Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 411:

  Refer to the exhibit.

  

  An engineer implemented CoPP to limit Telnet traffic to protect the router CPU. It was noticed that the Telnet traffic did not pass through CoPP

  Which configuration resolves the issue?

  A. ip access-list extended TELNET permit tcp host 10.2.2.1 host 10.2.2.4 eq telnet permit tcp host 10.1.1.1 host 10.1.1.3 eq telnet

  B. policy-map COPP class TELNET police 8000 conform-action transmit exceed-action transmit

  C. ip access-list extended TELNET permit tcp host 10.2.2.4 host 10.2.2.1 eq telnet permit tcp host 10.1.1.3 host 10.1.1.1 eq telnet

  D. policy-map COPP class TELNET police 8000 conform-action transmit exceed-action transmit violate-action drop

  Correct Answer: C

  police bps [burst-normal] [burst-max] conform-action action exceed-action action [violate-action action]

  Syntax Description

  bps

  Average rate, in bits per second. Valid values are 8000 to 200000000.

  burst-normal

  (Optional) Normal burst size in bytes. Valid values are 1000 to 51200000. Default normal burst size is 1500.

  burst-max

  (Optional) Maximum burst size, in bytes. Valid values are 1000 to 51200000. Default varies by platform.

  conform-action

  Specifies action to take on packets that conform to the rate limit.

  exceed-action

  Specifies action to take on packets that exceed the rate limit.

  violate-action

  (Optional) Specifies action to take on packets that violate the normal and maximum burst sizes.

  action

  Action to take on packets. Specify one of the following keywords:

  drop--Drops the packet.

• Question 412:

  Refer to the exhibits.

  

  London must reach Rome using a faster path via EIGRP if all the links are up but it failed to take this path Which action resolves the issue?

  A. Increase the bandwidth of the link between London and Barcelona

  B. Use the network statement on London to inject the 172 16 X 0/24 networks into EIGRP.

  C. Change the administrative distance of RIP to 150

  D. Use the network statement on Rome to inject the 172 16 X 0/24 networks into EIGRP

  Correct Answer: D

  Prefixes from Rome are only advertised in RIP (AD-120). After advertising it in EIGRP these prefixes will be preferred by London site. Additionally, London site performs redistribution of connected routes in EIGRP (see output).

• Question 413:

  Refer to the exhibit.

  

  An administrator configures a router to stop using a particular default route if the DNS server 8.8.8.8 is not reachable through that route. However, this configuration did not work as desired and the default route still works even if the DNS server 8.8.8 8 is unreachable.

  Which two configuration changes resolve the issue? (Choose two.)

  A. Configure two static routes for the 8.8.8.8/32 destination to match the IP SLA probe for each ISP.

  B. Associate every IP SLA probe with the proper WAN address of the router.

  C. Reference the proper exit interfaces along with the next hops in both static default routes.

  D. Use a separate track object to reference the existing IP SLA 1 probe for every static route.

  E. Use a separate IP SLA probe and track object for every static route

  Correct Answer: BE

• Question 414:

  What is a function of BFD?

  A. peer recovery after a Layer 3 protocol adjacency failure

  B. peer recovery after a Layer 2 adjacency failure

  C. failure detection independent of routing protocols and media types

  D. failure detection dependent on routing protocols and media types

  Correct Answer: C

  BFD detects failure without necessitating a specific routing protocol or media type.

• Question 415:

  Refer to the exhibit.

  

  AS111 is receiving its own routes from AS200 causing a loop in the network.

  Which configuration provides loop prevention?

  A. router bgp 111 neighbor 195.1.1.1 as-override neighbor 195.1.2.2 as-override

  B. router bgp 111 neighbor 195.1.1.1 as-override no neighbor 195.1.2.2 allows-in

  C. router bgp 111 no neighbor 195.1.1.1 allows-in no neighbor 195.1.2.2 allows-in

  D. router bgp 111 neighbor 195.1.2.2 as-override no neighbor 195.1.1.1 allows-in

  Correct Answer: C

• Question 416:

  Refer to the exhibit.

  

  The network administrator configured the Chicago router to mutually redistribute the LA and NewYork routes with OSPF routes to be summarized as a single route in EIGRP using the longest summary mask:

  

  After the configuration, the New York router receives all the specific LA routes but the summary route. Which set of configurations resolves the issue on the Chicago router?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 417:

  A network administrator must optimize the segment size of the TCP packet on the DMVPN IPsec protected tunnel interface, which carries application traffic from the head office to a designated branch. The TCP segment size must not overwhelm the MTU of the outbound link.

  Which configuration must be applied to the router to improve the application performance?

  A. interface tunnel30 ip mtu 1400 ip tcp payload-size 1360 ! crypto ipsec fragmentation before-encryption

  B. interface tunnel30 ip mtu 1400 ip tcp adjust-mss 1360 ! crypto ipsec fragmentation after-encryption

  C. interface tunnel30 ip mtu 1400 ip tcp max-segment 1360 ! crypto ipsec fragmentation before-encryption

  D. interface tunnel30 ip mtu 1400 ip tcp packet-size 1360 ! crypto ipsec fragmentation after-encryption

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/15-mt/sec-conn-dmvpn-15-mt-book/sec-conn-dmvpn-dmvpn.html

• Question 418:

  Refer to the exhibit.

  

  An engineer configured user login based on authentication database on the router, but no one can log into the router. Which configuration resolves the issue?

  A. aaa authentication login default enable

  B. aaa authorization network default local

  C. aaa authentication login default local

  D. aaa authorization exec default local

  Correct Answer: C

• Question 419:

  Refer to the exhibit

  

  The route to 192 168 200 0 is flapping between R1 and R2 Which set of configuration changes resolves the flapping route?

  

  A. R2(config)#router ospf 100 R2(config-router)#no redistribute eigrp 100 R2(config-router)#redistribute eigrp 100 metric 1 subnets

  B. R1(config)#no router rip R1(config)#ip route 192.168.200.0 255.255.255.0 10.40.0.2

  C. R2(config)#router eigrp 100 R2(config-router)#no redistribute ospf 100 R2(config-router)#redistribute rip

  D. R1(config)#router ospf 100 R1(config-router)#redistribute rip metric 1 metric-type 1 subnets

  Correct Answer: D

  R1 just redistribute RIP in EIGRP. R2 learn 192.168.200.0 route from EIGRP and R2 redistribute EIGRP in OSPF, then R2 advertive 192.168.200.0 to R1. R1 learns 192.168.200.0 from R2 via OSPF. OSPF has AD 90 and RIP 120, so OSPF route become better than RIP route, but, for a route redistribution there is a rule that says the route must be in routing table and the source of redistribution must be the source of this route in route table, in this case, the RIP. When R1 learn this route in OSPF, the OSPF route replace the RIP route in route table, so the rule is broken and the redistribution stop working, then R1 stops redistribuing 192.168.200.0 to EIGRP and R2 stop reciving this route and R2 stops redistribute this route in OSPF so R1 won't recive this route from OSPF anymore, then OSPF route is removed from LSDB and RIB so RIP route go to the route table and the redistribution to EIGRP starts again and the problem starts over and over

  If you redistribute RIP in OSPF in R1, R2 is gonna have this route as the best route from OSPF, so it does not matter if R2 learns it from EIGRP or NOT, because OSPF has AD 90 and External EIGRP 170.

• Question 420:

  Refer to the exhibit.

  

  Which set of commands restore reachability to loopback0?

  A. interface loopback0

  ip address 4.4.4.4 255.255.255.0 ip ospf network brodcast

  B. interface loopback0 ip address 4.4.4.4 255.255.255.0

  ip ospf interface type network

  C. interface loopback0

  ip address 4.4.4.4 255.255.255.0 ip ospf network point-to-point

  D. interface loopback0 ip address 4.4.4.4 255.255.255.0 ip ospf interface area 10

  Correct Answer: C