300-410 practice questions 11–20

1. Question 11 · 578 in bank

   An engineer configured a company's multiple area OSPF Head Office router and Site A Cisco routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone: Head Office & Site A - ip cef ip vrf abc rd 101:101 ! interface FastEthernet0/0 ip vrf forwarding abc ip address 172.16.16.X 255.255.255.252 ! router ospf 1 vrf abc log-adjacency-changes network 172.16.16.0 0.0.0.255 area 1 After finishing both site router configurations, none of the LSA 3, 4, 5, and 7 are installed at Site A router. Which configuration resolves this issue?

   • Aconfigure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc
   • Bconfigure capability vrf-lite on both PE routers connected to Head Office and Site A routers under router ospf 1 vrf abc
   • Cconfigure capability vrf-lite on Head Office and its connected PE router under router ospf 1 abc
   • Dconfigure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc

   Show answer

   Answer: D

   Explanation

   Notice that three of the answers involve configuring the PE router also. Since the engineer configured the company's router he presumably works for the company and not the ISP so the engineer would not have access to the PE router(s)

   Source: Adapted from community discussion — myrmike

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

2. Question 12 · 578 in bank

   

   Refer to the exhibit. The Los Angeles and New York routers are receiving routers from Chicago but not from each other.

   

   Which configuration fixes the issue?

   • Ainterface Tunnel1 no ip split-horizon eigrp 111
   • Binterface Tunnel1 ip next-hop-self eigrp 111
   • Cinterface Tunnel1 tunnel mode ipsec ipv4
   • Dinterface Tunnel1 tunnel protection ipsec profile IPSec-PROFILE

   Show answer

   Answer: A

   Explanation

   The given answer is correct - A Its important here to work out that Chicago is the Hub router in a DMVWN network. If Chicago was a spoke it would need a mapping to the hub - and that is not in the output - ie "ip nhrp map" command with relevant tunnel and WAN ip addresses ip addresses for the hub. The hub over its tunnel1 interface learns the routes from LA - it wants to advertise the LA routes to New York - but those advertisements would be back out Tunnel1 - split horizon will not allow this. Split horizon does not allow advertising routes back out the interface a router received them on. So the fix is to disable split horizon - a valid fix in certain scenarios. Note this is a phase 2 DMVPN solution In Phase 2, the Hub is still the “hub” for the control plane. All routes are learned through the hub. Spokes cannot exchange routes with each other directly. A phase 3 DMVPN solution does not have this split horizon issue.

   Source: Adapted from community discussion — Surfside92

   Next question

3. Question 13 · 578 in bank

   Refer to the exhibit. R2 is a route reflector, and R1 and R3 are route reflector clients. The route reflector learns the route to 172.16.25.0/24 from R1, but it does not advertise to R3. What is the reason the route is not advertised?

   

   • AR2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.
   • BRoute reflector setup requires full IBGP mesh between the routers.
   • CIn route reflector setup, only classful prefixes are advertised to other clients.
   • DIn route reflector setups, prefixes are not advertised from one client to another.

   Show answer

   Answer: A

   Explanation

   Answer A is correct. You can see that on R2 route is missing '>' what means it's only in BGP table and not in RIB --> it will not be advertised

   Source: Adapted from community discussion — vdsdrs

   Next question

4. Question 14 · 578 in bank

   DRAG DROP - Drag and drop the MPLS VPN device types from the left onto the definitions on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

5. Question 15 · 578 in bank

   What does the PE router convert the IPv4 prefix to within an MPLS VPN?

   • AeBGP path association between the PE and CE sessions
   • Bprefix that combines the ASN, PE router-id, and IP prefix
   • C48-bit route combining the IP and PE router-id
   • DVPN-IPv4 prefix combined with the 64-bit route distinguisher

   Show answer

   Answer: D

   Explanation

   Explanation The IP prefix is a member of the IPv4 address family. After the PE device learns the IP prefix, the PE converts it into a VPN-IPv4 prefix by combining it with an 8-byte route distinguisher (RD). The generated prefix is a member of the VPN-IPv4 address family. It uniquely identifies the customer address, even if the customer site is using globally nonunique (unregistered private) IP addresses.

   Source: Adapted from community discussion — Edwinmolinab

   Next question

6. Question 16 · 578 in bank

   

   Refer to the exhibit. Which interface configuration must be configured on the HUB router to enable MVPN with mGRE mode?

   • Ainterface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.1.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 172.17.0.1 ip nhrp map 10.0.0.11 172.17.0.2 ip nhrp map 10.0.0.12 172.17.0.3 tunnel mode gre
   • Binterface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel mode gre multipoint
   • Cinterface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 1 tunnel source 172.17.0.1 tunnel mode gre multipoint
   • Dinterface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel destination 172.17.0.2 tunnel mode gre multipoint

   Show answer

   Answer: C

   Explanation

   Tunnel source IP can NOT be the IP address of the tunnel interface. The tunnel source IP should be, in this case, the IP address of the WAN interface.

   Source: Adapted from community discussion — DaanB

   Next question

7. Question 17 · 578 in bank

   How are MPLS Layer 3 VPN services deployed?

   • AThe RD and RT values must match under the VRF.
   • BThe import and export RT values under a VRF must always be the same.
   • CThe label switch path must be available between the local and remote PE routers.
   • DThe RD and RT values under a VRF must match on the remote PE router.

   Show answer

   Answer: C

   Explanation

   B is referring to the same router, not to two different routers with the same vrf. B is similar to A. A is referring to the RD and RT values under the same router.

   Source: Adapted from community discussion — bk989

   References

   • Cisco documentation

   Next question

8. Question 18 · 578 in bank

   Which IGPs are supported by the MPLS LDP autoconfiguration feature?

   • AIS-IS and RIPv2
   • BRIPv2 and OSPF
   • COSPF and EIGRP
   • DOSPF and IS-IS

   Show answer

   Answer: D

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_ldp/configuration/15-s/mp-ldp-15-s-book/mp-ldp-autoconfig.pdf

   Source: Adapted from community discussion — SnoopDD

   Next question

9. Question 19 · 578 in bank

   Refer to the exhibit.

   

   An engineer must establish multipoint GRE tunnels between hub router R6 and branch routers R1, R2, and R3. Which configuration accomplishes this task on R1?

   • Ainterface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e0/0 tunnel mode gre multipoint ip nhrp nhs 192.168.1.6 ip nhrp map 192.168.1.6 192.1.10.1 ip nhrp map 192.168.1.2 192.1.20.2 ip nhrp map 192.168.1.3 192.1.30.3
   • Binterface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e0/1 tunnel mode gre multipoint ip nhrp nhs 192.168.1.6 ip nhrp map 192. 168.1.6 192.1.10.6
   • Cinterface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e0/0 tunnel mode gre multipoint ip nhrp network-id 1 ip nhrp nhs 192.168.1.6 ip nhrp map 192.168.1.6 192.1.10.6
   • Dinterface Tunnel 1 ip address 192.168.1.1 255. 255.255.0 tunnel source e0/1 tunnel mode gre multipoint ip nhrp network-id 1 ip nhrp nhs 192.168.1.6 ip nhrp map 192.168.1.6 192.1.10.1 ip nhrp map 192.168.1.2 192.1.20.2 ip nhrp map 192.168.1.3 192.1.30.3

   Show answer

   Answer: C

   Explanation

   B is not wrong because of the missing network ID command, but because it uses e0/1 as tunnel source on R1 and it should be e0/0

   Source: Adapted from community discussion — VVdouble

   Next question

10. Question 20 · 578 in bank

    How is VPN routing information distributed in an MPLS network?

    • AThe top level of the customer data packet directs it to the correct CE device.
    • BIt is established using VPN IPsec peers.
    • CIt is controlled through the use of RD.
    • DIt is controlled using of VPN target communities.

    Show answer

    Answer: D

    Explanation

    Reference: https://www.ccexpert.us/mpls-design/chapter-5-packetbased-mpls-vpns.html

    Source: Adapted from community discussion — Gesti

    References

    • Cisco documentation
    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 11. 578 questions available.