Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 691:

  What are two MPLS label characteristics? (Choose two.)

  A. The label edge router swaps labels on the received packets.

  B. Labels are imposed in packets after the Layer 3 header.

  C. LDP uses TCP for reliable delivery of information.

  D. An MPLS label is a short identifier that identifies a forwarding equivalence class.

  E. A maximum of two labels can be imposed on an MPLS packet.

  Correct Answer: CD

• Question 692:

  In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.)

  A. by the recovery mechanism to recover the binding table in the event of a device reboot

  B. by IPv6 routing protocols to securely build neighborships without the need of authentication

  C. by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways

  D. by various IPv6 guard features to validate the data link layer address

  E. by storing hashed keys for IPsec tunnels for the built-in IPsec features

  Correct Answer: AD

  Overview of the IPv6 First-Hop Security Binding Table A database table of IPv6 neighbors connected to the device is created from information sources such as NDP snooping. This database, or binding table, is used by variousIPv6 guard features to validate the link-layer address (LLA), the IPv4 or IPv6 address, and the prefix binding of the neighbors to prevent spoofing and redirect attacks. IPv6 First-Hop Security Binding Table Recovery MechanismThe IPv6 first-hop security binding table recovery mechanism enables the binding table to recover in the event of a device reboot.

• Question 693:

  A DMVPN single hub topology is using IPsec + mGRE with OSPF. What should be configured on the hub to ensure it will be the designated router?

  A. tunnel interface of the hub with ip nhrp ospf dr

  B. OSPF priority to 0

  C. route map to set the metrics of learned routes to 110

  D. OSPF priority greater than 1

  Correct Answer: D

  By default, the priority is 1 on all routers so we can set the OSPF priority of the hub to a value which is greater than 1 to make sure it would become the DR.

• Question 694:

  Refer to the exhibit.

  

  The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).

  

  After this configuration, ISP-1 and ISP-2 continue to receive the specific routes and the summary route.

  Which configuration resolves the issue?

  A. router bgp 64511 aggregate-address 172.16.20.0 255.255.252.0 summary-only

  B. router bgp 64511 neighbor 192.168.100.1 summary-only neighbor 192.168.200.2 summary-only

  C. interface E 0/0 ip bgp suppress-map BLOCK_SPECIFIC ! interface E 0/1 ip bgp suppress-map BLOCK_SPECIFIC ! ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24 ! route-map BLOCK_SPECIFIC permit 10 match ip address prefix-list PL_BLOCK_SPECIFIC

  D. ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22 ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22 ! route-map BLOCK_SPECIFIC permit 10 match ip address prefix-list PL_BLOCK_SPECIFIC ! router bgp 64511 aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

  Correct Answer: A

  When the aggregate-address command is used within BGP routing, the aggregated address is advertised, along with the more specific routes. The exception to this rule is through the use of the summary-only command. The "summary-only" keyword suppresses the more specific routes and announces only the summarized route.

• Question 695:

  What are two functions of MPLS Layer 3 VPNs? (Choose two.)

  A. LDP and BGP can be used for Pseudowire signaling.

  B. It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.

  C. BGP is used for signaling customer VPNv4 routes between PE nodes.

  D. A packet with node segment ID is forwarded along with shortest path to destination.

  E. Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

  Correct Answer: CE

  MPLS Layer-3 VPNs provide IP connectivity among CE sites

  *

  MPLS VPNs enable full-mesh, hub-andspoke, and hybrid IP connectivity

  *

  CE sites connect to the MPLS network via IP peering across PE-CE links

  *

  MPLS Layer-3 VPNs are implemented via VRFs on PE edge nodes

  *

  VRFs providing customer routing and forwarding segmentation

  *

  BGP used for signaling customer VPN (VPNv4) routes between PE nodes

  *

  To ensure traffic separation, customer traffic is encapsulated in an additional VPN label when forwarded in MPLS network

  *

  Key applications are layer-3 business VPN services, enterprise network segmentation, and segmented layer-3 Data Center access

• Question 696:

  Refer to the exhibit.

  

  The administrator configured route advertisement to a remote low resources rooter to use only the default route to reach any network but failed. Which action resolves this issue?

  A. Change the direction of the distribute-list command from out to in.

  B. Remove the line with the sequence number 5 from the prefix list.

  C. Remove the prefix keyword from the distribute-list command.

  D. Remove the line with the sequence number 10 from the prefix list.

  Correct Answer: B

• Question 697:

  Refer to the exhibit.

  

  The remote server is failing to receive the NetFlow data Which action resolves the issue?

  A. Modify the flow transport command transport udp 2055 to move under flow monitor profile.

  B. Modify the interlace command to Ip flow monitor FLOW-MONITOR-1 Input.

  C. Modify the udp port under flow exporter profile to Ip transport udp 4739.

  D. Modify the flow record command record v4_M to move under flow exporter profile.

  Correct Answer: B

  From the exhibit we see there are two flow monitors: the first one "FLOW-MONITOR-1" has been configured correctly but the second one "v4_r1" was left empty andinterface E0/0.1 is using it. So the remote server does not receive any NetFlow data.

• Question 698:

  When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

  A. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction

  B. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

  C. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction

  D. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction

  Correct Answer: B

• Question 699:

  An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network. Which BGP attribute must the engineer configure to avoid using the high-delay ISP link if the second ISP link is up?

  A. LOCAL_PREF

  B. MED

  C. WEIGHT

  D. AS-PATH

  Correct Answer: A

• Question 700:

  Refer to the exhibit. The DHCP client is unable to receive an IP address from the DHCP server. RouterB is configured as follows:

  

  Which command is required on the fastethernet 0/0 interface of RouterB to resolve this issue?

  A. RouterB(config-if)#lp helper-address 172.31.1.1

  B. RouterBiconfig-ififclp helper-address 255.255 255 255

  C. RouterB(config-if)#lp helper-address 172.16.1.1

  D. RouterB(config-if)#lp helper-address 172.16.1.2

  Correct Answer: D