300-410 practice questions 551–560

1. Question 551 · 578 in bank

   

   Refer to the exhibit. The ISP router is fully configured for customer A and customer B using the VRF-Lite feature. What is the minimum configuration required for customer A to communicate between routers A1 and A2?

   • AA1 interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0
   • BA1 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 vrf A net 172.31.200.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 vrf A net 172.31.200.1 0.0.0.255 area 0
   • CA1 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0
   • DA1 interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0

   Show answer

   Answer: A

   Explanation

   C. A1 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0 D. A1 interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0 A2 interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0

   Source: Adapted from community discussion — xziomal9

   Next question

2. Question 552 · 578 in bank

   An engineer is implementing a coordinated change with a server team. As part of the change, the engineer must configure interface GigabitEthernet2 in an existing VRF "RED" then move the interface to an existing VRF "BLUE" when the server team is ready. The engineer configured interface GigabitEthernet2 in VRF "RED": interface GigabitEthernet2 description Migration ID: B410A82D0935G35 vrf forwarding RED ip address 10.0.0.0 255.255.255.254 negotiation auto Which configuration completes the change?

   • Ainterface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE ip address 10.0.0.0 255.255.255.254
   • Binterface GigabitEthernet2 no ip address vrf forwarding BLUE
   • Cinterface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE
   • Dinterface GigabitEthernet2 no ip address ip address 10.0.0.0 255.255.255.254 vrf forwarding BLUE

   Show answer

   Answer: A

   Explanation

   A is correct. The thing they try and check here is if you know that using the vrf forwarding command removes the IP address associated with the interface. You have to reapply the IP address afterwards.

   Source: Adapted from community discussion — bf10690

   Next question

3. Question 553 · 578 in bank

   

   Refer to the exhibit. R5 should not receive any routes originated in the EIGRP domain. Which set of configuration changes removes the EIGRP routes from the R5 routing table to fix the issue?

   • AR4 route-map O2R deny 10 match tag 111 route-map O2R permit 20 ! router rip redistribute ospf 1 route-map O2R metric 1
   • BR2 route-map E20 deny 20 R4 route-map O2R deny 10 match tag 111 ! router rip redistribute ospf 1 route-map O2R metric 1
   • CR4 route-map O2R permit 10 match tag 111 route-map O2R deny 20 ! router rip redistribute ospf 1 route-map O2R metric 1
   • DR4 route-map O2R deny 10 match tag 111 ! router rip redistribute ospf 1 route-map O2R metric 1

   Show answer

   Answer: A

   Explanation

   A is the answer Explanation In this question, routes from EIGRP domain are redistributed into OSPF (with tag 111) then RIPv2 but without any filtering so R5 learns all routes from both EIGRP and OSPF domain. If we only want R5 to learn routes from OSPF domain then we must filter out routes with tag 111 and permit other routes. The line “route-map O2R permit 20” is important to allow other routes because of the implicit deny all at the end of each route-map

   Source: Adapted from community discussion — ZamanR

   Next question

4. Question 554 · 578 in bank

   Select 2

   

   Refer to the exhibit. The network administrator configured the network to connect two disjointed networks and all the connectivity is up except the virtual link, which causes area 250 to be unreachable.

   

   Which two configurations resolve this issue? (Choose two.)

   • AR2 router ospf 1 no area 234 virtual-link 10.34.34.4 area 234 virtual-link 0.0.0.44
   • BR2 router ospf 1 no area 234 virtual-link 10.34.34.4 area 0 virtual-link 0.0.0.44
   • CR4 router ospf 1 no area 234 virtual-link 10.23.23.2 area 0 virtual-link 0.0.0.22
   • DR2 router ospf 1 router-id 10.23.23.2
   • ER4 router ospf 1 no area 234 virtual-link 10.23.23.2 area 234 virtual-link 0.0.0.22

   Show answer

   Answer: AE

   Explanation

   AE Reference: https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13703-8.html An important thing to remember when configuring virtual-link is we need to configure the OSPF router ID and NOT the IP address of the ABR. Therefore in this question we have to use the command “area 234 virtual-link 0.0.0.44” on R2 and “area 234 virtual-link 0.0.0.22” on R4.

   Source: Adapted from community discussion — ZamanR

   References

   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 555 · 578 in bank

   

   Refer to the exhibit. A network administrator sets up an OSPF routing protocol for a DMVPN network on the hub router.

   

   Which configuration command is required to establish a DMVPN tunnel with multiple spokes?

   • Aip ospf network point-to-point on the hub router
   • Bip ospf network point-to-multipoint on one spoke router
   • Cip ospf network point-to-multipoint on both spoke routers
   • Dip ospf network point-to-point on both spoke routers

   Show answer

   Answer: C

   Explanation

   This is how I see it: The issue "Tunnel100 from EXCHANGE to DOWN, Neighbor Down: Adjacency forced to reset" is caused by OSPF default network type p2p. There is a different solution per DMVPN Phase. OSPF network type broadcast is suitable for phase 1 and 2, whereas point-to-multipoint is suitable for Phase3. We can exclude answers with p2p, like A and D. The solution needs to be applied on all spokes, so answer C is fitting best. https://community.cisco.com/t5/routing/help-with-ospf-and-dmvpn/td-p/2107338/page/2 https://networklessons.com/cisco/ccie-routing-switching/dmvpn-phase-1-ospf-routing

   Source: Adapted from community discussion — HungarianDish_111

   References

   • cisco.com documentation
   • cisco.com documentation

   Next question

6. Question 556 · 578 in bank

   

   Refer to the exhibit. The Internet traffic should always prefer Site-A ISP-1 if the link and BGP connection are up; otherwise, all Internet traffic should go to ISP-2. Redistribution is configured between BGP and OSPF routing protocols, and it is not working as expected. What action resolves the issue?

   • ASet OSPF Cost 200 at Site-A RTR1, and set OSPF Cost 100 at Site-B RTR2.
   • BSet metric-type 2 at Site-A RTR1, and set metric-type 1 at Site-B RTR2.
   • CSet metric-type 1 at Site-A RTR1, and set metric-type 2 at Site-B RTR2.
   • DSet OSPF Cost 100 at Site-A RTR1, and set OSPF Cost 200 at Site-B RTR2.

   Show answer

   Answer: C

   Explanation

   The order of preference for OSPF as per RFC 2328 is : intra-area routes, O interarea routes, O IA external routes type 1, O E1 external routes type 2, O E2 This rule of preference cannot be changed.

   Source: Adapted from community discussion — louisvuitton12

   Next question

7. Question 557 · 578 in bank

   

   Refer to the exhibit. An engineer has configured R1 as EIGRP stub router. After the configuration, router R3 failed to reach to R2 loopback address. Which action advertises R2 loopback back into the R3 routing table?

   • AAdd a static route for R2 loopback address in R1 and redistribute it to advertise to R3.
   • BUse a leak map on R1 that matches the required prefix and apply it with the distribute list command toward R3.
   • CUse a leak map on R3 that matches the required prefix and apply it with the EIGRP stub feature.
   • DAdd a static null route for R2 loopback address in R1 and redistribute it to advertise to R3.

   Show answer

   Answer: B

   Explanation

   Answer is B - as I lab it. I was thinking it was another answer but the lab pointed me to the right direction. ip access-list standard R2LO permit 2.2.2.2 ! route-map R2LO_LEAK permit 10 match ip address R2LO ! router eigrp 1 network 1.1.1.1 0.0.0.0 network 192.168.12.0 network 192.168.13.0 eigrp stub connected summary leak-map R2LO_LEAK

   Source: Adapted from community discussion — TECH3K3

   References

   • cisco.com documentation
   • cisco.com documentation

   Next question

8. Question 558 · 578 in bank

   Refer to the exhibit. An engineer is trying to block the route to 192.168.2.2 from the routing table by using the configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?

   

   • AUse an extended access list instead of a standard access list.
   • BChange sequence 10 in the route-map command from permit to deny.
   • CUse a prefix list instead of an access list in the route map.
   • DAdd this statement to the route map: route-map RM-OSPF-DL deny 20.

   Show answer

   Answer: B

   Explanation

   B is correct. Dont know how to explain it well but here it goes. With the ACL you permit the network or host you want. with Route-map it will process the match clause and do what you configured the route-map either permit or deny the route. in the question the route map is permitting the network 192.168.2.2 as its permited to by the permit statement in the ACL. if we change the route-map to deny. It will deny network 192.168.2.2 becuase again its permitted by the ACL to process it and do what the route-map is configured to do which will deny it from showing in the routing table. ACLs are configured with permit to have the networks or hosts to be processed by the route-map. config ip access-list standard 1 permit host 192.168.2.2 (implicit deny any is added at the end of the ACL by default) route-map RM-OSPF-DL deny 10 match ip address 1 this will process 192.168.2.2 due to the (ACL permit) statement and deny it (through the route-map deny) statement while all other traffic is allowed by the (ACL) implicit deny statement hope that makes sense

   Source: Adapted from community discussion — networkWiz

   Next question

9. Question 559 · 578 in bank

   R1 and R2 are configured as eBGP neighbors. R1 is in AS100 and R2 is in AS200. R2 is advertising these networks to R1: 172.16.16.0/20 172.16.3.0/24 172.16.4.0/24 192.168.1.0/24 192.168.2.0/24 172.16.0.0/16 The network administrator on R1 must improve convergence by blocking all subnets of 172.16.0.0/16 major network with a mask lower than 23 from coming in. Which set of configurations accomplishes the task on R1?

   • Aip prefix-list PL-1 deny 172.16.0.0/16 ge 23 ip prefix-list PL-1 permit 0.0.0.0/0 le 32 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in
   • Bip prefix-list PL-1 deny 172.16.0.0/16 le 23 ip prefix-list PL-1 permit 0.0.0.0/0 le 32 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in
   • Cip prefix-list PL-1 deny 172.16.0.0/16 ip prefix-list PL-1 permit 0.0.0.0/0 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in
   • Daccess-list 1 deny 172.16.0.0 0.0.254.255 access-list 1 permit any ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 distribute-list 1 in

   Show answer

   Answer: B

   Explanation

   To block all subnets of 172.16.0.0/16 with a mask lower than 23 from coming in on R1, you can use either a prefix-list or an access list. Let's evaluate the provided options: A. This option uses a prefix-list and denies subnets of 172.16.0.0/16 with a mask greater than or equal to 23. This is incorrect because you want to block subnets with a mask lower than 23. B. This option uses a prefix-list and denies subnets of 172.16.0.0/16 with a mask less than or equal to 23. This is the correct option because it matches the requirement. C. This option uses a prefix-list but doesn't specify the mask length in the deny statement, so it would not block any specific subnets within 172.16.0.0/16. D. This option uses an access list but denies subnets of 172.16.0.0/16 with a mask of 0.0.254.255, which is not the correct mask to block subnets with a mask lower than 23. So, the correct configuration is option B

   Source: Adapted from community discussion — chris110

   Next question

10. Question 560 · 578 in bank

    

    Refer to the exhibit. An engineer configures the router 10.1.100.10 for EIGRP autosummarization so that R1 should receive the summary route of 10.0.0.0/8. However, R1 receives more specific /24 routes. Which action resolves this issue?

    • ARouter R1 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.
    • BRouter R1 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are received on R1.
    • CRouter 10.1.100.10 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are summarized toward R1.
    • DRouter 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

    Show answer

    Answer: D

    Explanation

    EIGRP with auto-summary turned on, will not auto-summarize external routes, or routes learned from another router. It only summarizes locally injected internal routes. The summary is only generated at the major network boundary. For example, if there is 10.10.10.0/24 locally injected (with network statement) in the EIGRP, but the transit link to the EIGRP neighbor is in 10.0.0.0/24, then the 10.0.0.0/8 summary is not generated.

    Source: Adapted from community discussion — Huntkey

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 551. 578 questions available.