Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 441:

  Refer to the exhibit.

  

  An engineer must configure PBR on R1 to reach to 10.2.2.0/24 via R3 AS64513 as the primary path and a backup route through default route via R2 AS64513. All BGP routes are in the routing table of R1. but a static default route overrides BGP routes.

  Which PBR configuration achieves the objective?

  A. access-list 100 permit ip 10.1.1.0 0.0.0.255 10.2.2.0 0.0.0.255 ! route-map PBR permit 10 match ip address 100 set ip next-hop recursive 10.3.3.1

  B. access-list 100 permit ip 10.1.1.0 255.255.255.0 10.2.2.0 255.255.255.0 ! route-map PBR permit 10 match ip address 100 set ip next-hop recursive 10.3.3.1

  C. access-list 100 permit ip 10.1.1.0 0.0.0.255 10.2.2.0 0.0.0.255 ! route-map PBR permit 10 match ip address 100 set ip next-hop 10.3.3.1

  D. access-list 100 permit ip 10.1.1.0 255.255.255.0 10.2.2.0 255.255.255.0 ! route-map PBR permit 10 match ip address 100 set ip next-hop 10.3.3.1

  Correct Answer: A

• Question 442:

  Refer to the exhibit.

  

  AS 111 mut not be used as a transit AS, but ISP-1 is getting ISP-2 routes from AS 111. Which configuration stops Customer AS from being used as a transit path on ISP-1?

  A. ip as-path access-list 1 permit ^$

  B. ip as-path access-list 1 permit_111_

  C. ip as-path access-list 1 permit."

  D. ip as-path access-list 1 permit ^111$

  Correct Answer: D

  The correct configuration to prevent Customer AS 111 from being used as a transit path on ISP-1 is option D: ip as-path access-list 1 permit ^111$.

  This configuration creates an access-list named "1" that permits only AS paths that consist of only AS 111. The "^" character matches the beginning of the AS path, the "$" character matches the end of the AS path, and the digits "111" match the AS number. Any other AS path, including those that pass through AS 111, will not match this access-list.

• Question 443:

  Refer to the exhibit.

  

  An engineer configured SNMP Commies on UserSW2 switch, but the SNMP server cannot upload modified configurations to the switch. Which configuration resolves this issue?

  A. snmp-server community Ciscowruser RW 11

  B. snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22

  C. snmp-server community CiscOUs3r RW 11

  D. snmp-server group NETVIEW v2c priv read NETVIEW access 11

  Correct Answer: A

  The string "Ciscowruser" which is a community string (similar to a per-shared key) should be corrected.

  Confusing components: the question gives the same name to a server-group and to a view. Plus, the question names the password-like strings to some sort of users.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-3se/3850/snmp-xe-3se-3850-book/nm-snmp-snmpv3.html

  https://www.cbtnuggets.com/blog/technology/networking/how-to-configure-snmpv3-and-how-it-works

• Question 444:

  Refer to the exhibit.

  

  An engineer configured NetFlow on R1, but the flows do not reach the NMS server from R1. Which configuration resolves this Issue?

  A. R1(config)#flow monitor FlowMonitort1 R1(config-flow-monitor)#destination 10.66.66.66

  B. R1(config)#interface Ethernet0/0 R1(config-if)#ip flow monitor Flowmonitor1 input R1(config-if)#ip flow monitor Flowmonitor1 output

  C. R1(config)#interface Ethernet0/1 R1(config-if)#ip flow monitor Flowmonitor1 input R1(config-if)#ip flow monitor Flowmonitor1 output

  D. R1(config)#flow exporter FlowExporter1 R1(config-flow-exporter)#destination 10.66.66.66

  Correct Answer: D

• Question 445:

  An administrator attempts to download the pack NBAR2 file using TFTP from the CPE router to another device over the Gi0/0 interface. The CPE is configured as below:

  

  The transfer fails. Which action resolves the issue?

  A. Change the WAN ACL to permit the UDP port 69 to allow TFTP

  B. Make the permit udp any eq tftp any entry the last entry in the WAN ACL.

  C. Change the WAN ACL to permit the entire UDP destination port range

  D. Shorten the file name to the 8+3 naming convention.

  Correct Answer: B

• Question 446:

  Refer to the exhibit.

  

  The IT router has been configured with the Science VRF and the interfaces have been assigned to the VRF

  Which set of configurations advertises Science-1 and Science-2 routes using EIGRPAS 111?

  A. router eigrp 111 address-family ipv4 vrf Science autonomous-system 1 network 192.168.1.0 network 192.168.2.0

  B. router eigrp 111 address-family ipv4 vrf Science network 192.168.1.0 network 192.168.2.0

  C. router eigrp 111 network 192.168.1.0 network 192.168.2.0

  D. router eigrp 1 address-family ipv4 vrf Science autonomous-system 111 network 192.168.1.0 network 192.168.2.0

  Correct Answer: D

• Question 447:

  What is an MPLS LDP targeted session?

  A. session between neighbors that are connected no more than one hop away

  B. LDP session established between LSRs by exchanging TCP hello packets

  C. label distribution session between non-directly connected neighbors

  D. LDP session established by exchanging multicast hello packets

  Correct Answer: C

• Question 448:

  Refer to the exhibit

  

  The engineer configured route redistribution in the network but soon received reports that R2 cannot access 192 168 7 0/24 and 192 168 15 0/24 subnets Which configuration resolves the issue?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 449:

  An engineer configures PBR en R5 and wants to create a policy that matches traffic destined foward 10.10.10.0/24 and forwards it toward 10.1.1 1. This traffic must also have its IP precedence set to 5. All other traffic should be forwarded toward 10.1.1.2 and have its IP precedence set to 0.

  Which configuration meets the requirements?

  A. access-list 1 permit 10.10.10.0 0.0.0.255 access-list 2 permit any route-map CCNP permit 10 match ip address 1 set ip next-hop 10.1.1.1 set ip precedence 5 ! route-map CCNP permit 20 match ip address 2 set ip next-hop 10.1.1.2 set ip precedence 0route-map CCNP permit 30

  B. access-list 100 permit ip any 10.10.10.0 0.0.0.255 route-map CCNP permit 10 match ip address 100 set ip next-hop 10.1.1.1 set ip precedence 0 ! route-map CCNP permit 20 set ip next-hop 10.1.1.2 set ip precedence 5 ! route-map CCNP permit 30

  C. access-list 1 permit 10.10.10.0 0.0.0.255 route-map CCNP permit 10 match ip address 1 set ip next-hop 10.1.1.1 set ip precedence 5 ! route-map CCNP permit 20 set ip next-hop 10.1.1.2 set ip precedence 0

  D. access-list 100 permit ip any 10.10.10.0 0.0.0.255 route-map CCNP permit 10 match ip address 100 set ip next-hop 10.1.1.1 set ip precedence 5 ! route-map CCNP permit 20 set ip next-hop 10.1.1.2 set ip precedence 0

  Correct Answer: D

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/25ew/configuration/guide/conf/pbroute.pdf Classify traffic based on extended access list criteria.

• Question 450:

  Refer to the exhibit.

  

  A network engineer must establish communication between three different customer sites with these requirements:

  Site-A: must be restricted to access to any users at Site-B or Site-C.

  Site-B and Site-C must be able to communicate between sites and share routes using OSPF.

  PE interface configuration:

  interface FastEthernet0/0

  ip vrf forwarding Site-A

  !

  interface FastEthernet0/1

  ip vrf forwarding SharedSites

  !

  interface FastEthernet0/2

  ip vrf forwarding SharedSites

  Which configuration meets the requirements?

  A. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 10 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 1

  B. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 20 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 1

  C. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 10 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 0

  D. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 20 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 0

  Correct Answer: D