Weekend Sale Limited Time Flat 70% Discount offer - Ends in 0d 00h 00m 00s - Coupon code: 70spcl

Cisco 300-410 Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) Exam Practice Test

Page: 1 / 56
Total 561 questions

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) Questions and Answers

Question 1

Drag and drop the packet types from the left onto the correct descriptions on the right.

Question # 1

Options:

Question 2

Question # 2

Refer to the exhibit. an engineer is trying to get 192.168.32.100 forwarded through 10.1.1.1, but it was forwarded through 10.1.1.2. What action forwards the packets through 10.1.1.1?

Options:

A.

Configure EIGRP to receive 192.168.32.0 route with lower admin distance.

B.

A. Configure EIGRP to receive 192.168.32.0 route with longer prefix than /19.

C.

A. Configure EIGRP to receive 192.168.32.0 route with lower metric.

D.

A. Configure EIGRP to receive 192.168.32.0 route with equal or longer prefix than /24.

Question 3

Refer to the exhibit.

Question # 3

What does the imp-null tag represent in the MPLS VPN cloud?

Options:

A.

Pop the label

B.

Impose the label

C.

Include the EXP bit

D.

Exclude the EXP bit

Question 4

Drag and drop the MPLS terms from the left onto the correct definitions on the right.

Question # 4

Options:

Question 5

Which protocol does MPLS use to support traffic engineering?

Options:

A.

Tag Distribution Protocol (TDP)

B.

Resource Reservation Protocol (RSVP)

C.

Border Gateway Protocol (BGP)

D.

Label Distribution Protocol (LDP)

Question 6

Refer to the exhibit.

Question # 6

Which configuration configures a policy on R1 to forward any traffic that is sourced from

the 192.168.130.0/24 network to R2?

Question # 6

Question # 6

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 7

Which option is the best for protecting CPU utilization on a device?

Options:

A.

fragmentation

B.

COPP

C.

ICMP redirects

D.

ICMP unreachable messages

Question 8

Which Cisco VPN technology can use multipoint tunnel, resulting in a single GRE tunnel interface on the hub, to support multiple connections from multiple spoke devices?

Options:

A.

DMVPN

B.

GETVPN

C.

Cisco Easy VPN

D.

FlexVPN

Question 9

Refer to the exhibit.

Question # 9

The output of the trace route from R5 shows a loop in the network. Which configuration

prevents this loop?

A)

Question # 9

B)

Question # 9

C)

Question # 9

D)

Question # 9

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 10

Refer to the exhibit.

Question # 10

An engineer is trying to redistribute OSPF to BGP, but not all of the routes are

redistributed. What is the reason for this issue?

Options:

A.

By default, only internal routes and external type 1 routes are redistributed into BGP

B.

Only classful networks are redistributed from OSPF to BGP

C.

BGP convergence is slow, so the route will eventually be present in the BGP table

D.

By default, only internal OSPF routes are redistributed into BGP

Question 11

Refer to the exhibit.

Question # 11

Users report that IP addresses cannot be acquired from the DHCP server. The DHCP

server is configured as shown. About 300 total nonconcurrent users are using this DHCP server, but none of them are active for more than two hours per day. Which action fixes the issue within the current resources?

Options:

A.

Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool

B.

Configure the DHCP lease time to a smaller value

C.

Configure the DHCP lease time to a bigger value

D.

Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool

Question 12

What is a prerequisite for configuring BFD?

Options:

A.

Jumbo frame support must be configured on the router that is using BFD.

B.

All routers in the path between two BFD endpoints must have BFD enabled.

C.

Cisco Express Forwarding must be enabled on all participating BFD endpoints.

D.

To use BFD with BGP, the timers 3 9 command must first be configured in the BGP routing process.

Question 13

Which transport layer protocol is used to form LDP sessions?

Options:

A.

UDP

B.

SCTP

C.

TCP

D.

RDP

Question 14

Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.

Question # 14

Options:

Question 15

During the maintenance window an administrator accidentally deleted the Telnet-related

configuration that permits a Telnet connection from the inside network (Eth0/0) to the outside of the networking between Friday – Sunday night hours only. Which configuration resolves the issue?

A)

Question # 15

B)

Question # 15

C)

Question # 15

D)

Question # 15

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 16

An engineer configured a company’s multiple area OSPF head office router and Site A cisco

routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone.

Question # 16

After finishing both site router configurations, none of the LSA 3,4 5, and 7 are installed at Site A router. Which configuration resolves this issue?

Options:

A.

configure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc

B.

configure capability vrf-lite on Head Office and its connected PE router under router ospf 1 vrf abc

C.

configure capability vrf-lite on both PE routers connected to Head Office and Site A routers under routtr ospf 1 vrf abc

D.

configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc

Question 17

Which statement about route distinguishers in an MPLS network is true?

Options:

A.

Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

B.

Route distinguishers are used for label bindings.

C.

Route distinguishers make a unique VPNv4 address across the MPLS network.

D.

Route distinguishers define which prefixes are imported and exported on the edge router.

Question 18

What is an advantage of using BFD?

Options:

A.

It detects local link failure at layer 1 and updates routing table.

B.

It detects local link failure at layer 2 and updates routing protocols.

C.

It has sub-second failure detection for layer 1 and layer 3 problems.

D.

It has sub-second failure detection for layer 1 and layer 2 problems.

Question 19

Refer to the exhibits.

Question # 19

Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two

commands are missing? (Choose two.)

Options:

A.

The ip nhrp redirect command is missing on the spoke routers.

B.

The ip nhrp shortcut command is missing on the spoke routers.

C.

The ip nhrp redirect commands is missing on the hub router.

D.

The ip nhrp shortcut commands is missing on the hub router.

E.

The ip nhrp map command is missing on the hub router.

Question 20

Refer to the exhibit.

Question # 20

Why is the remote NetFlow server failing to receive the NetFlow data?

Options:

A.

The flow exporter is configured but is not used.

B.

The flow monitor is applied in the wrong direction.

C.

The flow monitor is applied to the wrong interface.

D.

The destination of the flow exporter is not reachable.

Question 21

A network engineer needs to verify IP SLA operations on an interface that shows on indication of

excessive traffic.

Which command should the engineer use to complete this action?

Options:

A.

show frequency

B.

show track

C.

show reachability

D.

show threshold

Question 22

What is the role of a route distinguisher via a VRF-Lite setup implementation?

Options:

A.

It extends the IP address to identify which VFP instance it belongs to.

B.

It manages the import and export of routes between two or more VRF instances

C.

It enables multicast distribution for VRF-Lite setups to enhance EGP routing protocol capabilities

D.

It enables multicast distribution for VRF-Lite setups to enhance IGP routing protocol capabilities

Question 23

Refer to the exhibit.

Question # 23

The network administrator configured VRF lite for customer A. The technician at the remote site misconfigured VRF on the router. Which configuration will resolve connectivity for both sites of customer_a?

Question # 23

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 24

Refer to the exhibit.

Question # 24

An engineer has configured DMVPN on a spoke router. What is the WAN IP address of another spoke router within the DMVPN network?

Options:

A.

172.18.46.2

B.

192.168.1.4

C.

172.18.16.2

D.

192.168.1.1

Question 25

Refer to the exhibit.

Question # 25

A network engineer for AS64512 must remove the inbound and outbound traffic from link A during maintenance without closing the BGP session so that there ............ a backup link over link A toward the ASN. Which BGP configuration on R1 accomplishes this goal?

A)

Question # 25

B)

Question # 25

C)

Question # 25

D)

Question # 25

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 26

What is a limitation of IPv6 RA Guard?

Options:

A.

It is not supported in hardware when TCAM is programmed

B.

It does not offer protection in environments where IPv6 traffic is tunneled.

C.

It cannot be configured on a switch port interface in the ingress direction

D.

Packets that are dropped by IPv6 RA Guard cannot be spanned

Question 27

Refer to the exhibit.

Question # 27

Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are uf SLA by defining frequency and schedulingsed

Question # 27

Options:

Question 28

Which configuration enabled the VRF that is labeled “Inet” on FastEthernet0/0?

Options:

A.

R1(config)# ip vrf Inet

R1(config-vrf)#interface FastEthernet0/0

R1(config-if)#ip vrf forwarding Inet

B.

R1(config)#router ospf 1 vrf Inet

R1(config-router)#ip vrf forwarding FastEthernet0/0

C.

R1(config)#ip vrf Inet FastEthernet0/0

D.

R1(config)# ip vrf Inet

R1(config-vrf)#ip vrf FastEthernet0/0

Question 29

Drag and drop the DHCP messages from the left onto the correct uses on the right.

Question # 29

Options:

Question 30

Refer to the exhibit.

Question # 30

Network operations cannot read or write any configuration on the device with this configuration from the operations subnet. Which two configurations fix the issue? (Choose two.)

Options:

A.

Configure SNMP rw permission in addition to community ciscotest.

B.

Modify access list 1 and allow operations subnet in the access list.

C.

Modify access list 1 and allow SNMP in the access list.

D.

Configure SNMP rw permission in addition to version 1.

E.

Configure SNMP rw permission in addition to community ciscotest 1.

Question 31

Refer to the exhibit.

Question # 31

An engineer configures a static route on a router, but when the engineer checks the route

to the destination, a different next hop is chosen. What is the reason for this?

Options:

A.

Dynamic routing protocols always have priority over static routes.

B.

The metric of the OSPF route is lower than the metric of the static route.

C.

The configured AD for the static route is higher than the AD of OSPF.

D.

The syntax of the static route is not valid, so the route is not considered.

Question 32

Refer to Exhibit.

Question # 32

Which statement about redistribution from BGP into OSPF process 10 is true?

Options:

A.

Network 172.16.1.0/24 is not redistributed into OSPF.

B.

Network 10.10 10.0/24 is not redistributed into OSPF

C.

Network 172.16.1.0/24 is redistributed with administrative distance of 1.

D.

Network 10.10.10.0/24 is redistributed with administrative distance of 20.

Question 33

Refer to the exhibit.

Question # 33

Which interface configuration must be configured on the spoke A router to enable a dynamic DMVPN tunnel with the spoke B router?

Question # 33

Question # 33

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 34

Refer the exhibit.

Question # 34

Which action resolves intermittent connectivity observed with the SNMP trap

packets?

Options:

A.

Decrease the committed burst Size of the mgmt class map

B.

Increase the CIR of the mgmt class map

C.

Add a new class map to match TCP traffic

D.

Add one new entry in the ACL 120 to permit the UDP port 161

Question 35

Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPV3 categories on the right.

Question # 35

Options:

Question 36

Which statement about IPv6 ND inspection is true?

Options:

A.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

B.

It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.

C.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.

D.

It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Question 37

Refer to the exhibit.

Question # 37

An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 loses reachability with the router R3 Fa0/0 interface. The route has changed to flow through

router R2. Which debug command is used to troubleshoot this issue?

Options:

A.

debug ip flow

B.

debug ip sla error

C.

debug ip routing

D.

debug ip packet

Question 38

Refer to the exhibit.

Question # 38

A junior engineer updated a branch router configuration. Immediately after the change, the engineer receives calls from the help desk that branch personnel cannot reach any network destinations. Which configuration restores service and continues to block 10.1.1.100/32?

Options:

A.

route-map FILTER-IN deny 5

B.

ip prefix-list 102 seq 15 permit 0.0.0.0/32 le 32

C.

ip prefix-list 102 seq 5 permit 0.0.0.0/32 le 32

D.

route-map FILTER-IN permit 20

Question 39

Refer to the exhibit.

Question # 39

Why is user authentication being rejected?

Options:

A.

The TACACS+ server expects “user”, but the NT client sends “domain/user”.

B.

The TACACS+ server refuses the user because the user is set up for CHAP.

C.

The TACACS+ server is down, and the user is in the local database.

D.

The TACACS+ server is down, and the user is not in the local database.

Question 40

Refer to the exhibit.

Question # 40

An administrator that is connected to the console does not see debug messages when

remote users log in. Which action ensures that debug messages are displayed for remote logins?

Options:

A.

Enter the transport input ssh configuration command.

B.

Enter the terminal monitor exec command.

C.

Enter the logging console debugging configuration command.

D.

Enter the aaa new-model configuration command.

Question 41

Refer to the exhibit.

Question # 41

Redistribution is enabled between the routing protocols, and nowPC2 PC3, and PC4 cannot reach PC1. What are the two solutions to fix the problem? (Choose two.)

Options:

A.

Filter RIP routes back into RIP when redistributing into RIP in R2

B.

Filter OSPF routes into RIP FROM EIGRP when redistributing into RIP in R2.

C.

Filter all routes except RIP routes when redistributing into EIGRP in R2.

D.

Filter RIP AND OSPF routes back into OSPF from EIGRP when redistributing into OSPF in R2

E.

Filter all routes except EIGRP routes when redistributing into OSPF in R3.

Question 42

Refer to the exhibit.

Question # 42

A company is evaluating multiple network management system tools. Trending graphs generated by SNMP data are returned by the NMS and appear to have multiple gaps. While troubleshooting the issue, an engineer noticed the relevant output. What solves the gaps in the graphs?

Options:

A.

Remove the exceed-rate command in the class map.

B.

Remove the class map NMS from being part of control plane policing.

C.

Configure the CIR rate to a lower value that accommodates all the NMS tools

D.

Separate the NMS class map in multiple class maps based on the specific protocols with appropriate CoPP actions

Question 43

Refer to the exhibit.

Question # 43

An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?

Options:

A.

no ip ssh disable

B.

ip ssh enable

C.

ip ssh version 2

D.

crypto key generate rsa

Question 44

Which protocol is used in a DMVPN network to map physical IP addresses to logical IP addresses?

Options:

A.

BGP

B.

LLDP

C.

EIGRP

D.

NHRP

Question 45

Refer to the exhibit.

Question # 45

During troubleshooting it was discovered that the device is not reachable using a secure

web browser. What is needed to fix the problem?

Options:

A.

permit tcp port 443

B.

permit udp port 465

C.

permit tcp port 465

D.

permit tcp port 22

Question 46

Drag and Drop the IPv6 First-Hop Security features from the left onto the definitions on the right.

Question # 46

Options:

Question 47

Which component of MPLS VPNs is used to extend the IP address so that an engineer is able to

identify to which VPN it belongs?

Options:

A.

VPNv4 address family

B.

RD

C.

RT

D.

LDP

Question 48

Which command displays the IP routing table information that is associated with VRF-Lite?

Options:

A.

show ip vrf

B.

show ip route vrf

C.

show run vrf

D.

show ip protocols vrf

Question 49

Drag and drop the addresses from the left onto the correct IPv6 filter purposes on the right.

Question # 49

Options:

Question 50

Drag and drop the MPLS VPN device types from me left onto the definitions on the right.

Question # 50

Options:

Question 51

Which statement about IPv6 RA Guard is true?

Options:

A.

It does not offer protection in environments where IPv6 traffic is tunneled.

B.

It cannot be configured on a switch port interface in the ingress direction.

C.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

D.

It is not supported in hardware when TCAM is programmed.

Question 52

Refer to the exhibit.

Question # 52

ISP 1 and ISP 2 directly connect to the Internet. A customer is tracking both ISP links to

achieve redundancy and cannot see the Cisco IOS IP SLA tracking output on the router console. Which command is missing from the IP SLA configuration?

Options:

A.

Start-time 00:00

B.

Start-time 0

C.

Start-time immediately

D.

Start-time now

Question 53

Refer to the exhibit.

Question # 53

The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new IP address. Which two actions must be taken to resolve this Issue? (Choose two.)

Options:

A.

Configure the server to use DHCP on the network with default gateway 200 30.40.100.

B.

Configure the server with a static IP address and default gateway.

C.

Configure the router to exclude a server IP address.

D.

Configure the server to use DHCP on the network with default gateway 200 30.30.100.

E.

Configure the router to exclude a server IP address and default gateway.

Question 54

Which method changes the forwarding decision that a router makes without first changing the routing table or influencing the IP data plane?

Options:

A.

nonbroadcast multiaccess

B.

packet switching

C.

policy-based routing

D.

forwarding information base

Question 55

Refer to the exhibit.

Question # 55

The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host

192.168.10.10cannot SSH to host 192.168.100.10 even though the flow is permitted. Which action

resolves the issue without opening full access to this router?

Options:

A.

Move the SSH entry to the beginning of the ACL

B.

Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works

C.

Temporarily remove the ACL from the interface to see if the flow works

D.

Run the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it

Question 56

When provisioning a device in Cisco DNA Center, the engineer sees the error message “Cannot select the device. Not compatible with template”.

What is the reason for the error?

Options:

A.

The template has an incorrect configuration.

B.

The software version of the template is different from the software version of the device.

C.

The changes to the template were not committed.

D.

The tag that was used to filter the templates does not match the device tag.

Question 57

Refer to the exhibit.

Question # 57

A)

Question # 57

B)

Question # 57

C)

Question # 57

D)

Question # 57

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Question 58

A network administrator added a new spoke site with dynamic IP on the DMVPN network. Which configuration command passes traffic on the DMVPN tunnel from the spoke router?

Options:

A.

ip nhrp registration ignore

B.

ip nhrp registration no-registration

C.

ip nhrp registration dynamic

D.

ip nhrp registration no-unique

Question 59

An engineer must establish a connection between two CE routers for two customers with overlapping IP addresses Customer_a is connected to interfaces Gig0/0, and Customer_b is connected to interfaces Gig0/1. Routers CE1 and CE2 are configured as follows:

Question # 59

Drag and drop the code snippets from the right onto the boxes in the configuration to establish the needed connection. Snippets may be used more than once.

Question # 59

Options:

Question 60

Exhibit.

Question # 60

Question # 60

Refer to the exhibit. A network is configured for EIGRP equal-cost load balancing, but the traffic destined to the servers is not load balanced. Link metrics from router R2 to R3 and R4 are the same. Which delay value must be configured to resolve the issue?

Options:

A.

208 oon R3 E0/0

B.

120 on R4 E0/1

C.

120/on R3 E0/1

D.

2200 on R4 E0/1

Question 61

Question # 61

Refer to the exhibit. The R1 routing table has the prefixes for the FTP1 and FTP2 file servers. A network engineer must configure the R1 with these requirements:

  • Host1 must use the FTP1 fileserver.
  • Host2 must use the FTP2 fileserver.

Which configuration meets the requirement on R1?

A)

Question # 61

B)

Question # 61

C)

Question # 61

D)

Question # 61

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 62

Question # 62

Refer to the exhibit. Router R1 peers with two ISPs using static routes to get to the internet. The requirement is that R1 must prefer ISP-A under normal circumstances and failover to ISP-B if the connectivity to ISP-A is lost. The engineer observes that R1 is load balancing traffic across the two ISPs Which action resolves the issue by sending traffic to ISP-A only with failover to ISP-B?

Options:

A.

Configure OSPF between R1. ISP-A. and ISP-B for dynamic failover if any ISP link to R1 fails

B.

Configure two static routes on R1. one pointing to ISP-A and another pointing to ISP- B with 222 admin distance

C.

Change the bandwidth of the interface on R1 so that interface to ISP-A has a higher value than the interface to ISP-B

D.

Configure two static routes on R1. one pointing to ISP-B with more specific routes and another pointing to ISP-A with summary routes

Question 63

Refer to the exhibit.

Question # 63

A network engineer applied a filter for LSA traffic on OSPFv3 interarea routes on the area 5 ABR to protect advertising the internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes. After the respective route filtering configuration is applied on the ABR, area 5 routes are not visible on any of the areas. How must the filter list be applied on the ABR to resolve this issue?

Options:

A.

in the “in” direction for area 5 on router R1

B.

in the “out” direction for area 5 on router R1

C.

in the “in” direction for area 20 on router R2

D.

in the “out” direction for area 20 on router R2

Question 64

Refer to the exhibit.

Question # 64

An engineer must configure PBR on R1 to reach to 10.2.2.0/24 via R3 AS64513 as the primary path and a backup route through default route via R2 AS64513. All BGP routes are in the routing table of R1. but a static default route overrides BGP routes. Which PBR configuration achieves the objective?

Question # 64

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 65

Refer to the exhibit.

Question # 65

An engineer is trying to add an encrypted user password that should not be visible in the router configuration. Which two configuration commands resolve the issue? (Choose two)

Options:

A.

password encryption aes

B.

username Admin password Cisco@maedeh motamedi

C.

username Admin password 5 Cisco@maedeh motamedi

D.

username Admin secret Cisco@maedeh motamedi

E.

no service password-encryption

F.

service password-encryption

Question 66

Refer to the exhibit.

Question # 66

R1 and R2 are configured for EIGRP peering using authentication and the neighbors failed to come up. Which action resolves the issue?

Options:

A.

Configure a matching key-id number on both routers

B.

Configure a matching lowest key-id on both routers

C.

Configure a matching key-chain name on both routers

D.

Configure a matching authentication type on both router

Question 67

What is a function of IPv6 Source Guard?

Options:

A.

It works with address glean or ND to find existing addresses.

B.

It inspects ND and DHCP packets to build an address binding table.

C.

It denies traffic from known sources and allocated addresses.

D.

It notifies the ND protocol to inform hosts if the traffic is denied by it.

Question 68

An engineer is creating a policy that overrides normal routing behavior.if the route to a destination of

10.100.100.0/24 is withdrawn from the routing

Table, the policy must direct traffic to a next hop of 10.1 1.1. if the route is present in the routing table, then

normal forwarding must occur. Which

configuration meets the requirements?

Options:

A.

access-list 100 permit ip any any

!

route-map POLICY permit 10

match ip address 100

set ip next-hop recursive 10.1.1.1

B.

access-list 100 permit ip any 10.100.100.0 0.0.0.255

!

Route-map POLICY permit 10

match ip address 100

set ip default next-hop 10.1.1.1

C.

access-list 100 permit ip any 10.100.100.0 0.0.0.255

!

route-map POLICY permit 10

match ip address 100

set ip next-hop 10.1.1.1

!

route map POLICY permit 20

D.

access-list 100 permit ip any 10.100.100.0 0.0.0.255

!

route map POLICY permit 10

match ip address 100

Set ip next-hop recursive 10.1.1.1

!

route-map POLICY permit 20

Question 69

Refer to the exhibit.

Question # 69

Question # 69

An engineer is troubleshooting a failed Telnet session from PC to the DHCP server. Which action resolves the issue?

Options:

A.

Remove sequence 30 and add it back to the IPv6 traffic filter as sequence 5.

B.

Remove sequence 20 and add it back to the IPv6 traffic filter as sequence 5.

C.

Remove sequence 10 to add the PC source IP address and add it back as sequence 10.

D.

Remove sequence 20 for sequence 40 in the access list to allow Telnet.

Question 70

Refer to Exhibit.

Question # 70

PC2 is directly connected to R1. A user at PC2 cannot Telnet to 2001:db8:a:b::10. The user can ping

2001:db8:a:b::10 and receive DHCP-related information from the DHCP server. Which action resolves

the issue?

Options:

A.

Remove sequence 10 and put it back as sequence 25.

B.

Remove sequence 20 and put it back as sequence 45.

C.

Remove sequence 30 and put it back as sequence 5.

D.

Remove sequence 40 and put it back as sequence 15.

Question 71

Refer to the exhibit.

Question # 71

After a security audit, the administrator implemented an ACL in the route reflector. The RR became unreachable from any router in the network. Which two actions resolve the issue? (Choose two.)

Options:

A.

Enable the ND proxy feature on the default gateway.

B.

Configure a link-local address on the Ethernet0/1 interface.

C.

Permit ICMPv6 neighbor discovery traffic in the ACL.

D.

Remove the ACL entry 80.

E.

Change the next hop of the default route to the link-local address of the default gateway.

Question 72

Question # 72

Refer to the exhibit. A customer reports that networks in the 10.0.1.0/24 space do not appear in the RIP database. What action resolves the issue?

Options:

A.

Remove summarization of 10.0.0.078.

B.

Permit 10.0.1.0/24 address in the ACL.

C.

Remove ACL on R1 blocking 10.0.1.0/24 network.

D.

Configure 10.0.1.0/24 network under RIP.

Question 73

Question # 73

Refer to the exhibit Which action resolves the issue?

Options:

A.

Configure host IP address in access-list 16

B.

Configure SNMPv3 on the router

C.

Configure SNMP authentication on the router

D.

Configure a valid SNMP community string

Question 74

How does LDP operate in an MPLS network?

Options:

A.

When topology changes occur such as a router failure, LDP generates peer discovery messages that terminate the LDP season to propagate an LSP change.

B.

When an adjacent LSR receives LDP discovery messages. TCP two-way handshake ensures that the LDP session has unidirectional connectivity.

C.

Peer routers establish the LDP session, and the LDP neighbors maintain and terminate the session by exchanging messages

D.

LDP notification messages allow LERs to exchange label information to determine the next hops within a particular LSP.

Question 75

Refer to the exhibit.

Question # 75

Question # 75

The network administrator must configure Cape Town to reach Dubai via Tokyo based on the speeds provided by the service provider. It was noticed that Cape Town is reaching Dubai directly and failed to meet the requirement. Which configuration fixes the issue?

A)

Question # 75

B)

Question # 75

C)

Question # 75

D)

Question # 75

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Question 76

Which control plane process allows the MPLS forwarding state to recover when a secondary RP takes over from a failed primary RP?

Options:

A.

MP-BGP uses control plane services for label prefix bindings in the MPLS forwarding table

B.

LSP uses NSF to recover from disruption *i control plane service

C.

FEC uses a control plane service to distribute information between primary and secondary processors

D.

LDP uses SSO to recover from disruption in control plane service

Question 77

A newly Installeo router starts establishing an LDP session from another MPLS router to which it is not directly connected. Which LDP message type responds by target router to the Initiating router using UDP protocol?

Options:

A.

notification message

B.

session message

C.

extended discovery message

D.

advertisement message

Question 78

A company Is redesigning WAN infrastructure so that all branch sites must communicate via the head office and the head office can directly communicate with each site independently. The network engineer must configure the head office router by considering zero-touch technology when adding new sites in the same WAN infrastructure. Which configuration must be applied to the head office router to meet this requirement?

Question # 78

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 79

Refer to the exhibit.

Question # 79

A bank ATM site has difficulty connecting with the bank server. A network engineer troubleshoots the issue and finds that R4 has no active route to the bank ATM site. Which action resolves the issue?

Options:

A.

Advertise 10.10.30.0/24 subnet in R1 EIGRP AS.

B.

EIGRP peering between R3 and R4 to be fixed.

C.

EIGRP peering between R1 and R2 to be fixed.

D.

Advertise 10.10.30.0/24 subnet in R3 EIGRP AS.

Question 80

Question # 80

Refer to the exhibit. An organization is installing a new L3 MPLS link to establish DM VPN Phase 2 tunnels between the hub and two spoke routers Which additional configuration should the engineer implement on each device to achieve optimal routing between the spokes?

A)

Question # 80

B)

Question # 80

C)

Question # 80

D)

Question # 80

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Question 81

Which two technologies optimize MPLS infrastructure using bandwidth protection services when experiencing slow response7 (Choose two.)

Options:

A.

IPLFA

B.

MPLS OAM

C.

VPLS

D.

SO-MPLS

E.

Fast-Rwoute

Question 82

Refer to the exhibit.

Question # 82

An engineer is troubleshooting failed access by contractors to the business application server via Telnet or HTTP during the weekend. Which configuration resolves the issue?

A)

Question # 82

B)

Question # 82

C)

Question # 82

D)

Question # 82

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Question 83

Drag and drop the ICMPv6 neighbor discovery messages from the left onto the correct packet types on the right.

Question # 83

Options:

Question 84

Question # 84

Refer to the exhibit A network engineer received a call from the vendor for a failed attempt to remotely log in to their managed rooter loopback interface from 192 168.40 15 Which action must the network engineer take to resolve the issue?

Options:

A.

The IP access list VENDOR must be applied to interface loopback 100

B.

The time-range configuration must be changed to use absolute instead of periodic

C.

The EIGRP configuration must be updated to include a network statement for loopback 100

D.

The source IP summarization must be updated to include the vendor source IP address

Question 85

A network is configured with CoPP to protect the CORE router route processor for stability and DDoS protection. As a company policy, a class named class-default is preconfigured and must not be modified or deleted. Troubleshoot CoPP to resolve the issues introduced during the maintenance window to ensure that:

Question # 85

Question # 85

WAN

Question # 85

Question # 85

Question # 85

CORE

Question # 85

Question # 85

Question # 85

Question # 85

MGMT

Question # 85

Question # 85

Options:

Question 86

Refer to the exhibit.

Question # 86

An engineer must configure OSPF with R9 and R10 and configure redistribution between OSPF and RIP causing a routing loop Which configuration on R9 and R10 meets this objective?

A)

Question # 86

B)

Question # 86

C)

Question # 86

D)

Question # 86

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Question 87

An engineer received a ticket about a router that has reloaded. The monitoring system graphs show different traffic patterns between logical and physical interfaces when the router is rebooted. Which action resolves the issue?

Options:

A.

Configure the snmp ifindex persist command globally.

B.

Clear the logical interfaces with snmp ifindex clear command

C.

Configure the snmp ifindex persist command on the physical interfaces.

D.

Trigger a new snmpwalk from the monitoring system to synchronize interface OlDs

Question 88

Question # 88

Refer to the exhibit A network engineer notices that R1 and R2 cannot establish an eBGP peering. The following messages appear in the log:

Question # 88

Which configuration must the engineer apply to R1 to restore the eBGP peering?

A)

Question # 88

B)

Question # 88

C)

Question # 88

D)

Question # 88

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 89

Question # 89

Question # 89

Refer to the exhibit. An engineer applied filter on R1 The interface flapped between R1 and R2 and cleaning the BGP session did not restore the BGP session and failed Which action must the engineer take to restore the BGP session from R2 to R1?

Options:

A.

Apply the IPv6 traffic filter in the outbound direction on the interface

B.

ICMPv6 must be permitted by the IPv6 traffic filter

C.

Enable the BGP session, which went down when the session was cleared.

D.

Swap the source and destination IP addresses in the IPv6 traffic filter

Question 90

Refer to the exhibit.

Question # 90

R5 should not receive any routes originated in the EIGRP domain. Which set of configuration changes removes the EIGRP routes from the R5 routing table to fix the issue?

Options:

A.

R4

route-map O2R deny 10

match tag 111

route-map O2R permit 20

!

router rip

redistribute ospf 1 route-map O2R metric 1

B.

R2

route-map E20 deny 20

R4

route-map O2R deny 10

match tag 111

!

router rip

redistribute ospf 1 route-map O2R metric 1

C.

R4

route-map O2R permit 10

match tag 111

route-map O2R deny 20

!

router rip

redistribute ospf 1 route-map O2R metric 1

D.

R4

route-map O2R deny 10

match tag 111

!

router rip

redistribute ospf 1 route-map O2R metric 1

Question 91

Refer to the exhibit.

Question # 91

The administrator is trying to overwrite an existing file on the TFTP server that was previously uploaded by another router. However, the attempt to update the file fails. Which action resolves this issue?

Options:

A.

Make the packages.conf file executable by all on the TFTP server

B.

Make the packages.conf file writable by all on the TFTP server

C.

Make sure to run the TFTP service on the TFTP server

D.

Make the TFTP folder writable by all on the TFTP server

Question 92

The summary route is not shown in the RouterB routing table after this below configuration on Router_A

Question # 92.

Which Router_A configuration resolves the issue by advertising the summary route to Router B?

Question # 92

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 93

Question # 93

Refer to the exhibit. A network engineer lost remote access to the router due to a network problem. The engineer used the console to access the router and noticed continuous logs on the console terminal. Which configuration limits the number of log messages on the console to critical and higher seventy level messages?

Options:

A.

term no monitor

B.

logging console 2

C.

no logging console

D.

logging console 5

Question 94

Refer to the exhibit.

Question # 94

A loop occurs between R1, R2, and R3 while EIGRP is run with poison reverse enabled. Which action prevents the loop between R1, R2, and R3?

Options:

A.

Configure route tagging

B.

Enable split horizon

C.

Configure R2 as stub receive-only

D.

Configure route filtering

Question 95

Refer to the exhibit.

Question # 95

An engineer configures SW101 to send OSPFv3 interfaces state change messages to the server. However, only some OSPFv3 errors are being recorded. which organization resolves the ..?

Options:

A.

snmp-server enable traps ospfv3 state-change if-state-change

B.

snmp-server-enable traps ospfv3 state-change restart-status-change

C.

snmp-server-enable traps ospfv3 state-change neighbor-state-change.

D.

snmp-server-enable traps ospfv3 state-change if-state-change neighbor-state-change

Question 96

Refer to the exhibit.

Question # 96

An engineer must block access to the console ports for all corporate remote Cisco devices based on the recent corporate security policy but the security team stilt can connect through the console port. Which configuration on the console port resolves the issue?

Options:

A.

transport input telnet

B.

login and password

C.

no exec

D.

exec 0.0

Question 97

A CoPP policy is applied for receiving SSH traffic from the WAN interface on a Cisco ISR4321 router.

However, the SSH response from the router is abnormal and stuck during the high link utilization. The

problem is identified as SSH traffic does not match in the ACL. Which action resolves the issue?

Options:

A.

Rate-limit SSH traffic to ensure dedicated bandwidth.

B.

Apply CoPP on the control plane interface.

C.

Increase the IP precedence value of SSH traffic to 6.

D.

Apply CoPP on the WAN interface inbound direction.

Question 98

Question # 98

Question # 98

Refer to the exhibit Users from the 192 168.2.0/24 network cannot connect to the 172.16 2 32/28 network Which configuration resolves the issue'?

A)

Question # 98

B)

Question # 98C)

Question # 98

D)

Question # 98

Options:

A.

Option

B.

Option

C.

Option

D.

Option

Question 99

Refer to the exhibit.

Question # 99

While troubleshooting a BGP route reflector configuration, an engineer notices that reflected routes are missing from neighboring routers. Which two BGP configurations are needed to resolve the issue? (Choose two)

Options:

A.

neighbor 10.1.1.14 route-reflector-client

B.

neighbor R2 route-reflector-client

C.

neighbor 10.1.1.2 allowas-in

D.

neighbor R4 route-reflector-client

E.

neighbor 10.1.1.2 route-reflector-client

Question 100

Refer to the exhibits.

Question # 100

Question # 100

London must reach Rome using a faster path via EIGRP if all the links are up but it failed to take this path Which action resolves the issue?

Options:

A.

Increase the bandwidth of the link between London and Barcelona

B.

Use the network statement on London to inject the 172 16 X 0/24 networks into EIGRP.

C.

Change the administrative distance of RIP to 150

D.

Use the network statement on Rome to inject the 172 16 X 0/24 networks into EIGRP

Question 101

Refer to the exhibit.

Question # 101

An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established and did not meet the requirement. Which action resolves the issue?

Options:

A.

Replace OSPF process 10 on the interface with OSPF process 1, and configure an additional router ID with IPv6 address.

B.

Replace OSPF process 10 on the interface with OSPF process 1, for the VPv6 addressma nd remove process route ID with IPv6 address.

C.

Replace OSPF process 10 on the interface with OSPF process 1, and remove process 10 from the global configuration.

D.

Replace OSPF process 10 on the interface with OSPF process 1 for the IPv4 address, and remove process 10 from the global configuration.

Question 102

Question # 102

Refer to the exhibit. A network engineer receives a report that Spoke 1 users can perform bank transactions with the server located at the Center site, but Spoke 2 users cannot. Which action resolves the issue?

Options:

A.

Configure the Spoke 2 users IP on the router B OSPF domain

B.

Configure encapsulation dot1q 78 on the router C interface.

C.

Configure IPv6 on the routers B and C interfaces

D.

Configure OSPFv2 on the routers B and C interfaces

Question 103

Refer to the exhibit.

Question # 103

A network administrator successfully logs in to a switch using SSH from a (RADIUS server When the network administrator uses a console port to access the switch the RADIUS server returns shell:priv-lvl=15’’ and the switch asks to enter the enable command \ the command is entered, it gets rejected. Which command set is used to troubleshoot and reserve this issue?

Options:

A.

line con 0

aaa authorization console

authorization exec

!

line vty 0 4

transport input ssh

B.

line con 0

aaa authorization console

!

line vty 0 4

authorization exec

C.

line con 0

aaa authorization console priv15

!

line vty 0 4

authorization exec

D.

line con 0

aaa authorization console

authorization priv15

!

line vty 0 4

transport input ssh

Question 104

Question # 104

Refer to the exhibit. An engineer is investigating an OSPF issue reported by the Cisco DNA Assurance Center. Which action resolves the issue?

Options:

A.

One of the neighbor links is down Bring the interface up by running shut and no shut

B.

One of the interfaces is using the wrong MTU Match interface MTU on both links

C.

An ACL entry blocking multicast on the interfaces Allow multicast through the interface ACL

D.

One of the interfaces is using the wrong authentication Match interface authentication on both links

Question 105

Refer to the exhibit.

Question # 105

During ISP router maintenance, the network produced many alerts because of the flapping interface. Which configuration on R1 resolves the issue?

Options:

A.

no snmp trap link-status

B.

snmp trap link-status down

C.

snmp trap ip verify drop-rate

D.

ip verify drop-rate notify hold-down 60

Question 106

Question # 106

Refer to the exhibit. An engineer configured router R3 to redistribute the prefix 10.10.10.0/24 from OSPF into EIGRP R1 has no connectivity to the prefix. Which action enables receipt of prefixes on R1?

Options:

A.

R3 is advertising the 10.20.20 0'24 prefix with a TTL of 1, R3 must set the TTL to 2 for this prefix.

B.

R1 docs not have a neighbor relationship with R2. The EIGRP process should be cleared on R1.

C.

Duplicate router IDs on R1 and R3, R1 should modify its router ID.

D.

R1 is not receiving the next-hop IP address of R3. R2 must enable the network 10 20.20.0V24 within EIGRP.

Question 107

Question # 107

Refer to the exhibit. Which configuration resolves the issue?

A)

Question # 107

B)

Question # 107

C)

Question # 107

D)

Question # 107

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 108

Question # 108Question # 108

Refer to the exhibit. Users on a call center report that they cannot browse the internet on Saturdays during the afternoon. Which configuration resolves the issue?

A)

Question # 108

B)

Question # 108

C)

Question # 108

D)

Question # 108

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 109

Question # 109

Refer to the exhibit EIGRP adjacency between router A and router C is not working as expected Which two configurations resolve the issue? (Choose two )

A)

Question # 109

B)

Question # 109

C)

Question # 109

D)

Question # 109

E)

Question # 109

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

E.

Option E

Question 110

Refer to the exhibit.

Question # 110

A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using SNMP and TFTP servers.

Which configuration prevents changes from unauthorized NMS and TFTP servers?

Options:

A.

access-list 20 permit 10.221.10.11

access-list 20 deny any log

!

snmp-server group NETVIEW v3 priv read NETVIEW access 20

snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20

snmp-server community Cisc0Us3r RO 20

snmp-server community Cisc0wrus3r RW 20

snmp-server tftp-server-list 20

B.

access-list 20 permit 10.221.10.11

access-list 20 deny any log

!

snmp-server group NETVIEW v3 priv read NETVIEW access 20

snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20

snmp-server community Cisc0wrus3r RO 20

snmp-server community Cisc0Us3r RW 20

snmp-server tftp-server-list 20

C.

access-list 20 permit 10.221.10.11

access-list 20 deny any log

D.

access-list 20 permit 10.221.10.11

Question 111

Refer to the exhibit.

Question # 111

The static route is not present in the routing table of an adjacent OSPF neighbor router. Which action resolves the issue?

Options:

A.

Configure the next hop of 10.20.20.1 in the prefix list DMZ-STATIC

B.

Configure the next-hop interface at the end of the static router for it to get redistributed

C.

Configure a permit 20 statement to the route map to redistribute the static route

D.

Configure the subnets keyword in the redistribution command

Question 112

An engineer must override the normal routing behavior of a router for Telnet traffic that is destined to 10.10.10.10 from 10.10.1.0/24 via a next hop of 10.4.4.4. which is directly connected to the router that is connected to the 10.1.1.0/24 subnet Which configuration reroutes traffic according to this requirement?

Question # 112

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 113

A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company’s security policy. The administrator can still ping to www.cisco .com Which interface should the access list 101 be applied to resolve this issue?

Question # 113

Options:

A.

Interface G0/48 in the incoming direction

B.

Interface G0/0 in the outgoing direction.

C.

Interface S1/0 in the outgoing direction.

D.

Interface G0/0 in the incoming direction.

Question 114

Refer to the exhibit.

Question # 114

Which two actions restrict access to router R1 by SSH? (Choose two.)

Options:

A.

Configure transport input ssh on line vty and remove sequence 30 from access list 100.

B.

Configure transport output ssh on line vty and remove sequence 20 from access list 100.

C.

Remove class-map ANY from service-policy CoPP

D.

Configure transport output ssh on line vty and remove sequence 10 from access list 199.

E.

Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199

Question 115

Refer to the exhibits.

Question # 115

When DMVPN is configured, which configuration allows spoke-to-spoke communication using loopback as a tunnel source?

Options:

A.

Configure crypto isakmp key cisco address 0.0.0.0 on the hub.

B.

Configure crypto isakmp key Cisco address 200.1.0.0 255.255.0.0 on the hub.

C.

Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes.

D.

Configure crypto isakmp key cisco address 0.0.0.0 on the spokes.

Question 116

Exhibit:

Question # 116

NTP is configured across the network infrastructure and Cisco DNA Center. An NTP issue was reported on the Cisco DNA Center at 17:15. Which action resolves the issue?

Options:

A.

Check and resolve reachability between the WLC and the NTP server

B.

Reset the NTP server to resolve any synchronization issues for all devices

C.

Check and resolve reachability between Cisco DNA Center and the NTP server

D.

Check and configure NTP on the WLC and synchronize with Cisco DNA Center

Question 117

Question # 117

Refer to the exhibit. The remote server is failing to receive the NetFlow data Which action resolves the issue?

Options:

A.

Modify the flow transport command transport udp 2055 to move under flow monitor profile.

B.

Modify the interlace command to Ip flow monitor FLOW-MONITOR-1 Input.

C.

Modify the udp port under flow exporter profile to Ip transport udp 4739.

D.

Modify the flow record command record v4_r1 to move under flow exporter profile.

Question 118

Refer to the exhibit.

Question # 118

SanFrancisco and Boston routers are choosing slower links to reach each other despite the direct links being up Which configuration fixes the issue?

Question # 118

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 119

Refer to the exhibit.

Question # 119

A network administrator reviews the branch router console log to troubleshoot the OSPF adjacency issue with the DR router. Which action resolves this issue?

Options:

A.

Advertise the branch WAN interface matching subnet for the DR site.

B.

Configure matching hello and dead intervals between sites.

C.

Configure the WAN interface for DR site in the related OSPF area.

D.

Stabilize the DR site flapping link to establish OSPF adjacency.

Question 120

An engineer must configure a Cisco router to initiate secure connections from the router to other devices in the network but kept failing. Which two actions resolve the issue? (Choose two.)

Options:

A.

Configure a source port for the SSH connection to initiate

B.

Configure a TACACS+ server and enable it

C.

Configure transport input ssh command on the console

D.

Configure a domain name

E.

Configure a crypto key to be generated

Question 121

Refer to the exhibit.

Question # 121

To provide reachability to network 10.1.1.0 /24 from R5, the network administrator redistributes EIGRP into OSPF on R3 but notices that R4 is now taking a ........... path through R5 to reach 10.1.1.0/24 network. Which action fixes the issue while keeping the reachability from R5 to 10.1.1.0/24 network?

Options:

A.

Change the administrative distance of the external EIGRP to 90.

B.

Apply the outbound distribution list on R5 toward R4 in OSPF.

C.

Change the administrative distance of OSPF to 200 on R5.

D.

Redistribute OSPF into EIGRP on R4

Question 122

Refer to the exhibit.

Question # 122

Which action resolves the failed authentication attempt to the router?

Options:

A.

Configure aaa authorization login command on line vty 0 4

B.

Configure aaa authorization login command on line console 0

C.

Configure aaa authorization console global command

D.

Configure aaa authorization console command on line vty 0 4

Question 123

How are MPLS Layer 3 VPN services deployed?

Options:

A.

The RD and RT values must match under the VRR

B.

The RD and RT values under a VRF must match on the remote PE router

C.

The import and export RT values under a VRF must always be the same.

D.

The label switch path must be available between the local and remote PE routers.

Question 124

Refer to the exhibit.

Question # 124

Question # 124

An engineer configured BGP between routers R1 and R3 The BOP peers cannot establish neighbor adjacency to be able to exchange routes. Which configuration resolves this issue?

Options:

A.

R3

router bgp 6502

address-family ipv6

neighbor AB01:2011:7:100::1 activate

B.

R1

router bgp 6501

address-family ipv6

neighbor AB01:2011:7:100;:3 activate

C.

R3

router bgp 6502

neighbor AB01:2011:7:100::1 ebgp-muttlhop 255

D.

R1

router bgp 6501 neighborAB01:2011:7:100::3ebgp-multihop255

Question 125

Question # 125

Refer to the exhibit. The OSPF neighbor relationship is not coming up What must be configured to restore OSPF neighbor adjacency?

Options:

A.

OSPF on the remote router

B.

matching hello timers

C.

use router ID

D.

matching MTU values

Question 126

Refer to the exhibit.

Question # 126

The R1 and R2 configurations are:

Question # 126

The neighbor is not coming up. Which two sets of configurations bring the neighbors up? (Choose two.)

Options:

A.

R2

ip route 10.1.1.1 255.255.255.255 192.168.1.1

router bgp 200

neighbor 10.1.1.1 tti-security hops 1

neighbor 10.1.1.1 update-source loopback 0

B.

R2

ip route 10.1.1.1 255.255.255.255 192.168.1.1

router bgp 200

neighbor 10.1.1.1 disable-connected-check

neighbor 10.1.1.1 update-source loopback 0

C.

R2

ip route 10.1.1.2 255.255.255.255 192.168.1.2

router bgp 100neighbor 10.1.1.2 ttl-security hops 1

neighbor 10.1.1.2 update-source loopback 0

D.

R1

ip route 10.1.1.2 255.255.255.255 192.168.1.2

router bgp 100

neighbor 10.1.1.1 ttl-security hops 1

neighbor 10.1.1.2 update-source loopback 0

E.

R1

ip route 10.1.1.2 255.255.255.255 192.168.1.2

router bgp 100

neighbor 10.1.1.2 disable-connected-check

neighbor 10.1.1.2 update-source Loopback0

Question 127

Question # 127

Question # 127

Refer to the exhibit. R2 has two paths to reach 192.168.13.0/24. but traffic is sent only through R3. Which action allows traffic to use both paths?

Options:

A.

Configure the bandwidth 2000 command under interface FastEthernet0/0 on R2.

B.

Configure the variance 4 command under the EIGRP process on R2.

C.

Configure the delay 1 command under interface FastEthernet0/0 on R2.

D.

Configure the variance 2 command under the EIGRP process on R2

Question 128

Refer to the exhibit.

Question # 128

Which interface configuration must be configured on the HUB router to enable MVPN with mGRE mode?

Question # 128

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 129

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

Options:

A.

Packets are not forwarded to the specific next hop.

B.

Packets are forwarded based on the routing table.

C.

Packets are forwarded based on a static route.

D.

Packets are forwarded to the specific next hop.

Question 130

Refer to the exhibit.

Question # 130

Question # 130

All the serial between R1, R2, and R3 have the Same bandwidth. User on the 192.168.1.0/24 network report slow response times while they access resource on network 192.168.3.0/24. When a traceroute is run on the path. It shows that the packet is getting forwarded via R2 to R3 although the link between R1 and R3 is still up. What must the network administrator to fix the slowness?

Options:

A.

Change the Administrative Distance of EIGRP to 5.

B.

Add a static route on R1 using the next hop of R3.

C.

Remove the static route on R1.

D.

Redistribute theR1 route to EIGRP

Question 131

Refer to the exhibit.

Question # 131

A network administrator is discovering a Cisco Catalyst 9300 and a Cisco WLC 3504 in Cisco DNA Center. The Catalyst 9300 is added successfully However the WLC is showing [ error "uncontactable" when the administrator tries to add it in Cisco DNA Center. Which action discovers WLC in Cisco DNA Center successfully?

Options:

A.

Copy the .cert file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

B.

Delete the WLC 3504 from Cisco DNA Center and add it to Cisco DNA Center again.

C.

Add the WLC 3504 under the hierarchy of the Catalyst 9300 connected devices.

D.

Copy the .pern file from the Cisco DNA Center on the USB and upload it to the WLC 3504.

Question 132

Refer to the exhibit.

Question # 132

Question # 132

The administrator can see the traps for the failed login attempts, but cannot see the traps of successful login attempts. What command is needed to resolve the issue?

Options:

A.

Configure logging history 2

B.

Configure logging history 3

C.

Configure logging history 4

D.

Configure logging history 5

Question 133

Refer to the exhibit.

Question # 133

The OSPF routing protocol is redistributed into the BGP routing protocol, but not all the OSPF routes are distributed into BGP Which action resolves the issue?

Options:

A.

Include the word external in the redistribute command

B.

Use a route-map command to redistribute OSPF external routes defined in an access list

C.

Include the word internal external in the redistribute command

D.

Use a route-map command to redistribute OSPF external routes defined in a prefix list.

Question 134

Refer to Exhibit.

Question # 134

A network administrator added one router in the Cisco DNA Center and checked its discovery and health from the Network Health Dashboard. The network administrator observed that the router is still showing up as unmonitored. What must be configured on the router to mount it in the Cisco DNA Center?

Options:

A.

Configure router with NetFlow data

B.

Configure router with the telemetry data

C.

Configure router with routing to reach Cisco DNA Center

D.

Configure router with SNMPv2c or SNMPv3 traps

Question 135

Drag and drop the MPLS concepts from the left onto the descriptions on the right.

Question # 135

Options:

Question 136

Clients on ALS2 receive IPv4 and IPv6 addresses but clients on ALS1 receive only IPv4 addresses and not IPv6 addresses. Which action on DSW1 allows clients on ALS1 to receive IPv6 addresses?

Question # 136

Options:

A.

Configure DSW1(config-if)#ipv6 helper address 2002:404:404::404:404

B.

Configure DSW1(dhcp-config)#default-router 2002:A04:A01::A04:A01

C.

Configure DSW1(config)#ipv6 route 2002:404:404:404:404/128 FastEthernet1/0

D.

Configure DSW1(config-if)#ipv6 dhcp relay destination 2002:404:404::404:404 GigabitEthernet1/2

E.

Option A

F.

Option B

G.

Option C

Question 137

Question # 137

Refer to the exhibit. Which action restores the routes from neighbors while still filtering 1.1.1.0/24?

Options:

A.

Add a second line in the access list to permit any.

B.

Modify the route map to permit the access list instead of deny it

C.

Modify the access list to deny instead of permit it.

D.

Add a second sequence in the route map permit 20

Question 138

Exhibit:

Question # 138

Which action resolves the authentication problem?

Options:

A.

Configure the user name on the TACACS+ server

B.

Configure the UDP port 1812 to be allowed on the TACACS+ server

C.

Configure the TCP port 49 to be reachable by the router

D.

Configure the same password between the TACACS+ server and router.

Question 139

Refer to the exhibit.

Question # 139

A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?

Options:

A.

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

B.

Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

C.

Set a tag in the route map when redistributing EIGRP into OSPF on R1, and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

D.

Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

Question 140

Refer to the exhibit.

Question # 140

A user has set up an IP SLA probe to test if a non-SLA host web server on IP address 10.1.1.1 accepts HTTP sessions prior to deployment. The probe is failing. Which action should the network administrator recommend for the probe to succeed?

Options:

A.

Re-issue the ip sla schedule command.

B.

Add icmp-echo command for the host.

C.

Add the control disable option to the tcp connect.

D.

Modify the ip sla schedule frequency to forever.

Question 141

Refer to the exhibit.

Question # 141

A network administrator configured an IPv6 access list to allow TCP return frame only, but it is not working as expected. Which changes resolve this issue?

Question # 141

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 142

Refer to the exhibit.

Question # 142

A company with autonomous system number AS65401 has obtained IP address block 209.165.200.224/27 fro, ARIN. The company needed more IP addresses and was assigned block 209.165.202.128/27 from ISP2. An engineer is ISP1 reports they are receiving ISP2 routes from AS65401. Which configuration onR1 resolves the issue?

A)

Question # 142

B)

Question # 142

C)

Question # 142

D)

Question # 142

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Question 143

Refer to the exhibit.

Question # 143

A client is concerned that passwords are visible when running this show archive log config all.

Which router configuration is needed to resolve this issue?

Options:

A.

MASS-RTR(config-archive-log-cfg)#password encryption aes

B.

MASS-RTR(config)#aaa authentication arap

C.

MASS-RTR(config)#service password-encryption

D.

MASS-RTR(config-archive-log-cfg)#hidekeys

Question 144

An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted. Which action resolves the issue?

Options:

A.

Configure all devices for SNMPv3 informs with priv.

B.

Configure all devices for SNMPv3 informs with auth.

C.

Configure all devices for SNMPv3 traps with auth.

D.

Configure all devices for SNMPv3 traps with priv.

Question 145

Refer to the exhibit.

Question # 145

The network administrator configured redistribution on an ASBR to reach to all WAN networks but failed Which action resolves the issue?

Options:

A.

The route map must have the keyword prefix-list to evaluate the prefix list entries

B.

The OSPF process must have a metric when redistributing prefixes from EIGRP.

C.

The route map EIGRP->OSPF must have the 10.0.106.0/24 entry to exist in one of the three prefix lists to pass

D.

EIGRP must redistribute the 10.0.106.0/24 route instead of using the network statement

Question 146

Question # 146

Refer to the exhibit. A network administrator redistributed the default static route into OSPF toward all internal routers to reach to Internet. Which set of commands restores reachability to the Internet by internal routers?

Options:

A.

router ospf 1

default-information originate

B.

router ospf 1

network 0.0.0.0 0.0.0.0 area 0

C.

router ospf 1

redistribute connected 0.0.0.0

D.

router ospf 1

redistribute static subnets

Question 147

Question # 147

Refer to the exhibit. An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R1 as the primary default gateway When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192.168.20.0/24. Which set of configurations resolves the issue?

Options:

A.

HQ_R3(config)# ip sla responder

HQ_R3(config)# ip sla responder icmp-echo 172.16.35.1

B.

BRANCH(config)# ip sla 1

BRANCH(config-ip-sla)# icmp-echo 192.168.100.2

C.

HQ R3(config)# Ip sla responder

HQ R3(config)# Ip sla responder Icmp-echo 172.16.35.5

D.

BRANCH(config)# Ip sla 1

BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1

Question 148

Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

Options:

A.

VACL blocking broadcast frames from nonauthorized hosts

B.

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

C.

PVLANs with community ports associated to route advertisements and isolated ports for nodes

D.

IPv4 ACL blocking route advertisements from nonauthorized hosts

Question 149

Refer to Exhibit.

Question # 149

A network administrator enables DHCP snooping on the Cisco Catalyst 3750-X switch and configures the uplink port (Port-channel2) as a trusted port. Clients are not receiving an IP address, but when DHCP snooping is disabled, clients start receiving IP addresses. Which global command resolves the issue?

Options:

A.

No ip dhcp snooping information option

B.

ip dhcp snooping

C.

ip dhcp relay information trust portchannel2

D.

ip dhcp snooping trust

Question 150

Refer to the exhibit.

Question # 150

A user cannot SSH to the router. What action must be taken to resolve this issue?

Options:

A.

Configure transport input ssh

B.

Configure transport output ssh

C.

Configure ip ssh version 2

D.

Configure ip ssh source-interface loopback0

Question 151

Drag and drop the MPLS VPN device types from the left onto the definitions on the right.

Question # 151

Options:

Question 152

Refer to the exhibit.

Question # 152

When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic to pass through the interface Which command must be configured to resolve the issue?

Options:

A.

access-class INTERNET in

B.

ipv6 traffic-filter INTERNET in

C.

ipv6 access-class INTERNET in

D.

ip access-group INTERNET in

Question 153

What is the minimum time gap required by the local system before putting a BFD control packet on the wire?

Options:

A.

Detect Mult

B.

Required Min Echo RX Interval

C.

Desired Min TX Interval

D.

Required Min RX Interval

Question 154

Refer to the exhibit.

Question # 154

A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands Which action resolves the issue?

Options:

A.

Configure TACACS+ synchronization with the Active Directory admin group

B.

Configure the username from a local database

C.

Configure full access for the username from TACACS+ server

D.

Configure an authorized IP address for this user to access this router

Question 155

When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

Options:

A.

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction

B.

Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction

C.

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction

D.

Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction

Question 156

Refer to the exhibit.

Question # 156

Question # 156

An engineer identifier a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?

Options:

A.

no spanning-tree uplinkfast

B.

spanning-tree loopguard default

C.

spanning-tree backbonesfast

D.

spanning-tree portfast bpduguard

Question 157

A customer reports to the support desk that they cannot print from their PC to the local printer id:401987778. Which tool must be used to diagnose the issue using Cisco DNA Center Assurance?

Options:

A.

application trace

B.

path trace

C.

ACL trace

D.

device trace

Question 158

Question # 158

Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).

router bgp 64511

network 172.16.20.0 mask 255.255.255.0

network 172.16.21.0 mask 255.255.255.0

network 172.16.22.0 mask 255.255.255.0

network 172.16.23.0 mask 255.255.255.0

aggregate-address 172.16.20.0 255.255.252.0

After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?

Options:

A.

router bgp 64511

aggregate-address 172.16.20.0 255.255.252.0 summary-only

B.

router bgp 64511

neighbor 192.168.100.1 summary-only

neighbor 192.168.200.2 summary-only

C.

interface E 0/0

ip bgp suppress-map BLOCK_SPECIFIC

!

interface E 0/1

ip bgp suppress-map BLOCK_SPECIFIC

!

ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24

!

route-map BLOCK_SPECIFIC permit 10

match ip address prefix-list PL_BLOCK_SPECIFIC

D.

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22

ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22

!

route-map BLOCK_SPECIFIC permit 10

match ip address prefix-list PL_BLOCK_SPECIFIC

!

router bgp 64511

aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

Question 159

Refer to the exhibit.

Question # 159

BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1. Users report packet loss and interruption of service to applications hosted on the 10.1.1.0724 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command. Which action stabilizes the service?

Options:

A.

Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.

B.

Repeat the test from R4 using ICMP ping on the local 10.1.1.0/24 prefix, and fix any Layer 2 errors on the host or switch side of the subnet. ^ C. Place an OSPF distribute-list outbound on R3 to block the 10.1.10/24 prefix from being advertised back to R3.

C.

Reduce frequent OSPF SPF calculations on R3 that cause a high CPU and packet loss on traffic traversing R3.

Question 160

An engineer configured a DHCP server for Cisco IP phones to download its configuration from a TFTP server, but the IP phones failed to toad the configuration What must be configured to resolve the issue?

Options:

A.

BOOTP port 67

B.

DHCP option 66

C.

BOOTP port 68

D.

DHCP option 69

Question 161

Refer to the exhibit.

Question # 161

An IPv6 network was newly deployed in the environment and the help desk reports that R3 cannot SSH to the R2s Loopback interface. Which action resolves the issue?

Options:

A.

Modify line 10 of the access list to permit instead of deny.

B.

Remove line 60 from the access list.

C.

Modify line 30 of the access list to permit instead of deny.

D.

Remove line 70 from the access list.

Question 162

Refer to the exhibit.

Question # 162

While troubleshooting an EIGRP neighbor adjacency problem, the network engineer notices that the interface connected to the neighboring router is not participating in the EIGRP process. Which action resolves the issues?

Options:

A.

Configure the network command to network 172.16.0.1 0.0.0.0

B.

Configure the network command under EIGRP address family vrf CLIENT1

C.

Configure EIGRP metrics on interface FastEthernet0/3

D.

Configure the network command under EIGRP address family ipv4

Question 163

An engineer is troubleshooting on the console session of a router and turns on multiple debug commands. The console screen is filled with scrolling debug messages that none of the commands can be verified if entered correctly or display any output. Which action allows the engineer to see entered console commands while still continuing the analysis of the debug messages?

Options:

A.

Configure the logging synchronous command

B.

Configure the no logging console debugging command globally

C.

Configure the logging synchronous level all command

D.

Configure the term no mon command globally

Question 164

An engineer needs dynamic routing between two routers and is unable to establish OSPF adjacency. The output of the show ip ospf neighbor command shows that the neighbor state is EXSTART/EXCHANGE. Which action should be taken to resolve this issue?

Options:

A.

match the passwords

B.

match the hello timers

C.

match the MTUs

D.

match the network types

Question 165

Refer to the exhibit.

Question # 165

An IT staff member comes into the office during normal office hours and cannot access devices through SSH Which action should be taken to resolve this issue?

Options:

A.

Modify the access list to use the correct IP address.

B.

Configure the correct time range.

C.

Modify the access list to correct the subnet mask

D.

Configure the access list in the outbound direction.

Question 166

Question # 166

Refer to the exhibits. An engineer filtered messages based on severity to minimize log messages. After applying the filter, the engineer noticed that it filtered required messages as well. Which action must the engineer take to resolve the issue?

Options:

A.

Configure syslog level 2.

B.

Configure syslog level 3.

C.

Configure syslog level 4.

D.

Configure syslog level 5.

Question 167

What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)

Options:

A.

The VPNv4 address is used to advertise the MPLS VPN label.

B.

RD is prepended to the IPv4 route to make it unique.

C.

MP-BGP is used to allow overlapping IPv4 addresses between customers to advertise

through the network.

D.

The IPv4 address is needed to tag the MPLS label.

E.

The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4

prefix.

Question 168

Refer to the exhibit.

Question # 168

A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer fails. Which action resolves this issue?

Options:

A.

The SSH service must be enabled with the crypto key generate rsa command.

B.

The SCP service must be enabled with the ip scp server enable command.

C.

The Python interpreter must first be enabled with the guestshell enable command.

D.

The SSH access must be allowed on the VTY lines using the transport input ssh command.

Page: 1 / 56
Total 561 questions