300-410 practice questions 81–90

1. Question 81 · 578 in bank

   An engineer configured the wrong default gateway for the Cisco DNA Center enterprise interface during the install. Which command must the engineer run to correct the configuration?

   • Asudo maglev-config update
   • Bsudo maglev install config update
   • Csudo maglev reinstall
   • Dsudo update config install

   Show answer

   Answer: A

   Explanation

   Literally the book even says so: "Cisco DNA Center is a massive topic that is beyond the scope of the ENARSI exam. The official exam objectives for ENARSI state that you should be able to “troubleshoot network problems using Cisco DNA Center Assurance (connectivity, monitoring, device health, network health).” Therefore, this section remains focused on this objective." Cisco has some horrible team making these exams.

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation

   Next question

2. Question 82 · 578 in bank

   DRAG DROP - Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPv3 categories on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Imho, the given answer is correct. Users only come with SNMPv3, until that just community strings. SNMPv2 -> we can set read-only or read-write. https://study-ccna.com/snmpv3-overview-configuration/ https://networklessons.com/cisco/ccnp-encor-350-401/how-to-configure-snmpv3-on-cisco-ios-router https://www.examguides.com/Retired/ccna/200-125/cisco-ccna-50.htm https://www.youtube.com/watch?v=hP5yA3hJlAc https://www.youtube.com/watch?v=9Vx16VqzS8c

   Source: Adapted from community discussion — HungarianDish_111

   

   Next question

3. Question 83 · 578 in bank

   

   Refer to the exhibit. An administrator that is connected to the console does not see debug messages when remote users log in. Which action ensures that debug messages are displayed for remote logins?

   • AEnter the transport input ssh configuration command.
   • BEnter the terminal monitor exec command.
   • CEnter the logging console debugging configuration command.
   • DEnter the aaa new-model configuration command.

   Show answer

   Answer: D

   Explanation

   Hold up. Let's look into this. A isn't going to do anything for this problem. B Term Mon is ONLY to display (shunt/pipe) console messages TO VTY LINES. Since we're connected to the Console, this will have no effect. C Logging Console Debugging command was already entered... Logging Console 7 is the same command, you can use the severity level (0-7) or you can use the fancy name (debug, err, info...). They have the same effect. https://learningnetwork.cisco.com/s/question/0D53i00000Kt78L/no-logging-console-vs-no-logging-console-debug D This IS a requirement to see AAA debug messages, there's nothing that indicates it's been entered yet, although the show run command would filter it out if it were already entered. But it's still the most likely candidate. Answer is D.

   Source: Adapted from community discussion — Alnet

   References

   • cisco.com documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

4. Question 84 · 578 in bank

   Select 2

   

   Refer to the exhibit. Network operations cannot read or write any configuration on the device with this configuration from the operations subnet. Which two configurations fix the issue? (Choose two.)

   • AConfigure SNMP rw permission in addition to community ciscotest.
   • BModify access list 1 and allow operations subnet in the access list.
   • CModify access list 1 and allow SNMP in the access list.
   • DConfigure SNMP rw permission in addition to version 1.
   • EConfigure SNMP rw permission in addition to community ciscotest 1.

   Show answer

   Answer: BE

   Explanation

   For me A and B is correct. Setup SNMP Community with access-list The best current practices recommend applying Access Control Lists (ACLs) to community strings and ensuring that the requests community strings are not identical to notifications community strings. Access lists provide further protection when used in combination with other protective measures. This example sets up ACL to community string: access-list 1 permit 1.1.1.1 snmp-server community string1 ro 1 Ref: https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/20370-snmpsecurity-20370.html

   Source: Adapted from community discussion — anonymous1966

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 85 · 578 in bank

   

   Refer to the exhibit. Why is the remote NetFlow server failing to receive the NetFlow data?

   • AThe flow exporter is configured but is not used.
   • BThe flow monitor is applied in the wrong direction.
   • CThe flow monitor is applied to the wrong interface.
   • DThe destination of the flow exporter is not reachable.

   Show answer

   Answer: A

   Explanation

   A is correct flow exporter EXPORTER-1 destination 172.16.10.2 transport udp 90 exit flow monitor FLOW-MONITOR-1 record netflow ipv4 original-input exporter EXPORTER-2 exporter EXPORTER-1 https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-mt/fnf-15-mt-book/cfg-de-fnflow-exprts.html

   Source: Adapted from community discussion — CraigB83

   References

   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 86 · 578 in bank

   

   Refer to the exhibit. An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R1 as the primary default gateway. When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192.168.20.0/24. Which configuration resolves the issue?

   • AHQ_R3(config)# ip sla responder HQ_R3(config)# ip sla responder icmp-echo 172.16.35.1
   • BBRANCH(config)# ip sla 1 BRANCH(config-ip-sla)# icmp-echo 192.168.100.2
   • CHQ_R3(config)# ip sla responder HQ_R3(config)# ip sla responder icmp-echo 172.16.35.5
   • DBRANCH(config)# ip sla 1 BRANCH(config-ip-sla)# icmp-echo 192.168.100.1

   Show answer

   Answer: D

   Next question

7. Question 87 · 578 in bank

   

   Refer to the exhibit. Which subnet is redistributed from EIGRP to OSPF routing protocols?

   • A10.2.2.0/24
   • B10.1.4.0/26
   • C10.1.2.0/24
   • D10.2.3.0/26

   Show answer

   Answer: A

   Explanation

   A is correct. B, C and D would get blocked because what matters is the permit statement in the route map, and it only allows IPs/networks that fit inside this range: 10.2.0.0/18 and that has a subnet mask of 24 or lower. B and C are not within the range (since they have 10.1 in them) and 10.2.3.0/26 has a subnet mask longer than 24.

   Source: Adapted from community discussion — bf10690

   Next question

8. Question 88 · 578 in bank

   An engineer configured a DHCP server for Cisco IP phones to download its configuration from a TFTP server, but the IP phones failed to load the configuration. What must be configured to resolve the issue?

   • ABOOTP port 67
   • BDHCP option 66
   • CBOOTP port 68
   • DDHCP option 69

   Show answer

   Answer: B

   Explanation

   B is correct. : DHCP option 150 provides the IP addresses of a list of TFTP servers. DHCP option 66 gives the IP address or the hostname of a single TFTP server. https://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/basic_dhcp.html

   Source: Adapted from community discussion — inteldarvid

   References

   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 89 · 578 in bank

   

   Refer to the exhibit. The remote server is failing to receive the NetFlow data. Which action resolves the issue?

   • AModify the flow transport command transport udp 2055 to move under flow monitor profile.
   • BModify the interface command to ip flow monitor FLOW-MONITOR-1 input.
   • CModify the udp port under flow exporter profile to ip transport udp 4739.
   • DModify the flow record command record v4_r1 to move under flow exporter profile.

   Show answer

   Answer: B

   Next question

10. Question 90 · 578 in bank

    

    Refer to the exhibit. A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source. The configuration did not work as desired. Which service must be enabled to resolve the issue?

    • AEnter the service timestamps log datetime clock-period global command.
    • BEnter the service timestamps log datetime synchronize global command.
    • CEnter the service timestamps log datetime console global command.
    • DEnter the service timestamps log datetime localtime global command.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-410 practice, question 81. 578 questions available.