Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 321:

  Which of the following are commonly used ports when implementing RADIUS based authentication and accounting? (Choose two.)

  A. UDP port 1644 for authentication

  B. UDP port 1812 for authentication

  C. TCP port 1812 for authentication

  D. UDP port 1813 for accounting

  E. TCP port 1813 for accounting

  F. UDP port 1644 for accounting

  Correct Answer: BD

• Question 322:

  Which of the following are valid restrictions when configuring Control Plane Policing (CoPP) on Cisco devices? (Choose two.)

  A. You cannot use the "log" keyword with CoPP on the access list entries

  B. CEF must be disabled

  C. The only match types supported with CoPP is ip precedence, ip dscp, and access-group

  D. Only standard access-lists are supported.

  Correct Answer: AC

• Question 323:

  Which of the following are used to validate the source of IPv6 traffic and are considered IPv6 layer 2 snooping features? (Choose two.)

  A. DHCPv6 Guard

  B. DHCPv6 Root Guard

  C. IPv6 Source Guard

  D. IPv6 Prefix Guard

  Correct Answer: CD

• Question 324:

  You want to implement AAA on router R1 for a more robust authentication and authorization system. What is typically the first global command used to do this?

  A. aaa new-model

  B. aaa enable

  C. aaa server-group

  D. aaa authentication login

  Correct Answer: A

• Question 325:

  A time based access list has been configured on R1 to allow SSH access to the device only on weekdays. Which of the following are valid options when using the time range command? (Choose two.)

  A. relative

  B. recurring

  C. absolute

  D. periodic

  Correct Answer: CD

• Question 326:

  First-Hop Security (FHS) is a set of features to optimize IPv6 link operation, and help with scale in large L2 domains. Which of the following are valid First-Hop Security features supported by Cisco? (Choose three.)

  A. IPv6 RA Guard

  B. IPv6 Source Guard

  C. DHCPv6 Guard

  D. IPv6 Snooping

  E. DHCPv6 Snooping

  Correct Answer: ACD

• Question 327:

  What are the four stages of obtaining an IP address from a DHCP server that corresponds to the acronym DORA?

  A. Discover, Offer, Release, Addressing

  B. Discover, Obtain, Request, Acknowledge

  C. Determine, Offer, Release, Acknowledge

  D. Discover, Offer, Request, Acknowledge

  Correct Answer: D

• Question 328:

  SNMPv2 has been used throughout a network to manage all of the network devices. You have been asked to migrate to an SNMPv3 solution instead. What is the biggest advantage to migrating from SNMPv2 to SNMPv3?

  A. Enhanced security, including encryption of passwords

  B. Enhanced performance, supporting more messages per minute.

  C. Enhanced scaling, supporting thousands more devices per network segment than SNMPv2.

  D. Using a push model instead of pull. SNMPv3 uses telemetry to push data to SNMP management stations in real time.

  Correct Answer: A

• Question 329:

  You are configuring Netflow on various network elements in order to gain visibility into the traffic types used. How many export destinations can this Network data be sent to?

  A. Up to 2

  B. Up to 4

  C. Up to 8

  D. There is no limitation on the number of flow data export destinations.

  Correct Answer: A

• Question 330:

  A Cisco router has just been configured for NTP and is synchronized with the configured NTP server. However, log messages still show an incorrect time. What else should be done to match the log messages time stamps with the NTP based time?

  A. Wait a bit longer for the synchronized time to get applied to new log messages.

  B. Configure the "service timestamps log datetime localtime" command in global mode.

  C. Configure the "service timestamps log datetime synchronize" command globally

  D. Configure the "service timestamps log ntp" command in global config mode.

  Correct Answer: B