Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 511:

  Refer to the exhibit.

  

  A prefix list is created to filter routes inbound to an EIGRP process except for network 10 prefixes After the prefix list is applied no network 10 prefixes are visible in the routing table from EIGRP. Which configuration resolves the issue?

  A. ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9.

  B. ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

  C. ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8

  D. ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9 ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

  Correct Answer: C

• Question 512:

  Refer to the exhibit. The ISP router is fully configured for customer A and customer B using the VRF-Lite feature. What is the minimum configuration required for customer A to communicate between routers A1 and A2?

  

  A. A1: interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2: interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0

  B. A1: interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0 A2: interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0

  C. A1: interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 vrf A net 172.31.100.1 0.0.0.255 area 0 A2: interface fa0/0 description To->ISP ip vrf forwarding A ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 vrf A net 172.31.200.1 0.0.0.255 area 0

  D. A1: interface fa0/0 description To->ISP ip add 172.31.100.1 255.255.255.0 no shut ! router ospf 100 net 172.31.100.1 0.0.0.255 area 0 A2: interface fa0/0 description To->ISP ip add 172.31.200.1 255.255.255.0 no shut ! router ospf 100 net 172.31.200.1 0.0.0.255 area 0

  Correct Answer: D

  A1 and A2 routers do not know they belong to VRF A. The two interfaces of ISP (which are connected to A1 and A2) should be configured like this (we only show the configure of one interface): ISP router: interface g0/0 description ISP->To_CustomerA ip vrf forwarding A ip address 172.31.100.2 255.255.255.0 router ospf100 vrf A network 172.31.200.2 0.0.0.255 area 0

• Question 513:

  Refer to the exhibit. An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead of current best path. Which action resolves the issue?

  

  A. Configure AS_PATH prepend for the current best path

  B. Configure higher MED to select as the best path

  C. Configure AS_PATH prepend for the desired best path

  D. Configure lower LOCAL_PREF to select as the best path

  Correct Answer: D

  From the output, we learn that the current best path is from 10.57.255.11 (which includes "...valid, confed-external, best") and this path is 2 ASes away (64955 65003). Although there are some paths with only 1 AS away (path from

  172.16.254.234 for example) but they were not chosen the best path so AS_PATH was not used to determine the best path -> Answers A and answer C are not correct. All the paths in the output have metric of 0 and this is the lowest (best) value for this attribute. If we configure higher MED then it is less preferred over other paths -> Answer B is not correct. Only answer D is left but LOCAL_PREF attribute should be configured with higher value to be preferred so we hope "lower LOCAL_PREF" here means higher value. But this is the best answer.

• Question 514:

  An engineer creates a Cisco DNA Center cluster with three nodes, but all the services are running on one host node. Which action resolves this issue?

  A. Restore the link on the switch interface that is connected to a cluster link on the Cisco DNA Center

  B. Click the master host node with all the services and select services to be moved to other hosts

  C. Enable service distribution from the Systems 360 page.

  D. Click system updates, and upgrade to the latest version of Cisco DNA Center.

  Correct Answer: C

  To deploy Cisco DNA Center on a three-node cluster with High Availability (HA) enabled, complete the following procedure:

  Step 1: Configure Cisco DNA Center on the first node in your cluster...

  Step 2: Configure Cisco DNA Center on the second node in your cluster...

  Step 3: Configure Cisco DNA Center on thethird node in your cluster...

  Step 4:Enable high availability on your cluster:

  a.

  In the Cisco DNA Center GUI, click and choose System Settings. The System 360tab is displayed by default.

  b.

  In the Hosts area, clickEnable Service Distribution. After you click Enable Service Distribution, Cisco DNA Center enters into maintenance mode. In this mode, Cisco DNA Center is unavailable until the redistribution of services is completed.

  You should take this into account when scheduling an HA deployment.

  Reference:https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automationand-management/dna-center/1-3-3-0/ha_guide/b_cisco_dna_center_ha_guide_1_3_3_0.html Therefore we can choose "Enable Service Distribution" to distribute services to other host nodes.

• Question 515:

  Refer to the exhibit. Although summarization is configured for R1 to receive 10.0.0.0/8. more specific routes are received by R1. How should the 10.0.0.0/8 summary route be received from the neighbor, attached to R1 via Fast Ethernet0/0 interface?

  

  A. R1 should configure the ip summary-address eigrp 10.0.0.0.255.0.0.0 command under the Fast Ethernet 0/0 interface.

  B. The summarization condition is not met Router 10 1 100.10 requires a route for 10 0.0.0/8 that points to null 0

  C. The summarization condition is not met. The network 10.1.100.0/24 should be changed to 172.16.0.0/24.

  D. R1 should configure the ip summary-address eigrp 10.0.0.0 0.0.0.255 command under the Fast Ethernet 0/0 interface.

  Correct Answer: D

• Question 516:

  A company is expanding business by opening 35 branches over the Internet. A network engineer must configure DMVPN at the branch routers to connect with the hub router and allow NHRP to add spoke routers securely to the multicast NHRP mappings automatically

  Which configuration meets this requirement at the hub router?

  A. interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nbrp authentication KEY1 ip nhrp nhs dynamic ip nhop network-id 10 tunnel mode mgre auto

  B. interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp authentication KEY1 ip nhrp registration no-unique ip nhrp network-id 10 tunnel mode gre nmba

  C. interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp authentication KEY1 ip nhrp map multicast dynamic ip nbrp network-id 10 tunnel mode gre multipoint

  D. interface Tunnel0 ip address 10.0.0.1 255.255.255.0 ip nhrp authentication KEY1 ip nhrp map multicast 224.0.0.0 ip nhrp network-id 10 tunnel mode gre ipv4

  Correct Answer: C

  The command "ip nhrp map multicast dynamic" allows NHRP to automatically add spoke routers to the multicast NHRP mappings.

• Question 517:

  Refer to the exhibit.

  

  An OSPF neighbor relationship between R2 and R3 is showing stuck in EXCHANGE/EXSTART state. The neighbor is established between R1 and R2. The network engineer can ping from R2 to R3 and vice versa, but the neighbor is still down.

  Which action resolves the issue?

  A. Restore the Layer 2/Layer 3 conectivity issue in the ISP network.

  B. Match MTU on both router interfaces or ignore MTU.

  C. Administrative "shut then no shut" both router interfaces.

  D. Enable OSPF on the interface, which is required.

  Correct Answer: B

  After two OSPF neighboring routers establish bi-directional communication and complete DR/BDR election (on multi-access networks), the routers transition to the exstart state. In this state, the neighboring routers establish a master/slave relationship and determine the initial database descriptor (DBD) sequence number to use while exchanging DBD packets.

  Neighbors Stuck in Exstart/Exchange State The problem occurs most frequently when attempting to run OSPF between a Cisco router and another vendor's router. The problem occurs when the maximum transmission unit (MTU) settings for neighboring router interfaces don't match. If the router with the higher MTU sends a packet larger that the MTU set on the neighboring router, the neighboring router ignores thepacket.

• Question 518:

  What is an advantage of implementing BFD?

  A. BFD provides faster updates for any flapping route.

  B. BFD provides millisecond failure detection

  C. BFD is deployed without the need to run any routing protocol

  D. BFD provides better capabilities to maintain the routing table

  Correct Answer: B

• Question 519:

  Refer to the exhibit.

  

  An engineer is troubleshooting a failed Telnet session from PC to the DHCP server. Which action resolves the issue?

  A. Remove sequence 30 and add it back to the IPv6 traffic filter as sequence 5.

  B. Remove sequence 20 and add it back to the IPv6 traffic filter as sequence 5.

  C. Remove sequence 10 to add the PC source IP address and add it back as sequence 10.

  D. Remove sequence 20 for sequence 40 in the access list to allow Telnet.

  Correct Answer: B

• Question 520:

  What does the MP-BGP OPEN message contain?

  A. MPLS labels and the IP address of the router that receives the message

  B. the version number and the AS number to which the router belongs

  C. IP routing information and the AS number to which the router belongs

  D. NLRI, path attributes, and IP addresses of the sending and receiving routers

  Correct Answer: B

  The OPEN message contains the BGP version number, ASN of the originating router, Hold Time, BGP Identifier, and other optional parameters that establish the session capabilities.