Get 300-410 Braindumps & 300-410 Real Exam Questions
Cisco 300-410 Actual Questions and Braindumps
NEW QUESTION # 98
Which Ipv6 first-hop security feature helps to minimize denial of service attacks?
- A. IPv6 Destination Guard
- B. IPv6 MAC address filtering
- C. DHCPv6 Guard
- D. IPv6 Router Advertisement Guard
Answer: A
Explanation:
Explanation
The Destination Guard feature helps in minimizing denial-of-service (DoS) attacks. It performs address resolutions only for those addresses that are active on the link,and requires the FHS binding table to be populated with the help of the IPv6 snooping feature.The feature enables the filtering of IPv6 traffic based on the destinationaddress, and blocks the NDP resolution for destination addresses that are not found in the binding table. By default, the policy drops traffic coming for an unknowndestination.
NEW QUESTION # 99
Refer to the exhibit.
The network administrator can see the DHCP discovery packet in R1. but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the FaO/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two.)
- A. service dhcp command on R1
- B. service dhcp-relay command on R1
- C. ip dhcp relay information enable command on R1
- D. ip dhcp relay information trust-all command on R2
- E. ip dhcp option 82 command on R2
Answer: B,C
NEW QUESTION # 100
Refer to the exhibit.
A network engineer receives a fault ticket about traffic drops from BANK SITE to BANK Users can reach BANK SITE Y from router RA as a source.
Routers RB and RD are acting as route reflectors.
Which configuration resolves the issue?
- A. RC(config)#router bgp 65201
RC(config-router)#neighbor 10.10.10.2 route-reflector-client - B. RB(config)router bgp 65201
RB(config-router)#neighbor 10.10.10.3 route-reflector-client - C. RC(config)#router bgp 65201
RC(config-router)#neighbor 10.10.10.4 route-reflector-client - D. RF(config)#router bgp 65201
RF(config-router)#neighbor 10.10.10.6 route-reflector-client
Answer: C
NEW QUESTION # 101
Refer to the exhibit.
A network administrator must block ping from user 3 to the App Server only. An inbound standard access list is applied to R1 interface G0/0 to block ping. The network administrator was notified that user 3 cannot even ping user 9 anymore. Where must the access list be applied in the outgoing direction to resolve the issue?
- A. R2 interface G0/0
- B. R2 interface G1/0
- C. SW1 interface G1/10
- D. SW1 interface G2/21
Answer: D
NEW QUESTION # 102
Refer to the exhibit.
An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 loses reachability with the router R3 Fa0/0 interface. The route has changed to flow through router R2. Which debug command is used to troubleshoot this issue?
- A. debug ip sla error
- B. debug ip flow
- C. debug ip packet
- D. debug ip routing
Answer: D
Explanation:
Explanation
debug ip routing This command enables debugging messages related to the routing table.
NEW QUESTION # 103
Drag and drop the DHCP messages from the left onto the correct uses on the right.
Answer:
Explanation:
Explanation
DHCPACK
The server-to-client communication with configuration parameters, including committed network address.
DHCPINFORM
The client-to-server communication, asking for only local configuration parameters that the client already has externally configured as an address.
DHCPNAK
The server-to-client communication, refusing the request for configuration parameter.
DHCPDECLINE
The client-to-server communication, indicating that the network address is already in use
NEW QUESTION # 104
Drag and drop the MPLS terms from the left onto the correct definitions on the right.
Answer:
Explanation:
NEW QUESTION # 105
The network administrator configured R1 to authenticate Telnet connections based on Cisco ISE using TACACS+. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1(192.168.1.1) with a shared secret password of Cisco123.
The administrator cannot authenticate to R1 based on ISE. Which configuration fixes the issue?
- A. line vty 0 4
login authentication telnet - B. tacacs-server host 192.168.1.5 key Cisco123
- C. line vty 0 4
login authentication TAC-SERV - D. ip tacacs-server host 192.168.1.5 key Cisco123
Answer: A
NEW QUESTION # 106
Refer to the exhibit.
Refer to the exhibit. Which configuration resolves the route filtering issue on R1 to redistribute all the routes except 172.16.2.48/28?
- A.
- B.
- C.
- D.
Answer: D
NEW QUESTION # 107
Refer to the exhibit.
Refer to the exhibit. R2 has two paths to reach 192.168.13.0/24. but traffic is sent only through R3. Which action allows traffic to use both paths?
- A. Configure the bandwidth 2000 command under interface FastEthernet0/0 on R2.
- B. Configure the variance 4 command under the EIGRP process on R2.
- C. Configure the delay 1 command under interface FastEthernet0/0 on R2.
- D. Configure the variance 2 command under the EIGRP process on R2
Answer: B
Explanation:
From the output of the "show ip eigrp topology ..." command, we notice network 192.168.13.0/24 was learned via two routes:+ From 192.168.23.3 (R3) with FD = 1075200 and AD = 281600+ From 192.168.12.1 (R1) with FD = 2611200 and AD = 281600 From the output of the "show ip route ..." command, we learned that the best (and chosen) path is via 192.168.23.3 (R3).
To use both paths (called unequal cost load balancing) with EIGRP, the second path via R1 must satisfy the feasibility condition. The feasibility condition states that, theAdvertised Distance (AD) of a route must be lower than the feasible distance of the current successor route.
In this case, the second path satisfies the feasible condition as its AD (281600) is smaller than the FD (1075200) of the best path. Therefore we can configure loadbalancing with "variance" command.
In other words, EIGRP will install all paths with metric < variance * best_metric into the local routing table, provided that it meets the feasibility condition to preventrouting loop. Therefore we can calculate the variance > metric / best_metric = 2611200 / 1075200 =2.4.
So with a variance greater than 2 (and must be an integer), we can load balance traffic to network 192.168.13.0/24.
NEW QUESTION # 108
An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table. What should be configured to accomplish this task?
- A. set ip next-hop
- B. set ip next-hop recursive
- C. set ip default next-hop
- D. set ip next-hop verify-availability
Answer: C
Explanation:
NEW QUESTION # 109
Refer to the exhibit.
An engineer configures DMVPN and receives the hub location prefix of 10.1.1.0724 on R2 and R3 The R3 prefix of 10 1.3.0/24 is not received on R2. and the R2 prefix 10.1,2.0/24 is not received on R3. Which action reserves the issue?
- A. There is no spoke-to-spoke connection DMVPN configuration should be modified to enable a tunnel connection between R2 and R3 and neighbor relationship confirmed by use of the show ip eigrp neighbor command
- B. Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the command no ip split-horizon eigrp 10 on the tunnel interface of R1
- C. There is no spoke-to-spoke connection DMVPN configuration should be modified with a manual neighbor relationship configured between R2 and R3 and confirmed bb use of the show ip eigrp neighbor command.
- D. Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the no ip split-horizon eigrp 10 command on the Gi0/0 interface of R1.
Answer: B
Explanation:
Explanation
In this topology, the Hub router will receive advertisements from R2 Spoke router on its tunnel interface. The problem here is that it also has a connection with R3 Spoke on that same tunnel interface. If we don't disable split-horizon, then the Hub will not relay routes from R2 to R3 and the other way around. That is because it received those routes on the same interface tunnel and therefore it cannot advertise back out that same interface (split-horizon rule). Therefore we must disable splithorizon on the Hub router to make sure the Spokes know about each other.
NEW QUESTION # 110
Drag and drop the MPLS terms from the left onto the correct definitions on the right.
Answer:
Explanation:
NEW QUESTION # 111
Refer to the exhibit.
Refer to the exhibit. Site1 must perform unequal cost load balancing toward the segments behind Site2 and Site3. Some of the routes are getting load balanced but others are not. Which configuration allows Site1 to load balance toward all the LAN segments of the remote routers?
- A. Option D
- B. Option C
- C. Option A
- D. Option B
Answer: A
NEW QUESTION # 112
Refer to the exhibits.
A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping
192.168.3.1 from the LA router. Which set of configurations fixes the issue?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option B
- D. Option A
Answer: C
NEW QUESTION # 113
Refer to the exhibit.
Which two actions restrict access to router R1 by SSH? (Choose two.)
- A. Remove class-map ANY from service-policy CoPP
- B. Configure transport input ssh on line vty and remove sequence 30 from access list 100.
- C. Configure transport output ssh on line vty and remove sequence 10 from access list 199.
- D. Configure transport output ssh on line vty and remove sequence 20 from access list 100.
- E. Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199
Answer: B,D
NEW QUESTION # 114
Exhibit:
NTP is configured across the network infrastructure and Cisco DNA Center. An NTP issue was reported on the Cisco DNA Center at 17:15. Which action resolves the issue?
- A. Check and resolve reachability between Cisco DNA Center and the NTP server
- B. Check and configure NTP on the WLC and synchronize with Cisco DNA Center
- C. Reset the NTP server to resolve any synchronization issues tor all devices
- D. Check and resolve reachability between the WLC and the NTP server
Answer: B
Explanation:
Excessive time lag between Cisco DNA Center and device: The time difference between Cisco DNA Center and the device IP Address has drifted too far apart. CiscoDNA Center cannot process the device data accurately if the time difference is more than 3 minutes.
NEW QUESTION # 115
Drag and drop the MPLS VPN device types from the left onto the definitions on the right.
Answer:
Explanation:
NEW QUESTION # 116
The network administrator configured CoPP so that all routing protocol traffic toward the router CPU is limited to 1 mbps. All traffic that exceeds this limit must be dropped. The router is running BGP and OSPF Management traffic for Telnet and SSH must be limited to 500kbps.
access-list 100 permit tcp any any eq 179
access-list 100 permit tcp any any range 22 23
access-list 100 permit ospf any any
!
class-map CM-ROUTING
match access-group 100
class-map CM-MGMT
match access-group 100
!
policy-map PM-COPP
class CM-ROUTING
police 1000000 conform-action transmit
class CM-MGMT
police 500000 conform-action transmit
!
control-plane
service-policy output PM-COPP
No traffic is filtering through CoPP,which is resulting in high CPU utilization,which configuration resolves the issue ?
- A. No access-list 100
access-list 100 permit tcp any any eq 179
access-list 100 permit tcp any any range eq 22
access-list 100 permit tcp any any range eq 23
access-list 100 permit ospf any any - B. no access-list 100
access-list 100 permit tcp any any eq 179
access-list 100 permit ospf any any
access-list 101 Permit tcp any any range 22 23
!
class-map CM-MGMT
no match access-group 100 - C. control-plane
no service-policy output PM-COPP
service-policy input PM-COPP - D. no access-list 100access-list 100 permit tcp any any eq 179
access-list 100 permit ospf any any
access-list 101 Permit tcp any any range 22 23
!
class-map CM-MGMT
no match access-group 100
match access-group 101
Answer: B
Explanation:
match access-group 101
!
control-plane
no service-policy output PM-COPP
service-policy input PM-COPP
NEW QUESTION # 117
Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPV3 categories on the right.
Answer:
Explanation:
NEW QUESTION # 118
Refer to the exhibit.
The output of the trace route from R5 shows a loop in the network. Which configuration prevents this loop?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option B
- D. Option A
Answer: C
NEW QUESTION # 119
Which protocol is used to determine the NBMA address on the other end of a tunnel when mGRE is used?
- A. NHRP
- B. MP-BGP
- C. OSPF
- D. IPsec
Answer: C
NEW QUESTION # 120
......
Earning the Cisco Certified Specialist - Enterprise Advanced Infrastructure Implementation certification can be a valuable addition to an IT professional's resume, as it demonstrates their expertise in advanced routing technologies and services. In addition to validating their skills and knowledge, this certification can also help professionals advance their careers and pursue new opportunities in enterprise networking and infrastructure implementation.
300-410 Dumps To Pass Cisco Exam in 24 Hours - Pass4SureQuiz: https://actualanswers.pass4surequiz.com/300-410-exam-quiz.html