Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)578 questions across 58 pages are complete and free, with no account or card.
578 questions in this bank
Free access · progress saved on this device
Refer to the Exhibit. The access-lists are configured on the network device. There is a server behind the network device. User are trying to access the server securely however they are not able to access it. What changes would you recommend to the above configuration?
Answer: C
Refer to the exhibit. A network administrator redistributed the default static route into OSPF toward all internal routers to reach to Internet. Which set of commands restores reachability to the Internet by internal routers?
Answer: D
Why do we need to do in ospf default-information originate always ? As you probably already know, default-information originate tells the router to inject any default route that has been configured on the router into the OSPF. The OSPF router does not, by default, generate a default route into the OSPF domain. In OSPF, the “default-information originate” command will not advertise to any other routers without a default route in the routing table. When added the “always” keyword , it tells the router to advertise a default route to other routers even if you don't have a default route in the routing table
Source: Adapted from community discussion — Dimma
Which of the following is true regarding IPsec Pre-fragmentation (Look-Ahead Fragmentation)? (Choose two.)
Answer: AC
Correct! https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dplane/configuration/xe-16-10/sec-ipsec-data-plane-xe-16-10-book/sec-pre-frag-vpns.html Restrictions for Pre-Fragmentation for IPsec VPNs Take the following information into consideration before this feature is configured: Pre-fragmentation for IPsec VPNs operates in IPsec tunnel mode and IPsec tunnel mode with GRE, but not with IPsec transport mode. Pre-fragmentation for IPsec VPNs configured on the decrypting router in a unidirectional traffic scenario does not improve the performance or change the behavior of either of the peers. Pre-fragmentation for IPsec VPNs occurs before the transform is applied if compression is turned on for outgoing packets. Pre-fragmentation for IPsec VPNs functionality depends on the egress interface crypto ipsec df-bit configuration and the incoming packet “do not fragment” (DF) bit state. See the table below.
Source: Adapted from community discussion — Zizu007
Which of the following correctly describes the concept of split horizon with IP routing? (Choose two.)
Answer: AC
DRAG DROP - Arrange the below as per the recommended steps:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
correct 1. Download the Cisco IOS image to the TFTP Server 2. Copy the IOS image in the file system 3. Verify the configuration register & boot variable 4. Save the configuration & Reload the router
Source: Adapted from community discussion — [Removed]
A network administrator is reloading a router and during the bootup, he is getting the error message “%Error opening tftp://255.255.255.255/network-confg (Socket error)”. What command need to be applied on Cisco Router to fix this issue.
Answer: A
A is correct no service config: This command disables the automatic loading of configuration files from a network server (via TFTP) during the boot process. Applying this command will stop the router from trying to download the network-confg file from the TFTP server.
Source: Adapted from community discussion — [Removed]
DRAG DROP - The steps for configuring BGP on Cisco IOS Router:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
IOS The steps for configuring BGP on an IOS router are as follows: Step 1. Create the BGP Routing Process. Initialize the BGP process with the global command router bgp as-number. Step 2. Identify the BGP Neighbor’s IP address and Autonomous System Number. Identify the BGP neighbor’s IP address and autonomous system number with the BGP router configuration command neighbor ip-address remote-as as-number. NOTE IOS activates the IPv4 address-family by default. This can simplify the configuration in an IPv4 environment because Steps 3 and 4 are optional, but may cause confusion when working with other address families. The BGP router configuration command no bgp default ip4-unicast disables the automatic activation of the IPv4 AFI so that Steps 3 and 4 are required. Step 3. Initialize the address-family with the BGP router configuration command address-family afi safi. Step 4. Activate the address-family for the BGP neighbor with the BGP address-family configuration command neighbor ip-address activate.
Source: Adapted from community discussion — GReddy2323
What is the term used when it causes the packets to lose their MPLS labels including the VPN in-formation that lies in the inner MPLS Label i.e. if a packet goes through an untagged interface, the VPN information is lost and VPN sites lose connectivity?
Answer: B
probided answer is correct : One common cause of black holes in MPLS is the mismatch between the IP routing table and the label forwarding table. For example, if a router receives a packet with a label that is not in its label forwarding table, it will drop the packet without sending any error message.
Source: Adapted from community discussion — Muste
An administrator wants to implement security on his company’s router. Please select three options that you will use on your router to secure it. (Choose three.)
Answer: ACE
An administrator is setting up a DMVPN tunnel between their offices and he is getting below output when he is running the command “show crypto isakmp sa”:
What command will you run to identify the issue?
Answer: B
If there's an issue with the IKE phase of the tunnel establishment, the appropriate command to run for further troubleshooting would be: B. Debug crypto isakmp This command enables detailed debugging of the IKE protocol, which would help the administrator to identify the issues related to the IKE phase of the VPN tunnel establishment.
Source: Adapted from community discussion — HarwinderSekhon
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-410 practice, question 251. 578 questions available.
Version 1.0.0. How we source questions