Pre-Summer Sale Limited Time Flat 70% Discount offer - Ends in 0d 00h 00m 00s - Coupon code: 70spcl

Cisco 300-410 Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Exam Practice Test

Page: 1 / 64
Total 642 questions

Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Questions and Answers

Question 1

What must be configured by the network engineer to circumvent AS_PATH prevention mechanism in IP/VPN Hub and Spoke deployment scenarios?

Options:

A.

Use allows in and as-override at all Pes.

B.

Use allowas in and as-override at the PE-Hub.

C.

Use Allowas-in the PE_Hub

D.

Use as-override at the PE_Hub

Question 2

Question # 2

Refer to the exhibit. An administrator can log in to the device using Telnet but the attempts to log in to the same device using SSH with the same credentials fail Which action resolves this issue?

Options:

A.

Configure SSH service on the router

B.

Configure transport input all on the VTY lines to allow SSH

C.

Configure to use the Telnet user database for SSH as well

D.

Configure the VTY lines with login local

Question 3

What is a characteristic of IPv6 RA Guard?

Options:

A.

RA messages are allowed from the host port to the switch

B.

It is unable to protect tunneled traffic

C.

It filters rogue RA broadcasts from connected hosts

D.

It is supported on the egress direction of the switch

Question 4

Which feature is required for IPv6 Source Guard to block traffic arriving on the server interface from unknown sources?

Options:

A.

Dynamic ARP Inspection

B.

IPv6 RA Guard

C.

IPv6 ND Inspection

D.

DHCPv6 Guard

Question 5

Refer to the exhibit.

Question # 5

The network administrator configured the Chicago router to mutually redistribute the LA and NewYork routes with OSPF routes to be summarized as a single route in EIGRP using the longest summary mask:

Question # 5

After the configuration, the New York router receives all the specific LA routes but the summary route. Which set of configurations resolves the issue on the Chicago router?

Question # 5

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 6

Question # 6

Refer to the exhibit. Which configuration is required for R2 to get the IP address from the DHCP server?

Options:

A.

ip access-list extended R2WANpermit tcp any any eq 68

B.

ip access-list extended R2WANpermit udp any any eq 68

C.

ip access-list extended R2WANpermit udp any any eq 67

D.

interface GigabitEthernet0/0ip access-group R2WAN out

Question 7

Refer to the exhibit.

Question # 7

An engineer musl route the management server traffic to the network 10.0.250.0 over the 2 Mbps link. Which configuration accomplishes this task on R1?

A)

Question # 7

B)

Question # 7

C)

Question # 7

D)

Question # 7

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 8

Which two solutions are used to overcome a flapping link that causes a frequent label binding

exchange between MPLS routers? (Choose two)

Options:

A.

Create link dampening on links to protect the session.

B.

Increase input queue on links to protect the session.

C.

Create targeted hellos to protect the session.

D.

Increase a hold-timer to protect the session.

E.

Increase a session delay to protect the session.

Question 9

Question # 9

Question # 9

Refer to the exhibit. The IT router has been configured with the Science VRF and the interfaces have been assigned to the VRF. Which set of configurations advertises Science-1 and Science-2 routes using EIGRPAS 111?

Question # 9

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 10

Refer to the exhibit.

Question # 10

TCP traffic should be reaching host 10.10.10.10/24 via R2. Which action resolves the issue?

Options:

A.

TCP traffic will reach the destination via R2 without any changes

B.

Add a permit 20 statement in the route map to allow TCP traffic

C.

Allow TCP in the access list with no changes to the route map

D.

Set IP next-hop to 10.10.12.2 under the route-map permit 10 to allow TCP traffic.

Question 11

Question # 11

Refer to the exhibit. A prefix of 10.1.1.0/31 is assigned for the DWDM circuit between R1 and R2 to connect the two attached VRFs on each router. Which configuration provides the required connectivity on R1?

Options:

A.

interface EthernetO/0

no ip address

!

interface Eth erne to. -0.10

encapsulation dotlQ 10

ip vrf forwarding CCNP

ip address 10.1.1.0 255.255.255.252

!

interface EthernetO/0.20

encapsulation dotlQ 20

ip vrf forwarding CCNA

ip address 10.1.1.0 255.255.255.252

B.

interface EthernetO/0

ip address 10.1.1.0 255.255.255.252

!

Interface Loopback 0

ip vrf forwarding CCNP

!

Interface Loopback 1

ip vrf forwarding CCNA

!

interface TunnelO

tunnel source Loopback 0

tunnel mode gre IP

Ip vrf forwarding CCNP

tunnel destination 10.1.1.1

interface Tunnell tunnel source Loopback 1

tunnel mode gre IP

Ip vrf forwarding CCN

C.

Interface ElhernetO/0

ip address 10.1.1.0 255.255.255.254

!

Interface Loopback 0

Ip vi f forwarding CCNP

!

Interface Loopback 1

ip vrf forwarding CCNA

!

interface TunnelO tunnel source Loopback 0

tunnel mode gre

IP Ip vrf forwarding CCNP

tunnel destination 10.1.1.1

!

interface Tunned

tunnel source Loopback 1

tunnel mode gre IP

Ip vrf forwar

D.

Interface EthernetO/0

no ip address

!

interface EthernetO/0.10

encapsulation dotlQ 10

ip vrf forwarding CCNP

ip address 10.1.1.0 255.255.255.254

!

interface EthernetO/0.20

encapsulation dotlQ 20

Ip vrf forwarding CCNA

ip address 10.1.1.0 255.255.255.254

Question 12

Question # 12

Question # 12

Refer to the exhibit A customer reported an issue with a fiber link failure between RC and RE Users connected through the spoke location face disconnection and packet drops with the primary email server (172.16.16.1) but have no issues with the backup email server (172.16.26.1). All the router loopback IPs are advertised through the OSPF protocol. Which configuration resolves the issue?

Question # 12

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 13

Which mechanism provides traffic segmentation within a DMVPN network?

Options:

A.

RSVP

B.

BGP

C.

MPLS

D.

iPsec

Question 14

Refer to the exhibit.

Question # 14

A network engineer must establish communication between three different customer sites with these requirements:

Site-A: must be restricted to access to any users at Site-B or Site-C.

Site-B and Site-C must be able to communicate between sites and share routes using OSPF.

Question # 14

Which configuration meets the requirements?

Question # 14

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 15

Question # 15

Refer to the exhibit. A network engineer lost remote access to the router due to a network problem. The engineer used the console to access the router and noticed continuous logs on the console terminal. Which configuration limits the number of log messages on the console to critical and higher seventy level messages?

Options:

A.

term no monitor

B.

logging console 2

C.

no logging console

D.

logging console 5

Question 16

How do devices operate in MPLS L3VPN topology?

Options:

A.

P and associated PE routers with IGP populate the VRF table in different VPNs.

B.

CE routers connect to the provider network and perform LSP functionality

C.

P routers provide connectivity between PE devices with MPLS switching.

D.

P routers support PE to PE VPN tunnel without LSP functionality

Question 17

In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router. Which command is required on both spoke routers to communicate directly to one another?

Options:

A.

ip nhrp map dynamic

B.

ip nhrp shortcut

C.

ip nhrp nhs multicast

D.

ip nhrp redirect

Question 18

Refer to the exhibit.

Question # 18

A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using SNMP and TFTP servers.

Which configuration prevents changes from unauthorized NMS and TFTP servers?

Options:

A.

access-list 20 permit 10.221.10.11access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20snmp-server community Cisc0Us3r RO 20snmp-server community Cisc0wrus3r RW 20snmp-server tftp-server-list 20

B.

access-list 20 permit 10.221.10.11access-list 20 deny any log!snmp-server group NETVIEW v3 priv read NETVIEW access 20snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20snmp-server community Cisc0wrus3r RO 20snmp-server community Cisc0Us3r RW 20snmp-server tftp-server-list 20

C.

access-list 20 permit 10.221.10.11access-list 20 deny any log

D.

access-list 20 permit 10.221.10.11

Question 19

Which router attaches the VPN label to incoming packets from CE routing?

Options:

A.

CE router

B.

core router

C.

P router

D.

PE router

Question 20

Refer to the exhibit.

Question # 20

An engineer applies a prefix-list filter that filters most of the network 10 prefixes instead of allowing them. Which action resolves the issue?

Options:

A.

Modify the ip prefix-list ElGRP seq 10 permit 10.0.0.0/8 le 9 command.

B.

Modify the command Modify the Ip prefix-list ElGRP seq 10 permit 10.0.0.0/8 le 32 command.

C.

Modify the Ip prefix-list ElGRP seq 20 permit 0.0.0.0/0 le 32 command.

D.

Modify the ip prefix-list ElGRP seq 20 permit 10.0.0.0/8 ge 9 command

Question 21

Refer to the exhibit.

Question # 21

R1 has a route map configured, which results in a loss of partial IPv6 prefixes for the BGP neighbor, resulting in service degradation. How can the full service be restored?

Options:

A.

The neighbor requires a soft reconfiguration, and this will clear the policy without resetting the BGP TCP connection.

B.

The prefix lit requires all prefixes that R1 is advertising to be added to it, and this will allow additional prefixes to be advertised.

C.

The route map requires a deny 20 statement without set conditions, and this will allow additional prefixes to be advertised.

D.

The route map requires a permit 20 statement without set conditions, and this will allow additional prefixes to be advertised.

Question 22

Question # 22

Refer to the exhibit.

A shoe retail company implemented the uRPF solution for an antispoofing attack. A network engineer received the call that the branch A server is under an IP spoofing attack. Which configuration must be implemented to resolve the attack?

A)

Question # 22

B)

Question # 22

C)

Question # 22

D)

Question # 22

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 23

What is a MPLS PHP label operation?

Options:

A.

Downstream node signals to remove the label.

B.

It improves P router performance by not performing multiple label lookup.

C.

It uses implicit-NULL for traffic congestion from source to destination forwarding

D.

PE removes the outer label before sending to the P router.

Question 24

Question # 24

Refer to the exhibit. An engineer must troubleshoot a connectivity issue impacting the redistribution of the subnet 172.16.2.48/28 into the OSPF domain. Which configuration on router R1 advertises this subnet into the OSPF domain?

Options:

A.

R1(config)#route-map CCNP permit 10R1(config-route-map)#match route-type internalR1(config-router)#router ospf 10R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

B.

R1(config)#route-map CCNP permit 10R1(config-route-map)#match route-type level-2R1(config-router)#router ospf 10R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

C.

R1(config)#route-map CCNP deny 10R1(config-route-map)#match tag 200R1(config)#route-map CCNP permit 10R1(config-router)#router ospf 10R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

D.

R1(config)#route-map CCNP permit 10R1(config-route-map)#match tag 200R1(config-route-map)#exitR1(config-router)#router ospf 10R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

Question 25

Question # 25

Refer to the exhibit. Which configuration resolves the IP SLA issue from R1 to the server?

Options:

A.

R6(config)#ip sla responder

B.

R6(config)#ip sla responder udp-echo ipaddress 10.60.60.6 po 5000

C.

R6(config)#ip sla 650 R6(config-ip-sla)ff udp-jitter 10.60.60.6

D.

R6(config)#ip sla schedule 10 life forever start-time now

Question 26

Refer to the exhibit.

Question # 26

The forwarding entries how that the next hop for prefixes from the 172.16.0.0/16 network is set to 10.2.2.2 instead of 10.1.1.1. Which action resolves the issue?

Options:

A.

Add set ip next hop 10.1.1.1 in route-map RED permit 20.

B.

Add the continue statement in route-map RED permit 10 instead of continue 20.

C.

Remove match ip address prefix-list 1 from route-map RED permit 10.

D.

Remove the continue 20 statement from route-map RED permit 10

Question 27

Refer to the exhibit.

Question # 27

An engineer implemented CoPP but did not see OSPF traffic going through it. Which configuration resolves the issue?

Options:

A.

ip access-list extended OSPF permit ospf any any

B.

policy-map COPP class OSFP police 8000 conform-action transmit exceed-action transmit violate-action drop

C.

control-plane service-policy input COPP

D.

class-map match-all OSFP match access-group name OSPF

Question 28

What is a function of the IPv6 DHCP Guard feature for DHCP messages?

Options:

A.

Only access lists are supported for matching traffic.

B.

All client messages are always switched regardless of the device role.

C.

It blocks only DHCP request messages.

D.

If the device is configured as a DHCP server, no message is switched.

Question 29

A network administrator cannot connect to a device via SSH. The line vty configuration is as follows:

Question # 29

Which action resolves this issue?

Options:

A.

Increase the session timeout

B.

Change the stopbits to 10.

C.

Configure the transport input SSH

D.

initialize the SSH key

Question 30

An engineer must override the normal routing behavior of a router for Telnet traffic that is destined to 10.10.10.10 from 10.10.1.0/24 via a next hop of 10.4.4.4. which is directly connected to the router that is connected to the 10.1.1.0/24 subnet Which configuration reroutes traffic according to this requirement?

Question # 30

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 31

:577

Question # 31

Refer to the exhibit. R3 is dual-homed to two service providers for traffic redundancy. R3 prefers its outbound traffic via R2. Which set of configurations achieves this goal?

Question # 31

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 32

Question # 32

Refer to the exhibit. After recovering from a power failure. Ethernet0/1 stayed down while Ethernet0/0 returned to the up/up state The default route through ISP1 was not reinstated m the routing table until Ethernet0/1 also came up Which action resolves the issue?

Options:

A.

Reference the track object 1 in both static default routes

B.

Remove the references to the interface names from both static default routes

C.

Configure the default route through ISP1 with a higher administrative distance than 2.

D.

Add a static route to the 8 8.8 8/32 destination through the next hop 203.0.113.1

Question 33

Refer to the exhibit.

Question # 33

R1 is configured with uRPF, and ping to R1 is failing from a source present in the R1 routing table via the GigatxtEthernet 0/0 interface. Which action resolves the issue?

Options:

A.

Remove the access list from the interface GigabrtEthernet 0/0

B.

Modify the uRPF mode from strict to loose

C.

Enable Cisco Express Forwarding to ensure that uRPF is functioning correctly

D.

Add a floating static route to the source on R1 to the GigabitEthernet 0/1 interface

Question 34

Refer to the exhibit.

Question # 34

The Customer Edge router (AS 65500) wants to use ASC100 as the preferred ISP for all external routes.

Question # 34

This configuration failed to send routes to AS 100 as the preferred path. Which set of configuration resolves the issue?

Question # 34

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 35

Question # 35

Refer to the exhibit EIGRP adjacency between router A and router C is not working as expected Which two configurations resolve the issue? (Choose two )

A)

Question # 35

B)

Question # 35

C)

Question # 35

D)

Question # 35

E)

Question # 35

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

E.

Option E

Question 36

The network administrator configured R1 for Control Plane Policing so that the inbound Telnet traffic is policed to 100 kbps. This policy must not apply to traffic coming in from 10.1.1.1/32 and 172.16.1.1/32. The administrator has configured this:

Question # 36

The network administrator is not getting the desired results. Which set of configurations resolves this issue?

Options:

A.

control-planeno service-policy input PM-CoPP!interface Ethernet 0/0service-policy input PM-CoPP

B.

control-planeno service-policy input PM-CoPPservice-policy input PM-CoPP

C.

no access-list 101access-list 101 deny tcp host 10,1,1.1 any eq 23access-list 101 deny tcp host 172,16.1.1 any eq 23access-list 101 permit ip any any

D.

no access-list 101access-list 101 deny tcp host 10,1.1.1 any eq 23access-list 101 deny tcp host 172.16.1.1 any eq 23access-list 101 permit ip any any!interface E0/0service-policy input PM-CoPP

Question 37

Question # 37

Question # 37

Refer to the exhibit. When an FTP client attempts to use passive FTP to connect to the FTP server, the file transfers fail Which action resolves the issue?

Options:

A.

Configure active FTP traffic.

B.

Modify FTP-SERVER access list to remove established at the end.

C.

Modify traffic filter FTP-SERVER in to the outbound direction.

D.

Configure to permit TCP ports higher than 1023.

Question 38

Which MPLS value is combined with the IP prefix to convert to a VPNv4 prefix?

Options:

A.

16-byte Route Distinguisher

B.

8-byte Route Target

C.

16-byte Route Target

D.

8-byte Route Distinguisher

Question 39

Refer to the exhibit.

Question # 39

An engineer must advertise routes into IPv6 MP-BGP and failed. Which configuration resolves the issue on R1?

Options:

A.

router bgp 65000no bgp default ipv4-unicastaddress-family ipv6 multicastnetwork 2001:DB8::/64

B.

router bgp 65000no bgp default ipv4-unicastaddress-family ipv6 unicastnetwork 2001:DB8::/64

C.

router bgp 64900no bgp default ipv4-unicastaddress-family ipv6 unicastnetwork 2001:DB8::/64

D.

router bgp 64900no bgp default ipv4-unicastaddress-family ipv6 multicastneighbor 2001:DB8:7000::2 translate-update ipv6 multicast

Question 40

Refer to the exhibit.

Question # 40

An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established and did not meet the requirement. Which action resolves the issue?

Options:

A.

Replace OSPF process 10 on the interface with OSPF process 1, and configure an additional router ID with IPv6 address.

B.

Replace OSPF process 10 on the interface with OSPF process 1, for the VPv6 addressma nd remove process route ID with IPv6 address.

C.

Replace OSPF process 10 on the interface with OSPF process 1, and remove process 10 from the global configuration.

D.

Replace OSPF process 10 on the interface with OSPF process 1 for the IPv4 address, and remove process 10 from the global configuration.

Question 41

Question # 41

Refer to the exhibit. A network engineer is provisioning end-to-end traffic service for two different enterprise networks with these requirements

The OSPF process must differ between customers on HQ and Branch office routers, and adjacencies should come up instantly.

The enterprise networks are connected with overlapping networks between HO and a branch office

Which configuration meets the requirements for a customer site?

A

A)

Question # 41

B)

Question # 41

C)

Question # 41

D)

Question # 41

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 42

An engineer failed to run diagnostic commands on devices using Cisco DNA Center. Which action in Cisco DNA Center resolves the issue?

Options:

A.

Enable Command Runner

B.

Enable APIs

C.

Enable CDP

D.

Enable Secure Shell

Question 43

Question # 43

Question # 43

Refer to the exhibit. An engineer must troubleshoot a connectivity issue impacting the redistribution of the subnet 172.16.2.48/28 into the OSPF domain. Which configuration on router R1 advertises this subnet into OSPF?

Options:

A.

R1 (config-router) #redistribute eigrp 100 subnets route-map CCNP

R1 (config) #router ospf 10

R1 (config-route-map) #match route-type level-2

R1 (config) #route-map CCNP permit 10

B.

R1 (config-router) #redistribute eigrp 100 subnets route-map CCNP

R1 (config) #router ospf 10

R1 (config) #route-map CCNP permit 10

R1 (config-route-map) #match tag 200

R1 (config) #route-map CCNP deny 10

C.

R1 (config-router) #redistribute eigrp 100 subnets route-map CCNP

R1 (config) #router ospf 10

R1 (config-route-map) #match route-type internal

R1 (config) #route-map CCNP permit 10

D.

R1 (config-router) #redistribute eigrp 100 subnets route-map CCNP

R1 (config) #router ospf 10

R1 (config-route-map) #exit

R1 (config-route-map) #match tag 200

R1 (config) #route-map CCNP permit 10

Question 44

Question # 44

Refer to the exhibit. An engineer must configure a per VRF for TACACS+ for company A. Which configuration on RTG-1 accomplishes the task?

Question # 44

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 45

Refer to the exhibit.

A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log message stream it is impossible to capture the problem Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two)

Options:

A.

debug condition interface

B.

debug condition ip

C.

debug condition ospf neighbor

D.

debug condition session-id ADJCHG

E.

debug condition all

Question 46

What is the role of LDP in MPLS networks?

Options:

A.

It enables label binding that exchanges route descriptors

B.

It creates MPLS packet forwarding along with the IGP routes.

C.

It disables label binding information to exchange with peer LSRs.

D.

It enables label binding information to exchange with peer LSRs

Question 47

Question # 47

Refer to the exhibit A network engineer is troubleshooting an AAA authentication issue for R1 from R2 When an engineer tries to open a telnet connection to R1 it opens the connection but shows a %Authorization failed error message on the terminal and closes the connection silently Which action resolves the issue?

Options:

A.

Resolve tacacs+ server host IP authentication miss configuration on the R1 router

B.

Resolve tacacs+ server reachability from the R1 router.

C.

Configure the tacacs+ server host IP on the R1 router

D.

Configure authorization commands in the tacacs* server for the R1 router.

Question 48

Refer to the exhibit.

Question # 48

A network administrator successfully logs in to a switch using SSH from a (RADIUS server When the network administrator uses a console port to access the switch the RADIUS server returns shell:priv-lvl=15’’ and the switch asks to enter the enable command \ the command is entered, it gets rejected. Which command set is used to troubleshoot and reserve this issue?

Options:

A.

line con 0aaa authorization consoleauthorization exec!line vty 0 4transport input ssh

B.

line con 0aaa authorization console!line vty 0 4authorization exec

C.

line con 0aaa authorization console priv15!line vty 0 4authorization exec

D.

line con 0aaa authorization consoleauthorization priv15!line vty 0 4transport input ssh

Question 49

Question # 49

Refer to the exhibit. An engineer configures router A to mark all inside to outside traffic from network 192 168 1 0, except from host 192 168 1 1. with critical IP precedence. The policy did not work as expected Which configuration resolves the issue?

A)

Question # 49

B)

Question # 49

C)

Question # 49

D)

Question # 49

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Question 50

Question # 50

Refer to the exhibit. An organization is installing a new L3 MPLS link to establish DM VPN Phase 2 tunnels between the hub and two spoke routers Which additional configuration should the engineer implement on each device to achieve optimal routing between the spokes?

A)

Question # 50

B)

Question # 50

C)

Question # 50

D)

Question # 50

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Question 51

Question # 51

Refer to the exhibit. A network administrator configured NetFlow data, but the data is not visible at the NetFlow collector. Which configuration allows the router to send the records?

Options:

A.

Configure the management interface in the global routing table to send the records.

B.

Configure a different interface to send the records.

C.

Configure the NetFlow collector to listen at export-protocol netflow-v5.

D.

Rectify NetFlow collector reachability from the management interface.

Question 52

Question # 52

Refer to the exhibit. R10 attempts to copy an image file from R11 using TFTP, and the operation is timing out. Which action resolves the issue?

Options:

A.

Change R10 duplex to auto to resolve the duplex mismatch between routers R10 and R11.

B.

R10 must be configured to belong to the same VRF TFTP.

C.

R11 requires the TFTP server source-interface to be set to GigabitEthernetO/0.

D.

R11 requires the TFTP server command for the image to be set to the VRF TFTP.

Question 53

Refer to the exhibit.

Question # 53

An administrator is troubleshooting a time synchronization problem for the router time to another Cisco IOS XE-based device that has recently undergone hardening. Which action resolves the issue?

Options:

A.

Allow NTP in the ingress ACL on 10.1.225.40 by permitting UDP destined to port 123.

B.

Ensure that he CPE router has a valid route to 10.1.255. 40 for NTP and rectify if not reachable.

C.

NTP service is disabled and must be enabled on 10.1.225.40.

D.

Allow NTP in the ingress ACL on 10.1.255.40 by permitting TCP destined to port 123.

Question 54

Question # 54

Refer to the exhibit. The client server but the show command does not show the IPv6 DHCP bindings on the server. Which action resolves the issue?

Options:

A.

Extend the DHCP lease time because R1 removed the IPv6 address earlier after the lease expired.

B.

Configure H1 as the DHCP client that manually assigns the IPv6 address on interlace e0/0..

C.

Use the 2001:DBB:BAD:C0DE::/64 prefix for the DHCP pool on R1.

D.

Configure authorized DHCP servers to avoid IPv6 addresses from a rogue DHCP server.

Question 55

Question # 55

Refer to the exhibit. R1 lost its directly connected EIGRP peer 172.16.33.2 (SW1). Which configuration resolves the issue?

Options:

A.

key chain EIGRP

keyl

key-string Cisco

!

interface GigabitEthernet 2.10

Ip authentication mode elgrp 88 md5

Ip authentication key-chain elgrp 88 EIGRP

B.

key chain EIGRP

keyl

key-string Cisco

!

interface GigabitEthernet 2

ip authentication mode elgrp 88 md5

ip authentication key-chain elgrp 88 Cisco

C.

key chain EIGRP

keyl

key-string Cisco

!

interface GigabitEthernet 2

ip authentication mode elgrp 88 md5

ip authentication key-chain elgrp 88 EIGRP

D.

key chain EIGRP

keyl

key-string Cisco

!

interface GigabitEthernet 2.10

ip authentication mode eigrp 88 md5

ip authentication key-chain eigrp 88 Cisco

Question 56

Refer to the exhibit.

Question # 56

A customer reports that user traffic of bank XYZ to the AAA server is not using the primary path via the R3-R2 link. The network team observes:

No fiber is cut on links R2 and R3.

As101 and AS 201 routers established BGP peering.

Which configuration resolves the issue?

A)

Question # 56

B)

Question # 56

C)

Question # 56

D)

Question # 56

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 57

Question # 57

Refer to lhe exhibit An engineer must filter EIGRP updates that are received to block all 10 10 10.0/24 prefixes The engineer tests the distribute list and finds one associated prefix. Which action resolves the issue?

Options:

A.

There is a permit in the route map that allows this prefix A deny 20 statement is required with a match condition to match a new ACL that denies all prefixes

B.

There is a permit in the ACL that allows this prefix into EI6RP. The ACL should be modified to deny 10.10.10.0 0.0.0.255.

C.

There is a permit in the route map that allows this prefix A deny 20 statement is required with no match condition to block the prefix.

D.

There is a permit in the ACL that allows this prefix into EIGRP. The ACL should be modified to deny 10.10.10.0 255.255.255.0.

Question 58

Question # 58

Refer to the exhibit. An engineer is investigating an OSPF issue reported by the Cisco DNA Assurance Center. Which action resolves the issue?

Options:

A.

One of the neighbor links is down Bring the interface up by running shut and no shut

B.

One of the interfaces is using the wrong MTU Match interface MTU on both links

C.

An ACL entry blocking multicast on the interfaces Allow multicast through the interface ACL

D.

One of the interfaces is using the wrong authentication Match interface authentication on both links

Question 59

Refer to the exhibit.

Question # 59

The none area 0 routers in OSPF still receive more specific routes of 10.1.1.0.10.1.2.0.10.1.3.0 from area 0. Which action resolves the issue?

Options:

A.

Configure route summarization on OSPF-enabled interfaces.

B.

Summarize by using the summary-address 10.1.0.0 255.255.252.0 command.

C.

Summarize by using the area range command on ABRs

D.

Configure the summary-address 10.1.0.0 255.255.252.0 command under OSPF process.

Question 60

Question # 60

Refer to the exhibit A CoPP policy is implemented to allow specific control traffic, but the traffic is not matching as expected and is getting unexpected behavior of control traffic. Which action resolves the issue?

Options:

A.

Use match-any instruction in class-map

B.

Create a separate class map against each ACL.

C.

Create a separate class map lor ICMP traffic.

D.

Use default-class to match ICMP traffic

Question 61

Refer to the exhibit.

Question # 61

The control plane is heavily impacted after the CoPP configuration is applied to the router. Which command removal lessens the impact on the control plane?

Options:

A.

access-list 120 permit udp any any eq pim-auto-rp

B.

access-list 120 permit eigrp any host 224.0.0.10

C.

access-list 120 permit ospf any

D.

access-list 120 permit tcp any gt 1024 eq bgp log

Question 62

Question # 62

Refer to the exhibit A network administrator is troubleshooting to reduce the routing table of R4 and R5 to learn only the default route to communicate from Inter-Area and Intra-Area networks Which configuration resolves the issue?

A)

Question # 62

B)

Question # 62

C)

Question # 62

D)

Question # 62

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 63

Question # 63

Refer to the exhibit. ISP 1 and ISP 2 directly connect to the internet. A customer is tracking both ISP links to achieve redundancy but cannot see the Cisco IOS IP SLA tracking output on the router console. Which command is missing from the IP SLA configuration?

Options:

A.

start-time 00:00

B.

start-time now

C.

start-time 0

D.

start-time immediately

Question 64

The network administrator configured CoPP so that all SNMP traffic from Cisco Prime located at 192.168.1.11 toward the router CPU is limited to 1000 kbps. Any traffic that exceeds this limit must be dropped.

access-list 100 permit udp any any eq 161

class-map CM-SNMP

match access-group 100

policy-map PM-COPP

class CM-SNMP

police 1000 conform-action transmit

!

control-plane

service-policy input PM-COPP

The network administrator is not getting the desired result for the SNMP traffic and SNMP traffic is getting dropped frequently. Which set of configurations resolves the issue?

Question # 64

Question # 64

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 65

Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

Options:

A.

multi-paths eibgp 2

B.

maximum-paths 2

C.

Maximum-paths ibgp 2

D.

multi-paths 2

Question 66

Refer to the exhibit.

Question # 66

An engineer has configured DMVPN on a spoke router. What is the WAN IP address of another spoke router within the DMVPN network?

Options:

A.

172.18.46.2

B.

192.168.1.4

C.

172.18.16.2

D.

192.168.1.1

Question 67

Which statement about IPv6 ND inspection is true?

Options:

A.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

B.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

C.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

D.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Question 68

While troubleshooting connectivity issues to a router, these details are noticed:

Standard pings to all router interfaces, including loopbacks, are successful.

Data traffic is unaffected.

SNMP connectivity is intermittent.

SSH is either slow or disconnects frequently.

Which command must be configured first to troubleshoot this issue?

Options:

A.

show policy-map control-plane

B.

show policy-map

C.

show interface | inc drop

D.

show ip route

Question 69

Refer to the exhibit.

Question # 69

An engineer is trying to redistribute OSPF to BGP, but not all of the routes are

redistributed. What is the reason for this issue?

Options:

A.

By default, only internal routes and external type 1 routes are redistributed into BGP

B.

Only classful networks are redistributed from OSPF to BGP

C.

BGP convergence is slow, so the route will eventually be present in the BGP table

D.

By default, only internal OSPF routes are redistributed into BGP

Question 70

Refer to the exhibit.

Question # 70

Which subnet is redistributed from EIGRP to OSPF routing protocols?

Options:

A.

10.2.2.0/24

B.

10.1.4.0/26

C.

10.1.2.0/24

D.

10.2.3.0/26

Question 71

Which security feature can protect DMVPN tunnels?

Options:

A.

IPsec

B.

TACACS+

C.

RTBH

D.

RADIUS

Question 72

Refer to the exhibit.

Question # 72

A network engineer for AS64512 must remove the inbound and outbound traffic from link A during maintenance without closing the BGP session so that there ............ a backup link over link A toward the ASN. Which BGP configuration on R1 accomplishes this goal?

A)

Question # 72

B)

Question # 72

C)

Question # 72

D)

Question # 72

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 73

Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.

Question # 73

Options:

Question 74

Which configuration adds an IPv4 interface to an OSPFv3 process in OSPFv3 address family configuration?

Options:

A.

Router ospf3 1 address-family ipv4

B.

Router(config-router)#ospfv3 1 ipv4 area 0

C.

Router(config-if)#ospfv3 1 ipv4 area 0

D.

Router ospfv3 1 address-family ipv4 unicast

Question 75

Refer to the exhibit.

Question # 75

Which routes from OSPF process 5 are redistributed into EIGRP?

Options:

A.

E1 and E2 subnets matching access list TO-OSPF

B.

E1 and E2 subnets matching prefix list TO-OSPF

C.

only E2 subnets matching access list TO-OSPF

D.

only E1 subnets matching prefix listTO-OS1

Question 76

What is a limitation of IPv6 RA Guard?

Options:

A.

It is not supported in hardware when TCAM is programmed

B.

It does not offer protection in environments where IPv6 traffic is tunneled.

C.

It cannot be configured on a switch port interface in the ingress direction

D.

Packets that are dropped by IPv6 RA Guard cannot be spanned

Question 77

Drag and drop the packet types from the left onto the correct descriptions on the right.

Question # 77

Options:

Question 78

After some changes in the routing policy, it is noticed that the router in AS 45123 is being used as a transit AS router for several service provides. Which configuration ensures that the branch router in AS 45123 advertises only the local networks to all SP neighbors?

A)

Question # 78

B)

Question # 78

C)

Question # 78

D)

Question # 78

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 79

Which protocol does MPLS use to support traffic engineering?

Options:

A.

Tag Distribution Protocol (TDP)

B.

Resource Reservation Protocol (RSVP)

C.

Border Gateway Protocol (BGP)

D.

Label Distribution Protocol (LDP)

Question 80

Refer to the exhibit.

Question # 80

An engineer is trying to block the route to 192.168.2.2 from the routing table by using the

configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?

Options:

A.

Use an extended access list instead of a standard access list.

B.

Change sequence 10 in the route-map command from permit to deny.

C.

Use a prefix list instead of an access list in the route map.

D.

Add this statement to the route map: route-map RM-OSPF-DL deny 20.

Question 81

Refer to the exhibit.

Question # 81

After redistribution is enabled between the routing protocols; PC2, PC3, and PC4 cannot reach PC1. Which action can the engineer take to solve the issue so that all the PCs are reachable?

Options:

A.

Set the administrative distance 100 under the RIP process on R2.

B.

Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.

C.

Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.

D.

Redistribute the directly connected interfaces on R2.

Question 82

During the maintenance window an administrator accidentally deleted the Telnet-related

configuration that permits a Telnet connection from the inside network (Eth0/0) to the outside of the networking between Friday – Sunday night hours only. Which configuration resolves the issue?

A)

Question # 82

B)

Question # 82

C)

Question # 82

D)

Question # 82

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 83

Refer to the exhibit.

Question # 83

AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server Which action resolves this issue?

Options:

A.

Match the authentication port

B.

Match the accounting port

C.

Correct the timeout value.

D.

Correct the shared secret.

Question 84

While working with software images, an engineer observes that Cisco DNA Center cannot upload its software image directly from the device. Why is the image not uploading?

Options:

A.

The device must be resynced to Cisco DNA Center.

B.

The software image for the device is in install mode.

C.

The device has lost connectivity to Cisco DNA Center.

D.

The software image for the device is in bundle mode

Question 85

Which statement about IPv6 RA Guard is true?

Options:

A.

It does not offer protection in environments where IPv6 traffic is tunneled.

B.

It cannot be configured on a switch port interface in the ingress direction.

C.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

D.

It is not supported in hardware when TCAM is programmed.

Question 86

Which two statements about redistributing EIGRP into OSPF are true? (Choose two)

Options:

A.

The redistributed EIGRP routes appear as type 3 LSAs in the OSPF database

B.

The redistributed EIGRP routes appear as type 5 LSAs in the OSPF database

C.

The administrative distance of the redistributed routes is 170

D.

The redistributed EIGRP routes appear as OSPF external type 1

E.

The redistributed EIGRP routes as placed into an OSPF area whose area ID matches the EIGRPautonomous system number

F.

The redistributed EIGRP routes appear as OSPF external type 2 routes in the routing table

Question 87

Refer to the exhibits.

Question # 87

Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two

commands are missing? (Choose two.)

Options:

A.

The ip nhrp redirect command is missing on the spoke routers.

B.

The ip nhrp shortcut command is missing on the spoke routers.

C.

The ip nhrp redirect commands is missing on the hub router.

D.

The ip nhrp shortcut commands is missing on the hub router.

E.

The ip nhrp map command is missing on the hub router.

Question 88

Drag and drop the MPLS VPN device types from me left onto the definitions on the right.

Question # 88

Options:

Question 89

Which attribute eliminates LFAs that belong to protected paths in situations where links in a network are connected through a common fiber?

Options:

A.

shared risk link group-disjoint

B.

linecard-disjoint

C.

lowest-repair-path-metric

D.

interface-disjoint

Question 90

When provisioning a device in Cisco DNA Center, the engineer sees the error message “Cannot select the device. Not compatible with template”.

What is the reason for the error?

Options:

A.

The template has an incorrect configuration.

B.

The software version of the template is different from the software version of the device.

C.

The changes to the template were not committed.

D.

The tag that was used to filter the templates does not match the device tag.

Question 91

Which two protocols can cause TCP starvation? (Choose two)

Options:

A.

TFTP

B.

SNMP

C.

SMTP

D.

HTTPS

E.

FTP

Question 92

Exhibit:

Question # 92

BGP is flapping after the Copp policy is applied. What are the two solutions to fix the issue?

(Choose two)

Options:

A.

Configure BGP in the COPP-CRITICAL-7600 ACL

B.

Configure a higher value for CIR under the default class to allow more packets during peak traffic

C.

Configure a higher value for CIR under the class COPP-CRITICAL-7600

D.

Configure a three-color policer instead of two-color policer under class COPP-CRITICAL-7600

E.

Configure IP CEF to CoPP policy and BGP to work

Question 93

Which statement about MPLS LDP router ID is true?

Options:

A.

If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.

B.

The loopback with the highest IP address is selected as the router ID.

C.

The MPLS LDP router ID must match the IGP router ID.

D.

The force keyword changes the router ID to the specified address without causing any impact.

Question 94

Which list defines the contents of an MPLS label?

Options:

A.

20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

B.

32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

C.

20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

D.

32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

Question 95

Refer to the exhibit.

Question # 95

A junior engineer updated a branch router configuration. Immediately after the change, the engineer receives calls from the help desk that branch personnel cannot reach any network destinations. Which configuration restores service and continues to block 10.1.1.100/32?

Options:

A.

route-map FILTER-IN deny 5

B.

ip prefix-list 102 seq 15 permit 0.0.0.0/32 le 32

C.

ip prefix-list 102 seq 5 permit 0.0.0.0/32 le 32

D.

route-map FILTER-IN permit 20

Question 96

Which configuration enabled the VRF that is labeled “Inet” on FastEthernet0/0?

Options:

A.

R1(config)# ip vrf InetR1(config-vrf)#interface FastEthernet0/0R1(config-if)#ip vrf forwarding Inet

B.

R1(config)#router ospf 1 vrf InetR1(config-router)#ip vrf forwarding FastEthernet0/0

C.

R1(config)#ip vrf Inet FastEthernet0/0

D.

R1(config)# ip vrf InetR1(config-vrf)#ip vrf FastEthernet0/0

Question 97

An engineer is trying to copy an IOS file from one router to another router by using TFTP. Which two actions are needed to allow the file to copy? (Choose two.)

Options:

A.

Copy the file to the destination router with the copy tftp: flash: command

B.

Enable the TFTP server on the source router with the tftp-server flash: < filename > command

C.

TFTP is not supported in recent IOS versions, so an alternative method must be used

D.

Configure a user on the source router with the username tftp password tftp command

E.

Configure the TFTP authentication on the source router with the tftp-server authentication local command

Question 98

Which Cisco VPN technology can use multipoint tunnel, resulting in a single GRE tunnel interface on the hub, to support multiple connections from multiple spoke devices?

Options:

A.

DMVPN

B.

GETVPN

C.

Cisco Easy VPN

D.

FlexVPN

Question 99

Refer to the exhibit.

Question # 99

Which configuration denies Telnet traffic to router 2 from 198A:0:200C::1/64?

A)

Question # 99

B)

Question # 99

C)

Question # 99

D)

Question # 99

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 100

Refer to the exhibit.

Question # 100

Users report that IP addresses cannot be acquired from the DHCP server. The DHCP

server is configured as shown. About 300 total nonconcurrent users are using this DHCP server, but none of them are active for more than two hours per day. Which action fixes the issue within the current resources?

Options:

A.

Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool

B.

Configure the DHCP lease time to a smaller value

C.

Configure the DHCP lease time to a bigger value

D.

Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool

Question 101

Refer to the exhibit.

Question # 101

The network administrator configured VRF lite for customer A. The technician at the remote site misconfigured VRF on the router. Which configuration will resolve connectivity for both sites of customer_a?

Question # 101

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 102

Drag and drop the MPLS terms from the left onto the correct definitions on the right.

Question # 102

Options:

Question 103

Refer to the exhibit.

Question # 103

An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+. Which action produces the desired configuration?

Options:

A.

Add the aaa authentication login default none command to the global configuration.

B.

Replace the capital “C” with a lowercase “c” in the aaa authentication login Console local command.

C.

Add the aaa authentication login default group tacacs+ local-case command to the globalconfiguration.

D.

Add the login authentication Console command to the line configuration

Question 104

Which protocol is used to determine the NBMA address on the other end of a tunnel when mGRE is used?

Options:

A.

NHRP

B.

IPsec

C.

MP-BGP

D.

OSPF

Question 105

What is the output of the following command:

show ip vrf

Options:

A.

Show ' s default RD values

B.

Displays IP routing table information associated with a VRF

C.

Show ' s routing protocol information associated with a VRF.

D.

Displays the ARP table (static and dynamic entries) in the specified VRF

Question 106

Refer to the exhibit.

Question # 106

R2 is a route reflector, and R1 and R3 are route reflector clients. The route reflector learns the route to 172.16.25.0/24 from R1, but it does not advertise to R3. What is the reason the route is not advertised?

Options:

A.

R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.

B.

Route reflector setup requires full IBGP mesh between the routers.

C.

In route reflector setup, only classful prefixes are advertised to other clients.

D.

In route reflector setups, prefixes are not advertised from one client to another.

Question 107

Refer to the exhibit.

Question # 107

Which control plane policy limits BGP traffic that is destined to the CPU to 1 Mbps and

ignores BGP traffic that is sent at higher rate?

Options:

A.

policy-map SHAPE_BGP

B.

policy-map LIMIT_BGP

C.

policy-map POLICE_BGP

D.

policy-map COPP

Question 108

Which is statement about IPv6 inspection is true?

Options:

A.

It teams and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables

B.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables

C.

It teams and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables

D.

It team and secures binding for stateless autoconfiguration addresses in Layer 2 neighbor tables.

Question 109

Refer to the following output:

Router#show ip nhrp detail

10.1.1.2/8 via 10.2.1.2, Tunnel1 created 00:00:12, expire 01:59:47

TypE. dynamic, Flags: authoritative unique nat registered used

NBMA address: 10.12.1.2

What does the authoritative flag mean in regards to the NHRP information?

Options:

A.

It was obtained directly from the next-hop server.

B.

Data packets are process switches for this mapping entry.

C.

NHRP mapping is for networks that are local to this router.

D.

The mapping entry was created in response to an NHRP registration request.

E.

The NHRP mapping entry cannot be overwritten.

Question 110

Which label operations are performed by a label edge router?

Options:

A.

SWAP and POP

B.

SWAP and PUSH

C.

PUSH and PHP

D.

PUSH and POP

Question 111

Refer to the exhibit.

Question # 111

Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are uf SLA by defining frequency and schedulingsed

Question # 111

Options:

Question 112

Drag and drop the operations from the left onto the locations where the operations are performed on the right.

Question # 112

Options:

Question 113

A network engineer is investigating a flapping (up/down) interface issue on a core switch that is synchronized to an NTP server. Log output currently does not show the time of the flap. Which command allows the logging on the switch to show the time of the flap according to the clock on the device?

Options:

A.

service timestamps log uptime

B.

clock summer-time mst recurring 2 Sunday mar 2:00 1 Sunday nov 2:00

C.

service timestamps log datetime localtime show-timezone

D.

clock calendar-valid

Question 114

Refer to the exhibit.

Question # 114

An administrator that is connected to the console does not see debug messages when

remote users log in. Which action ensures that debug messages are displayed for remote logins?

Options:

A.

Enter the transport input ssh configuration command.

B.

Enter the terminal monitor exec command.

C.

Enter the logging console debugging configuration command.

D.

Enter the aaa new-model configuration command.

Question 115

Which two statements about VRF-Lite configurations are true? (Choose two.)

Options:

A.

They support the exchange of MPLS labels

B.

Different customers can have overlapping IP addresses on different VPNs

C.

They support a maximum of 512.000 routes

D.

Each customer has its own dedicated TCAM resources

E.

Each customer has its own private routing table.

F.

They support IS-IS

Question 116

Refer to the exhibit.

Question # 116

An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?

Options:

A.

no ip ssh disable

B.

ip ssh enable

C.

ip ssh version 2

D.

crypto key generate rsa

Question 117

Refer to the exhibit.

Question # 117

During troubleshooting it was discovered that the device is not reachable using a secure

web browser. What is needed to fix the problem?

Options:

A.

permit tcp port 443

B.

permit udp port 465

C.

permit tcp port 465

D.

permit tcp port 22

Question 118

Users were moved from the local DHCP server to the remote corporate DHCP server. After the move,

none of the users were able to use the network.

Which two issues will prevent this setup from working properly? (Choose two)

Options:

A.

Auto-QoS is blocking DHCP traffic.

B.

The DHCP server IP address configuration is missing locally

C.

802.1X is blocking DHCP traffic

D.

The broadcast domain is too large for proper DHCP propagation

E.

The route to the new DHCP server is missing

Question 119

Which method changes the forwarding decision that a router makes without first changing the routing table or influencing the IP data plane?

Options:

A.

nonbroadcast multiaccess

B.

packet switching

C.

policy-based routing

D.

forwarding information base

Question 120

Refer to the exhibit.

Question # 120

After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both

spoke-to-spoke and hub were not establishing. Which two actions resolve the issue? (Choose two.)

Options:

A.

Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3

B.

Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.

C.

Change the mode from mode tunnel to mode transport on R3

D.

Change the mode from mode transport to mode tunnel on R2.

E.

Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3

Question 121

What is an advantage of using BFD?

Options:

A.

It detects local link failure at layer 1 and updates routing table.

B.

It detects local link failure at layer 2 and updates routing protocols.

C.

It has sub-second failure detection for layer 1 and layer 3 problems.

D.

It has sub-second failure detection for layer 1 and layer 2 problems.

Question 122

Refer to the exhibit.

Question # 122

Redistribution is enabled between the routing protocols, and nowPC2 PC3, and PC4 cannot reach PC1. What are the two solutions to fix the problem? (Choose two.)

Options:

A.

Filter RIP routes back into RIP when redistributing into RIP in R2

B.

Filter OSPF routes into RIP FROM EIGRP when redistributing into RIP in R2.

C.

Filter all routes except RIP routes when redistributing into EIGRP in R2.

D.

Filter RIP AND OSPF routes back into OSPF from EIGRP when redistributing into OSPF in R2

E.

Filter all routes except EIGRP routes when redistributing into OSPF in R3.

Question 123

Drag and drop the DHCP messages from the left onto the correct uses on the right.

Question # 123

Options:

Question 124

Which component of MPLS VPNs is used to extend the IP address so that an engineer is able to

identify to which VPN it belongs?

Options:

A.

VPNv4 address family

B.

RD

C.

RT

D.

LDP

Question 125

What is the role of a route distinguisher via a VRF-Lite setup implementation?

Options:

A.

It extends the IP address to identify which VFP instance it belongs to.

B.

It manages the import and export of routes between two or more VRF instances

C.

It enables multicast distribution for VRF-Lite setups to enhance EGP routing protocol capabilities

D.

It enables multicast distribution for VRF-Lite setups to enhance IGP routing protocol capabilities

Question 126

An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1.255.255.255.252 along with the summary route. After finishing configuration, the customer complained not receiving summary route with specific loopback address. Which two configurations will fix it? (Choose two.)

Question # 126

Options:

A.

Configure access-list 1 permit 10.1.1.0.0.0.0.3.

B.

Configure access-list 1 permit 10.1.1.1.0.0.0.252.

C.

Configure access-list 1 and match under route-map Leak-Route.

D.

Configure route-map Leak-Route permit 10 and match access-list 1.

E.

Configure route-map Leak-Route permit 20.

Question 127

An engineer configured the wrong default gateway for the Cisco DNA Center enterprise interface during the install. Which command must the engineer run to correct the configuration?

Options:

A.

sudo maglev-config update

B.

sudo maglev install config update

C.

sudo maglev reinstall

D.

sudo update config install

Question 128

Refer to the exhibit.

Question # 128

Network operations cannot read or write any configuration on the device with this configuration from the operations subnet. Which two configurations fix the issue? (Choose two.)

Options:

A.

Configure SNMP rw permission in addition to community ciscotest.

B.

Modify access list 1 and allow operations subnet in the access list.

C.

Modify access list 1 and allow SNMP in the access list.

D.

Configure SNMP rw permission in addition to version 1.

E.

Configure SNMP rw permission in addition to community ciscotest 1.

Question 129

An engineer is troubleshooting on the console session of a router and turns on multiple debug commands. The console screen is filled with scrolling debug messages that none of the commands can be verified if entered correctly or display any output. Which action allows the engineer to see entered console commands while still continuing the analysis of the debug messages?

Options:

A.

Configure the logging synchronous command

B.

Configure the no logging console debugging command globally

C.

Configure the logging synchronous level all command

D.

Configure the term no mon command globally

Question 130

A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company’s security policy. The administrator can still ping to www.cisco.com Which interface should the access list 101 be applied to resolve this issue?

Question # 130

Options:

A.

Interface G0/48 in the incoming direction

B.

Interface G0/0 in the outgoing direction.

C.

Interface S1/0 in the outgoing direction.

D.

Interface G0/0 in the incoming direction.

Question 131

Refer to the exhibit.

Question # 131

R1 is connected with R2 via GigabitEthernet0/0, and R2 cannot ping R1. What action will fix the issue?

Options:

A.

Fix route dampening configured on the router.

B.

Replace the SFP module because it is not supported.

C.

Fix IP Event Dampening configured on the interface.

D.

Correct the IP SLA probe that failed.

Question 132

Refer to the exhibit.

Question # 132

The OSPF routing protocol is redistributed into the BGP routing protocol, but not all the OSPF routes are distributed into BGP Which action resolves the issue?

Options:

A.

Include the word external in the redistribute command

B.

Use a route-map command to redistribute OSPF external routes defined in an access list

C.

Include the word internal external in the redistribute command

D.

Use a route-map command to redistribute OSPF external routes defined in a prefix list.

Question 133

Refer to the exhibit.

Question # 133

PC-2 failed to establish a Telnet connection to the terminal server. Which configuration resolves the issue?

Question # 133

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 134

Refer to the exhibit.

Question # 134

When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic to pass through the interface Which command must be configured to resolve the issue?

Options:

A.

access-class INTERNET in

B.

ipv6 traffic-filter INTERNET in

C.

ipv6 access-class INTERNET in

D.

ip access-group INTERNET in

Question 135

Question # 135

Refer to the exhibit. An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R1 as the primary default gateway When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192.168.20.0/24. Which set of configurations resolves the issue?

Options:

A.

HQ_R3(config)# ip sla responderHQ_R3(config)# ip sla responder icmp-echo 172.16.35.1

B.

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 192.168.100.2

C.

HQ R3(config)# Ip sla responderHQ R3(config)# Ip sla responder Icmp-echo 172.16.35.5

D.

BRANCH(config)# Ip sla 1BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1

Question 136

What are two functions of MPLS Layer 3 VPNs? (Choose two.)

Options:

A.

LDP and BGP can be used for Pseudowire signaling.

B.

It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.

C.

BGP is used for signaling customer VPNv4 routes between PE nodes.

D.

A packet with node segment ID is forwarded along with shortest path to destination.

E.

Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

Question 137

Refer to the exhibit.

Question # 137

SanFrancisco and Boston routers are choosing slower links to reach each other despite the direct links being up Which configuration fixes the issue?

Question # 137

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 138

Exhibit:

Question # 138

An engineer configured R2 and R5 as route reflectors and noticed that not all routes are sent to R1 to advertise to the eBGP peers. Which iBGP routers must be configured as route reflectors to advertise all routes to restore reachability across all networks?

Options:

A.

R1 and R4

B.

R1 and R5

C.

R4 and R5

D.

R2 and R5

Question 139

Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

Options:

A.

VACL blocking broadcast frames from nonauthorized hosts

B.

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

C.

PVLANs with community ports associated to route advertisements and isolated ports for nodes

D.

IPv4 ACL blocking route advertisements from nonauthorized hosts

Question 140

In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.)

Options:

A.

by IPv6 routing protocols to securely build neighborships without the need of authentication

B.

by the recovery mechanism to recover the binding table in the event of a device reboot

C.

by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways

D.

by various IPv6 guard features to validate the data link layer address

E.

by storing hashed keys for IPsec tunnels for the built-in IPsec features

Question 141

Refer to the exhibit.

Question # 141

AS65510 iBGP is configured for directly connected neighbors. R4 cannot ping or traceroute network 192 168.100.0/24 Which action resolves this issue?

Options:

A.

Configure R4 as a route reflector server and configure R1 as a route reflector client

B.

Configure R1 as a route reflector server and configure R2 and R3 as route reflector clients

C.

Configure R4 as a route reflector server and configure R2 and R3 as route reflector clients.

D.

Configure R1 as a route reflector server and configure R4 as a route reflector client

Question 142

Refer to the exhibit.

Question # 142

A client is concerned that passwords are visible when running this show archive log config all.

Which router configuration is needed to resolve this issue?

Options:

A.

MASS-RTR(config-archive-log-cfg)#password encryption aes

B.

MASS-RTR(config)#aaa authentication arap

C.

MASS-RTR(config)#service password-encryption

D.

MASS-RTR(config-archive-log-cfg)#hidekeys

Question 143

Question # 143

Refer to the exhibit. A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?

Options:

A.

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

B.

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

C.

Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

D.

Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

Question 144

Refer to Exhibit.

Question # 144

Which two configurations allow clients to get dynamic ip addresses assigned?

Options:

A.

Configure access-list 100 permit udp any any eq 61 as the first line

B.

Configure access-list 100 permit udp any any eq 86 as the first line

C.

Configure access-list 100 permit udp any any eq 68 as the first line

D.

Configure access-list 100 permit udp any any eq 69 as the first line

E.

Configure access-list 100 permit udp any any eq 67 as the first line

Question 145

How are MPLS Layer 3 VPN services deployed?

Options:

A.

The RD and RT values must match under the VRR

B.

The RD and RT values under a VRF must match on the remote PE router

C.

The import and export RT values under a VRF must always be the same.

D.

The label switch path must be available between the local and remote PE routers.

Question 146

A DMVPN single hub topology is using IPsec + mGRE with OSPF. What should be configured on the hub to ensure it will be the designated router?

Options:

A.

tunnel interface of the hub with ip nhrp ospf dr

B.

OSPF priority to 0

C.

route map to set the metrics of learned routes to 110

D.

OSPF priority greater than 1

Question 147

Refer to the exhibit.

Question # 147

A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer fails. Which action resolves this issue?

Options:

A.

The SSH service must be enabled with the crypto key generate rsa command.

B.

The SCP service must be enabled with the ip scp server enable command.

C.

The Python interpreter must first be enabled with the guestshell enable command.

D.

The SSH access must be allowed on the VTY lines using the transport input ssh command.

Question 148

Question # 148

Refer to the exhibit. The network administrator configured the branch router for IPv6 on the E 0/0 interface The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on the branch router to bring the IPv6 neighbors up?

Options:

A.

Enable the IPv4 address family under the E 0/0 interface by using the address-family Ipv4 unicast command

B.

Disable IPv6 on the E 0/0 interface using the no ipv6 enable command

C.

Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command

D.

Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E 0/0 interface.

Question 149

Refer to the exhibit.

Question # 149

Question # 149

An engineer identifier a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?

Options:

A.

no spanning-tree uplinkfast

B.

spanning-tree loopguard default

C.

spanning-tree backbonesfast

D.

spanning-tree portfast bpduguard

Question 150

Clients on ALS2 receive IPv4 and IPv6 addresses but clients on ALS1 receive only IPv4 addresses and not IPv6 addresses. Which action on DSW1 allows clients on ALS1 to receive IPv6 addresses?

Question # 150

Options:

A.

Configure DSW1(config-if)#ipv6 helper address 2002:404:404::404:404

B.

Configure DSW1(dhcp-config)#default-router 2002:A04:A01::A04:A01

C.

Configure DSW1(config)#ipv6 route 2002:404:404:404:404/128 FastEthernet1/0

D.

Configure DSW1(config-if)#ipv6 dhcp relay destination 2002:404:404::404:404 GigabitEthernet1/2

E.

Option A

F.

Option B

G.

Option C

Question 151

Refer to the exhibit.

Question # 151

Question # 151

All the serial between R1, R2, and R3 have the Same bandwidth. User on the 192.168.1.0/24 network report slow response times while they access resource on network 192.168.3.0/24. When a traceroute is run on the path. It shows that the packet is getting forwarded via R2 to R3 although the link between R1 and R3 is still up. What must the network administrator to fix the slowness?

Options:

A.

Change the Administrative Distance of EIGRP to 5.

B.

Add a static route on R1 using the next hop of R3.

C.

Remove the static route on R1.

D.

Redistribute theR1 route to EIGRP

Question 152

Which Ipv6 first-hop security feature helps to minimize denial of service attacks?

Options:

A.

IPv6 Router Advertisement Guard

B.

IPv6 Destination Guard

C.

DHCPv6 Guard

D.

IPv6 MAC address filtering

Question 153

Question # 153

Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).

router bgp 64511

network 172.16.20.0 mask 255.255.255.0

network 172.16.21.0 mask 255.255.255.0

network 172.16.22.0 mask 255.255.255.0

network 172.16.23.0 mask 255.255.255.0

aggregate-address 172.16.20.0 255.255.252.0

After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?

Options:

A.

router bgp 64511aggregate-address 172.16.20.0 255.255.252.0 summary-only

B.

router bgp 64511neighbor 192.168.100.1 summary-onlyneighbor 192.168.200.2 summary-only

C.

interface E 0/0ip bgp suppress-map BLOCK_SPECIFIC!interface E 0/1ip bgp suppress-map BLOCK_SPECIFIC!ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC

D.

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC!router bgp 64511aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

Question 154

Refer to the exhibit.

Question # 154

A network administrator reviews the branch router console log to troubleshoot the OSPF adjacency issue with the DR router. Which action resolves this issue?

Options:

A.

Advertise the branch WAN interface matching subnet for the DR site.

B.

Configure matching hello and dead intervals between sites.

C.

Configure the WAN interface for DR site in the related OSPF area.

D.

Stabilize the DR site flapping link to establish OSPF adjacency.

Question 155

Refer to the exhibit.

Question # 155

An engineer receives this error message when trying to access another router in-band from the serial interface connected to the console of R1. Which configuration is needed on R1 to resolve this issue?

Question # 155

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 156

Refer to the exhibit.

Question # 156

BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1. Users report packet loss and interruption of service to applications hosted onthe 10.1.1.0724 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command. Which action stabilizes the service?

Options:

A.

Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.

B.

Repeat the test from R4 using ICMP ping on the local 10.1.1.0/24 prefix, and fix any Layer 2 errors on the host or switch side of the subnet.

C.

Place an OSPF distribute-list outbound on R3 to block the 10.1.10/24 prefix from being advertised back to R3.

D.

Reduce frequent OSPF SPF calculations on R3 that cause a high CPU and packet loss on traffic traversing R3.

Question 157

Refer to the exhibit.

Question # 157

A user cannot SSH to the router. What action must be taken to resolve this issue?

Options:

A.

Configure transport input ssh

B.

Configure transport output ssh

C.

Configure ip ssh version 2

D.

Configure ip ssh source-interface loopback0

Question 158

When determining if a system is capable of support, what is the minimum time spacing required for a BFD control packet to receive once a control packet is arrived?

Options:

A.

Desired Min TX Interval

B.

Detect Mult

C.

Required Min RX Interval

D.

Required Min Echo RX Interval

Question 159

What is the minimum time gap required by the local system before putting a BFD control packet on the wire?

Options:

A.

Detect Mult

B.

Required Min Echo RX Interval

C.

Desired Min TX Interval

D.

Required Min RX Interval

Question 160

An engineer needs dynamic routing between two routers and is unable to establish OSPF adjacency. The output of the show ip ospf neighbor command shows that the neighbor state is EXSTART/EXCHANGE. Which action should be taken to resolve this issue?

Options:

A.

match the passwords

B.

match the hello timers

C.

match the MTUs

D.

match the network types

Question 161

Refer to the exhibit.

Question # 161

An engineer wanted to set a tag of 30 to route 10 1.80.65/32 but it failed How is the issue fixed?

Options:

A.

Modify route-map ospf-to-eigrp permit 30 and match prefix-list ccnp2.

B.

Modify route-map ospf-to-eigrp permit 10 and match prefix-list ccnp2.

C.

Modify prefix-list ccnp3 to add 10.1.64.0/20 le 24

D.

Modify prefix-list ccnp3 to add 10.1.64.0/20 ge 32

Question 162

Question # 162

Refer to the exhibit. A network administrator redistributed the default static route into OSPF toward all internal routers to reach to Internet. Which set of commands restores reachability to the Internet by internal routers?

Options:

A.

router ospf 1default-information originate

B.

router ospf 1network 0.0.0.0 0.0.0.0 area 0

C.

router ospf 1redistribute connected 0.0.0.0

D.

router ospf 1redistribute static subnets

Question 163

Refer to the exhibit.

Question # 163

A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands Which action resolves the issue?

Options:

A.

Configure TACACS+ synchronization with the Active Directory admin group

B.

Configure the username from a local database

C.

Configure full access for the username from TACACS+ server

D.

Configure an authorized IP address for this user to access this router

Question 164

Refer to the exhibit.

Question # 164

Question # 164

An engineer configured BGP between routers R1 and R3 The BOP peers cannot establish neighbor adjacency to be able to exchange routes. Which configuration resolves this issue?

Options:

A.

R3router bgp 6502address-family ipv6neighbor AB01:2011:7:100::1 activate

B.

R1router bgp 6501address-family ipv6neighbor AB01:2011:7:100;:3 activate

C.

R3router bgp 6502neighbor AB01:2011:7:100::1 ebgp-muttlhop 255

D.

R1router bgp 6501 neighborAB01:2011:7:100::3ebgp-multihop255

Question 165

Refer to the exhibit.

Question # 165

A user has set up an IP SLA probe to test if a non-SLA host web server on IP address 10.1.1.1 accepts HTTP sessions prior to deployment. The probe is failing. Which action should the network administrator recommend for the probe to succeed?

Options:

A.

Re-issue the ip sla schedule command.

B.

Add icmp-echo command for the host.

C.

Add the control disable option to the tcp connect.

D.

Modify the ip sla schedule frequency to forever.

Question 166

What are two functions of IPv6 Source Guard? (Choose two.)

Options:

A.

It uses the populated binding table for allowing legitimate traffic.

B.

It works independent from IPv6 neighbor discovery.

C.

It denies traffic from unknown sources or unallocated addresses.

D.

It denies traffic by inspecting neighbor discovery packets for specific pattern.

E.

It blocks certain traffic by inspecting DHCP packets for specific sources.

Question 167

Drag and drop the MPLS concepts from the left onto the descriptions on the right.

Question # 167

Options:

Question 168

Refer to Exhibit:

Question # 168

Question # 168

AS 111 wanted to use AS 200 as the preferred path for 172.20.5.0/24 and AS 100 as the backup. After the configuration, AS 100 is not used for any other routes. Which configuration resolves the issue?

Options:

A.

route-mmap SETLP permit 10match ip address prefix-list PLIST1set local-preference 99route-map SETLP permit 20

B.

route-map SETLP permit 10match ip address prefix-list PLIST1set local-preference 110route-map SETLP permit 20

C.

router bgp 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.10.1 route-map SETLP out

D.

router bap 111no neighbor 192.168.10.1 route-map SETLP inneighbor 192.168.20.2 route-map SE TLP in

Question 169

An engineer configured Reverse Path Forwarding on an interface and noticed that the routes are dropped when a route lookup fails on that interface for a prefix that is available in the routing table Which interface configuration resolves the issue?

Options:

A.

ip verify unicast source reachable-via rx

B.

ip verify unicast source reachable-via any

C.

ip verify unicast source reachable-via allow-default

D.

ip verify unicast source reachable-via 12-src

Question 170

Question # 170

Refer to the exhibit. R1 and R2 cannot establish an EIGRP adjacency. Which action establishes EIGRP adjacency?

Options:

A.

Remove the current autonomous system number on one of the routers and change to a different value.

B.

Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.

C.

Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.

D.

Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.

Question 171

An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network. Which BGP attribute must the engineer configure to avoid using the high-delay ISP link if the second ISP link is up?

Options:

A.

LOCAL_PREF

B.

MED

C.

WEIGHT

D.

AS-PATH

Question 172

What are two MPLS label characteristics? (Choose two.)

Options:

A.

The label edge router swaps labels on the received packets.

B.

Labels are imposed in packets after the Layer 3 header.

C.

LDP uses TCP for reliable delivery of information.

D.

An MPLS label is a short identifier that identifies a forwarding equivalence class.

E.

A maximum of two labels can be imposed on an MPLS packet.

Question 173

Refer to exhibit.

Question # 173

Routing protocols are mutually redistributed on R3 and R1. Users report intermittent connectivity to services hosted on the 10.1.1.0/24 prefix. Significant routing update changes are noticed on R3 when the show ip route profile

command is run. How must the services be stabilized?

Options:

A.

The issue with using BGP must be resolved by using another protocol and redistributing it into EIGRP on R3

B.

The routing loop must be fixed by reducing the admin distance of iBGP from 200 to 100 on R3

C.

The routing loop must be fixed by reducing the admin distance of OSPF from 110 to 80 on R3

D.

The issue with using iBGP must be fixed by running eBGP between R3 and R4

Question 174

Refer to the exhibit.

Question # 174

The network administrator can see the DHCP discovery packet in R1. but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the FaO/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two.)

Options:

A.

service dhcp-relay command on R1

B.

ip dhcp option 82 command on R2

C.

service dhcp command on R1

D.

ip dhcp relay information enable command on R1

E.

ip dhcp relay information trust-all command on R2

Question 175

Refer to Exhibit.

A network administrator has successfully configured DMVPN topology between a hub and two spoke routers. Which two configuration commands should establish direct communications between spoke 1 and spoke 2 without going through the hub? (Choose two).

Question # 175

Options:

A.

At the hub router, configure the ip nhrp shortcut command.

B.

At the spoke routers, configure the ip nhrp spoke-tunnel command.

C.

At the hub router, configure ip nhrp redirect the command

D.

At the spoke routers, configure the ip nhrp shortcut command.

E.

At the hub router, configure tne Ip nhrp spoke-tunnel command

Question 176

Refer to the exhibit.

Question # 176

The Math and Science departments connect through the corporate. IT router but users in the Math department must not be able to reach the Science department and vice versa Which configuration accomplishes this task?

Options:

A.

vrf definition Science!interface E 0/2ip address 192.168.1.1 255.255.255.0no shut!interface E 0/3ip address 192.168.2.1 255.255.255.0no shut

B.

vrf definition Scienceaddress-family ipv4!interface E 0/2ip address 192.168.1.1 255.255.255.0vrf forwarding Scienceno shut!interface E 0/3ip address 192.168.2.1 255.255.255.0vrf forwarding Scienceno shut

C.

vrf definition Scienceaddress-family ipv4!interface E 0/2ip address 192.168.1.1 255.255.255.0no shut!interface E 0/3ip address 192.168.2.1 255.255.255.0no shut

D.

vrf definition Scienceaddress-family ipv4!interface E 0/2vrf forwarding Scienceip address 192.168.1.1 255.255.255.0no shut!interface E 0/3vrf forwarding Scienceip address 192.168.2.1

Question 177

What are two characteristics of VRF instance? (Choose two.)

Options:

A.

All VRFs share customers routing and CEF tables .

B.

An interface must be associated to one VRF.

C.

Each VRF has a different set of routing and CEF tables

D.

It is defined by the VPN membership of a customer site attached to a P device.

E.

A customer site can be associated to different VRFs

Question 178

Refer to the exhibit.

Question # 178

An IPv6 network was newly deployed in the environment and the help desk reports that R3 cannot SSH to the R2s Loopback interface. Which action resolves the issue?

Options:

A.

Modify line 10 of the access list to permit instead of deny.

B.

Remove line 60 from the access list.

C.

Modify line 30 of the access list to permit instead of deny.

D.

Remove line 70 from the access list.

Question 179

Question # 179

Refer to the exhibit. The administrator configured route advertisement to a remote low resources router to use only the default route to reach any network but failed. Which action resolves this issue?

Options:

A.

Change the direction of the distribute-list command from out to in.

B.

Remove the line with the sequence number 5 from the prefix list.

C.

Remove the prefix keyword from the distribute-list command.

D.

Remove the line with the sequence number 10 from the prefix list.

Question 180

Refer to the exhibits.

Question # 180

When DMVPN is configured, which configuration allows spoke-to-spoke communication using loopback as a tunnel source?

Options:

A.

Configure crypto isakmp key cisco address 0.0.0.0 on the hub.

B.

Configure crypto isakmp key Cisco address 200.1.0.0 255.255.0.0 on the hub.

C.

Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes.

D.

Configure crypto isakmp key cisco address 0.0.0.0 on the spokes.

Question 181

What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)

Options:

A.

The VPNv4 address is used to advertise the MPLS VPN label.

B.

RD is prepended to the IPv4 route to make it unique.

C.

MP-BGP is used to allow overlapping IPv4 addresses between customers to advertisethrough the network.

D.

The IPv4 address is needed to tag the MPLS label.

E.

The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4prefix.

Question 182

When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on

that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

Options:

A.

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction

B.

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

C.

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction

D.

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction

Question 183

Refer to Exhibit.

Question # 183

Traffic from the branch network should route through HQ R1 unless the path is unavailable. An engineer tests this functionality by shutting down interface on the BRANCH router toward HQ_R1 router but 192.168.20.0/24 is no longer reachable from the branch router. Which set of configurations resolves the issue?

Options:

A.

HQ_R1(config)# ip sla responderHQ_R1(config)# ip sla responder icmp-echo 172.16.35.2

B.

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.1

C.

HQ_R2(config)# ip sla responderHQ_R2(config)# ip sla responder icmp-echo 172.16.35.5

D.

BRANCH(config)# ip sla 1BRANCH(config-ip-sla)# icmp-echo 172.16.35.2

Question 184

Refer to the exhibit.

Question # 184

A network administrator is using the DNA Assurance Dashboard panel to troubleshoot an OSPF adjacency that failed between Edge_NYC interface GigabitEthernet1/3 with Neighbor Edge_SNJ. The administrator observes that the neighborship is stuck in exstart state. How does the administrator fix this issue?

Options:

A.

Configure to match the OSPF interface speed and duplex settings on both routers.

B.

Configure to match the OSPF interface MTU settings on both routers.

C.

Configure to match the OSPF interface unique IP address and subnet mask on both routers.

D.

Configure to match the OSPF interface network types on both routers.

Question 185

Refer to the exhibits.

Question # 185

A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router. Which set of configurations fixes the issue?

A)

Question # 185

B)

Question # 185

C)

Question # 185

D)

Question # 185

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 186

What does IPv6 Source Guard utilize to determine if IPv6 source addresses should be forwarded?

Options:

A.

ACE

B.

ACLS

C.

DHCP

D.

Binding Table

Question 187

Question # 187

Question # 187

Refer to the exhibit. The Los Angeles and New York routers are receiving routes from Chicago but not from each other. Which configuration fixes the issue?

Options:

A.

Interface Tunnel1no ip split-horizon eigrp 111

B.

Interface Tunnel1Ip next-hop-self elgrp 111

C.

Interface Tunnel1tunnel mode Ipsec Ipv4

D.

Interface Tunnel1tunnel protection ipsec profile IPSec-PROFILE

Question 188

What statement about route distinguishes in an MPLS network is true?

Options:

A.

Route distinguishes make a unique VPNv4 address across the MPLS network.

B.

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

C.

Route distinguishes are used for label bindings

D.

Route distinguishes define which prefixes are imported and exported on the edge router

Question 189

An engineer configured SNMP notifications sent to the management server using authentication and encrypting data with DES. An error in the response PDU is received as " UNKNOWNUSERNAME. WRONGDIGEST " . Which action resolves the issue?

Options:

A.

Configure the correct authentication password using SNMPv3 authPriv .

B.

Configure the correct authentication password using SNMPv3 authNoPriv.

C.

Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.

D.

Configure correct authentication and privacy passwords using SNMPv3 authPriv.

Question 190

Refer to Exhibit.

Question # 190

A network administrator enables DHCP snooping on the Cisco Catalyst 3750-X switch and configures the uplink port (Port-channel2) as a trusted port. Clients are not receiving an IP address, but when DHCP snooping is disabled, clients start receiving IP addresses. Which global command resolves the issue?

Options:

A.

No ip dhcp snooping information option

B.

ip dhcp snooping

C.

ip dhcp relay information trust portchannel2

D.

ip dhcp snooping trust

Question 191

Refer to the exhibit.

Question # 191

The administrator successfully logs into R1 but cannot access privileged mode commands. What should be configured to resolve the issue?

Options:

A.

aaa authorization reverse-access

B.

secret cisco123! at the end of the username command instead of password cisco123!

C.

matching password on vty lines as cisco123!

D.

enable secret or enable password commands to enter into privileged mode

Question 192

How does an MPLS Layer 3 VPN function?

Options:

A.

set of sites use multiprotocol BGP at the customer site for aggregation

B.

multiple customer sites interconnect through service provider network to create secure tunnels between customer edge devices

C.

set of sites interconnect privately over the Internet for security

D.

multiple customer sites interconnect through a service provider network using customer edge to provider edge connectivity

Page: 1 / 64
Total 642 questions