Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 491:

  Refer to the exhibit. The static route is not present in the routing table of an adjacent OSPF neighbor router. Which action resolves the issue?

  

  A. Configure the next hop of 10.20.20.1 in the prefix list DMZ-STATIC

  B. Configure the next-hop interface at the end of the static router for it to get redistributed

  C. Configure a permit 20 statement to the route map to redistribute the static route

  D. Configure the subnets keyword in the redistribution command

  Correct Answer: D

• Question 492:

  Refer to the exhibit. R6 should reach R1 via R5>R2>R1.

  

  Which action resolves the issue?

  A. Decrease the cost to 2 between R6-R5-R2.

  B. Decrease the cost to 41 between R2 and R1.

  C. Increase the cost to 61 between R2 and R3.

  D. Increase the cost to 61 between R2-R3-R1.

  Correct Answer: C

  The correct answer should be C.

  Answer B cannot be correct because in this case, traffic will be forwarded via R2-R3-R1 ( which has a total cost of 40 and is not the desired path) . R2-R1 has a total cost of 41 which is not lower than 40. Increasing the cost between R2 and

  R3 to 61 will be our best choice because the total cost via R2-R3-R1 will be 81 so this will not be the best path, making our desired path R2-R1 the best one ( with a cost of 80).

• Question 493:

  Which feature minimizes DoS attacks on an IPv6 network?

  A. IPv6 Binding Security Table

  B. IPv6 Router Advertisement Guard

  C. IPv6 Prefix Guard

  D. IPv6 Destination Guard

  Correct Answer: D

  The Destination Guard feature helps in minimizing denial-of-service (DoS) attacks. It performs address resolutions only for those addresses that are active on the link, and requires the FHS binding table to be populated with the help of the IPv6 snooping feature.The feature enables the filtering of IPv6 traffic based on the destination address, and blocks the NDP resolution for destination addresses that are not found in the binding table. By default, the policy drops traffic coming for an unknown destination.

• Question 494:

  Refer to the exhibit. An administrator is configuring a GRE tunnel to establish an EIGRP neighbor to a remote router. The other tunnel endpoint is already configured. After applying the configuration as shown, the tunnel started flapping.

  

  Which action resolves the issue?

  A. Modify the network command to use the Tunnel0 interface netmask

  B. Advertise the Loopback0 interface from R2 across the tunnel

  C. Stop sending a route matching the tunnel destination across the tunnel

  D. Readdress the IP network on the Tunnel0 on both routers using the /31 netmask

  Correct Answer: C

  In this question we are advertising the tunnel IP address 192.168.12.2 to the other side. When other end receives the EIGRP advertisement, it realizes it can reach the other side of the tunnel via EIGRP.

  In other words, it reaches the tunnel destination through the tunnel itself -> This causes "recursive routing" error.

  Note: In order to avoid this error, do not advertise the tunnel destination IP address on the tunnel interface to other side.

• Question 495:

  Refer to the exhibit.

  

  The network engineer configured the summarization of the RIP routes into the OSPF domain on R5 but still sees four different 172.16.0.0/24 networks on R4. Which action resolves the issue?

  A. R5(config)#router ospf 1 R5(config-router)#no area R5(config-router)#summary-address 172.16.0.0 255.255.252.0

  B. R4(config)#router ospf 99 R4(config-router)#network 172.16.0.0 0.255.255.255 area 56 R4(config-router)#area 56 range 172.16.0.0 255,255.255.0

  C. R4(config)#router ospf 1 R4(config-router)#no area R4(config-router)#summary-address 172.16.0.0 255.255.252.0

  D. R5(config)#router ospf 99 R5(config-router)#network 172.16.0.0 0.255.255.255 area 56 R5(config-router)#area 56 range 172.16.0.0 255.255.255.0

  Correct Answer: A

  Area 36 is a NSSA so R5 is an ASBR so we can summarize external routes using the "summaryaddress" command. The command "area area-id range" can only be used on ABR so it is not correct. The summarization must be done on the

  ASBR which is R5, not R4 so the correct answer must be started with "R5(config)#router ospf 1".

  Note: The "no area" command is used to remove any existing "area ..." command (maybe "area 56 range ..." command).

• Question 496:

  Refer to the exhibit. The administrator noticed that the connection was flapping between the two ISPs instead of switching to ISP2 when the ISP1 failed. Which action resolves the issue?

  

  A. Include a valid source-interface keyword in the icmp-echo statement.

  B. Reference the track object 1 on the default route through ISP2 instead of ISP1.

  C. Modify the static routes to refer both to the next hop and the outgoing intertace.

  D. Modify the threshold to match the administrative distance of the ISP2 route.

  Correct Answer: A

  https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200785-ISP-Failover-withdefault-routes-using-I.html

• Question 497:

  Refer to the exhibit. An engineer must establish a point-to-point GRE VPN between R1 and the remote site. Which configuration accomplishes the task for the remote site?

  

  A. Interface Tunnel1 tunnel source 199.1.1.1 tunnel destination 200.1.1.3 ip address 192.168.1.3 255.255.255.0

  B. Interface Tunnel1 tunnel source 200.1.1.3 tunnel destination 199.1.1.1 ip address 192.168.1.1.255.255.255.0

  C. Interface Tunnel1 tunnel source 200.1.1.3 tunnel destination 199.1.1.1 ip address 192.168.1.3.255.255.255.0

  D. Interface Tunnel lunnel source 199.1.1.1 tunnel destination 200.1.1.3 ip address 192.168.1.1.255.255.255.0

  Correct Answer: C

• Question 498:

  Refer to Exhibit.

  

  PC2 is directly connected to R1. A user at PC2 cannot Telnet to 2001:db8:a:b::10. The user can ping 2001:db8:a:b::10 and receive DHCP-related information from the DHCP server. Which action resolves the issue?

  A. Remove sequence 10 and put it back as sequence 25.

  B. Remove sequence 20 and put it back as sequence 45.

  C. Remove sequence 30 and put it back as sequence 5.

  D. Remove sequence 40 and put it back as sequence 15.

  Correct Answer: A

• Question 499:

  What is a function of an end device configured with DHCPv6 guard?

  A. If it is configured as a server, only prefix assignments are permitted.

  B. If it is configured as a relay agent, only prefix assignments are permitted.

  C. If it is configured as a client, messages are switched regardless of the assigned role.

  D. If it is configured as a client, only DHCP requests are permitted.

  Correct Answer: C

  The DHCPv6 Guard feature blocks reply and advertisement messages that come from unauthorized DHCP servers and relay agents. Packets are classified into one of the three DHCP type messages. All client messages are always switched regardless of device role. DHCP server messages are only processed further if the device role is set to server. Further processing of server messages includes DHCP server advertisements (for source validation and server preference) and DHCP server replies (for permitted prefixes). If the device is configured as a DHCP server, all the messages need to be switched, regardless of the device role configuration.

• Question 500:

  The network administrator configured the router for Control Plane Policing to limit OSPF traffic to be policed to 1 Mbps. Any traffic that exceeds this limit must also be allowed at this point for traffic analysis. The router configuration is:

  access-list 100 permit ospf any any ! class-map CM-OSPF match access-group 100 ! policy-map PM-COPP class CM-OSPF police 1000000 conform-action transmit ! control-plane service-policy output PM-COPP

  The Control Plane Policing failed to monitor and police OSPF traffic. Which configuration resolves this issue?

  A. policy-map PM-COPP class CM-OSPF no police 1000000 conform-action transmit police 1000000 conform-action transmit exceed-action transmit ! control-plane no service-policy output PM-COPP

  B. policy-map PM-COPP class CM-OSPF no police 1000000 conform-action transmit police 1000000 conform-action transmit exceed-action transmit

  C. control-plane no service-policy output PM-COPP service-policy input PM-COPP

  D. no access-list 100 access-list 100 deny ospf any any access-list 100 permit ip any any ! policy-map PM-COPP class CM-OSPF no police 1000000 conform-action transmit police 1000000 conform-action transmit exceed-action drop ! control-plane no service-policy output PM-COPP service-policy input PM-COPP

  Correct Answer: C