300-410 practice questions 241–250

1. Question 241 · 578 in bank

   An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network. Which BGP attribute must the engineer configure to avoid using the high-delay ISP link if the second ISP link is up?

   • AAS-PATH
   • BWEIGHT
   • CMED
   • DLOCAL_PREF

   Show answer

   Answer: D

   Explanation

   The engineer should configure the LOCAL_PREF attribute to avoid using the high-delay ISP link if the second ISP link is up. LOCAL_PREF allows you to prioritize routes within the local autonomous system, ensuring that the lower-delay link is preferred for outbound traffic. Correct answer is option : D

   Source: Adapted from community discussion — [Removed]

   Next question

2. Question 242 · 578 in bank

   A Cisco router has just been configured for NTP and is synchronized with the configured NTP server. However, log messages still show an incorrect time. What else should be done to match the log messages time stamps with the NTP based time?

   • AWait a bit longer for the synchronized time to get applied to new log messages.
   • BConfigure the “service timestamps log datetime localtime” command in global mode.
   • CConfigure the “service timestamps log datetime synchronize” command globally
   • DConfigure the “service timestamps log ntp” command in global config mode.

   Show answer

   Answer: B

   References

   • cisco.com documentation

   Next question

3. Question 243 · 578 in bank

   There is an issue between two nodes within your network, and you are using Cisco DNA Center Path Trace to help troubleshoot the problem. Which of the following statements are true regarding the Path Trace tool?

   • AOverlapping IP addresses are supported.
   • BPath trace between a fabric client and a non-fabric client is supported
   • CPath trace between a wired client and a wireless client is supported
   • DOnly TCP traffic is supported.

   Show answer

   Answer: C

   Explanation

   C is correct Overlapping IP addresses not supported. Path trace between a fabric client and a non-fabric client is not supported. TCP and UDP are supported.

   Source: Adapted from community discussion — mitosenoriko

   References

   • Cisco documentation

   Next question

4. Question 244 · 578 in bank

   Select 2

   Which of the following are valid DHCP options that DHCP servers can be configured to use with DHCP clients when offering a lease? (Choose two.)

   • ADHCP Option 1: subnet mask
   • BDHCP Option 3: Lease Duration
   • CDHCP Option 4: Client host name
   • DDHCP Option 6: DNS servers

   Show answer

   Answer: AD

   Explanation

   Subnet Mask 1 Time Offset 2 Router 3 Time Server 4 Name Server Option 5 Domain Name Server 6 https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/network_registrar/9-1/dhcp/guide/DHCP_Guide/DHCP_Guide_appendix_01101.pdf Page 2 and 3

   Source: Adapted from community discussion — R9_9_9

   References

   • Cisco documentation

   Next question

5. Question 245 · 578 in bank

   Which feature of the Cisco DNA Center allows you to run diagnostic CLI commands to the devices that are managed by DNA Center for troubleshooting purposes?

   • ACommand Runner
   • BDNA Spaces
   • CDNA Advantage
   • DIntelligent Capture

   Show answer

   Answer: A

   References

   • cisco.com documentation

   Next question

6. Question 246 · 578 in bank

   You want to change the Administrative Distance of external EIGRP routes from the default of 170 to 130 instead on router R1 while leaving the default AD value for internal EIGRP routes. Which set of command will accomplish this?

   • AR1(config)#router eigrp - R1(config-router)#distance 170 -
   • BR1(config)#router eigrp 1 - R1(config-router)#distance eigrp 90 130
   • CR1(config)#router eigrp 1 - R1(config-router)#distance eigrp 130 90
   • DR1(config)#router eigrp 1 - R1(config-router)#distance 90 130

   Show answer

   Answer: B

   Explanation

   NO! R1(config)#router eigrp 1 R1(config-router)#distance 90 130 ^ % Invalid input detected at '^' marker. R1(config-router)# =============================== R1(config)#router eigrp 1 R1(config-router)#distance ? Set route administrative distance eigrp Set distance for internal and external routes R1(config-router)#distance eigrp ? Distance for internal routes R1(config-router)#distance eigrp 90 ? Distance for external routes R1(config-router)#distance eigrp 90 130 ? ================================== Answer B is correct!

   Source: Adapted from community discussion — JJH3003

   Next question

7. Question 247 · 578 in bank

   Select 2

   Which of the following are valid TFTP error codes? (Choose two.)

   • AError Code 1 – File not found
   • BError Code 2 – Unknown error
   • CError code 3 – Invalid user
   • DError code 6 – File already exists
   • EError code 8 – Undefined error

   Show answer

   Answer: AD

   Explanation

   What does this have to do with you being a Network admin? Can't you justo quickly Google it instead of memorizing it. WTF Cisco

   Source: Adapted from community discussion — Jey117

   References

   • Cisco documentation

   Next question

8. Question 248 · 578 in bank

   Select 2

   What are the two prerequisites of setting up DMVPN tunnel? (Choose two.)

   • ABefore a multipoint GRE (mGRE) and IPsec tunnel can be established, define an Internet Key Exchange (IKE) policy by using the crypto isakmp policy command.
   • BThe Public IP’s of the routers should be able to ping each other.
   • CTo enable 2547oDMPVN - Traffic Segmentation Within DMVPN configure multiprotocol label switching (MPLS) by using the mpls ip command
   • DIt is mandatory to use wildcard preshared keys to build the DMVPN tunnel
   • EDMVPN can work on all OEM devices that support IKE.

   Show answer

   Answer: AC

   Explanation

   Given answer is correct. "Prerequisites for Dynamic Multipoint VPN (DMVPN) Before a multipoint GRE (mGRE) and IPsec tunnel can be established, you must define an Internet Key Exchange (IKE) policy by using the crypto isakmp policy command. For the NAT-Transparency Aware enhancement to work, you must use IPsec transport mode on the transform set. Also, even though NAT-Transparency can support two peers (IKE and IPsec) being translated to the same IP address (using the User Datagram Protocol [UDP] ports to differentiate them [that is, Peer Address Translation (PAT)]), this functionality is not supported for DMVPN. All DMVPN spokes must have a unique IP address after they have been NAT translated. They can have the same IP address before they are NAT translated. To enable 2547oDMPVN--Traffic Segmentation Within DMVPN you must configure multiprotocol label switching (MPLS) by using the mpls ip command." https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/15-mt/sec-conn-dmvpn-15-mt-book/sec-conn-dmvpn-dmvpn.html#GUID-D8F6839F-D735-4C8E-A199-602CDD8F7DD0

   Source: Adapted from community discussion — DUBC89x

   References

   • Cisco documentation

   Next question

9. Question 249 · 578 in bank

   

   Refer to the exhibit. An administrator is setting up above shown routers to enable MVPN with mGRE mode. What would be the recommended interface configuration that must be done by the engineer to make it to work?

   • Ainterface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel mode IPSec multipoint
   • Binterface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel mode gre multipoint
   • Cinterface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 1 tunnel source 172.17.0.1 tunnel mode IPsec multipoint
   • Dinterface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel destination 172.17.0.2 tunnel mode IPsec multipoint

   Show answer

   Answer: C

   Explanation

   "tunnel source" = physical interface tunnel mode gre multipoint Do one of the following: tunnel protection ipsec profile name tunnel protection psk key https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-16-11/sec-conn-dmvpn-xe-16-11-book/sec-conn-dmvpn-dmvpn.html

   Source: Adapted from community discussion — HungarianDish_111

   References

   • Cisco documentation

   Next question

10. Question 250 · 578 in bank

    Select 3

    Select three benefits of setting up a MPLS Network from the below options. (Choose three.)

    • AConnection less Service
    • BSecurity as good as connection-oriented VPNs
    • CProvides IPS level intelligence to filter packets.
    • DIntegrated QoS support
    • EAll variations of Static routes are supported

    Show answer

    Answer: ABD

    Explanation

    Just my 2 cents: I personally think "Security as good as connection-oriented VPNs" can be considered an opinion, i personally do not think MPLS is the same as actually encrypting your traffic. Anyway, ABD would be correct, does not mean i personally agree with B....

    Source: Adapted from community discussion — Pietjeplukgeluk

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 241. 578 questions available.