Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 431:

  What is the function of BFD?

  A. It provides uniform failure detection regardless of media type.

  B. It creates high CPU utilization on hardware deployments.

  C. It negotiates to the highest version if the neighbor version differs.

  D. It provides uniform failure detection on the same media type.

  Correct Answer: A

• Question 432:

  Refer to the exhibit.

  

  After recovering from a power failure. Ethernet0/1 stayed down while Ethernet0/0 returned to the up/up state The default route through ISP1 was not reinstated m the routing table until Ethernet0/1 also came up

  Which action resolves the issue?

  A. Reference the track object 1 in both static default routes

  B. Remove the references to the interface names from both static default routes

  C. Configure the default route through ISP1 with a higher administrative distance than 2.

  D. Add a static route to the 8 8.8 8/32 destination through the next hop 203.0.113.1

  Correct Answer: D

  IP SLA operation to check ISP-1 should not rely on ISP-2 interface/connection--reach 8.8.8.8 via ISP-2 in this case. in this case either;

  -the address for icmp-echo should be changed to 203.0.113.1 OR

  -Add static route 8.8.8.8/32 -->203.0.113.1

• Question 433:

  Refer to the exhibit.

  

  When an FTP client attempts to use passive FTP to connect to the FTP server, the file transfers fail Which action resolves the issue?

  A. Configure active FTP traffic.

  B. Modify FTP-SERVER access list to remove established at the end.

  C. Modify traffic filter FTP-SERVER in to the outbound direction.

  D. Configure to permit TCP ports higher than 1023.

  Correct Answer: D

  https://community.cisco.com/t5/switching/ftp-and-access-lists/td-p/1525257

• Question 434:

  Refer to the exhibit.

  

  An engineer must configure DMVPN Phase 3 hub-and-spoke topology to enable a spoke-to-spoke tunnel.

  Which NHRP configuration meets the requirement on R6?

  A. interface Tunnel1 ip nhrp authentication Cisco123 ip nhrp map multicast dynamic ip nhrp network-id 1 ip nhrp holdtime 300 ip nhrp redirect

  B. interface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e 0/1 tunnel mode gre multipoint ip nhrp network-id 1 ip nhrp map 192.168.1.2 192.1.20.2

  C. interface Tunnel1 ip nhrp authentication Cisco123 ip nhrp map multicast dynamic ip nhrp network-id 1 ip nhrp holdtime 300 ip nhrp shortcut

  D. Interface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e 0/0 tunnel mode gre multipoint ip nhrp network-id 1

  Correct Answer: A

• Question 435:

  Refer to the exhibit.

  

  The network administrator configured the network to establish connectivity between all devices and notices that the ASBRs do not have routes for each other. Which set of configurations resolves this issue?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 436:

  Refer to me exhibit.

  

  The hub and spoke are connected via two DMVPN tunnel interfaces The NHRP is configured and the tunnels are detected on the hub and the spoke Which configuration command adds an IPsec profile on both tunnel interfaces to encrypt traffic?

  A. tunnel protection ipsec profile DMVPN multipoint

  B. tunnel protection ipsec profile DMVPN tunnel1

  C. tunnel protection ipsec profile DMVPN shared

  D. tunnel protection ipsec profile DMVPN unique

  Correct Answer: C

• Question 437:

  Refer to the exhibit.

  

  An engineer implemented CoPP but did not see OSPF traffic going through it. Which configuration resolves the issue?

  A. control-plane service-policy input COPP

  B. policy-map COPP class OSFP police 8000 conform-action transmit exceed-action transmit violate-action drop

  C. ip access-list extended OSFP permit ospf any any

  D. class-map match-all OSFP match access-group name OSFP

  Correct Answer: C

• Question 438:

  Refer to the exhibit.

  

  Which action limits the access to R2 from 192.168.12.1?

  A. Swap sequence 10 with sequence 20 in access-list 100.

  B. Modify sequence 20 to permit tcp host 192.168.12.1 eq 22 any to access-list 100

  C. Swap sequence 20 with sequence 10 in access-list 100

  D. Modify sequence 10 to deny tcp any eq 22 any to access-list 100.

  Correct Answer: A

• Question 439:

  Refer to the exhibit.

  

  The company implemented uRPF to address an anti spoofing attack. A network engineer received a call from the IT security department that the regional data center is under an IP attack Which configuration must be implemented on R1 to resolve this issue?

  A. interface ethernet0/0 ip verify unicast reverse-path

  B. interface ethernet0/1 ip verify unicast reverse-path

  C. interface ethernet0/0 ip unicast RPF check reachable-via any allow-default allow-self-ping

  D. interface ethernet0/1 ip unicast RPF check reachable-via any allow-default allow-self-ping

  Correct Answer: B

• Question 440:

  Refer to the exhibit.

  

  The authentication is not working as desired and the user drops into user-exec mode.

  Which configuration resolves the issue?

  A. aaa new-model aaa authentication common-id default local aaa authorization exec default local ! line vty 0 4 login authentication default authorization exec default

  B. aaa new-model aaa authentication login default local aaa authorization priv default 15 ! line vty 0 4 login authentication default authorization exec priv15

  C. aaa new-model aaa authentication login local aaa authorization exec local ! line vty 0 4 login authentication local authorization exec default

  D. aaa new-model aaa authentication login default local aaa authorization exec default local ! line vty 0 4 login authentication default authorization exec default

  Correct Answer: D