300-410 practice questions 301–310

1. Question 301 · 578 in bank

   

   Refer to the exhibit. An engineer configured NetFlow on R1, but the flows do not reach the NMS server from R1. Which configuration resolves this issue?

   • AR1(config)#flow monitor FlowMonitort1 R1(config-flow-monitor)#destination 10.66.66.66
   • BR1(config)#interface Ethernet0/0 R1(config-if)#ip flow monitor Flowmonitor1 input R1(config-if)#ip flow monitor Flowmonitor1 output
   • CR1(config)#interface Ethernet0/1 R1(config-if)#ip flow monitor Flowmonitor1 input R1(config-if)#ip flow monitor Flowmonitor1 output
   • DR1(config)#flow exporter FlowExporter1 R1(config-flow-exporter)#destination 10.66.66.66

   Show answer

   Answer: D

   Next question

2. Question 302 · 578 in bank

   

   Refer to the exhibit. A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company’s security policy. The administrator can still ping to www.cisco.com. Which interface should the access list 101 be applied to resolve this issue?

   • AInterface G0/0 in the outgoing direction.
   • BInterface G0/0 in the incoming direction.
   • CInterface S1/0 in the outgoing direction.
   • DInterface G0/48 in the incoming direction.

   Show answer

   Answer: B

   Explanation

   NAT should be enabled.In the S1/0 output direction, the ACL is after SNAT conversion (192.168.10.0 -> 200.193.22.94), so it does not match the ACL101 condition.

   Source: Adapted from community discussion — b8os5h

   Next question

3. Question 303 · 578 in bank

   An engineer configured routing between multiple OSPF domains and introduced a routing loop that caused network instability. Which action resolves the problem?

   • ASet a tag using the redistribute command toward a domain and deny inbound in the other domain by a matching tag.
   • BSet a tag using the redistribute command toward a different domain and deny the matching tag when exiting from that domain.
   • CSet a tag using the network command in a domain and use the route-map command to deny the matching tag when exiting toward a different domain.
   • DSet a tag using the network command in a domain and use the route-map command to deny the matching tag when entering into a different domain.

   Show answer

   Answer: A

   Explanation

   https://networklessons.com/cisco/ccie-routing-switching/troubleshooting-metric-redistribution Redistribution Rule: Never advertise prefixes from routing protocol X into Y and then back into X. Redistribution goes from one protocol (or routing domain) into the other protocol (or routing domain) using the redistribute command. It's easier to picture redistribution between different protocols. Answer "A" means something like this: router ospf 1 redistribute eigrp 100 subnets tag 20 route-map FILTER deny match tag 20 route-map FILTER permit router eigrp 100 redistribute ospf 1 metric 100000 1 255 1 1500 route-map FILTER 1)redistribute into ospf and set the tag 2)redistribute into eigrp and match the tag (with action deny) Set a tag so, routes originating from a routing domain will not be redistributed back into that domain.

   Source: Adapted from community discussion — HungarianDish_111

   References

   • Cisco documentation

   Next question

4. Question 304 · 578 in bank

   

   Refer to the exhibit. A network engineer received a call from the vendor for a failed attempt to remotely log in to their managed router loopback interface from 192.168.40.15. Which action must the network engineer take to resolve the issue?

   • AThe source IP summarization must be updated to include the vendor source IP address.
   • BThe time-range configuration must be changed to use absolute instead of periodic.
   • CThe EIGRP configuration must be updated to include a network statement for loopback 100.
   • DThe IP access list VENDOR must be applied to interface loopback 100.

   Show answer

   Answer: A

   Explanation

   the extended access-list VENDOR: 192.168.32.0 0.0.0.7.255 that starts at 192.168.32.1 and ends at 192.168.39.254 doesn't include the vendor ip address of 192.168.40.15

   Source: Adapted from community discussion — ellen_AA

   Next question

5. Question 305 · 578 in bank

   DRAG DROP - Drag and drop the descriptions from the left onto the corresponding MPLS components on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

6. Question 306 · 578 in bank

   Network operations report issues with receiving too many external routes, which caused CPU spike on routers with smaller memories. Which action resolves the issue?

   • AConfigure the area range command when redistributing on ASBR.
   • BConfigure the summary-address command when redistributing on ABR.
   • CConfigure the area range command when redistributing on ABR.
   • DConfigure the summary-address command when redistributing on ASBR.

   Show answer

   Answer: D

   Explanation

   The primary difference between area range and summary-address is in where the command should be applied. Area range should be applied on the ABRs when you are trying to summarize routes between OSPF areas. So area range is used to summarize Type 3 LSAs. On the other hand summary-address should be applied on the ASBRs when you are trying to summarize externally redistributed routes from another protocol domain (eigrp, bgp etc). So summary-address is used to summarize Type5/7 LSAs. One exception to this rule is when you have a NSSA area, the router that is responsible for the conversion of Type7 to Type 5 LSA can have the summary-address applied.

   Source: Adapted from community discussion — DUBC89x

   Next question

7. Question 307 · 578 in bank

   

   Refer to the exhibits. SanFrancisco and Boston routers are choosing slower links to reach each other despite the direct links being up.

   

   Which configuration fixes the issue?

   • AAll Routers router ospf 1 auto-cost reference-bandwidth 100
   • BSanFrancisco Router router ospf 1 auto-cost reference-bandwidth 1000
   • CBoston Router router ospf 1 auto-cost reference-bandwidth 1000
   • DAll Routers router ospf 1 auto-cost reference-bandwidth 1000

   Show answer

   Answer: D

   Explanation

   D is ok : Under the OSPF process, the command auto-cost reference-bandwidth bandwidth-in- mbps changes the reference bandwidth for all OSPF interfaces associated with that process. If the reference bandwidth is changed on one router, then the reference bandwidth should be changed on all OSPF routers to ensure that SPF uses the same logic to prevent routing loops. It is a best practice to set the same reference bandwidth for all OSPF routers.

   Source: Adapted from community discussion — Stivostine

   Next question

8. Question 308 · 578 in bank

   

   Refer to the exhibit. An engineer must configure OSPF with R9 and R10 and configure redistribution between OSPF and RIP, causing a routing loop. Which configuration on R9 and R10 meets this objective?

   • Arouter ospf 1 redistribute rip subnets tag 20 ! route-map deny_tag20 deny 10 match tag 20 route-map deny_tag20 permit 20 ! router ospf 1 distribute-list route-map deny_tag20 in
   • Brouter ospf 1 redistribute rip subnets tag 20 ! route-map deny_tag20 deny 10 match tag 20 route-map deny_tag20 deny 20 ! router ospf 1 distribute-list route-map deny_tag20 in
   • Crouter ospf 1 redistribute rip subnets tag 20 ! route-map deny_tag20 deny 10 match tag 20 route-map deny_tag20 permit 20 ! router rip 1 distribute-list route-map deny _tag20 in
   • Drouter ospf 1 redistribute rip subnets tag 20 ! route-map deny_tag20 permit 10 match tag 20 route-map deny_tag20 permit 20 ! router ospf 1 distribute-list route-map deny_tag20 in

   Show answer

   Answer: D

   Explanation

   r9(config-router)#do sh ip route | b Gateway Gateway of last resort is not set 1.0.0.0/8 is variably subnetted, 9 subnets, 2 masks R 1.1.11.0/24 [120/1] via 1.1.91.11, 00:00:04, GigabitEthernet0/2 [120/1] via 1.1.19.10, 00:00:10, GigabitEthernet0/3 C 1.1.19.0/24 is directly connected, GigabitEthernet0/3 L 1.1.19.9/32 is directly connected, GigabitEthernet0/3 C 1.1.59.0/24 is directly connected, GigabitEthernet0/0 L 1.1.59.9/32 is directly connected, GigabitEthernet0/0 O 1.1.61.0/24 [110/3] via 1.1.59.5, 00:00:14, GigabitEthernet0/0 O 1.1.65.0/24 [110/2] via 1.1.59.5, 00:00:14, GigabitEthernet0/0 C 1.1.91.0/24 is directly connected, GigabitEthernet0/2 L 1.1.91.9/32 is directly connected, GigabitEthernet0/2 11.0.0.0/32 is subnetted, 1 subnets R 11.11.11.11 [120/1] via 1.1.91.11, 00:00:04, GigabitEthernet0/2 r9(config-router)#

   Source: Adapted from community discussion — HungarianDish_111

   Next question

9. Question 309 · 578 in bank

   

   Refer to the exhibit. Bangkok is using ECMP to reach the 172.20.2.0/24 network. The network administrator must configure it in such a way that traffic from 172.16.2.0/24 network uses the Singapore router as the preferred route. Which set of configurations accomplishes this task?

   • ABangkok - access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 ! interface Ethernet0/1 ip policy route-map PBR1
   • BDubai - access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 set ip next-hop peer-address ! interface Ethernet0/0 ip policy route-map PBR1
   • CBangkok - access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 ! interface Ethernet0/2 ip policy route-map PBR1
   • DDubai - access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 ! interface Ethernet0/0 ip policy route-map PBR1

   Show answer

   Answer: C

   Next question

10. Question 310 · 578 in bank

    Which label operations are performed by a label edge router?

    • ASWAP and POP
    • BPUSH and POP
    • CSWAP and PUSH
    • DPUSH and PHP

    Show answer

    Answer: B

    Explanation

    B. PUSH and POP: A LER pushes a new label onto incoming packets and pops off the label from outgoing packets. The incoming label is used to determine the forwarding path for the packet, while the outgoing label is used to direct the packet to the next hop in the path.

    Source: Adapted from community discussion — Titini

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 301. 578 questions available.