Cisco 300-410 Dumps Questions Answers

Cisco 300-410 Dumps

Dumps4download providing 100% reliable Exam dumps that are verified by experts panel. Our Dumps4download 300-410 study material are totally unique and exam questions are valid all over the world. By using our 300-410 dumps we assure you that you will pass your exam on first attempt. You can easily score more than 97%.

100% exam passing Guarantee on your purchased exams.

100% money back guarantee if you will not clear your exam.

Cisco 300-410 Practice Test Helps You Turn Dreams To Reality!

IT Professionals from every sector are looking up certifications to boost their careers. Cisco being the leader certification provider earns the most demand in the industry.

The Cisco Certification is your short-cut to an ever-growing success. In the process, Dumps4download is your strongest coordinator, providing you with the best 300-410 Dumps PDF as well as Online Test Engine. Let’s steer your career to a more stable future with interactive and effective 300-410 Practice Exam Dumps.

Many of our customers are already excelling in their careers after achieving their goals with our help. You can too be a part of that specialized bunch with a little push in the right direction. Let us help you tread the heights of success.

Apply for the 300-410 Exam right away so you can get certified by using our Cisco Dumps.

Bulk Exams Package

Dumps4download Leads You To A 100% Success in First Attempt!

Our 300-410 Dumps PDF is intended to meet the requirements of the most suitable method for exam preparation. We especially hired a team of experts to make sure you get the latest and compliant 300-410 Practice Test Questions Answers. These questions are been selected according to the most relevance as well as the highest possibility of appearing in the exam. So, you can be sure of your success in the first attempt.

Interactive & Effective 300-410 Dumps PDF + Online Test Engine

Aside from our Cisco 300-410 Dumps PDF, we invest in your best practice through Online Test Engine. They are designed to reflect the actual exam format covering each topic of your exam. Also, with our interactive interface focusing on the exam preparation is easier than ever. With an easy-to-understand, interactive and effective study material assisting you there is nothing that could go wrong. We are 100% sure that our 300-410 Questions Answers Practice Exam is the best choice you can make to pass the exam with top score.

How Dumps4download Creates Better Opportunities for You!

Dumps4download knows how hard it is for you to beat this tough Cisco Exam terms and concepts. That is why to ease your preparation we offer the best possible training tactics we know best. Online Test Engine provides you an exam-like environment and PDF helps you take your study guide wherever you are. Best of all, you can download 300-410 Dumps PDF easily or better print it. For the purpose of getting concepts across as easily as possible, we have used simple language. Adding explanations at the end of the 300-410 Questions and Answers Practice Test we ensure nothing slips your grasp.

The exam stimulation is 100 times better than any other test material you would encounter. Besides, if you are troubled with anything concerning Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Exam or the 300-410 Dumps PDF, our 24/7 active team is quick to respond. So, leave us a message and your problem will be solved in a few minutes.

Get an Absolutely Free Demo Today!

Dumps4download offers an absolutely free demo version to test the product with sample features before actually buying it. This shows our concern for your best experience. Once you are thoroughly satisfied with the demo you can get the Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Practice Test Questions instantly.

24/7 Online Support – Anytime, Anywhere

Have a question? You can contact us anytime, anywhere. Our 24/7 Online Support makes sure you have absolutely no problem accessing or using Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) Practice Exam Dumps. What’s more, Dumps4download is mobile compatible so you can access the site without having to log in to your Laptop or PC.

Features to use Dumps4download 300-410 Dumps:

• Thousands of satisfied customers.
• Good grades are 100% guaranteed.
• 100% verified by Experts panel.
• Up to date exam data.
• Dumps4download data is 100% trustworthy.
• Passing ratio more than 99%
• 100% money back guarantee.

Cisco 300-410 Frequently Asked Questions

Cisco 300-410 Sample Questions

Question # 1

The network administrator configured CoPP so that all routing protocol traffic toward the router CPU is limited to 1 mbps. All traffic that exceeds this limit must be dropped. The router is running BGP and OSPF Management traffic for Telnet and SSH must be limited to 500kbps.access-list 100 permit tcp any any eq 179access-list 100 permit tcp any any range 22 23access-list 100 permit ospf any any!class-map CM-ROUTINGmatch access-group 100class-map CM-MGMTmatch access-group 100!policy-map PM-COPPclass CM-ROUTINGpolice 1000000 conform-action transmitclass CM-MGMTpolice 500000 conform-action transmit!control-planeservice-policy output PM-COPPNo traffic is filtering through CoPP,which is resulting in high CPU utilization,which configuration resolves the issue ?

A. no access-list 100access-list 100 permit tcp any any eq 179access-list 100 permit ospf any anyaccess-list 101 Permit tcp any any range 22 23!class-map CM-MGMTno match access-group 100match access-group 101
B. control-planeno service-policy output PM-COPPservice-policy input PM-COPP
C. No access-list 100access-list 100 permit tcp any any eq 179access-list 100 permit tcp any any range eq 22access-list 100 permit tcp any any range eq 23access-list 100 permit ospf any any 
D. no access-list 100access-list 100 permit tcp any any eq 179access-list 100 permit ospf any anyaccess-list 101 Permit tcp any any range 22 23!class-map CM-MGMTno match access-group 100match access-group 101!control-planeno service-policy output PM-COPPservice-policy input PM-COPP 

Show Answer

---

Question # 2

A network administrator is troubleshooting a high utilization issue on the route processor of a router that was reported by NMS The administrator logged into the router to check the control plane policing and observed that the BGP process is dropping a high number of routing packets and causing thousands of routes to recalculate frequently. Which solution resolves this issue?

A. Police the cir for BGP, conform-action transmit, and exceed action transmit.
B. Shape the pir for BGP, conform-action set-prec-transmit, and exceed action set-frdetransmit.
C. Shape the cir for BGP. conform-action transmit, and exceed action transmit.
D. Police the pir for BGP, conform-action set-prec-transmit, and exceed action set-clptransmit. 

Show Answer

---

Question # 3

What is a function of BFD?

A. peer recovery after a Layer 3 protocol adjacency failure
B. peer recovery after a Layer 2 adjacency failure
C. failure detection independent of routing protocols and media types
D. failure detection dependent on routing protocols and media types 

Show Answer

---

Question # 4

Which method provides failure detection in BFD?

A. short duration, high overhead
B. short duration, low overhead
C. long duration, high overhead
D. long duration, low overhead 

Show Answer

---

Question # 5

Which IPv6 feature enables a device to reject traffic when it is originated from an address that is not stored in the device binding table?

A. IPv6 Snooping
B. IPv6 Source Guard
C. IPv6 DAD Proxy
D. IPv6 RA Guard

Show Answer

---

Question # 6

Which feature minimizes DoS attacks on an IPv6 network?

A. IPv6 Binding Security Table
B. IPv6 Router Advertisement Guard
C. IPv6 Prefix Guard
D. IPv6 Destination Guard 

Show Answer

---

Question # 7

A newly installed spoke router is configured for DMVPN with the ip mtu 1400 command. Which configuration allows the spoke to use fragmentation with the maximum negotiated TCP MTU over GRE? 

A. ip tcp adjust-mss 1360 crypto ipsec fragmentation after-encryption 
B. ip tcp adjust-mtu 1360 crypto ipsec fragmentation after-encryption 
C. ip tcp adjust-mss 1360 crypto ipsec fragmentation mtu-discovery 
D. ip tcp adjust-mtu 1360 crypto ipsec fragmentation mtu-discovery 

Show Answer

---

Question # 8

What are two characteristics of IPv6 Source Guard? (Choose two.) 

A. requires IPv6 snooping on Layer 2 access or trunk ports  
B. used in service provider deployments to protect DDoS attacks  
C. requires the user to configure a static binding  
D. requires that validate prefix be enabled  
E. recovers missing binding table entries  

Show Answer

---

Question # 9

An engineer configured a router with this configuration ip access-hst DENY TELNET 10 deny tcp any any eq 23 log-inputThe router console starts receiving log message :%SEC-6-IPACCESSLOGP: listDENY_TELNET denied tcp 192.168.1.10(1022)(FastEthernet1/0 D508.89gb.003f) - >192.168.2.20(23), 1 packet" Which action stops messages on the console while still denying Telnet?  

A. Configure a 20 permit ip any any command  
B. Remove log-Input keyword from the access list.  
C. Replace log-input keyword with the log keyword in the access list.  
D. Configure a 20 permit ip any any log-input command.  

Show Answer

---

Question # 10

What must be configured by the network engineer to circumvent AS_PATH prevention mechanism in IP/VPN Hub and Spoke deployment scenarios? 

A. Use allows in and as-override at all Pes.  
B. Use allowas in and as-override at the PE-Hub.  
C. Use Allowas-in the PE_Hub  
D. Use as-override at the PE_Hub  

Show Answer

---

Question # 11

In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router. Which command is required on both spoke routers to communicate directly to one another? 

A. ip nhrp map dynamic  
B. ip nhrp shortcut  
C. ip nhrp nhs multicast  
D. ip nhrp redirect  

Show Answer

---

Question # 12

Which IPv6 first hop security feature controls the traffic necessary for proper discovery of neighbor device operation and performance? 

A. RA Throttling  
B. Source or Destination Guard  
C. ND Multicast Suppression  
D. IPv6 Snooping  

Show Answer

---

Question # 13

What are the two goals of micro BFD sessions? (Choose two.) 

A. The high bandwidth member link of a link aggregation group must run BFD  
B. Run the BFD session with 3x3 ms hello timer  
C. Continuity for each member link of a link aggregation group must be verified  
D. Eny member link on a link aggregation group must run BFD  
E. Each member link of a link aggregation group must run BFD.  

Show Answer

---

Question # 14

What is an advantage of implementing BFD? 

A. BFD provides faster updates for any flapping route.  
B. BFD provides millisecond failure detection  
C. BFD is deployed without the need to run any routing protocol  
D. BFD provides better capabilities to maintain the routing table  

Show Answer

---

Question # 15

What is a function of an end device configured with DHCPv6 guard? 

A. If it is configured as a server, only prefix assignments are permitted.  
B. If it is configured as a relay agent, only prefix assignments are permitted.  
C. If it is configured as a client, messages are switched regardless of the assigned role.  
D. If it is configured as a client, only DHCP requests are permitted.  

Show Answer

---

Question # 16

What is a characteristic of Layer 3 MPLS VPNs? 

A. LSP signaling requires the use of unnumbered IP links for traffic engineering.  
B. Traffic engineering supports multiple IGP instances  
C. Traffic engineering capabilities provide QoS and SLAs.  
D. Authentication is performed by using digital certificates or preshared keys.  

Show Answer

---

Question # 17

An engineer configures PBR on R5 and wants to create a policy that matches traffic destined toward 10.10.10.0/24 and forward 10.1.1.1. The traffic must also have its IP precedence set to 5.All other trafficshould be forward toward 10.1.1.2 and have its IP precedence set to 0.Which configuration meets the requirements?

A. access-list 1 permit 10.10.10.0 0.0.0.255 access-list 2 permit any route-map CCNP permit 10 match ip address 1 set ip next-hop 10.1.1.1 set ip precedence 5 ! route-map CCNP permit 20 match ip address 2 set ip next-hop 10.1.1.2 set ip precedence 0route-map CCNP permit 30
B. access-list 100 permit ip any 10.10.10.0 0.0.0.255 route-map CCNP permit 10 match ip address 100 set ip next-hop 10.1.1.1 set ip precedence 0 ! route-map CCNP permit 20 set ip next-hop 10.1.1.2 set ip precedence 5 ! route-map CCNP permit 30
C. access-list 1 permit 10.10.10.0 0.0.0.255 route-map CCNP permit 10 match ip address 1 set ip next-hop 10.1.1.1 set ip precedence 5 ! route-map CCNP permit 20 set ip next-hop 10.1.1.2 set ip precedence 0 
D. access-list 100 permit ip any 10.10.10.0 0.0.0.255 route-map CCNP permit 10 match ip address 100 set ip next-hop 10.1.1.1 set ip precedence 5 ! route-map CCNP permit 20 set ip next-hop 10.1.1.2 set ip precedence 0

Show Answer

---

Question # 18

Which mechanism must be chosen to optimize the reconvergence time for OSPF at company location 407173257 that is less CPU-intensive than reducing the hello and dead timers? 

A. BFD  
B. Dead Peer Detection keepalives  
C. SSO  
D. OSPF demand circuit  

Show Answer

---

Question # 19

What is the purpose of the DHCPv6 Guard? 

A. It messages between a DHCPv6 server and a DHCPv6 client ( or relay agent).  
B. It shows that clients of a DHCPv5 server are affected.  
C. It block DHCPv6 messages from relay agents to a DHCPv6 server.  
D. It allows DHCPv6 replay and advertisements from (rouge) DHCPv6 servers.  

Show Answer

---

Question # 20

Which table is used to map the packets in an MPLS LSP that exit from the same interface, via the same next hop, and have the same queuing policies? 

A. RIB  
B. FEC  
C. LDP  
D. CEF  

Show Answer

---

Question # 21

What does the MP-BGP OPEN message contain? 

A. MPLS labels and the IP address of the router that receives the message  
B. the version number and the AS number to which the router belongs  
C. IP routing information and the AS number to which the router belongs  
D. NLRI, path attributes, and IP addresses of the sending and receiving routers  

Show Answer

---

Question # 22

What is a function of IPv6 Source Guard? 

A. It works with address glean or ND to find existing addresses.  
B. It inspects ND and DHCP packets to build an address binding table.  
C. It denies traffic from known sources and allocated addresses.  
D. It notifies the ND protocol to inform hosts if the traffic is denied by it.  

Show Answer

---

Question # 23

A customer reports that traffic is not passing on an EIGRP enabled multipoint interface on a router configured as below: interface Serial0/0 no ip address interface Server0/0/0.9 multipoint ip address 10.1.1.1 255.255.255.248 ip split-horizon eigrp 1 Which action resolves the issue?

A. Enable poison reverse 
B. Enable split horizon 
C. Disable poison reverse 
D. Disable split horizon 

Show Answer

---

Question # 24

How does an MPLS Layer 3 VPN differentiate the IP address space used between each VPN? 

A. by RD 
B. by address family 
C. by MP-BGP 
D. byRT 

Show Answer

---

Question # 25

What are two characteristics of a VRF instance? (Choose two)

 A. It is defined by the VPN membership of a customer site attached to a P device. 
B. Each VRF has a different set of routing and CEF tables. 
C. AII VRFS share customers routing and CEF tables. 
D. An interface must be associated to one VRF 
E. A customer site can be associated to different VRFs. 

Show Answer

---

Question # 26

An engineer failed to run diagnostic commands on devices using Cisco DNA Center. Which action in Cisco DNA Center resolves the issue? 

A. Enable Command Runner 
B. Enable APIs 
C. Enable CDP 
D. Enable Secure Shell

Show Answer

---

Question # 27

A network administrator performed a Compact Flash Memory upgrade on a Cisco Catalyst 6509 Switch. Everything is functioning normally except SNMP, which was configured to monitor the bandwidth of key interfaces but the interface indexes are changed. Which global configuration resolves the issue? 

A. snmp-server ifindex permanent 
B. snmp ifindex permanent 
C. snmp-server ifindex persist 
D. snmp ifindex persist 

Show Answer

---

Question # 28

Which two components are required for MPLS Layer 3 VPN configuration? (Choose two) 

A. Use pseudowire for Layer 2 routes 
B. Use MP-BGP for customer routes 
C. Use OSPF between PE and CE 
D. Use a unique RD per customer VRF 
E. Use LDP for customer routes 

Show Answer

---

Question # 29

What is the function of BFD? 

A. It provides uniform failure detection regardless of media type. 
B. It creates high CPU utilization on hardware deployments. 
C. It negotiates to the highest version if the neighbor version differs. 
D. It provides uniform failure detection on the same media type. 

Show Answer

---

Question # 30

Refer to the exhibit. A network engineer receives a fault ticket about traffic drops from BANK SITE to BANK Users can reach BANK SITE Y from router RA as a source. Routers RB and RD are acting as route reflectors. Which configuration resolves the issue?

A. RC(config)#router bgp 65201 RC(config-router)#neighbor 10.10.10.4 route-reflector-client 
B. RF(config)#router bgp 65201 RF(config-router)#neighbor 10.10.10.6 route-reflector-client 
C. RC(config)#router bgp 65201 RC(config-router)#neighbor 10.10.10.2 route-reflector-client 
D. RB(config)router bgp 65201 RB(config-router)#neighbor 10.10.10.3 route-reflector-client 

Show Answer

---

Question # 31

Refer to the exhibit. An engineer is trying to log in to R1 via R3 loopback address. Which action resolves the issue? 

A. Add transport input SCP
 B. Add transport input none 
C. Remove the IPv6 traffic filter from R1, which is blocking the Telnet. 
D. Remove the IPv6 traffic from R1, which is blocking the SSH 

Show Answer

---

Question # 32

A customer is running an mGRE DMVPN tunnel over WAN infrastructure between hub and spoke sites. The existing configuration allows NHRP to add spoke routers automatically to the multicast NHRP mappings. The customer is migrated the network from IPv4 to the IPv6 addressing scheme for those spokes’ routers that support IPv6 and can run DMVPN tunnel over the IPv6 network. Which configuration must be applied to support IPv4 and IPv6 DMVPN tunnel on spoke routers?

 A. Tunnel mode ipv6ip 6to4 
B. Tunnel mode ipv6ip isatap 
C. Tunnel mode ipv6ip auto-tunnel 
D. Tunnel mode ipv6ip 6rd

Show Answer

---

Question # 33

IPv6 is enabled in the infrastructure to support customers with an IPv6 network over WAN and to connect the head office to branch offices in the local network. One of the customers is already running IPv6 and wants to enable IPv6 over the DMVPN network infrastructure between the headend and branch sites. Which configuration command must be applied to establish an mGRE IPv6 tunnel neighborship? 

A. tunnel protection mode ipv6 
B. ipv6 unicast-routing 
C. ipv6 nhrp holdtime 30 
D. tunnel mode gre multipoint ipv6 

Show Answer

---

Question # 34

Which MPLS value is combined with the IP prefix to convert to a VPNv4 prefix?

A. 16-byte Route Distinguisher 
B. 8-byte Route Target 
C. 16-byte Route Target 
D. 8-byte Route Distinguisher 

Show Answer

---

Question # 35

Which two solutions are used to overcome a flapping link that causes a frequent label binding exchange between MPLS routers? (Choose two) 

A. Create link dampening on links to protect the session. 
B. Increase input queue on links to protect the session. 
C. Create targeted hellos to protect the session. 
D. Increase a hold-timer to protect the session. 
E. Increase a session delay to protect the session. 

Show Answer

---

Question # 36

What is a function of the IPv6 DHCP Guard feature for DHCP messages? 

A. Only access lists are supported for matching traffic. 
B. All client messages are always switched regardless of the device role. 
C. It blocks only DHCP request messages. 
D. If the device is configured as a DHCP server, no message is switched. 

Show Answer

---

Question # 37

Which 0S1 model is used to insert an MPLS label?

 A. between Layer 5 and Layer 6 
B. between Layer 1 and Layer 2 
C. between Layer 3 and Layer 4 
D. between Layer 2 and Layer 3 

Show Answer

---

Question # 38

What are the two prerequisites to enable BFD on Cisco routers? (Choose two) 

A. A supported IP routing protocol must be configured on the participating routers. 
B. OSPF Demand Circuit must run BFD on all participating routers. 
C. ICMP must be allowed on all participating routers. 
D. UDP port 1985 must be allowed on all participating routers. 
E. Cisco Express Forwarding and IP Routing must be enabled on all participating routers. 

Show Answer

---

Question # 39

Which mechanism provides traffic segmentation within a DMVPN network? 

A. RSVP 
B. BGP 
C. MPLS 
D. iPsec 

Show Answer

---

Question # 40

An engineer received a ticket about a router that has reloaded. The monitoring system graphs show different traffic patterns between logical and physical interfaces when the router is rebooted. Which action resolves the issue?

 A. Configure the snmp ifindex persist command globally. 
B. Clear the logical interfaces with snmp ifindex clear command 
C. Configure the snmp ifindex persist command on the physical interfaces. 
D. Trigger a new snmpwalk from the monitoring system to synchronize interface OlDs 

Show Answer

---

Question # 41

Which feature is used by LDP in the forwarding path within the MPLS cloud? 

A. IP forwarding 
B. TTL 
C. TDP 
D. LSP 

Show Answer

---

Question # 42

How is VPN routing information distributed in an MPLS network? 

A. The top level of the customer data packet directs it to the correct CE device 
B. It is established using VPN IPsec peers. 
C. It is controlled using of VPN target communities. 
D. It is controlled through the use of RD. 

Show Answer

---

Question # 43

A network administrator added a new spoke site with dynamic IP on the DMVPN network. Which configuration command passes traffic on the DMVPN tunnel from the spoke router? 

A. ip nhrp registration ignore 
B. ip nhrp registration no-registration 
C. ip nhrp registration dynamic
 D. ip nhrp registration no-unique 

Show Answer

---

Question # 44

Which function does LDP provide in an MPLS topology? 

A. It enables a MPLS topology to connect multiple VPNs to P routers. 
B. It provides hop-by-hop forwarding in an MPLS topology for LSRs. 
C. It exchanges routes for MPLS VPNs across different VRFs. 
D. It provides a means for LSRs to exchange IP routes.

Show Answer

---

Question # 45

A customer requested a GRE tunnel through the provider network between two customer sites using loopback to hide internal networks. Which configuration on R2 establishes the tunnel with R1? 

A. R2(config)# interface Tunnel 1 R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1400 R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 192.168.20.1 R2(config-if)# tunnel destination 192.168.10.1 
B. R2(config)# interface Tunnel 1 R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1400 R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 10.10.2.2 R2(config-if)# tunnel destination 10.10.1.1
C. R2(config)# interface Tunnel 1 R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1500 R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 192.168.20.1 R2(config-if)# tunnel destination 10.10.1.1 
D. R2(config)# interface Tunnel 1 R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1500 R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 10.10.2.2 R2(config-if)# tunnel destination 10.10.1.1 

Show Answer

---

Question # 46

What is an MPLS LDP targeted session? 

A. session between neighbors that are connected no more than one hop away 
B. LDP session established between LSRs by exchanging TCP hello packets 
C. label distribution session between non-directly connected neighbors 
D. LDP session established by exchanging multicast hello packets 

Show Answer

---

Question # 47

An engineer is creating a policy that overrides normal routing behavior.if the route to a destination of 10.100.100.0/24 is withdrawn from the routing Table, the policy must direct traffic to a next hop of 10.1 1.1. if the route is present in the routing table, then normal forwarding must occur. Which configuration meets the requirements?

A. access-list 100 permit ip any any ! route-map POLICY permit 10 match ip address 100 set ip next-hop recursive 10.1.1.1 
B. access-list 100 permit ip any 10.100.100.0 0.0.0.255 ! Route-map POLICY permit 10 match ip address 100 set ip default next-hop 10.1.1.1 
C. access-list 100 permit ip any 10.100.100.0 0.0.0.255 ! route-map POLICY permit 10 match ip address 100 set ip next-hop 10.1.1.1 ! route map POLICY permit 20 
D. access-list 100 permit ip any 10.100.100.0 0.0.0.255 ! route map POLICY permit 10 match ip address 100 Set ip next-hop recursive 10.1.1.1  ! route-map POLICY permit 20 

Show Answer

---

Question # 48

An engineer creates a Cisco DNA Center cluster with three nodes, but all the services are running on one host node. Which action resolves this issue?

 A. Restore the link on the switch interface that is connected to a cluster link on the Cisco DNA Center 
B. Click the master host node with all the services and select services to be moved to other hosts 
C. Enable service distribution from the Systems 360 page. 
D. Click system updates, and upgrade to the latest version of Cisco DNA Center. 

Show Answer

---

Question # 49

The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped. access-list 100 permit ip host 172.16.1.99 any ! class-map CM-ADMIN match access-group 100 ! policy-map PM-COPP class CM-ADMIN police 500000 conform-action transmit ! interface E0/0 service-policy input PM-COPP CoPP failed to capture the desired traffic and the CPU load is getting higher. Which two configurations resolve the issue? (Choose two.) 

A. interface E0/0 no service-policy input PM-COPP ! control-plane service-policy input PM-COPP 
B. policy-map PM-COPP class CM-ADMIN no police 500000 conform-action transmit police 500 conform-action transmit ! control-plane service-policy input PM-COPP 
C. no access-list 100 access-list 100 permit tcp host 172.16.1.99 any eq 80 
D. no access-list 100 access-list 100 permit tcp host 172.16.1.99 any eq 80 access-list 100 permit tcp host 172.16.1.99 any eq 443 
E. policy-map PM-COPP class CM-ADMIN no police 500000 conform-action transmit police 500 conform-action transmit 

Show Answer

---

Question # 50

How do devices operate in MPLS L3VPN topology? 

A. P and associated PE routers with IGP populate the VRF table in different VPNs.
 B. CE routers connect to the provider network and perform LSP functionality 
C. P routers provide connectivity between PE devices with MPLS switching. 
D. P routers support PE to PE VPN tunnel without LSP functionality 

Show Answer

---

Question # 51

How does LDP operate in an MPLS network? 

A. When topology changes occur such as a router failure, LDP generates peer discovery messages that terminate the LDP season to propagate an LSP change. 
B. When an adjacent LSR receives LDP discovery messages. TCP two-way handshake ensures that the LDP session has unidirectional connectivity. 
C. Peer routers establish the LDP session, and the LDP neighbors maintain and terminate the session by exchanging messages 
D. LDP notification messages allow LERs to exchange label information to determine the next hops within a particular LSP. 

Show Answer

---

Question # 52

A CoPP policy is applied for receiving SSH traffic from the WAN interface on a Cisco ISR4321 router. However, the SSH response from the router is abnormal and stuck during the high link utilization. The problem is identified as SSH traffic does not match in the ACL. Which action resolves the issue? 

A. Rate-limit SSH traffic to ensure dedicated bandwidth. 
B. Apply CoPP on the control plane interface. 
C. Increase the IP precedence value of SSH traffic to 6. 
D. Apply CoPP on the WAN interface inbound direction. 

Show Answer

---

Question # 53

Users report issues with reachability between areas as soon as an engineer configured summary routes between areas in a multiple area OSPF autonomous system. Which action resolves the issue? 

A. Configure the summary-address command on the ASBR. 
B. Configure the summary-address command on the ABR. 
C. Configure the area range command on the ABR. 
D. Configure the area range command on the ASBR. 

Show Answer

---

Question # 54

The network administrator must implement IPv6 in the network to allow only devices that not only have registered IP addresses but are also connecting from assigned locations. Which security feature must be implemented?

A. IPv6 Snooping 
B. IPv6 Destination Guard 
C. IPv6 Prefix Guard 
D. IPv6 Router Advertisement Guard 

Show Answer

---

Question # 55

When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective? 

A. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction 
B. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction 
C. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the input direction 
D. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy m the output direction 

Show Answer

---

Question # 56

An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network. Which BGP attribute must the engineer configure to avoid using the highdelay ISP link if the second ISP link is up? 

A. LOCAL_PREF 
B. MED C. WEIGHT 
D. AS-PATH 

Show Answer

---

Question # 57

How does an MPLS Layer 3 VPN function?

A. set of sites use multiprotocol BGP at the customer site for aggregation 
B. multiple customer sites interconnect through service provider network to create securetunnels between customer edge devices 
C. set of sites interconnect privately over the Internet for security 
D. multiple customer sites interconnect through a service provider network using customeredge to provider edge connectivity 

Show Answer

---

Question # 58

What statement about route distinguishes in an MPLS network is true?

A. Route distinguishes make a unique VPNv4 address across the MPLS network. 
B. Route distinguishers allow multiple instances of a routing table to coexist within the edgerouter. 
C. Route distinguishes are used for label bindings 
D. Route distinguishes define which prefixes are imported and exported on the edge router 

Show Answer

---

Question # 59

An engineer configured Reverse Path Forwarding on an interface and noticed that theroutes are dropped when a route lookup fails on that interface for a prefix that is availablein the routing table Which interface configuration resolves the issue?

A. ip verify unicast source reachable-via rx 
B. ip verify unicast source reachable-via any 
C. ip verify unicast source reachable-via allow-default 
D. ip verify unicast source reachable-via 12-src 

Show Answer

---

Question # 60

Which configuration feature should be used to block rogue router advertisements instead ofusing the IPv6 Router Advertisement Guard feature?

A. VACL blocking broadcast frames from nonauthorized hosts 
B. PVLANs with promiscuous ports associated to route advertisements and isolated portsfor nodes 
C. PVLANs with community ports associated to route advertisements and isolated ports fornodes 
D. IPv4 ACL blocking route advertisements from nonauthorized hosts 

Show Answer

---

Question # 61

A customer reports to the support desk that they cannot pnnt from their PC to the localprinter id:401987778. Which tool must be used to diagnose the issue using Cisco DNACenter Assurance?

A. application trace 
B. path trace 
C. ACL trace 
D. device trace 

Show Answer

---

Question # 62

An engineer must configure a Cisco router to initiate secure connections from the router toother devices in the network but kept failing. Which two actions resolve the issue? (Choosetwo.)

A. Configure a source port for the SSH connection to initiate 
B. Configure a TACACS+ server and enable it 
C. Configure transport input ssh command on the console 
D. Configure a domain name 
E. Configure a crypto key to be generated 

Show Answer

---

Question # 63

When determining if a system is capable of support, what is the minimum time spacingrequired for a BFD control packet to receive once a control packet is arrived?

A. Desired Min TX Interval 
B. Detect Mult 
C. Required Min RX Interval 
D. Required Min Echo RX Interval 

Show Answer

---

Question # 64

Which two protocols work in the control plane of P routers across the MPLS cloud?(choose two)

A. LSP 
B. RSVP 
C. ECMP 
D. LDP 
E. MPLS OAM 

Show Answer

---

Question # 65

When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

A. Set the conform-action and exceed-action to transmit initially to test the ACLs andtransmit rates and apply the Control Plane Policy in the output direction
B. Set the conform-action and exceed-action to transmit initially to test the ACLs andtransmit rates and apply the Control Plane Policy in the input direction
C. Set the conform-action to transmit and exceed-action to drop to test the ACLs andtransmit rates and apply the Control Plane Policy m the input direction
D. Set the conform-action to transmit and exceed-action to drop to test the ACLs andtransmit rates and apply the Control Plane Policy m the output direction

Show Answer

---

Question # 66

A DMVPN single hub topology is using IPsec + mGRE with OSPF. What should be configured on the hub to ensure it will be the designated router?

A. tunnel interface of the hub with ip nhrp ospf dr
B. OSPF priority to 0
C. route map to set the metrics of learned routes to 110
D. OSPF priority greater than 1

Show Answer

---

Question # 67

Which two components are needed for a service provider to utilize the LVPN MPLS application? (Choose two.)

A. The P routers must be configured for MP-iBGP toward the PE routers
B. The P routers must be configured with RSVP.
C. The PE routers must be configured for MP-iBGP with other PE routers
D. The PE routers must be configured for MP-eBGP to connect to CEs
E. The P and PE routers must be configured with LDP or RSVP

Show Answer

---

Question # 68

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

A. Packets are not forwarded to the specific next hop.
B. Packets are forwarded based on the routing table.
C. Packets are forwarded based on a static route.
D. Packets are forwarded to the specific next hop.

Show Answer

---

Question # 69

What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)

A. RD is prepended to the IPv4 route to make it unique.
B. The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4 prefix.
C. MP-BGP is used to allow overlapping IPv4 addresses between customers to advertise through the network.
D. The IPv4 address is needed to tag the MPLS label.
E. The VPNv4 address is used to advertise the MPLS VPN label.

Show Answer

---

Question # 70

Which Ipv6 first-hop security feature helps to minimize denial of service attacks? 

A. IPv6 Router Advertisement Guard
B. IPv6 Destination Guard
C. DHCPv6 Guard
D. IPv6 MAC address filtering

Show Answer

---

Question # 71

In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.) 

A. by the recovery mechanism to recover the binding table in the event of a device reboot
B. by IPv6 routing protocols to securely build neighborships without the need ofauthentication
C. by IPv6 HSRP to make sure neighbors are authenticated before being used asgateways
D. by various IPv6 guard features to validate the data link layer address
E. by storing hashed keys for IPsec tunnels for the built-in IPsec features

Show Answer

---

Question # 72

What are two characteristics of VRF instance? (Choose two.) 

A. All VRFs share customers routing and CEF tables .
B. An interface must be associated to one VRF.
C. Each VRF has a different set of routing and CEF tables
D. It is defined by the VPN membership of a customer site attached to a P device.
E. A customer site can be associated to different VRFs

Show Answer

---

Question # 73

What are two functions of MPLS Layer 3 VPNs? (Choose two.) 

A. LDP and BGP can be used for Pseudowire signaling.
B. It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.
C. BGP is used for signaling customer VPNv4 routes between PE nodes.
D. A packet with node segment ID is forwarded along with shortest path to destination.
E. Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

Show Answer

---

Question # 74

What are two MPLS label characteristics? (Choose two.) 

A. The label edge router swaps labels on the received packets.
B. Labels are imposed in packets after the Layer 3 header.
C. LDP uses TCP for reliable delivery of information.
D. An MPLS label is a short identifier that identifies a forwarding equivalence class.
E. A maximum of two labels can be imposed on an MPLS packet.

Show Answer

---

Question # 75

What is the minimum time gap required by the local system before putting a BFD control packet on the wire?

A. Detect Mult
B. Required Min Echo RX Interval
C. Desired Min TX Interval
D. Required Min RX Interval

Show Answer

---

Question # 76

How are MPLS Layer 3 VPN services deployed? 

A. The RD and RT values must match under the VRR
B. The RD and RT values under a VRF must match on the remote PE router
C. The import and export RT values under a VRF must always be the same.
D. The label switch path must be available between the local and remote PE routers

Show Answer

---

Question # 77

Which feature drops packets if the source address is not found in the snooping table?  

A. IPv6 Source Guard
B. IPv6 Destination Guard
C. IPv6 Prefix Guard
D. Binding Table Recovery

Show Answer

---

Testimonials