Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 201:

  Refer to the exhibit.

  

  A network engineer notices that R1 and R2 cannot establish an eBGP peering. The following messages appear in the log:

  

  Which configuration must the engineer apply to R1 to restore the eBGP peering?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 202:

  What is the downstream unsolicited distribution method in MPLS?

  A. It advertises labels to peers only when the peer requests.

  B. It sends a unicast hello message to a specific LSR.

  C. It sends a unicast hello message to a specific LER.

  D. It advertises labels to peers without peer request.

  Correct Answer: D

  Unsolicited Downstream :

  The MPLS architecture also allows an LSR to distribute bindings to LSRs that have not explicitly requested them. This is known as "unsolicited downstream" label distribution. This method is used in LDP and BGP-LU( RFC 3107)

• Question 203:

  Refer to the exhibit.

  

  After a RADIUS server fails AAA authentication, an engineer is trying to reestablish console access to a switch using the local password. Which configuration reestablishes the console access to switch SW1 via AAA?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

  Password 7 expects an ENCRYPTED string after the command, you cannot just type the password. this is usually used to copy configuration from one switch to antoher.

  R5(config-router)#metric weights ? <0-8> Type (Only TOS 0 supported)

  R5(config-router)#metric weights 0 ? <0-255> K1

  R5(config-router)#metric weights 0 1 ? <0-255> K2

  R5(config-router)#metric weights 0 1 0 ? <0-255> K3

  R5(config-router)#metric weights 0 1 0 1 ? <0-255> K4

  R5(config-router)#metric weights 0 1 0 1 0 ? <0-255> K5

• Question 204:

  Refer to the exhibit.

  

  Two routers are connected back to back via Gigabit Ethernet 0/0 interfaces. Which configuration provides VRF-Lite connectivity for two separate VRFs using the prefixes 10.1.1.0/24 for one VRF and 10.2.2.0/24 for the other VRF?

  A. ip vrf 1 rd 65001:1 ip vrf 2 rd 65001:2 ! int GigabitEthernet0/0 no shut ! int GigabitEthernet0/0.1 encapsulation dot1Q 1 ip vrf forwarding ip address 10.1.1.1 255.255.255.0 ! int GigabitEthernet0/0.2 encapsulation dot1Q 2 ip vrf forwarding ip address 10.2.2.1 255.255.255.0

  B. ip vrf 1 rd 65001:1 ip vrf 2 rd 65001:1 ! int GigabitEthernet0/0 no shut ! int GigabitEthernet0/0.1 encapsulation dot1Q 1 ip vrf forwarding 1 ip address 10.1.1.1 255.255.255.0 ! int GigabitEthernet0/0.2 encapsulation dot1Q 2 ip vrf forwarding 2 ip address 10.2.2.1 255.255.255.0

  C. ip vrf 1 ip vrf 2 int GigabitEthernet0/0 no shut ! int GigabitEthernet0/0.1 encapsulation dot1Q 1 ip vrf forwarding 1 ip address 10.1.1.1 255.255.255.0 ! int GigabitEthernet0/0.2 encapsulation dot1Q 2 ip vrf forwarding 2 ip address 10.2.2.1 255.255.255.0

  D. ip vrf 1 ip vrf 2 ! int GigabitEthernet0/0 no shut ! int GigabitEthernet0/0.1 encapsulation dot1Q 1 ip address 10.1.1.1 255.255.255.0 ip vrf forwarding 1 ! int GigabitEthernet0/0.2 encapsulation dot1Q 2 ip address 10.2.2.1 255.255.255.0 ip vrf forwarding 2

  Correct Answer: C

  https://zartmann.dk/mpls-vpns-vs-vrf-lite/

• Question 205:

  Refer to the exhibit.

  

  The network administrator configures the Chicago router to mutually redistribute the LA and New York routes with EIGRP routes to be summarized as a single route in OSPF:

  router eigrp 100 redistribute ospf 1 metric 10 10 10 10 10 router ospf 1 redistribute eigrp 100 subnets area 0 range 192.168.4.0 255. 255.252.0

  After the configuration, the LA router receives all the specific New York routes except the summary route. Which set of configurations resolve the issue on the Chicago router?

  A. interface E 0/0 ip summary-address eigrp 100 192.168.4.0 255.255.252.0

  B. router ospf 1 summary-address 192.168.4.0 255.255.252.0

  C. interface E 0/0 summary-address 192.168.4.0 255.255.252.0

  D. router ospf 1 area 0 range 192.168.0.0 255.255.0.0

  Correct Answer: B

  Remember that ABRs benefit from the command "area range

  This command means that from this Area, advertise this range.

  But Chicago Router is an ASBR, which requires the command "summary-address " to summarize routes into the OSPF domain.

  https://www.geeksforgeeks.org/configuring-ospf-route-summarization-in-cisco/

  ASBR summary-address [not-advertise]

  ABR area range [advertise |not-advertise]

• Question 206:

  Refer to the exhibit.

  

  Which configuration must the engineer apply on CSR103 to resolve the problem?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  md5 authentication

  Message digest authentication enabled Youngest key id is 1 https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13697-25.html

• Question 207:

  Refer to the exhibit.

  

  An engineer configures router B to direct all traffic from host 192.168.1.3 to router C. All other traffic must be routed through normal routing-protocol operations. Which configuration accomplishes the task?

  A. interface g0/0/0 ip address 192.168.1.254 255.255.255.0 ! access-list 101 permit ip host 192.168.1.3 any access-list 101 permit ip any any ! route-map CCNP permit 10 match ip address 101 set ip next-hop 10.0.1.2

  B. interface g0/0/0 ip address 192.168.1.254 255.255.255.0 ip policy route-map CCNP ! access-list 101 permit ip host 192.168.1.3 any ! route-map CCNP permit 10 match ip address 101 set ip next-hop 10.0.2.1

  C. interface g0/0/0 ip address 192.168.1.254 255.255.255.0 ip policy route-map CCNP ! access-list 101 permit ip any host 192.168.1.3 ! route-map CCNP permit 10 match ip address 101 set ip next-hop 10.0.1.2

  D. interface g0/0/0 ip address 192.168.1.254 255.255.255.0 ip policy route-map CCNP ! access-list 101 permit ip host 192.168.1.3 any ! route-map CCNP permit 10 match ip address 101 set ip next-hop 10.0.1.2

  Correct Answer: D

• Question 208:

  Refer to the exhibit.

  

  The IT router is connected with the Sales and Marketing departments. The interfaces have been assigned to their respective VRFs to keep the two department routes isolated. Which configuration set must the IT router use for BGP to distribute routes for each department that maintains their own routing table for network isolation?

  A. router bgp 111 address-family ipv4 unicast neighbor 172.16.1.2 remote-as 111 neighbor 172.16.2.2 remote-as 111 neighbor 172.16.11.2 remote-as 111 neighbor 172.16.12.2 remote-as 111

  B. router bgp 111 address-family ipv4 vrf Marketing neighbor 172.16.1.2 remote-as 111 neighbor 172.16.2.2 remote-as 111 ! address-family ipv4 vrf Sales neighbor 172.16.11.2 remote-as 111 neighbor 172.16.12.2 remote-as 111

  C. router bgp 111 neighbor 172.16.1.2 remote-as 111 neighbor 172.16.2.2 remote-as 111 neighbor 172.16.11.2 remote-as 111 neighbor 172.16.12.2 remote-as 111

  D. router bgp 111 address-family ipv4 vrf Marketing neighbor 172.16.1.2 remote-as 111 neighbor 172.16.1.2 Route-reflector-client neighbor 172.16.2.2 remote-as 111 neighbor 172.16.2.2 Route-reflector-client ! address-family ipv4 vrf Sales neighbor 172.16.11.2 remote-as 111 neighbor 172.16.11.2 Route-reflector-client neighbor 172.16.12.2 remote-as 111 neighbor 172.16.12.2 Route-reflector-client

  Correct Answer: D

• Question 209:

  The network administrator configured CoPP so that all SNMP traffic from Cisco Prime located at 192.168.1.11 toward the router CPU is limited to 1000 kbps. Any traffic that exceeds this limit must be dropped.

  access-list 100 permit udp any any eq 161 ! class-map CM-SNMP match access-group 100 ! policy-map PM-COPP class CM-SNMP police 1000 conform-action transmit ! control-plane service-policy input PM-COPP

  The network administrator is not getting the desired result for the SNMP traffic and SNMP traffic is getting dropped frequently. Which set of configurations resolves the issue?

  A. no access-list 100 access-list 100 permit tcp host 192.168.1.11 any eq 161

  B. no access-list 100 access-list 100 permit udp host 192.168.1.11 any eq 161 ! policy-map PM-COPP class CM-SNMP no police 1000 conform-action transmit police 1000000 conform-action transmit ! control-plane no service-policy input PM-COPP ! interface E 0/0 service-policy input PM-COPP ! interface E 0/1 service-policy input PM-COPP

  C. no access-list 100 access-list 100 permit udp host 192.168.1.11 any eq 161 ! policy-map PM-COPP class CM-SNMP no police 1000 conform-action transmit police 1000000 conform-action transmit

  D. policy-map PM-COPP class CM-SNMP no police 1000 conform-action transmit police 1000000 conform-action transmit

  Correct Answer: C

  1000 kbps = 1 000 000 bits per second => bps is used in CoPP, so this value needs to be changed.

  The ACL syntax for matching the interesting traffic:

  access-list 100 permit udp host any eq 161 (or eq snmp)

  https://community.cisco.com/t5/routing/acl-help/td-p/2788816/page/2

• Question 210:

  Refer to the exhibit.

  

  The BGP neighbor is not coming up. Which action resolves the issue?

  A. Configure the ebgp-multihop 2 command on R1 toward the neighbor.

  B. Configure a valid router ID on the neighbor that shows an invalid router ID of 0.0.0.0.

  C. The route map on eBGP sessions must allow the prefixes from the neighbor.

  D. Enable synchronization between the neighbors to bring the neighborship up.

  Correct Answer: A