Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 11:

  What does IPv6 Source Guard utilize to determine if IPv6 source addresses should be forwarded?

  A. ACE

  B. ACLS

  C. DHCP

  D. Binding Table

  Correct Answer: D

  IPv6 source guard is an interface feature between the populated binding table and data traffic filtering. This feature enables the device to deny traffic when it is originated from an address that is not stored in the binding table. IPv6 source guard does not inspect ND or DHCP packets, rather, it works

• Question 12:

  Refer to the exhibit.

  

  An engineer receives this error message when trying to access another router m-band from the serial interface connected to the console of R1. Which configuration is needed on R1 to resolve this issue?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  The "transport output none" command prevents any protocol connection made from R1.

  Therefore our SSH connection to 192.168.12.2 was refused. In order to fix this problem we can configure "transport output ssh" under "line console 0" of R1.

  Note: The parameter "-l" specifies the username to log in as on the remote machine.

  https://community.cisco.com/t5/other-network-architecture/out-of-band-router-access/td-p/333295

• Question 13:

  Refer to the exhibit.

  

  Which two actions should be taken to access the server? (Choose two.)

  A. Modify the access list to add a second line of permit ip any

  B. Modify the access list to deny the route to 192.168.2.2.

  C. Modify distribute list seq 10 to permit the route to 192.168.2.2.

  D. Add a sequence 20 in the route map to permit access list 1.

  E. Add a floating static route to reach to 192.168.2.2 with administrative distance higher than OSPF

  Correct Answer: BE

• Question 14:

  Refer to the exhibit.

  

  A user cannot SSH to the router. What action must be taken to resolve this issue?

  A. Configure transport input ssh B. Configure transport output ssh

  C. Configure ip ssh version 2

  D. Configure ip ssh source-interface loopback0

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960- x_cg_chapter_01001.html

• Question 15:

  Refer to the exhibit.

  

  A client is concerned that passwords are visible when running this show archive log config all. Which router configuration is needed to resolve this issue?

  A. MASS-RTR(config-archive-log-cfg)#password encryption aes

  B. MASS-RTR(config)#aaa authentication arap

  C. MASS-RTR(config)#service password-encryption

  D. MASS-RTR(config-archive-log-cfg)#hidekeys

  Correct Answer: D

  

• Question 16:

  Refer to the exhibit.

  

  An engineer wanted to set a tag of 30 to route 10 1.80.65/32 but it failed How is the issue fixed?

  A. Modify route-map ospf-to-eigrp permit 30 and match prefix-list ccnp2.

  B. Modify route-map ospf-to-eigrp permit 10 and match prefix-list ccnp2.

  C. Modify prefix-list ccnp3 to add 10.1.64.0/20 le 24

  D. Modify prefix-list ccnp3 to add 10.1.64.0/20 ge 32

  Correct Answer: B

• Question 17:

  Refer to the exhibit.

  

  A network administrator configured an IPv6 access list to allow TCP return frame only, but it is not working as expected. Which changes resolve this issue?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/122_55_se/co nfiguration/guide/scg3750/swv6acl.html

• Question 18:

  What does the PE router convert the IPv4 prefix to within an MPLS VPN?

  A. 48-bit route combining the IP and PE router-id

  B. VPN IPv4 prefix combined with the 64-bit route distinguisher

  C. prefix that combines the ASN, PE router-id and IP prefix

  D. eBGP path association between the PE and CE sessions

  Correct Answer: B

  The IP prefix is a member of the IPv4 address family. After the PE device learns the IP prefix, the PE converts it into a VPN-IPv4 prefix by combining it with an 8-byte route distinguisher (RD). The generated prefix is a member of the VPN-IPv4 address family. It uniquely identifies the customer address, even if the customer site is using globally nonunique (unregistered private) IP addresses. The route distinguisher used to generate the VPN-IPv4 prefix is specified by a configuration command associated with the virtual routing and forwarding (VRF) instance on the PE device.

• Question 19:

  Refer to the exhibit.

  

  An engineer identifier a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?

  A. no spanning-tree uplinkfast

  B. spanning-tree loopguard default

  C. spanning-tree backbonesfast

  D. spanning-tree portfast bpduguard

  Correct Answer: B

• Question 20:

  Which feature drops packets if the source address is not found in the snooping table?

  A. IPv6 Source Guard

  B. IPv6 Destination Guard

  C. IPv6 Prefix Guard

  D. Binding Table Recovery

  Correct Answer: A