300-410 practice questions 311–320

1. Question 311 · 578 in bank

   

   Refer to the exhibits. London must reach Rome using a faster path via EIGRP if all the links are up, but it failed to take this path. Which action resolves the issue?

   • AChange the administrative distance of RIP to 150.
   • BIncrease the bandwidth of the link between London and Barcelona.
   • CUse the network statement on London to inject the 172.16.X.0/24 networks into EIGRP.
   • DUse the network statement on Rome to inject the 172.16.X.0/24 networks into EIGRP.

   Show answer

   Answer: D

   Explanation

   D is correct, also tested it. If LAN segments (172.16.3.0/24, 172.16.4.0/24) on Rome are advertised by EIGRP then London is choosing the path with the higher bandwidth (minimum BW is 1GB) to reach the LANs on Rome. (Of course, to reach the router Rome, it is choosing the directly connected link with AD 0.)

   Source: Adapted from community discussion — HungarianDish_111

   Next question

2. Question 312 · 578 in bank

   The network administrator configured the router for Control Plane Policing so that inbound SSH traffic is policed to 500 kbps. This policy must apply to traffic coming in from 10.10.10.0/24 and 192.168.10.0/24 networks. access-list 100 permit ip 10.10.10.0 0.0.0.255 any access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 23 ! class-map CLASS-SSH match access-group 100 ! policy-map PM-COPP class CLASS-SSH police 500000 conform-action transmit ! interface E0/0 service-policy input PM-COPP ! interface E0/1 service-policy input PM-COPP The Control Plane Policing is not applied to SSH traffic and SSH is open to use any bandwidth available. Which configuration resolves this issue?

   • Ano access-list 100 access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22 access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22
   • Binterface E0/0 no service-policy input PM-COPP ! interface E0/1 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP
   • Cno access-list 100 access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22 access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22 ! policy-map PM-COPP class CLASS-SSH no police 500000 conform-action transmit police 500000 conform-action transmit exceed-action drop
   • Dno access-list 100 access-list 100 permit tcp 10.10.10.0 0.0.0.255 any eq 22 access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 22 ! interface E0/0 no service-policy input PM-COPP ! interface E0/1 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP

   Show answer

   Answer: D

   Explanation

   Answer "C" does not apply the policy correctly. This important part is missing from "C": control-plane service-policy input PM-COPP For me, "D" is the closest solution as all other options are totally wrong. However, "D" does not limit SSH traffic to desired CIR because the drop action is missing (from the exceed or violate parameters.)

   Source: Adapted from community discussion — HungarianDish_111

   Next question

3. Question 313 · 578 in bank

   

   Refer to the exhibit. With the partial configuration of a router-on-a-stick, clients in VLAN 10 on Gi2 cannot obtain IP configuration from the central DHCP server. The DHCP server is reachable by a successful ping from the router. Which action resolves the issue?

   • AConfigure the ip helper-address 192.168.255.3 command on the Gi2.10 subinterface.
   • BConfigure a valid IP address on the Gi2 interface so that DHCP requests can be forwarded.
   • CConfigure the ip dhcp pool 1 and network 192.168.210.0 255.255.255.0 commands.
   • DConfigure the ip dhcp excluded-address 192.168.255.3 command on the Gi2.10 subinterface.

   Show answer

   Answer: A

   Explanation

   A is correct but FOR GOD SAKE!!! This will not function properly because the vlan specified in the encapsulation dot1q command is wrong. They should pay a lot more of attenction about these questions...

   Source: Adapted from community discussion — XBfoundX

   Next question

4. Question 314 · 578 in bank

   The IPv6 network is under attack by an unknown source that is neither in the binding table nor learned through neighbor discovery. Which feature helps prevent the attack?

   • AIPv6 Destination Guard
   • BIPv6 Prefix Guard
   • CIPv6 Router Advertisement Guard
   • DIPv6 Snooping

   Show answer

   Answer: B

   Explanation

   https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16/ip6f-xe-16-book/ip6-src-guard.pdf IPv6 Prefix Guard prevents home-node sourcing traffic outside of the authorized and delegated traffic. ...often used when IPv6 prefixes are delegated to devices using DHCP prefix delegation. The feature discovers ranges of addresses assigned to the link and blocks any traffic sourced with an address outside this range. Not "A". https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKENT-3002.pdf Destination Guard Drops packets for destinations without a binding entry

   Source: Adapted from community discussion — HungarianDish_111

   References

   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 315 · 578 in bank

   The network administrator configured CoPP so that all routing protocol traffic toward the router CPU is limited to 1 mbps. All traffic that exceeds this limit must be dropped. The router is running BGP and OSPF. Management traffic for Telnet and SSH must be limited to 500 kbps. access-list 100 permit tcp any any eq 179 access-list 100 permit tcp any any range 22 23 access-list 100 permit ospf any any ! class-map CM-ROUTING match access-group 100 class-map CM-MGMT match access-group 100 ! policy-map PM-COPP class CM-ROUTING police 1000000 conform-action transmit class CM-MGMT police 500000 conform-action transmit ! control-plane service-policy output PM-COPP No traffic is filtering through CoPP, which is resulting in high CPU utilization. Which configuration resolves the issue?

   • Acontrol-plane no service-policy output PM-COPP service-policy input PM-COPP
   • Bno access-list 100 access-list 100 permit tcp any any eq 179 access-list 100 permit ospf any any access-list 101 permit tcp any any range 22 23 ! ! class-map CM-MGMT no match access-group 100 match access-group 101
   • Cno access-list 100 access-list 100 permit tcp any any eq 179 access-list 100 permit ospf any any access-list 101 permit tcp any any range 22 23 ! ! class-map CM-MGMT no match access-group 100 match access-group 101 ! control-plane no service-policy output PM-COPP service-policy input PM-COPP
   • DNo access-list 100 - access-list 100 permit tcp any any eq 179 access-list 100 permit tcp any any range eq 22 access-list 100 permit tcp any any range eq 23 access-list 100 permit ospf any any

   Show answer

   Answer: C

   Explanation

   C - not the most optimal but works somehow, compared to the other options. Has the "service-policy output" and ACLs are separate.

   Source: Adapted from community discussion — d740f62

   Next question

6. Question 316 · 578 in bank

   Which failure detection mechanism is used for BFD?

   • Aconsistent rate
   • BLayer 2 protocol failure
   • Cvariable rate
   • Drouting protocol failure

   Show answer

   Answer: A

   Explanation

   BFD provides a consistent failure detection method for network administrators. Because the network administrator can use BFD to detect forwarding path failures at a uniform rate https://www.cisco.com/en/US/docs/ios/12_4t/ip_route/configuration/guide/t_bfd.html

   Source: Adapted from community discussion — Xerath

   References

   • Cisco documentation

   Next question

7. Question 317 · 578 in bank

   

   Refer to the exhibit. The network administrator configured BGP as the backup route for 10.0.0.0/8 and it should work only when EIGRP 10.0.0.0/8 failed to install for site S4248T5E130F6. Which configuration resolves the issue?

   • Aconfigure terminal ! router eigrp 1 distance eigrp 90 170
   • Bconfigure terminal ! router eigrp 1 redistribute bgp metric 10000 1 255 1 1500
   • Cconfigure terminal ! ip route 10.0.0.0 255.0.0.0 192.168.90.2
   • Dconfigure terminal ! router eigrp 1 distance eigrp 10 170

   Show answer

   Answer: D

   Explanation

   Another flawed question. A router will choose the longest match for a route. The OSPF route in this question will always be the path traffic takes to the 10 network as long as it is a /24. The EIGRP route (/16) will be next up if the OSPF route is removed. The EIGRP route will beat out the BGP route because of the longer match (/16 > /8). You really don't need to change the AD of EIGRP at all to meet this question's requirement. I did lab this up. D is the best wrong answer tho...

   Source: Adapted from community discussion — JonnyBingo

   Next question

8. Question 318 · 578 in bank

   

   Refer to the exhibit. Troubleshoot and ensure that branch ׀’ only ever uses the MPLS ׀’ network to reach HQ. Which action achieves this requirement?

   • AIntroduce AS path prepending on the branch A MPLS ׀’ network connection so that any HQ advertisements from branch A toward the MPLS ׀’ network are prepended three times
   • BModify the weight of all HQ prefixes received at branch ׀’ from the MPLS ׀’ network to be higher than the weights used on the MPLS A network
   • CIncrease the local preference for all HQ prefixes received at branch ׀’ from the MPLS ׀’ network to be higher than the local preferences used on the MPLS A network
   • DIntroduce an AS path filter on branch A routers so that only local prefixes are advertised into BGP

   Show answer

   Answer: D

   Explanation

   Answer D seems most logical. Question says that Branch B ONLY EVER uses MPLS B. That means you don't want the path through Branch A as an alternate. So A, B and C all prefer HQ routes, but they don't eliminate Branch A routes. D is the only answer which actually filters the route.

   Source: Adapted from community discussion — Alnet

   Next question

9. Question 319 · 578 in bank

   

   Refer to the exhibit. The administrator configured the network devices for end-to-end reachability, but the ASBRs are not propagating routes to each other. Which set of configurations resolves this issue?

   • Arouter bgp 100 neighbor 10.1.1.1 next-hop-self neighbor 10.1.2.2 next-hop-self neighbor 10.1.3.3 next-hop-self
   • Brouter bgp 100 neighbor 10.1.1.1 update-source Loopback0 neighbor 10.1.2.2 update-source Loopback0 neighbor 10.1.3.3 update-source Loopback0
   • Crouter bgp 100 neighbor 10.1.1.1 route-reflector-client neighbor 10.1.2.2 route-reflector-client neighbor 10.1.3.3 route-reflector-client
   • Drouter bgp 100 neighbor 10.1.1.1 ebgp-multihop neighbor 10.1.2.2 ebgp-multihop neighbor 10.1.3.3 ebgp-muttihop

   Show answer

   Answer: C

   Explanation

   Remember route-reflector doesn't overwrite next-hop next-hop-self would be ncie to have but not needed if we are advertising the connected links on the RR Finally these links may be getting advertised by the exchange point on switch 1

   Source: Adapted from community discussion — bk989

   References

   • cisco.com documentation

   Next question

10. Question 320 · 578 in bank

    

    Refer to the exhibit. The Customer Edge router (AS 65500) wants to use AS 100 as the preferred ISP for all external routes. Customer Edge - route-map SETLP set local-preference 111 ! router bgp 65500 neighbor 192.168.111.1 remote-as 100 neighbor 192.168.111.1 route-map SETLP out neighbor 192.168.112.2 remote-as 200 This configuration failed to send routes to AS 100 as the preferred path. Which set of configurations resolves the issue?

    • Aroute-map SETLP set local-preference 111 ! router bgp 65500 neighbor 192.168.111.1 remote-as 100 neighbor 192.168.111.1 route-map SETLP in
    • Broute-map SETPP set as-path prepend 100 100 ! router bgp 65500 neighbor 192.168.111.1 remote-as 100 neighbor 192.168.111.1 route-map SETPP in
    • Croute-map SETPP set as-path prepend 111 111 ! router bgp 65500 neighbor 192.168.111.1 remote-as 100 neighbor 192.168.111.1 route-map SETPP out
    • Droute-map SETLP set local-preference 111 ! router bgp 65500 neighbor 192.168.111.1 remote-as 100 neighbor 192.168.111.1 route-map SETLP out

    Show answer

    Answer: A

    Explanation

    Answer is A. It states that the configuration failed to send routes to AS100 as the preferred path. You need to swap the in to out on the routemap. with answer b you are just extending the AS path making it less desirable. which is also for incoming traffic, not outgoing.

    Source: Adapted from community discussion — drxz

    References

    • cisco.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 311. 578 questions available.