Cisco 300-410 Free Practice Questions

NEW QUESTION 1
Refer to the exhibit.

Which control plane policy limits BGP traffic that is destined to the CPU to 1 Mbps and ignores BGP traffic that is sent at higher rate?

• A. policy-map SHAPE_BGP
• B. policy-map LIMIT_BGP
• C. policy-map POLICE_BGP
• D. policy-map COPP

Answer: D

NEW QUESTION 2
Which statement about route distinguishers in an MPLS network is true?

• A. Route distinguishers allow multiple instances of a routing table to coexist within the edge router.
• B. Route distinguishers are used for label bindings.
• C. Route distinguishers make a unique VPNv4 address across the MPLS network.
• D. Route distinguishers define which prefixes are imported and exported on the edge router.

Answer: C

NEW QUESTION 3
Which statement about MPLS LDP router ID is true?

• A. If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.
• B. The loopback with the highest IP address is selected as the router ID.
• C. The MPLS LDP router ID must match the IGP router ID.
• D. The force keyword changes the router ID to the specified address without causing any impact.

Answer: B

NEW QUESTION 4
Refer to the exhibit.

An engineer is trying to block the route to 192.168.2.2 from the routing table by using the
configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?

• A. Use an extended access list instead of a standard access list.
• B. Change sequence 10 in the route-map command from permit to deny.
• C. Use a prefix list instead of an access list in the route map.
• D. Add this statement to the route map: route-map RM-OSPF-DL deny 20.

Answer: B

NEW QUESTION 5
Refer to the exhibit.

During troubleshooting it was discovered that the device is not reachable using a secure web browser. What is needed to fix the problem?

• A. permit tcp port 443
• B. permit udp port 465
• C. permit tcp port 465
• D. permit tcp port 22

Answer: A

NEW QUESTION 6
Drag and drop the packet types from the left onto the correct descriptions on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 7
Refer to the exhibit.

An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?

• A. no ip ssh disable
• B. ip ssh enable
• C. ip ssh version 2
• D. crypto key generate rsa

Answer: D

NEW QUESTION 8
Refer to the exhibit.

An engineer is trying to generate a summary route in OSPF for network 10.0.0.0/8, but the summary route does not show up in the routing table. Why is the summary route missing?

• A. The summary-address command is used only for summarizing prefixes between areas.
• B. The summary route is visible only in the OSPF database, not in the routing table.
• C. There is no route for a subnet inside 10.0.0.0/8, so the summary route is not generated.
• D. The summary route is not visible on this router, but it is visible on other OSPF routers in the same area.

Answer: A

NEW QUESTION 9
Which attribute eliminates LFAs that belong to protected paths in situations where links in a network are connected through a common fiber?

• A. shared risk link group-disjoint
• B. linecard-disjoint
• C. lowest-repair-path-metric
• D. interface-disjoint

Answer: A

NEW QUESTION 10
Refer to the exhibit.

The output of the trace route from R5 shows a loop in the network. Which configuration prevents this loop?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 11
An engineer is trying to copy an IOS file from one router to another router by using TFTP. Which two actions are needed to allow the file to copy? (Choose two.)

• A. Copy the file to the destination router with the copy tftp: flash: command
• B. Enable the TFTP server on the source router with the tftp-server flash: <filename> command
• C. TFTP is not supported in recent IOS versions, so an alternative method must be used
• D. Configure a user on the source router with the username tftp password tftp command
• E. Configure the TFTP authentication on the source router with the tftp-server authentication local command

Answer: AB

NEW QUESTION 12
Which statement about IPv6 ND inspection is true?

• A. It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.
• B. It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.
• C. It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.
• D. It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Answer: B

NEW QUESTION 13
Drag and drop the OSPF adjacency states from the left onto the correct descriptions on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 14
Refer to the exhibit.

Why is the remote NetFlow server failing to receive the NetFlow data?

• A. The flow exporter is configured but is not used.
• B. The flow monitor is applied in the wrong direction.
• C. The flow monitor is applied to the wrong interface.
• D. The destination of the flow exporter is not reachable.

Answer: D

NEW QUESTION 15
Refer to the exhibit.

Which configuration configures a policy on R1 to forward any traffic that is sourced from the 192.168.130.0/24 network to R2?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: D

NEW QUESTION 16
Refer to the exhibit.

What is the result of applying this configuration?

• A. The router can form BGP neighborships with any other device.
• B. The router cannot form BGP neighborships with any other device.
• C. The router cannot form BGP neighborships with any device that is matched by the access list named “BGP”.
• D. The router can form BGP neighborships with any device that is matched by the access list named “BGP”.

Answer: D

NEW QUESTION 17
Refer to the exhibit.

R2 is a route reflector, and R1 and R3 are route reflector clients. The route reflector learns
the route to 172.16.25.0/24 from R1, but it does not advertise to R3. What is the reason the route is not advertised?

• A. R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.
• B. Route reflector setup requires full IBGP mesh between the routers.
• C. In route reflector setup, only classful prefixes are advertised to other clients.
• D. In route reflector setups, prefixes are not advertised from one client to another.

Answer: A

NEW QUESTION 18
When provisioning a device in Cisco DNA Center, the engineer sees the error message “Cannot select the device. Not compatible with template”.
What is the reason for the error?

• A. The template has an incorrect configuration.
• B. The software version of the template is different from the software version of the device.
• C. The changes to the template were not committed.
• D. The tag that was used to filter the templates does not match the device tag.

Answer: B

NEW QUESTION 19
Refer to the exhibit.

An engineer configures a static route on a router, but when the engineer checks the route to the destination, a different next hop is chosen. What is the reason for this?

• A. Dynamic routing protocols always have priority over static routes.
• B. The metric of the OSPF route is lower than the metric of the static route.
• C. The configured AD for the static route is higher than the AD of OSPF.
• D. The syntax of the static route is not valid, so the route is not considered.

Answer: C

NEW QUESTION 20
Refer to the exhibits.

Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two commands are missing? (Choose two.)

• A. The ip nhrp redirect command is missing on the spoke routers.
• B. The ip nhrp shortcut command is missing on the spoke routers.
• C. The ip nhrp redirect command is missing on the hub router.
• D. The ip nhrp shortcut command is missing on the hub router.
• E. The ip nhrp map command is missing on the hub router.

Answer: BC

NEW QUESTION 21
An engineer configured the wrong default gateway for the Cisco DNA Center enterprise interface during the install. Which command must the engineer run to correct the configuration?

• A. sudo maglev-config update
• B. sudo maglev install config update
• C. sudo maglev reinstall
• D. sudo update config install

Answer: A

NEW QUESTION 22
Refer to the exhibit.

Users report that IP addresses cannot be acquired from the DHCP server. The DHCP
server is configured as shown. About 300 total nonconcurrent users are using this DHCP server, but none of them are active for more than two hours per day. Which action fixes the issue within the current resources?

• A. Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool
• B. Configure the DHCP lease time to a smaller value
• C. Configure the DHCP lease time to a bigger value
• D. Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool

Answer: B

NEW QUESTION 23
Refer to the exhibit.

Why is user authentication being rejected?

• A. The TACACS+ server expects “user”, but the NT client sends “domain/user”.
• B. The TACACS+ server refuses the user because the user is set up for CHAP.
• C. The TACACS+ server is down, and the user is in the local database.
• D. The TACACS+ server is down, and the user is not in the local database.

Answer: D

NEW QUESTION 24
......