300-410 practice questions 291–300

1. Question 291 · 578 in bank

   

   Refer to the exhibit. An engineer must configure a LAN-to-LAN IPsec VPN between R1 and the remote router. Which IPsec Phase 1 configuration must the engineer use for the local router?

   • Acrypto isakmp policy 5 authentication pre-share encryption 3des hash sha group 2 ! crypto isakmp key cisco123 address 200.1.1.3
   • Bcrypto isakmp policy 5 authentication pre-share encryption 3des hash md5 group 2 ! crypto isakmp key cisco123! address 199.1.1.1
   • Ccrypto isakmp policy 5 authentication pre-share encryption 3des hash md5 group 2 ! crypto isakmp key cisco123 address 199.1.1.1
   • Dcrypto isakmp policy 5 authentication pre-share encryption 3des hash md5 group 2 ! crypto isakmp key cisco123 address 200.1.1.3

   Show answer

   Answer: A

   Explanation

   A and D both are correct but remember to smoke before exam :P vIOS(config-isakmp)#hash ? md5 Message Digest 5 sha Secure Hash Standard sha256 Secure Hash Standard 2 (256 bit) sha384 Secure Hash Standard 2 (384 bit) sha512 Secure Hash Standard 2 (512 bit)

   Source: Adapted from community discussion — HarwinderSekhon

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 292 · 578 in bank

   

   Refer to the exhibit. A shoe retail company implemented the uRPF solution for an antispoofing attack. A network engineer received the call that the branch A server is under an IP spoofing attack. Which configuration must be implemented to resolve the attack?

   • AR4 - interface ethernet0/1 ip verify unicast source reachable-via any allow-default allow-self-ping
   • BR4 - interface ethernet0/1 ip unicast RPF check reachable-via any allow-default allow-self-ping
   • CR3 - interface ethernet0/1 ip verify unicast source reachable-via any allow-default allow-self-ping
   • DR3 - interface ethernet0/1 ip unicast RPF check reachable-via any allow-default allow-self-ping

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

3. Question 293 · 578 in bank

   

   Refer to the exhibit. An engineer configures two ASBRs, 10.4.17.6 and 10.4.15.5, in an OSPF network to redistribute routes from EIGRP. However, both ASBRs show the EIGRP routes as equal costs even though the next-hop router 10.4.17.6 is closer to R1. How should the network traffic to the EIGRP prefixes be sent via 10.4.17.6?

   • AThe administrative distance should be raised to 120 from the ASBR 10.4.17.6.
   • BThe redistributed prefixes should be advertised as Type 1.
   • CThe ASBR 10.4.17.6 should assign a tag to match and assign a lower metric on R1.
   • DThe administrative distance should be raised to 120 from the ASBR 10.4.15.5.

   Show answer

   Answer: B

   Explanation

   Yes, it is B. BUT, none of the explanations below are correct. So if you would advertise any route as E1 is preferred over E2. So if your primary ASBR advertises the routes as an E1 routes, they are automatically preferred over E2 routes. More info: https://networklessons.com/ospf/ospf-path-selection-explained

   Source: Adapted from community discussion — Pietjeplukgeluk

   Next question

4. Question 294 · 578 in bank

   Which component of MPLS VPNs is used to extend the IP address so that an engineer is able to identify to which VPN it belongs?

   • ART
   • BRD
   • CLDP
   • DVPNv4 address family

   Show answer

   Answer: B

   Explanation

   https://www.ciscolive.com/c/dam/r/ciscolive/apjc/docs/2019/pdf/BRKCRT-2601.pdf https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2020/pdf/DGTL-BRKMPL-1100.pdf https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKMPL-1100.pdf RD is prepended to each prefix to make routes unique. VPNv4 address (96-bit address): 64-bit RD + 32 bit IPv4 address

   Source: Adapted from community discussion — HungarianDish_111

   Next question

5. Question 295 · 578 in bank

   

   Refer to the exhibit. An engineer noticed that the router log messages do not have any information about when the event occurred. Which action should the engineer take when enabling service time stamps to improve the logging functionality at a granular level?

   • AConfigure the debug uptime option.
   • BConfigure the msec option.
   • CConfigure the timezone option.
   • DConfigure the log uptime option.

   Show answer

   Answer: B

   Explanation

   B is correct Configuring the msec (milliseconds) option for service timestamps adds a timestamp with millisecond precision to the log messages. This provides a highly detailed timestamp for each log entry, which is important for accurate troubleshooting and detailed event tracking.

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation

   Next question

6. Question 296 · 578 in bank

   

   Refer to the exhibit. An engineer configured R2 and R5 as route reflectors and noticed that not all routes are sent to R1 to advertise to the eBGP peers. Which iBGP routers must be configured as route reflectors to advertise all routes to restore reachability across all networks?

   • AR1 and R4
   • BR1 and R5
   • CR4 and R5
   • DR2 and R5

   Show answer

   Answer: C

   Explanation

   I also confirmed solution "C" in the lab (CML). RR = R4 (it's clients = R1, R5, R8) and RR = R5 (it's client R2). R2's loopback has not been advertised to R4 and R8 (and vica versa) until R2 became the client of RR R5. In my lab, full reachability was achieved with R4 and R5 being RRs. (Maybe I am missing something as others stated that R4 would be enough as RR.)

   Source: Adapted from community discussion — HungarianDish_111

   Next question

7. Question 297 · 578 in bank

   

   Refer to the exhibit. An engineer configured SNMP Communities on UserSW2 switch, but the SNMP server cannot upload modified configurations to the switch. Which configuration resolves this issue?

   • Asnmp-server community CiscoUs3r RW 11
   • Bsnmp-server community Ciscowruser RW 11
   • Csnmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22
   • Dsnmp-server group NETVIEW v2c priv read NETVIEW access 11

   Show answer

   Answer: B

   Explanation

   The string "Ciscowruser" which is a community string (similar to a per-shared key) should be corrected. Confusing components: the question gives the same name to a server-group and to a view. Plus, the question names the password-like strings to some sort of users. Examples: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-3se/3850/snmp-xe-3se-3850-book/nm-snmp-snmpv3.html https://www.cbtnuggets.com/blog/technology/networking/how-to-configure-snmpv3-and-how-it-works

   Source: Adapted from community discussion — HungarianDish_111

   References

   • Cisco documentation
   • Cisco documentation

   Next question

8. Question 298 · 578 in bank

   

   Refer to the exhibit. An engineer must extend VRF-Lite over a trunk to another switch for VLAN 70 (10.70.70.0/24) on port GigabitEtheret0/0 and VLAN 80 (10.80.80.0/24) on port GigabitEthernet0/1. Which configuration accomplishes this objective?

   • Ainterface GigabitEthernet0/0 no switchport ip vrf forwarding 70 ip address 10.70.70.1 255.255.255.0 ! interface GigabitEthernet0/1 no switchport ip vrf forwarding 80 ip address 10.80.80.1 255.255.255.0
   • Binterface GigabitEthernet0/0 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 70 ! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 80
   • Cinterface GigabitEthernet0/0 switchport mode access switchport access vlan 70 ip vrf forwarding 70 ! interface GigabitEthernet0/1 switchport mode access switchport access vlan 80 ip vrf forwarding 80
   • Dinterface GigabitEthernet0/0 switchport mode access switchport access vlan 70 ! interface GigabitEthernet0/1 switchport mode access switchport access vlan 80 !

   Show answer

   Answer: B

   Explanation

   Example configs: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/31sg/configuration/guide/conf/vrf.html https://community.cisco.com/t5/switching/vrf-routing-in-vlan/td-p/3194751 The physical trunk ports are configured with simple trunk configuration. The vrf is associated under the vlan interfaces. 1)create vlans 2)create vrf definition 3)create vlan interface, assign vrf, then IP 4)configure the trunk and allow vlans as required

   Source: Adapted from community discussion — HungarianDish_111

   References

   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

9. Question 299 · 578 in bank

   

   Refer to the exhibit. An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established and did not meet the requirement. Which action resolves the issue?

   • AReplace OSPF process 10 on the interfaces with OSPF process 1 for the IPv4 address, and remove process 10 from the global configuration.
   • BReplace OSPF process 10 on the interfaces with OSPF process 1, and configure an additional router ID with IPv6 address.
   • CReplace OSPF process 10 on the interfaces with OSPF process 1, and remove process 10 from the global configuration.
   • DReplace OSPF process 10 on the interfaces with OSPF process 1 for the IPv6 address, and remove process 10 from the global configuration.

   Show answer

   Answer: C

   Next question

10. Question 300 · 578 in bank

    What is the purpose of an OSPF sham-link?

    • Ato allow inter-area routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
    • Bto allow intra-area routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
    • Cto correct OSPF backdoor routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
    • Dto correct OSPF backdoor routing when OSPF is used as the PE-PE connection protocol in an MPLS VPN network

    Show answer

    Answer: C

    Explanation

    OSPF Sham Links are required when you try to use a backdoor link between two CE routers in an MPLS VPN PE CE scenario where you use OSPF as the PE-CE routing protocol. This is best explained with an example, take a look at the following topology:

    Source: Adapted from community discussion — DUBC89x

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 291. 578 questions available.