300-410 practice questions 171–180

1. Question 171 · 578 in bank

   Select 2

   

   Refer to the exhibit. An administrator configures a router to stop using a particular default route if the DNS server 8.8.8.8 is not reachable through that route. However, this configuration did not work as desired and the default route still works even if the DNS server 8.8.8.8 is unreachable. Which two configuration changes resolve the issue? (Choose two.)

   • AUse a separate track object to reference the existing IP SLA 1 probe for every static route.
   • BUse a separate IP SLA probe and track object for every static route.
   • CAssociate every IP SLA probe with the proper WAN address of the router.
   • DReference the proper exit interfaces along with the next hops in both static default routes.
   • EConfigure two static routes for the 8.8.8.8/32 destination to match the IP SLA probe for each ISP.

   Show answer

   Answer: BC

   Explanation

   Correct: B - Both static routes must have a separate Track object and IP SLA probe. C - Each SLA probe must originate from a different ISP, therefore a different IP address. Wrong: A - Only a separate Track object won't help with anything, we need also a separate IP SLA probe. D - This is redundant, the router knows which interface to use for both next hops (based on ARP and MAC address table). E - This is just messy and not needed, we just need to set a different source for each probe (answer C).

   Source: Adapted from community discussion — Lilienen

   References

   • cisco.com documentation

   Next question

2. Question 172 · 578 in bank

   

   Refer to the exhibit. The network administrator configured the Chicago router to mutually redistribute the LA and NewYork routes with OSPF routes to be summarized as a single route in EIGRP using the longest summary mask: router eigrp 100 redistribute ospf 1 metric 10 10 10 10 10 router ospf 1 redistribute eigrp 100 subnets ! interface E 0/0 ip summary-address eigrp 100 172.16.0.0 255.255.0.0 After the configuration, the New York router receives all the specific LA routes but the summary route. Which set of configurations resolves the issue on the Chicago router?

   • Arouter eigrp 100 summary-address 172.16.8.0 255.255.252.0
   • Binterface E 0/1 ip summary-address eigrp 100 172.16.8.0 255.255.252.0
   • Crouter eigrp 100 summary-address 172.16.0.0 255.255.0.0
   • Dinterface E 0/1 ip summary-address eigrp 100 172.16.0.0 255.255.0.0

   Show answer

   Answer: B

   Explanation

   B correct: The advertisement of summary routes occurs on an interface-by-interface basis. For classic EIGRP configuration mode, you use the interface parameter command ip summary-address eigrp as-number network subnet-mask [leak-map route-map-name] to place an EIGRP summary aggregate on an interface.

   Source: Adapted from community discussion — inteldarvid

   Next question

3. Question 173 · 578 in bank

   

   Refer to the exhibit. An engineer must configure PBR on R1 to reach to 10.2.2.0/24 via R3 AS64513 as the primary path and a backup route through default route via R2 AS64513. All BGP routes are in the routing table of R1, but a static default route overrides BGP routes. Which PBR configuration achieves the objective?

   • Aaccess-list 100 permit ip 10.1.1.0 0.0.0.255 10.2.2.0 0.0.0.255 ! route-map PBR permit 10 match ip address 100 set ip next-hop recursive 10.3.3.1
   • Baccess-list 100 permit ip 10.1.1.0 255.255.255.0 10.2.2.0 255.255.255.0 ! route-map PBR permit 10 match ip address 100 set ip next-hop recursive 10.3.3.1
   • Caccess-list 100 permit ip 10.1.1.0 0.0.0.255 10.2.2.0 0.0.0.255 ! route-map PBR permit 10 match ip address 100 set ip next-hop 10.3.3.1
   • Daccess-list 100 permit ip 10.1.1.0 255.255.255.0 10.2.2.0 255.255.255.0 ! route-map PBR permit 10 match ip address 100 set ip next-hop 10.3.3.1

   Show answer

   Answer: A

   Explanation

   Answer is correct (A) The PBR Recursive Next Hop feature enhances route maps to enable configuration of a recursive next-hop IP address that is used by policy-based routing (PBR). The recursive next-hop IP address is installed in the routing table and can be a subnet that is not directly connected. If the recursive next-hop IP address is not available, packets are routed using a default route.

   Source: Adapted from community discussion — shoo83

   References

   • Cisco documentation

   Next question

4. Question 174 · 578 in bank

   What is the function of BFD?

   • AIt creates high CPU utilization on hardware deployments
   • BIt provides uniform failure detection on the same media type
   • CIt provides uniform failure detection regardless of media type
   • DIt negotiates to the highest version if the neighbor version differs

   Show answer

   Answer: C

   Explanation

   The correct answer is: C. It provides uniform failure detection regardless of media type. BFD (Bidirectional Forwarding Detection) is a protocol used for rapid failure detection in computer networks. One of its primary functions is to provide uniform and consistent failure detection regardless of the media type or technology being used in the network. BFD can be used with various network media types, including Ethernet, SONET/SDH, MPLS, and more. It ensures that failure detection is fast and consistent, making it a valuable tool for network reliability and fast convergence. Therefore, option C is the correct description of the function of BFD.

   Source: Adapted from community discussion — chris110

   References

   • juniper.net documentation

   Next question

5. Question 175 · 578 in bank

   An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

   • APackets are not forwarded to the specific next hop.
   • BPackets are forwarded based on the routing table.
   • CPackets are forwarded based on a static route.
   • DPackets are forwarded to the specific next hop.

   Show answer

   Answer: D

   Explanation

   D The set ip default next-hop command verifies the existence of the destination IP address in the routing table, and… if the destination IP address exists, the command does not policy route the packet, but forwards the packet based on the routing table. if the destination IP address does not exist, the command policy routes the packet by sending it to the specified next hop. The set ip next-hop command verifies the existence of the next hop specified, and… if the next hop exists in the routing table, then the command policy routes the packet to the next hop. if the next hop does not exist in the routing table, the command uses the normal routing table to forward the packet.

   Source: Adapted from community discussion — Alex147

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 176 · 578 in bank

   

   Refer to the exhibit. When an FTP client attempts to use passive FTP to connect to the FTP server, the file transfers fail. Which action resolves the issue?

   • AModify traffic filter FTP-SERVER in to the outbound direction.
   • BConfigure active FTP traffic.
   • CConfigure to permit TCP ports higher than 1023.
   • DModify FTP-SERVER access list to remove established at the end.

   Show answer

   Answer: C

   Explanation

   "When active FTP is used, the clients connect to port 20 and 21 of the FTP server. With passive FTP, the data connection will be made between 2 ports > 1023."

   Source: Adapted from community discussion — Horsefeathers

   References

   • cisco.com documentation

   Next question

7. Question 177 · 578 in bank

   

   Refer to the exhibit. An administrator configured a Cisco router for TACACS authentication, but the router is using the local enable password instead. Which action resolves the issue?

   • AConfigure the aaa authentication login default group admin local if-authenticated command instead.
   • BConfigure the aaa authentication login admin group tacacs+ local enable none command instead.
   • CConfigure the aaa authentication login admin group tacacs+ local if-authenticated command instead.
   • DConfigure the aaa authentication login admin group admin local enable command instead.

   Show answer

   Answer: D

   Explanation

   "A" is not reflecting the solution from here: https://community.cisco.com/t5/network-access-control/problem-setting-7606-router-for-tacacs-authentication/td-p/2316903 "A" adds " if-authenticated", which is used with authorization method lists, and not for authentication. "D" defines method list "admin" and uses it for "line vty" configuration, which is correct. Some examples: https://www.netprojnetworks.com/cisco-9800-tacacs-config-cli-and-verify-notes/

   Source: Adapted from community discussion — HungarianDish_111

   References

   • cisco.com documentation
   • cisco.com documentation

   Next question

8. Question 178 · 578 in bank

   An administrator attempts to download the .pack NBAR2 file using TFTP from the CPE router to another device over the Gi0/0 interface. The CPE is configured as below: hostname CPE ! ip access-list extended WAN <`¦> remark => All UDP rules below for WAN ID: S421T18E58F90 permit udp any eq domain any permit udp any any eq tftp deny udp any any ! interface GigabitEthernet0/0 <`¦> ip access-group WAN in <`¦> ! tftp-server flash:pp-adv-csr1000v-1612.1a-37-53.0.0.pack The transfer fails. Which action resolves this issue?

   • AMake the permit udp any eq tftp any entry the last entry in the WAN ACL
   • BShorten the file name to the 8+3 naming convention
   • CChange the WAN ACL to permit the entire UDP destination port range
   • DChange the WAN ACL to permit the UDP port 69 to allow TFTP

   Show answer

   Answer: C

   Explanation

   This is actually to my surprise... The TFTP apparently is using the random port for the transfer: TFTP uses UDP as its transport protocol. A transfer request is always initiated targeting port 69, but the data transfer ports are chosen independently by the sender and receiver during the transfer initialization. The ports are chosen at random according to the parameters of the networking stack, typically from the range of ephemeral ports.[4] https://en.wikipedia.org/wiki/Trivial_File_Transfer_Protocol

   Source: Adapted from community discussion — Huntkey

   Next question

9. Question 179 · 578 in bank

   A network administrator must optimize the segment size of the TCP packet on the DMVPN IPsec protected tunnel interface, which carries application traffic from the head office to a designated branch. The TCP segment size must not overwhelm the MTU of the outbound link. Which configuration must be applied to the router to improve the application performance?

   • Ainterface tunnel30 ip mtu 1400 ip tcp payload-size 1360 ! crypto ipsec fragmentation before-encryption
   • Binterface tunnel30 ip mtu 1400 ip tcp adjust-mss 1360 ! crypto ipsec fragmentation after-encryption
   • Cinterface tunnel30 ip mtu 1400 ip tcp max-segment 1360 ! crypto ipsec fragmentation before-encryption
   • Dinterface tunnel30 ip mtu 1400 ip tcp packet-size 1360 ! crypto ipsec fragmentation after-encryption

   Show answer

   Answer: B

   Next question

10. Question 180 · 578 in bank

    In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router. Which command is required on both spoke routers to communicate directly to one another?

    • Aip nhrp nhs multicast
    • Bip nhrp shortcut
    • Cip nhrp map dynamic
    • Dip nhrp redirect

    Show answer

    Answer: B

    Explanation

    As well as I see, it is about DMVPN Phase 3 Spoke-to-Spoke Implementation. Short explanation: https://carpe-dmvpn.com/2019/02/10/shortcut-dmvpn-demystified/ Long explanation: https://learningnetwork.cisco.com/s/question/0D53i00000Kt0xkCAB/ip-nhrp-map-multicast-dynamic https://www.linkedin.com/pulse/dmvpn-i-wish-had-learned-way-from-beginning-leandro-brito Examples: https://networkdirection.net/articles/routingandswitching/dmvpn/dmvpn-configuration/ https://www.pearsonitcertification.com/articles/article.aspx?p=3129283&seqNum=8

    Source: Adapted from community discussion — HungarianDish_111

    References

    • cisco.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 171. 578 questions available.