[Aug-2021] 300-410 Pre-Exam Practice Tests | Exam Questions and Answers for CCNP Enterprise Study Guide
Implementing Cisco Enterprise Advanced Routing and Services Certification Sample Questions
NEW QUESTION 41
Exhibit:
BGP is flapping after the Copp policy is applied. What are the two solutions to fix the issue?
(Choose two)
- A. Configure a higher value for CIR under the class COPP-CRITICAL-7600
- B. Configure a three-color policer instead of two-color policer under class COPP-CRITICAL-7600
- C. Configure IP CEF to CoPP policy and BGP to work
- D. Configure a higher value for CIR under the default class to allow more packets during peak traffic
- E. Configure BGP in the COPP-CRITICAL-7600 ACL
Answer: D,E
Explanation:
The policy-map COPP-7600 only rate-limit HTTP & HTTPS traffic (based on the ACL conditions) so any BGP packets will be processed in the class "class-default", which drops exceeded BGP packets. Therefore we have two ways to solve this problem:
+ Add BGP to the ACL with the statement "permit tcp any any eq bgp"
+ Configure higher value for CIR in default class as 2Mbps is too low for web traffic (http &
https)
NEW QUESTION 42
Refer to the exhibit.
An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?
- A. crypto key generate rsa
- B. no ip ssh disable
- C. ip ssh version 2
- D. ip ssh enable
Answer: A
NEW QUESTION 43
An engineer configured a company's multiple area OSPF head office router and Site A cisco routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone.
After finishing both site router configurations, none of the LSA 3,4 5, and 7 are installed at Site A router.
Which configuration resolves this issue?
- A. configure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc
- B. configure capability vrf-lite on Head Office and its connected PE router under router ospf 1 vrf abc
- C. configure capability vrf-lite on both PE routers connected to Head Office and Site A routers under routtr ospf 1 vrf abc
- D. configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc
Answer: C
NEW QUESTION 44
Drag and drop the MPLS terms from the left onto the correct definitions on the right.
Answer:
Explanation:
NEW QUESTION 45
Refer to the exhibit.
A user cannot SSH to the router. What action must be taken to resolve this issue?
- A. Configure ip ssh source-interface loopback0
- B. Configure transport input ssh
- C. Configure ip ssh version 2
- D. Configure transport output ssh
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us
/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x
NEW QUESTION 46
Refer to the exhibit.
Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are used
Answer:
Explanation:
Explanation
vty 0:
+ cisco
+ 0csic
vty 1:
+ no username
+ no password
The command "aaa authentication login default none" means no authentication is required when access to the device via Console/VTY/AUX so if one interface does not specify another login authentication method (via the "login authentication ..." command), it will allow to access without requiring username or password. In this case VTY 1 does not specify another authentication login method so it will use the default method (which is "none" in this case).
NEW QUESTION 47
When determining if a system is capable of support, what is the minimum time spacing required for a BFD control packet to receive once a control packet is arrived?
- A. Detect Mult
- B. Required Min RX Interval
- C. Required Min Echo RX Interval
- D. Desired Min TX Interval
Answer: B
NEW QUESTION 48
Refer to the exhibit.
Which statement about R1 is true?
- A. RIP routes are redistributed to OSPF without any changes
- B. R1 adds one to the metric for RIP learned routes before redistributing to OSPF
- C. RIP learned routes are distributed to OSPF with a tag value of one
- D. OSPF redistributes RIP routes only if they have a tag of one
Answer: C
NEW QUESTION 49
Refer to Exhibit.
Which statement about redistribution from BGP into OSPF process 10 is true?
- A. Network 172.16.1.0/24 is redistributed with administrative distance of 1.
- B. Network 172.16.1.0/24 is not redistributed into OSPF.
- C. Network 10.10.10.0/24 is redistributed with administrative distance of 20.
- D. Network 10.10 10.0/24 is not redistributed into OSPF
Answer: B
NEW QUESTION 50
Refer to the exhibit.
An IP SLA is configured to use the backup default route when the primary is down, but it is not working as desired. Which command fixes the issue?
- A. R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2
- B. R1(config)#ip sla track 1
- C. R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2 10 track 1
- D. R1(config)# ip route 0.0.0.0.0.0.0.0.1.1.1.1 track 1
Answer: D
Explanation:
Reference:
Note: By default Static Router AD value-1 hence ip route 0.0.0.0. 0.0.0.0. 1.1.1.1 track 1 means AD-1 which must be less than of back up route AD.
Define the backup route to use when the tracked object is unavailable.
!--- The administrative distance of the backup route must be greater than
!--- the administrative distance of the tracked route.
!--- If the primary gateway is unreachable, that route is removed
!--- and the backup route is installed in the routing table
!--- instead of the tracked route.
https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200785-ISP-Failover-with-default-routes-using-I.html
https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118962-configure-asa-00.html
NEW QUESTION 51
Refer to the exhibits.
Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two commands are missing? (Choose two.)
- A. The ip nhrp map command is missing on the hub router.
- B. The ip nhrp redirect command is missing on the hub router.
- C. The ip nhrp shortcut command is missing on the hub router.
- D. The ip nhrp redirect command is missing on the spoke routers.
- E. The ip nhrp shortcut command is missing on the spoke routers.
Answer: B,E
NEW QUESTION 52
Refer to the exhibit.
What does the imp-null tag represent in the MPLS VPN cloud?
- A. Exclude the EXP bit
- B. Impose the label
- C. Pop the label
- D. Include the EXP bit
Answer: C
Explanation:
Explanation
The imp-null (implicit null) tag instructs the upstream router to pop the tag entry off the tag stack before forwarding the packet.
Note: pop means remove the top MPLS label
NEW QUESTION 53
Refer to the exhibit.
An engineer is trying to generate a summary route in OSPF for network 10.0.0.0/8, but the summary route does not show up in the routing table. Why is the summary route missing?
- A. There is no route for a subnet inside 10.0.0.0/8, so the summary route is not generated.
- B. The summary route is not visible on this router, but it is visible on other OSPF routers in the same area.
- C. The summary route is visible only in the OSPF database, not in the routing table.
- D. The summary-address command is used only for summarizing prefixes between areas.
Answer: A
Explanation:
Explanation
The summary-address is only used to create aggregate addresses for OSPF at an autonomous system boundary.
It means this command should only be used on the ASBR when you are trying to summarize externally redistributed routes from another protocol domain or you have a NSSA area. But a requirement to create a summarized route is:
The ASBR compares the summary route's range of addresses with all routes redistributed into OSPF on that ASBR to find any subordinate subnets (subnets that sit inside the summary route range). If at least one subordinate subnet exists, the ASBR advertises the summary route.
NEW QUESTION 54
Exhibit:
BGP is flapping after the Copp policy is applied. What are the two solutions to fix the issue?
(Choose two)
- A. Configure a higher value for CIR under the class COPP-CRITICAL-7600
- B. Configure IP CEF to CoPP policy and BGP to work
- C. Configure a three-color policer instead of two-color policer under class COPP-CRITICAL-
7600 - D. Configure a higher value for CIR under the default class to allow more packets during peak traffic
- E. Configure BGP in the COPP-CRITICAL-7600 ACL
Answer: D,E
Explanation:
Explanation
The policy-map COPP-7600 only rate-limit HTTP & HTTPS traffic (based on the ACL conditions) so any BGP packets will be processed in the class "class-default", which drops exceeded BGP packets. Therefore we have two ways to solve this problem:
+ Add BGP to the ACL with the statement "permit tcp any any eq bgp"
+ Configure higher value for CIR in default class as 2Mbps is too low for web traffic (http &
https)
NEW QUESTION 55
Refer to the exhibit.
During troubleshooting it was discovered that the device is not reachable using a secure web browser. What is needed to fix the problem?
- A. permit tcp port 443
- B. permit tcp port 22
- C. permit tcp port 465
- D. permit udp port 465
Answer: A
NEW QUESTION 56
Refer to the exhibit.
The neighbor relationship is not coming up Which two configurations bring the adjacency up? (Choose two)
- A. LA
interface E 0/0
ip ospf authentication-key Cisco123 - B. LA
router ospf 1
area 0 authentication message-digest - C. NY
interface E 0/0
no ip ospf message-digest-key 1 md5 Cisco123
ip ospf authentication-key Cisco123 - D. LA
interface E 0/0
ip ospf message-digest-key 1 md5 Cisco123 - E. NY
router ospf 1
area 0 authentication message-digest
Answer: B,D
NEW QUESTION 57
Refer to the exhibit.
Which control plane policy limits BGP traffic that is destined to the CPU to 1 Mbps and ignores BGP traffic that is sent at higher rate?
- A. policy-map LIMIT_BGP
- B. policy-map POLICE_BGP
- C. policy-map COPP
- D. policy-map SHAPE_BGP
Answer: C
NEW QUESTION 58
During the maintenance window an administrator accidentally deleted the Telnet-related configuration that permits a Telnet connection from the inside network (Eth0/0) to the outside of the networking between Friday - Sunday night hours only. Which configuration resolves the issue?
A)
B)
C)
D)
- A. Option D
- B. Option B
- C. Option A
- D. Option C
Answer: B
NEW QUESTION 59
Which two components are needed for a service provider to utilize the LVPN MPLS application? (Choose two.)
- A. The P routers must be configured with RSVP.
- B. The P routers must be configured for MP-iBGP toward the PE routers
- C. The PE routers must be configured for MP-iBGP with other PE routers
- D. The P and PE routers must be configured with LDP or RSVP
- E. The PE routers must be configured for MP-eBGP to connect to CEs
Answer: B,E
NEW QUESTION 60
Exhibit:
BGP is flapping after the Copp policy is applied. What are the two solutions to fix the issue?
(Choose two)
- A. Configure a higher value for CIR under the class COPP-CRITICAL-7600
- B. Configure IP CEF to CoPP policy and BGP to work
- C. Configure a three-color policer instead of two-color policer under class COPP-CRITICAL-
7600 - D. Configure a higher value for CIR under the default class to allow more packets during peak traffic
- E. Configure BGP in the COPP-CRITICAL-7600 ACL
Answer: D,E
Explanation:
Explanation
The policy-map COPP-7600 only rate-limit HTTP & HTTPS traffic (based on the ACL conditions) so any BGP packets will be processed in the class "class-default", which drops exceeded BGP packets. Therefore we have two ways to solve this problem:
+ Add BGP to the ACL with the statement "permit tcp any any eq bgp"
+ Configure higher value for CIR in default class as 2Mbps is too low for web traffic (http &
https)
NEW QUESTION 61
Which list defines the contents of an MPLS label?
- A. 32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit.
- B. 20-bit label; 3-bit flow label: 1-bit bottom stack; 8-bit hop limit
- C. 32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL
- D. 20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL.
Answer: D
NEW QUESTION 62
Which list defines the contents of an MPLS label?
- A. 20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL
- B. 32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit
- C. 20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit
- D. 32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL
Answer: A
Explanation:
The first 20 bits constitute a label, which can have 2^20 values. Next comes 3 bit value called Traffic Class. It was formerly called as experimental (EXP) field. Now it has been renamed to Traffic Class (TC). This field is used for QoS related functions. Ingress router can classify the packet according to some criterion and assign a 3 bit value to this filed. If an incoming packet is marked with some IP Precedence or DSCP value and the ingress router may use such a field to assign an FEC to the packet. Next bit is Stack bit which is called bottom-of-stack bit. This field is used when more than one label is assigned to a packet, as in the case of MPLS VPNs or MPLS TE. Next byte is MPLS TTL field which serves the same purpose as that of IP TTL byte in the IP header
NEW QUESTION 63
Exhibit:
BGP is flapping after the Copp policy is applied. What are the two solutions to fix the issue?
(Choose two)
- A. Configure a three-color policer instead of two-color policer under Class COPP-CRIT1CAL-7600
- B. Configure a higher value for CIR under the default class to allow more packets during peak traffic
- C. Configure BGP in the COPP-CRIT1CAL-7600 ACL
- D. Configure a higher value for CIR under the Class COPP-CRIT1CAL-7600
- E. Configure IP CEF for CoPP policy and BGP to work
Answer: C,E
NEW QUESTION 64
Refer to the exhibit.
Users in the branch network of 2001:db8:0:4::/64 report that they cannot access the Internet. Which command is issued in IPv6 router EIGRP 100 configuration mode to solve this issue?
- A. Issue the eigrp stub command on R1.
- B. Issue the no eigrp stub command on R1.
- C. Issue the eigrp stub command on R2.
- D. Issue the no eigrp stub command on R2.
Answer: B
NEW QUESTION 65
......
Cisco Exam Practice Test To Gain Brilliante Result: https://www.practicedump.com/300-410_actualtests.html
Tested Material Used To 300-410: https://drive.google.com/open?id=1TE0aq9jzmWOOZKnbIbAqHjXRSFul6D9N