300-410 practice questions 161–170

1. Question 161 · 578 in bank

   

   Refer to the exhibit. An engineer must redistribute networks 192.168.10.0/24 and 192.168.20.0/24 into OSPF from EIGRP, where the metric must be added when traversing through multiple hops to start an external route of 20. The engineer notices that the external metric is fixed and does not add at each hop. Which configuration resolves the issue?

   • AR2(config)#access-list 10 permit 192.168.10.0 0.0.0.255 R2(config)#access-list 10 permit 192.168.20.0 0.0.0.255 ! R2(config)#route-map RD permit 10 R2(config-route-map)#match ip address 10 R2(config-route-map)#set metric 20 R2(config-route-map)#set metric-type type-2 ! R2(config)#router ospf 10 R2(confjg-router)#redistribute eigrp 10 subnets route-map RD
   • BR2(config)#access-list 10 permit 192.168.10.0 0.0.0.255 R2(config)#access-list 10 permit 192.168.20.0 0.0.0.255 ! R2(config)#route-map RD permit 10 R2(config-route-map)#match ip address 10 R2(config-route-map)#set metric 20 R2(config-route-map)#set metric-type type-1 ! R2(config)#router ospf 10 R2(config-router)#redistribute eigrp 10 subnets route-map RD
   • CR1(config)#access-list 10 permit 192.168.10.0 0.0.0.255 R1(config)#access-list 10 permit 192.168.20.0 0.0.0.255 ! R1(config)#route-map RD permit 10 R1(config-route-map)#match ip address 10 R1(config-route-map)#set metric 20 R1(config-route-map)#set metric-type type-1 ! R1(config)#router ospf 10 R1(config-router)#redistribute eigrp 10 subnets route-map RD
   • DR1(config)#access-list 10 permit 192.168.10.0 0.0.0.255 R1(config)#access-list 10 permit 192.168.20.0 0.0.0.255 ! R1(config)#route-map RD permit 10 R1(config-route-map)#match ip address 10 R1(config-route-map)#set metric 20 R1(config-route-map)#set metric-type type-2 ! R1(config)#router ospf 10 R1(config-router)#redistribute eigrp 10 subnets route-map RD

   Show answer

   Answer: B

   Explanation

   B is correct If routes are redistributed into OSPF as type 1, then the cost to reach the external networks could vary from router to router. If routes are redistributed into OSPF as type 2, then every router in the OSPF domain will see the same cost to reach the external networks. https://community.cisco.com/t5/routers-small-business/metric-type-in-ospf/td-p/2624188#:~:text=If%20routes%20are,router%20to%20router.

   Source: Adapted from community discussion — [Removed]

   References

   • cisco.com documentation

   Next question

2. Question 162 · 578 in bank

   An engineer notices that R1 does not hold enough log messages to identify the root cause during troubleshooting. Which command resolves this issue?

   • A#logging buffered 4096 critical
   • B#logging buffered 16000 critical
   • C(config)#logging buffered 16000 informational
   • D(config)#logging buffered 4096 informational

   Show answer

   Answer: C

   Explanation

   (config)# logging buffered The default buffer size for log messages in Cisco routers is typically 4096 bytes (4 kilobytes). This default buffer size allows the router to hold a moderate number of log messages before they are overwritten. By increasing the buffer size, it can hold a larger number of log messages, allowing for more extensive logging during troubleshooting.

   Source: Adapted from community discussion — pepgua

   Next question

3. Question 163 · 578 in bank

   Which feature minimizes DoS attacks on an IPv6 network?

   • AIPv6 Binding Security Table
   • BIPv6 Router Advertisement Guard
   • CIPv6 Prefix Guard
   • DIPv6 Destination Guard

   Show answer

   Answer: D

   Explanation

   From Cisco: IPv6 - Destination Guard The Destination Guard feature helps in minimizing denial-of-service (DoS) attacks. It performs address resolutions only for those addresses that are active on the link, and requires the FHS binding table to be populated with the help of the IPv6 snooping feature. The feature enables the filtering of IPv6 traffic based on the destination address, and blocks the NDP resolution for destination addresses that are not found in the binding table. By default, the policy drops traffic coming for an unknown destination.

   Source: Adapted from community discussion — pepgua

   References

   • Cisco documentation

   Next question

4. Question 164 · 578 in bank

   

   Refer to the exhibit. R1 and R2 cannot establish an EIGRP adjacency. Which action establishes EIGRP adjacency?

   • ARemove the current autonomous system number on one of the routers and change to a different value.
   • BAdd the passive-interface command to the R1 configuration so that it matches the R2 configuration.
   • CRemove the passive-interface command from the R2 configuration so that it matches the R1 configuration.
   • DAdd the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

   Show answer

   Answer: C

   Explanation

   Given answer is correct, labbed and as soon as you configure passive-interface it tears down the neighbor as below. EIGRP-IPv4 100: Neighbor 192.168.12.1 (Ethernet0/0) is down: interface passive

   Source: Adapted from community discussion — studybuddy10

   Next question

5. Question 165 · 578 in bank

   

   Refer to the exhibit. A network administrator must block ping from user 3 to the App Server only. An inbound standard access list is applied to R1 interface G0/0 to block ping. The network administrator was notified that user 3 cannot even ping user 9 anymore. Where must the access list be applied in the outgoing direction to resolve the issue?

   • AR2 interface G0/0
   • BSW1 interface G1/10
   • CR2 interface G1/0
   • DSW1 interface G2/21

   Show answer

   Answer: B

   Explanation

   It's a standard ACL. Standard ACL's should always be installed as close to the DESTINATION as possible. Read this: Standard ACLs should be located as close to the destination as possible. If a standard ACL were placed at the source of the traffic, the “permit” or “deny” would occur based on the given source address, regardless of the traffic destination. So the only right answer in this question is B: SW1 interface G1/10.

   Source: Adapted from community discussion — Patrick1234

   Next question

6. Question 166 · 578 in bank

   

   Refer to the exhibit. Clients on ALS2 receive IPv4 and IPv6 addresses, but clients on ALS1 receive only IPv4 addresses and not IPv6 addresses. Which action on DSW1 allows clients on ALS1 to receive IPv6 addresses?

   • AConfigure DSW1(dhcp-config)#default-router 2002:A04:A01::A04:A01
   • BConfigure DSW1(config-if)#ipv6 dhcp relay destination 2002:404:404::404:404 GigabitEthernet1/2
   • CConfigure DSW1(config)#ipv6 route 2002:404:404::404:404/128 FastEthernet1/0
   • DConfigure DSW1(config-if)#ipv6 helper address 2002:404:404::404:404

   Show answer

   Answer: B

   Next question

7. Question 167 · 578 in bank

   

   Refer to the exhibit. An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead of current best path. Which action resolves the issue?

   • AConfigure higher MED to select as the best path.
   • BConfigure AS_PATH prepend for the current best path.
   • CConfigure AS_PATH prepend for the desired best path.
   • DConfigure lower LOCAL_PREF to select as the best path.

   Show answer

   Answer: B

   Explanation

   Output shows #9 different possible paths. local routers has chosen #6 as best-path. it is asked to what is needed to make path #5 the best-path. - A - wrong (lower MED is preferred.) - B - correct (by adding extra AS_PATH makes the current best-path #6 less preferred compared to route #5) - C - wrong (this is the opposite of B) - D - wrong (higher LOCAL_PREF is preferred not lower!)

   Source: Adapted from community discussion — Zizu007

   Next question

8. Question 168 · 578 in bank

   What is a function of IPv6 Source Guard?

   • AIt inspects ND and DHCP packets to build an address binding table.
   • BIt works with address glean or ND to find existing addresses.
   • CIt notifies the ND protocol to inform hosts if the traffic is denied by it.
   • DIt denies traffic from known sources and allocated addresses.

   Show answer

   Answer: B

   Explanation

   IPv6 source guard does not inspect ND or DHCP packets; rather, it works in conjunction with IPv6 neighbor discovery (ND) inspection or IPv6 address glean, both of which detect existing addresses on the link and store them into the binding table.

   Source: Adapted from community discussion — JKStinn

   References

   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 169 · 578 in bank

   

   Refer to the exhibit. A network engineer must establish communication between three different customer sites with these requirements: * Site-A: must be restricted to access to any users at Site-B or Site-C. * Site-B and Site-C: must be able to communicate between sites and share routes using OSPF. PE interface configuration: interface FastEthernet0/0 ip vrf forwarding Site-A ! interface FastEthernet0/1 ip vrf forwarding SharedSites ! interface FastEthernet0/2 ip vrf forwarding SharedSites Which configuration meets the requirements?

   • APE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 10 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 1
   • BPE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 20 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 1
   • CPE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 10 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 0
   • DPE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 20 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 0

   Show answer

   Answer: D

   Explanation

   Because you need to configure diferent process ID, the area is independent because of the VRF, but in this case the process ID is not independent.

   Source: Adapted from community discussion — Almylle

   Next question

10. Question 170 · 578 in bank

    What is LDP label binding?

    • Adestination prefix with label
    • Btwo routers with label distribution session
    • Csource prefix with label
    • Dneighboring router with label

    Show answer

    Answer: A

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 161. 578 questions available.