ENARSI 300-410 September 2020-v1

Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI)
Exam Name: Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI)
Exam Code: 300-410
Exam Price: $300 (USD)
Duration: 90 mins
Number of Questions: 60
Passing Score: 825/1000
300-410 Exam Engine is rigorously checked before being put up for sale. We make sure there is nothing irrelevant
in 300-410 exam products and you get latest questions. We strive to deliver the best 300-410 exam product for
top grades in your first attempt.
Developed by: Hussain & Aaron

Dump Vendor: Homer Co. Ltd
Website: COMING SOON
© 2020 Homer
Exam A
QUESTION 1
Refer to the exhibit.
Get Latest & Actual Exam's Question and Answers from © Homer CO., LTD. We cover ALL Cisco and Non-Cisco Exam Dumps.
Cisco Written & LAB Dump, AWS, Azure, Oracle, Huawei, Aruba, Fortinet, F5, RedHat Linux, Comptia, CEHv10, Palo Alto, Check Point, EC Council and many
more.
"We make sale ONLY if the dump is stable" Contact us: cciehomer@gmail.com
A router receiving BGP routing updates from multiple neighbors for routers in AS 690. What is the reason that the router still sends traffic that is destined
to AS 690 to a neighbor other than 10.222.10.1?
A. The local preference value in another neighbor statement is higher than 250.
B. The local preference value should be set to the same value as the weight in the route map.
C. The route map is applied in the wrong direction.
D. The weight value in another statement is higher than 200.
more.
Correct Answer: C
QUESTION 2
Which list defines the contents of an MPLS label?
A. 20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL.
B. 32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit.
C. 20-bit label; 3-bit flow label: 1-bit bottom stack; 8-bit hop limit
D. 32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL
Correct Answer: A
QUESTION 3
A network engineer is investigating a flapping (up/down) interface issue on a core switch that is synchronized to an NTP server. Log output does not
show the time of the flap. Which command allows on the switch the time of the flap according to the clock on the device?
A. clock calendar-valid
B. service timtestamps log datetime localtime show-timezone
C. service timestamps log uptime
D. clock summer-time mst recurring 2 Sunday mar 2:00 1 sunday nov 2:00
Correct Answer: B
QUESTION 4
more.
An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 losses reachability with the router R3 Fa0/0
interface. The route has changed to flow through route R2. Which debug command is used to troubleshoot this issue?
A. debug ip flow
B. debug ip sla error
C. debug ip routing
D. debug ip packet
Correct Answer: C
QUESTION 5
more.
What is the result if applying this configuration?
A. Therouter can form BGP neighborships with any other device.

B. Therouter can form BGP neighborships with any device that matchedbytheaccess listnamed ''BGP''
C. Therouter cannot form BGP neighborships with any other device
D. Therouter cannot form BGP neighborships with any device that ismatchedby theaccess listnamed"BGP"
Correct Answer: D (A sai)
QUESTION 6
access-list 100 deny tcp any any eq 465 access-list 100 deny tcp any eq 465 any access-list 100
permit tcp any any eq 80 access-list 100 permit tcp any eq 80 any
access-list 100 permit udp any any eq 443
access-list 100 permit udp any eq 443 any
more.
During troubleshooting it was discovered that the device is not reachable using a secure web browser. What is needed to fix the problem?
A. permit tcpport465.
B. permit tcpport443
C. permit udp port 465
D. permit tcpport 22
Correct Answer: B
QUESTION 7
R1#show running-config I section dhcp

ip dhcp excluded-address 192.168.1.1 192.168.1.49 ip dhcp pool DHCP
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 8.8.8.8
lease 0 12
Users report that IP addresses cannot be acquired from the DHCP server. The DHCP server is configured as shown. About 300 total nonconcurrent
users are using this DHCP server, but none of them are active for more than two hours per day. Which action fixes the issue within the current
resources?
A. Configure the DHCP lease time to a bigger value

B. Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool
C. Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool
D. Configure the DHCP lease time to a smaller value
Correct Answer: D
QUESTION 8
more.
Which configuration denies Telnet traffic to router 2 from 198A:0:200C:: 1/64?
A. Ipv6 access-list-Deny_Telnet sequence 10 deny tcp host 198A:0:200C::1/64 host 201A:0:205C::1/64 ! int Gi0/0
Ipv6 access-map Deny_Telnet in !
B. Ipv6 access-list-Deny_Telnet sequence 10 deny tcp host 198A:0:200C::1/64 host 201A:0:205C::1/64 ! int Gi0/0 Ipv6 traffic-filter Deny_Telnet in !
C. Ipv6 access-list-Deny_Telnet sequence 10 deny tcp host 198A:0:200C::1/64 host 201A:0:205C::1/64 eq telnet! int Gi0/0 Ipv6 access-map
Deny_Telnet in !
D. Ipv6 access-list-Deny_Telnet sequence 10 deny tcp host 198A:0:200C::1/64 host 201A:0:205C::1/64 eq telnet! int Gi0/0
Ipv6 traffic-filter Deny_Telnet in
Correct Answer: D
QUESTION 9 What statement about route distinguishes in an MPLS network is true?
A. Route distinguishes make a unique VPNv4 address across the MPLS network.
B. Route distinguishes allow multiple instances of a routing table to coexist within the edge router.
C. Route distinguishes are used for label bindings
D. Route distinguishes define which prefixes are imported and exported on the edge router
Correct Answer: B (A sai)
QUESTION 10
more.
Which control plan policy limits BGP traffic that is destined to the CPU to 1 Mbps and ignores BGP traffic that is higher rate?
A. policy-map SHAPE_BGP
more.
B. policy-map LIMIT_BGP C. policy-map POLICE_BGP
D. policy-map COPP
Correct Answer: D
QUESTION 11
Router# show tag-switching tdp bindings

(...)
tib entry: 10.10.10.1/32, rev 31
local binding: tag: 18
remote binding: tsr: 10.10.10.1:0, tag: imp-null
remote binding: tsr: 10.10.10.2:0, tag: 18
tib entry: 10.10.10.2/32, rev 22
local binding: tag: 17
remote binding: tsr: 10.10.10.2:0, tag: imp-null
What does the imp-null tag represent in the MPLS VPN cloud?
A. Include the EXP bit

B. Exclude the EXP bit
C. Impose the label
D. Pop the label
Correct Answer: D
QUESTION 12
When provisioning a device in Cisco DNA Center, the engineer sees the error message "Cannot select the device. Not compatible with template.". What
is the reason for the error?
more.
A. The software version of the template is different from the software version of the device B. The changes to the template were not committed
C. The template has an incorrect configuration.
D. The tag that was used to filter the templates does not match the device tag.
Correct Answer: D
QUESTION 13
After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and hub were not establishing.
Which two actions resolved the issue? (Choose two.)
A. Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.
B. Remove the crypto isakmp key cisco address 10.1.1.1. on R2 and R3.
C. Change the mode from mode transport to mode tunnel on R2.
D. Configure the mode from mode tunnel to mode transport on R3.
E. Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3.
Correct Answer: AD
QUESTION 14
Which configuration enables the VRF that is labeled ''inet'' on FastEthernet0/0? (A)
more.
(B)
(C)
R1 (config)# ip vrf Inet

^con^9“vFastEthernetO/O
R1 (config-if)# ip vrf forwarding Inet
(D)
A. Option A
B. Option B
C. Option C
D. Option D
Correct Answer: C
QUESTION 15
Which attribute eliminates LFAs that belong to protected paths in situations where links in a network are connected through a common fiber?
A. Interface-dispoint
B. Shared risk link group-disjoint

C. Linecard-disjoint
D. Lowest-repair-path-metric
Correct Answer: B
more.
QUESTION 16
White working with software images, an engineer observes that Cisco DNA Center cannot upload its software image directly from the device. Why is the
image not uploading?
A. The device has lost connectivity to Cisco DNA Center. B.

The software image for the device is in bundle mode
C. The software image for the device is in install mode.
D. The device must be resynced to Cisco DNA Center
Correct Answer: C
QUESTION 17
Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?
A. Multi-paths eibgp 2
B. Maximum-paths ibgp 2
C. Multi-paths 2
D. Maximum-paths 2
Correct Answer: B
QUESTION 18
Drag and Drop Question
Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.
more.
Correct Answer: A
QUESTION 19
Drag and drop the address from the left onto the correct IPv6 filter purposes on the right.
more.
Correct Answer: A
QUESTION 20 Which security feature can protect DMVPN tunnels?
A. IPsec
B. TACACS+
C. RTBH
D. RADIUS
more.
Correct Answer: A
QUESTION 21 Which command displays the IP routing table information that is associated with VRF-Lite?
A. Show ip vrf
B. Show ip route vrf
C. Show run vrf
D. Show ip protocols vrf
Correct Answer: B
QUESTION 22
An administrator that is connected to the console does not see debug messages when remote users log in. Which action ensures that debug messages
are displayed for remote loggings?
A. Enter the transport input ssh configuration command.
B. Enter the terminal monitor exec command.

C. Enter the logging console debugging configuration command.
D. Enter the aaa new-model configuration command.
more.
Correct Answer: D (C sai)
QUESTION 23
more.
An engineer is trying to block the route to 192.168.2.2 from the routing table by using the configuration that is shown. The route us still present in the
routing table as an OSPF route. Which action blocks the route?
A. Add this statement to the route map route-map RM-OSPF-DL deny 20

B. Use a prefix list instead of an access list in the route map.
C. Change sequence 10 in the route-map command from permit to deny.
D. Use an extended access list instead of a standard access list.
Correct Answer: C
more.
QUESTION 24
Which interface configuration must be configured on the space A route enable a dynamic DMVPN tunnel with the spoke B router?
more.
A. Interface TunnelO description mGRE - DMVPN
Tunnel ip address 10.0.0.11 255.255.255.0 ip nhrp
map multicast dynamic Ip nhrp network-id 1
tunnel source 10.0.0.1
tunnel destination FastEtbemet 0/0 Heine! mode
gre multipoint
interface TUnnelO ip address 10.1.0.11

255.255.255.0 Ip nhrp network-id 1 tunnel source
B. 1.1.1.10 ip nhrp map 10 0 0.11 172.17.0.2 tunnel
mode gre
C.
Interface TUnnelO
ip address 10.0.0.11 255 255.255 0 ip nhrp map
multicast static
Ip nbrp network-id 1 tunnel source 10.0.0.1
tunnel mode gre multipoint
interface TUnnelO
D. ip address 10.0.0.11 255 255.255 0
Ip nhrp network-id 1
tunnel source FastEthernet 0/0 tunnel mode gre
multipoint
Ip nhrp nhs 10.0.0.1
Ip nhrp map 10.0.0.1 172.17.0.1
Correct Answer: D
QUESTION 25 Which statement about MPLS LDP

router ID is true?
A. The force keyword changes the router ID to the specific address causing any impact.
B. The loopback with the highest IP address is selected as the router ID.
C. If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.
D. If MPLS LDP router ID must match the IGP router ID.
Correct Answer: B
QUESTION 26 Which statement about IPv6

RA Guard is true?
A. It does not offer protection in environments where IPv6 traffic is tunneled B.

It cannot be configured on a switch port interface in the ingress direction.
C. Packets that are dropped by IPv6 RA Guard cannot be spanned.
more.
D. It is not supported in hardware when TCAM is programmed.
Correct Answer: A
QUESTION 27
An engineer is trying to copy an IOS file from one router to another router by using TFTP. Which two actions are needed to allow the file to copy?
(Choose two.)
A. Configure the TFTP authentication on the source router with the tftp-server authentication local command.
B. Configure a user on the source router with the username tftp password tftp command.
C. Enable the TFTP server on the source router with the tftp-server flash:<filename> command.
D. TFTP is not supported in recent IOS versions, so an alternative method must be used.E. Copy the file to the destination router with the copy tftp:
flash: command
Correct Answer: CE
QUESTION 28
Which two methods use IPsec to provide secure connectivity from the branch office to the headquarters office? (Choose two.)
A. DMVPN
B. MPLS VPN
C. Virtual Tunnel Interface (VTI)
D. SSL VPN
E. PPPoE
Correct Answer: AC
QUESTION 29
Which protocol is used in a DMVPN network to map physical IP addresses to logical IP addresses?
A. BGP
B. LLDP
C. EIGRP
D. NHRP
Correct Answer: D
QUESTION 30
Which Cisco VPN technology can use multipoint tunnel, resulting in a single GRE tunnel interface on the hub, to support multiple connections from
more.
multiple spoke devices?
A. DMVPN
B. GETVPN
C. Cisco Easy VPN
D. FlexVPN
Correct Answer: A
QUESTION 31
Which option is the best for protecting CPU utilization on a device?
A. fragmentation
B. COPP
C. ICMP redirects
D. ICMP unreachable messages
Correct Answer: B
QUESTION 32
Which transport layer protocol is used to form LDP sessions?
ip prefix-list test seq 5 permit 192.168.130.0/24

route-map OUT permitio match ip address prefix-list test set as-path prepend
65000
A. UDP
B. SCTP
C. TCP
D. RDP
Correct Answer: C
QUESTION 33
R2 has a locally originated prefix 192.168.130.0/24 and has these configurations:
more.
What is the result when the route-map OUT command is applied toward an eBGP neighbor R1 (1.1.1.1) by using the neighbor 1.1.1.1 route-map OUT
out command?
A. R1 sees 192.168.130.0/24 as two hops away instead of one AS hop away

B. R1 does not forward traffic that is destined for 192.168.130.0/24.
C. Network 192.168.130.0/24 is not allowed in the R1 table.
D. R1 does not accept any route other than 192.168.130.0/24.
Correct Answer: A
QUESTION 34
[snmp-server community ciscotestl

snmp-server host 192 168.1 128 ciscotest
snmp-sever enable traps bgp
Network operations cannot read or write an configuration on the device with this configuration from the operation subnet. Which two configuration fix the
issue? (Choose two.)
A. Configure SNMP rw permission in addition to community ciscotest.

B. Modify access list 1 and allow operations subnet in the access list.
C. Modify SNMP rw permission in addition to version 1.
D. Configure SNMP rw permission in addition to version 1.
E. Configure SNMP rw permission in addition to community ciscotest 1.
Correct Answer: AB
QUESTION 35
more.
more.
The output of the trace from R5 shows a loop in the network. Which configuration prevents this loop?
more.
B. 16 / 39
The safer , easier way to help you pass any IT exams.
more.
C.
D.
Correct Answer: C (B sai)ú
QUESTION 36
Drag and drop the packet from the left onto the correct descriptions on the right.
more.
Correct Answer: A
QUESTION 37
Drag and drop the SNMP attributes in Cisco IOS devices from the onto he correct SNMPv2c or SNMPv3 categories on the right.
more.
more.
Correct Answer: A
QUESTION 38 Which SNMP verification command shows the encryption and authentication protocols that are used in SNMPV3?
A. show snmp group

B. show snmp user
C. show snmp
D. show snmp view
more.
Correct Answer: B
QUESTION 39 What is the role of a route distinguisher via a VRF-Lite setup implementation?
A. It extends the IP address to identify which VFP instance it belongs to.

B. It manages the import and export of routes berween two or more VRF instances
C. It enables multicast distribution for VRF-Lite setups to enhance EGP routing protocol capabilitiesD. It enables multicast distribution for VRF-Lite
setups to enhance IGP routing protocol capabilities
Correct Answer: A
QUESTION 40
Refer to the following output:
Router#show ip nhrp detail
1.1.2/8 via 10.2.1.2, Tunnel1 created 00:00:12, expire 01:59:47 TypE. dynamic, Flags: authoritative unique nat registered used NBMA address:
10.12.1.2
What does the authoritative flag mean in regards to the NHRP information?
A. It was obtained directly from the next-hop server.

B. Data packets are process switches for this mapping entry.
C. NHRP mapping is for networks that are local to this router.
D. The mapping entry was created in response to an NHRP registration request.
E. The NHRP mapping entry cannot be overwritten.
Correct Answer: A
QUESTION 41
more.
R1 #show ip bgp summary
BGP router identifier 192 168 1 1, local AS number 65000
< output omitted*
Neighbor V AS MsgRcvd MsgSent Tbtver InQ OutQ Up/Down State/PfxRcd 192 168 2 2 4 65000 28 28 22 0 0 00 21 31
0
Rltfshow ip bgp
BGP table version IS 22, local router ID IS 192 168 1 1
Status codes S suppressed, d damped, h history, * valid > best I - internal, r RIB-failure, s stale m multipath, b backup-path f RT-Filter, X best-
external a additional-path, c RIB-compressed
Ongm codes I - IGP, e - EGP, 7 - incomplete
RPKI validation codes V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path

< > 172 16 25 0/24 209165 200 225 0 32768 7
R1#

BGP router identifier 192 168 2 2, local AS number 65000
<output omitted*
Neighbor V AS MsgRcvd MsgSent Tblver InQ OulQ Up/Down State/PfxRcd
192 168 1 1 4 6500 2 28 3 0 0 00 22 1
192 168 3 3 4 0
6500 9 7 8 3 0 0 0700 02 0
0 55
R2#show ip bgp
BGP table version IS 3. local router ID IS 192 168 2 2
Status codes s suppressed, d damped, h history, • valid, > best I - internal, r RIB-failure, s stale, m multipath, b backup-path f RT-Filter, X best-
external, a additional-path, c RIB compressed
Ongm codes I - IGP, e - EGP, 7 - incomplete
RPKI validation codes V valid, I invalid, N Not found
Network Next Hop Metnc LocPrf Weight Path

< i 172 16 25 0/24 209165 200 225 0 100 0 7
R2#

ĐGP router identifier 192 168 3 3, local AS number 65000 ;o Exam Dumps.
Point, EC Council and many more.
BGP table version IS 4. mam routing table version 4
Neighbor V AS MsgRcvd MsgSent Tbtver InQ OutQ Up/Down State/PfxRcd
R2 is a route reflector, and R1 and R3 are route reflector clients. The route learns the route to 172.16.25.0/24 from R1, but it does not advertise to R3.
What is the reason the route is not advertised?
A. Route reflector setup requires full BGP mesh between the routers.
B. In route reflector setup only classification prefix are advertised from one client to another.
C. In route reflector setup only classful prefix are advertised to other clients.
D. R2 does not have a route to the next hop, so R2 does not advertise the prefix to the clients.
Correct Answer: D
QUESTION 42
Which method changes the forwarding decision that a router makes first changing the routing table or influencing the IP data plane?
A. Policy-based routing
B. Nonbroadcast multi-access
C. Packet switching
D. Forwarding information base
Correct Answer: A
QUESTION 43
more.
Which subnet is redistributed from EIGRP to OSPF routing protocols?
A. 10.2.2.0/24
B. 10.1.4.0/24
C. 10.1.2.0/24
D. 10.2.3.0/26
Correct Answer: A
QUESTION 44
Routertfsh ip route ospf

<output omitted>
Gateway is last resort is not set
more.
10.0.0.0/24 is subnetted, 1 subnets
o E2 10.0.0.0 (110/20) via 192.168.12.2, 00:00:10, Ethemeto/o
o 192.168.3.0/24 [110/20] via 192.168.12.2, 00:00:50, Etherneto/o Router#
Routertfshow ip bgp
<output omitted>
Network Next Hop Metric LocPrf Weight Pa
>• 192.168.1.1/32 o.o.o.o 0 32768 th ?
>• 192.168.3.0 192.168.12.2 20 32768 ?
>• 192.168.12.0 o.o.o.o 0 32768 ?
Routertfshow running-config I section router bgp
router bgp 65000
bgp log-neighbor-changes redistribute ospf 1
Router#
An engineer is trying to redistribute OSPF to BGP, but not all of the routes are redistributed. What is the reason for this issue?
A. By default, only internal OSPF routes are redistributed into BGP

B. By default, only internal routers and external type 1 routes are redistributed into BGP.
C. BGP convergence is slow, so the route will eventually be present in the BGP table.
D. Only classful networks are redistributed from OSPF to BGP.
Correct Answer: A
more.
QUESTION 45
Refer to the exhibits.
more.
OnR1
R1 (config)# interface tunnel 1
R1 (config-if)# ip address 10 1 1 1 255 255 255 0
Rl(config-if)# tunnel source 192 1 1 1
Rl(config-if)# tunnel mode gre multipoint
Rl(config-if)# ip nhrp network-id 111
On R2
R2(config)# interface tunnel 1
R2(config-if)# ip address 101 1 2 255 255 255 0
R2(config-if)# tunnel source FastEthernetO/O
R2(config-if)# tunnel mode gre multipoint
R2(config-if)# ip nhrp network id 222
R2(config-if)# ip nhrp nhs 10 1 11
R2(config-if)# ip nhrp map 10111 192 1 1 1
On R3
R3(config)# interface tunnel 1
R3(config-if)# tunnel source FastEthernetO'O
R3(config-if)# Ip nhrp network-id 333 R3(config-if)# Ip nhrp nhs 10 1 1 1
R3(config-if)# ip nhrp map 10 1 1 1 1921 1 1
On R4 R4(config)# interface tunnel 1

R4(config-if)# tunnel source FastEthernetO/O
R4(config-if)# ip nhrp network-id 444
R4(config-if)# Ip nhrp nhs 10 1 1 1
R4(config-if)# ip nhrp map 10111 192 1 1 1
Phase-3 tunnels cannot be established between spoke-to-spoke in DMWN. Which two commands are missing? (Choose two.)
A. The ip nhrp redirect command is missing on the spoke routers.

B. The ip nhrp shortcut command is missing on the spoke routers.
C. The ip redirect commands is missing on the hub router.
more.
D. The ip shortcut commands is missing on the hub router.
E. The ip nhrp command is missing on the hub router.
Correct Answer: BC
QUESTION 46
Which configuration configures a policy on R1 to forward any traffic that is sourced from the 192.168.130.0/24 network to 17.20.20.0/30 network?
access-list 1 permit 192.168.130.0 0.0.0.255
Interface GiO/2 ip policy route-map test
route-map test permit 10

match ip address 1
A. *etlp next-hop 172.20.20.2
more.
access-list
B. 1 permit 192.168 130.0 0 o o 255
access-list 1 permit 192-168.130.0 0.0.0 255
Interface interface
GiO/1 GiO/2 ip policy route-
Ip policy route map test
I map test
match ip address test 1
permit 10 match ip address 1
set Ip next-hop 172.20 40.2
_sgt_io_next-hoo 172.20 20.1
access-list 1 permit 192.168.130-0 0.0.0.255
IC.
interface GĨ0/1 ip policy route-map test
match ip address 1
set ip next-hop 172.20-40.1 ____________
D.
Correct Answer: D
QUESTION 47 Which protocol is used to determine the NBMA address on the other end of a tunnel when
mGRE is used?
A. NHRP
B. IPsec
C. MP-BGP
D. OSPF
Correct Answer: A
QUESTION 48 Which two protocols can cause TCP

starvation? (Choose two)
A. TFTP
B. SNMP
more.
more.
C. SMTP
D. HTTPS
E. FTP
Correct Answer: AB
QUESTION 49 Which two statements about VRF-Lite configurations are true? (Choose two.)
A. They support the exchange of MPLS labels

B. Different customers can have overlapping IP addresses on different VPNs
C. They support a maximum of 512.000 routes
D. Each customer has its own dedicated TCAM resources
E. Each customer has its own private routing table.
F. They support IS-IS
Correct Answer: BE
QUESTION 50
A network engineer needs to verify IP SLA operations on an interface that shows on indication of excessive traffic. Which command should the engineer
use to complete this action?
A. show frequency
B. show track
C. show reachability
D. show threshold
Correct Answer: B
QUESTION 51
Routertfshow ip route
<output omitted>
Gateway of last resort is not set
192.168.1.0/32 is subnetted, 1 subnets

192.168.1.1 [110/11] via 192.168.12.1, 16:56:40, Etherneto/o
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
more.
192.168.2.0/24 is directly connected, LoopbackO
192.168.2.2/32 is directly connected, LoopbackO
192.168.3.0/24 is directly connected, Etherneto/1
192.168.3.1/32 is directly connected, Etherneto/1
192.168.12.0/24 is directly connected, Etherneto/o
192.168.12.2/32 is directly connected, Etherneto/o
Routertfshow running-config I section ospf router ospf 1
summary-address 10.0.0.0 255.0.0.0 redistribute static subnets network 192.168.3.0 0.0.0.255 area 0
network 192.168.12.0 0.0.0.255 area 0
Router#
An engineer is trying to generate a summary route in OSPF for network 10.0.0.0/8, but the summary route does not show up in the routing table. Why is
the summary route missing?
A. The summary route is not visible on this router, but it is visible on other OSPF routers in the same area.
B. The summary-address command is used only for summary prefixes between areas.
C. The summary route is visible only in the OSPF database not in the routing table.
D. There is no route for a subnet inside 10.0.0.0/8, sp the summary route is not generated.
Correct Answer: D
QUESTION 52
TAC+: TCP/IP open to 171.68.118.101/49 failed -

Destination unreachable; gateway or host down
AAA/AUTHEN (2546660185): status - ERROR
AAA/AUTHEN/START (2546660185): Method-LOCAL
AAA/AUTHEN (2546660185): status - FAIL
As1 CHAP: Unable to validate Response. Username chapuser: Authentication failure
Why is user authentication being rejected?
more.
A. TheTACACS+ server expects"user" but the NT client sends "domain\user"
B. The TACACS+ server refusesthe user because the user is set up for CHAP
C. The TACACS+ server is downand the user is in the local database
D. The TACACS+ server is downand the user is not in the local database 27 /39
Correct Answer: D
QUESTION 53
Which is statement about IPv6 inspection is true?
A. It teams and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables
B. It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tablesC. It teams and secures bindings for stateful
autoconfiguration addresses in Layer 2 neighbor tables
D. It team and secures binding for stateless autoconfiguration addresses in Layer 2 neighbor tables.
Correct Answer: D
QUESTION 54
more.
After redistribution is enabled between the routing protocols, PC2, PC3, and PC4 cannot reach PC1. Which action can be engineer take to solve the
issue so that all the PCs are reachable?
A. Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.

B. Set the administrative distance 100 under the process on R2.
C. Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.
D. Redistribute the directly connected interfaces on R2.
Correct Answer: C (A sai)
QUESTION 55
An engineer configured the wrong default gateway for the Cisco DNA center enterprise interface during the install. Which command must the engineer
more.
run to correct the configuration?
A. Sudi update config install

B. Sudo maglev reinstall
C. Sudo magiev-config update
D. Sudo maglev install config update
Correct Answer: C
QUESTION 56
more.
An engineer configuration a static route on a router, but when the engineer checks the route to the destination, a different next hop is chosen. What is
the reason for this?
A. The configured AD for the static route is higher than the AD o OSPF.
B. The metric of the OSPF route is lower than the metric of the static route.
C. Dynamic routing protocol always have priority over static routes.
D. The syntax of the static route is not valid do the route is not considered.
Correct Answer: A
more.
QUESTION 57
* Jun 28 14 41 57: %BGP-5-ADJCHANGE neighbor 192 168 2 2 Down User reset

’ Jun 28 14 41:57: %BGP_SESSION-5-ADJCHANGE neighbor 192 168 2 2 IPv4 Unicast topology base removed from
session User reset
•Jun 28 14 41 57: %BGP-5-ADJCHANGE neighbor 192 168 2 2 Up
R1#show clock
*15 42 00 506 CET Fn Jun 28 2019
An engineer is troubleshooting BGP on a device but discovers that the clock on the device does not correspond to the time stamp of the log entries.
Which action ensures consistency between the two times?
A. Configure the logging clock synchronize command in global configuration mode

B. Configure the service timestamps log uptime command in global configuration mode
C. Configure the service timestamps log datetime localtime command in global configuration mode
D. Make sure that the clock on the device is synchronized with an NTP server
Correct Answer: C (B sai)
QUESTION 58
more.
ISP 1 and ISP 2 directly connect to the internet. A customer IS tracking both ISP links to achieve redundancy and cannot see the Cisco IP SLA tracking
output on the router console.
Which command is missing from the IP SLA configuration?
A. Start-time now
B. Start-time 00:00
C. Start-time 0
D. Start-time immediately
Correct Answer: A
QUESTION 59
Internet IPv6 EIGRP AS 100

2001 db8f f
2001 db8 0 14 64 2001db6Q4 84
GrOO
2001db801 64
R1« Show IPv6 er grp topology

ElGRPIPv6 Topology Table trx AS(100yiO(10112 1)
Codes p - Passive, A - Active, u - Update Q - Query R - Reply r - reply
Status, s - Sia Status
p 2001 DB8 Ờ 4 «4.1 successors FD IS 28416
via FE80 C828 OFF FEF4 1C (284182816). FastEthernetiO
p 2001 OB8 0 1 64,1 successors FD IS 2816
via Connected GigabitEthemetO'O
p JO, 1 successors. FD IS 2816
via FE80 C821 17FF FE04 8 (2816256) GigatxtEthemetlO
p 2001 OB8 014 64 1 successors FO IS 28160
via Connected FastEthemetJO
p 2001 DB8 0 12 64 1 successors FD IS 2816
via Connected GtgabdEihemeH 0
BrancM show IPv6 eigrp topology

EIGRPtPvii Topology Table for AS( 100)1D(4 4 4 4)
Codes p - Passive A - Active u • Update Q • Query. R Reply
r - reply Status s ■ Sia Status
P2O01 068 0 4 64 1 successors FOts 2816
via Connected GigabitEthemefOO
P 2001 068 0 1 64 1 successors FO IS 28416
via FE80 C820 17FF FEO4 54I (284162816). FastElhemetiO
p 2001 068 014 «4 1 successors FO IS 28160
via Connected FastEthernetl O
P2O01 0680 12 «4 1 successors FD IS 28416
Get Latest & Actual Exam's Question and Answers from © Homer
via FE8OCO., LTD.
C820 WeFE04
17FF cover54ALL Cisco andFastEthemetIO
(28416.12816), Non-Cisco Exam Dumps.
more.
User in the branch network of 2001. db8 0.4 report they cannot access the internet. Which command is issued in IPv6 router EIGRP 100 configuration
mode to solve this issue?
A. Issue the eigrp stub command on R1
B. Issue the no eighbor stub command on R1.
C. Issue the eighr command on R2.
D. Issue the no eighrp stub command on R2.
Correct Answer: B
QUESTION 60
Which protocol does VRF-Lite support?
A. IS-IS B. ODR C. EIGRP D. IGRP
Correct Answer: C
QUESTION 61
Refer to Exhibit._________________________________________________ router ospf 10 router-id 192.168.1.1 log-adj
acency-changes redistribute bgp 1 subnets route-map BGP-TO-OSPF
Ị
route-map BGP-TO-OSPF deny 10 match ip address 50 route-map BGP-TO-OSPF permit 20 Ị

access-list 50 permit 172.16.1.0 0.0.0.255
Which statement about redistribution from BGP into OSPF process 10 is true?
A. Network 172.16.1.0/24 is not redistributed into OSPF.

B. Network 10.10 10.0/24 is not redistributed into OSPF C. Network 172.16.1.0/24 is redistributed with administrative distance of 1. D. Network
10.10.10.0/24 is redistributed with administrative distance of 20.
Correct Answer: A
QUESTION 62 Which two statements about redistributing EIGRP into OSPF are
true? (Choose two)
A. The redistributed EIGRP routes appear as type 3 LSAs in the OSPF database
B. The redistributed EIGRP routes appear as type 5 LSAs in the OSPF database
C. The administrative distance of the redistributed routes is 170
D. The redistributed EIGRP routes appear as OSPF external type 1
more.
E. The redistributed EIGRP routes as placed into an OSPF area whose area ID matches the EIGRP autonomous system numberF. The redistributed
EIGRP routes appear as OSPF external type 2 routes in the routing table
Correct Answer: BF
QUESTION 63
R1#show ip ssh
I SSH Disabled - version 1.99
%Please create RSA keys to enable SSH (and of atleast 768 bits for SSH v2).
Authentication timeout: 120 secs; Authentication retries: 3
Minimum expected Diffie Hellman key size: 1024 bits
IOS Keys in SECSH format (ssh-rsa, base64 encoded): NONE
R1#
An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and find the displayed output
when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?
A. crypto key generate rsa

B. ip ssh enable
C. no ip ssh disable
D. ip ssh version 2
Correct Answer: A
QUESTION 64
What is a prerequisite for configuring BFD?
A. All routers in the path between two BFD endpoints must have BFD enabled.
B. Jumbo frame support must be configured on the router that is using BFD.
C. Cisco Express Forwarding must be enabled on all participating BFD endpoints.
D. To use BFD with BGP. the timers 3 9 command must first be configured in the BGP routing process.
Correct Answer: C
QUESTION 65
more.
An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+. Which action
produces the desired configuration?
A. Add the aaa authentication login default group tacacs+ local-case command to the global configuration
B. Add the login authentication Console command to the line configuration
C. Replace the capital "C" with a lowercase "c" m the aaa authentication login Console local commandD. Add the aaa authentication login default none
command to the global configuration
Correct Answer: B
QUESTION 66
service timestamps debug datetime msec

service timestamps log datetime
clock timezone MST -7 0
clock summer time MST recurring
intp authentication-key 1 md5 00101A0B0152181206224747071E 7
ntp server 10 10 10 10
R1#show clock
*06 13 44 045 MST Sun Dec 30 2018
RISconft
more.
Enter configuration commands, one per line End with CNTUZ
R1 (config) Slogging host 10.10.10.20
R1(config) Send
R1S
"Dec 30 13 15 28 %SYS-5-CONFIG_l Configured from console by console
R1#
Dec 30 13 15 28 %SYS-6-LOGGINGHOST_STARTSTOP Logging to host 10 10 10 20 port 514
started - CLI initiated
An administrator noticed that after a change was made on R1, the timestamps on the system logs did not match the clock. What is the reasons for this
error?
A. The keyword localtime is defined on the timestamp service command.

B. The NTP server is in an different time zone.
C. An authentication error with the NTP server results in an incorrect timestamp.
D. The system clock is set incorrectly to summer-time hours
Correct Answer: A
QUESTION 67
Which configuration adds an IPv4 interface to an OSPFv3 process in OSPFv3 address family configuration?
A. Router ospf3 1 address-family ipv4

B. Router(config-router)#ospfv3 1 ipv4 area 0
C. Router(config-if)#ospfv3 1 ipv4 area 0
D. Router ospfv3 1 address-family ipv4 unicast
Correct Answer: C
QUESTION 68
While troubleshooting connectivity issues to a router, these details are noticed:
- Standard pings to all router interfaces, including loopbacks, are successful.
- Data traffic is unaffected.
- SNMP connectivity is intermittent.
- SSH is either or disconnects frequently.
Which command must be configured first to troubleshoot this issue?
A. Show policy-map control-plane

B. Show policy-map
C. Show interface inc drop
more.
D. Show ip route
Correct Answer: A
QUESTION 69
R1(config)#route-map ADD permit 20

R1(config-route-map)#set tag 1
R1(config)#router ospfl
R1(config-router)#redistribute rip subnets route-map ADD
Which statement about R1 is true?
A. OSPF redistributes RIP routes only if they have a tag of one

B. RIP learned routes are distributed to OSPF with a tag value of one
C. R1 adds one to the metric for RIP learned routes before redistributing to OSPF
D. RIP routes are redistributed to OSPF without any changes
Correct Answer: B
QUESTION 70
router eigrp 1
redistribute ospf 5 match external route-map OSPF-TO-EIGRP metric 10000 2000 255 1 1500
route-map OSPF-TO-EIGRP
match ip address TO-OSPF
Which routes from OSPF process 5 are redistributed into EIGRP?
A. E1 and E2 subnets matching access list TO-OSPF

B. E1 and E2 subnets matching prefix list TO-OSPF
C. only E2 subnets matching access list TO-OSPF
D. only E1 subnets matching prefix listTO-OS1
more.
Correct Answer: A
QUESTION 71
Users were moved from the local DHCP server to the remote corporate DHCP server. After the move, none of the users were able to use the network.
Which two issues will prevent this setup from working properly? (Choose two)
A. Auto-QoS is blocking DHCP traffic.

B. The DHCP server IP address configuration is missing locally
C. 802.1X is blocking DHCP traffic
D. The broadcast domain is too large for proper DHCP propagation
E. The route to the new DHCP server is missing
Correct Answer: BE
QUESTION 72
Drag and drop the MPLS terms from the left onto the correct definitions on the right.
more.
device that forwards traffic based on labels
path that the labeled packet takes

I 1
device that IS unaware of MPLS labeling
device that removes and adds the MPLS labeling
Correct Answer: A
QUESTION 73
Drag and drop the OSPF adjacency states from the left onto the correct descriptions on the right.
more.
Each router compares the DBD packets that were received from the other
router
Routers exchange information with other routers in the multiaccess network
The neighboring router requests the other routers to send missing entries
The network has already eleơed a DR and a backup BDR
The OSPF router ID of the receiving router was not contained in the hello
message
No hellos have been received from a neighbor router.
more.
A.
Correct Answer: A
QUESTION 74
Drag and drop the DHCP messages from the left onto the correct uses on the right.
Down
more.
Correct Answer: A
QUESTION 75
What is the output of the following command: show ip vrf
A. Show's default RD values
more.
B. Displays IP routing table information associated with a VRF
C. Show's routing protocol information associated with a VRF.
D. Displays the ARP table (static and dynamic entries) in the specified VRF
Correct Answer: A
QUESTION 76 Which command is used to check IP SLA when an interface is suspected to receive lots of traffic with options?
A. show track
B. show threshold
C. show timer
D. show delay
Correct Answer: A
QUESTION 77
Refer to the exhibit. In which circumstance does the BGP neighbor remain in the idle condition?
R200#show ip bgp summary
BGP router Identifier 10 1 1 1' local AS number 65000
BGP table version IS 26. main routing table version 26
1 network entnes using 132 bytes of memory
2 path entries using 52 bytes of memory
2/1 BGP path/bestpath attribute entries using 296 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
Bitfield cache entries current 1 (at peak 2) using 28 bytes of memory
BGP using 508 total bytes of memory
BGP activity 24/23 prefixes, 24/23 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TbIVer InQ OutQ Up/Down State/PfxRcd 192 022 4 65100 20335 20329 0 0 0 00 02 04 Idle (PfxCt)
R200#
A. if prefixes are not received from the BGP peer
more.
B. if prefixes reach the maximum limit
C. if a prefix list is applied on the inbound direction
D. if prefixes exceed the maximum limit
Correct Answer: D
QUESTION 78
Refer to the exhibit. Why is the remote NetFlow server failing to receive the NetFlow data?
confiy I
flow record v4_r1
match IPV4 tos
match ipv4 protocol
match IPV4 source address
match ipv4 destination address
I match transport source-port match transport destination-port collect counter bytes long collect counter packets long
Ị
flow exporter EXPORTER-1 destination 172 16 10 2 transport udp 90 exit
I
flow monitor FLOW-MONITOR-1 record v4_r1 exit
I ip cef
I
interface Etherneto/o 1
ip address 172 16 6 2 255 255 255 0
ip flow monitor FLOW-MONITOR-1 input I
A. The flow exporter is configured but is not used.
more.
B. The flow monitor is applied in the wrong direction.
C. The flow monitor is applied to the wrong interface.
D. The destination of the flow exporter is not reachable.
Correct Answer: A
QUESTION 79
Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPV3 categories on the right. Select and Place:
more.
A.
Correct Answer: A Exam B
QUESTION 1
Refer to the exhibit. AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with
the server. Which action resolves this issue?
Global RADIUS shared secret:******* retransmission count: 5 timeout value: 10 following RADIUS servers are configured:
myradius.network.users.com:
available for authentication on port: 1814 available for accounting on port: 1813
more.
10.1.1.1:
available for authentication on port: 1814 available for accounting on port: 1813 RADIUS shared secret: ******
10.2.2.3
available for authentication on port: 1814 available for accounting on port: 1813
RADIUS shared secret: ******
A. Correct the timeout value

B. Match the authentication port
C. Correct the shared secret
D. Match the accounting port
Correct Answer: B
QUESTION 2
Refer to the exhibit. A company is evaluating multiple network management system tools. Trending graphs generated by SNMP data are returned by the
NMS and appear to have multiple gaps. While troubleshooting the issue, an engineer noticed the relevant output. What solves the gaps in the graphs?
R1#show policy-map control-plane
Control Plane
Class-map: NMS (match-all)
500461 packets, 24038351 bytes
5 minute offered rate 1390000 bps, drop rate 0 bps I
police:
cir 50000 bps, be 5000 bytes
conformed 50444 packets, 24031001 bytes; actions: transmit
exceeded 990012 packets, 94030134 bytes; actions, drop
conformed 4000 bps, exceed 0 bps
A. Remove the class map NMS from being part of control plane policing
B. Remove the exceed-rate command in the class map
C. Configure the CIR rate to a lower value that accommodates all the NMS tools
D. Separate the NMS class map in multiple class maps based on the specific protocols with appropriate CoPP actions
Correct Answer: D
QUESTION 3
Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are
more.
used.
aaa new-model
aaa authentication login default none
aaa authentication login telnet local
!
username cisco password 0 Ocsic
!
line vty 0
password LetMeIn
login authentication telnet
transport input telnet line
vty 1
password LetMeIn
transport input telnet
no password .. vty °
■' ■ username
Ocsic
password no username
vty 1
LetMeln
username
cisco
password
LetMeln
A. vty 0:
+ cisco
+ 0csic
vty 1:
+ no username
+ no password
Correct Answer: A
more.
QUESTION 4
Refer to the exhibit. An engineer is monitoring reachability of the configured default routes to ISP1 and ISP2. The default route from ISP1 is preferred if
available. How is this issue resolved?
RI
ip sla 100 icmp-echo 10.12.1.254
I
track 10 ip sla 100 reachability
I
ip route 0.0.0.0 0.0.0.0 10.12.1.254 track 10
ip route 0.0.0.0 0.0.0.0 10.13.1.254 10 I
Ri#show ip route
—Output Omitted—
Gateway of last resort is 10.13.1.254 to network 0.0.0.0
S‘ 0.0.0.0/0 [10/0] via 10.13.1.254

10.0.0.0/8 is variably subnetted, 6 subnets, 2 masks 10.11.1.0/24 is directly connected, GigabitEthernetO/1
L 10.11.1.1/32 is directly connected, GigabitEthernetO/1
c 10.12.1.0/24 is directly connected, GigabitEthernet0/0
L 10.12.1.1/32 is directly connected, GigabitEthernet0/0
c 10.13.1.0/24 is directly connected, GigabitEtheraetO/2
L 10.13.1.1/32 is directly connected, GigabitEthernetO/2
A. Use the icmp-echo command to track both default routes

B. Start IP SLA by matching numbers for track and ip sla commands
C. Start IP SLA by defining frequency and scheduling it
D. Use the same AD for both default routes
Correct Answer: C
QUESTION 5
Refer to the exhibit. Redistribution is enabled between the routing protocols, and now PC2 PC3, and PC4 cannot reach PC1. What are the two solutions
more.
to fix the problem? (Choose two)
PC2:10.2.2.20/2 PC3:10.3.3.30/2
4 4
A. Filter RIP and OSPF routes back into OSPF from EIGRP when redistributing into OSPF in R2
B. Filter all routes except EIGRP routes when redistributing into OSPF in R3
C. Filter OSPF routes into RIP from EIGRP when redistributing into RIP in R2
D. Filter all routes except RIP routes when redistributing into EIGRP in R2
E. Filter RIP routes back into RIP when redistributing into RIP in R2
Correct Answer: CE
QUESTION 6
Which label operations are performed by a label edge router?
A. PUSH and PHP B. SWAP and POP C. SWAP and PUSH D. PUSH and POP Correct Answer: D
QUESTION 7
Refer to the exhibit. The network administrator configured VRF lite for customer A. The technician at the remote site misconfigured VRF on the router.
Which configuration will resolve connectivity for both sites of customer A?
more.
ip vrf customer_a rd 1:1
route-target export 1:1 route
target import 1:1 !
interface FastEthernetO.1 encapsulation dot1Q 2 ip vrf forwarding customer_a ip address 192.168.4.1 255.255.255.0 !
router ospf 1
log-adj adjacency-changes !
router ospf 2 vrf customer_a log-adj adjacency-changes network 192.168.4.0 0.0.0.255 area 0 !
end
A. ip vrf customer_a rd
1:2
route-target both 1:1
B. ip vrf customer_a rd
1:2
route-target both 1:2
C. ip vrf customer_a rd 1:1
router-target import 1:1 router-target export 1:2 D. ip vrf customer_a rd 1:1
route-target export 1:2 routertarget import 1:2
Correct Answer: A
QUESTION 8
Drag and drop the operations from the left onto the locations where the operations are performed on the right.
Label Switch Router
Handles traffic between
multiple VPNs
Reads the labels and forwards the packet based on the labels
Assigns labels to unlabelled packets Label Edge Router
Performs penultimate hop popping
A. Label Switch Router:

+ Reads the labels and forwards the packet based on the labels + Performs penultimate hop popping
more.
Label Edge Router:
+ Handles traffic between multiple VPNs
+ Assigns labels to unlabelled packets
Correct Answer: A
QUESTION 9
After some changes in the routing policy, it is noticed that the router in AS 45123 is being used as a transit AS router for several service providers.
Which configuration ensures that the branch router in AS 45123 advertises only the local networks to all SP neighbors?
A. ip as-path access-list 1 permit A45123$

!
router bgp 45123
neighbor SP-Neighbors filter-list 1 out
B. ip as-path access-list 1 permit A45123
!
router bgp 45123

C. ip as-path access-list 1 permit A$
!
router bgp 45123
D. ip as-path access-list 1 permit
!
router bgp 45123 neighbor SP-
Neighbors filter-list 1 out
Correct Answer: C
QUESTION 10
Refer to the exhibit. An engineer is trying to get a packet destined for 192.168.32.100 forwarded through 10.1.1.1, but it was forwarded through
10.1.1.2. What action forwards the packets through 10.1.1.1?
Router#show ip route
. ..
D 192.168.32.0/19 [90/25789217] via 10.1.1.1
R 192.168.32.0/24 [120/4] via 10.1.1.2
O 192.168.32.0/26 [110/229840] via 10.1.1.3
more.
A. ConfigureEIGRP toreceive 192.168.32.0 routewithlower metric
B. ConfigureEIGRP toreceive 192.168.32.0 routewithlower administrative distance
C. ConfigureEIGRP toreceive 192.168.32.0 routewithequal or longer prefix than /24D. Configure EIGRP to receive 192.168.32.0 route with longer
prefix than /19
Correct Answer: C
QUESTION 11
Refer to the exhibit. A junior engineer updated a branch router configuration. Immediately after the change, the engineer receives calls from the help
desk that branch personnel cannot reach any network destinations. Which configuration restores service and continues to block 10.1.1.100/32?
BRANCI Ỉ-RTR0
router eigrp 100

network 10.431.0 0.0.0.7
network 10.100.100.1 o.o.o.o
distribute-list route-map FILTER-IN in FastF.thernetO/O
eigrp router-id 10.100.100.1
J
ip prefix-list 102 seq 10 permit 10.1.1.100/32
J
route-map FILTER-IN deny 10
match ip address prehx-list 102
A. ip prefix-list 102 seq 15 permit 0.0.0.0/32 le 32

B. route-map FILTER-IN permit 20
C. ip prefix-list 102 seq 5 permit 0.0.0.0/32 le 32
D. route-map FILTER-IN deny 5
Correct Answer: B
QUESTION 12
An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1 255.255.255.252
along with the summary route. After finishing configuration, the customer complained not receiving summary route with specific loopback address.
Which two configurations will fix it? (Choose two)
router eigrp 1 !
route_map Leak-Route deny 10
!
interface Serial 0/0 ip summary-address eigrp 1 10.0.0.0 255.0.0.0
more.
leak-map Leak-Route
A. Configure route-map Leak-Route permit 10 and match access-list 1

B. Configure access-list 1 permit 10.1.1.1 0.0.0.252
C. Configure access-list 1 and match under route-map Leak-Route
D. Configure route-map Leak-Route permit 20
E. Configure access-list 1 permit 10.1.1.0 0.0.0.3
Correct Answer: AE
QUESTION 13
Refer to the exhibit. An IP SLA is configured to use the backup default route when the primary is down, but it is not working as desired. Which command
fixes the issue?
R1(config)#ip route 0.0.0.0 0.0.0.0 1.1.1.1

R1(config)#ip route 0.0.0.0 0.0.0.0 2.2.2.2 10
R1(config)#ip sla 1
R1(config)#icmp-echo 1.1.1.1 source-interface FastEthernet0/0
R1(config)#ip sla schedule 1 life forever start-time now R1(config)#track
1 ip sla 1 reachability
A. R1(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.1 track 1

B. R1 (config)# ip route 0.0.0 0 0.0.0 0 2.2.2 2
C. R1 (config)# ip route 0.0.0.0 0.0.0.0 2.2.2.2 10 track 1
D. R1(config)# ip sla track 1
Correct Answer: A
QUESTION 14 What is an
advantage of using BFD?
A. It detects local link failure at layer 1 and updates routing table

B. It detects local link failure at layer 3 and updates routing protocols
C. It has sub-second failure detection for layer 1 and layer 2 problems
D. It has sub-second failure detection for layer 1 and layer 3 problems
Correct Answer: C
QUESTION 15
Refer to the exhibit. The ACL is placed on the inbound GigabitEthernet 0/1 interface of the router. Host 192.168.10.10 cannot SSH to host
192.168.100.1 even though the flow is permitted. Which action resolves the issue without opening full access to this router?
more.
ip access-list extended FILTER
deny tcp 192.IO8.IO.OO.O.O.255 192.108.100.0 0.0.0.255 eq 22 deny tcp 192.IO8.IO.OO.O.O.255 192.108.100.0 0.0.0.255 eq 23 denytcp
192.IO8.1O.OO.O.O 255 192.108.100.0 0.0.0.255 eq 80 denytcp 192 108.10.0 0.0.0 255 192.108 100.0 0.0.0 255 eq 443 permit tcp host 192.108.10.10
host 192.108.100.10 eq ssh permit ip any any
Ị
interface GigabitEthernetO/1
ip address 192.168.10.1 255.255.255.0
ip access-group FILTER in
A. Temporarily move the permit ip any any line to the beginning of the ACL to see if it the flow works
B. Run the show access-list FILTER command to view if the SSH entry has any hit statistics associated with it
C. Move the SSH entry to the beginning of the ACL
D. Temporarily remove the ACL from the interface to see if the flow works
Correct Answer: C
QUESTION 16
Which component of MPLS VPN is used to extend the IP address so that an engineer is able to identify to which VPN it belongs?
A. RD
B. VPNv4 address family
C. RT
D. LDP
Correct Answer: A
QUESTION 17
Refer to the exhibit. BGP is flapping after the CoPP policy is applied. What are the two solutions to fix the issue? (Choose two)
policy-mapp COPP-7600
class COPP-CRITICAL-7600
police cir 2000000 bc 62500
conform-action transmit
exceed-action transmit
class class-default police
cir 2000000 bc 6250
conform-action transmit
exceed-action drop !
class-map match-all COPP-CRITICAL-7600
match access-group name COPP-CRITICAL-7600 !
more.
ip access-list extended COPP-CRITICAL-7600
permit ip any any eq http permit ip any any eq
https
A. Configure BGP in the COPP-CRITICAL-7600 ACL

B. Configure a higher value for CIR under the default class to allow more packets during peak traffic
C. Configure a higher value for CIR under the class COPP-CRITICAL-7600
D. Configure a three-color policer instead of two-color policer under class COPP-CRITICAL-
E. Configure IP CEF to CoPP policy and BGP to work
Correct Answer: AB
more.

ENARSI 300-410 September 2020-v1

Uploaded by

Copyright:

Available Formats

ENARSI 300-410 September 2020-v1

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

ENARSI 300-410 September 2020-v1

Uploaded by

Copyright:

Available Formats

Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI)

Developed by: Hussain & Aaron

Which list defines the contents of an MPLS label?

A. Therouter can form BGP neighborships with any other device.

Correct Answer: D (A sai)

R1#show running-config I section dhcp

A. Configure the DHCP lease time to a bigger value

Correct Answer: B (A sai)

Router# show tag-switching tdp bindings

A. Include the EXP bit

Which two actions resolved the issue? (Choose two.)

R1 (config)# ip vrf Inet

B. Shared risk link group-disjoint

A. The device has lost connectivity to Cisco DNA Center. B.

Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

QUESTION 20 Which security feature can protect DMVPN tunnels?

B. Enter the terminal monitor exec command.

A. Add this statement to the route map route-map RM-OSPF-DL deny 20

interface TUnnelO ip address 10.1.0.11

QUESTION 25 Which statement about MPLS LDP

QUESTION 26 Which statement about IPv6

A. It does not offer protection in environments where IPv6 traffic is tunneled B.

Which option is the best for protecting CPU utilization on a device?

ip prefix-list test seq 5 permit 192.168.130.0/24

R2 has a locally originated prefix 192.168.130.0/24 and has these configurations:

A. R1 sees 192.168.130.0/24 as two hops away instead of one AS hop away

[snmp-server community ciscotestl

A. Configure SNMP rw permission in addition to community ciscotest.

Correct Answer: C (B sai)ú

A. show snmp group

A. It extends the IP address to identify which VFP instance it belongs to.

A. It was obtained directly from the next-hop server.

Network Next Hop Metric LocPrf Weight Path

R2 #show ip bgp summary

Network Next Hop Metnc LocPrf Weight Path

R3 #show ip bgp summary

Routertfsh ip route ospf

A. By default, only internal OSPF routes are redistributed into BGP

Refer to the exhibits.

On R4 R4(config)# interface tunnel 1

A. The ip nhrp redirect command is missing on the spoke routers.

access-list 1 permit 192.168.130.0 0.0.0.255

Interface GiO/2 ip policy route-map test

route-map test permit 10

QUESTION 48 Which two protocols can cause TCP

A. They support the exchange of MPLS labels

192.168.1.0/32 is subnetted, 1 subnets

TAC+: TCP/IP open to 171.68.118.101/49 failed -

Why is user authentication being rejected?

Which is statement about IPv6 inspection is true?

A. Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.

Correct Answer: C (A sai)

A. Sudi update config install

* Jun 28 14 41 57: %BGP-5-ADJCHANGE neighbor 192 168 2 2 Down User reset

A. Configure the logging clock synchronize command in global configuration mode

Correct Answer: C (B sai)

Internet IPv6 EIGRP AS 100

2001 db8 0 14 64 2001db6Q4 84

R1« Show IPv6 er grp topology