Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 301:

  An administrator is setting up a DMVPN tunnel between their offices and he is getting below output when he is running the command "show crypto isakmp sa":

  

  What command will you run to identify the issue?

  A. Debug ip icmp

  B. Debug crypto isakmp

  C. Debug crypto ipsec sa

  D. Debug ssh

  Correct Answer: B

• Question 302:

  A company is looking to implement VPN between their Head Quarter and over 100+ Branch Offices. They are looking for a solution that:

  1.

  Reduces deployment complexity

  2.

  Simplifies branch communications

  3.

  Offers branch to branch connectivity.

  4.

  Is cost effective

  5.

  Offers strong encryption

  Select the best option from the below options that you would recommend to implement.

  A. MPLS

  B. IPSEC

  C. DMVPN

  D. GRE

  Correct Answer: C

• Question 303:

  You have a DNA center deployed in your environment. Which feature of the DNA Center will you use for system-guided as well as self-guided troubleshooting.

  A. Assurance

  B. Automation

  C. Zero Trust

  D. Discovery

  Correct Answer: A

  Provides both system-guided as well as self-guided troubleshooting. For a large number of issues, Assurance provides a system-guided approach, where multiple Key Performance Indicators (KPIs) are correlated, and the results from tests and sensors are used to determine the root cause of a problem, after which possible actions are provided to resolve the problem. The focus is on highlighting the issue rather than monitoring data. Quite frequently, Assurance performs the work of a Level 3 support engineer.

• Question 304:

  There is an issue between two nodes within your network, and you are using Cisco DNA Center Path Trace to help troubleshoot the problem. Which of the following statements are true regarding the Path Trace tool?

  A. Overlapping IP addresses are supported.

  B. Path trace between a fabric client and a non-fabric client is supported

  C. Path trace between a wired client and a wireless client is supported

  D. Only TCP traffic is supported.

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-assurance/2-2-2/b_cisco_dna_assurance_2_2_2_ug/b_cisco_dna_assurance_2_2_2_ug_chapter_01111.html

• Question 305:

  Which of the following are valid DHCP options that DHCP servers can be configured to use with DHCP clients when offering a lease? (Choose two.)

  A. DHCP Option 1: subnet mask

  B. DHCP Option 3: Lease Duration

  C. DHCP Option 4: Client host name

  D. DHCP Option 6: DNS servers

  Correct Answer: AD

• Question 306:

  Which feature of the Cisco DNA Center allows you to run diagnostic CLI commands to the devices that are managed by DNA Center for troubleshooting purposes?

  A. Command Runner

  B. DNA Spaces

  C. DNA Advantage

  D. Intelligent Capture

  Correct Answer: A

• Question 307:

  You want to change the Administrative Distance of external EIGRP routes from the default of 170 to 130 instead on router R1 while leaving the default AD value for internal EIGRP routes. Which set of command will accomplish this?

  A. R1(config)#router eigrp R1(config-router)#distance 170

  B. R1(config)#router eigrp 1 R1(config-router)#distance eigrp 90 130

  C. R1(config)#router eigrp 1 R1(config-router)#distance eigrp 130 90

  D. R1(config)#router eigrp 1 R1(config-router)#distance 90 130

  Correct Answer: B

• Question 308:

  Which of the following are valid TFTP error codes? (Choose two.)

  A. Error Code 1 ?File not found

  B. Error Code 2 ?Unknown error

  C. Error code 3 ?Invalid user

  D. Error code 6 ?File already exists

  E. Error code 8 ?Undefined error

  Correct Answer: AD

• Question 309:

  What are the two prerequisites of setting up DMVPN tunnel? (Choose two.)

  A. Before a multipoint GRE (mGRE) and IPsec tunnel can be established, define an Internet Key Exchange (IKE) policy by using the crypto isakmp policy command.

  B. The Public IP's of the routers should be able to ping each other.

  C. To enable 2547oDMPVN - Traffic Segmentation Within DMVPN configure multiprotocol label switching (MPLS) by using the mpls ip command

  D. It is mandatory to use wildcard preshared keys to build the DMVPN tunnel

  E. DMVPN can work on all OEM devices that support IKE.

  Correct Answer: AC

• Question 310:

  Refer to the exhibit.

  

  An administrator is setting up above shown routers to enable MVPN with mGRE mode. What would be the recommended interface configuration that must be done by the engineer to make it to work?

  A. interface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel mode IPSec multipoint

  B. interface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel mode gre multipoint

  C. interface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp network-id 1 tunnel source 172.17.0.1 tunnel mode IPsec multipoint

  D. interface Tunnel0 description mGRE - DMVPN Tunnel ip address 10.0.0.1 255.255.255.0 ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 10.0.0.1 tunnel destination 172.17.0.2 tunnel mode IPsec multipoint

  Correct Answer: C