300-410 practice questions 101–110

1. Question 101 · 578 in bank

   

   Refer to the exhibit. A network administrator is discovering a Cisco Catalyst 9300 and a Cisco WLC 3504 in Cisco DNA Center. The Catalyst 9300 is added successfully. However, the WLC is showing the error "uncontactable" when the administrator tries to add it in Cisco DNA Center. Which action discovers WLC in Cisco DNA Center successfully?

   • ADelete the WLC 3504 from Cisco DNA Center and add it to Cisco DNA Center again.
   • BAdd the WLC 3504 under the hierarchy of the Catalyst 9300 connected devices.
   • CCopy the .cert file from the Cisco DNA Center on the USB and upload it to the WLC 3504.
   • DCopy the .pem file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

   Show answer

   Answer: D

   Explanation

   D is correct For Cisco DNA Center to successfully communicate with and manage network devices such as the WLC 3504, the device must trust the Cisco DNA Center's certificate. This often involves uploading a .pem file (which contains the public key certificate) from the Cisco DNA Center to the WLC. This step ensures that the WLC recognizes and trusts the Cisco DNA Center as an authorized management platform.

   Source: Adapted from community discussion — [Removed]

   References

   • cisco.com documentation
   • cisco.com documentation

   Next question

2. Question 102 · 578 in bank

   

   Refer to the exhibit. A user cannot SSH to the router. What action must be taken to resolve this issue?

   • AConfigure transport input ssh
   • BConfigure transport output ssh
   • CConfigure ip ssh version 2
   • DConfigure ip ssh source-interface loopback0

   Show answer

   Answer: A

   Explanation

   You've partially right, but the default function was changed: according to command reference: "Defaults No protocols are allowed on the auxiliary (AUX), console, tty, and vty lines. ... Cisco devices do not accept incoming network connections to tty lines by default. You must specify an incoming transport protocol or specify the transport input all command before the line will accept incoming connections. ... This behavior is new as of Cisco IOS Release 15.4(3)M4. Previous to Cisco IOS Release 15.4(3)M4, the default was the transport input all command. If you are upgrading to a release later than Cisco IOS Release 15.4(3)M4, you must configure the transport input none command, or you will be locked out of your device." https://www.cisco.com/c/en/us/td/docs/ios/termserv/command/reference/tsv_book/tsv_s1.html

   Source: Adapted from community discussion — tsabee

   References

   • Cisco documentation
   • Cisco documentation

   Next question

3. Question 103 · 578 in bank

   An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted. Which action resolves the issue?

   • AConfigure all devices for SNMPv3 informs with auth.
   • BConfigure all devices for SNMPv3 informs with priv.
   • CConfigure all devices for SNMPv3 traps with auth.
   • DConfigure all devices for SNMPv3 traps with priv.

   Show answer

   Answer: B

   Explanation

   The major difference between an inform request and a trap is that an SNMP agent has no way of knowing if an SNMP trap was received by the SNMP manager. However, an SNMP inform request packet will be sent continually until the sending SNMP manager receives an SNMP acknowledgement. "Reliable" is stated clearly in the question

   Source: Adapted from community discussion — error_909

   Next question

4. Question 104 · 578 in bank

   

   Refer to the exhibit. An engineer is monitoring reachability of the configured default routes to ISP1 and ISP2. The default route from ISP1 is preferred if available. How is this issue resolved?

   • AUse the icmp-echo command to track both default routes.
   • BUse the same AD for both default routes.
   • CStart IP SLA by matching numbers for track and ip sla commands.
   • DStart IP SLA by defining frequency and scheduling it.

   Show answer

   Answer: D

   Explanation

   D is correct in the provided configuration, the IP SLA is not activated. So we must start it with this command: R1(config)#ip sla schedule 100 life forever start-time now Also we should specific the rate of ICMP echo: R1(config-ip-sla-echo)#frequency 5 (to send ICMP echo every 5 seconds)

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation

   Next question

5. Question 105 · 578 in bank

   

   Refer to the exhibits. An engineer identified a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?

   

   • Aspanning-tree portfast bpduguard
   • Bno spanning-tree uplinkfast
   • Cspanning-tree backbonefast
   • Dspanning-tree loopguard default

   Show answer

   Answer: D

   Explanation

   The answer should be D. The A enables bpduguard on access ports. We have trunks here. So, loopguard enabled on the trunks will solve the issue. https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10596-84.html give a good explanation

   Source: Adapted from community discussion — OakA1

   References

   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

6. Question 106 · 578 in bank

   

   Refer to the exhibit. An engineer receives this error message when trying to access another router in-band from the serial interface connected to the console of R1. Which configuration is needed on R1 to resolve this issue?

   • AR1(config)#line vty 0 R1(config-line)# transport output ssh
   • BR1(config)#line console 0 R1(config-line)# transport output ssh
   • CR1(config)#line console 0 R1(config-line)# transport preferred ssh
   • DR1(config)#line vty 0 R1(config-line)# transport output ssh R1(config-line)# transport preferred ssh

   Show answer

   Answer: B

   Explanation

   R2#conf t Enter configuration commands, one per line. End with CNTL/Z. R2(config)#lin vty 0 R2(config-line)#transport output ssh R2(config-line)#transport preferred ssh R2(config-line)#^Z R2#conf t *Feb 8 20:47:02.183: %SYS-5-CONFIG_I: Configured from console by console R2#ssh -l admin 10.0.0.1 % ssh connections not permitted from this terminal R2#conf t Enter configuration commands, one per line. End with CNTL/Z. R2(config)#line con 0 R2(config-line)#transport output ssh R2(config-line)#transport output ssh R2(config-line)#^Z R2#ssh -l admin 10.0.0.1 *Feb 8 20:47:37.523: %SYS-5-CONFIG_I: Configured from console by console R2#ssh -l admin 10.0.0.1 Password: R1#

   Source: Adapted from community discussion — tseen

   Next question

7. Question 107 · 578 in bank

   Select 2

   

   Refer to the exhibit. The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new IP address. What two actions must be taken to resolve this issue? (Choose two.)

   • AConfigure the server to use DHCP on the network with default gateway 200.30.40.100.
   • BConfigure the server with a static IP address and default gateway.
   • CConfigure the router to exclude a server IP address.
   • DConfigure the server to use DHCP on the network with default gateway 200.30.30.100.
   • EConfigure the router to exclude a server IP address and default gateway.

   Show answer

   Answer: BC

   Explanation

   E is wrong. Default gateway is automatically excluded from the DHCP address pool. No need to configure. Excluding IP Addresses Perform this task to specify IP addresses (excluded addresses) that the DHCP server should not assign to clients. The IP address configured on the router interface is automatically excluded from the DHCP address pool. The DHCP server assumes that all other IP addresses in a DHCP address pool subnet are available for assigning to DHCP clients. https://www.cisco.com/en/US/docs/ios/12_4t/ip_addr/configuration/guide/htdhcpsv.html#wp1046221

   Source: Adapted from community discussion — BambooHow

   References

   • Cisco documentation
   • Cisco documentation

   Next question

8. Question 108 · 578 in bank

   

   Refer to the exhibit. A user has set up an IP SLA probe to test if a non SLA host web server on IP address 10.1.1.1 accepts HTTP sessions prior to deployment. The probe is failing. Which action should the network administrator recommend for the probe to succeed?

   • ARe-issue the ip sla schedule command.
   • BAdd the control disable option to the tcp connect.
   • CModify the ip sla schedule frequency to forever.
   • DAdd icmp-echo command for the host.

   Show answer

   Answer: B

   Explanation

   According to this Cisco link https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2018/pdf/BRKNMS-3043.pdf, we should disable the Control Protocol with "control disable" keyword (the full command is "tcp connect 10.1.1.1 80 control disable) if the target host is not running IP SLA -> Answer "Add the control disable option to the tcp connect" is correct.

   Source: Adapted from community discussion — DaanB

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

9. Question 109 · 578 in bank

   

   Refer to the exhibit. Which statement about R1 is true?

   • AOSPF redistributes RIP routes only if they have a tag of one.
   • BRIP learned routes are distributed to OSPF with a tag value of one.
   • CR1 adds one to the metric for RIP learned routes before redistributing to OSPF.
   • DRIP routes are redistributed to OSPF without any changes.

   Show answer

   Answer: B

   Explanation

   If a match command is not present, all routes match the clause. In the previous example, all routes that reach clause 30 match; therefore, the end of the route-map is never reached. https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/49111-route-map-bestp.html

   Source: Adapted from community discussion — CraigB83

   References

   • Cisco documentation
   • Cisco documentation

   Next question

10. Question 110 · 578 in bank

    

    Refer to the exhibit. A network administrator is using the DNA Assurance Dashboard panel to troubleshoot an OSPF adjacency that failed between Edge_NYC Interface GigabitEthernet1/3 with Neighbor Edge_SNJ. The administrator observes that the neighborship is stuck in the exstart state. How does the administrator fix this issue?

    • AConfigure to match the OSPF interface network types on both routers.
    • BConfigure to match the OSPF interface speed and duplex settings on both routers.
    • CConfigure to match the OSPF interface MTU settings on both routers.
    • DConfigure to match the OSPF interface unique IP address and subnet mask on both routers.

    Show answer

    Answer: C

    Explanation

    Neighbors Stuck in Exstart/Exchange State The problem occurs most frequently when you attempt to run OSPF between a Cisco router and another vendor router. The problem occurs when the maximum transmission unit (MTU) settings for neighboring router interfaces do not match. If the router with the higher MTU sends a packet larger that the MTU set on the neighboring router, the neighbor router ignores the packet. When this problem occurs, the output of the show ip ospf neighbor command displays output similar to what is shown in this figure.

    Source: Adapted from community discussion — yeyuno

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 101. 578 questions available.