300-410 Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Question and Answers

RIPv2 and OSPF

OSPF and EIGRP

OSPF and ISIS

ISIS and RIPv2

Check and resolve reachability between the WLC and the NTP server

Reset the NTP server to resolve any synchronization issues for all devices

Check and resolve reachability between Cisco DNA Center and the NTP server

Check and configure NTP on the WLC and synchronize with Cisco DNA Center

Add a second line in the access list to permit any.

Modify the route map to permit the access list instead of deny it

Modify the access list to deny instead of permit it.

Add a second sequence in the route map permit 20

Option A

Option B

Option C

Option D

Change the direction of the distribute-list command from out to in.

Remove the line with the sequence number 5 from the prefix list.

Remove the prefix keyword from the distribute-list command.

Remove the line with the sequence number 10 from the prefix list.

Match the hello interval timers.

Configure the same EIGRP process IDs.

Match the authentication keys.

Configure the same autonomous system numbers.

HQ_R1(config)# ip sla responderHQ_R1(config)# ip sla responder icmp-echo 172.16.35.2

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.1

HQ_R2(config)# ip sla responderHQ_R2(config)# ip sla responder icmp-echo 172.16.35.5

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.2

match the passwords

match the hello timers

match the MTUs

match the network types

Modify line 10 of the access list to permit instead of deny.

Remove line 60 from the access list.

Modify line 30 of the access list to permit instead of deny.

Remove line 70 from the access list.

vrf definition Science！interface E 0/2ip address 192.168.1.1 255.255.255.0no shut！interface E 0/3ip address 192.168.2.1 255.255.255.0no shut

vrf definition Scienceaddress-family ipv4!interface E 0/2ip address 192.168.1.1 255.255.255.0vrf forwarding Scienceno shut!interface E 0/3ip address 192.168.2.1 255.255.255.0vrf forwarding Scienceno shut

vrf definition Scienceaddress-family ipv4!interface E 0/2ip address 192.168.1.1 255.255.255.0no shut!interface E 0/3ip address 192.168.2.1 255.255.255.0no shut

vrf definition Scienceaddress-family ipv4!interface E 0/2vrf forwarding Scienceip address 192.168.1.1 255.255.255.0no shut!interface E 0/3vrf forwarding Scienceip address 192.168.2.1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2interface Ethernet0/3ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2interface Ethernet0/1ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2!interface Ethernet0/3ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255!route-map PBR1 permit 10match ip address 101set ip next-hop 172.18.1.2!interface Ethernet0/1ip policy route-map PBR1

Configure DSW1(config-if)#ipv6 helper address 2002:404:404::404:404

Configure DSW1(dhcp-config)#default-router 2002:A04:A01::A04:A01

Configure DSW1(config)#ipv6 route 2002:404:404:404:404/128 FastEthernet1/0

Configure DSW1(config-if)#ipv6 dhcp relay destination 2002:404:404::404:404 GigabitEthernet1/2

Option A

Option B

Option C

The issue with using BGP must be resolved by using another protocol and redistributing it into EIGRP on R3

The routing loop must be fixed by reducing the admin distance of iBGP from 200 to 100 on R3

The routing loop must be fixed by reducing the admin distance of OSPF from 110 to 80 on R3

The issue with using iBGP must be fixed by running eBGP between R3 and R4

Enter the service timestamps log datetime localtime global command.

Enter the service timestamps log datetime synchronize global command.

Enter the service timestamps log datetime console global command.

Enter the service timestamps log datetime clock-period global command

The P routers must be configured for MP-iBGP toward the PE routers

The P routers must be configured with RSVP.

The PE routers must be configured for MP-iBGP with other PE routers

The PE routers must be configured for MP-eBGP to connect to CEs

The P and PE routers must be configured with LDP or RSVP

Change the administrative distance of the external EIGRP to 90.

Apply the outbound distribution list on R5 toward R4 in OSPF.

Change the administrative distance of OSPF to 200 on R5.

Redistribute OSPF into EIGRP on R4

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

Detect Mult

Required Min Echo RX Interval

Desired Min TX Interval

Required Min RX Interval

LSP

RSVP

ECMP

LDP

MPLS OAM

R1 and R4

R1 and R5

R4 and R5

R2 and R5

tunnel interface of the hub with ip nhrp ospf dr

OSPF priority to 0

route map to set the metrics of learned routes to 110

OSPF priority greater than 1

Desired Min TX Interval

Detect Mult

Required Min RX Interval

Required Min Echo RX Interval

LDP and BGP can be used for Pseudowire signaling.

It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.

BGP is used for signaling customer VPNv4 routes between PE nodes.

A packet with node segment ID is forwarded along with shortest path to destination.

Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

Configure the correct authentication password using SNMPv3 authPriv .

Configure the correct authentication password using SNMPv3 authNoPriv.

Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.

Configure correct authentication and privacy passwords using SNMPv3 authPriv.

Option A

Option B

Option C

Option D

Configure to match the OSPF interface speed and duplex settings on both routers.

Configure to match the OSPF interface MTU settings on both routers.

Configure to match the OSPF interface unique IP address and subnet mask on both routers.

Configure to match the OSPF interface network types on both routers.

Option A

Option B

Option C

Option D

Configure router with NetFlow data

Configure router with the telemetry data

Configure router with routing to reach Cisco DNA Center

Configure router with SNMPv2c or SNMPv3 traps

Configure crypto isakmp key cisco address 0.0.0.0 on the hub.

Configure crypto isakmp key Cisco address 200.1.0.0 255.255.0.0 on the hub.

Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes.

Configure crypto isakmp key cisco address 0.0.0.0 on the spokes.

Configure the logging synchronous command

Configure the no logging console debugging command globally

Configure the logging synchronous level all command

Configure the term no mon command globally

by IPv6 routing protocols to securely build neighborships without the need of authentication

by the recovery mechanism to recover the binding table in the event of a device reboot

by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways

by various IPv6 guard features to validate the data link layer address

by storing hashed keys for IPsec tunnels for the built-in IPsec features

All VRFs share customers routing and CEF tables .

An interface must be associated to one VRF.

Each VRF has a different set of routing and CEF tables

It is defined by the VPN membership of a customer site attached to a P device.

A customer site can be associated to different VRFs

VACL blocking broadcast frames from nonauthorized hosts

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

PVLANs with community ports associated to route advertisements and isolated ports for nodes

IPv4 ACL blocking route advertisements from nonauthorized hosts

NYrouter ospf 1area 0 authentication message-digest

LAinterface E 0/0ip ospf message-digest-key 1 md5 Cisco123

NYinterface E 0/0no ip ospf message-digest-key 1 md5 Cisco123ip ospf authentication-key Cisco123

LAinterface E 0/0ip ospf authentication-key Cisco123

LArouter ospf 1area 0 authentication message-digest

The RD and RT values must match under the VRR

The RD and RT values under a VRF must match on the remote PE router

The import and export RT values under a VRF must always be the same.

The label switch path must be available between the local and remote PE routers.

Fix route dampening configured on the router.

Replace the SFP module because it is not supported.

Fix IP Event Dampening configured on the interface.

Correct the IP SLA probe that failed.

service dhcp-relay command on R1

ip dhcp option 82 command on R2

service dhcp command on R1

ip dhcp relay information enable command on R1

ip dhcp relay information trust-all command on R2

Advertise the branch WAN interface matching subnet for the DR site.

Configure matching hello and dead intervals between sites.

Configure the WAN interface for DR site in the related OSPF area.

Stabilize the DR site flapping link to establish OSPF adjacency.

ip verify unicast source reachable-via rx

ip verify unicast source reachable-via any

ip verify unicast source reachable-via allow-default

ip verify unicast source reachable-via 12-src

access-class INTERNET in

ipv6 traffic-filter INTERNET in

ipv6 access-class INTERNET in

ip access-group INTERNET in

route-mmap SETLP permit 10match ip address prefix-list PLIST1set local-preference 99route-map SETLP permit 20

route-map SETLP permit 10match ip address prefix-list PLIST1set local-preference 110route-map SETLP permit 20

router bgp 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.10.1 route-map SETLP out

router bap 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.20.2 route-map SE TLP in

Interface Tunnel1no ip split-horizon eigrp 111

Interface Tunnel1Ip next-hop-self elgrp 111

Interface Tunnel1tunnel mode Ipsec Ipv4

Interface Tunnel1tunnel protection ipsec profile IPSec-PROFILE

R2ip route 10.1.1.1 255.255.255.255 192.168.1.1！router bgp 200neighbor 10.1.1.1 tti-security hops 1neighbor 10.1.1.1 update-source loopback 0

R2ip route 10.1.1.1 255.255.255.255 192.168.1.1！router bgp 200neighbor 10.1.1.1 disable-connected-checkneighbor 10.1.1.1 update-source loopback 0

R2ip route 10.1.1.2 255.255.255.255 192.168.1.2！router bgp 100neighbor 10.1.1.2 ttl-security hops 1neighbor 10.1.1.2 update-source loopback 0

R1ip route 10.1.1.2 255.255.255.255 192.168.1.2！router bgp 100neighbor 10.1.1.1 ttl-security hops 1neighbor 10.1.1.2 update-source loopback 0

R1ip route 10.1.1.2 255.255.255.255 192.168.1.2！router bgp 100neighbor 10.1.1.2 disable-connected-checkneighbor 10.1.1.2 update-source Loopback0

VPN-IPv4 prefix combined with the 64-bit route distinguisher

48-bit route combining the IP and PE router-id

prefix that combines the ASN, PE router-id, and IP prefix

eBGP path association between the PE and CE sessions

Configure all devices for SNMPv3 informs with priv.

Configure all devices for SNMPv3 informs with auth.

Configure all devices for SNMPv3 traps with auth.

Configure all devices for SNMPv3 traps with priv.

Copy the .cert file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

Delete the WLC 3504 from Cisco DNA Center and add it to Cisco DNA Center again.

Add the WLC 3504 under the hierarchy of the Catalyst 9300 connected devices.

Copy the .pern file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

Option A

Option B

Option C

Option D

Configure TACACS+ synchronization with the Active Directory admin group

Configure the username from a local database

Configure full access for the username from TACACS+ server

Configure an authorized IP address for this user to access this router

RouterB(config-if)#lp helper-address 172.31.1.1

RouterBiconfig-ififclp helper-address 255.255 255 255

RouterB(config-if)#lp helper-address 172.16.1.1

RouterB(config-if)#lp helper-address 172.16.1.2

Option A

Option B

Option C

Option D

Configure R4 as a route reflector server and configure R1 as a route reflector client

Configure R1 as a route reflector server and configure R2 and R3 as route reflector clients

Configure R4 as a route reflector server and configure R2 and R3 as route reflector clients.

Configure R1 as a route reflector server and configure R4 as a route reflector client

Configure a source port for the SSH connection to initiate

Configure a TACACS+ server and enable it

Configure transport input ssh command on the console

Configure a domain name

Configure a crypto key to be generated

Packets are not evaluated by sequence 10.

Packets are evaluated by sequence 10.

Packets are forwarded to the default gateway.

Packets are forwarded using normal route lookup.

Packets are dropped by the access list.

LOCAL_PREF

MED

WEIGHT

AS-PATH

IPv6 Router Advertisement Guard

IPv6 Destination Guard

DHCPv6 Guard

IPv6 MAC address filtering

flow monitor Flowmonitor1destination 10.221.10.11

flow exporter FlowAnalyzer1destination 10.221.10.11

interface Ethernet0/1flow-destination 10.221.10.11

interface Ethernet0/0flow-destination 10.221.10.11

MASS-RTR(config-archive-log-cfg)#password encryption aes

MASS-RTR(config)#aaa authentication arap

MASS-RTR(config)#service password-encryption

MASS-RTR(config-archive-log-cfg)#hidekeys

Option A

Option B

Option C

Option D

label swap

explicit-null

label imposition

PHP

IPLFA

MPLS OAM

VPLS

SO-MPLS

Fast-Rwoute

It messages between a DHCPv6 server and a DHCPv6 client ( or relay agent).

It shows that clients of a DHCPv5 server are affected.

It block DHCPv6 messages from relay agents to a DHCPv6 server.

It allows DHCPv6 replay and advertisements from (rouge) DHCPv6 servers.

Option

Option

Option

Option

Option A

Option B

Option C

Option D

A1interface fa0/0description To->ISPip add 172.31.100.1 255.255.255.0no shut!router ospf 100net 172.31.100.1 0.0.0.255 area 0A2interface fa0/0description To->ISPip add 172.31.200.1 255.255.255.0no shut!router ospf 100net 172.31.200.1 0.0.0.255 area 0

A1interface fa0/0description To->ISPip vrf forwarding Aip add 172.31.100.1 255.255.255.0no shut!router ospf 100net 172.31.100.1 0.0.0.255 area 0A2interfacefa0/0description To->ISPip vrf forwarding Aip add 172.31.200.1 255.255.255.0no shut!router ospf 100net 172.31.200.1 0.0.0.255 area 0

A1interface fa0/0description To->ISPip add 172.31.200.1 255.255.255.0no shut!router ospf 100net 172.31.200.1 0.0.0.255 area 0A2interface fa0/0description To->ISPip add 172.31.100.1 255.255.255.0no shut!router ospf 100net 172.31.100.1 0.0.0.255 area 0

A1interface fa0/0description To->ISPip vrf forwarding Aip add 172.31.100.1 255.255.255.0no shut!router ospf 100 vrf Anet 172.31.200.1 0.0.0.255 area 0A2interface fa0/0description To->ISPip vrf forwarding Aip add 172.31.100.1 255.255.255.0no shut!router ospf 100 vrf Anet 172.31.200.1 0.0.0.255 area 0

transport input telnet

login and password

no exec

exec 0.0

1

2

3

4

The administrative distance should be raised to 120 from the ASBR 10.4.15 5.

The redistributed prefixes should be advertised as Type 1

The ASBR 10 4 17 6 should assign a tag to match and assign a lower metnc on R1

The administrative distance should be raised to 120 from the ASBR 104.17.6

The admitstrative distance should be raised to 120 from the ASBR 104 15.5.

The redistributed prefixes should be advertised as Type 1.

The ASBR 10 4 17 6 should assign a tag to match and assign a tower metnc on R1

Remove default route from spoke routers to establish a spoke-to-spoke tunnel.

Configure a static route in each spoke to establish a spoke-to-spoke tunnel.

Rectify incorrect wildcard mask configured on the hub router network command.

Disable EIGRP split horizon on the TunnelO interface of the hub router.

set ip precedence critical in route-map Texas permit 10

set ip precedence critical in route-map Texas permit 20

set ip precedence immediate in route-map Texas permit 10

set ip precedence priority in route-map Texas permit 20

Configure the eigrp stub command under theElGRP process on R3

Configure the summaryaddress 192.168.0.0 255.255.0.0 100 command on R3

Configure the eigrp stub leak-map command under the EIGRPprocess on R1

Configurethe eigrp stub command under theElGRP process on R2

Router R1 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

Router R1 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are received on R1.

Router 10.1.100.10 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are summarized toward R1.

Router 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

tunnel protection mode ipv6

ipv6 unicast-routing

ipv6 nhrp holdtime 30

tunnel mode gre multipoint ipv6

with a combination of VRF-Lite and MP-BGP

by pushing MPLS labels advertised by LDP on customer routes

by enabling multiple instances of BGP. one for each CE router

by assigning CE-facing interfaces to different VRFs

The neighbor requires a soft reconfiguration, and this will clear the policy without resetting the BGP TCP connection.

The prefix lit requires all prefixes that R1 is advertising to be added to it, and this will allow additional prefixes to be advertised.

The route map requires a deny 20 statement without set conditions, and this will allow additional prefixes to be advertised.

The route map requires a permit 20 statement without set conditions, and this will allow additional prefixes to be advertised.

Configure the next hop of 10.20.20.1 in the prefix list DMZ-STATIC

Configure the next-hop interface at the end of the static router for it to get redistributed

Configure a permit 20 statement to the route map to redistribute the static route

Configure the subnets keyword in the redistribution command

Option A

Option B

Option C

Option D

ipv6 address autoconfig command on the interface

ipv6 dhcp server automatic command on DHCP server

ipv6 dhcp relay-agent command on the interface

service dhcp command on DHCP server

extended-community

MPLS label

RD

RT

ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9.

ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8

ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9 ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

Rediscover all the router interfaces through SNMP after the router is reloaded

Save the router configuration to startup-config before reloading the router

Configure SNMP to use static OlDs referring to individual router interfaces

Configure SNMP interface index persistence on the router

reduction in time needed to detect Layer 2 switched neighbor failures

reduction in time needed to detect Layer 3 routing neighbor failures

reduction in CPU needed to detect Layer 2 switch neighbor failures

reduction in CPU needed to detect Layer 3 routing neighbor failures

The redistribution command isincorrect on R1 The default metric metric 200 should be inducted with the redistribution command.

The Loopback interface on R1 is administratively down The interface should be enabled with the no shutdown command

R2 must use a different OSPF process number and should be changed lo ospf 1 to match R1

The redistribution command is incorrect on R1 The keyword subnets should be included with the redistribution command

Option

Option

Option

Option

Option

Option

Option

Option

crypto isakmp policy 5authentication pre-shareencryption 3deshash shagroup 2!crypto isakmp key cisco123 address 200.1.1.3

crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123 address 200.1.1.3

crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123 address 199.1.1.1

crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123! address 199.1.1.1

On the R1 FO/0 interface, configure OSPF priority to 255.

On the R2 FO/0 interface, configure OSPF priority to 201.

On the R1 F0/0 interface, configure OSPF priority to 202.

On the R3 FO'O interface, configure OSPF priority to 201.

On the R2 FO/0 interface, configure OSPF priority to 200.

Configure IOS control plane protection using ACL 90 on interface E1/0

Configure IOS management plane protection using ACL 90 on interface E1/0

Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12

Add a permit statement including the host 10.11.110.12 into ACL 90

Extend the DHCP lease time because R1 removed the IPv6 address earlier after the lease expired.

Configure H1 as the DHCP client that manually assigns the IPv6 address on interlace e0/0..

Use the 2001:DBB:BAD:C0DE::/64 prefix for the DHCP pool on R1.

Configure authorized DHCP servers to avoid IPv6 addresses from a rogue DHCP server.

interface E0/0no service-policy input PM-COPP!control-planeservice-policy input PM-COPP

policy-map PM-COPPclass CM-ADMINno police 500000 conform-action transmitpolice 500 conform-action transmit!control-planeservice-policy input PM-COPP

no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80

no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80access-list 100 permit tcp host 172.16.1.99 any eq 443

policy-map PM-COPPclass CM-ADMINno police 500000 conform-action transmitpolice 500 conform-action transmit

Include a valid source-interface keyword in the icmp-echo statement.

Reference the track object 1 on the default route through ISP2 instead of ISP1.

Modify the static routes to refer both to the next hop and the outgoing intertace.

Modify the threshold to match the administrative distance of the ISP2 route.

Set metric-type 2 at Site-A RTR1, and set metric-type 1 at Site-B RTR2

Set OSPF cost 100 at Site-A RTR1, and set OSPF Cost 200 at Site-B RTR2

Set OSPF cost 200 at Site: A RTR1 and set OSPF Cost 100 at Site-B RTR2

Set metric-type 1 at Site-A RTR1, and set metric-type 2 at Site-B RTR2

Increase path bandwidth lower than 1011 2 and lower than 1012 2 between RtrA and the destination

Increase path bandwidth higher than 10.1 2 2 and lower than 101.1.2 between RtrA and the destination.

Increase path bandwidth higher than 1011 2 and lower than 1012 2 between RtrA and the destination

Increase path bandwidth higher than 10.1 2 2 and higher than 10.1.1.2 between RtrA and the destination

Option A

Option B

Option C

Option D

Option E

IS-IS

OSPF

BGPIPv4

MP-BGP

requires IPv6 snooping on Layer 2 access or trunk ports

used in service provider deployments to protect DDoS attacks

requires the user to configure a static binding

requires that validate prefix be enabled

recovers missing binding table entries

Increase the MTU on the interfaces that connect R1 and R2.

Increase the available bandwidth between R1 and R2.

Decrease the EIGRP keepallve and hold down timers on R1 and R2.

Set static EIGRP neighborship between R1 and R2.

Configure OSPF between R1. ISP-A. and ISP-B for dynamic failover if any ISP link to R1 fails

Configure two static routes on R1. one pointing to ISP-A and another pointing to ISP- B with 222 admin distance

Change the bandwidth of the interface on R1 so that interface to ISP-A has a higher value than the interface to ISP-B

Configure two static routes on R1. one pointing to ISP-B with more specific routes and another pointing to ISP-A with summary routes

Option A

Option B

Option C

Option D

ip sla responder udp-echo ipaddress 1.1.1.1 port 1967

ip sla responder tcp-connect ipaddress 1.1.1.1 port 3000

ip sla responder tcp-connect ipaddress 2.2.2.2 port 3001

ip sla responder

access-list 1 permit 132.108.0.0 0.0.1.255

access-list 1 permit 132.108.0.0 0.0.3.255

access-list 1 permit 132.108.2.0 0.0.0.255

access-list 1 permit 132.108.4.0 0.0.3.255

Option A

Option B

Option C

Option D

16-byte Route Distinguisher

8-byte Route Target

16-byte Route Target

8-byte Route Distinguisher

Interface Tunnel1tunnel source 199.1.1.1tunnel destination 200.1.1.3ip address 192.168.1.3 255.255.255.0

Interface Tunnel1tunnel source 200.1.1.3tunnel destination 199.1.1.1ip address 192.168.1.1.255.255.255.0

Interface Tunnel1tunnel source 200.1.1.3tunnel destination 199.1.1.1ip address 192.168.1.3.255.255.255.0

Interface Tunnellunnel source 199.1.1.1tunnel destination 200.1.1.3ip address 192.168.1.1.255.255.255.0

Use pseudowire for Layer 2 routes

Use MP-BGP for customer routes

Use OSPF between PE and CE

Use a unique RD per customer VRF

Use LDP for customer routes

Set the eigrp variance equal to 4 to install a second route with a metric not larger than 4 times of the best metric.

Change the EIGRP delay metric to meet the feasibility condition.

Set the eigrp variance equal to 3 to install a second route with a metric not larger than 3 times of the best metric.

Disable the eigrp split horizon loop protection mechanism.

Remove FE80 A8BB CCFF FEOO 5000 assigned by the IPV6 DHCP server.

Add Ipv6 dhcp sarver MY_POOL under the interface ethernet 0/0 on H1.

Add Ipv6 dhcp server MY_POOL under the interface ethernet 0/0 on R1.

Configure FF02::1:2 to discover al IPv6 OHCP cfcents

session between neighbors that are connected no more than one hop away

LDP session established between LSRs by exchanging TCP hello packets

label distribution session between non-directly connected neighbors

LDP session established by exchanging multicast hello packets

Add transport input SCP

Add transport input none

Remove the IPv6 traffic filter from R1, which is blocking the Telnet.

Remove the IPv6 traffic from R1, which is blocking the SSH

It provides uniform failure detection regardless of media type.

It creates high CPU utilization on hardware deployments.

It negotiates to the highest version if the neighbor version differs.

It provides uniform failure detection on the same media type.

Change the R1 dead timer to 20.

Change the R2 dead timer to 20.

Change the R2 hello timer to 20.

Change the R1 hello timer to 20.

RC(config)#router bgp 65201RC(config-router)#neighbor 10.10.10.4 route-reflector-client

RF(config)#router bgp 65201RF(config-router)#neighbor 10.10.10.6 route-reflector-client

RC(config)#router bgp 65201RC(config-router)#neighbor 10.10.10.2 route-reflector-client

RB(config)router bgp 65201RB(config-router)#neighbor 10.10.10.3 route-reflector-client

Rectify the incorrect router ID in R2.

Enable split-horizon.

Configure the network statement on the neighbor.

Resolve the incorrect metric on the link.

Change the WAN ACL to permit the UDP port 69 to allow TFTP

Make the permit udp any eq tftp any entry the last entry in the WAN ACL.

Change the WAN ACL to permit the entire UDP destination port range

Shorten the file name to the 8+3 naming convention.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

MPLS labels and the IP address of the router that receives the message

the version number and the AS number to which the router belongs

IP routing information and the AS number to which the router belongs

NLRI, path attributes, and IP addresses of the sending and receiving routers

Decrease the committed burst Size of the mgmt class map

Increase the CIR of the mgmt class map

Add a new class map to match TCP traffic

Add one new entry in the ACL 120 to permit the UDP port 161

Add the aaa authentication login default none command to the global configuration.

Replace the capital “C” with a lowercase “c” in the aaa authentication login Console local command.

Add the aaa authentication login default group tacacs+ local-case command to the globalconfiguration.

Add the login authentication Console command to the line configuration

DMVPN

MPLS VPN

Virtual Tunnel Interface (VTI)

SSL VPN

PPPoE

configure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc

configure capability vrf-lite on Head Office and its connected PE router under router ospf 1 vrf abc

configure capability vrf-lite on both PE routers connected to Head Office and Site A routers under routtr ospf 1 vrf abc

configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network.

Route distinguishers define which prefixes are imported and exported on the edge router.

IPsec

TACACS+

RTBH

RADIUS

The ip nhrp redirect command is missing on the spoke routers.

The ip nhrp shortcut command is missing on the spoke routers.

The ip nhrp redirect commands is missing on the hub router.

The ip nhrp shortcut commands is missing on the hub router.

The ip nhrp map command is missing on the hub router.

permit tcp port 443

permit udp port 465

permit tcp port 465

permit tcp port 22

It teams and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables

It teams and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables

It team and secures binding for stateless autoconfiguration addresses in Layer 2 neighbor tables.

Set the administrative distance 100 under the RIP process on R2.

Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.

Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.

Redistribute the directly connected interfaces on R2.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Configure the server to use DHCP on the network with default gateway 200 30.40.100.

Configure the server with a static IP address and default gateway.

Configure the router to exclude a server IP address.

Configure the server to use DHCP on the network with default gateway 200 30.30.100.

Configure the router to exclude a server IP address and default gateway.

Filter RIP routes back into RIP when redistributing into RIP in R2

Filter OSPF routes into RIP FROM EIGRP when redistributing into RIP in R2.

Filter all routes except RIP routes when redistributing into EIGRP in R2.

Filter RIP AND OSPF routes back into OSPF from EIGRP when redistributing into OSPF in R2

Filter all routes except EIGRP routes when redistributing into OSPF in R3.

Option A

Option B

Option C

Option D

Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool

Configure the DHCP lease time to a smaller value

Configure the DHCP lease time to a bigger value

Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool

Issue the eigrp stub command on R1

Issue the no neighbor stub command on R2.

Issue the eigrp command on R2.

Issue the no eigrp stub command on R1.

The device must be resynced to Cisco DNA Center.

The software image for the device is in install mode.

The device has lost connectivity to Cisco DNA Center.

The software image for the device is in bundle mode

It does not offer protection in environments where IPv6 traffic is tunneled.

It cannot be configured on a switch port interface in the ingress direction.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

It is not supported in hardware when TCAM is programmed.

Match the authentication port

Match the accounting port

Correct the timeout value.

Correct the shared secret.

It detects local link failure at layer 1 and updates routing table.

It detects local link failure at layer 2 and updates routing protocols.

It has sub-second failure detection for layer 1 and layer 3 problems.

It has sub-second failure detection for layer 1 and layer 2 problems.

Move the SSH entry to the beginning of the ACL

Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works

Temporarily remove the ACL from the interface to see if the flow works

Run the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it

Configure access-list 1 permit 10.1.1.0.0.0.0.3.

Configure access-list 1 permit 10.1.1.1.0.0.0.252.

Configure access-list 1 and match under route-map Leak-Route.

Configure route-map Leak-Route permit 10 and match access-list 1.

Configure route-map Leak-Route permit 20.

Dynamic routing protocols always have priority over static routes.

The metric of the OSPF route is lower than the metric of the static route.

The configured AD for the static route is higher than the AD of OSPF.

The syntax of the static route is not valid, so the route is not considered.

An authentication error with the NTP server results in an incorrect timestamp.

The keyword localtime is not defined on the timestamp service command.

The NTP server is in a different time zone.

The system clock is set incorrectly to summer-time hours.

show ip vrf

show ip route vrf

show run vrf

show ip protocols vrf

Route distinguishers define which prefixes are imported and exported on the edge router

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network

Configure SNMP rw permission in addition to community ciscotest.

Modify access list 1 and allow operations subnet in the access list.

Modify access list 1 and allow SNMP in the access list.

Configure SNMP rw permission in addition to version 1.

Configure SNMP rw permission in addition to community ciscotest 1.

Option A

Option B

Option C

Option D

show track

show threshold

show timer

show delay

Router ospf3 1 address-family ipv4

Router(config-router)#ospfv3 1 ipv4 area 0

Router(config-if)#ospfv3 1 ipv4 area 0

Router ospfv3 1 address-family ipv4 unicast

service timestamps log uptime

clock summer-time mst recurring 2 Sunday mar 2:00 1 Sunday nov 2:00

service timestamps log datetime localtime show-timezone

clock calendar-valid

The summary-address command is used only for summarizing prefixes between areas.

The summary route is visible only in the OSPF database, not in the routing table.

There is no route for a subnet inside 10.0.0.0/8, so the summary route is not generated.

The summary route is not visible on this router, but it is visible on other OSPF routers in the same area.

Enter the transport input ssh configuration command.

Enter the terminal monitor exec command.

Enter the logging console debugging configuration command.

Enter the aaa new-model configuration command.

route-map FILTER-IN deny 5

ip prefix-list 102 seq 15 permit 0.0.0.0/32 le 32

ip prefix-list 102 seq 5 permit 0.0.0.0/32 le 32

route-map FILTER-IN permit 20

Option A

Option B

Option C

Option D

Option A

Option B

Option C

Option D

Use the icmp-echo command to track both default routes

Use the same AD for both default routes

Start IP SLA by matching numbers for track and ip sla commands

Start IP SLA by defining frequency and scheduling it

DMVPN

GETVPN

Cisco Easy VPN

FlexVPN

BGP

LLDP

EIGRP

NHRP

The redistributed EIGRP routes appear as type 3 LSAs in the OSPF database

The redistributed EIGRP routes appear as type 5 LSAs in the OSPF database

The administrative distance of the redistributed routes is 170

The redistributed EIGRP routes appear as OSPF external type 1

The redistributed EIGRP routes as placed into an OSPF area whose area ID matches the EIGRPautonomous system number

The redistributed EIGRP routes appear as OSPF external type 2 routes in the routing table

Pop the label

Impose the label

Include the EXP bit

Exclude the EXP bit

Use an extended access list instead of a standard access list.

Change sequence 10 in the route-map command from permit to deny.

Use a prefix list instead of an access list in the route map.

Add this statement to the route map: route-map RM-OSPF-DL deny 20.

multi-paths eibgp 2

maximum-paths 2

Maximum-paths ibgp 2

multi-paths 2

The local preference value in another neighbor statement is higher than 250.

The local preference value should be set to the same value as the weight in the route map.

The route map is applied in the wrong direction.

The weight value in another neighbor statement is higher than 200.

sudo maglev-config update

sudo maglev install config update

sudo maglev reinstall

sudo update config install

show snmp group

show snmp user

show snmp

show snmp view

By default, only internal routes and external type 1 routes are redistributed into BGP

Only classful networks are redistributed from OSPF to BGP

BGP convergence is slow, so the route will eventually be present in the BGP table

By default, only internal OSPF routes are redistributed into BGP

Network 172.16.1.0/24 is not redistributed into OSPF.

Network 10.10 10.0/24 is not redistributed into OSPF

Network 172.16.1.0/24 is redistributed with administrative distance of 1.

Network 10.10.10.0/24 is redistributed with administrative distance of 20.

SWAP and POP

SWAP and PUSH

PUSH and PHP

PUSH and POP

R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.

Route reflector setup requires full IBGP mesh between the routers.

In route reflector setup, only classful prefixes are advertised to other clients.

In route reflector setups, prefixes are not advertised from one client to another.

Option A

Option B

Option C

Option D

Start-time 00:00

Start-time 0

Start-time immediately

Start-time now

R1(config)# ip vrf InetR1(config-vrf)#interface FastEthernet0/0R1(config-if)#ip vrf forwarding Inet

R1(config)#router ospf 1 vrf InetR1(config-router)#ip vrf forwarding FastEthernet0/0

R1(config)#ip vrf Inet FastEthernet0/0

R1(config)# ip vrf InetR1(config-vrf)#ip vrf FastEthernet0/0

Configure EIGRP to receive 192.168.32.0 route with lower admin distance.

A. Configure EIGRP to receive 192.168.32.0 route with longer prefix than /19.

A. Configure EIGRP to receive 192.168.32.0 route with lower metric.

A. Configure EIGRP to receive 192.168.32.0 route with equal or longer prefix than /24.

20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit