Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 681:

  Which command shows a list of neighboring routers, their priorities, and their current state?

  A. show ip ospf

  B. show ip protocol

  C. show ip ospf database

  D. show ip ospf neighbor [detail]

  Correct Answer: D

  The show ip ospf neighbor [detail] command will display the OSPF information that is known about OSPF neighbors and the OSPF operating state with them.

  The commands below can be used to monitor and verify OSPF operation:

  show ip ospf - shows the number of times the SPF algorithm has run and the default LSU interval. show ip protocol - displays information about timers, filters, metric, etc. for the entire router. show ip ospf database - shows the router ID, the

  OSPF process ID, and the contents of the topological database.

  These commands do not show details about OSPF neighbors.

  Objective:

  Layer 3 Technologies

  Sub-Objective:

  Configure and verify OSPF neighbor relationship and authentication

  References:

  Cisco > Cisco IOS IP Routing Protocols Command Reference > IP Routing Protocol-Independent Commands:

  S through T > show ip ospf neighbor

• Question 682:

  What is an advantage of MPLS Layer 3 VPN deployment?

  A. Planning and modifications are required for the customer intranet before migrating to Layer 3 VPN.

  B. Scalable VPNs are created using connection-oriented, point-to-point, or multipoint overlay connections.

  C. QoS provides performance with policy and support for a best-effort service level in an MPLS VPN.

  D. Security is provided at the edge of the provider network through encryption.

  Correct Answer: C

• Question 683:

  Refer to the exhibit. A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network.

  

  Which action resolves the issue?

  A. Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

  B. Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

  C. Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

  D. Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

  Correct Answer: A

• Question 684:

  Refer to the exhibit.

  

  R1 and R2 cannot establish an EIGRP adjacency. Which action establishes EIGRP adjacency?

  A. Remove the current autonomous system number on one of the routers and change to a different value.

  B. Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

  C. Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

  D. Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.

  Correct Answer: B

• Question 685:

  Refer to the exhibit.

  

  

  R2 has two paths to reach 192.168.13.0/24. but traffic is sent only through R3. Which action allows traffic to use both paths?

  A. Configure the bandwidth 2000 command under interface FastEthernet0/0 on R2.

  B. Configure the variance 4 command under the EIGRP process on R2.

  C. Configure the delay 1 command under interface FastEthernet0/0 on R2.

  D. Configure the variance 2 command under the EIGRP process on R2

  Correct Answer: B

  From the output of the "show ip eigrp topology ..." command, we notice network 192.168.13.0/24

  was learned via two routes:+ From 192.168.23.3 (R3) with FD = 1075200 and AD = 281600+ From 192.168.12.1 (R1) with FD = 2611200 and AD = 281600 From the output of the "show ip route ..." command, we learned that the best (and

  chosen) path is via 192.168.23.3 (R3).

  To use both paths (called unequal cost load balancing) with EIGRP, the second path via R1 must satisfy the feasibility condition. The feasibility condition states that, theAdvertised Distance (AD) of a route must be lower than the feasible

  distance of the current successor route.

  In this case, the second path satisfies the feasible condition as its AD (281600) is smaller than the FD (1075200) of the best path. Therefore we can configure loadbalancing with "variance" command. In other words, EIGRP will install all paths

  with metric < variance * best_metric into the local routing table, provided that it meets the feasibility condition to preventrouting loop. Therefore we can calculate the variance > metric / best_metric = 2611200 / 1075200 =2.4.

  So with a variance greater than 2 (and must be an integer), we can load balance traffic to network 192.168.13.0/24.

• Question 686:

  Refer to the exhibits.

  

  An engineer filtered messages based on severity to minimize log messages. After applying the filter, the engineer noticed that it filtered required messages as well. Which action must the engineer take to resolve the issue?

  A. Configure syslog level 2.

  B. Configure syslog level 3.

  C. Configure syslog level 4.

  D. Configure syslog level 5.

  Correct Answer: D

• Question 687:

  An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

  A. Packets are not forwarded to the specific next hop.

  B. Packets are forwarded based on the routing table.

  C. Packets are forwarded based on a static route.

  D. Packets are forwarded to the specific next hop.

  Correct Answer: D

  The set ip default next-hop command verifies the existence of the destination IP address in the routing table, and...+ if the destination IP address exists, the command does not policy route the packet, but forwards the packet based on the routing table.+ if the destination IP address does not exist, the command policy routes the packet by sending it to the specified next hop.

• Question 688:

  Refer to the exhibit.

  

  The engineer configured and connected Router2 to Router1. The link came up but could not establish a Telnet connection to Router1 IPv6 address of 2001:DB8::1. Which configuration allows Router2 to establish a Telnet connection to Router1?

  A. jpv6 unicast-routing

  B. permit ICMPv6 on access list INGRESS for Router2 to obtain IPv6 address

  C. permit ip any any on access list EGRESS2 on Router1

  D. IPv6 address on GigabitEthernet0/0

  Correct Answer: B

• Question 689:

  Refer to the exhibit.

  

  A network administrator configured an IPv6 access list to allow TCP return traffic only, but it is not working as expected. Which changes resolve this issue?

  A. ipv6 access-list inbound permit tcp any any syn deny ipv6 any any log ! interface gi0/0 ipv6 traffic-filter inbound out

  B. ipv6 access-list inbound permit tcp any any syn deny ipv6 any any log ! interface gi0/0 ipv6 traffic-filter inbound in

  C. ipv6 access-list inbound permit tcp any any established deny ipv6 any any log ! interface gi0/0 ipv6 traffic-filter inbound in

  D. ipv6 access-list inbound permit tcp any any established deny ipv6 any any log ! interface gi0/0 ipv6 traffic-filter inbound out

  Correct Answer: C

• Question 690:

  Refer to the exhibit.

  

  A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source. The configuration did not work as desired. Which service must be enabled to resolve the issue?

  A. Enter the service timestamps log datetime localtime global command.

  B. Enter the service timestamps log datetime synchronize global command.

  C. Enter the service timestamps log datetime console global command.

  D. Enter the service timestamps log datetime clock-period global command

  Correct Answer: A

  If a router is configured to get the time from a Network Time Protocol (NTP) server, the times in the router's log entries may be different from the time on the systemclock if the [localtime] option is not in the service timestamps log command. To solve this issue, add the [localtime] option to the service timestamps log command. Thetimes should now be synchronized between the system clock and the log message timestamps.