Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 351:

  Router R1 has been configured with a default route like this:

  R1#(config) ip route 0.0.0.0 0.0.0.0 10.2.3.1

  You want to redistribute this route into OSPF but when you configure the redistribute static command under the OSPF process the default route is not present. What will create a default route in the OSPF routing process?

  A. Use the redistribute static subnets command.

  B. Create a default metric for the static default route.

  C. Use the default-information originate command under the OSPF process.

  D. Change the static default route to use an Administrative Distance (AD) greater than 110.

  Correct Answer: C

• Question 352:

  Which one of the following statements regarding Bidirectional Forwarding Detection (BFD) is correct?

  A. BFD echo mode is the default mode of operation.

  B. BFD is not supported for HSRP.

  C. CEF must be disabled for BFD to work.

  D. BFD is not supported when using static routes.

  Correct Answer: A

• Question 353:

  Which of the following OSPF neighbor adjacency states is applicable only to manually configured OSPF neighbors in a Non Broadcast Multi-Access network?

  A. Attempt

  B. Init

  C. 2-Way

  D. Exstart

  E. Exchange

  Correct Answer: A

• Question 354:

  With Internal BGP, there is a requirement for all peers to be logically fully meshed, where all IBGP routers must peer with all other IBGP routers. For scaling purposes, there are two mechanisms that were developed to bypass this requirement. What are they? (Choose two.)

  A. Confederations

  B. IBGP to EBGP route redistribution

  C. BGP peer filtering

  D. Route reflectors.

  Correct Answer: AD

• Question 355:

  Which of the following OSPF Link State Advertisements (LSA's) were created for IPV6 and do not apply to IPv4 OSPF networks? (Choose two.)

  A. Link LSA (Type 8)

  B. Summary LSA (Type 3)

  C. Router LSA (Type 2)

  D. Intra-Area Prefix LSA (Type 9)

  E. Opaque LSA (Type 9)

  Correct Answer: AD

• Question 356:

  Refer to the exhibit.

  

  2.

  R2 and R5 receive traffic from R1 in AS 65101.

  The traffic from spoke to hub is dropping. The operations team observes:

  1. R2-R3 link is down due to the fiber cut.

  3.

  R3 and R6 receive traffic from R4 in AS 65201.

  Which configuration resolves the issue?

  A. R5(config)#router bgp 65101 R5(config-router)#neighbor 10.10.10.6 remote-as 65201 R5(config-router)#neighbor 10.10.10.6 update-source Loopback0 R5(config-router)#neighbor 10.10.10.6 ebgp-multihop 3

  B. R5(config)#router bgp 65101 R5(config-router)#no neighbor 10.0.0.18 update-source Loopback0

  C. R6(config)#router bgp 65101 R6(config-router)#no neighbor 10.0.0.17 update-source Loopback0

  D. R6(config)#router bgp 65201 R6(config-router)#neighbor 10.10.10.5 remote-as 65101 R6(config-router)#neighbor 10.10.10.5 update-source Loopback0 R6(config-router)#neighbor 10.10.10.5 ebgp-multihop 3

  Correct Answer: B

  The error message "BGP: 10.0.0.18 passive open failed - 10.0.0.17 is not update-source Loopback0's address (10.10.10.5)" indicates that there was a problem with establishing a BGP session between two routers with IP addresses

  10.0.0.18 and 10.0.0.17.

  The message specifically states that the passive open attempt from the device with IP address 10.0.0.18 has failed because the device with IP address 10.0.0.17 is not using the correct source IP address when sending updates. Instead of

  using the IP address of the Loopback0 interface, which is 10.10.10.5, it is using a different IP address.

  In this case, it appears that the device with IP address 10.0.0.17 is using a different source IP address than the one expected by the device with IP address 10.0.0.18. Specifically, the device with IP address 10.0.0.17 should be configured to

  use the IP address of its Loopback0 interface (10.10.10.5 in this case) as the source address for BGP updates when communicating with the device at IP address 10.0.0.18.

• Question 357:

  A customer is running an mGRE DMVPN tunnel over WAN infrastructure between hub and spoke sites. The existing configuration allows NHRP to add spoke routers automatically to the multicast NHRP mappings. The customer is migrating the network from IPv4 to the IPv6 addressing scheme for those spokes' routers that support IPv6 and can run DMVPN tunnel over the IPv6 network.

  Which configuration must be applied to support IPv4 and IPv6 DMVPN tunnels on spoke routers?

  A. tunnel mode ipv6ip 6to4

  B. tunnel mode ipv6ip auto-tunnel

  C. tunnel mode ipv6ip 6rd

  D. tunnel mode ipv6ip isatap

  Correct Answer: B

  tunnel mode ipv6ip auto-tunnel Example: Router(config-if)# tunnel mode ipv6ip auto-tunnel

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/interface/configuration/15-s/ir-15-s-book/ip6-auto-comp-tun.pdf

• Question 358:

  Which protocol must be secured with MD-5 authentication across the MPLS cloud to prevent hackers from introducing bogus routers?

  A. RSVP

  B. ALSO

  C. LDP

  D. MP-BGP

  Correct Answer: C

  The Label Distribution Protocol (LDP) can also be secured with MD-5 authentication across the MPLS cloud. This prevents hackers from introducing bogus routers, which would participate in the LDP. https://www.cisco.com/c/en/us/td/docs/net_mgmt/vpn_solutions_center/2-0/mpls/provisioning/guide/PGmpls1.html

• Question 359:

  What is a function of the IPv6 DHCP Guard feature for DHCP messages?

  A. If the device is configured as a DHCP server, no message is switched.

  B. All client messages are always switched regardless of the device role.

  C. It blocks only DHCP request messages.

  D. Only access lists are supported for matching traffic.

  Correct Answer: B

  DHCPv6 Guard Overview The DHCPv6 Guard feature blocks reply and advertisement messages that come from unauthorized DHCP servers and relay agents. Packets are classified into one of the three DHCP type messages. All client messages are always switched regardless of device role. DHCP server messages are only processed further if the device role is set to server. Further processing of server messages includes DHCP server advertisements(for source validation and server preference) and DHCP server replies (for permitted prefixes). If the device is configured as a DHCP server, all the messages need to be switched, regardless of the device role configuration. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-sy/dhcp-15-sy-book/ip6-dhcpv6-guard.pdf

• Question 360:

  Refer to the exhibit.

  

  An administrator is troubleshooting a time synchronization problem for the router's time to another Cisco IOS XE-based device that has recently undergone security hardening. Which action resolves the issue?

  A. NTP service is disabled and must be enabled on 10.1.255.40.

  B. Ensure that the CPE router has a valid route to 10.1.255.40 for NTP and rectify if not reachable.

  C. Allow NTP in the ingress ACL on 10.1.255.40 by permitting UDP destined to port 123.

  D. Allow NTP in the ingress ACL on 10.1.255.40 by permitting TCP destined to port 123.

  Correct Answer: A