300-410 practice questions 461–470

1. Question 461 · 578 in bank

   

   Refer to the exhibit. R1 should receive 10.16.2.0/24 from R2. Which action resolves the issue?

   • AAdd prefix-list seq 1 on R1 to permit 10.16.0.0/22.
   • BAdd prefix-list seq 1 on R1 to permit 10.16.2.0/24.
   • CModify prefix-list seq 5 on R2 to permit 10.16.0.0/22.
   • DModify prefix-list seq 5 on R2 to permit 10.16.0.0/23.

   Show answer

   Answer: C

   Explanation

   Note there is nothing that needs to be changed on the prefix list on R1. The part "R1(config)#ip prefix-list NAME_OF_PREFIX_LIST seq 10 permit 0.0.0.0/0 le 32" already allows everything. Maybe slight note, the fact that the question includes 10.16.1.0/23 as an entry makes it more complex than required. SIDENOTE: The example includes R2 config with: 10.16.0.0/23, this does not help the question in my opinion, it should just have 10.16.0.0/23 (10.16.0.1 -10.16.1.255) in the example to clarify the question.

   Source: Adapted from community discussion — Pietjeplukgeluk

   Next question

2. Question 462 · 578 in bank

   Which characteristic is representative of a hub-and-spoke topology between PE routers in a Layer 3 MPLS VPN network?

   • AThe PE routers use different RDs for each VRF to import and export M-BGP prefixes.
   • BEach PE router uses a different RD to identify all branches.
   • CThe PE routers use different RTs to import and export M-BGP prefixes.
   • DThe PE routers are configured with multiple VRFs for all branches.

   Show answer

   Answer: C

   Next question

3. Question 463 · 578 in bank

   

   Refer to the exhibit. The primary link between R1 and R2 went down, but R3 is still advertising the 192.168.200.0/24 network to R1 and the 192.168.100.0/24 network to R2, which creates a loop. Which action resolves the issue?

   • AConfigure the eigrp stub command under the EIGRP process on R2.
   • BConfigure the summary-address 192.168.0.0 255.255.0.0 100 command on R3.
   • CConfigure the eigrp stub command under the EIGRP process on R3.
   • DConfigure the eigrp stub leak-map command under the EIGRP process on R1.

   Show answer

   Answer: C

   Explanation

   Note this question would be better stated like: The it person tried to configure this router. He does not now what he did and somebody needs to fix this before a full redesign of the network is required (because he is fired and needs to take his career to some other company). What a stupid question.

   Source: Adapted from community discussion — Pietjeplukgeluk

   Next question

4. Question 464 · 578 in bank

   How does MPLS Layer 3 VPN function?

   • AWhen an EIGRP internal route is redistributed into BGP by one PE and then back into EIGRP by another PE, the originating router ID for the route is changed to the router ID of the first PE.
   • BWhen a destination PE device receives a labeled packet, it pops the label and uses it to forward the packet to the correct CE device.
   • CWhen a PE device forwards a packet received from a CE device across the provider network, it labels the packet with the label learned from the source PE device.
   • DWhen a VPN route is learned from a CE device and injected into IGP, a VPN route distinguisher attribute is associated with it.

   Show answer

   Answer: B

   Explanation

   I think B may be correct- the label in question being the VPN label NOT the MPLS label which would have being removed by the previous router in the LSP.

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation

   Next question

5. Question 465 · 578 in bank

   What action is performed for untagged outgoing labels in an MPLS router?

   • AConvert the incoming MPLS packet to an untagged packet and then do a RIB lookup.
   • BConvert the incoming MPLS packet to an untagged packet and then do a FIB lookup.
   • CConvert the incoming MPLS packet to an IP packet and forward it to the next router.
   • DConvert the untagged packet to a labeled packet and forward it to the next router.

   Show answer

   Answer: C

   Explanation

   "The non-working state is when R5's LFIB entry for label 16 instructs it to perform a Untagged/No Label operation. Untagged/No Label literally means to strip all of the MPLS labels off the packet and forward the raw IP packet (in this case it's IP). R4 receives a regular IP packet and does a lookup in the FIB." https://www.packetmischief.ca/2015/05/27/mpls-no-label-vs-pop-label/ The first router performs a lookup in LFIB, converts the MPLS packet to IP packet and forwards it to the next hop. Only the next hop performs the FIB lookup.

   Source: Adapted from community discussion — Horsefeathers

   Next question

6. Question 466 · 578 in bank

   An engineer configured a router with this configuration:

   

   The router console starts receiving log message “%SEC-6-IPACCESSLOGP: list DENY_TELNET denied tcp192.168.1.10(10222) (FastEthernet1/0 D508.89gb.003f) ->192.168.2.20(23), 1 packet”. Which action stops messages on the console while still denying Telnet?

   • ARemove log-input keyword from the access list.
   • BConfigure a 20 permit ip any any log-input command.
   • CConfigure a 20 permit ip any any command.
   • DReplace log-input keyword with the log keyword in the access list.

   Show answer

   Answer: A

   Next question

7. Question 467 · 578 in bank

   

   Refer to the exhibit. R1 is not forming adjacency on a point-to-point interface. Which action resolves the issue?

   • AThe area numbers must be configured the same on each router.
   • BThe area types must be configured the same on each router.
   • CThe no-summary command must be included in the area configuration on R2.
   • DThe no-summary command must be included in the area configuration on R1.

   Show answer

   Answer: B

   Explanation

   everytime you receive something like "mismatched nssa option bit" means its a mismatch on the area type: https://supportportal.juniper.net/s/article/ScreenOS-OSPF-is-not-coming-up-and-an-error-regarding-stub-nssa-option-bit-mismatch-is-generated-in-debugs?language=en_US. To resolve this issue, change the area type on any of the sites to match the peer site.

   Source: Adapted from community discussion — dapardo

   References

   • juniper.net documentation
   • cisco.com documentation

   Next question

8. Question 468 · 578 in bank

   

   Refer to the exhibit. The 130.130.130.0/24 route shows in the R2 routing table but is getting filtering toward R3. Which action resolves the issue?

   • AAutomatic route summarization must be enabled on R2.
   • BThe outgoing filter list for all interfaces must be set on R2.
   • CThe incoming filter list for all interfaces must be set on R2.
   • DIGP synchronization must be disabled on R2.

   Show answer

   Answer: D

   Explanation

   BGP synchronization is an old rule from the days when we didn’t run IBGP on all routers within a transit AS. In short, BGP will not advertise something that it learns from an IBGP neighbor to an EBGP neighbor if the prefix can’t be validated in its IGP.

   Source: Adapted from community discussion — DavideDL

   References

   • Cisco documentation

   Next question

9. Question 469 · 578 in bank

   How are LDP neighbors discovered?

   • ABroadcasts hellos are sent to the 255.255.255.255 broadcast address.
   • BMulticast hellos are sent to the 224.0.0.2 group address.
   • CUnicast hellos are sent to directly connected neighbors IP addresses.
   • DMulticast hellos are sent to the 224.0.0.5 group address.

   Show answer

   Answer: B

   Explanation

   "Once MPLS has been enabled on an interface, LDP hello packets are sent out the interface to the destination multicast address 224.0.0.2 (the all routers multicast address), using UDP port 646. This is known as basic discovery and is symmetrical."

   Source: Adapted from community discussion — d740f62

   Next question

10. Question 470 · 578 in bank

    

    Refer to the exhibit. While troubleshooting an issue on the network, an engineer notices that a TCP Connect operation failed on port 3000 between R101 and R201. Which command must be configured on R201 to respond to the R101 IP SLA configurations with a control connection on UDP port 1967?

    • Aip sla responder tcp-connect ipaddress 2.2.2.2 port 3001
    • Bip sla responder
    • Cip sla responder tcp-connect ipaddress 1.1.1.1 port 3000
    • Dip sla responder udp-echo ipaddress 1.1.1.1 port 1967

    Show answer

    Answer: B

    Explanation

    I'm sorry that's incorrect, other mentioned commands are also valid. I still think it's B but this explanation instead: "The IP SLA Responder when enabled with the ip sla responder command, does not require the source IP address or the TCP port to be specified. It will listen for control messages on UDP port 1967 and will respond to any IP SLA operations targeted at the device, including TCP Connect to the specified port in the operation."

    Source: Adapted from community discussion — Horsefeathers

    References

    • Cisco documentation
    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 461. 578 questions available.