Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 171:

  Which of the following commands need to be configured on a RIPng router prior to enabling this routing protocol?

  A. ipv6 rip enable

  B. ipv6 multicast-routing

  C. ipv6 unicast-routing

  D. ipv6 router rip

  Correct Answer: C

  The ipv6 unicast-routing command should be used before enabling RIPng on a router. This command should be executed in global configuration mode of the router. IPv6 can then be enabled by using the ipv6 enable command on any of the interfaces of the router. The ipv6 unicast-routing command allows you to forward IPv6 unicast datagrams.

  Routing Information Protocol Next Generation (RIPng) allows routers to learn about routes in an autonomous system. RIPng is an extension of the RIPv2 protocol to provide support IPv6 for future adherence.

  The similarities between RIPv2 and RIPng are as follows:

  Both protocols use User Datagram Protocol (UDP).

  Both use distance vector algorithm to find the best route.

  Both of them measure the metric in terms of hops.

  Both have the same maximum hop count of 15 for valid routes.

  The differences between RIPv2 and RIPng are as follows:

  RIPv2 learns IPv4 routes, whereas RIPng learns IPv6 routes

  RIPv2 supports automatic summarization as IPv4 defines classful addresses, whereas RIPng does not support automatic summarization RIPv2 uses UDP port 520, whereas RIPng supports port 521 RIPv2 requires authentication for RIP

  packets, whereas RIPng does not require RIP-specific authentication as IPv6 has an in-built IPsec authentication

  The ipv6 rip enable command should not be used because this command allows you to enable IPv6 RIP routing process on the interfaces of a router.

  You should not use the ipv6 multicast-routing command prior to enabling IPv6 on the router. This command is used after IPv6 is enabled on one or more interfaces of the router to allow multicast forwarding using Protocol Independent

  Multicast (PIM) and Multicast Listener Discovery (MLD) on all the IPv6-enabled interfaces.

  The ipv6 router rip command should not be used prior to enabling IPv6 because it allows you to enter the RIP for IPv6 router mode.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Describe RIPng

  References:

  Cisco > Configuring IPv6 Routing

  Cisco > Cisco IOS IPv6 Command Reference > ipv6 unicast-routing

• Question 172:

  Which statements in regards to route filtering are true? (Choose two.)

  A. Network security is the primary role of route filtering.

  B. If no route filter exists for an interface, the packet is processed normally.

  C. Route filtering on an interface cannot filter routes that originate from the same router.

  D. The distribute-list command enables the administrator to filter redistributed routes.

  E. The network keyword of the passive-interface command enables you identify the routes to advertise.

  Correct Answer: BD

  Distribute lists are used to filter inbound, outbound, or redistributed routing updates. Instead of using the passive-interface command, distribute lists enable you to selectively control which routes are processed.

  If no distribute list is associated with the interface, the routing update packets are processed normally.

  If a distribute list is associated with an interface, the routing update is compared to the access list that was specified in the distribute list. If a match is found to a permit statement, then the packet is forwarded. If a match is found to a deny

  statement, the packet is discarded. If no match is found, the implicit deny statement at the end of the access list will drop the packet.

  Network security is not the primary role of route filtering. Its primary function is to reduce unnecessary routing update traffic.

  Route filtering on an interface can filter routes that originate from the same router.

  The network keyword of the passive-interface command does not enable you identify the routes to advertise.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify filtering with any protocol

  References:

  Cisco > Home > Support > Technology Support > IP Routing > Design > Design Technotes > Filtering Routing Updates on Distance Vector IP Routing Protocols Cisco > Cisco IOS IP Configuration Guide: Configuring IP Routing Protocol-

  Independent Features > Filtering Routing Information

• Question 173:

  By default, how often are EIGRP hello packets sent on a LAN?

  A. 5 seconds

  B. 10 seconds

  C. 30 seconds

  D. 60 seconds

  Correct Answer: A

  The EIGRP default hello time over a LAN or high-speed dedicated WAN link is five seconds.

  On multipoint circuits with less than T1 bandwidth, EIGRP hello packets are sent every 60 seconds. EIGRP sets the default hello interval to five seconds to ensure that it can quickly sense if connectivity to a neighboring router has been cut. If

  a router does not hear from a neighboring EIGRP router in 15 seconds, it will declare that neighbor as no longer reachable.

  The five-second hello interval is shorter than the default values for OSPF hellos (10 seconds), RIP updates (30), or IGRP updates (90). As a result, EIGRP senses network faults faster by default than do other protocols.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify EIGRP neighbor relationship and authentication

  References:

  Internetworking Technology Handbook > Enhanced Interior Gateway Routing Protocol (EIGRP) > Underlying Processes and Technologies

• Question 174:

  Which of the following commands allows a Cisco router to obtain an IP address from a DHCP server?

  A. Router(config-if)# ip address dhcp

  B. Router(config)# ip address dhcp

  C. Router(dhcp-config)# ip address dhcp

  D. Router(config)# address dhcp

  E. Router(dhcp-config)# address dhcp

  Correct Answer: A

  The ip address dhcp command when issued from interface configuration mode will allow a router to obtain an IP address for that interface from a DHCP server.

  In this scenario, the router is acting as a DHCP client, not a server, so the command would not be issued from dhcp-config mode. In addition, the IP address is being assigned to an interface on the router, not the router as a whole so the command would not be entered at global config mode.

  The most common situation in which a router interface might be set as a DHCP client is to enable one DHCP router to obtain configuration options from another router providing this service.

  Consider an example where RouterA is connected to RouterB. RouterA contains a complete DHCP configuration including the options (DNS server, domain name). RouterB is connected to RouterA through its FastEthernet0 interface. The following configuration would allow RouterB to issue a different set of addresses than RouterA while importing the options from Router A. The configuration of RouterB is below as shown in the partial output of the show run command:

  

  Note that for this configuration to function properly, the FastEthernet0 interface on RouterB must be set as a DHCP client.

  The command router(config)# ip address dhcp is incorrect because it is executed at the global configuration prompt. The command must be executed in interface configuration mode.

  The command router(dhcp-config)# ip address dhcp is incorrect because it is executed at the DHCP configuration prompt. The command must be executed in interface configuration mode.

  The command router(config)# address dhcp is incorrect because it is missing the ip part of the command.

  The command router(dhcp-config)# address dhcp is incorrect because it is missing the ip part of the command and it is executed at the DHCP configuration prompt. It must be executed in interface configuration mode.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Identify, configure, and verify IPv4 addressing and subnetting

  References:

  Cisco > Cisco IOS IP Addressing Services Command Reference > ip address dhcp

• Question 175:

  Refer to the exhibit.

  

  A PC is configured to obtain an IP address automatically, but it receives an IP address only from the 169.254.0.0 subnet. The DHCP server logs contained no DHCPDISCOVER message from the MAC address of the PC. Which action resolves the issue?

  A. Configure a DHCP reservation on the server for the PC.

  B. Configure an ip helper-address on the router to forward DHCP messages to the server.

  C. Configure DHCP Snooping on the switch to forward DHCP messages to the server.

  D. Configure a static IP address on the PC and exclude it from the DHCP pool.

  Correct Answer: B

• Question 176:

  Refer to the exhibit.

  

  R1 lost its directly connected EIGRP peer 172.16.33.2 (SW1). Which configuration resolves the issue?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/82110-eigrp-authentication.html

• Question 177:

  Refer to the exhibit.

  

  A network engineer notices that the configured track option is down.

  Which configuration resolves the issue?

  A. ip sla schedule 10 start-time pending life forever

  B. ip sla schedule 10 no timeout

  C. ip sla schedule 10 start-time now

  D. ip sla schedule 10 no threshold

  Correct Answer: C

• Question 178:

  Refer to the exhibit.

  

  A network engineer lost remote access to the router due to a network problem. The engineer used the console to access the router and noticed continuous logs on the console terminal. Which configuration limits the number of log messages on the console to critical and higher severity level messages?

  A. logging console 2

  B. logging console 5

  C. no logging console

  D. term no monitor

  Correct Answer: A

  0.

  Emergency

  1.

  Alert

  2.

  Critical

  3.

  Error

  4.

  Warning

  5.

  Notice

  6.

  Informational

  7.

  Debug

• Question 179:

  How does BFD protocol work?

  A. When BFD declares a failure on the primary IGP path, the router on the peer router chooses to use the secondary path.

  B. BFD operates on the route processor module and impacts the route processor CPU utilization.

  C. BFD control packets are sent via UDP port 3784 to the destination router.

  D. BFD echo packets are sent to the same source IP and different destination IP with TCP port of 3786.

  Correct Answer: C

• Question 180:

  Refer to the exhibit.

  

  A network engineer configured routers R1 and R2 with MP-BGP. The engineer noticed that the routers cannot exchange any IPv6 routes; however, the IPv4 neighbor relationship is working fine. Which configuration must the engineer apply to router R2 to exchange IPv6 routes?

  A. ipv6 unicast-routing ipv6 cef ! interface Loopback100 ipv6 address 2001:DB8:128::2/128 ! interface GigabitEthernet1/0 ipv6 address 2001:DB8:1::2/64 !

  router bgp 65002 no bgp default ipv4-unicast neighbor 2001:DB8:1::1 remote-as 65001 ! address-family ipv4 network 2001:DB8:128::2/128

  B. ipv6 unicast-routing ipv6 cef ! interface Loopback100 ipv6 address 2001:DB8:128::2/128 ! interface GigabitEthernet1/0 ipv6 address 2001:DB8:1::2/64 ! router bgp 65002 no bgp default ipv4-unicast neighbor 2001:DB8:1::1 remote-as 65001 ! address-family ipv6 network 2001:DB8:128::2/128

  C. ipv6 unicast-routing ipv6 cef ! interface Loopback100 ipv6 address 2001:DB8:128::2/128 ! interface GigabitEthernet1/0 ipv6 address 2001:DB8:1::2/64 description AS65001 ID B468^AD03G907::1 ! router bgp 65002 no bgp default ipv4-unicast neighbor 2001:DB8:1::1 remote-as 65001 ! address-family ipv6 network 2001:DB8:128::2/128 neighbor 2001:DB8:1::1 activate

  D. ipv6 cef ! interface Loopback100 ipv6 address 2001:DB8:128::2/128 ! interface GigabitEthernet1/0 ipv6 address 2001:DB8:1::2/64 ! router bgp 65002 no bgp default ipv4-unicast neighbor 2001:DB8:1::1 remote-as 65001 ! address-family ipv6 network 2001:DB8:128::2/128 neighbor 2001:DB8:1::1 activate

  Correct Answer: C