Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 381:

  What are the two reasons for RD and VPNv4 addresses in an MPLS Layer 3 VPN? (Choose two.)

  A. VPN RT communities are used to identify customer unique routes.

  B. When the PE redistributes customer routes into MP-BGP, they must be unique.

  C. They are on a CE device to use for static configuration.

  D. They are used for a BGP session with the CE device.

  E. RD is prepended to each prefix to make routes unique.

  Correct Answer: BE

  As its name implies, a route distinguisher (RD) distinguishes one set of routes (one VRF) from another. It is a unique number prepended to each route within a VRF to identify it as belonging to that particular VRF or customer. An RD is carried along with a route via MP-BGP when exchanging VPN routes with other PE routers.

  https://packetlife.net/blog/2013/jun/10/route-distinguishers-and-route-targets/

• Question 382:

  Refer to the exhibit.

  

  The network administrator configured BGP as the backup route for 10.0.0.0/8 and it should work only when EIGRP 10.0.0.0/8 failed to install for site S4248T5E130F6. Which configuration resolves the issue?

  A. configure terminal ! router eigrp 1 distance eigrp 90 170

  B. configure terminal ! router eigrp 1 redistribute bgp metric 10000 1 255 1 1500

  C. configure terminal ! ip route 10.0.0.0 255.0.0.0 192.168.90.2

  D. configure terminal ! router eigrp 1 distance eigrp 10 170

  Correct Answer: D

  https://www.oreilly.com/library/view/cisco-ios-in/0596008694/re197.html distance eigrp internal-distance external-distance

• Question 383:

  Refer to the exhibit.

  

  With the partial configuration of a router-on-a-stick, clients in VLAN 10 on Gi2 cannot obtain IP configuration from the central DHCP server. The DHCP server is reachable by a successful ping from the router. Which action resolves the issue?

  A. Configure the ip helper-address 192.168.255.3 command on the Gi2.10 subinterface.

  B. Configure a valid IP address on the Gi2 interface so that DHCP requests can be forwarded.

  C. Configure the ip dhcp pool 1 and network 192.168.210.0 255.255.255.0 commands.

  D. Configure the ip dhcp excluded-address 192.168.255.3 command on the Gi2.10 subinterface.

  Correct Answer: A

• Question 384:

  The IPv6 network is under attack by an unknown source that is neither in the binding table nor learned through neighbor discovery. Which feature helps prevent the attack?

  A. IPv6 Destination Guard

  B. IPv6 Prefix Guard

  C. IPv6 Router Advertisement Guard

  D. IPv6 Snooping

  Correct Answer: B

  The IPv6 Prefix Guard feature works within the IPv6 Source Guard feature and enables a device to reject traffic originating from addresses that are topologically incorrect.

• Question 385:

  Which failure detection mechanism is used for BFD?

  A. consistent rate

  B. Layer 2 protocol failure

  C. variable rate

  D. routing protocol failure

  Correct Answer: A

  BFD provides a consistent failure detection method for network administrators. Because the network administrator can use BFD to detect forwarding path failures at a uniform rate https://www.cisco.com/en/US/docs/ios/12_4t/ip_route/configuration/guide/t_bfd.html

• Question 386:

  Network operations report issues with receiving too many external routes, which caused CPU spike on routers with smaller memories. Which action resolves the issue?

  A. Configure the area range command when redistributing on ASBR.

  B. Configure the summary-address command when redistributing on ABR.

  C. Configure the area range command when redistributing on ABR.

  D. Configure the summary-address command when redistributing on ASBR.

  Correct Answer: D

  https://www.geeksforgeeks.org/configuring-ospf-route-summarization-in-cisco/

  ASBR summary-address [not-advertise]

  ABR area range [advertise |not-advertise]

  E1/E2 come from ASBR.

• Question 387:

  Refer to the exhibit.

  

  An engineer must configure OSPF with R9 and R10 and configure redistribution between OSPF and RIP, causing a routing loop. Which configuration on R9 and R10 meets this objective?

  A. router ospf 1 redistribute rip subnets tag 20 ! route-map deny_tag20 deny 10 match tag 20 route-map deny_tag20 permit 20 ! router ospf 1 distribute-list route-map deny_tag20 in

  B. router ospf 1 redistribute rip subnets tag 20 ! route-map deny_tag20 deny 10 match tag 20 route-map deny_tag20 deny 20 ! router ospf 1 distribute-list route-map deny_tag20 in

  C. router ospf 1 redistribute rip subnets tag 20 ! route-map deny_tag20 deny 10 match tag 20 route-map deny_tag20 permit 20 ! router rip 1 distribute-list route-map deny _tag20 in

  D. router ospf 1 redistribute rip subnets tag 20 ! route-map deny_tag20 permit 10 match tag 20 route-map deny_tag20 permit 20 ! router ospf 1 distribute-list route-map deny_tag20 in

  Correct Answer: C

• Question 388:

  Refer to the exhibit.

  

  Bangkok is using ECMP to reach the 172.20.2.0/24 network. The network administrator must configure it in such a way that traffic from 172.16.2.0/24 network uses the Singapore router as the preferred route. Which set of configurations accomplishes this task?

  A. Bangkok access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 ! interface Ethernet0/1 ip policy route-map PBR1

  B. Dubai access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 set ip next-hop peer-address ! interface Ethernet0/0 ip policy route-map PBR1

  C. Bangkok access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 ! interface Ethernet0/2 ip policy route-map PBR1

  D. Dubai access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255 ! route-map PBR1 permit 10 match ip address 101 set ip next-hop 172.19.1.2 ! interface Ethernet0/0 ip policy route-map PBR1

  Correct Answer: C

• Question 389:

  Refer to the exhibit.

  

  A network engineer received a call from the vendor for a failed attempt to remotely log in to their managed router loopback interface from 192.168.40.15. Which action must the network engineer take to resolve the issue?

  A. The source IP summarization must be updated to include the vendor source IP address.

  B. The time-range configuration must be changed to use absolute instead of periodic.

  C. The EIGRP configuration must be updated to include a network statement for loopback 100.

  D. The IP access list VENDOR must be applied to interface loopback 100.

  Correct Answer: A

  the extended access-list VENDOR: 192.168.32.0 0.0.0.7.255 that starts at 192.168.32.1 and ends at 192.168.39.254 doesn't include the vendor ip address of 192.168.40.15

• Question 390:

  Refer to the exhibit.

  

  An engineer noticed that the router log messages do not have any information about when the event occurred. Which action should the engineer take when enabling service time stamps to improve the logging functionality at a granular level?

  A. Configure the debug uptime option.

  B. Configure the msec option.

  C. Configure the timezone option.

  D. Configure the log uptime option.

  Correct Answer: B

  https://www.cisco.com/E-Learning/bulk/public/tac/cim/cib/using_cisco_ios_software/cmdrefs/service_timestamps.htm