Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 41:

  Refer to the exhibit. Routing protocols are mutually redistributed on R3 and R1. Users report intermittent connectivity to services hosted on the 10.1.1.0/24 prefix. Significant routing update changes are noticed on R3 when the show ip route profile command is run. How must the services be stabilized?

  

  A. The issue with using BGP must be resolved by using another protocol and redistributing it into EIGRP on R3

  B. The routing loop must be fixed by reducing the admin distance of iBGP from 200 to 100 on R3

  C. The routing loop must be fixed by reducing the admin distance of OSPF from 110 to 80 on R3

  D. The issue with using iBGP must be fixed by running eBGP between R3 and R4

  Correct Answer: B

  After redistribution, R3 learns about network 10.1.1.0/24 via two paths:+ Internal BGP (IBGP):

  advertised from R4 with AD of 200 (and metric of 0)+ OSPF: advertised from R1 with AD of 110 (O E2) (and metric of 20)Therefore R3 will choose the path with the lower AD via OSPF But this is a looped path which is received from R3 -> R2

  -> R1 -> R3. So when the advertised route from R4 is expired, the looped path is also expired soon and R3 willreinstall the main path from R4. This is the cause of intermittent connectivity.In order to solve this issue, we can lower the AD of

  iBGP to a value which is lower than 110 so that it is preferred over OSPF-advertised route.

• Question 42:

  Refer to the exhibit. A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands

  

  Which action resolves the issue?

  A. Configure TACACS+ synchronization with the Active Directory admin group

  B. Configure the username from a local database

  C. Configure full access for the username from TACACS+ server

  D. Configure an authorized IP address for this user to access this router

  Correct Answer: C

• Question 43:

  Refer to the exhibit. The OSPF routing protocol is redistributed into the BGP routing protocol, but not all the OSPF routes are distributed into BGP Which action resolves the issue?

  

  A. Include the word external in the redistribute command

  B. Use a route-map command to redistribute OSPF external routes defined in an access list

  C. Include the word internal external in the redistribute command

  D. Use a route-map command to redistribute OSPF external routes defined in a prefix list.

  Correct Answer: C

  If you configure the redistribution of OSPF into BGP without keywords, only OSPF intra-area and inter-area routes are redistributed into BGP, by default. You can use the internal keyword along with the redistribute command under router bgp

  to redistribute OSPF intra- and inter-area routes.

  Use the external keyword along with the redistribute command under router bgp to redistribute OSPF external routes into BGP.

  -> In order to redistribute all OSPF routes into BGP, we must use both internal and external keywords. The full command would be (suppose we are using OSPF 1):

  redistribute ospf 1 match internal external

  Note: The configuration shows match internal external 1 external 2. This is normal because OSPF automatically appends "external 1 external 2" in the configuration. In other words, keyword external = external 1 external 2. External 1 = O E1

  and External 2 = O E2.

• Question 44:

  Refer to the exhibit. Which action resolves the failed authentication attempt to the router?

  

  A. Configure aaa authorization login command on line vty 0 4

  B. Configure aaa authorization login command on line console 0

  C. Configure aaa authorization console global command

  D. Configure aaa authorization console command on line vty 0 4

  Correct Answer: C

  In the debug output, we see that the Authorization (not Authentication) failed so we need to correct the authorization. In order to enable authorization, we must use the global command "aaa authorization console" first. Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/a1/sec-a1-cr-book/sec-cr-a1.html

• Question 45:

  Refer to the exhibit. The Math and Science departments connect through the corporate IT router but users in the Math department must not be able to reach the Science department and vice versa Which configuration accomplishes this task?

  

  A. vrf definition Science address-family ipv4 ! interface E 0/2 vrf forwarding Science ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 vrf forwarding Science ip address 192.168.2.1 255.255.255.0 no shut

  B. vrf definition Science address family ipv4 ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 no shut

  C. vrf definition Science ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 no shut

  D. vrf definition Science address-family ipv4 ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 vrf forwarding Science no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 vrf forwarding Science no shut

  Correct Answer: A

• Question 46:

  Refer to the exhibit. NTP is configured across the network infrastructure and Cisco DNA Center. An NTP issue was reported on the Cisco DNA Center at 17:15.

  

  Which action resolves the issue?

  A. Check and resolve reachability between the WLC and the NTP server

  B. Reset the NTP server to resolve any synchronization issues tor all devices

  C. Check and resolve reachability between Cisco DNA Center and the NTP server

  D. Check and configure NTP on the WLC and synchronize with Cisco DNA Center

  Correct Answer: A

• Question 47:

  Refer to the exhibit. An engineer configured R2 and R5 as route reflectors and noticed that not all routes are sent to R1 to advertise to the eBGP peers. Which iBGP routers must be configured as route reflectors to advertise all routes to restore reachability across all networks?

  

  A. R1 and R4

  B. R1 and R5

  C. R4 and R5

  D. R2 and R5

  Correct Answer: C

  When R2 and R5 are route reflectors (RRs), routes from R4 and R8 are advertised to R5 and R5 advertises to R2. But R2 would drop them as R2 is also a RR. Thereforesome routes are missing on R1 to advertise to eBGP peers.

  Good reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2015/pdf/TECRST-2310.pdf

  Route reflectors (RR) must be fully iBGP meshed so we cannot configure RR on both R1 and R5.

• Question 48:

  A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company's security policy. The administrator can still ping to www.cisco.com Which interface should the access list 101 be applied to resolve this issue?

  

  A. Interface G0/48 in the incoming direction

  B. Interface G0/0 in the outgoing direction.

  C. Interface S1/0 in the outgoing direction.

  D. Interface G0/0 in the incoming direction.

  Correct Answer: D

• Question 49:

  Refer to the exhibit.

  

  While troubleshooting an EIGRP neighbor adjacency problem, the network engineer notices that the interface connected to the neighboring router is not participating in the EIGRP process. Which action resolves the issue?

  A. Configure the network command to network 172.16.0.1 0.0.0.0

  B. Configure the network command under EIGRP address family vrf CLIENT1

  C. Configure EIGRP metrics on interface FastEthernet0/3

  D. Configure the network command under EIGRP address family ipv4

  Correct Answer: B

• Question 50:

  A customer reports to the support desk that they cannot pnnt from their PC to the local printer id:401987778. Which tool must be used to diagnose the issue using Cisco DNA Center Assurance?

  A. application trace

  B. path trace

  C. ACL trace

  D. device trace

  Correct Answer: B