Get Ready to Boost your Prepare for your 300-410 Exam with 563 Questions
Use Free 300-410 Exam Questions that Stimulates Actual EXAM
NEW QUESTION # 152
Refer to the exhibit.
An administrator noticed that after a change was made on R1, the timestamps on the system logs did not match the clock. What is the reason for this error?
- A. The system clock is set incorrectly to summer-time hours.
- B. The NTP server is in a different time zone.
- C. The keyword localtime is not defined on the timestamp service command.
- D. An authentication error with the NTP server results in an incorrect timestamp.
Answer: C
NEW QUESTION # 153
Refer to the exhibit.
An engineer has configured policy-based routing and applied the configured to the correct interface. How is the configuration applied to the traffic that matches the access list?
- A. It is forwarded using the routing table lookup.
- B. It is dropped.
- C. It is sent to 209.165.202.129.
- D. It is sent to 209.165.202.131.
Answer: D
NEW QUESTION # 154
Refer to the exhibit.
Refer to the exhibit. An engineer applied filter on R1 The interface flapped between R1 and R2 and cleaning the BGP session did not restore the BGP session and failed Which action must the engineer take to restore the BGP session from R2 to R1?
- A. Enable the BGP session, which went down when the session was cleared.
- B. ICMPv6 must be permitted by the IPv6 traffic filter
- C. Apply the IPv6 traffic filter in the outbound direction on the interface
- D. Swap the source and destination IP addresses in the IPv6 traffic filter
Answer: B
NEW QUESTION # 155
Refer to the exhibit.
Why is the remote NetFlow server failing to receive the NetFlow data?
- A. The destination of the flow exporter is not reachable.
- B. The flow exporter is configured but is not used.
- C. The flow monitor is applied to the wrong interface.
- D. The flow monitor is applied in the wrong direction.
Answer: B
NEW QUESTION # 156
An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table. What should be configured to accomplish this task?
- A. set ip next-hop verify-availability
- B. set ip next-hop
- C. set ip default next-hop
- D. set ip next-hop recursive
Answer: C
Explanation:
NEW QUESTION # 157
Refer to the exhibits.
A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router. Which set of configurations fixes the issue?
- A.
- B.
- C.
- D.
Answer: C
NEW QUESTION # 158
Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPV3 categories on the right.
Answer:
Explanation:
NEW QUESTION # 159
Refer to the exhibit.
An engineer is troubleshooting BGP on a device but discovers that the clock on the device does not correspond to the time stamp of the log entries. Which action ensures consistency between the two times?
- A. Configure the service timestamps log uptime command in global configuration mode.
- B. Configure the service timestamps log datetime localtime command in global configuration mode.
- C. Configure the logging clock synchronize command in global configuration mode.
- D. Make sure that the clock on the device is synchronized with an NTP server.
Answer: B
Explanation:
Explanation
https://community.cisco.com/t5/networking-documents/router-log-timestamp-entries-are-different-from-the-syste
NEW QUESTION # 160
Refer to the exhibit.
Which statement about R1 is true?
- A. OSPF redistributes RIP routes only if they have a tag of one
- B. R1 adds one to the metric for RIP learned routes before redistributing to OSPF
- C. RIP learned routes are distributed to OSPF with a tag value of one
- D. RIP routes are redistributed to OSPF without any changes
Answer: D
NEW QUESTION # 161
Refer to the exhibit.
The network administrator can see the DHCP discovery packet in R1. but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the FaO/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two.)
- A. service dhcp command on R1
- B. ip dhcp relay information enable command on R1
- C. ip dhcp option 82 command on R2
- D. service dhcp-relay command on R1
- E. ip dhcp relay information trust-all command on R2
Answer: A,E
Explanation:
Explanation
1. R1 received DHCP packet and its interface was configured with the DHCP helper address. But we are not sure if R1 forward DHCP packet to R2 or not. 2. If we connect PC directly to R2 then this problem will not appear -> DHCP Server function was configured on R2.
From these facts, the most likely problem is related to Option 82. Maybe R2 ignored DHCP request packets because it was receiving these packets with the giant field set to 0.0.0.0.
By default Cisco IOS devices reject packets with zero "giaddr" and by default Cisco Catalyst switches use
"giaddr" of zero when configured for DHCP snooping! Reference:
https://blog.ine.com/2009/07/22/understanding-dhcp-option-82
If we can run the "debug ip dhcp server packet" on R2, we may see these messages:
*Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, input feature, MCI Check(64), rtype 0, forus FALSE, sendself FALSE, mtu 0, fw dchk FALSE *Feb 22 23:54:57.759: IP:
s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, rcvd 2 *Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, stop process pak for forus packet
*Feb 22 23:54:57.759: DHCPD: inconsistent relay information. *Feb 22 23:54:57.759: DHCPD: relay information option exists, but giaddr is zero We are receiving the DHCP packet from R1, source 0.0.0.0, and destination 255.255.255.255 broadcast, but if you notice from the debug output, R2, our DHCP Server, is complaining that the relay information is inconsistent. Option 82, Information Option, is contained in the packet but the GIADDR is zero. The GIADDR stands for Gateway IP Address, which is the IP Address of the relaying agent. The Option 82, Information Option, would then contain the receiving port and hostname of the Relaying Agent by default.
R2 sees the Option 82 information, signalling that the DHCP packet might have been relayed, BUT there is no relaying IP Address. This is the behavior of DHCP Snooping when enabling it on a switch, and since the switchport does not contain an IP Address, since it's Layer 2, no GIADDR will be added.
Instead, just the Option 82 Information is added and this is the problem we have, but there are options:
1. You could trust all on R2 the DHCP Server, which will cause the server to not be so suspicious: - ip dhcp relay information trust-all - ip dhcp relay information trusted 2. Disable the addition of Option 82 information on SW: - no ip dhcp snooping information option 3. Trust the port that is receiving the DHCP Discover: - ip dhcp snooping trust Any of these options will fix our predicament.
Reference: https://evilttl.com/wiki/DHCP-Snooping
But in the answer choices, we only have 1 correct answer which is the command "ip dhcp relay information trust-all". We checked if we need any "service dhcp..." command on both IOS version 12.4 and 15.1:
Therefore we only have the "service dhcp" command, we don't have any "service dhcp-relay" command available. But the description of the "service dhcp" command says that it enables both DHCP server and relay agent so this is the best answer left.
NEW QUESTION # 162
An engineer configured access list NON-CISCO in a policy to influence routes
What are the two effects of this route map configuration? (Choose two.)
- A. Packets are forwarded using normal route lookup.
- B. Packets are forwarded to the default gateway.
- C. Packets are dropped by the access list.
- D. Packets are evaluated by sequence 10.
- E. Packets are not evaluated by sequence 10.
Answer: B,D
Explanation:
Explanation
https://www.cisco.com/c/en/us/support/docs/ip/ip-routed-protocols/47121-pbr-cmds-ce.html
NEW QUESTION # 163
Refer to the exhibit.
Which configuration denies Telnet traffic to router 2 from 198A:0:200C::1/64?
- A. Option B
- B. Option A
- C. Option D
- D. Option C
Answer: B
NEW QUESTION # 164
Refer to the exhibit.
While troubleshooting an EIGRP neighbor adjacency problem, the network engineer notices that the interface connected to the neighboring router is not participating in the EIGRP process. Which action resolves the issues?
- A. Configure the network command under EIGRP address family ipv4
- B. Configure EIGRP metrics on interface FastEthernet0/3
- C. Configure the network command to network 172.16.0.1 0.0.0.0
- D. Configure the network command under EIGRP address family vrf CLIENT1
Answer: D
NEW QUESTION # 165
Refer to the exhibit.
AS111 is receiving its own routes from AS200 causing a loop in the network. Which configuration provides loop prevention?
A)
B)
C)
D)
- A. Option B
- B. Option C
- C. Option D
- D. Option A
Answer: B
Explanation:
A router discards BGP network prefixes if it sees its ASN in AS-Path as a loop prevention mechanism. The "allowas-in" feature allows routes to be received and processed even if router detects its own ASN in AS-Path.
NEW QUESTION # 166
Refer to the exhibit.
Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are uf SLA by defining frequency and schedulingsed
Answer:
Explanation:
NEW QUESTION # 167
Which protocol does VRF-Lite support?
- A. IGRP
- B. ODR
- C. EIGRP
- D. IS-IS
Answer: C
NEW QUESTION # 168
Exhibit:
Bangkok is using ECMP to reach to the 192.168.5.0/24 network. The administrator must configure Bangkok in such a way that Telnet traffic from 192.168.3.0/24 and192.168.4.0/24 networks uses the HongKong router as the preferred router. Which set of configurations accomplishes this task?
- A. access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23
!
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
interface Ethernet0/1
ip policy route-map PBR1 - B. access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255
!
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
!
interface Ethernet0/1
ip policy route-map PBR1 - C. access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255
!
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
interface Ethernet0/3
ip policy route-map PBR1 - D. access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23
!
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
!
interface Ethernet0/3
ip policy route-map PBR1
Answer: D
Explanation:
We need to use Policy Based Routing (PBR) here on Bangkok router to match the traffic from 192.168.3.0/24 & 192.168.4.0/24 and "set ip next-hop" to HongKong router(172.18.1.2 in this case).
Note: Please notice that we have to apply the PBR on incoming interface e0/3 to receive traffic from 192.168.3.0/24 and 192.168.4.0/24.
NEW QUESTION # 169
What are the two reasons for RD and VPNv4 addresses in an MPLS Layer 3 VPN? (Choose two.)
- A. They are used for a BGP session with the CE device.
- B. VPN RT communities are used to identify customer unique routes.
- C. When the PE redistributes customer routes into MP-BGP, they must be unique.
- D. They are on a CE device to use for static configuration.
- E. RD is prepended to each prefix to make routes unique.
Answer: C,E
NEW QUESTION # 170
Refer to Exhibit.
Which two configurations allow clients to get dynamic ip addresses assigned?
- A. Configure access-list 100 permit udp any any eq 86 as the first line
- B. Configure access-list 100 permit udp any any eq 69 as the first line
- C. Configure access-list 100 permit udp any any eq 67 as the first line
- D. Configure access-list 100 permit udp any any eq 68 as the first line
- E. Configure access-list 100 permit udp any any eq 61 as the first line
Answer: C,D
Explanation:
A DHCP server that receives a DHCPDISCOVER message may respond with a DHCPOFFER message on UDP port 68 (BootP client).
...
In the event that the DHCP server is not on the local subnet, the DHCP server will send the DHCPOFFER, as a unicast packet, on UDP port 67, back to the DHCP/BootPRelay Agent from which the DHCPDISCOVER came.
NEW QUESTION # 171
......
BEST Verified Cisco 300-410 Exam Questions (2024) : https://vcecollection.trainingdumps.com/300-410-valid-vce-dumps.html
