Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 771:

  Refer to the exhibit.

  

  An engineer is monitoring reachability of the configured default routes to ISP1 and ISP2. The default route from ISP1 is preferred if available.

  How is this issue resolved?

  A. Use the icmp-echo command to track both default routes

  B. Use the same AD for both default routes

  C. Start IP SLA by matching numbers for track and ip sla commands

  D. Start IP SLA by defining frequency and scheduling it

  Correct Answer: D

  In the above configuration we have not had activated our IP SLA operation.

  We can start it with this command:

  R1(config)#ip sla schedule 100 life forever start-time now

  Also we should specific the rate of ICMP echo:

  R1(config-ip-sla-echo)#frequency 5 // Send ICMP echo every 5 seconds

• Question 772:

  After some changes in the routing policy, it is noticed that the router in AS 45123 is being used as a transit AS router for several service provides. Which configuration ensures that the branch router in AS 45123 advertises only the local networks to all SP neighbors?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  By default BGP advertises all prefixes to external BGP neighbors. This means that if you are multihomed (connected to two or more ISPs) then you might become a transit AS. For example, ISP 2 in AS 200 can send traffic to your router in AS 100 to reach ISP 3 in AS 300 because you advertised prefixes in ISP 3 to ISP 2.

  This is what will be seen in the BGP routing table of ISP1:

  

• Question 773:

  Refer to the exhibit.

  

  Redistribution is enabled between the routing protocols, and nowPC2 PC3, and PC4 cannot reach PC1. What are the two solutions to fix the problem? (Choose two.)

  A. Filter RIP routes back into RIP when redistributing into RIP in R2

  B. Filter OSPF routes into RIP from EIGRP when redistributing into RIP in R2

  C. Filter all routes except RIP routes when redistributing into EIGRP in R2.

  D. Filter RIP AND OSPF routes back into OSPF from EIGRP when redistributing into OSPF in R2

  E. Filter all routes except EIGRP routes when redistributing into OSPF in R3.

  Correct Answer: AB

  Even PC2 cannot reach PC1 so there is something wrong with RIP redistribution in R2. Because RIP has higher Administrative Distance (AD) value than OSPF and EIGRP so it will be looped when doing mutual redistribution.

• Question 774:

  Refer to the exhibit.

  

  An IP SLA is configured to use the backup default route when the primary is down, but it is not working as desired. Which command fixes the issue?

  A. R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2 10 track 1

  B. R1(config)# ip route 0.0.0.0.0.0.0.0.2.2.2.2

  C. R1(config)#ip sla track 1

  D. R1(config)# ip route 0.0.0.0.0.0.0.0.1.1.1.1 track 1

  Correct Answer: D

  Note: By default Static Router AD value-1 hence ip route 0.0.0.0. 0.0.0.0. 1.1.1.1 track 1 means AD-1 which must be less than of back up route AD.

  Define the backup route to use when the tracked object is unavailable.

  !--- The administrative distance of the backup route must be greater than

  !--- the administrative distance of the tracked route.

  !--- If the primary gateway is unreachable, that route is removed

  !--- and the backup route is installed in the routing table

  !--- instead of the tracked route.

  Reference:

  https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200785-ISP-Failover-with-default-routes-using-I.html

  https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118962-configure-asa-00.html

• Question 775:

  Which label operations are performed by a label edge router?

  A. SWAP and POP

  B. SWAP and PUSH

  C. PUSH and PHP

  D. PUSH and POP

  Correct Answer: D

  A label edge router (LER, also known as edge LSR) is a router that operates at the edge of an MPLS network and acts as the entry and exit points for the network. LERs push an MPLS label onto an incoming packet and pop it off an outgoing

  packet.

  Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx- os/mpls/configuration/guide/mpls_cg/mp_mpls_overview.pdf

• Question 776:

  Refer to the exhibit.

  

  A junior engineer updated a branch router configuration. Immediately after the change, the engineer receives calls from the help desk that branch personnel cannot reach any network destinations.

  Which configuration restores service and continues to block 10.1.1.100/32?

  A. route-map FILTER-IN deny 5

  B. ip prefix-list 102 seq 15 permit 0.0.0.0/32 le 32

  C. ip prefix-list 102 seq 5 permit 0.0.0.0/32 le 32

  D. route-map FILTER-IN permit 20

  Correct Answer: D

  By using "deny" keyword in a route-map, we can filter out the prefix specified in the prefix-list.

  But there is an implicit "deny all" statement in the prefix-list so we must permit other prefixes with "permit" keyword in the route-map.

• Question 777:

  An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1.255.255.255.252 along with the summary route. After finishing configuration, the customer complained not receiving summary route with specific loopback address.

  Which two configurations will fix it? (Choose two.)

  router eigrp 1 ! route-map Leak-Route deny 10 ! interface Serial 0/0 ip summary-address eigrp 1 10.0.0.0 255.0.0.0 leak-map Leak-Route

  A. Configure access-list 1 permit 10.1.1.0.0.0.0.3.

  B. Configure access-list 1 permit 10.1.1.1.0.0.0.252.

  C. Configure access-list 1 and match under route-map Leak-Route.

  D. Configure route-map Leak-Route permit 10 and match access-list 1.

  E. Configure route-map Leak-Route permit 20.

  Correct Answer: AD

  When you configure an EIGRP summary route, all networks that fall within the range of your summary are suppressed and no longer advertised on the interface. Only the summary route is advertised. But if we want to advertise a network that has been suppressed along with the summary route then we can use leak-map feature. The below commands will fix the configuration in this question: R1(config)#access-list 1 permit 10.1.1.0 0.0.0.3 R1(config)#route-map Leak-Route permit 10 // this command will also remove the "route_map Leak-Route deny 10" command. R1(config-route-map)#match ip address 1

• Question 778:

  Refer to the exhibit.

  

  A router is receiving BGP routing updates from multiple neighbors for routes in AS 690.

  What is the reason that the router still sends traffic that is destined to AS 690 to a neighbor other than 10.222.1.1?

  A. The local preference value in another neighbor statement is higher than 250.

  B. The local preference value should be set to the same value as the weight in the route map.

  C. The route map is applied in the wrong direction.

  D. The weight value in another neighbor statement is higher than 200.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-3se/3850/irg-xe-3se-3850-book/irg-prefix-filter.html

• Question 779:

  Refer to the exhibit.

  

  An engineer is trying to get 192.168.32.100 forwarded through 10.1.1.1, but it was forwarded through 10.1.1.2.

  What action forwards the packets through 10.1.1.1?

  A. Configure EIGRP to receive 192.168.32.0 route with lower admin distance.

  B. Configure EIGRP to receive 192.168.32.0 route with longer prefix than /19.

  C. Configure EIGRP to receive 192.168.32.0 route with lower metric.

  D. Configure EIGRP to receive 192.168.32.0 route with equal or longer prefix than /24.

  Correct Answer: D

• Question 780:

  What is a limitation of IPv6 RA Guard?

  A. It is not supported in hardware when TCAM is programmed

  B. It does not offer protection in environments where IPv6 traffic is tunneled.

  C. It cannot be configured on a switch port interface in the ingress direction

  D. Packets that are dropped by IPv6 RA Guard cannot be spanned

  Correct Answer: B

  Restrictions for IPv6 RA Guard

  The IPv6 RA Guard feature does not offer protection in environments where IPv6 traffic is tunneled.

  This feature is supported only in hardware when the ternary content addressable memory (TCAM) is programmed.

  This feature can be configured on a switch port interface in the ingress direction.

  This feature supports host mode and router mode.

  This feature is supported only in the ingress direction; it is not supported in the egress direction.

  This feature is not supported on EtherChannel and EtherChannel port members.

  This feature is not supported on trunk ports with merge mode.

  This feature is supported on auxiliary VLANs and private VLANs (PVLANs). In the case of PVLANs, primary VLAN features are inherited and merged with port features.

  Packets dropped by the IPv6 RA Guard feature can be spanned.

  Reference:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16-10/ip6f-xe-16- 10-book/ip6-ra-guard.html#GUID-589AF00C-7499-439F-AD23-51005D61CAB7