Update CCNP Enterprise Advanced Routing ENARSI 300-410 Real Questions

test2022-07-21T06:42:06+00:00

Are you prepared to take the Cisco 300-410 ENARSI exam? We created this online practice exam to help you prepare for the Cisco CCNP Enterprise 300-410 certification exam. Our CCNP Enterprise Advanced Routing ENARSI 300-410 Real Questions cover all of the subjects covered on the CCNP Enterprise 300-410 exam, so you’ll know exactly how to pass the Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) exam. FreeTestShare 100% 300-410 Real Questions contain real exam questions and answers to help you pass CCNP 300-410 exam on the first try.

Try these 300-410 sample questions to check whether you are ready for your exam!

Page 1 of 10

1. What is the purpose of the DHCPv6 Guard?

It messages between a DHCPv6 server and a DHCPv6 client (or relay agent).

It shows that clients of a DHCPv5 server are affected.

It block DHCPv6 messages from relay agents to a DHCPv6 server.

It allows DHCPv6 replay and advertisements from (rouge) DHCPv6 servers.

2. Refer to the exhibit.

An engineer configured user login based on authentication database on the router, but no one can log into the router.

Which configuration resolves the issue?

aaa authentication login default enable

aaa authorization network default local

aaa authentication login default local

aaa authorization exec default local

3. Refer to the exhibit.

A network administrator redistributed the default static route into OSPF toward all internal routers to reach to Internet.

Which set of commands restores reachability to the Internet by internal routers?

router ospf 1 default-information originate

router ospf 1 network 0.0.0.0 0.0.0.0 area 0

router ospf 1 redistribute connected 0.0.0.0

router ospf 1 redistribute static subnets

4. Which list defines the contents of an MPLS label?

20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

5. Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

multi-paths eibgp 2

maximum-paths 2

Maximum-paths ibgp 2

multi-paths 2

6. Refer to the exhibit.

R4 is experiencing packet drop when trying to reach 172.16.2.7 behind R2.

Which action resolves the issue?

Insert a /16 floating static route on R2 toward R3 with metric 254

Insert a /24 floating static route on R2 toward R3 with metric 254

Enable auto summarization on all three routers R1, R2, and R3

Disable auto summarization on R2

7. Refer to the exhibit.

# Show IP route on R1

All the serial between R1, R2, and R3 have the Same bandwidth. User on the 192.168.1.0/24 network report slow response times while they access resource on network 192.168.3.0/24. When a traceroute is run on the path. It shows that the packet is getting forwarded via R2 to R3 although the link between R1 and R3 is still up.

What must the network administrator to fix the slowness?

Change the Administrative Distance of EIGRP to 5.

Add a static route on R1 using the next hop of R3.

Remove the static route on R1.

Redistribute theR1 route to EIGRP

8. Refer to the exhibit.

Which action limits the access to R2 from 192.168.12.1?

Swap sequence 10 with sequence 20 in access-list 100.

Modify sequence 20 to permit tcp host 192.168.12.1 eq 22 any to access-list 100

Swap sequence 20 with sequence 10 in access-list 100

Modify sequence 10 to deny tcp any eq 22 any to access-list 100.

9. Refer to the exhibit.

An engineer cannot copy the IOS.bin file from the FTP server to the switch.

Which action resolves the issue?

Allow file permissions to download the file from the FTP server.

Add the IO

bin file, which does not exist on FTP server.

Make memory space on the switch flash or USB drive to download the file.

Use the copy flash:/ ftp://[email protected]/IO

bin command.

10. Refer to the Exhibit.

R1 and R2 use IGP protocol to route traffic between AS 100 and AS 200 despite being configured to use BGP.

Which action resolves the issue and ensures the use of BGP?

Configure distance to 100 under the EIGRP process of R1 and R2.

Remove distance commands under BGP AS 100 and AS 200.

Remove distance commands under BGP AS 100.

Configure distance to 100 under the OSPF process of R1 and R2

Page 2 of 10

11. DRAG DROP

Drag and drop the ICMPv6 neighbor discovery messages from the left onto the correct packet types on the right.

12. Exhibit:

Bangkok is using ECMP to reach to the 192.168.5.0/24 network. The administrator must configure Bangkok in such a way that Telnet traffic from 192.168.3.0/24 and192.168.4.0/24 networks uses the HongKong router as the preferred router.

Which set of configurations accomplishes this task?

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.18.1.2 interface Ethernet0/3 ip policy route-map PBR1

access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.18.1.2 interface Ethernet0/1 ip policy route-map PBR1

13. DRAG DROP

Drag and drop the MPLS concepts from the left onto the descriptions on the right.

14. Refer to the exhibit.

The neighbor relationship is not coming up.

Which two configurations bring the adjacency up? (Choose two)

NY router ospf 1 area 0 authentication message-digest

LA interface E 0/0 ip ospf message-digest-key 1 md5 Cisco123

NY interface E 0/0 no ip ospf message-digest-key 1 md5 Cisco123 ip ospf authentication-key Cisco123

LA interface E 0/0 ip ospf authentication-key Cisco123

LA router ospf 1 area 0 authentication message-digest

15. Which protocol is used in a DMVPN network to map physical IP addresses to logical IP addresses?

BGP

LLDP

EIGRP

NHRP

16. Which two solutions are used to overcome a flapping link that causes a frequent label binding exchange between MPLS routers? (Choose two)

Create link dampening on links to protect the session.

Increase input queue on links to protect the session.

Create targeted hellos to protect the session.

Increase a hold-timer to protect the session.

Increase a session delay to protect the session.

17. What is an advantage of using BFD?

It detects local link failure at layer 1 and updates routing table.

It detects local link failure at layer 2 and updates routing protocols.

It has sub-second failure detection for layer 1 and layer 3 problems.

It has sub-second failure detection for layer 1 and layer 2 problems.

18. Refer to the exhibits.

Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN.

Which two commands are missing? (Choose two.)

The ip nhrp redirect command is missing on the spoke routers.

The ip nhrp shortcut command is missing on the spoke routers.

The ip nhrp redirect commands is missing on the hub router.

The ip nhrp shortcut commands is missing on the hub router.

The ip nhrp map command is missing on the hub router.

19. An engineer needs dynamic routing between two routers and is unable to establish OSPF adjacency. The output of the show ip ospf neighbor command shows that the neighbor state is EXSTART/EXCHANGE.

Which action should be taken to resolve this issue?

match the passwords

match the hello timers

match the MTUs

match the network types

20. Refer to the exhibit.

An engineer is troubleshooting a failed Telnet session from PC to the DHCP server.

Which action resolves the issue?

Remove sequence 30 and add it back to the IPv6 traffic filter as sequence 5.

Remove sequence 20 and add it back to the IPv6 traffic filter as sequence 5.

Remove sequence 10 to add the PC source IP address and add it back as sequence 10.

Remove sequence 20 for sequence 40 in the access list to allow Telnet.

Page 3 of 10

21. Refer to the exhibit.

An engineer must redistribute networks 192.168.10.0/24 and 192.168.20.0/24 into OSPF from EIGRP. where the metric must be added when traversing through multiple hops to start an external route of 20 The engineer notices that the external metric is fixed and does not add at each hop.

Which configuration resolves the issue?

Option A

Option B

Option C

Option D

22. Refer to the exhibit.

An engineer configured SNMP communities on the Core_Sw1, but the SNMP server cannot obtain information from Core_Sw1.

Which configuration resolves this issue?

access-list 20 permit 10.221.10.12

snmp-server group NETVIEW v2c priv read NETVIEW access 20

snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22

access-list 20 permit 10.221.10.11

23. DRAG DROP

Drag and drop the addresses from the left onto the correct IPv6 filter purposes on the right.

24. Refer to the exhibit.

The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new IP address.

Which two actions must be taken to resolve this Issue? (Choose two.)

Configure the server to use DHCP on the network with default gateway 200 30.40.100.

Configure the server with a static IP address and default gateway.

Configure the router to exclude a server IP address.

Configure the server to use DHCP on the network with default gateway 200 30.30.100.

Configure the router to exclude a server IP address and default gateway.

25. Refer to the exhibit.

An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting.

Which command must be used in configuration mode to enable SSH on the device?

no ip ssh disable

ip ssh enable

ip ssh version 2

crypto key generate rsa

26. Which Ipv6 first-hop security feature helps to minimize denial of service attacks?

IPv6 Router Advertisement Guard

IPv6 Destination Guard

DHCPv6 Guard

IPv6 MAC address filtering

27. Refer to the exhibit.

Which interface configuration must be configured on the HUB router to enable MVPN with mGRE mode?

Option A

Option B

Option C

Option D

28. Refer to the exhibit.

After a new regional office is set up, not all guests can access the internet via guest WiFi. Clients are getting the correct IP address from guest Wi-Fi VLAN 364.

Which action resolves the issue?

Allow 10.66.46.0/23 in the outbound ACL

Allow DNS traffic through the outbound ACL

Allow DNS traffic through the inbound ACL

Allow 10.66.46.0/23 in the inbound ACL

29. Refer to the exhibit.

During troubleshooting it was discovered that the device is not reachable using a secure web browser.

What is needed to fix the problem?

permit tcp port 443

permit udp port 465

permit tcp port 465

permit tcp port 22

30. Refer to the exhibit.

A network engineer must establish communication between three different customer sites with these requirements:

- Site-A: must be restricted to access to any users at Site-B or Site-C.

- Site-B and Site-C must be able to communicate between sites and share routes using OSPF.

Which configuration meets the requirements?

Option A

Option B

Option C

Option D

Page 4 of 10

31. What are two characteristics of a VRF instance? (Choose two)

It is defined by the VPN membership of a customer site attached to a P device.

Each VRF has a different set of routing and CEF tables.

AII VRFS share customers routing and CEF tables.

An interface must be associated to one VRF

A customer site can be associated to different VRFs.

32. Which two statements about redistributing EIGRP into OSPF are true? (Choose two)

The redistributed EIGRP routes appear as type 3 LSAs in the OSPF database

The redistributed EIGRP routes appear as type 5 LSAs in the OSPF database

The administrative distance of the redistributed routes is 170

The redistributed EIGRP routes appear as OSPF external type 1

The redistributed EIGRP routes as placed into an OSPF area whose area ID matches the EIGRP autonomous system number

The redistributed EIGRP routes appear as OSPF external type 2 routes in the routing table

33. Refer to the exhibit.

R6 should reach R1 via R5>R2>R1.

Which action resolves the issue?

Increase the cost to 61 between R2-R3-R1

Increase the cost to 61 between R2 and R3

Decrease the cost to 2 between R6-R5-R2

Decrease the cost to 41 between R2 and R1

34. Refer to the exhibit.

While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured.

Which command resolves this issue?

access-class INTERNET in

ip access-group INTERNET in

ipv6 traffic-filter INTERNET in

ipv6 access-class INTERNET in

35. How does an MPLS Layer 3 VPN differentiate the IP address space used between each VPN?

by RD

by address family

by MP-BGP

byRT

36. Refer to the exhibit.

The administrator noticed that the connection was flapping between the two ISPs instead of switching to ISP2 when the ISP1 failed.

Which action resolves the issue?

Include a valid source-interface keyword in the icmp-echo statement.

Reference the track object 1 on the default route through ISP2 instead of ISP1.

Modify the static routes to refer both to the next hop and the outgoing intertace.

Modify the threshold to match the administrative distance of the ISP2 route.

37. Refer to the exhibit.

Which two actions should be taken to access the server? (Choose two.)

Modify the access list to add a second line of permit ip any

Modify the access list to deny the route to 192.168.2.2.

Modify distribute list seq 10 to permit the route to 192.168.2.2.

Add a sequence 20 in the route map to permit access list 1.

Add a floating static route to reach to 192.168.2.2 with administrative distance higher than OSPF

38. R2 has a locally originated prefix 192.168.130.0/24 and has these configurations:

What is the result when the route-map OUT command is applied toward an eBGP neighbor R1 (1.1.1.1) by using the neighbor 1.1.1.1 route-map OUT out command?

R1 sees 192.168.130.0/24 as two AS hops away instead of one AS hop away.

R1 does not accept any routes other than 192.168.130.0/24

R1 does not forward traffic that is destined for 192.168.30.0/24

Network 192.168.130.0/24 is not allowed in the R1 table

39. The network administrator configured R1 for Control Plane Policing so that the inbound Telnet traffic is policed to 100 kbps. This policy must not apply to traffic coming in from 10.1.1.1/32 and 172.16.1.1/32.

The administrator has configured this:

The network administrator is not getting the desired results.

Which set of configurations resolves this issue?

control-plane no service-policy input PM-CoPP ! interface Ethernet 0/0 service-policy input PM-CoPP

control-plane no service-policy input PM-CoPP service-policy input PM-CoPP

no access-list 101 access-list 101 deny tcp host 10,1,1.1 any eq 23 access-list 101 deny tcp host 172,16.1.1 any eq 23 access-list 101 permit ip any any

no access-list 101 access-list 101 deny tcp host 10,1.1.1 any eq 23 access-list 101 deny tcp host 172.16.1.1 any eq 23 access-list 101 permit ip any any ! interface E0/0 service-policy input PM-CoPP

40. What is a function of an end device configured with DHCPv6 guard?

If it is configured as a server, only prefix assignments are permitted.

If it is configured as a relay agent, only prefix assignments are permitted.

If it is configured as a client, messages are switched regardless of the assigned role.

If it is configured as a client, only DHCP requests are permitted.

Page 5 of 10

41. A network administrator performed a Compact Flash Memory upgrade on a Cisco Catalyst 6509 Switch. Everything is functioning normally except SNMP, which was configured to monitor the bandwidth of key interfaces but the interface indexes are changed.

Which global configuration resolves the issue?

snmp-server ifindex permanent

snmp ifindex permanent

snmp-server ifindex persist

snmp ifindex persist

42. Refer to the exhibit.

There is a picture of “Layer 2 loop symptoms” in DNAC and the config below:

An engineer identifier a Layer 2 loop using DNAC.

Which command fixes the problem in the SF-D9300-1 switch?

no spanning-tree uplinkfast

spanning-tree loopguard default

spanning-tree backbonesfast

spanning-tree portfast bpduguard

43. What does the MP-BGP OPEN message contain?

MPLS labels and the IP address of the router that receives the message

the version number and the AS number to which the router belongs

IP routing information and the AS number to which the router belongs

NLRI, path attributes, and IP addresses of the sending and receiving routers

44. Refer to the exhibit.

An administrator that is connected to the console does not see debug messages when

remote users log in.

Which action ensures that debug messages are displayed for remote logins?

Enter the transport input ssh configuration command.

Enter the terminal monitor exec command.

Enter the logging console debugging configuration command.

Enter the aaa new-model configuration command.

45. Refer to the exhibit.

R1 is connected with R2 via GigabitEthernet0/0, and R2 cannot ping R1.

What action will fix the issue?

Fix route dampening configured on the router.

Replace the SFP module because it is not supported.

Fix IP Event Dampening configured on the interface.

Correct the IP SLA probe that failed.

46. Refer to the exhibit.

A network administrator notices these console messages from host 10.11.110.12 originating from interface E1/0. The administrator considers this an unauthorized attempt to access SNMP on R1.

Which action prevents the attempts to reach R1 E1/0?

Configure IOS control plane protection using ACL 90 on interface E1/0

Configure IOS management plane protection using ACL 90 on interface E1/0

Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12

Add a permit statement including the host 10.11.110.12 into ACL 90

47. Refer to the exhibit.

A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer fails.

Which action resolves this issue?

The SSH service must be enabled with the crypto key generate rsa command.

The SCP service must be enabled with the ip scp server enable command.

The Python interpreter must first be enabled with the guestshell enable command.

The SSH access must be allowed on the VTY lines using the transport input ssh command.

48. What is a role of route distinguishers in an MPLS network?

Route distinguishers define which prefixes are imported and exported on the edge router

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network

49. Which statement about IPv6 ND inspection is true?

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

50. Refer to the exhibit.

A user has set up an IP SLA probe to test if a non-SLA host web server on IP address 10.1.1.1 accepts HTTP sessions prior to deployment. The probe is failing.

Which action should the network administrator recommend for the probe to succeed?

Re-issue the ip sla schedule command.

Add icmp-echo command for the host.

Add the control disable option to the tcp connect.

Modify the ip sla schedule frequency to forever.

Page 6 of 10

51. Refer to the exhibit.

AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server.

Which action resolves this issue?

Match the authentication port

Match the accounting port

Correct the timeout value.

Correct the shared secret.

52. Refer to the exhibit.

A prefix list is created to filter routes inbound to an EIGRP process except for network 10 prefixes After the prefix list is applied no network 10 prefixes are visible in the routing table from EIGRP.

Which configuration resolves the issue?

ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9.

ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8

ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9 ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

53. The network administrator configured R1 to authenticate Telnet connections based on Cisco ISE using TACACS+. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1(192.168.1.1) with a shared secret password of Cisco123.

The administrator cannot authenticate to R1 based on ISE.

Which configuration fixes the issue?

ip tacacs-server host 192.168.1.5 key Cisco123

line vty 0 4 login authentication TAC-SERV

line vty 0 4 login authentication telnet

tacacs-server host 192.168.1.5 key Cisco123

54. Refer to the exhibit.

An OSPF neighbor relationship between R2 and R3 is showing stuck in EXCHANGE/EXSTART state. The neighbor is established between R1 and R2. The network engineer can ping from R2 to R3 and vice versa, but the neighbor is still down.

Which action resolves the issue?

Restore the Layer 2/Layer 3 connectivity issue in the ISP network.

Match MTU on both router interfaces or ignore MT

Administrative "shut then no shut" both router interfaces.

Enable OSPF on the interface, which is required.

55. Refer to the exhibit.

R1 is configured with IP SLA to check the availability of the server behind R6 but it kept failing.

Which configuration resolves the issue?

R1(config)# ip sla 700 R1(config-track)# delay down 30 up 20

R1(config)# ip sla 700 R1(config-track)# delay down 20 up 30

R1(config)# track 700 ip sla 700 R1(config-track)# delay down 30 up 20

R1(config)# track 700 ip sla 700 R1(config-track)# delay down 20 up 30

56. Refer to Exhibit.

Which two configurations allow clients to get dynamic ip addresses assigned?

Configure access-list 100 permit udp any any eq 61 as the first line

Configure access-list 100 permit udp any any eq 86 as the first line

Configure access-list 100 permit udp any any eq 68 as the first line

Configure access-list 100 permit udp any any eq 69 as the first line

Configure access-list 100 permit udp any any eq 67 as the first line

57. DRAG DROP

Drag and drop the operations from the left onto the locations where the operations are performed on the right.

58. Refer to the exhibit.

The AP status from Cisco DNA Center Assurance Dashboard shows some physical connectivity issues from access switch interface G1/0/14.

Which command generates the diagnostic data to resolve the physical connectivity issues?

test cable diagnostics tdr interface GigabitEthernet1/0/14

Check cable-diagnostics tdr interface GigabitEthernet1/0/14

show cable-diagnostics tdr interface GigabitEthernet1/0/14

Verify cable-diagnostics tdr interface GigabitEthernet1/0/14

59. Which 0S1 model is used to insert an MPLS label?

between Layer 5 and Layer 6

between Layer 1 and Layer 2

between Layer 3 and Layer 4

between Layer 2 and Layer 3

60. Refer to the exhibit.

The static route is not present in the routing table of an adjacent OSPF neighbor router.

Which action resolves the issue?

Configure the next hop of 10.20.20.1 in the prefix list DMZ-STATIC

Configure the next-hop interface at the end of the static router for it to get redistributed

Configure a permit 20 statement to the route map to redistribute the static route

Configure the subnets keyword in the redistribution command

Page 7 of 10

61. What is an MPLS LDP targeted session?

session between neighbors that are connected no more than one hop away

LDP session established between LSRs by exchanging TCP hello packets

label distribution session between non-directly connected neighbors

LDP session established by exchanging multicast hello packets

62. Refer to the exhibit.

The DHCP client is unable to receive an IP address from the DHCP server

RouterB is configured as follows:

Which command is required on the fastethernet 0/0 interface of RouterB to resolve this issue?

RouterB(config-if)#lp helper-address 172.31.1.1

RouterB(config-if)#lp helper-address 255.255 255 255

RouterB(config-if)#lp helper-address 172.16.1.1

RouterB(config-if)#lp helper-address 172.16.1.2

63. Refer to the exhibit.

Which two actions restrict access to router R1 by SSH? (Choose two.)

Configure transport input ssh on line vty and remove sequence 30 from access list 100.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.

Remove class-map ANY from service-policy CoPP

Configure transport output ssh on line vty and remove sequence 10 from access list 199.

Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199

64. A network administrator cannot connect to a device via SSH.

The line vty configuration is as follows:

Which action resolves this issue?

Increase the session timeout

Change the stopbits to 10.

Configure the transport input SSH

initialize the SSH key

65. Refer to the exhibits.

A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router.

Which set of configurations fixes the issue?

A)

Option A

Option B

Option C

Option D

66. Refer to the exhibit.

The remote server is failing to receive the NetFlow data.

Which action resolves the issue?

Modify the flow transport command transport udp 2055 to move under flow monitor profile.

Modify the interlace command to Ip flow monitor FLOW-MONITOR-1 Input.

Modify the udp port under flow exporter profile to Ip transport udp 4739.

Modify the flow record command record v4_r1 to move under flow exporter profile.

67. Refer to the exhibit.

A network engineer applied a filter for LSA traffic on OSPFv3 interarea routes on the area 5 ABR to protect advertising the internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes. After the respective route filtering configuration is applied on the ABR, area 5 routes are not visible on any of the areas.

How must the filter list be applied on the ABR to resolve this issue?

in the “in” direction for area 5 on router R1

in the “out” direction for area 5 on router R1

in the “in” direction for area 20 on router R2

in the “out” direction for area 20 on router R2

68. An engineer configured the wrong default gateway for the Cisco DNA Center enterprise interface during the install.

Which command must the engineer run to correct the configuration?

sudo maglev-config update

sudo maglev install config update

sudo maglev reinstall

sudo update config install

69. Refer to the exhibit.

The administrator is trying to overwrite an existing file on the TFTP server that was previously uploaded by another router. However, the attempt to update the file fails.

Which action resolves this issue?

Make the packages.conf file executable by all on the TFTP server

Make the packages.conf file writable by all on the TFTP server

Make sure to run the TFTP service on the TFTP server

Make the TFTP folder writable by all on the TFTP server

70. Refer to the exhibit.

An engineer is trying to redistribute OSPF to BGP, but not all of the routes are redistributed.

What is the reason for this issue?

By default, only internal routes and external type 1 routes are redistributed into BGP

Only classful networks are redistributed from OSPF to BGP

BGP convergence is slow, so the route will eventually be present in the BGP table

By default, only internal OSPF routes are redistributed into BGP

Page 8 of 10

71. Refer to the exhibit.

Router R2 should be learning the route for 10.123.187.0/24 via EIGRP.

Which action resolves the issue without introducing more issues?

Use distribute-list to modify the route as an internal EIGRP route

Redistribute the route in EIGRP with metric, delay, and reliability

Use distribute-list to filter the external router in OSPF

Remove route redistribution in R2 for this route in OSPF

72. DRAG DROP

Drag and drop the actions from the left into the correct order on the right to configure a policy to avoid following packet forwarding based on the normal routing path.

73. Which statement about route distinguishers in an MPLS network is true?

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

Route distinguishers are used for label bindings.

Route distinguishers make a unique VPNv4 address across the MPLS network.

Route distinguishers define which prefixes are imported and exported on the edge router.

74. Topic 3, Exam Pool C

Refer to the exhibit.

A network administrator is trying to access a branch router using TACACS+ username and password credentials, but the administrator cannot log in to the router because the WAN connectivity is down.

The branch router has following AAA configuration:

aaa new-model

aaa authorization commands 15 default group tacacs+

aaa accounting commands 1 default stop-only group tacacs+

aaa accounting commands 15 default stop-only group tacacs+

tacacs-server host 10.100.50.99

tacacs-server key CI$co123

Which command will resolve this problem when WAN connectivity is down?

aaa authentication login default group tacacs+ local

aaa authentication login default group tacacs+ enable

aaa authentication login default group tacacs+ console

aaa authentication login console group tacacs+ enable

75. Refer to the exhibit.

An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 loses reachability with the router R3 Fa0/0 interface. The route has changed to flow through router R2.

Which debug command is used to troubleshoot this issue?

debug ip flow

debug ip sla error

debug ip routing

debug ip packet

76. Refer to the exhibit.

An engineer configures the router 10.1.100.10 for EIGRP autosummarization so that R1 should receive the summary route of 10.0.0.0/8. However, R1 receives more specific /24 routes.

Which action resolves this issue?

Router R1 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

Router R1 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are received on R1.

Router 10.1.100.10 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are summarized toward R1.

Router 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

77. How does an MPLS Layer 3 VPN function?

set of sites use multiprotocol BGP at the customer site for aggregation

multiple customer sites interconnect through service provider network to create secure tunnels between customer edge devices

set of sites interconnect privately over the Internet for security

multiple customer sites interconnect through a service provider network using customer edge to provider edge connectivity

78. Refer to the exhibit.

During ISP router maintenance, the network produced many alerts because of the flapping interface.

Which configuration on R1 resolves the issue?

no snmp trap link-status

snmp trap link-status down

snmp trap ip verify drop-rate

ip verify drop-rate notify hold-down 60

79. The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped.

access-list 100 permit ip host 172.16.1.99 any

!

class-map CM-ADMIN

match access-group 100

!

policy-map PM-COPP

class CM-ADMIN

police 500000 conform-action transmit

!

interface E0/0

service-policy input PM-COPP

CoPP failed to capture the desired traffic and the CPU load is getting higher.

Which two configurations resolve the issue? (Choose two.)

interface E0/0 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP

policy-map PM-COPP class CM-ADMIN no police 500000 conform-action transmit police 500 conform-action transmit ! control-plane service-policy input PM-COPP

no access-list 100 access-list 100 permit tcp host 172.16.1.99 any eq 80

no access-list 100 access-list 100 permit tcp host 172.16.1.99 any eq 80 access-list 100 permit tcp host 172.16.1.99 any eq 443

policy-map PM-COPP class CM-ADMIN no police 500000 conform-action transmit police 500 conform-action transmit

80. An engineer is trying to copy an IOS file from one router to another router by using TFTP.

Which two actions are needed to allow the file to copy? (Choose two.)

Copy the file to the destination router with the copy tftp: flash: command

Enable the TFTP server on the source router with the tftp-server flash: <filename> command

TFTP is not supported in recent IOS versions, so an alternative method must be used

Configure a user on the source router with the username tftp password tftp command

Configure the TFTP authentication on the source router with the tftp-server authentication local command

Page 9 of 10

81. Refer to the exhibit.

Mutual redistribution is enabled between RIP and EIGRP on R2 and R5.

Which configuration resolves the routing loop for the 192.168.1.0/24 network?

R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any

R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any

R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any

R2: router eigrp 7 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 7 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 7 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 7 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any

82. Refer to the exhibit.

An engineer must block access to the console ports for all corporate remote Cisco devices based on the recent corporate security policy but the security team stilt can connect through the console port.

Which configuration on the console port resolves the issue?

transport input telnet

no exec

exec 0.0

83. Refer to the exhibit.

The engineer configured route redistribution in the network but soon received reports that R2 cannot access 192 168 7 0/24 and 192 168 15 0/24 subnets.

Which configuration resolves the issue?

Option A

Option B

Option C

Option D

84. Refer to the exhibit.

An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R1 as the primary default gateway. When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192.168.20.0/24.

Which set of configurations resolves the issue?

HQ_R3(config)# ip sla responder HQ_R3(config)# ip sla responder icmp-echo 172.16.35.1

BRANCH(config)# ip sla 1 BRANCH(config-ip-sla)# icmp-echo 192.168.100.2

HQ R3(config)# Ip sla responder HQ R3(config)# Ip sla responder Icmp-echo 172.16.35.5

BRANCH(config)# Ip sla 1 BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1

85. What is an advantage of implementing BFD?

BFD provides faster updates for any flapping route.

BFD provides millisecond failure detection

BFD is deployed without the need to run any routing protocol

BFD provides better capabilities to maintain the routing table

86. A network engineer needs to verify IP SLA operations on an interface that shows on indication of

excessive traffic.

Which command should the engineer use to complete this action?

show frequency

show track

show reachability

show threshold

87. Exhibit:

Which action resolves the authentication problem?

Configure the user name on the TACACS+ server

Configure the UDP port 1812 to be allowed on the TACACS+ server

Configure the TCP port 49 to be reachable by the router

Configure the same password between the TACACS+ server and router.

88. Refer to the exhibit.

In which circumstance does the BGP neighbor remain in the idle condition?

if prefixes are not received from the BGP peer

if prefixes reach the maximum limit

if a prefix list is applied on the inbound direction

if prefixes exceed the maximum limit

89. Refer to the exhibit.

Which configuration configures a policy on R1 to forward any traffic that is sourced from the 192.168.130.0/24 network to R2?

Option A

Option B

Option C

Option D

90. Which protocol is used to determine the NBMA address on the other end of a tunnel when mGRE is used?

NHRP

IPsec

MP-BGP

OSPF

Page 10 of 10

91. Refer to the exhibit.

Packets arriving from source 209.165.200.215 must be sent with the precedence bit set to 1, and packets arriving from source 209.165.200.216 must be sent with the precedence bit set to 5.

Which action resolves the issue?

set ip precedence critical in route-map Texas permit 10

set ip precedence critical in route-map Texas permit 20

set ip precedence immediate in route-map Texas permit 10

set ip precedence priority in route-map Texas permit 20

92. What are two MPLS label characteristics? (Choose two.)

The label edge router swaps labels on the received packets.

Labels are imposed in packets after the Layer 3 header.

LDP uses TCP for reliable delivery of information.

An MPLS label is a short identifier that identifies a forwarding equivalence class.

A maximum of two labels can be imposed on an MPLS packet.

93. Refer to the exhibit.

A router receiving BGP routing updates from multiple neighbors for routers in AS 690.

What is the reason that the router still sends traffic that is destined to AS 690 to a neighbor other than 10.222.1.1?

The local preference value in another neighbor statement is higher than 250.

The local preference value should be set to the same value as the weight in the route map.

The route map is applied in the wrong direction.

The weight value in another neighbor statement is higher than 200.

94. Refer to the exhibit.

An engineer configured SNMP communities on the Core_SW1, but the SNMP server cannot obtain information from Core_SW1.

Which configuration resolves this issue?

snmp-server group NETVIEW v2c priv read NETVIEW access 20

access-list 20 permit 10.221.10.11

access-list 20 permit 10.221.10.12

snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22

95. Refer to the exhibit.

A junior engineer updated a branch router configuration. Immediately after the change, the engineer receives calls from the help desk that branch personnel cannot reach any network destinations.

Which configuration restores service and continues to block 10.1.1.100/32?

route-map FILTER-IN deny 5

ip prefix-list 102 seq 15 permit 0.0.0.0/32 le 32

ip prefix-list 102 seq 5 permit 0.0.0.0/32 le 32

route-map FILTER-IN permit 20

96. An engineer sets up a DMVPN connection to connect branch 1 and branch 2 to HQ branch 1 and branch 2 cannot communicate with each other.

Which change must be made to resolve this issue?

Option A

Option B

Option C

Option D

97. Refer to the exhibit.

After recovering from a power failure. Ethernet0/1 stayed down while Ethernet0/0 returned to the up/up state. The default route through ISP1 was not reinstated m the routing table until Ethernet0/1 also came up.

Which action resolves the issue?

Reference the track object 1 in both static default routes

Remove the references to the interface names from both static default routes

Configure the default route through ISP1 with a higher administrative distance than 2.

Add a static route to the 8 8.8 8/32 destination through the next hop 203.0.113.1

98. DRAG DROP

Drag and drop the packet types from the left onto the correct descriptions on the right.