The Far Out Guide To 300-410 Training

NEW QUESTION 1

Which control plane process allows the MPLS forwarding state to recover when a secondary RP takes over from a failed primary RP?

• A. MP-BGP uses control plane services for label prefix bindings in the MPLS forwarding table
• B. LSP uses NSF to recover from disruption *i control plane service
• C. FEC uses a control plane service to distribute information between primary and secondary processors
• D. LDP uses SSO to recover from disruption in control plane service

Answer: C

NEW QUESTION 2


Refer to the exhibit. An engineer configured two ASBRs, 10.4.17.6 and 10.4.15.5, in an OSPF network to redistribute identical routes from BGR However, only prefixes from 10.4.17.6 are installed into the routing table on R1. Which action must the engineer take to achieve load sharing for the BGP-originated prefixes?

• A. The ASBRs are advertising the redistributed prefixes with the iBGP metric and must be modified to Type 1 on ASBR 10.4.17.6.
• B. The ASBRs are advertising the redistributed prefixes with a different admin distance and must be changed to 110 on ASBR 10.4.15.5.
• C. The admin distance of the prefixes must be adjusted to 20 on ASBR 10.4.15.5 to advertise prefixes to R1 identically from both ASBRs.
• D. The ASBRs are advertising the redistributed prefixes as Type 1 and must be modified to Type 2

Answer: D

NEW QUESTION 3

Refer to the exhibit.

The network administrator configured the Chicago router to mutually redistribute the LA and NewYork routes with OSPF routes to be summarized as a single route in EIGRP using the longest summary mask:

After the configuration, the New York router receives all the specific LA routes but the summary route. Which set of configurations resolves the issue on the Chicago router?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 4

A network administrator opens a telnet connection to the router and gets the message:
R1#telnet 10.1.1.2
Trying 10 1.1 2 Open
(Connection to 10.1.1.2 closed by foreign host)
Router R2 is configured with enable secret and password commands. Which action resolves the issue?

• A. Configure the logging synchronous command on line vty.
• B. Configure the exec command on line vty.
• C. Configure the login local command on line vty
• D. Configure the enable password command on line vty.

Answer: C

NEW QUESTION 5

Refer to the exhibit.


The network engineer configured the summarization of the RIP routes into the OSPF domain on R5 but
still sees four different 172.16.0.0/24 networks on R4. Which action resolves the issue?

• A. R5(config)#router ospf 1 R5(config-router)#no areaR5(config-router)#summary-address 172.16.0.0 255.255.252.0
• B. R4(config)#router ospf 99R4(config-router)#network 172.16.0.0 0.255.255.255 area 56R4(config-router)#area 56 range 172.16.0.0 255,255.255.0
• C. R4(config)#router ospf 1 R4(config-router)#no areaR4(config-router)#summary-address 172.16.0.0 255.255.252.0
• D. R5(config)#router ospf 99R5(config-router)#network 172.16.0.0 0.255.255.255 area 56R5(config-router)#area 56 range 172.16.0.0 255.255.255.0

Answer: A

Explanation:
Area 36 is a NSSA so R5 is an ASBR so we can summarize external routes using the “summaryaddress” command. The command “area area-id range” can only be used on ABR so it is not correct.
The summarization must be done on the ASBR which is R5, not R4 so the correct answer must be started with “R5(config)#router ospf 1”.
Note: The “no area” command is used to remove any existing “area …” command (maybe “area 56 range …” command).

NEW QUESTION 6

Which Cisco VPN technology can use multipoint tunnel, resulting in a single GRE tunnel interface on the hub, to support multiple connections from multiple spoke devices?

• A. DMVPN
• B. GETVPN
• C. Cisco Easy VPN
• D. FlexVPN

Answer: A

NEW QUESTION 7

Refer to the exhibit.

The output of the trace route from R5 shows a loop in the network. Which configuration prevents this loop?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: A

Explanation:
The reason for the loop is that R2 is forwarding the packets destined to 10.1.1.1 to R4, instead of R1. This is because in the redistribute OSPF statement, BW metric has a higher value and delay has a value of 1. So, R2 chooses R4 over R1 for 10.1.1.0/24 subnet causing a loop. Now, R5 learns 10.1.1.0/24 from R3 and advertises the same route to R4, that R4 redistributes back in EIGRP. If R3 sets a tag of 1 while redistributing EIGRP in OSPF, and R4 denies all the OSPF routes with tag 1 while redistributing, it will not advertise 10.1.1.0/24 back into EIGRP. Hence, the loop will be broken.

NEW QUESTION 8


Refer to the exhibit An engineer is troubleshooting an OSPF adjacency issue between directly connected routers R1 and R2 Which configuration resolves the issue?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 9

Refer to the exhibit.

An engineer must configure a LAN-to-LAN IPsec VPN between R1 and the remote router. Which IPsec Phase 1 configuration must the engineer use for the local router?

• A. crypto isakmp policy 5authentication pre-share encryption 3deshash sha group 2!crypto isakmp key cisco123 address 200.1.1.3
• B. crypto isakmp policy 5 authentication pre-share encryption 3deshash md5 group 2!crypto isakmp key cisco123 address 200.1.1.3
• C. crypto isakmp policy 5 authentication pre-share encryption 3deshash md5 group 2!crypto isakmp key cisco123 address 199.1.1.1
• D. crypto isakmp policy 5 authentication pre-share encryption 3deshash md5group 2!crypto isakmp key cisco123! address 199.1.1.1

Answer: A

Explanation:
In the “crypto isakmp key … address ” command, the address must be of the IP address of the other end (which is 200.1.1.3 in this case) so Option A and Option B are correct. The difference between these two options are in the hash SHA or MD5 method but both of them can be used although SHA is better than MD5 so we choose Option A the best answer.
Note: Cisco no longer recommends using 3DES, MD5 and DH groups 1, 2 and 5.
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_imgmt/configuration/xe-16- 5/sec-ipsec-management-xe-16-5-book/sec-ipsec-usability-enhance.html

NEW QUESTION 10

Refer to the exhibit. An engineer is trying to log in to R1 via R3 loopback address. Which action resolves the issue?

• A. Add transport input SCP
• B. Add transport input none
• C. Remove the IPv6 traffic filter from R1, which is blocking the Telnet.
• D. Remove the IPv6 traffic from R1, which is blocking the SSH

Answer: C

NEW QUESTION 11

Refer to the exhibit.

An engineer configured NetFlow to capture traffic information through the router, but it iOS not working as expected. Which action captures the flow information from this router to the collector?

• A. Change the interface configuration FLOW-MONITOR-1 from input to output.
• B. Configure a flow exporter under flow FLOW-MONITOR-1.
• C. Configure more than one flow exporter destination addresses.
• D. Change the flow exporter transport protocol from UDP to TCP

Answer: B

NEW QUESTION 12

Refer to the exhibit.

The security department recently installed a monitoring device between routers R3 and R5, which a loss of network connectivity for users connected to R5. Troubleshooting revealed that the monitoring device cannot forward multicast packets. The team already updated R5 with the correct configuration. Which configuration must be implemented on R3 to resolve the problem by ensuring R3 as the DR for the R3-R5 segment?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 13


Refer to the exhibit. A customer reports that networks in the 10.0.1.0/24 space do not appear in the RIP database. What action resolves the issue?

• A. Remove summarization of 10.0.0.078.
• B. Permit 10.0.1.0/24 address in the ACL.
• C. Remove ACL on R1 blocking 10.0.1.0/24 network.
• D. Configure 10.0.1.0/24 network under RIP.

Answer: A

NEW QUESTION 14


Refer to me exhibit. The hub and spoke are connected via two DMVPN tunnel interfaces The NHRP is configured and the tunnels are detected on the hub and the spoke Which configuration command adds an IPsec profile on both tunnel interfaces to encrypt traffic?

• A. tunnel protection ipsec profile DMVPN multipoint
• B. tunnel protection ipsec profile DMVPN tunnel1
• C. tunnel protection ipsec profile DMVPN shared
• D. tunnel protection ipsec profile DMVPN unique

Answer: C

NEW QUESTION 15


Refer to the exhibit. Which configuration command establishes an EIGRP neighbor adjacency between the hub and spoke?

• A. connected 10.1.2.192 command on spoke router
• B. network 10.1.2.192 command on spoke router
• C. eigrp-peer 10.1.2.192 command on the hub router
• D. neighbor 10.1.2.192 command on hub router

Answer: D

NEW QUESTION 16

Refer to the exhibit.

An engineer wanted to set a tag of 30 to route 10 1.80.65/32 but it failed How is the issue fixed?

• A. Modify route-map ospf-to-eigrp permit 30 and match prefix-list ccnp2.
• B. Modify route-map ospf-to-eigrp permit 10 and match prefix-list ccnp2.
• C. Modify prefix-list ccnp3 to add 10.1.64.0/20 le 24
• D. Modify prefix-list ccnp3 to add 10.1.64.0/20 ge 32

Answer: B

NEW QUESTION 17

Refer to the exhibit.


An engineer is troubleshooting a failed Telnet session from PC to the DHCP server. Which action resolves the issue?

• A. Remove sequence 30 and add it back to the IPv6 traffic filter as sequence 5.
• B. Remove sequence 20 and add it back to the IPv6 traffic filter as sequence 5.
• C. Remove sequence 10 to add the PC source IP address and add it back as sequence 10.
• D. Remove sequence 20 for sequence 40 in the access list to allow Telnet.

Answer: B

NEW QUESTION 18

Refer to the exhibit.

The static route is not present in the routing table of an adjacent OSPF neighbor router. Which action resolves the issue?

• A. Configure the next hop of 10.20.20.1 in the prefix list DMZ-STATIC
• B. Configure the next-hop interface at the end of the static router for it to get redistributed
• C. Configure a permit 20 statement to the route map to redistribute the static route
• D. Configure the subnets keyword in the redistribution command

Answer: D

NEW QUESTION 19

An engineer configured Reverse Path Forwarding on an interface and noticed that the routes are dropped when a route lookup fails on that interface for a prefix that is available in the routing table Which interface configuration resolves the issue?

• A. ip verify unicast source reachable-via rx
• B. ip verify unicast source reachable-via any
• C. ip verify unicast source reachable-via allow-default
• D. ip verify unicast source reachable-via 12-src

Answer: B

Explanation:
According to this question, uRPF is running in strict mode because packets are dropped even when that route exists in the routing table. Maybe packets are dropped because the receiving interface is different from the interface the local router uses to send packets to that destination. The ip verify unicast source reachable-via rx command enables Unicast RPF in strict mode. To enable loose mode, administrators can use the any option (ip verify unicast source reachable-via any). In loose mode, it doesn’t matter if we use this interface to reach the source or not.

The allow-default option allows the use of the default route in the source verification process.

NEW QUESTION 20

Which method provides failure detection in BFD?

• A. short duration, high overhead
• B. short duration, low overhead
• C. long duration, high overhead
• D. long duration, low overhead

Answer: B

NEW QUESTION 21
......