Cisco CCNP Enterprise 300-410 Questions & Answers

• Question 811:

  Refer to the exhibits.

  

  Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two commands are missing? (Choose two.)

  A. The ip nhrp redirect command is missing on the spoke routers.

  B. The ip nhrp shortcut command is missing on the spoke routers.

  C. The ip nhrp redirect command is missing on the hub router.

  D. The ip nhrp shortcut command is missing on the hub router.

  E. The ip nhrp map command is missing on the hub router.

  Correct Answer: BC

• Question 812:

  Which protocol is used to determine the NBMA address on the other end of a tunnel when mGRE is used?

  A. NHRP

  B. IPsec

  C. MP-BGP

  D. OSPF

  Correct Answer: A

• Question 813:

  Refer to the exhibit. Which configuration denies Telnet traffic to router 2 from 198A:0:200C::1/64?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 814:

  Refer to the exhibit.

  

  During troubleshooting it was discovered that the device is not reachable using a secure web browser. What is needed to fix the problem?

  A. permit tcp port 443

  B. permit udp port 465

  C. permit tcp port 465

  D. permit tcp port 22

  Correct Answer: A

• Question 815:

  Refer to the exhibit. An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+. Which action produces the desired configuration?

  

  A. Add the aaa authentication login default none command to the global configuration.

  B. Replace the capital "C" with a lowercase "c" in the aaa authentication login Console local command.

  C. Add the aaa authentication login default group tacacs+ local-case command to the global configuration.

  D. Add the login authentication Console command to the line configuration

  Correct Answer: D

  Reference: https://community.cisco.com/t5/switching/how-to-define-login-local-for-console-0/td-p/2949493

• Question 816:

  Refer to the exhibit. Which interface configuration must be configured on the spoke A router to enable a dynamic DMVPN tunnel with the spoke B router?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  The command ip nhrp map multicast dynamic should be only used on Hub router, not spoke. If we are running dynamic routing protocols based on multicast (like RIP, OSPF, EIGRP ...) we have to add the command ip nhrp map multicast dynamic in Hub to replicate all multicast traffic to all dynamic entries in the NHRP table (multicast will be proceeded as unicast traffic) - The tunnel source FastEthernet0/0 is equivalent to tunnel source 172.17.0.2, which is the NBMA address of Spoke A.

• Question 817:

  Which list defines the contents of an MPLS label?

  A. 20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

  B. 32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

  C. 20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

  D. 32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

  Correct Answer: A

  The first 20 bits constitute a label, which can have 2^20 values. Next comes 3 bit value called Traffic Class. It was formerly called as experimental (EXP) field. Now it has been renamed to Traffic Class (TC). This field is used for QoS related functions. Ingress router can classify the packet according to some criterion and assign a 3 bit value to this filed. If an incoming packet is marked with some IP Precedence or DSCP value and the ingress router may use such a field to assign an FEC to the packet. Next bit is Stack bit which is called bottom-of-stack bit. This field is used when more than one label is assigned to a packet, as in the case of MPLS VPNs or MPLS TE. Next byte is MPLS TTL field which serves the same purpose as that of IP TTL byte in the IP header

  Reference: https://tools.ietf.org/html/rfc5462

• Question 818:

  Which statement about MPLS LDP router ID is true?

  A. If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.

  B. The loopback with the highest IP address is selected as the router ID.

  C. The MPLS LDP router ID must match the IGP router ID.

  D. The force keyword changes the router ID to the specified address without causing any impact.

  Correct Answer: B

  In an MPLS (Multiprotocol Label Switching) network, the LDP (Label Distribution Protocol) router ID is used to uniquely identify a router within the MPLS domain. The correct statement about the LDP router ID is:

  The loopback with the highest IP address is selected as the router ID: By default, the LDP router ID is determined based on the loopback interface with the highest IP address configured on the router. This provides a stable and predictable router ID that is not tied to the operational state of physical interfaces.

• Question 819:

  Refer to the exhibit.

  

  An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 loses reachability with the router R3 Fa0/0 interface. The route has changed to flow through router R2.

  Which debug command is used to troubleshoot this issue?

  A. debug ip flow

  B. debug ip sla error

  C. debug ip routing

  D. debug ip packet

  Correct Answer: C

  debug ip routing This command enables debugging messages related to the routing table.

• Question 820:

  Which configuration enables the VRF that is labeled "Inet" on FastEthernet0/0?

  A. R1(config)# ip vrf Inet R1(config-vrf)#ip vrf FastEthernet0/0

  B. R1(config)#ip vrf Inet FastEthernet0/0

  C. R1(config)# ip vrf Inet R1(config-vrf)#interface FastEthernet0/0 R1(config-if)#ip vrf forwarding Inet

  D. R1(config)#router ospf 1 vrf Inet R1(config-router)#ip vrf forwarding FastEthernet0/0

  Correct Answer: C