Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 61:

  Refer to the exhibit.

  

  

  An engineer is troubleshooting failed access by contractors to the business application server via Telnet or HTTP during the weekend. Which configuration resolves the issue?

  A. R1 no access-list 101 permit tcp 10.3.3.0 0.0.0.255 host 10.1.1.3 eq telnet time-range Contractor

  B. R1 time-range Contractor no periodic weekdays 8:00 to 16:30 periodic daily 8:00 to 16:30

  C. R4 time-range Contractor no periodic weekdays 17:00 to 23:59 periodic daily 8:00 to 16:30

  D. R4 no access-list 101 permit top 10.3.3.0 0.0.0.255 host 10.1.1.3 eq telnet time-range Contractor

  Correct Answer: B

• Question 62:

  Refer to the exhibit.

  

  When the FastEthemet0/1 goes down, the route to 172.29.0.0/16 via 192.168.253.2 is not installed in the RIB, Which action resolves the issue?

  A. Configure feasible distance greater than the successor's feasible distance.

  B. Configure reported distance greater than the successor's feasible distance.

  C. Configure feasible distance greater than the reported distance.

  D. Configure reported distance greater than the feasible distance.

  Correct Answer: C

  From the exhibit, we notice network 172.29.0.0/16 was learned via two routes:

  + From 192.168.254.2 with FD = 307200 and AD = 281600 + From 192.168.253.2 with FD = 410200 and AD = 352300

  The first route is installed into the RIB as the successor route because of lower FD. When the first route fails, router will not use the second route as it does not satisfy the feasibility condition. The feasibility condition states that, the Advertised Distance (AD, also called the reported distance) of a route must be lower than the feasible distance of the current successor route.

• Question 63:

  Refer to the exhibit.

  

  An engineer configured BGP between routers R1 and R3. The BGP peers cannot establish neighbor adjacency to be able to exchange routes. Which configuration resolves this issue?

  A. R3 router bgp 6502 neighbor AB01:2011:7:100::1 ebgp-multihop 255

  B. R1 router bgp 6501 address-family ipv6 neighbor AB01:2011:7:100::3 activate

  C. R1 router bgp 6501 neighbor AB01:2011:7:100::3 ebgp-multihop 255

  D. R3 router bgp 6502 address-family ipv6 neighbor AB01:2011:7:100::1 activate

  Correct Answer: D

• Question 64:

  Refer to the exhibit.

  

  The network administrator can see the DHCP discovery packet in R1, but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the Fa0/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two)

  A. service dhcp command on R1

  B. ip dhcp relay information trust-all command on R2

  C. service dhcp-relay command on R1

  D. ip dhcp option 82 command on R2

  E. ip dhcp relay information enable command on R1

  Correct Answer: AB

• Question 65:

  Refer to the exhibit.

  

  A network administrator reviews the branch router console log to troubleshoot the OSPF adjacency issue with the DR router. Which action resolves this issue?

  A. Configure matching hello and dead intervals between sites

  B. Configure the WAN interface for DR site in the related OSPF area

  C. Advertise the branch WAN interface matching subnet for the DR site

  D. Stabilize the DR site flapping link to establish OSPF adjacency

  Correct Answer: C

• Question 66:

  Refer to the exhibit.

  

  An engineer must establish multipoint GRE tunnels between hub router R6 and branch routers R1, R2, and R3. Which configuration accomplishes this task on R1?

  A. interface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e0/1 tunnel mode gre multipoint ip nhrp network-id 1 ip nhrp nhs 192.168.1.6 ip nhrp map 192.168.1.6 192.1.10.1 ip nhrp map 192.168.1.2 192.1.20.2 ip nhrp map 192.168.1.3 192.1.30.3

  B. interface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e0/0 tunnel mode gre multipoint ip nhrp nhs 192.168.1.6 ip nhrp map 192.168.1.6 192.1.10.1 ip nhrp map 192.168.1.2 192.1.20.2 ip nhrp map 192.168.1.3 192.1.30.3

  C. interface Tunnel 1 ip address 192.168.1.1 255.255.255.0 tunnel source e0/1 tunnel mode gre multipoint ip nhrp nhs 192.168.1.6 ip nhrp map 192.168.1.6 192.1.10.6

  D. interface Tunnel 1 ip address 192.168.1.1 255.255.255.0

  tunnel source e0/0

  tunnel mode gre multipoint

  ip nhrp network-id 1

  ip nhrp nhs 192.168.1.6

  ip nhrp map 192.168.1.6 192.1.10.6

  Correct Answer: D

  We have an example of how to configure DMVPN Phase II and we show the configuration here for your reference:

  

  Diagram DMVPN Phase II ?Dynamic Mapping

  

  Text

  Note: Although Phase II Dynamic Mapping is "dynamic" but we still need to add a static entry for the hub because without that entry, the NHRP registration cannot be sent.

• Question 67:

  Refer to the exhibit.

  

  An engineer has configured policy-based routing and applied the configured to the correct interface. How is the configuration applied to the traffic that matches the access list?

  A. It is dropped

  B. It is forwarded using the routing table lookup

  C. It is sent to 209.165.202.131.

  D. It is sent to 209.165.202.129.

  Correct Answer: C

  The set ip next-hop verify-availability command in route-map configuration mode to configure policy routing to verify the reachability of the next hop of a route map before the router performs policy routing to that next hop. In this question we see track 100 is down so the PBR will not use this next-hop, it will use the second next-hop with track 200 (up).

• Question 68:

  Refer to the exhibit.

  

  Which set of commands restore reachability to loopback0?

  A. interface loopback0 ip address 4.4.4.4 255.255.255.0 ip ospf interface type network

  B. interface loopback0 ip address 4.4.4.4 255.255.255.0 ip ospf network broadcast

  C. interface loopback0 ip address 4.4.4.4 255.255.255.0 ip ospf network point-to-point

  D. interface loopback0 ip address 4.4.4.4 255.255.255.0 ip ospf interface area 10

  Correct Answer: C

  Loopbacks are considered host routes in Open Shortest Path First (OSPF).

  To make OSPF advertise the loopback subnet as the actual subnet with the loopback mask, instead of as host route /32, issue the ip ospf network point-to-point command under the loopback interface.

  For more information, refer to the 9.1. Interface States section of RFC 2328.

  Reference:

  https://networkengineering.stackexchange.com/questions/13099/why-do-we-use-ospf-point-to-point-networks-for-loopbacks

• Question 69:

  Refer to the exhibit.

  

  AS111 is receiving its own routes from AS200 causing a loop in the network. Which configuration provides loop prevention?

  A. router bgp 111 neighbor 195.1.1.1 as-override no neighbor 195.1.2.2 allowas-in

  B. router bgp 111 neighbor 195.1.2.2 as-override no neighbor 195.1.1.1 allowas-in

  C. router bgp 111 neighbor 195.1.1.1 as-override neighbor 195.1.2.2 as-override

  D. router bgp 111 no neighbor 195.1.1.1 allowas-in no neighbor 195.1.2.2 allowas-in

  Correct Answer: D

  A router discards BGP network prefixes if it sees its ASN in AS-Path as a loop prevention mechanism. The "allowas-in" feature allows routes to be received and processed even if router detects its own ASN in AS-Path.

• Question 70:

  Refer to the exhibit.

  

  A network is under a cyberattack. A network engineer connected to R1 by SSH and enabled the terminal monitor via SSH session to find the source and destination of the attack. The session was flooded with messages, which made it impossible for the engineer to troubleshoot the issue. Which command resolves this issue on R1?

  A. #terminal no monitor

  B. (config)#terminal no monitor

  C. #no terminal monitor

  D. (config)#no terminal monitor

  Correct Answer: A