300-410 practice questions 381–390

1. Question 381 · 578 in bank

   

   Refer to the exhibit. An engineer is troubleshooting a failed Telnet session from PC to the DHCP server. Which action resolves the issue?

   • ARemove sequence 30 and add it back to the IPv6 traffic filter as sequence 5.
   • BRemove sequence 20 for sequence 40 in the access list to allow Telnet.
   • CRemove sequence 10 to add the PC source IP address and add it back as sequence 10.
   • DRemove sequence 20 and add it back to the IPv6 traffic filter as sequence 5.

   Show answer

   Answer: D

   Next question

2. Question 382 · 578 in bank

   

   Refer to the exhibit. Traffic from the branch network should route through HQ_R1 unless the path is unavailable. An engineer tests this functionality by shutting down interface on the BRANCH router toward HQ_R1 router, but 192.168.20.0/24 is no longer reachable from the branch router. Which set of configurations resolves the issue?

   • AHQ_R1(config)# ip sla responder - HQ_R1(config)# ip sla responder icmp-echo 172.16.35.2
   • BBRANCH(config)# ip sla 1 - BRANCH(config-ip-sla)# icmp-echo 172.16.35.1
   • CHQ_R2(config)# ip sla responder - HQ_R2(config)# ip sla responder icmp-echo 172.16.35.5
   • DBRANCH(config)# ip sla 1 - BRANCH(config-ip-sla)# icmp-echo 172.16.35.2

   Show answer

   Answer: D

   Explanation

   Took me a minute to see what is going on. The IP SLA is pointing to HQ_R2 address, and using that address (172.16.35.6) to track the static route pointing to HQ_R1. When the engineer shutdown the interface between Branch and HQ_R1, the IP SLA is still functioning and the static route to HQ_R1 remains up, black-holing traffic in the process. Change the IP SLA to the HQ_R1

   Source: Adapted from community discussion — [Removed]

   Next question

3. Question 383 · 578 in bank

   

   Refer to the exhibit. An engineer configures router B to direct all traffic from host 192.168.1.3 to router C. All other traffic must be routed through normal routing-protocol operations. Which configuration accomplishes the task?

   • Ainterface g0/0/0 ip address 192.168.1.254 255.255.255.0 ! access-list 101 permit ip host 192.168.1.3 any access-list 101 permit ip any any ! route-map CCNP permit 10 match ip address 101 set ip next-hop 10.0.1.2
   • Binterface g0/0/0 ip address 192.168.1.254 255.255.255.0 ip policy route-map CCNP ! access-list 101 permit ip host 192.168.1.3 any ! route-map CCNP permit 10 match ip address 101 set ip next-hop 10.0.2.1
   • Cinterface g0/0/0 ip address 192.168.1.254 255.255.255.0 ip policy route-map CCNP ! access-list 101 permit ip any host 192.168.1.3 ! route-map CCNP permit 10 match ip address 101 set ip next-hop 10.0.1.2
   • Dinterface g0/0/0 ip address 192.168.1.254 255.255.255.0 ip policy route-map CCNP ! access-list 101 permit ip host 192.168.1.3 any ! route-map CCNP permit 10 match ip address 101 set ip next-hop 10.0.1.2

   Show answer

   Answer: D

   Explanation

   A: missing the ip policy route-map CCNP under int Gi0/0 B: wrong next-hop (10.0.2.1 instead of 10.0.1.2) C: the direction is opposite in access-list 101 D: correct

   Source: Adapted from community discussion — jansan55

   Next question

4. Question 384 · 578 in bank

   Which protocol supports labeled paths between PE routers in an MPLS network?

   • ALDP
   • BRSVP
   • CMP-BGP
   • DIGP

   Show answer

   Answer: C

   Explanation

   The answer is C. In an MPLS network, Service Provider Edge (PE) routers use Multiprotocol Border Gateway Protocol (MP-BGP) to exchange label and route information with each other. MP-BGP is the routing protocol used to create and distribute labels between service provider edge routers on an MPLS network.

   Source: Adapted from community discussion — Wooker

   References

   • Cisco documentation

   Next question

5. Question 385 · 578 in bank

   An engineer needs dynamic routing between two routers and is unable to establish OSPF adjacency. The output of the show ip ospf neighbor command shows that the neighbor state is EXSTART/EXCHANGE. Which action should be taken to resolve this issue?

   • Amatch the passwords
   • Bmatch the hello timers
   • Cmatch the MTUs
   • Dmatch the network types

   Show answer

   Answer: C

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13684-12.html

   Source: Adapted from community discussion — bk989

   References

   • Cisco documentation

   Next question

6. Question 386 · 578 in bank

   

   Refer to the exhibit. The administrator is troubleshooting a BGP peering between PE1 and PE3 that is unable to establish. Which action resolves the issue?

   • ADisable sending ICMP unreachables on P2 to allow PE1 to establish a session with PE3.
   • BP2 must have a route to PE3 to establish a BGP session to PE1.
   • CRemove the traffic filtering rules on P2 blocking the BGP communication between PE1 and PE3.
   • DEnsure that the PE3 loopback address is used as a source for BGP peering to PE1.

   Show answer

   Answer: D

   Explanation

   PE1 is trying to use PE3 loopback address for peering, so "D" is really important in this case. "C" is unrelated to BGP. "debug ip icmp" shows administratively prohibited message for ICMP from R2. Only for ICMP and not for TCP. ICMP is unrelated to the BGP TCP process. One more thing, they are not directly connected, so may need to enable multihop.

   Source: Adapted from community discussion — HungarianDish_111

   Next question

7. Question 387 · 578 in bank

   

   Refer to the exhibit. Users on a call center report that they cannot browse the internet on Saturdays during the afternoon. Which configuration resolves the issue?

   • Atime-range timer no periodic weekend 9:00 to 17:00 periodic weekend 17:00 to 23:59
   • Bno time-range timer
   • Cinterface gig0/0 ip access-group NO_Internet out
   • Dip access-list extended NO_Internet 15 permit tcp any any eq www

   Show answer

   Answer: A

   Next question

8. Question 388 · 578 in bank

   

   Refer to the exhibit. The IT router is connected with the Sales and Marketing departments. The interfaces have been assigned to their respective VRFs to keep the two department routes isolated. Which configuration set must the IT router use for BGP to distribute routes for each department that maintains their own routing table for network isolation?

   • Arouter bgp 111 address-family ipv4 unicast neighbor 172.16.1.2 remote-as 111 neighbor 172.16.2.2 remote-as 111 neighbor 172.16.11.2 remote-as 111 neighbor 172.16.12.2 remote-as 111
   • Brouter bgp 111 address-family ipv4 vrf Marketing neighbor 172.16.1.2 remote-as 111 neighbor 172.16.2.2 remote-as 111 ! address-family ipv4 vrf Sales neighbor 172.16.11.2 remote-as 111 neighbor 172.16.12.2 remote-as 111
   • Crouter bgp 111 neighbor 172.16.1.2 remote-as 111 neighbor 172.16.2.2 remote-as 111 neighbor 172.16.11.2 remote-as 111 neighbor 172.16.12.2 remote-as 111
   • Drouter bgp 111 address-family ipv4 vrf Marketing neighbor 172.16.1.2 remote-as 111 neighbor 172.16.1.2 Route-reflector-client neighbor 172.16.2.2 remote-as 111 neighbor 172.16.2.2 Route-reflector-client ! address-family ipv4 vrf Sales neighbor 172.16.11.2 remote-as 111 neighbor 172.16.11.2 Route-reflector-client neighbor 172.16.12.2 remote-as 111 neighbor 172.16.12.2 Route-reflector-client

   Show answer

   Answer: D

   Explanation

   I agree with potato_inet0. Also confirmed solution "D" in the lab. Connection is established between iBGP peers, but the routes advertised by the edge routers are only available if the central IT router is setting the peers as route-reflector-client. For instance, if Marketing-1 is advertising a LAN with ip 1.1.1.1/24, Marketing-2 can only reach that if they both are RRclients and IT is RR.

   Source: Adapted from community discussion — HungarianDish_111

   Next question

9. Question 389 · 578 in bank

   

   Refer to the exhibit. An administrator is configuring a GRE tunnel to establish an EIGRP neighbor to a remote router. The other tunnel endpoint is already configured. After applying the configuration as shown, the tunnel started flapping. Which action resolves the issue?

   • AModify the network command to use the Tunnel0 interface netmask.
   • BStop sending a route matching the tunnel destination across the tunnel.
   • CAdvertise the Loopback0 interface from R2 across the tunnel.
   • DReaddress the IP network on the Tunnel0 on both routers using the /31 netmask.

   Show answer

   Answer: B

   Explanation

   B correct: In this question we are advertising the tunnel IP address 192.168.12.2 to the other side. When other end receives the EIGRP advertisement, it realizes it can reach the other side of the tunnel via EIGRP. In other words, it reaches the tunnel destination through the tunnel itself -> This causes “recursive routing” error. Note: In order to avoid this error, do not advertise the tunnel destination IP address on the tunnel interface to other side.

   Source: Adapted from community discussion — inteldarvid

   References

   • Cisco documentation

   Next question

10. Question 390 · 578 in bank

    An engineer must override the normal routing behavior of a router. The engineer must send HTTP traffic that is destined to 10.100.100.100 from 10.1.1.0/24 via a next hop of 10.2.2.2, two hops away from the router that is connected to the 10.1.1.0/24 subnet. Which configuration reroutes traffic according to this requirement?

    • Aaccess-list 100 permit tcp 10.1.1.0 0.0.0.255 host 10.100.100.100 eq http ! route-map POLICY permit 10 match ip address 100 set ip next-hop recursive 10.2.2.2
    • Baccess-list 100 permit tcp 10.1.1.0 0.0.0.255 host 10.100.100.100 eq http ! route-map POLICY deny 10 match ip address 100 set ip next-hop recursive 10.2.2.2 route-map POLICY permit 20
    • Caccess-list 100 permit tcp 10.1.1.0 0.0.0.255 host 10.100.100.100 eq http ! route-map POLICY permit 10 match ip address 100 set ip next-hop 10.2.2.2 route-map POLICY permit 20 D. access-list 100 permit tcp 10.1.1.0 0.0.0.255 host 10.100.100.100 eq http ! route-map POLICY permit 10 match ip address 100 set ip next-hop 10.2.2.2

    Show answer

    Answer: A

    Explanation

    'route-map POLICY permit 20' is not required here because the route map is not referenced anywhere else, it's only used to modify the next-hop on specific packets. Recursive is required because the other router is "two hops away".

    Source: Adapted from community discussion — Not_That_Guy

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 381. 578 questions available.