300-410 practice questions 111–120

1. Question 111 · 578 in bank

   Select 2

   

   Refer to the exhibit. A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log messages stream, it is impossible to capture the problem. Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two.)

   • Adebug condition ospf neighbor
   • Bdebug condition interface
   • Cdebug condition session-id ADJCHG
   • Ddebug condition all

   Show answer

   Answer: BC

   Explanation

   In the ETA file the D one seems to be debug condition ip. If you find that then is B and D otherwise the answer is fine. For me D in the simultations is debug condition ip, cause this exists as a command I prefer it rather then debug confition session-id ADJCHG Remember also this: The debug condition session-id command filters a session only after the session has been established. The session identifier is a unique dynamic number generated internally by the Cisco IOS software and assigned to each session when the session is established. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/isg/configuration/xe-3s/asr1000/isg-xe-3s-asr1000-book/isg-debug-dcd.html Hope that you are gonna smash the exam. Se ya

   Source: Adapted from community discussion — XBfoundX

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 112 · 578 in bank

   Refer to the exhibit.

   

   A network is under a cyberattack. A network engineer connected to R1 by SSH and enabled the terminal monitor via SSH session to find the source and destination of the attack. The session was flooded with messages, which made it impossible for the engineer to troubleshoot the issue. Which command resolves this issue on R1?

   • A(config)#terminal no monitor
   • B(config)#no terminal monitor
   • C#no terminal monitor
   • D#terminal no monitor

   Show answer

   Answer: D

   Explanation

   Turning Terminal Logging Off In a classic moment of IOS madness, if you want to stop logging to your terminal: s1#terminal no monitor If is was consistent with everything in IOS, you might expect to use: s1#no terminal monitor †But you would be wrong. This syntax is very old and predates the more standardised IOS conventions.

   Source: Adapted from community discussion — Nhan

   Next question

3. Question 113 · 578 in bank

   Refer to the exhibit.

   

   A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer fails. Which action resolves this issue?

   • AThe Python interpreter must first be enabled with the guestshell enable command.
   • BThe SSH access must be allowed on the VTY lines using the transport input ssh command.
   • CThe SSH service must be enabled with the crypto key generate rsa command.
   • DThe SCP service must be enabled with the ip scp server enable command.

   Show answer

   Answer: D

   Explanation

   If the Linux server sends a file to the router, the server acts as a client and the router needs to be configured as an SCP server for this to work.

   Source: Adapted from community discussion — Pietjeplukgeluk

   Next question

4. Question 114 · 578 in bank

   Refer to the exhibit.

   

   An engineer configured SNMP communities on the Core_Sw1, but the SNMP server cannot obtain information from Core_Sw1. Which configuration resolves this issue?

   • Aaccess-list 20 permit 10.221.10.11
   • Bsnmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22
   • Csnmp-server group NETVIEW v2c priv read NETVIEW access 20
   • Daccess-list 20 permit 10.221.10.12

   Show answer

   Answer: A

   Explanation

   seems like a dumb way to answer this, but A looks right. ** Change ACL 20 (that is being used in the snmp-server group) to an identical ACL 11. instead of just referencing ACL 11 in the snmp-server group. Personally I would say bad practice by Cisco on this.

   Source: Adapted from community discussion — RickAO76

   Next question

5. Question 115 · 578 in bank

   Select 2

   Refer to the exhibit.

   

   Which two commands provide the administrator with the information needed to resolve the issue? (Choose two.)

   • Adebug snmpv3 engine-id
   • Bshow snmp user
   • Cdebug snmp packet
   • Ddebug snmp engine-id
   • Eshow snmpv3 user

   Show answer

   Answer: BC

   Explanation

   BC is correct Explanation There are 3 values in the SNMPv3 header that must match for the communication to take place: snmpEngineID, snmpEngineTime, snmpEngineBoots. The error received indicates a problem with the EngineID value: “authentication failure, Unknown Engine ID” To specify the Engine ID, we can use the command “show snmp user”. The following example specifies the username as abcd with Engine ID: 00000009020000000C025808: The “debug snmp packet” command displays all SNMP packets that are arriving and being replied to.

   Source: Adapted from community discussion — ZamanR

   References

   • cisco.com documentation

   Next question

6. Question 116 · 578 in bank

   Select 2

   Refer to the exhibit.

   

   The network administrator can see the DHCP discovery packet in R1, but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the Fa0/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two.)

   • Aservice dhcp-relay command on R1
   • Bip dhcp relay information enable command on R1
   • Cip dhcp option 82 command on R2
   • Dservice dhcp command on R1
   • Eip dhcp relay information trust-all command on R2

   Show answer

   Answer: DE

   Explanation

   Answer is D and E https://community.cisco.com/t5/switching/cisco-router-configured-as-a-dhcp-server-not-replying-to-quot/td-p/3206932 1.- The relay agent was configured by default with "no service dhcp". This caused the relayed packets to come from 0.0.0.0 rather than 10.2.1.1 2.- The DHCP server needs to be configured with "ip dhcp relay information trust-all" so it processes relayed packets with no Giaddr field

   Source: Adapted from community discussion — tyh391

   References

   • cisco.com documentation
   • Cisco documentation
   • cisco.com documentation

   Next question

7. Question 117 · 578 in bank

   A network administrator performed a Compact Flash Memory upgrade on a Cisco Catalyst 6509 Switch. Everything is functioning normally except SNMP, which was configured to monitor the bandwidth of key interfaces but the interface indexes are changed. Which global configuration resolves the issue?

   • Asnmp-server ifindex persist
   • Bsnmp-server ifindex permanent
   • Csnmp ifindex persist
   • Dsnmp ifindex permanent

   Show answer

   Answer: A

   Explanation

   A is correct answer here is thew sample of real world solarwind snmp server deployment scripts SOLARWINDS NETFLOW SCRIPTS ! from the device’s global configuration mode ! call the int up int g0/0 ! capture inbound traffic ip flow ingress ! capture outbound traffic ip flow egress exit ! definite ip flow export source int ip flow-export source g0/0 ! definite ip flow version ip flow-export version 5 ! definite ip flow export destination ip flow-export destination 10.10.10.150 2055 ! set the flow time out ip flow-cache timeout active 1 ip flow-cache timeout inactive 15 snmp-server ifindex persist

   Source: Adapted from community discussion — Nhan

   References

   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

8. Question 118 · 578 in bank

   

   Refer to the exhibit. R1 is configured with IP SLA to check the availability of the server behind R6 but it kept failing. Which configuration resolves the issue?

   • AR6(config)#ip sla responder udp-echo ip address 10.10.10.1 port 5000
   • BR6(config)#ip access-list extended DDOS R6(config-ext-nacl)#5 permit icmp host 10.10.10.1 host 10.66.66.66
   • CR6(config)#ip sla responder
   • DR6(config)#ip access-list extended DDOS R6(config-ext-nacl)#5 permit icmp host 10.66.66.66 host 10.10.10.1

   Show answer

   Answer: B

   Explanation

   Am I missing something here? R1 uses SLA to send ICMP to the server. The source is 10.10.10.1 and the destination is the 10.66.66.66. I think the ACL in B would perfectly allow it

   Source: Adapted from community discussion — Huntkey

   Next question

9. Question 119 · 578 in bank

   

   Refer to the exhibit. An engineer configured IP SLA on R1 to avoid the ISP link flapping problem, but it is not working as designed. IP SLA should wait 30 seconds before switching traffic to a secondary connection and then revert to the primary link after waiting 20 seconds, when the primary link is available and stabilized. Which configuration resolves the issue?

   • AR1(config)#track 700 ip sla 700 R1 (config-track)#delay down 30 up 20
   • BR1 (config)#ip sla 700 R1(config-ip-sla)#delay down 30 up 20
   • CR1 (config)#ip sla 700 R1(config-ip-sla)#delay down 20 up 30
   • DR1(config)#track 700 ip sla 700 R1(config-track)#delay down 20 up 30

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

10. Question 120 · 578 in bank

    

    Refer to the exhibit. An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 loses reachability with the router R3 Fa0/0 interface. The route has changed to flow through router R2. Which debug command is used to troubleshoot this issue?

    • Adebug ip flow
    • Bdebug ip sla error
    • Cdebug ip routing
    • Ddebug ip packet

    Show answer

    Answer: C

    Explanation

    The answer is 'debug ip sla error' (C) -- The route has already changed, so debug IP routing is useless. We need to find out why the IP sla is failing and thus redirecting the default route to R2, as such we need to look at the current IP sla error debugging.

    Source: Adapted from community discussion — jbr21

    References

    • Cisco documentation
    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 111. 578 questions available.