Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 721:

  An engineer configured access list NON-CISCO in a policy to influence routes.

  

  What are the two effects of this route map configuration? (Choose two.)

  A. Packets are forwarded using normal route lookup.

  B. Packets are forwarded to the default gateway.

  C. Packets are dropped by the access list.

  D. Packets are evaluated by sequence 10.

  E. Packets are not evaluated by sequence 10.

  Correct Answer: AD

• Question 722:

  An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted. Which action resolves the issue?

  A. Configure all devices for SNMPv3 informs with auth.

  B. Configure all devices for SNMPv3 informs with priv.

  C. Configure all devices for SNMPv3 traps with auth.

  D. Configure all devices for SNMPv3 traps with priv.

  Correct Answer: B

  SNMP notifications can be sent as traps or inform requests. Traps are unreliable because the receiver does not send acknowledgments when this device receives traps."Send reliable and encrypted notifications for any events" so it is SNMP notifications. For encryption we need to configure "priv".

• Question 723:

  Refer to the exhibits.

  

  

  A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router. Which set of configurations fixes the issue?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 724:

  Refer to the exhibit.

  

  A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?

  A. Set a tag in the route map when redistributing EIGRP into OSPF on R1, and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

  B. Set a tag in the route map when redistributing EIGRP into OSPF on R1, and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

  C. Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

  D. Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

  Correct Answer: A

  When doing mutual redistribution at multiple points (between OSPF and EIGRP on R1 and R2), we may create routing loops so we should use route-map to prevent redistributed routes from redistributing again into the original domain. In the below example, the route-map "SET-TAG" is used to prevent any routes that have been redistributed into EIGRP from redistributed again into OSPF domain by tagging these routes with tag 1:

  

• Question 725:

  Refer to the exhibit.

  

  A network administrator is discovering a Cisco Catalyst 9300 and a Cisco WLC 3504 in Cisco DNA Center. The Catalyst 9300 is added successfully. However, the WLC is showing error "uncontactable" when the administrator tries to add if in Cisco DNA Center.

  Which action discovers WLC in Cisco DNA Center successfully?

  A. Delete the WLC 3504 from Cisco DNA Center and add it to Cisco DNA Center again.

  B. Add the WLC 3504 under the hierarchy of the Catalyst 9300 connected devices.

  C. Copy the .cert file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

  D. Copy the .pem file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

  Correct Answer: D

  https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html#anc12

• Question 726:

  Refer to the exhibit.

  

  An IPv6 network was newly deployed in the environment and the help desk reports that R3 cannot SSH to the R2s Loopback interface. Which action resolves the issue?

  A. Modify line 10 of the access list to permit instead of deny.

  B. Remove line 60 from the access list.

  C. Modify line 30 of the access list to permit instead of deny.

  D. Remove line 70 from the access list.

  Correct Answer: C

• Question 727:

  An engineer configured SNMP notifications sent to e management server using authentication and encrypting data with DES. An error in e response PDU is received as "UNKNOWNUSERNAME, WRONGDIGEST". Which action resolves the issue?

  A. Configure the correct authentication password using SNMPv3 authNoPriv.

  B. Configure correct authentication and privacy passwords using SNMPv3 authPriv.

  C. Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.

  D. Configure the correct authentication password using SNMPv3 authPriv.

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-3se/3850/snmp-xe-3se-3850-book/nm There are three SNMP security levels (for SNMPv1, SNMPv2c, and SNMPv3):

  +

  noAuthNoPriv: Security level that does not provide authentication or encryption.

  +

  authNoPriv: Security level that provides authentication but does not provide encryption.

  +

  authPriv: Security level that provides both authentication and encryption. For SNMPv3, "noAuthNoPriv" level uses a username match for authentication.

• Question 728:

  Refer to the exhibit.

  

  A network administrator wants to block all traffic toward the Internet after business hours and on weekends. When the administrator applies an access list on interface Gi0/1, all traffic is blocked and there is no access to the Internet at any time.

  Which action resolves the issue?

  A. Add the permit ip any any time-range no-conn statement after the deny udp any any time-range no-conn command in the access list.

  B. Add the permit ip any any statement after the deny icmp any any time-range no-conn command in the access list.

  C. Add the permit allowed time-range no-conn statement after the deny icmp any any time-range no-conn command in the access list.

  D. Add the permit ip any any time-range no-conn statement after the deny icmp any any time-range no-conn command in the access list.

  Correct Answer: B

• Question 729:

  Refer to the exhibits. A company with autonomous system number AS65401 has obtained IP address block 209.165.200.224/27 from ARIN. The company needed more IP addresses and was assigned block 209.165.202.128/27 from ISP2.

  

  An engineer in ISP1 reports that they are receiving ISP2 routes from AS65401. Which configuration on R1 resolves the issue?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/23675-27.html

• Question 730:

  How are MPLS Layer 3 VPN services deployed?

  A. The RD and RT values must match under the VRF.

  B. The import and export RT values under a VRF must always be the same.

  C. The label switch path must be available between the local and remote PE routers.

  D. The RD and RT values under a VRF must match on the remote PE router.

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/iosxr/ncs5500/vpn/65x/b-l3vpn-cg-ncs5500-65x/b-l3vpn-cg-ncs5500-65x_chapter_010.html