Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 551:

  Refer to the exhibit. In an attempt to increase the network security, the administrator applied the Gi3-in ACL to the Gi3 interface. After the ACL was applied, clients in the network connected to Gi3 lost their ability to obtain IP settings from DHCP.

  

  Which two configuration commands must be added to the Gi3-in ACL to reinstate the DHCP service for the clients? (Choose two.)

  A. 74 permit udp 192.168.30.0 0.0.0.255 eq bootpc host 192.168.255.3 eq bootps

  B. 71 permit udp host 0.0.0.0 eq bootps host 255.255.255.255 eq bootpc

  C. 73 permit udp host 0.0.0.0 eq bootpc host 192.168.255.3 eq bootps

  D. 72 permit udp host 192.168.255.3 eq bootps 192.168.30.0 0.0.0.255 eq bootpc

  E. 75 permit udp host 0.0.0.0 eq bootpc host 255.255.255.255 eq bootps

  Correct Answer: AE

  "permit udp host 0.0.0.0 eq boopc host 255.255.255.255 eq bootps. For the DHCP IP renewal, you can configure permit udp 10.20.20.0 0.0.0.255 eq bootpc host 128.1.99.1 eq bootps. Reason why the one you configured would not work for DHCP DORA is because when the client first time tries to get an IP, it sources with 0.0.0.0, and the DHCP request will be broadcasted to the IP 255.255.255.255. However, when the client tries to renew its IP address, it would source from its IP address which will be within the subnet 10.20.20.0/24, and will send the renewal request to the DHCP server IP as unicast." https://www.certforums.com/threads/acl-allow-access-to-dhcp-server.36762/ https://community.cisco.com/t5/switching/acl-not-working-as-intended/td-p/4168422

• Question 552:

  An engineer is implementing a coordinated change with a server team. As part of the change, the engineer must configure interface GigabitEthernet2 in an existing VRF "RED" then move the interface to an existing VRF "BLUE" when the server team is ready. The engineer configured interface GigabitEthernet2 in VRF "RED":

  interface GigabitEthernet2 description Migration ID: B410A82D0935G35 vrf forwarding RED ip address 10.0.0.0 255.255.255.254 negotiation auto

  Which configuration completes the change?

  A. interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE ip address 10.0.0.0 255.255.255.254

  B. interface GigabitEthernet2 no ip address vrf forwarding BLUE

  C. interface GigabitEthernet2 no vrf forwarding RED vrf forwarding BLUE

  D. interface GigabitEthernet2 no ip address ip address 10.0.0.0 255.255.255.254 vrf forwarding BLUE

  Correct Answer: A

  When assigning an interface to a VRF, the IP address will be removed so we have to reassign the IP address to thatinterface.

• Question 553:

  Refer to the exhibit. R5 should not receive any routes originated in the EIGRP domain.

  

  Which set of configuration changes removes the EIGRP routes from the R5 routing table to fix the issue?

  A. R4 route-map O2R deny 10 match tag 111 route-map O2R permit 20 ! router rip redistribute ospf 1 route-map O2R metric 1

  B. R2 route-map E20 deny 20 R4 route-map O2R deny 10 match tag 111 ! router rip redistribute ospf 1 route-map O2R metric 1

  C. R4 route-map O2R permit 10 match tag 111 route-map O2R deny 20 ! router rip redistribute ospf 1 route-map O2R metric 1

  D. R4 route-map O2R deny 10 match tag 111 ! router rip redistribute ospf 1 route-map O2R metric 1

  Correct Answer: A

• Question 554:

  Refer to the exhibit. The network administrator configured the network to connect two disjointed networks and all the connectivity is up except the virtual link, which causes area 250 to be unreachable.

  

  Which two configurations resolve this issue? (Choose two.)

  A. R2 router ospf 1 no area 234 virtual-link 10.34.34.4 area 234 virtual-link 0.0.0.44

  B. R2 router ospf 1 no area 234 virtual-link 10.34.34.4 area 0 virtual-link 0.0.0.44

  C. R4 router ospf 1 no area 234 virtual-link 10.23.23.2 area 0 virtual-link 0.0.0.22

  D. R2 router ospf 1 router-id 10.23.23.2

  E. R4 router ospf 1 no area 234 virtual-link 10.23.23.2 area 234 virtual-link 0.0.0.22

  Correct Answer: AE

  Reference:https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first- ospf/13703-8.html

  An important thing to remember when configuring virtual-link is we need to configure the OSPF router ID and NOT the IP address of the ABR. Therefore in this question we have to use the command "area 234 virtual-link 0.0.0.44" on R2 and "area 234 virtual-link 0.0.0.22" on R4.

• Question 555:

  Refer to the exhibits.

  

  An engineer investigates a routing issue on R1 and finds that traffic destined to 5.5.5.0/24 does not take all of the paths.

  Which action resolves the issue?

  A. Increase the variance value in EIGRP.

  B. Decrease the variance value in EIGRP.

  C. Remove the adjacency of R3 from EIGRP.

  D. Stop advertising 192.168.13.0/24 in EIGRP.

  Correct Answer: A

  Reference: https://community.cisco.com/t5/networking-documents/troubleshooting-eigrp-variance-command/ta-p/3129662#:~:text=EIGRP%20provides%20a%20mechanism%20to,means%20equal%2Dcost%20load%20balancing

• Question 556:

  Refer to the exhibit. An engineer is trying to connect to R1 via Telnet with no success.

  

  Which configuration resolves the issue?

  A. tacacs server prod address ipv4 10.221.10.10 exit

  B. ip route 10.221.10.10 255.255.255.255 ethernet 0/1

  C. ip route 10.221.10.11 255.255.255.255 ethernet 0/1

  D. tacacs server prod address ipv4 10.221.10.11 exit

  Correct Answer: D

  Looking at the debug output, second to the last line, the log suggests that it is attempting to use server x.x.10.10 when the diagram specifies that the server is actually x.x.10.11.

  This would require the tacacs group to be modified to use the correct server:

  `tacacs server prod`

  `address ipv4 x.x.10.11`

  `exit`

• Question 557:

  Refer to the exhibit.

  

  After reloading the router, an administrator discovered that the interface utilization graphs displayed inconsistencies with their previous history in the NMS. Which action prevents this issue from occurring after another router reload in the future?

  A. Configure SNMP interface index persistence on the router.

  B. Save the router configuration to startup-config before reloading the router.

  C. Rediscover all the router interfaces through SNMP after the router is reloaded.

  D. Configure SNMP to use static OIDs referring to individual router interfaces.

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/15S/configuration/guide/7600_15_0s_book/ifindx.pdf

• Question 558:

  Examine the exhibit.

  

  The router labeled "B" has been configured by using the following configuration commands:

  RouterB(config)# router eigrp 100 RouterB(config-router)# network 10.0.0.0 RouterB(config-router)# distribute-list 10 in bri 0 RouterB(config)# access-list 10 deny 11.11.0.0 0.0.255.255 RouterB(config)# access-list 10 permit any

  Which statement best describes the effects of this configuration?

  A. Only network 11.11.0.0 will be advertised to routers A and C.

  B. Advertisements received by router A will include router D networks.

  C. Advertisements to router C will not include the router D and E networks.

  D. Traffic from network 11.11.0.0 hosts will be discarded because of ACL 10.

  Correct Answer: B

  The router will scan the access list specified by a distribute list. If a match to a permit statement is found, the route entry is permitted; if a match is found to a deny statement, the route is discarded. In this question, the permit statement in ACL

  10 provides a permit match to all routes advertised from router D except for network 11.11.0.0.

  Distribute lists are used to filter inbound, outbound, or redistributed routing updates. Instead of using the passive-interface command, distribute lists enable you to selectively control which routes are processed.

  If a distribute list is associated with an interface, the routing update is compared to the access list that was specified in the distribute list. If a match is found to a permit statement, then the packet is forwarded. If a match is found to a deny

  statement, the packet is discarded. If no match is found, the implicit deny statement at the end of the access list will drop the packet. For example, if the access list in the above example were missing the line access-list 10 permit any, all

  updates would be denied, not just the one specified by the deny statement.

  If no distribute list is associated with the interface, the routing update packets are processed as normal.

  Distribute lists can reference multiple access lists if required to obtain the desired result. For example, examine the following configuration from a partial output of show run:

  router eigrp

  distribute-list 2 out ethernet 0

  distribute-list 1 out

  !

  access-list 1 permit 10.0.0.0 0.255.255.255

  access-list 2 permit 10.0.1.0 0.0.0.255

  By using two access lists and two distribute lists, you accomplish the following:

  Only routes matching 10.0.0.0/8 will be advertised out interfaces other than E0 Only routes matching 10.0.1.0/24 will be advertised out E0

  Network 11.11.0.0 will not be the only network advertised to routers A and C. In this question, the permit statement in ACL 10 provides a permit match to all routes advertised from router D except for network 11.11.0.0.

  The option advertisements to Router C will not include the router D and E networks is incorrect because although the 11.11.0.0/16 network will be denied, any other networks attached to either Router C or Router D will be permitted.

  Traffic from network 11.11.0.0 hosts will NOT be discarded because of ACL 10. If the access list were applied to the interface with the access-group command instead of the distribute-list command, this would be the case, but a distribute list

  blocks routing updates, not normal traffic.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify filtering with any protocol

  References:

  Cisco > Home > Support > Technology Support > IP > IP Routing > Design > Design Technotes > Filtering Routing Updates on Distance Vector IP Routing Protocols

• Question 559:

  Refer to the exhibit.

  

  Which command must be configured to make VRF CCNP work?

  A. interface Loopback0 ip address 10.1.1.1 255.255.255.0 vrf forwarding CCNP

  B. interface Loopback0 ip address 10.1.1.1 255.255.255.0

  C. interface Loopback0 vrf forwarding CCNP

  D. interface Loopback0 ip address 10.1.1.1 255.255.255.0 ip vrf forwarding CCNP

  Correct Answer: B

  Reference: https://community.cisco.com/t5/mpls/interface-ip-removed-after-apply-the-ip-vrf-forwarding/td-p/487122

• Question 560:

  You instructed your assistant to configure load balancing on a router. The router currently has two routes to network A. One route has a cost of 15, and the other has a cost of 30.

  What command should the assistant execute to instruct the router to treat the two routes as equal without including any other routes in the load balancing?

  A. routerA(config)# variance 2

  B. routerA(config-router)# variance 2

  C. routerA(config)# variance 3

  D. routerA(config-router)# variance 3

  Correct Answer: B

  The correct command to instruct the router to treat the two routes as equal is variance 2. It must be entered in EIGRP configuration mode, as evidenced by the routerA(config-router)# prompt. The number that comes after the command is

  called the multiplier. A multiplier of two tells the router that any route that is within twice the metric of the best route will be considered equal to the best route.

  The default setting for variance is one, which indicates that the routes must be equal to be considered for load balancing. An additional requirement of load balancing is that the alternate route's feasible distance must not be higher than the

  advertised distance of the route, which could indicate a routing loop.

  The assistant should not execute the variance 2 command at the routerA(config)# prompt, which is global configuration mode. The variance command must be entered in EIGRP configuration mode at the routerA (config-router)# prompt.

  The assistant should not use the variance 3 command in either mode because that would direct the router that any route within three times the cost of the best route (in this scenario, a cost of 45) would be considered equal to the cost of the

  best route. The scenario requires that two routes be load balanced. Because one route has a cost of 15 and the other has a cost of twice 15 (30), the variance multiplier must be two.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify EIGRP load balancing

  References:

  Cisco > Home > Support > Technology Support > IP > IP Routing > Design > Design Technotes > How Does Unequal Cost Path Load Balancing (Variance) Work in IGRP and EIGRP? Cisco > Support > Technology Support > IP > IP Routing

  > Design > Design Technotes > Route Selection in Cisco Routers > Document ID: 8651