Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 391:

  Refer to the exhibit.

  

  An engineer must extend VRF-Lite over a trunk to another switch for VLAN 70 (10.70.70.0/24) on port GigabitEtheret0/0 and VLAN 80 (10.80.80.0/24) on port GigabitEthernet0/1. Which configuration accomplishes this objective?

  A. interface GigabitEthernet0/0 no switchport ip vrf forwarding 70 ip address 10.70.70.1 255.255.255.0 ! interface GigabitEthernet0/1 no switchport ip vrf forwarding 80 ip address 10.80.80.1 255.255.255.0

  B. interface GigabitEthernet0/0 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 70 ! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 80

  C. interface GigabitEthernet0/0 switchport mode access switchport access vlan 70 ip vrf forwarding 70 ! interface GigabitEthernet0/1 switchport mode access switchport access vlan 80 ip vrf forwarding 80

  D. interface GigabitEthernet0/0

  switchport mode access

  switchport access vlan 70

  !

  interface GigabitEthernet0/1

  switchport mode access

  switchport access vlan 80

  !

  Correct Answer: B

  The physical trunk ports are configured with simple trunk configuration. The vrf is associated under the vlan interfaces. 1)create vlans 2)create vrf definition 3)create vlan interface, assign vrf, then IP 4)configure the trunk and allow vlans as required

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/31sg/configuration/guide/conf/vrf.html https://community.cisco.com/t5/switching/vrf-routing-in-vlan/td-p/3194751

• Question 392:

  Refer to the exhibit.

  

  An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established and did not meet the requirement. Which action resolves the issue?

  A. Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv4 address, and remove process 10 from the global configuration.

  B. Replace OSPF process 10 on the interfaces with OSPF process 1, and configure an additional router ID with IPv6 address.

  C. Replace OSPF process 10 on the interfaces with OSPF process 1, and remove process 10 from the global configuration.

  D. Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv6 address, and remove process 10 from the global configuration.

  Correct Answer: C

• Question 393:

  Refer to the exhibit.

  

  A shoe retail company implemented the uRPF solution for an antispoofing attack. A network engineer received the call that the branch A server is under an IP spoofing attack. Which configuration must be implemented to resolve the attack?

  A. R4 interface ethernet0/1 ip verify unicast source reachable-via any allow-default allow-self-ping

  B. R4 interface ethernet0/1 ip unicast RPF check reachable-via any allow-default allow-self-ping

  C. R3 interface ethernet0/1 ip verify unicast source reachable-via any allow-default allow-self-ping

  D. R3 interface ethernet0/1 ip unicast RPF check reachable-via any allow-default allow-self-ping

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_urpf/configuration/xe-3s/sec-data-urpf-xe-3s-book/cfg-unicast-rpf.html

• Question 394:

  Refer to the exhibit.

  

  An engineer configures two ASBRs, 10.4.17.6 and 10.4.15.5, in an OSPF network to redistribute routes from EIGRP. However, both ASBRs show the EIGRP routes as equal costs even though the next-hop router 10.4.17.6 is closer to R1. How should the network traffic to the EIGRP prefixes be sent via 10.4.17.6?

  A. The administrative distance should be raised to 120 from the ASBR 10.4.17.6.

  B. The redistributed prefixes should be advertised as Type 1.

  C. The ASBR 10.4.17.6 should assign a tag to match and assign a lower metric on R1.

  D. The administrative distance should be raised to 120 from the ASBR 10.4.15.5.

  Correct Answer: B

• Question 395:

  An engineer configured routing between multiple OSPF domains and introduced a routing loop that caused network instability. Which action resolves the problem?

  A. Set a tag using the redistribute command toward a domain and deny inbound in the other domain by a matching tag.

  B. Set a tag using the redistribute command toward a different domain and deny the matching tag when exiting from that domain.

  C. Set a tag using the network command in a domain and use the route-map command to deny the matching tag when exiting toward a different domain.

  D. Set a tag using the network command in a domain and use the route-map command to deny the matching tag when entering into a different domain.

  Correct Answer: A

  Redistribution Rule: Never advertise prefixes from routing protocol X into Y and then back into X.

  Redistribution goes from one protocol (or routing domain) into the other protocol (or routing domain) using the redistribute command.

  It's easier to picture redistribution between different protocols. Answer "A" means something like this:

  router ospf 1

  redistribute eigrp 100 subnets tag 20

  route-map FILTER deny

  match tag 20

  route-map FILTER permit

  router eigrp 100

  redistribute ospf 1 metric 100000 1 255 1 1500 route-map FILTER

  1)redistribute into ospf and set the tag

  2)redistribute into eigrp and match the tag (with action deny)

  Set a tag so, routes originating from a routing domain will not be redistributed back into that domain.

  https://networklessons.com/cisco/ccie-routing-switching/troubleshooting-metric-redistribution

• Question 396:

  What is the purpose of an OSPF sham-link?

  A. to allow inter-area routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network

  B. to allow intra-area routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network

  C. to correct OSPF backdoor routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network

  D. to correct OSPF backdoor routing when OSPF is used as the PE-PE connection protocol in an MPLS VPN network

  Correct Answer: C

  "Although OSPF PE-CE connections assume that the only path between two client sites is across the MPLS VPN backbone, backdoor paths between VPN sites (shown in grey in the figure below) may exist. If these sites belong to the same OSPF area, the path over a backdoor link will always be selected because OSPF prefers intraarea paths to interarea paths. (PE routers advertise OSPF routes learned over the VPN backbone as interarea paths.) For this reason, OSPF backdoor links between VPN sites must be taken into account so that routing is performed based on policy. "

• Question 397:

  Which protocol supports labeled paths between PE routers in an MPLS network?

  A. LDP

  B. RSVP

  C. MP-BGP

  D. IGP

  Correct Answer: C

  In an MPLS network, Service Provider Edge (PE) routers use Multiprotocol Border Gateway Protocol (MP-BGP) to exchange label and route information with each other. MP-BGP is the routing protocol used to create and distribute labels between service provider edge routers on an MPLS network.

• Question 398:

  What must be configured by the network engineer to circumvent AS_PATH loop prevention mechanism in IP/VPN Hub and Spoke deployment scenarios?

  A. Use allowas-in at the PE_Hub.

  B. Use allowas-in and as-override at all PEs.

  C. Use allowas-in and as-override at the PE_Hub.

  D. Use as-override at the PE_Hub.

  Correct Answer: D

  Purpose: This is used to replace occurrences of the AS number of the provider edge (PE) router with the AS number of the remote AS, typically in the context of BGP VPNs. Typical Use: This is often used by service providers in a BGP/MPLS VPN to prevent loops in the customer's network when the customer is using the same AS number at multiple sites.

• Question 399:

  Refer to the exhibit.

  

  Which action makes 10.1.3.2 the feasible successor to reach 10.200.1.0/24 for location S42T431E64F51?

  A. Increase path bandwidth higher than 10.1.1.2 and lower than 10.1.2.2 between RtrA and the destination.

  B. Increase path bandwidth lower than 10.1.1.2 and lower than 10.1.2.2 between RtrA and the destination.

  C. Increase path bandwidth higher than 10.1.2.2 and lower than 10.1.1.2 between RtrA and the destination.

  D. Increase path bandwidth higher than 10.1.2.2 and higher than 10.1.1.2 between RtrA and the destination.

  Correct Answer: C

  Further info: https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/16406-eigrp-toc.html If it is necessary to influence the path EIGRP chooses, always use delay to do so.

  https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/13673-14.html There are two reasons you must not to use the bandwidth to influence EIGRP paths:

  1.

  If you change the bandwidth it can have impact beyond the effect to the EIGRP metrics.

  2.

  When you lower the bandwidth it can prevent EIGRP neighbors that get hello packets because it throttles back.

• Question 400:

  Refer to the exhibit.

  

  An engineer applies a prefix-list filter that filters most of the network 10 prefixes instead of allowing them. Which action resolves the issue?

  A. Modify the ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9 command.

  B. Modify the ip prefix-list EIGRP seq 10 permit 10.0.0.0/8 le 9 command.

  C. Modify the ip prefix-list EIGRP seq 20 permit 0.0.0.0/0 le 32 command.

  D. Modify the ip prefix-list EIGRP seq 10 permit 10.0.0.0/8 le 32 command.

  Correct Answer: D