Latest [Sep 30, 2021] 300-410 Exam with Accurate Implementing Cisco Enterprise Advanced Routing and Services PDF Questions
Take a Leap Forward in Your Career by Earning Cisco 215 Questions
NEW QUESTION 61
Refer to the exhibit. The network administrator configured the branch router for IPv6 on the E 0/0 interface The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on the branch router to bring the IPv6 neighbors up?
- A. Disable IPv6 on the E 0/0 interface using the no ipv6 enable command
- B. Enable the IPv4 address family under the E 0/0 interface by using the address-family Ipv4 unicast command
- C. Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E 0/0 interface.
- D. Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command
Answer: D
Explanation:
Once again, Cisco changed the IOS configuration commands required for OSPFv3 configuration. The new OSPFv3 configuration uses the "ospfv3" keyword instead ofthe earlier "ipv6 router ospf" routing process command and "ipv6 ospf" interface commands.
The Open Shortest Path First version 3 (OSPFv3) address families feature enables both IPv4 and IPv6 unicast traffic to be supported. With this feature, users may havetwo processes per interface, but only one process per address family (AF).
NEW QUESTION 62
Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPV3 categories on the right.
Answer:
Explanation:
NEW QUESTION 63
An engineer configured a company's multiple area OSPF head office router and Site A cisco routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone.
After finishing both site router configurations, none of the LSA 3,4 5, and 7 are installed at Site A router.
Which configuration resolves this issue?
- A. configure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc
- B. configure capability vrf-lite on Head Office and its connected PE router under router ospf 1 vrf abc
- C. configure capability vrf-lite on both PE routers connected to Head Office and Site A routers under routtr ospf 1 vrf abc
- D. configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc
Answer: C
NEW QUESTION 64
Which protocol does MPLS use to support traffic engineering?
- A. Label Distribution Protocol
- B. Tag Distribution Protocol
- C. Border Gateway Protocol
- D. Resource Reservation Protocol
Answer: D
Explanation:
NEW QUESTION 65
Refer to the exhibit.
After redistribution is enabled between the routing protocols, PC2, PC3, and PC4 cannot reach PC1. Which action can be engineer take to solve the issue so that all the PCs are reachable?
- A. Set the administrative distance 100 under the process on R2.
- B. Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.
- C. Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.
- D. Redistribute the directly connected interfaces on R2.
Answer: D
NEW QUESTION 66
Which protocol is used to determine the NBMA address on the other end of a tunnel when mGRE is used?
- A. MP-BGP
- B. NHRP
- C. IPsec
- D. OSPF
Answer: B
NEW QUESTION 67 
Refer to the exhibit. A network administrator configured an IPv6 access list to allow TCP return traffic only, but it is not working as expected. Which changes resolve this issue?
- A. ipv6 access-list inbound
permit tcp any any established
deny ipv6 any any log
!
interface gi0/0
ipv6 traffic-filter inbound out - B. ipv6 access-list inbound
permit tcp any any established
deny ipv6 any any log
!
interface gi0/0
ipv6 traffic-filter inbound in - C. ipv6 access-list inbound
permit tcp any any syn
deny ipv6 any any log
!
interface gi0/0
ipv6 traffic-filter inbound out - D. ipv6 access-list inbound
permit tcp any any syn
deny ipv6 any any log
!
interface gi0/0
ipv6 traffic-filter inbound in
Answer: B
NEW QUESTION 68
Drag and drop the OSPF adjacency states from the left onto the correct descriptions on the right.
Answer:
Explanation:
Explanation:
Down
This is the first OSPF neighbor state. It means that no information (hellos) has been received from this neighbor, but hello packets can still be sent to the neighbor in this state.
During the fully adjacent neighbor state, if a router doesn't receive hello packet from a neighbor within the Router Dead Interval time (RouterDeadInterval = 4*HelloInterval by default) or if the manually configured neighbor is being removed from the configuration, then the neighbor state changes from Full to Down.
Attempt
This state is only valid for manually configured neighbors in an NBMA environment. In Attempt state, the router sends unicast hello packets every poll interval to the neighbor, from which hellos have not been received within the dead interval.
Init
This state specifies that the router has received a hello packet from its neighbor, but the receiving router's ID was not included in the hello packet. When a router receives a hello packet from a neighbor, it should list the sender's router ID in its hello packet as an acknowledgment that it received a valid hello packet.
2-Way
This state designates that bi-directional communication has been established between two routers. Bi-directional means that each router has seen the other's hello packet. This state is attained when the router receiving the hello packet sees its own Router ID within the received hello packet's neighbor field. At this state, a router decides whether to become adjacent with this neighbor. On broadcast media and non-broadcast multiaccess networks, a router becomes full only with the designated router (DR) and the backup designated router (BDR); it stays in the 2-way state with all other neighbors. On Point-to-point and Point-to-multipoint networks, a router becomes full with all connected routers.
At the end of this stage, the DR and BDR for broadcast and non-broadcast multiacess networks are elected. For more information on the DR election process, refer to DR Election.
Note: Receiving a Database Descriptor (DBD) packet from a neighbor in the init state will also a cause a transition to 2-way state.
Exstart
Once the DR and BDR are elected, the actual process of exchanging link state information can start between the routers and their DR and BDR. (ie. Shared or NBMA networks).
In this state, the routers and their DR and BDR establish a master-slave relationship and choose the initial sequence number for adjacency formation. The router with the higher router ID becomes the master and starts the exchange, and as such, is the only router that can increment the sequence number. Note that one would logically conclude that the DR/BDR with the highest router ID will become the master during this process of master-slave relation. Remember that the DR/BDR election might be purely by virtue of a higher priority configured on the router instead of highest router ID. Thus, it is possible that a DR plays the role of slave. And also note that master/slave election is on a per-neighbor basis.
Exchange
In the exchange state, OSPF routers exchange database descriptor (DBD) packets. Database descriptors contain link-state advertisement (LSA) headers only and describe the contents of the entire link-state database. Each DBD packet has a sequence number which can be incremented only by master which is explicitly acknowledged by slave. Routers also send link-state request packets and link-state update packets (which contain the entire LSA) in this state. The contents of the DBD received are compared to the information contained in the routers link-state database to check if new or more current link-state information is available with the neighbor.
Loading
In this state, the actual exchange of link state information occurs. Based on the information provided by the DBDs, routers send link-state request packets. The neighbor then provides the requested link-state information in link-state update packets. During the adjacency, if a router receives an outdated or missing LSA, it requests that LSA by sending a link-state request packet. All link-state update packets are acknowledged.
Full
In this state, routers are fully adjacent with each other. All the router and network LSAs are exchanged and the routers' databases are fully synchronized.
Full is the normal state for an OSPF router. If a router is stuck in another state, it is an indication that there are problems in forming adjacencies. The only exception to this is the 2-way state, which is normal in a broadcast network. Routers achieve the FULL state with their DR and BDR in NBMA/broadcast media and FULL state with every neighbor in the remaining media such as point-to-point and point-to-multipoint.
Note: The DR and BDR that achieve FULL state with every router on the segment will display FULL/DROTHER when you enter the show ip ospf neighbor command on either a DR or BDR. This simply means that the neighbor is not a DR or BDR, but since the router on which the command was entered is either a DR or BDR, this shows the neighbor as FULL/DROTHER.
Reference:
+ Each router compares the DBD packets that were received from the other router: Exchange
+ Routers exchange information with other routers in the multiaccess network: Exstart
+ The neighboring router requests the other routers to send missing entries: Loading
+ The network has already elected a DR and a backup BDR: 2-way
+ The OSPF router ID of the receiving router was not contained in the hello message: Init
+ No hellos have been received from a neighbor router: Down
When OSPF adjacency is formed, a router goes through several state changes before it becomes fully adjacent with its neighbor. The states are Down -> Attempt (optional) -> Init -> 2-Way -> Exstart -> Exchange -> Loading -> Full. Short descriptions about these states are listed below:
Down: no information (hellos) has been received from this neighbor.
Attempt: only valid for manually configured neighbors in an NBMA environment. In Attempt state, the router sends unicast hello packets every poll interval to the neighbor, from which hellos have not been received within the dead interval.
Init: specifies that the router has received a hello packet from its neighbor, but the receiving router's ID was not included in the hello packet
2-Way: indicates bi-directional communication has been established between two routers.
Exstart: Once the DR and BDR are elected, the actual process of exchanging link state information can start between the routers and their DR and BDR.
Exchange: OSPF routers exchange and compare database descriptor (DBD) packets Loading: In this state, the actual exchange of link state information occurs. Outdated or missing entries are also requested to be resent.
Full: routers are fully adjacent with each other
(Reference: http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080093f0e.shtml)
NEW QUESTION 69
Refer to the exhibit.
A company with autonomous system number AS65401 has obtained IP address block 209.165.200.224/27 fro, ARIN. The company needed more IP addresses and was assigned block 209.165.202.128/27 from ISP2. An engineer is ISP1 reports they are receiving ISP2 routes from AS65401. Which configuration onR1 resolves the issue?
A)
B)
C)
D)
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: A
Explanation:
https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/23675-27.html
NEW QUESTION 70
Refer to the exhibit.
Why is user authentication being rejected?
- A. The TACACS+ server refuses the user because the user is set up for CHAP.
- B. The TACACS+ server expects "user", but the NT client sends "domain/user".
- C. The TACACS+ server is down, and the user is not in the local database.
- D. The TACACS+ server is down, and the user is in the local database.
Answer: C
NEW QUESTION 71
Refer to the exhibit.
What does the imp-null tag represent in the MPLS VPN cloud?
- A. Exclude the EXP bit
- B. Impose the label
- C. Pop the label
- D. Include the EXP bit
Answer: C
Explanation:
The -imp-null|| (implicit null) tag instructs the upstream router to pop the tag entry off the tag stack before forwarding the packet.
Note: pop means -remove the top MPLS label||
NEW QUESTION 72
Refer to the exhibit.
What is the result of applying this configuration?
- A. The router cannot form BGP neighborships with any device that is matched by the access list named
"BGP". - B. The router cannot form BGP neighborships with any other device.
- C. The router can form BGP neighborships with any device that is matched by the access list named
"BGP". - D. The router can form BGP neighborships with any other device.
Answer: A
NEW QUESTION 73
An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table.
What should be configured to accomplish this task?
- A. set ip default next-hop
- B. set ip next-hop verify-availability
- C. set ip next-hop
- D. set ip next-hop recursive
Answer: A
Explanation:
Section: Mixed Questions
NEW QUESTION 74
Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?
- A. IPv4 ACL blocking route advertisements from nonauthorized hosts
- B. PVLANs with community ports associated to route advertisements and isolated ports for nodes
- C. PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes
- D. VACL blocking broadcast frames from nonauthorized hosts
Answer: A
Explanation:
The IPv6 Router Advertisement Guard feature provides support for allowing the network administrator to block or reject unwanted or rogue router advertisement guard messages that arrive at the network device platform. Router Advertisements are used by devices to announce themselves on the link. The IPv6 Router Advertisement Guard feature analyzes these router advertisements and filters out router advertisements that are sent by unauthorized devices.
Certain switch platforms can already implement some level of rogue RA filtering by the administrator configuring Access Control Lists (ACLs) that block RA ICMP messages that might be inbound on "user" ports.
NEW QUESTION 75
Refer to the exhibit.
The neighbor relationship is not coming up Which two configurations bring the adjacency up? (Choose two)
- A. Option D
- B. Option C
- C. Option B
- D. Option A
- E. Option E
Answer: B,C
NEW QUESTION 76
Refer to the exhibit.
A network administrator is using the DNA Assurance Dashboard panel to troubleshoot an OSPF adjacency that failed between Edge_NYC interface GigabitEthernet1/3 with Neighbor Edge_SNJ. The administrator observes that the neighborship is stuck in exstart state. How does the administrator fix this issue?
- A. Configure to match the OSPF interface speed and duplex settings on both routers.
- B. Configure to match the OSPF interface unique IP address and subnet mask on both routers.
- C. Configure to match the OSPF interface MTU settings on both routers.
- D. Configure to match the OSPF interface network types on both routers.
Answer: C
Explanation:
https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13684-12.html After two OSPF neighboring routers establish bi-directional communication and complete DR/BDR election (on multi-access networks), the routers transition to the exstart state. In this state, the neighboring routers establish a master/slave relationship and determine the initial database descriptor (DBD) sequence number to use while exchanging DBD packets.
Neighbors Stuck in Exstart/Exchange State The problem occurs most frequently when attempting to run OSPF between a Cisco router and another vendor's router. The problem occurs when the maximum transmission unit (MTU) settings for neighboring router interfaces don't match. If the router with the higher MTU sends a packet larger that the MTU set on the neighboring router, the neighboring router ignores the packet.
NEW QUESTION 77
Refer to the exhibit.
After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and hub were not establishing. Which two actions resolve the issue? (Choose two.)
- A. Change the mode from mode tunnel to mode transport on R3.
- B. Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3.
- C. Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.
- D. Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3.
- E. Change the mode from mode transport to mode tunnel on R2.
Answer: A,C
NEW QUESTION 78
Refer to the exhibit.
An engineer configures a static route on a router, but when the engineer checks the route to the destination, a different next hop is chosen. What is the reason for this?
- A. The syntax of the static route is not valid, so the route is not considered.
- B. Dynamic routing protocols always have priority over static routes.
- C. The metric of the OSPF route is lower than the metric of the static route.
- D. The configured AD for the static route is higher than the AD of OSPF.
Answer: D
Explanation:
Explanation
The AD of static route is manually configured to 130 which is higher than the AD of OSPF router which is
110.
NEW QUESTION 79
Refer to the exhibit.
Which two actions should be taken to access the server? (Choose two.)
- A. Modify distribute list seq 10 to permit the route to 192.168.2.2.
- B. Modify the access list to add a second line of permit ip any
- C. Modify the access list to deny the route to 192.168.2.2.
- D. Add a sequence 20 in the route map to permit access list 1.
- E. Add a floating static route to reach to 192.168.2.2 with administrative distance higher than OSPF
Answer: C,E
NEW QUESTION 80
Refer to the exhibit.
After redistribution is enabled between the routing protocols; PC2, PC3, and PC4 cannot reach PC1. Which action can the engineer take to solve the issue so that all the PCs are reachable?
- A. Set the administrative distance 100 under the RIP process on R2.
- B. Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.
- C. Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.
- D. Redistribute the directly connected interfaces on R2.
Answer: B
NEW QUESTION 81
......
Authentic Best resources for 300-410 Online Practice Exam: https://www.exam4labs.com/300-410-practice-torrent.html
Practice To 300-410 - Exam4Labs Remarkable Practice On your Implementing Cisco Enterprise Advanced Routing and Services Exam: https://drive.google.com/open?id=1qOvJ9A8BhgaYso1eLgrncViNOZ3BzDhh