Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 761:

  An engineer configured a company's multiple area OSPF Head Office router and Site A Cisco routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone:

  Head Office and Site A ip cef ip vrf abc rd 101:101 ! interface FastEthernet0/0 ip vrf forwarding abc ip address 172.16.16.X 255.255.255.252 ! router ospf 1 vrf abc log-adjacency-changes network 172.16.16.0 0.0.0.255 area 1

  After finishing both site router configurations, none of the LSA 3, 4, 5, and 7 are installed at Site A router.

  Which configuration resolves this issue?

  A. configure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc

  B. configure capability vrf-lite on Head Office and its connected PE router under router ospf 1 vrf abc

  C. configure capability vrf-lite on both PE routers connected to Head Office and Site A routers under routtr ospf 1 vrf abc

  D. configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc

  Correct Answer: D

• Question 762:

  Which two protocols are used by a P router to transfer VPN traffic between PE routers in an MPLS network? (Choose two.)

  A. LDP

  B. RSVP

  C. MP-BGP

  D. BGP

  E. OSPF

  Correct Answer: AB

  P to PE uses LDP and RSVP.

• Question 763:

  Which two features are required for MPLS forwarding on which types of routers? (Choose two.)

  A. MPLS on PE and core routers

  B. LDP on PE and core routers

  C. MPLS on CE and core routers

  D. LDP on PE and CE routers

  E. CEF on PE and CE routers

  Correct Answer: AB

• Question 764:

  Refer to the exhibit.

  

  BGP is flapping after the CoPP policy is applied.

  What are the two solutions to fix the issue? (Choose two.)

  A. Configure a three-color policer instead of two-color policer under Class COPP-CRIT1CAL-7600

  B. Configure IP CEF for CoPP policy and BGP to work

  C. Configure a higher value for CIR under the default class to allow more packets during peak traffic

  D. Configure a higher value for CIR under the Class COPP-CRIT1CAL-7600

  E. Configure BGP in the COPP-CRIT1CAL-7600 ACL

  Correct Answer: CE

  The policy-map COPP-7600 only rate-limit HTTP and HTTPS traffic (based on the ACL conditions) so any BGP packets will be processed in the class "class-default", which drops exceeded BGP packets. Therefore we have two ways to solve this problem:

  +

  Add BGP to the ACL with the statement "permit tcp any any eq bgp"

  +

  Configure higher value for CIR in default class as 2Mbps is too low for web traffic (http and https)

• Question 765:

  What is an advantage of using BFD?

  A. It detects local link failure at layer 1 and updates routing table.

  B. It detects local link failure at layer 2 and updates routing protocols.

  C. It has sub-second failure detection for layer 1 and layer 3 problems.

  D. It has sub-second failure detection for layer 1 and layer 2 problems.

  Correct Answer: C

  BFD provides a low-overhead, short-duration method of detecting failures in the forwarding path between two adjacent routers, including the interfaces, data links, and forwarding planes. BFD is a detection protocol that you enable at the interface and routing protocol levels

• Question 766:

  Refer the exhibit.

  

  Which action resolves intermittent connectivity observed with the SNMP trap packets?

  A. Decrease the committed burst Size of the mgmt class map

  B. Increase the CIR of the mgmt class map

  C. Add a new class map to match TCP traffic

  D. Add one new entry in the ACL 120 to permit the UDP port 161

  Correct Answer: B

• Question 767:

  Which component of MPLS VPNs is used to extend the IP address so that an engineer is able to identify to which VPN it belongs?

  A. VPNv4 address family

  B. RD

  C. RT

  D. LDP

  Correct Answer: B

  RD is prepended to each prefix to make routes unique.

  VPNv4 address (96-bit address): 64-bit RD + 32 bit IPv4 address

  https://www.ciscolive.com/c/dam/r/ciscolive/apjc/docs/2019/pdf/BRKCRT-2601.pdf

  https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2020/pdf/DGTL-BRKMPL-1100.pdf

  https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKMPL-1100.pdf

• Question 768:

  Refer to the exhibit.

  

  A company is evaluating multiple network management system tools. Trending graphs generated by SNMP data are returned by the NMS and appear to have multiple gaps. While troubleshooting the issue, an engineer noticed the relevant output.

  What solves the gaps in the graphs?

  A. Remove the exceed-rate command in the class map.

  B. Remove the class map NMS from being part of control plane policing.

  C. Configure the CIR rate to a lower value that accommodates all the NMS tools

  D. Separate the NMS class map in multiple class maps based on the specific protocols with appropriate CoPP actions

  Correct Answer: D

  The class-map NMS in the exhibit did not classify traffic into specific protocols so many packets were dropped. We should create some class-map to classify the receiving traffic. It is also a recommendation of CoPP/CPP policy: "Developing a CPP policy starts with the classification of the control plane traffic. To that end, the control plane traffic needs to be first identified and separated into different class maps."

  Reference: https://tools.cisco.com/security/center/resources/copp_best_practices

• Question 769:

  Refer to the exhibit.

  

  AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server

  Which action resolves this issue?

  A. Match the authentication port

  B. Match the accounting port

  C. Correct the timeout value.

  D. Correct the shared secret.

  Correct Answer: A

  Command Default Accounting port: 1813 Authentication port: 1812 Accounting: enabled Authentication: enabled Retransmission count: 1 Idle-time: 0 Server monitoring: disabled Timeout: 5 seconds Test username: test Test password: test

  Reference https://www.cisco.com/c/m/en_us/techdoc/dc/reference/cli/n5k/commands/radius-server-host.html

• Question 770:

  Refer to the exhibit.

  

  The network administrator configured VRF lite for customer The technician at the remote site misconfigured VRF on the router. Which configuration will resolve connectivity for both sites of customer a?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

  From the exhibit, we learned:

  +

  VRF customer_a was exported with Route target (RT) of 1:1 so at the remote site it must be imported with the same RT 1:1.

  +

  VRF customer_a was imported with Route target (RT) of 1:1 so at the remote site it must be exported with the same RT 1:1.

  Therefore at the remote site we must configure the command "route-target both 1:1" (which is equivalent to two commands "route-target import 1:1" and "route-target export 1:1".