Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 291:

  Out of the below options regarding DMVPN and FLEXVPN, select the correct one.

  A. FlexVPN uses a new key management protocol ?IKEv2, while most traditional DMVPN networks use IKEv1

  B. FlexVPN uses a new key management protocol ?IKEv1, while most traditional DMVPN networks use IKEv2

  C. With FlexVPN there's multiple standard way of NHRP and routing protocols operations as opposed to 1 phase of DMVPN

  D. Flex VPN and DMVPN both are supported only on Firewalls.

  Correct Answer: A

• Question 292:

  Refer to the exhibit.

  

  A network engineer is provisioning end-to-end traffic service for two different enterprise networks with these requirements:

  1.

  The OSPF process must differ between customers on HQ and Branch office routers, and adjacencies should come up instantly.

  2.

  The enterprise networks are connected with overtapping networks between HQ and a Branch office.

  Which configuration meets the requirements for a customer site?

  A. ISP(config-if)#int f1/0 ISP(config-if)#ip vrf forwarding EA ISP(config-if)#description TO->EA2_Branch ISP(config-if)#ip add 172.16.200.2 255.255.255.0 ISP(config-if)#no shut

  B. ISP(config-vrf)#int f0/0 ISP(config-if)#ip vrf forwarding EB ISP(config-if)#description TO->EB1_Branch ISP(config-if)#ip add 172.16.100.2 255.255.255.0 ISP(config-if)#no shut

  C. ISP(config)#int f2/0 ISP(config-if)#ip vrf forwarding EA ISP(config-if)#description TO->EA1_HQ ISP(config-if)#ip address 172.16.100.2 255.255.255.0 ISP(config-if)#no shut

  D. ISP(config-if)#int f3/0 ISP(config-if)#ip vrf forwarding EA ISP(config-if)#description TO->EA2_Branch ISP(config-if)#ip address 172.16.200.2 255.255.255.0 ISP(config-if)#no shut

  Correct Answer: A

• Question 293:

  Refer to the exhibit.

  

  A customer reports that user traffic of bank XYZ to the AAA server is not using the primary path via the R3-R2 link. The network team observes:

  No fiber is cut on links R2 and R3.

  As101 and AS 201 routers established BGP peering.

  Which configuration resolves the issue?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 294:

  Select three benefits of setting up a MPLS Network from the below options. (Choose three.)

  A. Connection less Service

  B. Security as good as connection-oriented VPNs

  C. Provides IPS level intelligence to filter packets.

  D. Integrated QoS support

  E. All variations of Static routes are supported

  Correct Answer: ABD

• Question 295:

  Refer to the Exhibit.

  

  The access-lists are configured on the network device. There is a server behind the network device. User are trying to access the server securely however they are not able to access it. What changes would you recommend to the above configuration?

  A. Permit tcp port 465

  B. Permit tcp port 3389

  C. Permit tcp port 443

  D. Permit tcp any any

  Correct Answer: C

• Question 296:

  Which of the following is true regarding IPsec Pre-fragmentation (Look-Ahead Fragmentation)? (Choose two.)

  A. Operates in tunnel mode only

  B. Operates in transport mode only

  C. Is used to help in the overall IPsec throughput since the end host is able to avoid packet reassembly after packet decryption.

  D. Is not dependent on the MTU of the physical interface used for IPsec.

  E. Does not support Path MTU Discovery

  Correct Answer: AC

• Question 297:

  Which of the following correctly describes the concept of split horizon with IP routing? (Choose two.)

  A. Split horizon is a valid routing loop prevention mechanism

  B. Split horizon is used to filter customer routes in an ISP network.

  C. When enabled, split horizons informs the router to not advertise routes back out the same interface from where that route was originally received.

  D. Split horizons cannot be disabled on WAN interfaces

  E. Split horizon is not applicable to EIGRP networks

  Correct Answer: AC

• Question 298:

  A network administrator is reloading a router and during the bootup, he is getting the error message "%Error opening tftp://255.255.255.255/network-confg (Socket error)". What command need to be applied on Cisco Router to fix this issue.

  A. No service config

  B. Write erase reload

  C. Reload noconfirm

  D. Copy run start

  Correct Answer: A

• Question 299:

  What is the term used when it causes the packets to lose their MPLS labels including the VPN information that lies in the inner MPLS Label i.e. if a packet goes through an untagged interface, the VPN information is lost and VPN sites lose connectivity?

  A. Pseudowire

  B. Black Hole

  C. Traffic Engineering

  D. Active Network Abstraction

  Correct Answer: B

• Question 300:

  An administrator wants to implement security on his company's router. Please select three options that you will use on your router to secure it. (Choose three.)

  A. Control Access to the router

  B. Restrict all traffic through the router

  C. Restrict SNMP

  D. Enable all unused services

  E. Encrypt all passwords

  F. Disable logging

  Correct Answer: ACE