for stateless autoconfiguration addresses in Layer 2 neighbor tables.

Full Access

Question # 111

An engineer configured the wrong default gateway for the Cisco DNA Center enterprise interface during the install. Which command must the engineer run to correct the configuration?

sudo maglev-config update

sudo maglev install config update

sudo maglev reinstall

sudo update config install

Full Access

Question # 112

Refer to the exhibit.

The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host

192.168.10.10cannot SSH to host 192.168.100.10 even though the flow is permitted. Which action

resolves the issue without opening full access to this router?

Move the SSH entry to the beginning of the ACL

Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works

Temporarily remove the ACL from the interface to see if the flow works

Run the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it

Full Access

Question # 113

Which two statements about redistributing EIGRP into OSPF are true? (Choose two)

The redistributed EIGRP routes appear as type 3 LSAs in the OSPF database

The redistributed EIGRP routes appear as type 5 LSAs in the OSPF database

The administrative distance of the redistributed routes is 170

The redistributed EIGRP routes appear as OSPF external type 1

The redistributed EIGRP routes as placed into an OSPF area whose area ID matches the EIGRPautonomous system number

The redistributed EIGRP routes appear as OSPF external type 2 routes in the routing table

Full Access

Question # 114

Refer to the exhibit.

An engineer configures a static route on a router, but when the engineer checks the route

to the destination, a different next hop is chosen. What is the reason for this?

Dynamic routing protocols always have priority over static routes.

The metric of the OSPF route is lower than the metric of the static route.

The configured AD for the static route is higher than the AD of OSPF.

The syntax of the static route is not valid, so the route is not considered.

Full Access

Question # 115

Refer to the exhibit.

AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server Which action resolves this issue?

Match the authentication port

Match the accounting port

Correct the timeout value.

Correct the shared secret.

Full Access

Question # 116

Refer to the exhibit.

An engineer is troubleshooting BGP on a device but discovers that the clock on the device does not correspond to the time stamp of the log entries. Which action ensures consistency between the two times?

Configure the service timestamps log uptime command in global configuration mode.

Configure the logging clock synchronize command in global configuration mode.

Configure the service timestamps log datetime localtime command in global configuration mode.

Make sure that the clock on the device is synchronized with an NTP server.

Full Access

Question # 117

Drag and drop the packet types from the left onto the correct descriptions on the right.

Full Access

Answer:

Explanation:

Unlike legacy network technologies such as ISDN, Frame Relay, and ATM that defined separate data and control channels, IP carries all packets within a single pipe. Thus, IP network devices such as routers and switches must be able to distinguish between data plane, control plane, and management plane packets to treat each packet appropriately.From an IP traffic plane perspective, packets may be divided into four distinct, logical groups:1.Â Data plane packetsÂ â€“ End-station,Â user-generated packetsÂ that are always forwarded by network devices to other end-station devices. From the perspective of the network device, data plane packets always have a transit destination IP address and can be handled by normal, destination IP address-based forwarding processes.2.Â Control plane packetsÂ â€“Â Network device generated or received packetsÂ that are used for the creation and operation of the network itself. From the perspective of the network device, control plane packets always have a receive destination IP address and are handled by the CPU in the network device route processor. Examples include protocols such as ARP, BGP, OSPF, and other protocols that glue the network together.3.Â Management plane packetsÂ â€“Â Network device generated or received packets, or management station generated or received packets that are used to manage the network. From the perspective of the network device, management plane packets always have a receive destination IP address and are handled by the CPU in the network device route processor. Examples include protocols such as Telnet,Secure Shell (SSH), TFTP, SNMP, FTP, NTP, and other protocols used to manage the device and/or network.4.Â Services plane packetsÂ â€“ A special case of data plane packets, services plane packets are alsoÂ user-generated packetsÂ that are also forwarded by network devices to other end-station devices, but that require high-touch handling by the network device (above and beyond normal, destination IP address-based forwarding) to forward the packet. Examples of high-touch handling include such functions as GRE encapsulation, QoS, MPLS VPNs, and SSL/IPsec encryption/decryption, etc. From the perspective of the network device, services plane packets may have a transit destination IP address, or may have a receive destination IP address (for example, in the case of a VPN tunnel endpoint).

[Reference:Â https://tools.cisco.com/security/center/resources/copp_best_practices, , , , , ]

Question # 118

Refer to the exhibit.

An IP SLA is configured to use the backup default route when the primary is down, but it is not working as desired. Which command fixes the issue?

R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2 10 track 1

R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2

R1(config)#ip sla track 1

R1(config)# ip route 0.0.0.0.0.0.0.0.1.1.1.1 track 1

Full Access

Question # 119

Refer to the exhibit.

An engineer is trying to redistribute OSPF to BGP, but not all of the routes are

redistributed. What is the reason for this issue?

By default, only internal routes and external type 1 routes are redistributed into BGP

Only classful networks are redistributed from OSPF to BGP

BGP convergence is slow, so the route will eventually be present in the BGP table

By default, only internal OSPF routes are redistributed into BGP

Full Access

Question # 120

Refer to the exhibit.

An engineer is trying to generate a summary route in OSPF for network 10.0.0.0/8, but the

summary route does not show up in the routing table. Why is the summary route missing?

The summary-address command is used only for summarizing prefixes between areas.

The summary route is visible only in the OSPF database, not in the routing table.

There is no route for a subnet inside 10.0.0.0/8, so the summary route is not generated.

The summary route is not visible on this router, but it is visible on other OSPF routers in the same area.

Full Access

Question # 121

Refer to the exhibit.

Which routes from OSPF process 5 are redistributed into EIGRP?

E1 and E2 subnets matching access list TO-OSPF

E1 and E2 subnets matching prefix list TO-OSPF

only E2 subnets matching access list TO-OSPF

only E1 subnets matching prefix listTO-OS1

Full Access

Question # 122

Refer to the exhibit.

A company is evaluating multiple network management system tools. Trending graphs generated by SNMP data are returned by the NMS and appear to have multiple gaps. While troubleshooting the issue, an engineer noticed the relevant output. What solves the gaps in the graphs?

Remove the exceed-rate command in the class map.

Remove the class map NMS from being part of control plane policing.

Configure the CIR rate to a lower value that accommodates all the NMS tools

Separate the NMS class map in multiple class maps based on the specific protocols with appropriate CoPP actions

Full Access

Question # 123

After some changes in the routing policy, it is noticed that the router in AS 45123 is being used as a transit AS router for several service provides. Which configuration ensures that the branch router in AS 45123 advertises only the local networks to all SP neighbors?

Option A

Option B

Option C

Option D

Full Access

Question # 124

Refer to the exhibit.

An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?

no ip ssh disable

ip ssh enable

ip ssh version 2

crypto key generate rsa

Full Access

Question # 125

Refer the exhibit.

Which action resolves intermittent connectivity observed with the SNMP trap

packets?

Decrease the committed burst Size of the mgmt class map

Increase the CIR of the mgmt class map

Add a new class map to match TCP traffic

Add one new entry in the ACL 120 to permit the UDP port 161

Full Access

Question # 126

Refer to the exhibit.

The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new IP address. Which two actions must be taken to resolve this Issue? (Choose two.)

Configure the server to use DHCP on the network with default gateway 200 30.40.100.

Configure the server with a static IP address and default gateway.

Configure the router to exclude a server IP address.

Configure the server to use DHCP on the network with default gateway 200 30.30.100.

Configure the router to exclude a server IP address and default gateway.

Full Access

Question # 127

Which protocol does MPLS use to support traffic engineering?

Tag Distribution Protocol (TDP)

Resource Reservation Protocol (RSVP)

Border Gateway Protocol (BGP)

Label Distribution Protocol (LDP)

Full Access

Question # 128

Which list defines the contents of an MPLS label?

20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

Full Access

Question # 129

Users were moved from the local DHCP server to the remote corporate DHCP server. After the move,

none of the users were able to use the network.

Which two issues will prevent this setup from working properly? (Choose two)

Auto-QoS is blocking DHCP traffic.

The DHCP server IP address configuration is missing locally

802.1X is blocking DHCP traffic

The broadcast domain is too large for proper DHCP propagation

The route to the new DHCP server is missing

Full Access

Question # 130

Drag and drop the MPLS VPN device types from me left onto the definitions on the right.

Full Access

Question # 131

Refer to the exhibit.

What does the imp-null tag represent in the MPLS VPN cloud?

Pop the label

Impose the label

Include the EXP bit

Exclude the EXP bit

Full Access

Question # 132

Refer to the exhibit.

Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are uf SLA by defining frequency and schedulingsed

Full Access

Question # 133

Refer to the exhibit.

After redistribution is enabled between the routing protocols; PC2, PC3, and PC4 cannot reach PC1. Which action can the engineer take to solve the issue so that all the PCs are reachable?

Set the administrative distance 100 under the RIP process on R2.

Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.

Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.

Redistribute the directly connected interfaces on R2.

Full Access

Question # 134

An engineer configured a companyâ€™s multiple area OSPF head office router and Site A cisco

routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone.

After finishing both site router configurations, none of the LSA 3,4 5, and 7 are installed at Site A router. Which configuration resolves this issue?

configure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc

configure capability vrf-lite on Head Office and its connected PE router under router ospf 1 vrf abc

configure capability vrf-lite on both PE routers connected to Head Office and Site A routers under routtr ospf 1 vrf abc

configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc

Full Access

Question # 135

What is an advantage of using BFD?

It detects local link failure at layer 1 and updates routing table.

It detects local link failure at layer 2 and updates routing protocols.

It has sub-second failure detection for layer 1 and layer 3 problems.

It has sub-second failure detection for layer 1 and layer 2 problems.

Full Access

Question # 136

Refer to the exhibit A customer reported an issue with a fiber link failure between RC and RE Users connected through the spoke location face disconnection and packet drops with the primary email server (172.16.16.1) but have no issues with the backup email server (172.16.26.1). All the router loopback IPs are advertised through the OSPF protocol. Which configuration resolves the issue?

Option A

Option B

Option C

Option D

Full Access

Question # 137

Refer to the exhibit.

The control plane is heavily impacted after the CoPP configuration is applied to the router. Which command removal lessens the impact on the control plane?

access-list 120 permit udp any any eq pim-auto-rp

access-list 120 permit eigrp any host 224.0.0.10

access-list 120 permit ospf any

access-list 120 permit tcp any gt 1024 eq bgp log

Full Access

Question # 138

Refer to the exhibit.

An engineer configured IP SLA to monitor a next hop on a router for reachability When the next hop is unreachable, the router is executing tracking and failing over another route, but packet loss is experienced because the reachability is flapping. Which action resolves the issue?

Append delay up 0 down Ovto the track command

Increase the timeout of the sla probe to 6000

Append delay up SO down 60vto the track command

Increase the frequency of the sla probe to 60.

Full Access

Question # 139

Refer to the exhibit.

An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+. Which action produces the desired configuration?

Add the aaa authentication login default none command to the global configuration.

Replace the capital â€œCâ€ with a lowercase â€œcâ€ in the aaa authentication login Console local command.

Add the aaa authentication login default group tacacs+ local-case command to the globalconfiguration.

Add the login authentication Console command to the line configuration

Full Access

Question # 140

Refer to the exhibit.

Which interface configuration must be configured on the spoke A router to enable a dynamic DMVPN tunnel with the spoke B router?

Option A

Option B

Option C

Option D

Full Access

Question # 141

Refer to the exhibit.

R2 is a route reflector, and R1 and R3 are route reflector clients. The route reflector learns the route to 172.16.25.0/24 from R1, but it does not advertise to R3. What is the reason the route is not advertised?

R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.

Route reflector setup requires full IBGP mesh between the routers.

In route reflector setup, only classful prefixes are advertised to other clients.

In route reflector setups, prefixes are not advertised from one client to another.

Full Access

Question # 142

What is a function of IPv6 ND inspection?

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

Full Access

Question # 143

Which statement about IPv6 RA Guard is true?

It does not offer protection in environments where IPv6 traffic is tunneled.

It cannot be configured on a switch port interface in the ingress direction.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

It is not supported in hardware when TCAM is programmed.

Full Access

Question # 144

Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.

Full Access

Question # 145

Refer to the exhibit.

Redistribution is enabled between the routing protocols, and nowPC2 PC3, and PC4 cannot reach PC1. What are the two solutions to fix the problem? (Choose two.)

Filter RIP routes back into RIP when redistributing into RIP in R2

Filter OSPF routes into RIP FROM EIGRP when redistributing into RIP in R2.

Filter all routes except RIP routes when redistributing into EIGRP in R2.

Filter RIP AND OSPF routes back into OSPF from EIGRP when redistributing into OSPF in R2

Filter all routes except EIGRP routes when redistributing into OSPF in R3.

Full Access

Question # 146

Refer to the exhibit.

An administrator that is connected to the console does not see debug messages when

remote users log in. Which action ensures that debug messages are displayed for remote logins?

Enter the transport input ssh configuration command.

Enter the terminal monitor exec command.

Enter the logging console debugging configuration command.

Enter the aaa new-model configuration command.

Full Access

Question # 147

Which command displays the IP routing table information that is associated with VRF-Lite?

show ip vrf

show ip route vrf

show run vrf

show ip protocols vrf

Full Access

Question # 148

Drag and drop the OSPF adjacency states from the left onto the correct descriptions on the right.

Full Access

Answer:

Explanation:

Table Description automatically generated

(Reference:Â http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080093f0e.shtml)

[Reference: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html, , Down, This is the first OSPF neighbor state. It means that no information (hellos) has been received from this neighbor, but hello packets can still be sent to the neighbor in this state., During the fully adjacent neighbor state, if a router doesn't receive hello packet from a neighbor within the Router Dead Interval time (RouterDeadInterval = 4*HelloInterval by default) or if themanually configured neighbor is being removed from the configuration, then the neighbor state changes from Full to Down., Attempt, This state is only valid for manually configured neighbors in anÂ NBMAÂ environment. In Attempt state, the router sends unicast hello packets every poll interval to the neighbor, from which hellos have not been received within the dead interval., Init, This state specifies that the router has received a hello packet from its neighbor, but the receiving router's ID was not included in the hello packet. When a router receives a hello packet from a neighbor, it should list the sender's router ID in its hello packet as an acknowledgment that it received a valid hello packet., 2-Way, This state designates that bi-directional communication has been established between two routers. Bi-directional means that each router has seen the other's hello packet. This state is attained when the router receiving the hello packet sees its own Router ID within the received hello packet's neighbor field. At this state, a router decides whether to become adjacent with this neighbor. On broadcast media and non-broadcast multiaccess networks, a router becomesÂ fullÂ only with the designated router (DR) and the backup designated router (BDR); it stays in the 2-way state with all other neighbors. On Point-to-point and Point-to-multipoint networks, a router becomes full with all connected routers., At the end of this stage, the DR and BDR for broadcast and non-broadcast multiaccess networks are elected. For more information on the DR election process, refer toÂ DR Election., Note:Â Receiving a Database Descriptor (DBD) packet from a neighbor in the init state will also a cause a transition to 2-way state., Exstart, Once the DR and BDR are elected, the actual process of exchanging link state information can start between the routers and their DR and BDR. (ie. Shared or NBMA networks)., In this state, the routers and their DR and BDR establish a master-slave relationship and choose the initial sequence number for adjacency formation. The router with the higher router ID becomes the master and starts the exchange, and as such, is the only router that can increment the sequence number. Note that one would logically conclude that the DR/BDR with the highest router ID will become the master during this process of master-slave relation. Remember that the DR/BDR election might be purely by virtue of a higher priority configured on the router instead of highest router ID. Thus, it is possible that a DR plays the role of slave. And also note that master/slave election is on a per-neighbor basis., Exchange, In the exchange state, OSPF routers exchange database descriptor (DBD) packets. Database descriptors contain link-state advertisement (LSA) headers only and describe the contents of the entire link-state database. Each DBD packet has a sequence number which can be incremented only by master which is explicitly acknowledged by slave. Routers also send link-state requestpackets and link-state update packets (which contain the entire LSA) in this state. The contents of the DBD received are compared to the information contained in the routers link-state database to check if new or more current link-state information is available with the neighbor., Loading, In this state, the actual exchange of link state information occurs. Based on the information provided by the DBDs, routers send link-state request packets. The neighbor then provides the requested link-state information in link-state update packets. During the adjacency, if a router receives an outdated or missing LSA, it requests that LSA by sending a link-state request packet. All link-state update packets are acknowledged., Full, In this state, routers are fully adjacent with each other. All the router and network LSAs are exchanged and the routers' databases are fully synchronized., Full is the normal state for an OSPF router. If a router is stuck in another state, it is an indication that there are problems in forming adjacencies. The only exception to this is the 2-way state, which is normal in a broadcast network. Routers achieve the FULL state with their DR and BDR in NBMA/broadcast media and FULL state with every neighbor in the remaining media such as point-to-point and point-to-multipoint., Note:Â The DR and BDR that achieve FULL state with every router on the segment will display FULL/DROTHER when you enter theÂ show ip ospf neighborÂ command on either a DR or BDR. This simply means that the neighbor is not a DR or BDR, but since the router on which the command was entered is either a DR or BDR, this shows the neighbor as FULL/DROTHER., Reference: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html, Reference:Â http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080093f0e.shtml), Reference: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html, , , , , ]

Question # 149

Refer to the exhibit.

The network operation team observes a traffic forwarding issue between R2 and R3:

Ping and traceroute of loopback IP address from R2 to R3 is successful.

iBGP peering in AS 65101 and AS 65201 is up.

Which configuration resolves the issue?

Configure MD5 password authentication on R2.

Advertise R2 and R3 loopback IPs in AS 65101 and AS 65201.

Remove MD5 password authentication on R3.

Set up eBGP multihop on R2 and R3 routers.

Full Access

Question # 150

Refer to the exhibit. The IT manager received reports from users about slow application through network x. which action resolves the issue?

Use the variance 2 command to enable load balancing.

Increase the bandwidth from the service provider.

Move the servers into the users subnet.

Upgrade the IOS on router E.

Full Access

Question # 151

R1 cannot receive the R2 Interfaces with individual prefixes. What must be reconfigured to advertise R2 Interfaces to R1?

EIGRP process on R2 by removing the stub command Keyword summary

interface FastEthernet0/1 on R2 with an EIGRP summary for all three loopback prefixes

EIGRP process on R2 with the command stub summary receive-only

ElGRP process on R2 with the command stub summary connected

Full Access

Question # 152

The network administrator configured CoPP so that all SNMP traffic from Cisco Prime located at 192.168.1.11 toward the router CPU is limited to 1000 kbps. Any traffic that exceeds this limit must be dropped.

access-list 100 permit udp any any eq 161

class-map CM-SNMP

match access-group 100

policy-map PM-COPP

class CM-SNMP

police 1000 conform-action transmit

control-plane

service-policy input PM-COPP

The network administrator is not getting the desired result for the SNMP traffic and SNMP traffic is getting dropped frequently. Which set of configurations resolves the issue?

no access-list 100access-list 100 permit tcp host 192.168.1.11 any eq 161

no access-list 100access-list 100 permit udp host 192.168.1.11 any eq 161!policy-map PM-COPPclass CM-SNMPno police 1000 conform-action transmitpolice 1000000 conform-action transmit!control-planeno service-policy input PM-COPP!interface E 0/0service-policy input PM-COPP!interface E 0/1service-policy input PM-COPP

no access-list 100access-list 100 permit udp host 192.168.1.11 any eq 161!policy-map PM-COPPclass CM-SNMPno police 1000 conform-action transmitpolice 1000000 conform-action transmit

policy-map PM-COPPclass CM-SNMPno police 1000 conform-action transmitpolice 1000000 conform-action transmit

Full Access

Question # 153

Refer to the exhibit. A network engineer is provisioning end-to-end traffic service for two different enterprise networks with these requirements

The OSPF process must differ between customers on HQ and Branch office routers, and adjacencies should come up instantly.

The enterprise networks are connected with overlapping networks between HO and a branch office

Which configuration meets the requirements for a customer site?

Option A

Option B

Option C

Option D

Full Access

Question # 154

Refer to the exhibit.

A network administrator must block ping from user 3 to the App Server only. An inbound standard access list is applied to R1 interface G0/0 to block ping. The network administrator was notified that user 3 cannot even ping user 9 anymore. Where must the access list be applied in the outgoing direction to resolve the issue?

R2 interface G1/0

R2 interface G0/0

SW1 interface G1/10

SW1 interface G2/21

Full Access

Question # 155

The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped.

access-list 100 permit ip host 172.16.1.99 any

class-map CM-ADMIN

match access-group 100

policy-map PM-COPP

class CM-ADMIN

police 500000 conform-action transmit

interface E0/0

service-policy input PM-COPP

CoPP failed to capture the desired traffic and the CPU load is getting higher.

Which two configurations resolve the issue? (Choose two.)

interface E0/0no service-policy input PM-COPP!control-planeservice-policy input PM-COPP

policy-map PM-COPPclass CM-ADMINno police 500000 conform-action transmitpolice 500 conform-action transmit!control-planeservice-policy input PM-COPP

no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80

no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80access-list 100 permit tcp host 172.16.1.99 any eq 443

policy-map PM-COPPclass CM-ADMINno police 500000 conform-action transmitpolice 500 conform-action transmit

Full Access

Question # 156

Refer to the exhibit.

R5 should not receive any routes originated in the EIGRP domain. Which set of configuration changes removes the EIGRP routes from the R5 routing table to fix the issue?

R4route-map O2R deny 10match tag 111route-map O2R permit 20!router ripredistribute ospf 1 route-map O2R metric 1

R2route-map E20 deny 20R4route-map O2R deny 10match tag 111!router ripredistribute ospf 1 route-map O2R metric 1

R4route-map O2R permit 10match tag 111route-map O2R deny 20!router ripredistribute ospf 1 route-map O2R metric 1

R4route-map O2R deny 10match tag 111!router ripredistribute ospf 1 route-map O2R metric 1

Full Access

Question # 157

Refer to the exhibit.

After a new regional office is set up,not all guests can access the internet via guest Wi

Fi. Clients are getting the correct IP address from guest Wi-Fi VLAN 364. which action resolves the issue ?

Allow 10.66.46.0/23 in the outbound ACL

Allow DNS traffic through the outbound ACL

Allow DNS traffic through the inbound ACL

Allow 10.66.46.0/23 in the inbound ACL

Full Access

Question # 158

Refer to the exhibit.

An administrator configured a Cisco router for TACACS authentication, but the router is using the local enable password instead Which action resolves the issue?

Configure the aaa authentication login admin group admin local enable command instead.

Configure the aaa authentication login admin group tacacs* local enable none command instead.

Configure the aaa authentication login admin group tacacs* local if-authenticated command instead.

Configure the aaa authentication login default group admin local if-authenticated command instead.

Full Access

Question # 159

:577

Refer to the exhibit. R3 is dual-homed to two service providers for traffic redundancy. R3 prefers its outbound traffic via R2. Which set of configurations achieves this goal?

Option A

Option B

Option C

Option D

Full Access

Question # 160

Refer to the exhibit.

An administrator is configuring a GRE tunnel to establish an EIGRP neighbor to a remote router. The

other tunnel endpoint is already configured. After applying the configuration as shown, the tunnel

started flapping. Which action resolves the issue?

Modify the network command to use the Tunnel0 interface netmask

Advertise the Loopback0 interface from R2 across the tunnel

Stop sending a route matching the tunnel destination across the tunnel

Readdress the IP network on the Tunnel0 on both routers using the /31 netmask

Full Access

Question # 161

Refer to the exhibit.

An engineer is trying to add an encrypted user password that should not be visible in the router configuration. Which two configuration commands resolve the issue? (Choose two)

password encryption aes

username Admin password Cisco@maedeh motamedi

username Admin password 5 Cisco@maedeh motamedi

username Admin secret Cisco@maedeh motamedi

no service password-encryption

service password-encryption

Full Access

Question # 162

Which protocol is used to determine the NBMA address on the other end of a tunnel when mGRE is used?

NHRP

IPsec

MP-BGP

OSPF

Full Access

Question # 163

When provisioning a device in Cisco DNA Center, the engineer sees the error message â€œCannot select the device. Not compatible with templateâ€.

What is the reason for the error?

The template has an incorrect configuration.

The software version of the template is different from the software version of the device.

The changes to the template were not committed.

The tag that was used to filter the templates does not match the device tag.

Full Access

Question # 164

An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1.255.255.255.252 along with the summary route. After finishing configuration, the customer complained not receiving summary route with specific loopback address. Which two configurations will fix it? (Choose two.)

Configure access-list 1 permit 10.1.1.0.0.0.0.3.

Configure access-list 1 permit 10.1.1.1.0.0.0.252.

Configure access-list 1 and match under route-map Leak-Route.

Configure route-map Leak-Route permit 10 and match access-list 1.

Configure route-map Leak-Route permit 20.

Full Access

Question # 165

Refer to the exhibit.

Which configuration configures a policy on R1 to forward any traffic that is sourced from

the 192.168.130.0/24 network to R2?

Option A

Option B

Option C

Option D

Full Access

Question # 166

Refer to the exhibit.

An engineer has configured DMVPN on a spoke router. What is the WAN IP address of another spoke router within the DMVPN network?

172.18.46.2

192.168.1.4

172.18.16.2

192.168.1.1

Full Access

Question # 167

:592

Refer to the exhibit An engineer investigates an IPv6 EIGRP neighbor adjacency issue that sees the neighbors flapping and issued a ping from R1 to its directly connected neighbor. The link between the switches is stable at Layer 2. and other connected devices are also functioning. Which action resolves the issue?

The switch between the two neighbors is not IPv6 compatible and must be replaced with an IPv6 compatible device.

Data is not reliably transmitted between the dynamically assigned link-local addresses of the routers and must be manually assigned.

Multicast packets are not reliably transmitted over the link, and the switch must be replaced.

The switch between the two neighbors is not configured for IPv6 multicast and must be configured for IPv6 multicast.

Full Access

Question # 168

Refer to the exhibit. After recovering from a power failure. Ethernet0/1 stayed down while Ethernet0/0 returned to the up/up state The default route through ISP1 was not reinstated m the routing table until Ethernet0/1 also came up Which action resolves the issue?

Reference the track object 1 in both static default routes

Remove the references to the interface names from both static default routes

Configure the default route through ISP1 with a higher administrative distance than 2.

Add a static route to the 8 8.8 8/32 destination through the next hop 203.0.113.1

Full Access

Question # 169

Refer to the exhibit.

A network engineer is adding a new spoke router into an existing DMVPN Phase 3 tunnel with a hub router to provide secure communication between sites Which additional configuration must the engineer apply to enable the tunnel to come up?

ip nhrp registration no-unique

ip nhrp server-only non-caching

ip nhrp responder tunnel

ip nhrpnhs 172.23.5.1

Full Access

Question # 170

Refer to the exhibit The SNMP server with IP address 172.16 4 4 cannot access host router A Which configuration command on router A resolves the issue?

snmp-server community ccnp

access-list 4 permit 172.16.4.0 0.0.0.3

access-list 4 permit host 172.16.4.4

snmp-server host 172.16.4.4 ccnp

Full Access

Question # 171

Refer to the exhibit. In Cuco DNA Center, a network engineer identifies that BGP-learned networks are repeatedly withdrawn from peers. Which configuration must the engineer apply to resolve the Issue?

Option A

Option B

Option C

Option D

Full Access

Question # 172

What is the function of BFD?

It provides uniform failure detection regardless of media type.

It creates high CPU utilization on hardware deployments.

It negotiates to the highest version if the neighbor version differs.

It provides uniform failure detection on the same media type.

Full Access

Question # 173

Which security feature can protect DMVPN tunnels?

IPsec

TACACS+

RTBH

RADIUS

Full Access

Question # 174

Which configuration adds an IPv4 interface to an OSPFv3 process in OSPFv3 address family configuration?

Router ospf3 1 address-family ipv4

Router(config-router)#ospfv3 1 ipv4 area 0

Router(config-if)#ospfv3 1 ipv4 area 0

Router ospfv3 1 address-family ipv4 unicast

Full Access

Question # 175

Which command is used to check IP SLA when an interface is suspected to receive lots of traffic with options?

show track

show threshold

show timer

show delay

Full Access

Question # 176

Which Cisco VPN technology can use multipoint tunnel, resulting in a single GRE tunnel interface on the hub, to support multiple connections from multiple spoke devices?

DMVPN

GETVPN

Cisco Easy VPN

FlexVPN

Full Access

Question # 177

A network engineer is investigating a flapping (up/down) interface issue on a core switch that is synchronized to an NTP server. Log output currently does not show the time of the flap. Which command allows the logging on the switch to show the time of the flap according to the clock on the device?

service timestamps log uptime

clock summer-time mst recurring 2 Sunday mar 2:00 1 Sunday nov 2:00

service timestamps log datetime localtime show-timezone

clock calendar-valid

Full Access

Question # 178

Which method changes the forwarding decision that a router makes without first changing the routing table or influencing the IP data plane?

nonbroadcast multiaccess

packet switching

policy-based routing

forwarding information base

Full Access

Question # 179

Refer to the exhibit.

An engineer is monitoring reachability of the configured default routes to ISP1 and ISP2. The default route from ISP1 is preferred if available. How is this issue resolved?

Use the icmp-echo command to track both default routes

Use the same AD for both default routes

Start IP SLA by matching numbers for track and ip sla commands

Start IP SLA by defining frequency and scheduling it

Full Access

Question # 180

Refer to the exhibit.

Which subnet is redistributed from EIGRP to OSPF routing protocols?

10.2.2.0/24

10.1.4.0/26

10.1.2.0/24

10.2.3.0/26

Full Access

Question # 181

Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

multi-paths eibgp 2

maximum-paths 2

Maximum-paths ibgp 2

multi-paths 2

Full Access

Question # 182

Refer to the exhibit. an engineer is trying to get 192.168.32.100 forwarded through 10.1.1.1, but it was forwarded through 10.1.1.2. What action forwards the packets through 10.1.1.1?

Configure EIGRP to receive 192.168.32.0 route with lower admin distance.

A. Configure EIGRP to receive 192.168.32.0 route with longer prefix than /19.

A. Configure EIGRP to receive 192.168.32.0 route with lower metric.

A. Configure EIGRP to receive 192.168.32.0 route with equal or longer prefix than /24.

Full Access

Question # 183

While troubleshooting connectivity issues to a router, these details are noticed:

Standard pings to all router interfaces, including loopbacks, are successful.

Data traffic is unaffected.

SNMP connectivity is intermittent.

SSH is either slow or disconnects frequently.

Which command must be configured first to troubleshoot this issue?

show policy-map control-plane

show policy-map

show interface | inc drop

show ip route

Full Access

Question # 184

Which protocol does VRF-Lite support?

IS-IS

ODR

EIGRP

IGRP

Full Access

Summer Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: myex65

300-410 Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Question and Answers

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Explanation:

Answer:

Answer:

Answer:

Answer:

Answer:

Explanation:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Explanation:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Answer:

Explanation:

Answer:

Answer:

Answer:

Answer:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Answer:

Explanation:

Answer:

Explanation:

Answer:

Answer:

Explanation:

Answer:

Explanation: