Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) practice questions

1. Question 1 of 25

   

   Refer to the exhibit. An engineer is trying to redistribute OSPF to BGP, but not all of the routes are redistributed. What is the reason for this issue?

   • ABy default, only internal routes and external type 1 routes are redistributed into BGP
   • BOnly classful networks are redistributed from OSPF to BGP
   • CBGP convergence is slow, so the route will eventually be present in the BGP table
   • DBy default, only internal OSPF routes are redistributed into BGP

   Show answer

   Correct answer: D

   How others answered

   • D100%

   Explanation

   D is correct. If you configure the redistribution of OSPF into BGP without keywords, only OSPF intra-area and inter-area routes are redistributed into BGP, by default https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/5242-bgp-ospf-redis.html?dtid=osscdc000283#redistributionofonlyospfinternalroutesintobgp

   Adapted from community discussion by Malasxd · 2023-05-14 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

   1. H

      heamgu

      2020-06-27

      9 upvotes

      The answer is correct is D. Reference: https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/5242-bgp-ospf-redis.html?dtid=osscdc000283#redistributionofonlyospfinternalroutesintobgp

   2. M

      Malasxd

      2023-05-14

      Selected D4 upvotes

      D is correct. If you configure the redistribution of OSPF into BGP without keywords, only OSPF intra-area and inter-area routes are redistributed into BGP, by default https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/5242-bgp-ospf-redis.html?dtid=osscdc000283#redistributionofonlyospfinternalroutesintobgp

   3. R

      Remsync

      2022-10-25

      Selected D4 upvotes

      D is correct. "If you configure the redistribution of OSPF into BGP without keywords, only OSPF intra-area and inter-area routes are redistributed into BGP, by default. "

   4. M

      MasoudGhorbani

      2024-02-25

      4 upvotes

      D is correct. Use the external keyword along with the redistribute command under router bgp to redistribute OSPF external routes into BGP. With the external keyword, you have three choices: Redistribute both External Type-1 and Type-2 (Default) Redistribute Type-1 Redistribute Type-2

2. Question 2 of 25

   Which statement about IPv6 ND inspection is true?

   • AIt learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.
   • BIt learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.
   • CIt learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.
   • DIt learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

   Show answer

   Correct answer: B

   How others answered

   • B100%

   Explanation

   Option B is correct: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-sy/ip6-nd-inspect.html IPv6 ND Inspection IPv6 ND inspection learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables. IPv6 ND inspection analyzes neighbor discovery messages in order to build a trusted binding table database, and IPv6 neighbor discovery messages that do not have valid bindings are dropped. A neighbor discovery message is considered trustworthy if its IPv6-to-MAC mapping is verifiable. This feature mitigates some of the inherent vulnerabilities for the neighbor discovery mechanism, such as attacks on duplicate address detection (DAD), address resolution, device discovery, and the neighbor cache.

   Adapted from community discussion by inteldarvid · 2023-07-11 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

   1. I

      inteldarvid

      2023-07-11

      Selected B2 upvotes

      Option B is correct: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-sy/ip6-nd-inspect.html IPv6 ND Inspection IPv6 ND inspection learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables. IPv6 ND inspection analyzes neighbor discovery messages in order to build a trusted binding table database, and IPv6 neighbor discovery messages that do not have valid bindings are dropped. A neighbor discovery message is considered trustworthy if its IPv6-to-MAC mapping is verifiable. This feature mitigates some of the inherent vulnerabilities for the neighbor discovery mechanism, such as attacks on duplicate address detection (DAD), address resolution, device discovery, and the neighbor cache.

   2. N

      Networkingguy

      2022-01-07

      2 upvotes

      IPv6 ND inspection learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables. IPv6 ND inspection analyzes neighbor discovery messages in order to build a trusted binding table database, and IPv6 neighbor discovery messages that do not have valid bindings are dropped. A neighbor discovery message is considered trustworthy if its IPv6-to-MAC mapping is verifiable. This feature mitigates some of the inherent vulnerabilities for the neighbor discovery mechanism, such as attacks on duplicate address detection (DAD), address resolution, device discovery, and the neighbor cache. Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-s/ip6f-15-s-book/ip6-snooping.pdf

   3. H

      Hurk2

      2023-01-16

      Selected B2 upvotes

      B is correct https://www.cisco.com/en/US/docs/ios-xml/ios/15-0se/features/ip6-snooping.html#GUID-5B40C0D5-3F0D-49FE-AA97-297F1B174BA9

   4. I

      inteldarvid

      2023-07-12

      Selected B1 upvote

      Option B: https://www.exam-answer.com/ipv6-nd-inspection-cisco-300-410-enarsi

3. Question 3 of 25

   Which attribute eliminates LFAs that belong to protected paths in situations where links in a network are connected through a common fiber?

   • Ashared risk link group-disjoint
   • Blinecard-disjoint
   • Clowest-repair-path-metric
   • Dinterface-disjoint

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   LFA Tie-Breaking Rules • Shared Risk Link Group (SRLG)-disjoint—Eliminates LFAs that belong to any of the protected path SRLGs.SRLGsrefer to situations where linksin a network share a common fiber (or a common physical attribute). If one link fails, other links in the group may also fail. Therefore, links in a group share risks. ref: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/xe-3s/asr1000/ire-xe-3s-asr1000.pdf

   Adapted from community discussion by networkWiz · 2024-09-25 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

   1. _

      _Stupid_

      2022-01-24

      Selected A7 upvotes

      A seems to be right, https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/xe-3s/asr1000/ire-xe-3s-asr1000/ire-ipfrr.html#:~:text=Shared%20Risk%20Link,group%20share%20risks.

   2. R

      RHK0783

      2021-04-18

      4 upvotes

      Interface-disjoint—Eliminates LFAs that share the outgoing interface with the protected path. Linecard-disjoint—Eliminates LFAs that share the line card with the protected path. Lowest-repair-path-metric—Eliminates LFAs whose metric to the protected prefix is high. Multiple LFAs with the same lowest path metric may remain in the routing table after this tie-breaker is applied. Shared Risk Link Group (SRLG)-disjoint—Eliminates LFAs that belong to any of the protected path SRLGs. SRLGs refer to situations where links in a network share a common fiber (or a common physical attribute). If one link fails, other links in the group may also fail. Therefore, links in a group share risks.

   3. N

      networkWiz

      2024-09-25

      Selected A3 upvotes

      LFA Tie-Breaking Rules • Shared Risk Link Group (SRLG)-disjoint—Eliminates LFAs that belong to any of the protected path SRLGs.SRLGsrefer to situations where linksin a network share a common fiber (or a common physical attribute). If one link fails, other links in the group may also fail. Therefore, links in a group share risks. ref: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/xe-3s/asr1000/ire-xe-3s-asr1000.pdf

   4. E

      Echte_Goudenbeen

      2020-12-30

      5 upvotes

      This is not in the syllabus, nor is it in the overview of what is part of the ENARSI exam.

4. Question 4 of 25

   

   Refer to the exhibit. An engineer is troubleshooting BGP on a device but discovers that the clock on the device does not correspond to the time stamp of the log entries. Which action ensures consistency between the two times?

   • AConfigure the service timestamps log uptime command in global configuration mode.
   • BConfigure the logging clock synchronize command in global configuration mode.
   • CConfigure the service timestamps log datetime localtime command in global configuration mode.
   • DMake sure that the clock on the device is synchronized with an NTP server.

   Show answer

   Correct answer: C

   How others answered

   • C90%

   Explanation

   Even we synchronize the clock but it may show different timezone so we should set the “localtime” keyword (which uses local time zone for timestamps) so that the time of logging messages is matched with our clock.

   Adapted from community discussion by Pbshah · 2022-07-17 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • cisco.com documentation
   • cisco.com documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

   1. S

      S_E_T

      2020-06-10

      11 upvotes

      C is correct https://community.cisco.com/t5/networking-documents/router-log-timestamp-entries-are-different-from-the-system-clock/ta-p/3132258

   2. S

      spiderconnard

      2021-08-19

      5 upvotes

      The question said "Which action ensures consistency between the two times?"

   3. R

      Rathana

      2020-06-08

      4 upvotes

      The correct answer should be C https://www.cisco.com/E-Learning/bulk/public/tac/cim/cib/using_cisco_ios_software/cmdrefs/service_timestamps.htm

   4. D

      davdtech

      2022-02-24

      4 upvotes

      I stick to D There is an asterisks in front of the time meaning that the device is not in sync with an NTP

5. Question 5 of 25

   

   Refer to the exhibit. While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured. Which command resolves this issue?

   • Aaccess-class INTERNET in
   • Bip access-group INTERNET in
   • Cipv6 traffic-filter INTERNET in
   • Dipv6 access-class INTERNET in

   Show answer

   Correct answer: D

   How others answered

   • D89%

   Explanation

   Answer is D: IPv6 access-class vs IPv6 traffic-filter The difference depends on whether you want to filter IPv6 traffic sent *to* the router or *through* the router. The 'ipv6 traffic-filter' command is used to filter IPv6 traffic flowing through an interface: Command reference (with example): http://www.cisco.com/en/US/docs/ios/ipv6/command/reference/ipv6_09.html#wp2297000 The 'ipv6 access-class' command is used to filter IPv6 traffic destined to the router (i.e. management traffic). Command reference (with example): http://www.cisco.com/en/US/docs/ios/ipv6/command/reference/ipv6_05.html#wp2274594

   Adapted from community discussion by TECH3K3 · 2022-07-27 · 19 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

   1. T

      TECH3K3

      2022-07-27

      Selected D19 upvotes

      Answer is D: IPv6 access-class vs IPv6 traffic-filter The difference depends on whether you want to filter IPv6 traffic sent *to* the router or *through* the router. The 'ipv6 traffic-filter' command is used to filter IPv6 traffic flowing through an interface: Command reference (with example): http://www.cisco.com/en/US/docs/ios/ipv6/command/reference/ipv6_09.html#wp2297000 The 'ipv6 access-class' command is used to filter IPv6 traffic destined to the router (i.e. management traffic). Command reference (with example): http://www.cisco.com/en/US/docs/ios/ipv6/command/reference/ipv6_05.html#wp2274594

   2. P

      piojo

      2022-06-02

      Selected D5 upvotes

      Simulated in a lab. It also can be applied to the vty with ipv6 access-class command. So, examine if the access-list applied via ipv6 access-class permit tcp traffic to port 23 (or 22 when ssh) from / to the desired IPs.

   3. C

      chikuwan

      2022-08-02

      Selected D4 upvotes

      first, you should define ipv6 access-list in grobal configuration mode,and ipv6 traffic-filter is when you want to apply it in a interface, and when in conditio of a vty ,the command wull be access-list, the answer is D,given answer is correct

   4. S

      Sammy3637

      2025-01-20

      Selected D1 upvote

      "While monitoring VTY access to a router' Its confusing but after reading if few times , it appears , acl needs to be applied on the VTY lines , therefore , option D suits the best otherwise for the interface , it will be option A

6. Question 6 of 25

   

   Refer to the exhibit. An administrator that is connected to the console does not see debug messages when remote users log in. Which action ensures that debug messages are displayed for remote logins?

   • AEnter the transport input ssh configuration command.
   • BEnter the terminal monitor exec command.
   • CEnter the logging console debugging configuration command.
   • DEnter the aaa new-model configuration command.

   Show answer

   Correct answer: D

   How others answered

   • D92%

   Explanation

   Hold up. Let's look into this. A isn't going to do anything for this problem. B Term Mon is ONLY to display (shunt/pipe) console messages TO VTY LINES. Since we're connected to the Console, this will have no effect. C Logging Console Debugging command was already entered... Logging Console 7 is the same command, you can use the severity level (0-7) or you can use the fancy name (debug, err, info...). They have the same effect. https://learningnetwork.cisco.com/s/question/0D53i00000Kt78L/no-logging-console-vs-no-logging-console-debug D This IS a requirement to see AAA debug messages, there's nothing that indicates it's been entered yet, although the show run command would filter it out if it were already entered. But it's still the most likely candidate. Answer is D.

   Adapted from community discussion by Alnet · 2021-12-02 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • cisco.com documentation
   • cisco.com documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

   1. A

      Alnet

      2021-12-02

      11 upvotes

      Hold up. Let's look into this. A isn't going to do anything for this problem. B Term Mon is ONLY to display (shunt/pipe) console messages TO VTY LINES. Since we're connected to the Console, this will have no effect. C Logging Console Debugging command was already entered... Logging Console 7 is the same command, you can use the severity level (0-7) or you can use the fancy name (debug, err, info...). They have the same effect. https://learningnetwork.cisco.com/s/question/0D53i00000Kt78L/no-logging-console-vs-no-logging-console-debug D This IS a requirement to see AAA debug messages, there's nothing that indicates it's been entered yet, although the show run command would filter it out if it were already entered. But it's still the most likely candidate. Answer is D.

   2. [

      [Removed]

      2021-08-02

      4 upvotes

      D is the correct answer A. Enter the transport input ssh configuration command. >its telnet B. Enter the terminal monitor exec command. >console already monitors C. Enter the logging console debugging configuration command. >already done with logging console 7 D. Enter the aaa new-model configuration command. >only one left - lab'd it also

   3. A

      Alex147

      2021-12-31

      Selected D4 upvotes

      C is only for VTY connections. D is correct - aaa need new-model need to be enabled in configuration.

   4. G

      GustavoF

      2020-08-02

      4 upvotes

      B is NOT correct, once the description is telling that the engineer is connected on the console, Console by default does not need terminal monitor command, it's implicit by default. C is correct.

7. Question 7 of 25

   Select 2

   

   Refer to the exhibit. Network operations cannot read or write any configuration on the device with this configuration from the operations subnet. Which two configurations fix the issue? (Choose two.)

   • AConfigure SNMP rw permission in addition to community ciscotest.
   • BModify access list 1 and allow operations subnet in the access list.
   • CModify access list 1 and allow SNMP in the access list.
   • DConfigure SNMP rw permission in addition to version 1.
   • EConfigure SNMP rw permission in addition to community ciscotest 1.

   Show answer

   Correct answer: B, E

   How others answered

   • BE46%
   • AB46%

   Only 46% agreed on this answer — treat it as contested rather than settled.

   Explanation

   For me A and B is correct. Setup SNMP Community with access-list The best current practices recommend applying Access Control Lists (ACLs) to community strings and ensuring that the requests community strings are not identical to notifications community strings. Access lists provide further protection when used in combination with other protective measures. This example sets up ACL to community string: access-list 1 permit 1.1.1.1 snmp-server community string1 ro 1 Ref: https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/20370-snmpsecurity-20370.html

   Adapted from community discussion by anonymous1966 · 2020-07-21 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

   1. A

      anonymous1966

      2020-07-21

      11 upvotes

      For me A and B is correct. Setup SNMP Community with access-list The best current practices recommend applying Access Control Lists (ACLs) to community strings and ensuring that the requests community strings are not identical to notifications community strings. Access lists provide further protection when used in combination with other protective measures. This example sets up ACL to community string: access-list 1 permit 1.1.1.1 snmp-server community string1 ro 1 Ref: https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/20370-snmpsecurity-20370.html

   2. D

      DaanB

      2021-04-05

      10 upvotes

      The way the question is set, there are no correct answers. Based on the configuration, the communicty is ciscotest1. There is no access list 1 in the configuration. None of the answers follow this setup. If there would be an space between ciscotest and 1, then A and B would be correct - IMO

   3. R

      rggod

      2021-12-16

      Selected B, E5 upvotes

      There's most likely a typo and should read ciscotest 1 - referencing the ACL.

   4. W

      wts

      2022-02-28

      Selected B, E2 upvotes

      A - it's about sending traps. The question describes a different problem. B - just because you have to choose another option. It can be assumed (this is not in the question) that somewhere in the config there is an ACL. Well, in this case, if it is not allowed there, it would be necessary to allow snmp and the operations subnet. B because the question indicates that the subnet is operations. C - well, I chose B... D - nothing indicates that it is needed. E - if not explicitly specified, then at the end of the snmp-server community command there will be an implicit RO. This needs to be fixed.

8. Question 8 of 25

   

   Refer to the exhibit. NTP is configured across the network infrastructure and Cisco DNA Center. An NTP issue was reported on the Cisco DNA Center at 17:15. Which action resolves the issue?

   • AReset the NTP server to resolve any synchronization issues for all devices
   • BCheck and resolve reachability between Cisco DNA Center and the NTP server
   • CCheck and resolve reachability between the WLC and the NTP server
   • DCheck and configure NTP on the WLC and synchronize with Cisco DNA Center

   Show answer

   Correct answer: C

   How others answered

   • C82%

   Explanation

   With NTP already configured and only one device exhibiting the issue, I would first check that device and make sure that it can reach the NTP server and sync time.

   Adapted from community discussion by bogd · 2022-02-22 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • cisco.com documentation
   • cisco.com documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

   1. B

      bogd

      2022-02-22

      Selected C9 upvotes

      With NTP already configured and only one device exhibiting the issue, I would first check that device and make sure that it can reach the NTP server and sync time.

   2. J

      Jenia1

      2022-02-11

      5 upvotes

      Same for me, C seems to be the best option A,B,D dosen't looks corect A. Reset the NTP server to resolve any synchronization issues for all devices -- We have an issue only with 1 WLC B. Check and resolve reachability between Cisco DNA Center and the NTP server We have an issue only with 1 WLC D. Check and configure NTP on the WLC and synchronize with Cisco DNA Center --- NTP is ""configured"" across the ""network infrastructure"" and Cisco DNA Center.

   3. N

      ntdevera

      2022-08-30

      Selected C3 upvotes

      C Not B, if DNA center cant reach NTP. It wont just be 1 WLC that has an issue. Not D, You don't synchronize with the DNA Center to fix time issues. You sync it with the NTP server. It

   4. [

      [Removed]

      2022-08-11

      Selected C3 upvotes

      If NTP is already enabled across the infrastructure and only the WLC is reporting issues then its probably just an issue with the NTP server syncing with the WLC

9. Question 9 of 25

   

   Refer to the exhibits. An engineer identified a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?

   

   • Aspanning-tree portfast bpduguard
   • Bno spanning-tree uplinkfast
   • Cspanning-tree backbonefast
   • Dspanning-tree loopguard default

   Show answer

   Correct answer: D

   How others answered

   • D88%

   Explanation

   The answer should be D. The A enables bpduguard on access ports. We have trunks here. So, loopguard enabled on the trunks will solve the issue. https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10596-84.html give a good explanation

   Adapted from community discussion by OakA1 · 2021-10-09 · 16 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

   1. O

      OakA1

      2021-10-09

      16 upvotes

      The answer should be D. The A enables bpduguard on access ports. We have trunks here. So, loopguard enabled on the trunks will solve the issue. https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10596-84.html give a good explanation

   2. A

      AliMo123

      2021-10-24

      7 upvotes

      wrong answer portfast is only configured on access port not trunk, so D is correct

   3. H

      HungarianDish_111

      2023-05-31

      Selected D4 upvotes

      As I understand, there are some cases, when we would enable portfast and bpduguard on trunk links (for instance, when connecting to ESXi server). Good thread: https://community.cisco.com/t5/switching/enable-bpduguard-on-spanning-tree-portfast-trunk-port-yes-or-no/td-p/2534826 Based on the output, these are two switches that are connected through the affected trunk ports. So, I find loopguard to be the appropriate solution. https://networklessons.com/spanning-tree/spanning-tree-loopguard-udld

   4. C

      cyrus777

      2022-04-01

      1 upvote

      The loop guard feature is enabled on a per-port basis. However, as long as it blocks the port on the STP level, loop guard blocks inconsistent ports on a per-VLAN basis (because of per-VLAN STP). That is, if BPDUs are not received on the trunk port for only one particular VLAN, only that VLAN is blocked (moved to loop-inconsistent STP state). For the same reason, if enabled on an EtherChannel interface, the entire channel is blocked for a particular VLAN, not just one link (because EtherChannel is regarded as one logical port from the STP point of view). On which ports should the loop guard be enabled? The most obvious answer is on the blocking ports. However, this is not totally correct. Loop guard must be enabled on the non-designated ports (more precisely, on root and alternate ports) for all possible combinations of active topologies. As long as the loop guard is not a per-VLAN feature, the same (trunk) port might be designated for one VLAN and non-designated for the other. The possible failover scenarios should also be taken into account.

10. Question 10 of 25

    Select 2

    

    Refer to the exhibit. A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log messages stream, it is impossible to capture the problem. Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two.)

    • Adebug condition ospf neighbor
    • Bdebug condition interface
    • Cdebug condition session-id ADJCHG
    • Ddebug condition all

    Show answer

    Correct answer: B, C

    How others answered

    • BC88%

    Explanation

    In the ETA file the D one seems to be debug condition ip. If you find that then is B and D otherwise the answer is fine. For me D in the simultations is debug condition ip, cause this exists as a command I prefer it rather then debug confition session-id ADJCHG Remember also this: The debug condition session-id command filters a session only after the session has been established. The session identifier is a unique dynamic number generated internally by the Cisco IOS software and assigned to each session when the session is established. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/isg/configuration/xe-3s/asr1000/isg-xe-3s-asr1000-book/isg-debug-dcd.html Hope that you are gonna smash the exam. Se ya

    Adapted from community discussion by XBfoundX · 2024-08-20 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. Y

       YaPet

       2022-02-16

       Selected B, C5 upvotes

       B,C,D are valid commands, A hasn't presented in IOS reference. It seems B,C are best for answer. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/debug/command/a1/db-a1-cr-book/db-c1.html

    2. R

       robi1020

       2023-07-07

       Selected B, C4 upvotes

       Its B and C, Why? B is logical and C (https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/isg/configuration/xe-3s/asr1000/isg-xe-3s-asr1000-book/isg-debug-dcd.pdf)

    3. X

       XBfoundX

       2024-08-20

       2 upvotes

       In the ETA file the D one seems to be debug condition ip. If you find that then is B and D otherwise the answer is fine. For me D in the simultations is debug condition ip, cause this exists as a command I prefer it rather then debug confition session-id ADJCHG Remember also this: The debug condition session-id command filters a session only after the session has been established. The session identifier is a unique dynamic number generated internally by the Cisco IOS software and assigned to each session when the session is established. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/isg/configuration/xe-3s/asr1000/isg-xe-3s-asr1000-book/isg-debug-dcd.html Hope that you are gonna smash the exam. Se ya

    4. B

       beatido

       2021-09-21

       4 upvotes

       The only valid command here is: debug condition interface Tried on different IOS versions

11. Question 11 of 25

    Select 2

    Refer to the exhibit.

    

    The network administrator can see the DHCP discovery packet in R1, but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the Fa0/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two.)

    • Aservice dhcp-relay command on R1
    • Bip dhcp relay information enable command on R1
    • Cip dhcp option 82 command on R2
    • Dservice dhcp command on R1
    • Eip dhcp relay information trust-all command on R2

    Show answer

    Correct answer: D, E

    How others answered

    • DE89%

    Explanation

    Answer is D and E https://community.cisco.com/t5/switching/cisco-router-configured-as-a-dhcp-server-not-replying-to-quot/td-p/3206932 1.- The relay agent was configured by default with "no service dhcp". This caused the relayed packets to come from 0.0.0.0 rather than 10.2.1.1 2.- The DHCP server needs to be configured with "ip dhcp relay information trust-all" so it processes relayed packets with no Giaddr field

    Adapted from community discussion by tyh391 · 2022-01-17 · 17 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. T

       tyh391

       2022-01-17

       17 upvotes

       Answer is D and E https://community.cisco.com/t5/switching/cisco-router-configured-as-a-dhcp-server-not-replying-to-quot/td-p/3206932 1.- The relay agent was configured by default with "no service dhcp". This caused the relayed packets to come from 0.0.0.0 rather than 10.2.1.1 2.- The DHCP server needs to be configured with "ip dhcp relay information trust-all" so it processes relayed packets with no Giaddr field

    2. X

       Xerath

       2023-02-28

       Selected D, E5 upvotes

       D & E for sure, references: ip dhcp relay information trust-all : This command is useful if there is a switch in between the client and the relay agent that may insert option 82. Use this command to ensure that these packets do not get dropped. https://www.cisco.com/en/US/docs/ios/12_4t/ip_addr/configuration/guide/htdhcpre.html Prerequisites for Configuring the Cisco IOS DHCP Relay Agent: The Cisco IOS DHCP server and relay agent are enabled by default. You can verify whether they have been disabled by checking your configuration file. If they have been disabled, the no service dhcp command will appear in the configuration file. Use the service dhcp command to reenable the functionality if necessary. https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-sy/dhcp-15-sy-book/configuring_cisco_ios_dhcp_relay_agent.html.xml

    3. B

       bogd

       2022-02-21

       Selected D, E5 upvotes

       See https://community.cisco.com/t5/switching/cisco-router-configured-as-a-dhcp-server-not-replying-to-quot/td-p/3206932

    4. C

       Carl1999

       2022-02-08

       2 upvotes

       there in no ip dhcp relay information enable command. #ip dhcp relay information trusted ?? (config-if)#ip dhcp relay information ? check-reply Validate relay information in BOOTREPLY option DHCP relay information option option-insert Insert relay information in BOOTREQUEST policy-action Define reforwarding policy trusted Received DHCP packet may contain relay info option with zero giaddr (config-if)#ip dhcp relay information trusted

12. Question 12 of 25

    A network administrator performed a Compact Flash Memory upgrade on a Cisco Catalyst 6509 Switch. Everything is functioning normally except SNMP, which was configured to monitor the bandwidth of key interfaces but the interface indexes are changed. Which global configuration resolves the issue?

    • Asnmp-server ifindex persist
    • Bsnmp-server ifindex permanent
    • Csnmp ifindex persist
    • Dsnmp ifindex permanent

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    A is correct answer here is thew sample of real world solarwind snmp server deployment scripts SOLARWINDS NETFLOW SCRIPTS ! from the device’s global configuration mode ! call the int up int g0/0 ! capture inbound traffic ip flow ingress ! capture outbound traffic ip flow egress exit ! definite ip flow export source int ip flow-export source g0/0 ! definite ip flow version ip flow-export version 5 ! definite ip flow export destination ip flow-export destination 10.10.10.150 2055 ! set the flow time out ip flow-cache timeout active 1 ip flow-cache timeout inactive 15 snmp-server ifindex persist

    Adapted from community discussion by Nhan · 2022-06-10 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. W

       WesleyD

       2022-02-23

       4 upvotes

       I tested the command at a Cisco 6500, Router(config)# snmp-server ifindex persist is correct When I give a snmp ?, I don't get the choise for "ifindex"

    2. N

       Nhan

       2022-06-10

       2 upvotes

       A is correct answer here is thew sample of real world solarwind snmp server deployment scripts SOLARWINDS NETFLOW SCRIPTS ! from the device’s global configuration mode ! call the int up int g0/0 ! capture inbound traffic ip flow ingress ! capture outbound traffic ip flow egress exit ! definite ip flow export source int ip flow-export source g0/0 ! definite ip flow version ip flow-export version 5 ! definite ip flow export destination ip flow-export destination 10.10.10.150 2055 ! set the flow time out ip flow-cache timeout active 1 ip flow-cache timeout inactive 15 snmp-server ifindex persist

    3. N

       nial

       2021-12-29

       3 upvotes

       Correct Answer: snmp-server ifindex persist To globally enable SNMP ifIndex persistence, perform this task: router(config)# snmp-server ifindex persist To enable SNMP ifIndex persistence only on a specific interface, perform this task: Router(config-if)# snmp ifindex persist

    4. I

       inteldarvid

       2023-07-13

       Selected A2 upvotes

       option A is correct: https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/15S/configuration/guide/7600_15_0s_book/ifindx.html#:~:text=SNMP%20IfIndex%20Persistence-,Understanding%20SNMP%20IfIndex%20Persistence,a%20physical%20or%20logical%20interface.

13. Question 13 of 25

    

    Refer to the exhibit. An engineer cannot copy the IOS.bin file from the FTP server to the switch. Which action resolves the issue?

    • AAllow file permissions to download the file from the FTP server.
    • BAdd the IOS.bin file, which does not exist on FTP server.
    • CMake memory space on the switch flash or USB drive to download the file.
    • DUse the copy flash:/ ftp://cisco@10.0.0.2/IOS.bin command.

    Show answer

    Correct answer: B

    How others answered

    • B83%
    • A17%

    Explanation

    This is a long thread, but it points out that missing permission is indicated by the error message: "Permission denied" "No such file or directory" means the file and/or directory is not found in the specified directory of the TFTP server. "Permission denied" means read access to the file and/or directory is not enabled. https://community.cisco.com/t5/switching/error-opening-tftp-permission-denied/td-p/3302909/page/3

    Adapted from community discussion by HungarianDish_111 · 2023-06-12 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • cisco.com documentation
    • cisco.com documentation
    • cisco.com documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. H

       HungarianDish_111

       2023-05-06

       Selected B3 upvotes

       https://bst.cisco.com/bugsearch/bug/CSCeh27229 https://community.cisco.com/t5/switching/copy-flash-tftp-command-failed-on-cisco-3750-switch/td-p/1526415 The file does not exist under the specified directory on the ftp server. Solution "B".

    2. H

       HungarianDish_111

       2023-06-12

       3 upvotes

       This is a long thread, but it points out that missing permission is indicated by the error message: "Permission denied" "No such file or directory" means the file and/or directory is not found in the specified directory of the TFTP server. "Permission denied" means read access to the file and/or directory is not enabled. https://community.cisco.com/t5/switching/error-opening-tftp-permission-denied/td-p/3302909/page/3

    3. I

       inteldarvid

       2023-07-13

       Selected B2 upvotes

       the option correct is B, bceause in the script, the admin put user and password (cisco:cisco). Its not is necesary put password and user in the switch (ip ftp user, ip ftp password)

    4. I

       inteldarvid

       2023-07-15

       Selected B2 upvotes

       B si super correct: Team look this: https://quickview.cloudapps.cisco.com/quickview/bug/CSCeh27229

14. Question 14 of 25

    

    Refer to the exhibit. Router R2 should be learning the route for 10.123.187.0/24 via EIGRP. Which action resolves the issue without introducing more issues?

    • ARedistribute the route in EIGRP with metric, delay, and reliability.
    • BUse distribute-list to modify the route as an internal EIGRP route.
    • CUse distribute-list to filter the external routes in OSPF.
    • DRemove route redistribution in R2 for this route in OSPF.

    Show answer

    Correct answer: D

    How others answered

    • D73%
    • C27%

    Only 73% agreed on this answer — treat it as contested rather than settled.

    Explanation

    My assumption: the route 10.123.187.0/24 could be a static route which is redistributed into eigrp, and so it gets the AD 170 as eigrp external route. The the route goes to R2 where all eigrp routes are redistributed into ospf as E2 external ospf routes. At this point, the route 10.123.187.0/24 has an AD 110 in ospf and an AD 170 in eigrp on R2, thus ospf wins, and R2 learns the route from ospf. We would need to stop the EIGRP route (10.123.187.0/24) from getting redistributed into OSPF using a route-map, which means solution "D".

    Adapted from community discussion by HungarianDish_111 · 2023-05-07 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • cisco.com documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. H

       HungarianDish_111

       2023-05-07

       Selected D7 upvotes

       My assumption: the route 10.123.187.0/24 could be a static route which is redistributed into eigrp, and so it gets the AD 170 as eigrp external route. The the route goes to R2 where all eigrp routes are redistributed into ospf as E2 external ospf routes. At this point, the route 10.123.187.0/24 has an AD 110 in ospf and an AD 170 in eigrp on R2, thus ospf wins, and R2 learns the route from ospf. We would need to stop the EIGRP route (10.123.187.0/24) from getting redistributed into OSPF using a route-map, which means solution "D".

    2. M

       Malasxd

       2023-05-21

       Selected D5 upvotes

       Definily D. C would work, but you would impact the other external routes in OSPF

    3. F

       fizzer

       2023-09-11

       3 upvotes

       C is the right answer, D is not actually possible because even if this was a RIP learned route on R2 with AD of 120, redistributing RIP into OSPF on R2 will not remove the RIP route from the routing table and install the now External OSPF route because OSPF has AD of 110. it does makes sense when you think about it, because RIP would be the primary protocol that learned the route on R2, and redistributing it into OSPF on this same router does not make OSPF the boss over the route Also if you look closely, OSPF learned about the route from 10.1.3.2 which is probably where the redistribution happened whereas EIGRP learned it from 10.1.2.2 who probably also did the redistribution

    4. V

       VergilP

       2022-11-20

       Selected D4 upvotes

       I'm going for D the question say Which action resolves the issue" without introducing more issues" if filter the external routes in OSPF -> might delete other O E2 route?? so... I think is D

15. Question 15 of 25

    

    Refer to the exhibit. An error message "an OSPF-4-FLOOD_WAR" is received on SW2 from SW1. SW2 is repeatedly receiving its own link-state advertisement and flushes it from the network. Which action resolves the issue?

    • AChange area 5 to a normal area from a nonstub area.
    • BResolve different subnet mask issue on the link.
    • CConfigure Layer 3 port channel on interfaces between switches.
    • DResolve duplicate IP address issue in the network.

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    The question is based on this cisco document: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/118880-technote-ospf-00.html "This is meant to detect issues with Type-2 LSAs when duplicate IP addresses are present in the network, or with Type-5 LSAs when there is a duplicate router ID in different OSPF Areas."

    Adapted from community discussion by HungarianDish_111 · 2023-05-07 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. H

       HungarianDish_111

       2023-05-07

       Selected D4 upvotes

       The question is based on this cisco document: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/118880-technote-ospf-00.html "This is meant to detect issues with Type-2 LSAs when duplicate IP addresses are present in the network, or with Type-5 LSAs when there is a duplicate router ID in different OSPF Areas."

    2. I

       inteldarvid

       2023-07-15

       Selected D2 upvotes

       team is option D: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/118880-technote-ospf-00.html

    3. X

       Xerath

       2023-02-28

       Selected D1 upvote

       https://community.cisco.com/t5/switching/ospf-4-flood-war-messages-after-config-change/td-p/2506500

    4. N

       NoUserName1234

       2022-09-19

       1 upvote

       Seems right see: http://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/9237-9.html

16. Question 16 of 25

    

    Refer to the exhibit. A network engineer applied a filter for ISA traffic on OSPFv3 inter area routes on the area 5 ABR to protect advertising the internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes. After the respective route filtering configuration is applied on the

    

    ABR, area 5 routes are not visible on any of the areas. How must the filter list be applied on the ABR to resolve this issue?

    • Ain the "in" direction for area 5 on router R1
    • Bin the "in" direction for area 20 on router R2
    • Cin the "out" direction for area 20 on router R2
    • Din the "out" direction for area 5 on router R1

    Show answer

    Correct answer: B

    How others answered

    • B60%
    • C40%

    Only 60% agreed on this answer — treat it as contested rather than settled.

    Explanation

    For those that say C, when you filter OUT of Area 20 on R2, to which areas are you preventing the updates to enter? That would be Areas 0, 10 which is not what's required here. The thing is on which Router are you filtering. OUT direction would work if the filtering was being done on R5. The correct answer is B, you are filtering INto Area 20 so that updates from Area 0, 5 and Area 10 are not allowed in 20.

    Adapted from community discussion by asans · 2023-12-22 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. A

       asans

       2023-12-22

       11 upvotes

       For those that say C, when you filter OUT of Area 20 on R2, to which areas are you preventing the updates to enter? That would be Areas 0, 10 which is not what's required here. The thing is on which Router are you filtering. OUT direction would work if the filtering was being done on R5. The correct answer is B, you are filtering INto Area 20 so that updates from Area 0, 5 and Area 10 are not allowed in 20.

    2. F

       fizzer

       2023-09-13

       2 upvotes

       Right answer is B The question is a bit misleading by saying every area must learn about the route I believe R2 belongs to us but R5 belongs to the business partner, Area 20 is the area between us and the business partner that we both use to share routes and this is where we control what routes we share with them, by filtering what goes into area 20 on R2 A is just silly trying to filter a route that originates for Area 5 from coming into Area 5 D is the exact thing the Engineer has done which is causing the problem - prevent R1 from advertising the route from area 5 into area 0 which means R2 does not know about it in area 0 to advertise it further to area 10 where it is also needed internally C is telling R2 not advertise the route from area 20 to any other areas (configured on R2), however, area 20 would need to learn about the route from area 0 first before it can decide whether or not to advertise it out to another area. Best place to apply option C would be on R5 but as mentioned above, I do not believe it is under our jurisdiction

    3. E

       elmorrre

       2023-03-05

       Selected B4 upvotes

       If I understand the question correct we need to stop advertising Area 5 routes to BusinessPartner network, i.e. Area 20. So we have to use area 20 filter-list prefix in Then all the areas except area 20 will receive area 5 internal routes.

    4. M

       Malasxd

       2023-05-18

       Selected B3 upvotes

       B is right. "in" means the you importing routes and "out" you are exporting routes from an area. The best answer would be area 20 out direction at R5, but this is not a option here. The best answer available would be avoid the routes being imported in area 20. The problem would be the area 20 will not learn area 5 routes, but, B is the less worse option here.

17. Question 17 of 25

    An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

    • APackets are not forwarded to the specific next hop.
    • BPackets are forwarded based on the routing table.
    • CPackets are forwarded based on a static route.
    • DPackets are forwarded to the specific next hop.

    Show answer

    Correct answer: D

    How others answered

    • D94%

    Explanation

    D The set ip default next-hop command verifies the existence of the destination IP address in the routing table, and… if the destination IP address exists, the command does not policy route the packet, but forwards the packet based on the routing table. if the destination IP address does not exist, the command policy routes the packet by sending it to the specified next hop. The set ip next-hop command verifies the existence of the next hop specified, and… if the next hop exists in the routing table, then the command policy routes the packet to the next hop. if the next hop does not exist in the routing table, the command uses the normal routing table to forward the packet.

    Adapted from community discussion by Alex147 · 2021-12-15 · 12 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. A

       Alex147

       2021-12-15

       Selected D12 upvotes

       D The set ip default next-hop command verifies the existence of the destination IP address in the routing table, and… if the destination IP address exists, the command does not policy route the packet, but forwards the packet based on the routing table. if the destination IP address does not exist, the command policy routes the packet by sending it to the specified next hop. The set ip next-hop command verifies the existence of the next hop specified, and… if the next hop exists in the routing table, then the command policy routes the packet to the next hop. if the next hop does not exist in the routing table, the command uses the normal routing table to forward the packet.

    2. S

       Stylar

       2023-03-27

       Selected D4 upvotes

       ChatGPT: Yes, if the router has been configured with a policy-based routing (PBR) rule using the "set ip default next-hop" command and a packet arrives at the router with a destination IP address that is not present in the router's routing information base (RIB), the router will forward the packet to the next-hop address specified in the PBR rule. This is because PBR allows the router to apply forwarding policies that are independent of the routing table lookup process. In other words, the router will use the PBR policy to determine where to forward the packet, regardless of whether the destination IP address is present in the RIB or not. However, it's important to note that forwarding packets using PBR rules that reference non-existent destinations can result in unexpected behavior and can lead to packet loss if the next-hop address specified in the PBR rule is not reachable. It's generally recommended to ensure that all destination IP addresses referenced in PBR rules are present in the RIB to avoid any unexpected packet drops.

    3. B

       Billybob83400

       2021-09-04

       4 upvotes

       The answer is D: Packets are forwarded to the specific next hop. > pay attention to the ip DEFAULT next-hop The set ip DEFAULT next-hop command verifies the existence of the destination IP address in the routing table, and… - if the destination IP address exists, the command does not policy route the packet, but forwards the packet based on the routing table. - if the destination IP address does not exist, the command policy routes the packet by sending it to the specified next hop. The set ip next-hop command verifies the existence of the next hop specified, and… - if the next hop exists in the routing table, then the command policy routes the packet to the next hop. - if the next hop does not exist in the routing table, the command uses the normal routing table to forward the packet.

    4. S

       studybuddy10

       2021-11-07

       4 upvotes

       D. Best simple explanation i have found is here: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_pi/configuration/xe-3s/iri-xe-3s-book/iri-pbr-default-nexthop-route.pdf From page 3. "The set ip next-hop and set ip default next-hop commands are similar but have a different order of operation. Configuring the set ip next-hop command causes the system to first use policy routing and then use the routing table. Configuring the set ip default next-hop command causes the system to first use the routing table and then the policy-route-specified next hop" In our case the route for the destination is not in the routing table therefor the configured next hop will be used.

18. Question 18 of 25

    

    Refer to the exhibit. After configuring OSPF in R1, some external destinations in the network became unreachable. Which action resolves the issue?

    • ADisconnect the router with the OSPF router ID 0.0.0 0 from the network.
    • BIncrease the SPF delay interval on R1 to synchronize routes.
    • CChange the R1 router ID from 10.255.255.1 to a unique value and clear the process.
    • DClear the OSPF process on R1 to flush stale LSAs sent by other routers.

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    The OSPF Router ID 10.255.255.1 is not unique, thus "OSPF-4-FLOOD_WAR" error message is generated on the affected routers. R1 is one of the affected devices, so "C) Change the R1 router ID from 10.255.255.1 to a unique value and clear the process" resolves the issue.

    Adapted from community discussion by HungarianDish_111 · 2023-05-12 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. H

       HungarianDish_111

       2023-05-12

       Selected C8 upvotes

       The OSPF Router ID 10.255.255.1 is not unique, thus "OSPF-4-FLOOD_WAR" error message is generated on the affected routers. R1 is one of the affected devices, so "C) Change the R1 router ID from 10.255.255.1 to a unique value and clear the process" resolves the issue.

    2. H

       HungarianDish_111

       2023-05-12

       3 upvotes

       "show ip ospf database self-originate" displays LSAs from the local router = R1. R1 has the OSPF Router ID 10.255.255.1 (displayed as "adv-rtr" or "ADV Router"). As we see, R1 originates a type 5 LSA with a link ID of 0.0.0.0, which is the default route (from default-information originate). That is where the router ID conflict occurs.

    3. H

       HungarianDish_111

       2023-05-12

       3 upvotes

       https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/118880-technote-ospf-00.html OSPF-4-FLOOD_WAR "...Type-5 LSAs when there is a duplicate router ID in different OSPF Areas"

    4. H

       HungarianDish_111

       2023-05-12

       2 upvotes

       https://community.cisco.com/t5/switching/ospf-4-flood-war-messages-after-config-change/td-p/2506500 "For OSPF to function correctly the IP addresses of transit networks must be unique. If it is not unique the conflicting routers reports this error message. In the error message the router with the OSPF router ID reported as adv-rtr reports this message."

19. Question 19 of 25

    Which table is used to map the packets in an MPLS LSP that exit from the same interface, via the same next hop, and have the same queuing policies?

    • ALDP
    • BFEC
    • CCEF
    • DRIB

    Show answer

    Correct answer: B

    How others answered

    • B80%
    • C20%

    Explanation

    A forwarding equivalence class (FEC) is a term used in Multiprotocol Label Switching (MPLS) to describe a set of packets with similar or identical characteristics which may be forwarded the same way; that is, they may be bound to the same MPLS label.

    Adapted from community discussion by msama · 2022-11-18 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • cisco.com documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. M

       msama

       2022-11-18

       Selected B3 upvotes

       A forwarding equivalence class (FEC) is a term used in Multiprotocol Label Switching (MPLS) to describe a set of packets with similar or identical characteristics which may be forwarded the same way; that is, they may be bound to the same MPLS label.

    2. I

       inteldarvid

       2023-07-16

       Selected B3 upvotes

       FOR ME IS "B", Because, I think there is a problem in the question, the word "table", the rest of the question is the same FEC concept, the same label for several pefixes with the same next hop and the same queuing policies.

    3. H

       HungarianDish_111

       2023-05-12

       2 upvotes

       https://www.networkworld.com/article/2291724/chapter-7--understanding-cef-in-an-mpls-vpn-environment.html MPLS creates its own database for lookups called the Label Forwarding Information Base (LFIB), but it uses the CEF FIB as a source of this information. In the direction of label imposition, the router switches packets based on a CEF table lookup to find the next hop and adds the appropriate label information stored in the FIB for the destination.

    4. [

       [Removed]

       2024-07-21

       Selected B2 upvotes

       B is correct FEC (Forwarding Equivalence Class) is a key concept in MPLS. It groups packets that are forwarded in the same manner, which means they exit through the same interface, follow the same next hop, and have the same queuing policies.

20. Question 20 of 25

    Select 2

    Which BGP attribute can be used to influence the path that outgoing traffic takes from your AS to other Autonomous Systems? (Choose two.)

    • AMED
    • BAS_Path
    • CWeight
    • DLocal Preference

    Show answer

    Correct answer: C, D

    How others answered

    • CD76%
    • BD24%

    Explanation

    I voted C, D, because weight (C) can be used for dual-home network scenarios. Weight is only locally relevant, however, if there is only one border router for eBGP peering it can be used to manipulate outbound traffic out of one AS towards other ASs. https://community.cisco.com/t5/other-network-architecture-subjects/bgp-inbound-and-outbound-traffic/td-p/337728 I do not doubt that B (AS-path prepend) is correct, too. I just can't choose between B and C. As-path prepend used outbound is also possible. Example: https://blog.ipspace.net/2009/03/as-path-prepending-technical-details.html

    Adapted from community discussion by HungarianDish_111 · 2023-06-01 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • cisco.com documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. T

       Typovy

       2023-04-25

       Selected C, D4 upvotes

       Provided answer is correct, its Weigth and Local preference. AS Path is used to influence incoming traffic not outgoing. You can use it to influence incoming traffic but is not recomended. @Titini "The Weight attribute is useful for influencing the path of traffic within a single router, it cannot be used to influence the path of outgoing traffic from your AS " - you dont understand what tha 'AS' is, you can have huge autonomous system network and olny one BGP router. So still you cant use Weigth?

    2. H

       HungarianDish_111

       2023-06-01

       4 upvotes

       I voted C, D, because weight (C) can be used for dual-home network scenarios. Weight is only locally relevant, however, if there is only one border router for eBGP peering it can be used to manipulate outbound traffic out of one AS towards other ASs. https://community.cisco.com/t5/other-network-architecture-subjects/bgp-inbound-and-outbound-traffic/td-p/337728 I do not doubt that B (AS-path prepend) is correct, too. I just can't choose between B and C. As-path prepend used outbound is also possible. Example: https://blog.ipspace.net/2009/03/as-path-prepending-technical-details.html

    3. D

       drxz

       2023-05-03

       Selected C, D5 upvotes

       C and D are correct. ASpath is only for manipulating incoming traffic to your AS, not outgoing.

    4. S

       Slinky

       2023-04-30

       Selected C, D4 upvotes

       C and D are correct. Weight is locally significant, but if you have one router that is dual-homed, you are still influencing egress traffic. Local pref is used for influencing egress traffic from your entire autonomous system, I.e you have two separate routers running iBGP with an uplink to a different ISP each.

21. Question 21 of 25

    Select 3

    First-Hop Security (FHS) is a set of features to optimize IPv6 link operation, and help with scale in large L2 domains. Which of the following are valid First-Hop Security features supported by Cisco? (Choose three.)

    • AIPv6 RA Guard
    • BIPv6 Source Guard
    • CDHCPv6 Guard
    • DIPv6 Snooping
    • EDHCPv6 Snooping

    Show answer

    Correct answer: A, C, D

    How others answered

    • ACD94%

    Explanation

    "IPv6 FHS features enable a better IPv6 link security and management over the layer 2 links. These are the features supported: • IPv6 Snooping • IPv6 Router Advertisement Guard • IPv6 - Destination Guard • Binding Table Recovery • DHCPv6 Guard • IPv6 Source Guard • IPv6 Prefix Guard • Data Gleaning" However: "The configuration of IPv6 Snooping is a prerequisite for IPv6 Source Guard." - therefore skip B https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/15S/configuration/guide/7600_15_0s_book/IPv6_Security.pdf

    Adapted from community discussion by Horsefeathers · 2024-02-11 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. M

       Muste

       2023-08-10

       Selected A, C, D8 upvotes

       the question is asking about L2 domains that's why B isn't qualified

    2. H

       Horsefeathers

       2024-02-11

       Selected A, C, D3 upvotes

       "IPv6 FHS features enable a better IPv6 link security and management over the layer 2 links. These are the features supported: • IPv6 Snooping • IPv6 Router Advertisement Guard • IPv6 - Destination Guard • Binding Table Recovery • DHCPv6 Guard • IPv6 Source Guard • IPv6 Prefix Guard • Data Gleaning" However: "The configuration of IPv6 Snooping is a prerequisite for IPv6 Source Guard." - therefore skip B https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/15S/configuration/guide/7600_15_0s_book/IPv6_Security.pdf

    3. X

       XBfoundX

       2024-09-07

       3 upvotes

       Another of those questions..... In this case as Hungarian Dish is saying we need the first FOUR! IPv6 FHS is composed of the following IPv6 security features: IPv6 Snooping, IPv6 Neighbor DiscoveryInspection IPv6 Router Advertisement Guard , IPv6 DHCP Guard, IPv6 Source Guard, IPv6 Prefix Guard, IPv6 Destination Guard. Link based on the manual regarding configs of C9300 switches (brand new) https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-13/configuration_guide/sec/b_1713_sec_9300_cg/configuring_ipv6_first_hop_security.pdf

    4. H

       HungarianDish_111

       2023-05-15

       3 upvotes

       A,B,C,D!!! RA Guard, DHCPv6 Guard, Source Guard, IPv6 ND snooping = device-tracking https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKSEC-3200.pdf https://networklessons.com/cisco/ccie-routing-switching-written/ipv6-first-hop-security-features https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/15S/configuration/guide/7600_15_0s_book/IPv6_Security.html

22. Question 22 of 25

    You are configuring Netflow on various network elements in order to gain visibility into the traffic types used. How many export destinations can this Network data be sent to?

    • AUp to 2
    • BUp to 4
    • CUp to 8
    • DThere is no limitation on the number of flow data export destinations.

    Show answer

    Correct answer: A

    How others answered

    • A50%
    • D50%

    Only 50% agreed on this answer — treat it as contested rather than settled.

    Explanation

    • Using flow exporters, you can create an exporter for every type of traffic that you want to analyze so that you can send each type of traffic to a different NetFlow collector. Original NetFlow sends the data in a cache for all of the analyzed traffic to a maximum of two export destinations. • Flow exporters support up to ten exporters per flow monitor. Original NetFlow is limited to only two export destinations per cache https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/xe-16-10/fnf-xe-16-10-book/fnf-v9-export.pdf

    Adapted from community discussion by bk989 · 2024-09-02 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. H

       HungarianDish_111

       2023-06-12

       5 upvotes

       https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/xe-16-10/fnf-xe-16-10-book/fnf-output-features.pdf Original NetFlow is limited to only two export destinations per cache.

    2. B

       bk989

       2024-09-02

       2 upvotes

       • Using flow exporters, you can create an exporter for every type of traffic that you want to analyze so that you can send each type of traffic to a different NetFlow collector. Original NetFlow sends the data in a cache for all of the analyzed traffic to a maximum of two export destinations. • Flow exporters support up to ten exporters per flow monitor. Original NetFlow is limited to only two export destinations per cache https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/xe-16-10/fnf-xe-16-10-book/fnf-v9-export.pdf

    3. K

       Kdom07

       2024-10-24

       2 upvotes

       The Correct Answer is "A" In Flexible Netflow there is no limit to the number of exporters In Traditional Netflow, its no more than 2 In this exam context assume "Traditional" unless specifically stated its "Flexible"

    4. Z

       Zizu007

       2023-01-07

       2 upvotes

       answer is correct: **You can configure a maximum of two export destinations for NetFlow. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/15-mt/nf-15-mt-book/get-start-cfg-nflow.html

23. Question 23 of 25

    

    Refer to the exhibit. An engineer must extend VRF-Lite over a trunk to another switch for VLAN 70 (10.70.70.0/24) on port GigabitEtheret0/0 and VLAN 80 (10.80.80.0/24) on port GigabitEthernet0/1. Which configuration accomplishes this objective?

    • Ainterface GigabitEthernet0/0 no switchport ip vrf forwarding 70 ip address 10.70.70.1 255.255.255.0 ! interface GigabitEthernet0/1 no switchport ip vrf forwarding 80 ip address 10.80.80.1 255.255.255.0
    • Binterface GigabitEthernet0/0 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 70 ! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 80
    • Cinterface GigabitEthernet0/0 switchport mode access switchport access vlan 70 ip vrf forwarding 70 ! interface GigabitEthernet0/1 switchport mode access switchport access vlan 80 ip vrf forwarding 80
    • Dinterface GigabitEthernet0/0 switchport mode access switchport access vlan 70 ! interface GigabitEthernet0/1 switchport mode access switchport access vlan 80 !

    Show answer

    Correct answer: B

    How others answered

    • B87%

    Explanation

    Example configs: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/31sg/configuration/guide/conf/vrf.html https://community.cisco.com/t5/switching/vrf-routing-in-vlan/td-p/3194751 The physical trunk ports are configured with simple trunk configuration. The vrf is associated under the vlan interfaces. 1)create vlans 2)create vrf definition 3)create vlan interface, assign vrf, then IP 4)configure the trunk and allow vlans as required

    Adapted from community discussion by HungarianDish_111 · 2023-05-16 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. H

       HungarianDish_111

       2023-05-16

       Selected B7 upvotes

       Example configs: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/31sg/configuration/guide/conf/vrf.html https://community.cisco.com/t5/switching/vrf-routing-in-vlan/td-p/3194751 The physical trunk ports are configured with simple trunk configuration. The vrf is associated under the vlan interfaces. 1)create vlans 2)create vrf definition 3)create vlan interface, assign vrf, then IP 4)configure the trunk and allow vlans as required

    2. [

       [Removed]

       2023-03-03

       Selected B8 upvotes

       layer 2 is not VRF, it is dot1q. So trunk away like normal and let the L3 device assign the VRF to the l3 interface.

    3. 6

       6dd4aa0

       2023-04-12

       Selected B4 upvotes

       https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/20ewa/configuration/guide/conf/vrf.pdf Look at page 26-7 onwards

    4. L

       Lilienen

       2023-02-13

       4 upvotes

       Could someone explain this question? It clearly says 'over a trunk', but how does one extend VRF over a trunk? Cisco is mixing routing and switching here. Shouldn't the answer be B, as that's the only answer with an actual trunk configuration?

24. Question 24 of 25

    What is an advantage of using BFD?

    • AIt detects local link failure at layer 1 and updates the routing table.
    • BIt detects local link failure at layer 3 and updates the routing protocols.
    • CIt has sub-second failure detection for layer 1 and layer 3 problems.
    • DIt has sub-second failure detection for layer 1 and layer 2 problems.

    Show answer

    Correct answer: D

    How others answered

    • D54%
    • B44%

    Only 54% agreed on this answer — treat it as contested rather than settled.

    Explanation

    I Go for D just following reasion A. It detects local link failure at layer 1 and updates the routing table. WRONG - BFD detects local link failures, but BFD does not interact with the routing table WRONG B. It detects local link failure at layer 3 and updates the routing protocols. (ALMOST RIGHT BUT WRONG) - The question here is What is the advantage of using BFD. routing procols can detect local link failures, so this is not an advantage. C. It has sub-second failure detection for layer 1 and layer 3 problems. WRONG TRICKY' - sub second failure detection is an advange of BFD, but BFD only detects L1-L2 problems, ink itself, BFD can not detect L3 problem like address misconfig. D. It has sub-second failure detection for layer 1 and layer 2 problems. RIGHT!! - The advantage of BFD is it's sub-second failure detection, and just detect L1-L2 problems.

    Adapted from community discussion by Koume · 2023-01-20 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. K

       Koume

       2023-01-20

       Selected D11 upvotes

       I Go for D just following reasion A. It detects local link failure at layer 1 and updates the routing table. WRONG - BFD detects local link failures, but BFD does not interact with the routing table WRONG B. It detects local link failure at layer 3 and updates the routing protocols. (ALMOST RIGHT BUT WRONG) - The question here is What is the advantage of using BFD. routing procols can detect local link failures, so this is not an advantage. C. It has sub-second failure detection for layer 1 and layer 3 problems. WRONG TRICKY' - sub second failure detection is an advange of BFD, but BFD only detects L1-L2 problems, ink itself, BFD can not detect L3 problem like address misconfig. D. It has sub-second failure detection for layer 1 and layer 2 problems. RIGHT!! - The advantage of BFD is it's sub-second failure detection, and just detect L1-L2 problems.

    2. E

       error_909

       2021-09-26

       5 upvotes

       The given answer is correct "Bidirectional Forwarding Detection provides a method for network administrators to configure sub-second Layer 2 failure detection between adjacent network nodes. Furthermore, they can configure their routing protocols to respond to BFD notifications, and begin Layer 3 route convergence almost immediately. Provided that the appropriate caveats mentioned in this document are followed, BFD can be a powerful tool and an important part of a network-wide availability plan. " https://www.cisco.com/en/US/technologies/tk648/tk365/tk207/technologies_white_paper0900aecd80243fe7.html

    3. E

       Edwinmolinab

       2022-07-26

       Selected D3 upvotes

       From https://www.cisco.com/en/US/technologies/tk648/tk365/tk207/technologies_white_paper0900aecd80243fe7.html BFD can be used at any protocol layer. It could, for example, detect Physical or Data Link layers failures, if the existing mechanisms did not provide sufficiently speedy detection. However, in the first phase of Cisco BFD support, all BFD clients, particularly the Layer 3 routing protocols (OSPF, IS-IS, EIGRP, and BGP) are at the Network layer.

    4. E

       eeze

       2024-02-28

       2 upvotes

       Correct answer is B RFC 5880: https://datatracker.ietf.org/doc/html/rfc5880#section-3.1 Cisco Doc: https://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/fs_bfd.html "BFD is a “detection” protocol that works with all media types, routing protocols, topologies, and encapsulations. It is used to quickly detect reachability failures between two routers in the same Layer 3 network so that network issues can be identified as soon as possible, and convergence can occur at a far faster rate. BFD is a lightweight protocol (that is, it has small fixed-length packets), which means it is less CPU intensive than fast routing protocol hellos." Raymond, Lacoste; Edgeworth Brad. CCNP Enterprise Advanced Routing ENARSI 300-410 Official Cert Guide (p. 1773). Pearson Education. Kindle Edition.

25. Question 25 of 25

    Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

    • Amulti-paths eibgp 2
    • Bmaximum-paths 2
    • Cmaximum-paths ibgp 2
    • Dmulti-paths 2

    Show answer

    Correct answer: C

    How others answered

    • C73%
    • B17%

    Only 73% agreed on this answer — treat it as contested rather than settled.

    Explanation

    https://www.cisco.com/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxeibmp.html#wp1037690 This is how I see this based on the mentioned article. In BGP we can set different options for load sharing, depending on the design. With MPLS, we can configure "maximum-path ibgp" or "maximum-path eibgp", where the feature [ibgp] performs multipath forwarding only in PE-PE ibgp MPLS domain, and the feature [eibgp] can use both PE-PE ibgp and PE-CE ebgp domains for multipath calculations. If "maximum-paths eibgp 2" is not offered then "maximum-paths ibgp" is OK for MPLS (PE-PE) scenarios. = Answer "C"

    Adapted from community discussion by HungarianDish_111 · 2023-06-11 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-410 or CertExamHQ.

    1. Z

       ZachTL11

       2021-04-21

       17 upvotes

       C is correct. Remember MPLS Layer 3 VPN is used in an iBGP setup and not eBGP. This rules out B as the correct answer.

    2. H

       HungarianDish_111

       2023-06-11

       Selected C5 upvotes

       https://www.cisco.com/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxeibmp.html#wp1037690 This is how I see this based on the mentioned article. In BGP we can set different options for load sharing, depending on the design. With MPLS, we can configure "maximum-path ibgp" or "maximum-path eibgp", where the feature [ibgp] performs multipath forwarding only in PE-PE ibgp MPLS domain, and the feature [eibgp] can use both PE-PE ibgp and PE-CE ebgp domains for multipath calculations. If "maximum-paths eibgp 2" is not offered then "maximum-paths ibgp" is OK for MPLS (PE-PE) scenarios. = Answer "C"

    3. L

       louisvuitton12

       2023-11-03

       Selected C4 upvotes

       Answer is C. https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/102x/configuration/label-switching/b-cisco-nexus-9000-series-nx-os-label-switching-configuration-guide-102x/m-configuring-mpls-layer-3-vpn-load-balancing.pdf Example: MPLS Layer 3 VPN Load Balancing The following example shows how to configure iBGP load balancing: configure terminal feature-set mpls feature mpls l3vpn feature bgp router bgp 1.1 bestpath cost-community ignore address-family ipv6 unicast maximum-paths ibgp 4

    4. C

       CraigB83

       2020-10-21

       4 upvotes

       Reviewing this, C appears correct as per Cisco docs: Example: MPLS Layer 3 VPN Load Balancing The following example shows how to configure iBGP load balancing: configure terminal feature-set mpls Configuring MPLS Layer 3 VPN Load Balancing 10 Configuring MPLS Layer 3 VPN Load Balancing Verifying MPLS ECMP Load Sharing feature mpls l3vpn feature bgp router bgp 1.1 bestpath cost-community ignore address-family ipv6 unicast maximum-paths ibgp 4 https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/93x/label-switching/b-cisco-nexus-9000-series-nx-os-label-switching-configuration-guide-93x/b-cisco-nexus-9000-series-nx-os-label-switching-configuration-guide-93x_chapter_0111.pdf

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 1 of 25