Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)578 questions across 58 pages are complete and free, with no account or card.
578 questions in this bank
Free access · progress saved on this device
Refer to the exhibit. TCP traffic should be reaching host 10.10.10.10/24 via R2. Which action resolves the issue?
Answer: A
Adding just a Permit 20 on its own will not send traffic via R2. You could add a Permit 20 but it would also need a new ACL and the next hop setting. So for this I am chosing A is it seems more to the point.
Source: Adapted from community discussion — Commando1664
Refer to the exhibit. After redistribution is enabled between the routing protocols; PC2, PC3, and PC4 cannot reach PC1. Which action can the engineer take to solve the issue so that all the PCs are reachable?
Answer: A
This Config works: Answer A ------------------------------------ R2#sh run | s rip redistribute rip metric 1 1 1 1 1 router rip version 2 redistribute eigrp 100 metric 1 network 10.0.0.0 network 12.0.0.0 distance 100 no auto-summary ----------------------------------- R3#sh run | s router router eigrp 100 network 34.34.34.0 0.0.0.255 redistribute ospf 100 metric 1 1 1 1 1 router ospf 100 redistribute eigrp 100 subnets network 10.3.3.0 0.0.0.255 area 0 network 23.23.23.0 0.0.0.255 area 0 --------------------------------------- Answer B is wrong: the Correct is to filter 10.1.1.10 when redistribute from EIGRP to OSPF: Configs are --------------------------------------- ip prefix-list DNA seq 5 deny 10.1.1.0/24 ip prefix-list DNA seq 10 permit 0.0.0.0/0 le 32 route-map DDD permit 10 match ip address prefix-list DNA ! router eigrp 100 network 34.34.34.0 0.0.0.255 redistribute ospf 100 metric 1 1 1 1 1 ! router ospf 100 redistribute eigrp 100 subnets route-map DDD network 10.3.3.0 0.0.0.255 area 0 network 23.23.23.0 0.0.0.255 area 0 !
Source: Adapted from community discussion — HETKAR
A newly installed spoke router is configured for DMVPN with the ip mtu 1400 command. Which configuration allows the spoke to use fragmentation with the maximum negotiated TCP MTU over GRE?
Answer: B
"When IPsec is being used, it is customary to set the MTU size on the tunnel interfaces to 1,400 bytes and to set the TCP-MSS-adjust to 1,360 bytes. " https://www.networkworld.com/article/2224654/mtu-size-issues.html For me "# crypto ipsec fragmentation before-encryption" would make more sense, but that option is not give, so I vote for "B". " If the routers are performing fragmentation on behalf of the source node, it may be desirable to have the fragmentation performed prior to encryption, so the destination tunnel router doesn't have to reassemble the fragments and then perform the decryption." https://manualzz.com/doc/33447188/configuring-ipsec-vpn-fragmentation-and-mtu
Source: Adapted from community discussion — HungarianDish_111
Refer to the exhibit. During ISP router maintenance, the network produced many alerts because of the flapping interface. Which configuration on R1 resolves the issue?
Answer: D
Option correct is D: Because, D is necesary while execute maintanance windows. The option A is wrong, because that command is for uRPF: muRPF is a security feature that helps limit or even eliminate spoofed IP packets on a network. This is accomplished by examining the source IP address of an ingress packet and determining whether it is valid. If it is valid, the packet will be forwarded. If it is not valid, the packet Chapter 22: Infrastructure Security 853 will be discarded. Note that CEF (Cisco Express Forwarding) must be enabled on the IOS device for uRPF to work
Source: Adapted from community discussion — inteldarvid
Refer to the exhibit. Reachability between servers in a network deployed with DHCPv6 is unstable. Which command must be removed from the configuration to make DHCPv6 function?
Answer: A
In IPv6, hosts locate a router through Router Advertisement (RA) messages sent from routers instead of by DHCP; IPv6-enabled routers that support dynamic address assignment are expected to announce themselves on the network to all clients. As such, DHCPv6 does not include any gateway information
Source: Adapted from community discussion — Huntkey
A customer requested a GRE tunnel through the provider network between two customer sites using loopback to hide internal networks. Which configuration on R2 establishes the tunnel with R1?
Answer: B
I think we are missing some info in the question to correctly answer this one. A. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1400 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 192.168.20.1 R2(config-if)#tunnel destination 192.168.10.1 B. R2(config)#interface Tunnel1 R2(config-if#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1400 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 10.10.2.2 R2(config-if)#tunnel destination 10.10.1.1 C. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1500 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 10.10.2.2 R2(config-if)#tunnel destination 10.10.1.1 D. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1500 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 192.168.20.1 R2(config-if)#tunnel destination 10.10.1.1
Source: Adapted from community discussion — ChillingAgain
Refer to the exhibit. R1 and R2 are configured for EIGRP peering using authentication and the neighbors failed to come up. Which action resolves the issue?
Answer: A
For me it's "A". The lowest key ID needs to match, because EIGRP checks against the FIRST valid key. Good sources from you guys: https://community.cisco.com/t5/routing/eigrp-authentication-problem-need-your-help/td-p/1714446 https://community.cisco.com/t5/switching/key-chain-validation-for-eigrp/td-p/1988487
Source: Adapted from community discussion — HungarianDish_111
Refer to the exhibit. Mutual redistribution is enabled between RIP and EIGRP on R2 and R5. Which configuration resolves the routing loop for the 192.168.1.0/24 network?
Answer: D
This question with EIGRP does not make any sense. This scenario does not create a looping. If you replace EIGRP by IGRP the looping is true, just like the exemplo in this link: https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/8606-redist.html With IGRP instead EIGRP, D is right.
Source: Adapted from community discussion — Malasxd
Which method provides failure detection in BFD?
Answer: B
"BFD Operation BFD provides a low-overhead, short-duration method of detecting failures in the forwarding path between two adjacent routers, including the interfaces, data links, and forwarding planes. BFD is a detection protocol that you enable at the interface and routing protocol levels." https://www.cisco.com/en/US/docs/ios/12_4t/ip_route/configuration/guide/t_bfd.html
Source: Adapted from community discussion — HungarianDish_111
Refer to the exhibit. R4 is experiencing packet drop when trying to reach 172.16.2.7 behind R2. Which action resolves the issue?
Answer: A
Labbed it right now. To have this rouing table R1 and R3 have auto-summary enabled. If you disable the auto-summary on R2 nothing change. and from R2 you cannot ping the 172 interface of R3. If you enable a floating /24 route (with or without 254, it doesn't matter) you can successfully ping the 172 interface on R3
Source: Adapted from community discussion — Dv123456
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-410 practice, question 141. 578 questions available.
Version 1.0.0. How we source questions