What Certified 300-410 Free Download Is

NEW QUESTION 1

Refer to the exhibit.

The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host 192.168.10.10 cannot SSH to host 192.168.100.10 even though the flow is permitted. Which action resolves the issue without opening full access to this router?

• A. Move the SSH entry to the beginning of the ACL
• B. Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works
• C. Temporarily remove the ACL from the interface to see if the flow works
• D. Run the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it

Answer: A

NEW QUESTION 2



Refer to the exhibit. An engineer applied filter on R1 The interface flapped between R1 and R2 and cleaning the BGP session did not restore the BGP session and failed Which action must the engineer take to restore the BGP session from R2 to R1?

• A. Apply the IPv6 traffic filter in the outbound direction on the interface
• B. ICMPv6 must be permitted by the IPv6 traffic filter
• C. Enable the BGP session, which went down when the session was cleared.
• D. Swap the source and destination IP addresses in the IPv6 traffic filter

Answer: B

NEW QUESTION 3

Users report issues with reachability between areas as soon as an engineer configured summary routes between areas in a multiple area OSPF autonomous system. Which action resolves the issue?

• A. Configure the summary-address command on the ASBR.
• B. Configure the summary-address command on the ABR.
• C. Configure the area range command on the ABR.
• D. Configure the area range command on the ASBR.

Answer: C

Explanation:
For OSPF, we can only summary at the ABR with the command “area range” or at the ASBR with the
command “summary-address” -> Therefore answer A and answer B are not correct.
In this question, the most likely problem is that when doing summarization, the network mask is configured wrong and summarization doesn’t work because of the misconfiguration. When configuring the area range command, make sure that the summarization mask is in the form of a prefix mask rather than a wildcard mask (that is, 255.255.255.0 instead of 0.0.0.255).
Good reference: https://www.configrouter.com/troubleshooting-route-summarization-ospf-14082/

NEW QUESTION 4

Refer to the exhibit.

While troubleshooting a BGP route reflector configuration, an engineer notices that reflected routes are missing from neighboring routers. Which two BGP configurations are needed to resolve the issue? (Choose two)

• A. neighbor 10.1.1.14 route-reflector-client
• B. neighbor R2 route-reflector-client
• C. neighbor 10.1.1.2 allowas-in
• D. neighbor R4 route-reflector-client
• E. neighbor 10.1.1.2 route-reflector-client

Answer: AE

NEW QUESTION 5

The network administrator must implement IPv6 in the network to allow only devices that not only have registered IP addresses but are also connecting from assigned locations. Which security feature must be implemented?

• A. IPv6 Snooping
• B. IPv6 Destination Guard
• C. IPv6 Prefix Guard
• D. IPv6 Router Advertisement Guard

Answer: A

NEW QUESTION 6

Refer to the exhibit.

An engineer receives this error message when trying to access another router in-band from the serial interface connected to the console of R1. Which configuration is needed on R1 to resolve this issue?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: D

Explanation:
https://community.cisco.com/t5/other-network-architecture/out-of-band-router-access/td-p/333295 The “transport output none” command prevents any protocol connection made from R1. Therefore our SSH connection to 192.168.12.2 was refused. In order to fix this problem we can configure “transport output ssh” under “line console 0” of R1.
Note: The parameter “-l” specifies the username to log in as on the remote machine.

NEW QUESTION 7

An engineer creates a Cisco DNA Center cluster with three nodes, but all the services are running on one host node. Which action resolves this issue?

• A. Restore the link on the switch interface that is connected to a cluster link on the Cisco DNA Center
• B. Click the master host node with all the services and select services to be moved to other hosts
• C. Enable service distribution from the Systems 360 page.
• D. Click system updates, and upgrade to the latest version of Cisco DNA Center.

Answer: C

Explanation:
To deploy Cisco DNA Center on a three-node cluster with High Availability (HA) enabled, complete the following procedure:
Step 1: Configure Cisco DNA Center on the first node in your cluster… Step 2: Configure Cisco DNA Center on the second node in your cluster… Step 3: Configure Cisco DNA Center on the third node in your cluster… Step 4: Enable high availability on your cluster:
* a. In the Cisco DNA Center GUI, click and choose System Settings. The System 360 tab is displayed
by default.
* b. In the Hosts area, click Enable Service Distribution.
After you click Enable Service Distribution, Cisco DNA Center enters into maintenance mode. In this mode, Cisco DNA Center is unavailable until the redistribution of services is completed. You should take this into account when scheduling an HA deployment.
Reference: https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automationand- management/dna-center/1-3-3-0/ha_guide/b_cisco_dna_center_ha_guide_1_3_3_0.html
Therefore we can choose “Enable Service Distribution” to distribute services to other host nodes.

NEW QUESTION 8



Refer to the exhibit R2 has been receiving routes from R4 that originated outside AS300 A network engineer configured an AS-Path ACL to avoid adding these routes to the R2 BGP table but the routes are still present in the R2 routing table Which action resolves the issue?

• A. Replace as-path access-list 1 with the ip as-path access-list 1 permit A300$ command
• B. Replace as-path access-list 1 with the ip as-path access-list 1 permit ..300." command
• C. Replace as-path access-list 1 with the ip as-path access-list 1 permit A300_ command.
• D. Replace as-path access-list 1 with the ip as-path access-list 1 permit A300." command

Answer: B

NEW QUESTION 9

Refer to the exhibit.

TCP traffic should be reaching host 10.10.10.10/24 via R2. Which action resolves the issue?

• A. TCP traffic will reach the destination via R2 without any changes
• B. Add a permit 20 statement in the route map to allow TCP traffic
• C. Allow TCP in the access list with no changes to the route map
• D. Set IP next-hop to 10.10.12.2 under the route-map permit 10 to allow TCP traffic.

Answer: C

NEW QUESTION 10

Which two labet distribution methods are used by routers in MPLS? (Choose two )

• A. targeted hello message
• B. LDP discovery hello message
• C. LDP session protection message
• D. downstream unsolicited
• E. downstream on demand

Answer: DE

NEW QUESTION 11

Refer to the exhibit.

An administrator is configuring a GRE tunnel to establish an EIGRP neighbor to a remote router. The other tunnel endpoint is already configured. After applying the configuration as shown, the tunnel started flapping. Which action resolves the issue?

• A. Stop sending a route matching the tunnel destination across the tunnel.
• B. Modify the network command to use the Tunne10 Interface netmask.
• C. Advertise the Loopback0 interface from R2 across the tunnel.
• D. Readdress the IP network on the Tunne10 on both routers using the /31 netmask.

Answer: A

NEW QUESTION 12

The network administrator is tasked to configure R1 to authenticate telnet connections based on Cisco ISE using RADIUS. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing towards R1 (192.168.1.1) with a shared secret password of Cisco123. If ISE is down, the administrator should be able to connect using the local database with a username and password combination of admin/cisco123.
The administrator has configured the following on R1:

ISE has gone down. The Network Administrator is not able to Telnet to R1 when ISE went down. Which two configuration changes will fix the issue? (Choose two.)

• A. Option A
• B. Option B
• C. Option C
• D. Option D
• E. Option E

Answer: CE

NEW QUESTION 13



Refer to the exhibit. An engineer implemented an access list on R1 to allow anyone to Telnet except R2 Loopback0 to R1 Loopback4 How must sequence 20 be replaced on the R1 access list to resolve the issue?

• A. sequence 20 permit tcp host 1001 ABC:2011:7:: 1 host 400A:0:400C::1 eq telnet
• B. sequence 20 deny tcp host 400A:0:400C::1 host 1001 :ABC:2011:7::1 eq telnet
• C. sequence 20 deny tcp host 1001:ABC:2011:7::1 host 400A:0:400C::1 eq telnet
• D. sequence 20 permit tcp host 400A:0:400C::1 host 1001ABC:2011:7::1 eq telnet

Answer: C

NEW QUESTION 14



Refer to the exhibit Users from the 192 168.2.0/24 network cannot connect to the 172.16 2 32/28 network Which configuration resolves the issue'?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: A

NEW QUESTION 15

Refer to the exhibit.

While troubleshooting an EIGRP neighbor adjacency problem, the network engineer notices that the interface connected to the neighboring router is not participating in the EIGRP process. Which action resolves the issues?

• A. Configure the network command to network 172.16.0.1 0.0.0.0
• B. Configure the network command under EIGRP address family vrf CLIENT1
• C. Configure EIGRP metrics on interface FastEthernet0/3
• D. Configure the network command under EIGRP address family ipv4

Answer: B

Explanation:
router eigrp 1
!
address-family ipv4 vrf CLIENT1 network 172.16.0.0 0.0.0.255
no auto-summary autonomous-system 1 exit-address-family

NEW QUESTION 16

What does the PE router convert the Ipv4 prefix to within an MPLS VPN?

• A. VPN-IPv4 prefix combined with the 64-bit route distinguisher
• B. 48-bit route combining the IP and PE router-id
• C. prefix that combines the ASN, PE router-id, and IP prefix
• D. eBGP path association between the PE and CE sessions

Answer: A

Explanation:

NEW QUESTION 17

Which two protocols work in the control plane of P routers across the MPLS cloud? (choose two)

• A. LSP
• B. RSVP
• C. ECMP
• D. LDP
• E. MPLS OAM

Answer: BD

NEW QUESTION 18

Refer to the exhibit.

Which action restores OSPF adjacency between R1 and R2?

• A. Change the IP MTU of R1 Fa1/0 to 1300
• B. Change the IP MTU of R2 Fa0/0 to 1300
• C. Change the IP MTU of R1 Fa1/0 to 1500
• D. Change the IP MTU of R2 Fa0/0 to 1500

Answer: D

NEW QUESTION 19

An engineer configures PBR on R5 and wants to create a policy that matches traffic destined toward 10.10.10.0/24 and forward 10.1.1.1. The traffic must also have its IP precedence set to 5.All other traffic should be forward toward 10.1.1.2 and have its IP precedence set to 0.Which configuration meets the
requirements?

• A. access-list 1 permit 10.10.10.0 0.0.0.255 access-list 2 permit anyroute-map CCNP permit 10 match ip address 1set ip next-hop 10.1.1.1 set ip precedence 5!route-map CCNP permit 20 match ip address 2set ip next-hop 10.1.1.2set ip precedence 0route-map CCNP permit 30
• B. access-list 100 permit ip any 10.10.10.0 0.0.0.255 route-map CCNP permit 10match ip address 100 set ip next-hop 10.1.1.1 set ip precedence 0!route-map CCNP permit 20 set ip next-hop 10.1.1.2set ip precedence 5!route-map CCNP permit 30
• C. access-list 1 permit 10.10.10.0 0.0.0.255 route-map CCNP permit 10match ip address 1set ip next-hop 10.1.1.1 set ip precedence 5!route-map CCNP permit 20 set ip next-hop 10.1.1.2set ip precedence 0
• D. access-list 100 permit ip any 10.10.10.0 0.0.0.255 route-map CCNP permit 10match ip address 100 set ip next-hop 10.1.1.1 set ip precedence 5!route-map CCNP permit 20 set ip next-hop 10.1.1.2set ip precedence 0

Answer: D

NEW QUESTION 20


Refer to the exhibit. An engineer configured NetFlow on R1, but the flows do not reach the NMS server from R1. Which configuration resolves this Issue?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 21
......