Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)578 questions across 58 pages are complete and free, with no account or card.
578 questions in this bank
Free access · progress saved on this device
Refer to the exhibit. A client is concerned that passwords are visible when running this show archive log config all. Which router configuration is needed to resolve this issue?
Answer: D
Read the statement carefully. We are not talking about the "show run" (where passwords are not in plain-text) but about the "show archive log config all" (where passwords are visible). Answer is D.
Source: Adapted from community discussion — Mjestic
Refer to the exhibit. BGP is flapping after the CoPP policy is applied. What are the two solutions to fix the issue? (Choose two.)
Answer: BC
Not Necessary. COPP-CRITICAL-7600 is configured as; confirm - transmit exceed - transmit Meaning traffic is never dropped, regardless of how high, or low, the CIR is configured as. Question is asking for 2 different solutions, NOT 2 elements of the same solution. If the engineer does not want to add BGP to COPP-CRITICAL-7600, another solution is to increase the CIR of class-default, so as to reduce the chances that traffic is dropped, including BGP.
Source: Adapted from community discussion — JingleJangus
What are two functions of IPv6 Source Guard? (Choose two.)
Answer: BC
Ref: IPv6 Source Guard and Prefix Guard – Cisco “… Information About IPv6 Source Guard and Prefix Guard IPv6 Source Guard Overview IPv6 source guard is an interface feature between the populated binding table and data traffic filtering. This feature enables the device to deny traffic when it is originated from an address that is not stored in the binding table. … IPv6 source guard can deny traffic from unknown sources or unallocated addresses, such as traffic from sources not assigned by a DHCP server. …” A. It works independent from IPv6 neighbor discovery. Wrong answer. B. It denies traffic from unknown sources or unallocated addresses. Correct answer. C. It uses the populated binding table to allow legitimate traffic. Correct answer. D. It denies traffic by inspecting neighbor discovery packets for specific patterns. Wrong answer. E. It blocks certain traffic by inspecting DHCP packets for specific sources. Wrong answer.
Source: Adapted from community discussion — [Removed]
Refer to the exhibit. An engineer is troubleshooting BGP on a device but discovers that the clock on the device does not correspond to the time stamp of the log entries. Which action ensures consistency between the two times?
Answer: C
Even we synchronize the clock but it may show different timezone so we should set the “localtime” keyword (which uses local time zone for timestamps) so that the time of logging messages is matched with our clock.
Source: Adapted from community discussion — Pbshah
Refer to the exhibit. Which two actions restrict access to router R1 by SSH? (Choose two.)
Answer: AC
A and C are right. A) ACL 199 match SSH traffic by sequence 50. The class-map match ACL 199 and this class is droping all traffic. if you remove the SSH traffic will match default class and will pass. If you don't permit SSH in ACL 100 it's mandatory remove this class. B) if you configure output ssh you are allowing R1 being the connection's client and i'm not sure if it is desided by the question. but you need to configure SSH input to ssh works and there is no option to do it except option C. C) It works with option A. Mandatory you need to input ssh in the lines vty to allow SSH and this is the unique option you can do it. We don't have the option to include SSH in ACL 100, so we need to remove the class ANY and input the SSH. Option C also removes sequence 30 in ACL 100 and this make the router unable to answer telnet connection. I would prefer to remover sequence 20, but removing sequence 30 also works. D) Does not make sense to me. E) does not make sense either.
Source: Adapted from community discussion — Malasxd
Refer to the exhibit. Which action resolves intermittent connectivity observed with the SNMP trap rackets?
Answer: B
B is right. The firs line says "Service-policy OUTPUT", so the traffic is originated by the router. We also can see the class mgmt has exceeded matches and it is dropping packets. A) does not make sense. the class already dropping packet, if you decrease the CIR it will get even worse. B) is right. The class is dropping the packets because they exceeded the bandwidth. If you increase to the correct bandwidth it will work. C) SNMTP traps works in port 162. D) does not make sense
Source: Adapted from community discussion — Malasxd
DRAG DROP -
Refer to the exhibit. Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are used. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
answers are correct "The command “aaa authentication login default none” means no authentication is required when access to the device via Console/VTY/AUX so if one interface does not specify another login authentication method (via the “login authentication …” command), it will allow to access without requiring username or password. In this case VTY 1 does not specify another authentication login method so it will use the default method (which is “none” in this case)."
Source: Adapted from community discussion — AliMo123
Refer to the exhibit. A network administrator wants to block all traffic toward the Internet after business hours and on weekends. When the administrator applies an access list on interface Gi0/1, all traffic is blocked and there is no access to the Internet at any time. Which action resolves the issue?
Answer: B
Refer to the exhibit. An IPv6 network was newly deployed in the environment, and the help desk reports that R3 cannot SSH to the R2s Loopback interface. Which action resolves the issue?
Answer: C
Line 30 of the ACL denies SSH (port 22) traffic from subnet 2002:ABC:2000::/36 to host 2000:ABC:20:2:2::2 (R2). Here is the problem. A. Modify line 10 of the access list to permit instead of deny. Wrong answer. B. Remove line 60 from the access list. Wrong answer. C. Modify line 30 of the access list to permit instead of deny. Correct answer. D. Remove line 70 from the access list. Wrong answer.
Source: Adapted from community discussion — [Removed]
Refer to the exhibit. An IT staff member comes into the office during normal office hours and cannot access devices through SSH. Which action should be taken to resolve this issue?
Answer: A
I changed my mind, i think it is A. Because C says subnetmask. And i dont think they would use the word subnet mask instead of wildcard mask. For A to be true, we need to know that IT guy`s ip address and use that to correct the ACL
Source: Adapted from community discussion — cakmamail
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-410 practice, question 51. 578 questions available.
Version 1.0.0. How we source questions