Cisco CCNP Enterprise 300-410 Free Dumps 2023

Jonnie Karnath2023-04-01T14:53:15+00:00

Cisco 300-410 free dumps from Certspots is an excellent resource for anyone who is preparing for the CCNP Enterprise certification exam. They are updated regularly to reflect the latest exam trends and requirements. This means that you can be sure that the questions you are practicing with are relevant to the exam you are preparing for. Using Certspots Cisco CCNP Enterprise 300-410 free dumps can also help you identify areas where you need to focus your study efforts. By practicing with the questions, you can gauge your understanding of the material and identify areas where you may need additional study. You can practice our 300-410 free dumps today and get one step closer to achieving your certification goals.

Page 1 of 16

1. Refer to the exhibit.

While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured.

Which command resolves this issue?

access-class INTERNET in

ip access-group INTERNET in

ipv6 traffic-filter INTERNET in

ipv6 access-class INTERNET in

2. Refer to the exhibit.

The client server but the show command does not show the IPv6 DHCP bindings on the server.

Which action resolves the issue?

Extend the DHCP lease time because R1 removed the IPv6 address earlier after the lease expired.

Configure H1 as the DHCP client that manually assigns the IPv6 address on interlace e0/0..

Use the 2001:DBB:BAD:C0DE::/64 prefix for the DHCP pool on R1.

Configure authorized DHCP servers to avoid IPv6 addresses from a rogue DHCP server.

3. An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network.

Which BGP attribute must the engineer configure to avoid using the high-delay ISP link if the second ISP link is up?

LOCAL_PREF

MED

WEIGHT

AS-PATH

4. Refer to the exhibit.

Users in the branch network of 2001:db8:0:4::/64 report that they cannot access the Internet.

Which command is issued in IPv6 router EIGRP 100 configuration mode to solve this issue?

Issue the eigrp stub command on R1

Issue the no neighbor stub command on R2.

Issue the eigrp command on R2.

Issue the no eigrp stub command on R1.

5. Refer to the exhibit.

Which action resolves the issue?

Configure host IP address in access-list 16

Configure SNMPv3 on the router

Configure SNMP authentication on the router

Configure a valid SNMP community string

6. Refer to the exhibit.

After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and hub were not establishing.

Which two actions resolve the issue? (Choose two.)

Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3

Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.

Change the mode from mode tunnel to mode transport on R3

Change the mode from mode transport to mode tunnel on R2.

Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3

7. Exhibit:

BGP is flapping after the Copp policy is applied.

What are the two solutions to fix the issue? (Choose two)

Configure BGP in the COPP-CRITICAL-7600 ACL

Configure a higher value for CIR under the default class to allow more packets during peak traffic

Configure a higher value for CIR under the class COPP-CRITICAL-7600

Configure a three-color policer instead of two-color policer under class COPP-CRITICAL-7600

Configure IP CEF to CoPP policy and BGP to work

8. Refer to the exhibit.

The network engineer configured the summarization of the RIP routes into the OSPF domain on R5 but still sees four different 172.16.0.0/24 networks on R4.

Which action resolves the issue?

R5(config)#router ospf 1 R5(config-router)#no area R5(config-router)#summary-address 172.16.0.0 255.255.252.0

R4(config)#router ospf 99 R4(config-router)#network 172.16.0.0 0.255.255.255 area 56 R4(config-router)#area 56 range 172.16.0.0 255,255.255.0

R4(config)#router ospf 1 R4(config-router)#no area R4(config-router)#summary-address 172.16.0.0 255.255.252.0

R5(config)#router ospf 99 R5(config-router)#network 172.16.0.0 0.255.255.255 area 56 R5(config-router)#area 56 range 172.16.0.0 255.255.255.0

9. Refer to the exhibit.

Which control plane policy limits BGP traffic that is destined to the CPU to 1 Mbps and ignores BGP traffic that is sent at higher rate?

policy-map SHAPE_BGP

policy-map LIMIT_BGP

policy-map POLICE_BGP

policy-map COPP

10. Refer to the exhibit.

While troubleshooting a BGP route reflector configuration, an engineer notices that reflected routes are missing from neighboring routers.

Which two BGP configurations are needed to resolve the issue? (Choose two)

neighbor 10.1.1.14 route-reflector-client

neighbor R2 route-reflector-client

neighbor 10.1.1.2 allowas-in

neighbor R4 route-reflector-client

neighbor 10.1.1.2 route-reflector-client

Page 2 of 16

11. Refer to the exhibit.

Which configuration configures a policy on R1 to forward any traffic that is sourced from the 192.168.130.0/24 network to R2?

Option A

Option B

Option C

Option D

12. Refer to the exhibit.

An engineer has configured policy-based routing and applied the configured to the correct interface.

How is the configuration applied to the traffic that matches the access list?

It is sent to 209.165.202.131.

It is sent to 209.165.202.129.

It is dropped.

It is forwarded using the routing table lookup.

13. Which control plane process allows the MPLS forwarding state to recover when a secondary RP takes over from a failed primary RP?

MP-BGP uses control plane services for label prefix bindings in the MPLS forwarding table

LSP uses NSF to recover from disruption *i control plane service

FEC uses a control plane service to distribute information between primary and secondary processors

LDP uses SSO to recover from disruption in control plane service

14. Refer to the exhibit.

The AP status from Cisco DNA Center Assurance Dashboard shows some physical connectivity issues from access switch interface G1/0/14.

Which command generates the diagnostic data to resolve the physical connectivity issues?

test cable diagnostics tdr interface GigabitEthernet1/0/14

Check cable-diagnostics tdr interface GigabitEthernet1/0/14

show cable-diagnostics tdr interface GigabitEthernet1/0/14

Verify cable-diagnostics tdr interface GigabitEthernet1/0/14

15. Refer to the exhibit.

AS65510 iBGP is configured for directly connected neighbors. R4 cannot ping or traceroute network 192 168.100.0/24.

Which action resolves this issue?

Configure R4 as a route reflector server and configure R1 as a route reflector client

Configure R1 as a route reflector server and configure R2 and R3 as route reflector clients

Configure R4 as a route reflector server and configure R2 and R3 as route reflector clients.

Configure R1 as a route reflector server and configure R4 as a route reflector client

16. Refer to the exhibit.

A network engineer cannot remote access R3 using Telnet from switch S1.

Which action resolves the issue?

Allow the inbound connection via the exec command on R3.

Add the transport input telnet command on R3.

Allow to use the ssh -I admin 10.0.0.1 command on the switch.

Add the login admin command on the switch.

17. An engineer configured the wrong default gateway for the Cisco DNA Center enterprise interface during the install.

Which command must the engineer run to correct the configuration?

sudo maglev-config update

sudo maglev install config update

sudo maglev reinstall

sudo update config install

18. Refer to the exhibit.

An engineer configured two ASBRs, 10.4.17.6 and 10.4.15.5, in an OSPF network to redistribute identical routes from BGR However, only prefixes from 10.4.17.6 are installed into the routing table on R1.

Which action must the engineer take to achieve load sharing for the BGP-originated prefixes?

The ASBRs are advertising the redistributed prefixes with the iBGP metric and must be modified to Type 1 on ASBR 10.4.17.6.

The ASBRs are advertising the redistributed prefixes with a different admin distance and must be changed to 110 on ASBR 10.4.15.5.

The admin distance of the prefixes must be adjusted to 20 on ASBR 10.4.15.5 to advertise prefixes to R1 identically from both ASBRs.

The ASBRs are advertising the redistributed prefixes as Type 1 and must be modified to Type 2

19. Refer to the exhibit.

Which routes from OSPF process 5 are redistributed into EIGRP?

E1 and E2 subnets matching access list TO-OSPF

E1 and E2 subnets matching prefix list TO-OSPF

only E2 subnets matching access list TO-OSPF

only E1 subnets matching prefix listTO-OS1

20. Refer the exhibit.

Which action resolves intermittent connectivity observed with the SNMP trap packets?

Decrease the committed burst Size of the mgmt class map

Increase the CIR of the mgmt class map

Add a new class map to match TCP traffic

Add one new entry in the ACL 120 to permit the UDP port 161

Page 3 of 16

21. Refer to the exhibit.

A customer reported a failure and intermittent disconnection between two office buildings site X and site Y. The network team finds that site X and site Y are exchanging email application traffic with the data center network.

Which configuration resolves the issue between site X and site Y?

A)

Option A

Option B

Option C

Option D

22. Refer to the exhibit.

An engineer noticed that the router log messages do not have any information about when the event occurred.

Which action should the engineer take when enabling service time stamps to improve the logging functionality at a granular level?

Replace OSPF process 10 on the interfaces with OSPF process 1 and configure an additional router IO with IPv6 address

Replace OSPF process 10 on the interfaces with OSPF process 1. and remove process 10 from the global configuration

Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv6 address and remove process 10 from the global configuration

Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv4 address and remove process 10 from the global configuration

23. Refer to the exhibit.

The traffic from spoke to hub is dropping.

The operations team observes:

✑ R2-R3 link is down due to the fiber cut.

✑ R2 and R5 receive traffic from R1 in AS 65101.

✑ R3 and R5 receive traffic from R4 in AS 65201.

Which configuration resolves the issue?

A)

Option A

Option B

Option C

Option D

24. An engineer configured VRF-Lite on a router for VRF blue and VRF red. OSPF must be enabled on each VRF to peer to a directly connected router in each VRF.

Which configuration forms OSPF neighbors over the network 10.10.10.0/28 for VRF blue and 192.168.0.0/30 for VRF red?

Option A

Option B

Option C

Option D

25. Which mechanism must be chosen to optimize the reconvergence time for OSPF at company location 407173257 that is less CPU-intensive than reducing the hello and dead timers?

BFD

Dead Peer Detection keepalives

SSO

OSPF demand circuit

26. Refer to the exhibit.

An engineer configured SNMP traps to record spoofed packets drop of more than 48000 a minute on the ethernet0/0 interlace. During an IP spoofing attack, the engineer noticed that no notifications have been received by the SNMP server.

Which configuration resolves the issue on R1?

ip verity unicast notification threshold 48000

ip verify unicast notification threshold 8000

ip verify unicast notification threshold 800

ip verify unicast notification threshold 80

27. Refer to the exhibit.

R1 is configured with uRPF, and ping to R1 is failing from a source present in the R1 routing table via the GigatxtEthernet 0/0 interface.

Which action resolves the issue?

Remove the access list from the interface GigabrtEthernet 0/0

Modify the uRPF mode from strict to loose

Enable Cisco Express Forwarding to ensure that uRPF is functioning correctly

Add a floating static route to the source on R1 to the GigabitEthernet 0/1 interface

28. Refer to the exhibit.

The authentication is not working as desired and the user drops into user-exec mode.

Which configuration resolves the issue?

Option A

Option B

Option C

Option D

29. Refer to the exhibit.

An error message "an OSPF-4-FLOOD_WAR” is received on SW2 from SW1. SW2 is repeatedly receiving its own link-state advertisement and flushes it from the network.

Which action resolves the issue?

Change area 5 to a normal area from a nonstub area

Resolve different subnet mask issue on the link

Configure Layer 3 port channel on interfaces between switches

Resolve duplicate IP address issue in the network

30. DRAG DROP

Drag and drop the MPLS concepts from the left onto the descriptions on the right.

Page 4 of 16

31. Refer to the exhibit.

An engineer must redistribute networks 192.168.10.0/24 and 192.168.20.0/24 into OSPF from EIGRP. where the metric must be added when traversing through multiple hops to start an external route of 20. The engineer notices that the external metric is fixed and does not add at each hop.

Which configuration resolves the issue?

Option A

Option B

Option C

Option D

32. Refer to the exhibit.

Which configuration enables OSPF for area 0 interfaces to adjacency with a neighboring router with the same VRF?

router ospf 1 vrf CCNP interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0

router ospf 1 interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0

router ospf 1 vrf CCNP network 10.1.1.1 0.0.0.0 area 0 network 10.2.2.2 0.0.0.0 area 0

router ospf 1 vrf CCNP network 10.0.0.0 0.0.255.255 area 0

33. Refer to the exhibit.

Which action limits the access to R2 from 192.168.12.1?

Swap sequence 10 with sequence 20 in access-list 100.

Modify sequence 20 to permit tcp host 192.168.12.1 eq 22 any to access-list 100

Swap sequence 20 with sequence 10 in access-list 100

Modify sequence 10 to deny tcp any eq 22 any to access-list 100.

34. Refer to the exhibit

A CoPP policy is implemented to allow specific control traffic, but the traffic is not matching as expected and is getting unexpected behavior of control traffic.

Which action resolves the issue?

Use match-any instruction in class-map

Create a separate class map against each AC

Create a separate class map lor ICMP traffic.

Use default-class to match ICMP traffic

35. A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company’s security policy. The administrator can still ping to www.cisco.com.

Which interface should the access list 101 be applied to resolve this issue?

Interface G0/48 in the incoming direction

Interface G0/0 in the outgoing direction.

Interface S1/0 in the outgoing direction.

Interface G0/0 in the incoming direction.

36. What is a characteristic of IPv6 RA Guard?

RA messages are allowed from the host port to the switch

It is unable to protect tunneled traffic

It filters rogue RA broadcasts from connected hosts

It is supported on the egress direction of the switch

37. An engineer configured routing between multiple OSPF domains and introduced a routing loop that caused network instability.

Which action resolves the problem?

Set a tag using the redistribute command toward a domain and deny inbound m the other domain by a matching tag

Set a tag using the redistribute command toward a different domain and deny the matching tag when exiting from that domain

Set a tag using the network command in a domain and use the route-map command to deny the matching lag when exiting toward a different domain

Set a tag using the network command in a domain and use the route-map command to deny the matching tag when entering into a different domain

38. Refer to the exhibit.

An administrator is attempting to disable the automatic logout after a period of inactivity. After logging out the console stopped responding to all keyword inputs.

Remote access through SSH still work resolves the issue?

Configure the exec command on line con 0.

Configure the absolute-timeout command on line con 0.

Configure the default exec-timeout command on line con 0.

Configure the no exec-timeout command on line con 0.

39. Which function does LDP provide in an MPLS topology?

It enables a MPLS topology to connect multiple VPNs to P routers.

It provides hop-by-hop forwarding in an MPLS topology for LSRs.

It exchanges routes for MPLS VPNs across different VRFs.

It provides a means for LSRs to exchange IP routes.

40. Refer to the exhibit.

The administrator is trying to overwrite an existing file on the TFTP server that was previously uploaded by another router. However, the attempt to update the file fails.

Which action resolves this issue?

Make the packages.conf file executable by all on the TFTP server

Make the packages.conf file writable by all on the TFTP server

Make sure to run the TFTP service on the TFTP server

Make the TFTP folder writable by all on the TFTP server

Page 5 of 16

41. Which attribute eliminates LFAs that belong to protected paths in situations where links in a network are connected through a common fiber?

shared risk link group-disjoint

linecard-disjoint

lowest-repair-path-metric

interface-disjoint

42. An engineer configured access list NON-CISCO in a policy to influence routes

What are the two effects of this route map configuration? (Choose two.)

Packets are not evaluated by sequence 10.

Packets are evaluated by sequence 10.

Packets are forwarded to the default gateway.

Packets are forwarded using normal route lookup.

Packets are dropped by the access list.

43. Refer to the exhibit.

AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server.

Which action resolves this issue?

Match the authentication port

Match the accounting port

Correct the timeout value.

Correct the shared secret.

44. Refer to the exhibit.

A network administrator configured NetFlow data, but the data is not visible at the NetFlow collector.

Which configuration allows the router to send the records?

Configure the management interface in the global routing table to send the records.

Configure a different interface to send the records.

Configure the NetFlow collector to listen at export-protocol netflow-v5.

Rectify NetFlow collector reachability from the management interface.

45. Refer to the exhibit.

R1 is being monitored using SNMP and monitoring devices are getting only partial information.

What action should be taken to resolve this issue?

Modify the CoPP policy to increase the configured exceeded limit for SNM

Modify the access list to include snmptrap.

Modify the CoPP policy to increase the configured CIR limit for SNM

Modify the access list to add a second line to allow udp any any eq snmp

46. A customer reports to the support desk that they cannot print from their PC to the local printer id:401987778.

Which tool must be used to diagnose the issue using Cisco DNA Center Assurance?

application trace

path trace

ACL trace

device trace

47. A network administrator must optimize the segment size of the TCP packet on the DMVPN IPsec protected tunnel interface, which carries application traffic from the head office to a designated branch. The TCP segment size must not overwhelm the MTU of the outbound link.

Which configuration must be applied to the router to improve the application performance?

Option A

Option B

Option C

Option D

48. Refer to the exhibit.

An engineer implemented an access list on R1 to allow anyone to Telnet except R2 Loopback0 to R1 Loopback4.

How must sequence 20 be replaced on the R1 access list to resolve the issue?

sequence 20 permit tcp host 1001 ABC:2011:7:: 1 host 400A:0:400C::1 eq telnet

sequence 20 deny tcp host 400A:0:400C::1 host 1001 :ABC:2011:7::1 eq telnet

sequence 20 deny tcp host 1001:ABC:2011:7::1 host 400A:0:400C::1 eq telnet

sequence 20 permit tcp host 400A:0:400C::1 host 1001ABC:2011:7::1 eq telnet

49. Refer to the exhibit.

Packets arriving from source 209.165.200.215 must be sent with the precedence bit set to 1, and packets arriving from source 209.165.200.216 must be sent with the precedence bit set to 5.

Which action resolves the issue?

set ip precedence critical in route-map Texas permit 10

set ip precedence critical in route-map Texas permit 20

set ip precedence immediate in route-map Texas permit 10

set ip precedence priority in route-map Texas permit 20

50. Refer to the exhibit. An engineer is trying to log in to R1 via R3 loopback address.

Which action resolves the issue?

Add transport input SCP

Add transport input none

Remove the IPv6 traffic filter from R1, which is blocking the Telnet.

Remove the IPv6 traffic from R1, which is blocking the SSH

Page 6 of 16

51. Refer to the exhibit.

The R1 and R2 configurations are:

The neighbor is not coming up.

Which two sets of configurations bring the neighbors up? (Choose two.)

R2 ip route 10.1.1.1 255.255.255.255 192.168.1.1 ! router bgp 200 neighbor 10.1.1.1 tti-security hops 1 neighbor 10.1.1.1 update-source loopback 0

R2 ip route 10.1.1.1 255.255.255.255 192.168.1.1 ! router bgp 200 neighbor 10.1.1.1 disable-connected-check neighbor 10.1.1.1 update-source loopback 0

R2 ip route 10.1.1.2 255.255.255.255 192.168.1.2 ! router bgp 100 neighbor 10.1.1.2 ttl-security hops 1 neighbor 10.1.1.2 update-source loopback 0

R1 ip route 10.1.1.2 255.255.255.255 192.168.1.2 ! router bgp 100 neighbor 10.1.1.1 ttl-security hops 1 neighbor 10.1.1.2 update-source loopback 0

R1 ip route 10.1.1.2 255.255.255.255 192.168.1.2 ! router bgp 100 neighbor 10.1.1.2 disable-connected-check neighbor 10.1.1.2 update-source Loopback0

52. Refer to the exhibit.

An engineer must configure a per VRF for TACACS+ for company A.

Which configuration on RTG-1 accomplishes the task?

Option A

Option B

Option C

Option D

53. Which IPv6 first hop security feature controls the traffic necessary for proper discovery of neighbor device operation and performance?

RA Throttling

Source or Destination Guard

ND Multicast Suppression

IPv6 Snooping

54. When provisioning a device in Cisco DNA Center, the engineer sees the error message “Cannot select the device. Not compatible with template”.

What is the reason for the error?

The template has an incorrect configuration.

The software version of the template is different from the software version of the device.

The changes to the template were not committed.

The tag that was used to filter the templates does not match the device tag.

55. What must a network architect consider for RTs when planning for a single customer full-mesh VPN m an MPLS Layer 3 network?

RT must be globally unique within the same VPN

RT must be globally identical within the same VPN

RT values must be Afferent from the RD values in the same VPN

Each RT value must be identical to an RD value within the same VP

56. Refer to the exhibit.

R1 is configured with IP SLA to check the availability of the server behind R6 but it kept failing.

Which configuration resolves the issue?

R6(config)# ip sla responder

R6(config)# ip sla responder udp-echo ip address 10.10.10.1 port 5000

R6(config)# ip access-list extended DDOS R6(config ext-nac)# 5 permit icmp host 10.66 66.66 host 10.10.10.1

R6(config)# ip access-list extended DDOS R6(confg ext-nac)# 5 permit icmp host 10.10.10.1 host 10.66.66.66

57. Refer to the exhibit.

Why is user authentication being rejected?

The TACACS+ server expects “user”, but the NT client sends “domain/user”.

The TACACS+ server refuses the user because the user is set up for CHA

The TACACS+ server is down, and the user is in the local database.

The TACACS+ server is down, and the user is not in the local database.

58. DRAG DROP

Drag and drop the MPLS terms from the left onto the correct definitions on the right.

59. What is the role of a route distinguisher via a VRF-Lite setup implementation?

It extends the IP address to identify which VFP instance it belongs to.

It manages the import and export of routes between two or more VRF instances

It enables multicast distribution for VRF-Lite setups to enhance EGP routing protocol capabilities

It enables multicast distribution for VRF-Lite setups to enhance IGP routing protocol capabilities

60. DRAG DROP

Drag and drop the packet types from the left onto the correct descriptions on the right.

Page 7 of 16

61. Refer to the exhibit.

The route to 192 168 200 0 is flapping between R1 and R2.

Which set of configuration changes resolves the flapping route?

Option A

Option B

Option C

Option D

62. Refer to Exhibit.

Which statement about redistribution from BGP into OSPF process 10 is true?

Network 172.16.1.0/24 is not redistributed into OSP

Network 10.10 10.0/24 is not redistributed into OSPF

Network 172.16.1.0/24 is redistributed with administrative distance of 1.

Network 10.10.10.0/24 is redistributed with administrative distance of 20.

63. Refer to the exhibit.

The default route is not advertised to the neighboring router.

Which action resolves the issue?

Configure the redistribute static metric 200 subnets command under OSP

Configure OSPF on the Dialer0 interface.

Configure the network 0.0.0.0 255.255.255.255 area 0 command under OSP

Configure the default-information originate command under OSP

64. Refer to the exhibit.

An engineer configured route exchange between two different companies for a migration project EIGRP routes were learned in router C but no OSPF routes were learned in router A.

Which configuration allows router A to receive OSPF routes?

(config-router-af)#redistribute ospf 10 1000000 10 255 1 1500

(config-routeraf-topology)#redistribute ospf 10 metric 1000000 10 255 1 1500

(config-router-af-topology)#redistribute connected

(config-router-af-topology )£no redistribute ospf 10 match external 1 external 2 metric 1000000 10 255 1 1500

65. Refer to the exhibit.

During ISP router maintenance, the network produced many alerts because of the flapping interface.

Which configuration on R1 resolves the issue?

no snmp trap link-status

snmp trap link-status down

snmp trap ip verify drop-rate

ip verify drop-rate notify hold-down 60

66. Refer to the exhibit.

A network administrator sets up an OSPF routing protocol for a DMVPN network on the hub router.

Which configuration required to establish a DMVPN tunnel with multiple spokes?

ip ospf network point-to-multipoint on both spoke routers

ip ospf network point-to-point on the hub router

ip ospf network point-to-multipoint on One spoke router

ip ospf network point-to-point on both spoke routers

67. Refer to the exhibit.

The Internet traffic should always prefer Site-A ISP-1 if the link and BGP connection are up; otherwise, all Internet traffic should go to ISP-2 Redistribution is configured between BGP and OSPF routing protocols and it is not working as expected.

What action resolves the issue?

Set metric-type 2 at Site-A RTR1, and set metric-type 1 at Site-B RTR2

Set OSPF cost 100 at Site-A RTR1, and set OSPF Cost 200 at Site-B RTR2

Set OSPF cost 200 at Site: A RTR1 and set OSPF Cost 100 at Site-B RTR2

Set metric-type 1 at Site-A RTR1, and set metric-type 2 at Site-B RTR2

68. An engineer is trying to copy an IOS file from one router to another router by using TFTP.

Which two actions are needed to allow the file to copy? (Choose two.)

Copy the file to the destination router with the copy tftp: flash: command

Enable the TFTP server on the source router with the tftp-server flash: <filename> command

TFTP is not supported in recent IOS versions, so an alternative method must be used

Configure a user on the source router with the username tftp password tftp command

Configure the TFTP authentication on the source router with the tftp-server authentication local command

69. Refer to the exhibit.

An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead of current best path.

Which action resolves the issue?

Configure AS_PATH prepend for the desired best path

Configure higher MED to select as the best path.

Configure lower LOCAL_PREF to select as the best path.

Configure AS_PATH prepend for the current best path

70. Refer to the exhibit.

An engineer wanted to set a tag of 30 to route 10 1.80.65/32 but it failed.

How is the issue fixed?

Modify route-map ospf-to-eigrp permit 30 and match prefix-list ccnp2.

Modify route-map ospf-to-eigrp permit 10 and match prefix-list ccnp2.

Modify prefix-list ccnp3 to add 10.1.64.0/20 le 24

Modify prefix-list ccnp3 to add 10.1.64.0/20 ge 32

Page 8 of 16

71. Refer to the exhibit.

An engineer configures two ASBRs 10 4 17.6 and 10 4 15 5 in an OSPF network to redistribute routes from EIGRP However, both ASBRs show the EIGRP routes as equal costs even though the next-hop router 10 4 17 6 is closer to R1.

How should the network traffic to the EIGRP prefixes be sent via 10 4.17.6?

The administrative distance should be raised to 120 from the ASBR 10.4.15 5.

The redistributed prefixes should be advertised as Type 1

The ASBR 10 4 17 6 should assign a tag to match and assign a lower metnc on R1

The administrative distance should be raised to 120 from the ASBR 104.17.6

The admitstrative distance should be raised to 120 from the ASBR 104 15.5.

The redistributed prefixes should be advertised as Type 1.

The ASBR 10 4 17 6 should assign a tag to match and assign a tower metnc on R1

The administrative distance should be raised to 120 from the ASBR 104 17 6

72. An administrator attempts to download the pack NBAR2 file using TFTP from the CPE router to another device over the Gi0/0 interface.

The CPE is configured as below:

The transfer fails.

Which action resolves the issue?

Change the WAN ACL to permit the UDP port 69 to allow TFTP

Make the permit udp any eq tftp any entry the last entry in the WAN AC

Change the WAN ACL to permit the entire UDP destination port range

Shorten the file name to the 8+3 naming convention.

73. Refer to the exhibit.

A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands.

Which action resolves the issue?

Configure TACACS+ synchronization with the Active Directory admin group

Configure the username from a local database

Configure full access for the username from TACACS+ server

Configure an authorized IP address for this user to access this router

74. Refer to the exhibit.

An engineer must configure OSPF with R9 and R10 and configure redistribution between OSPF and RIP causing a routing loop.

Which configuration on R9 and R10 meets this objective?

A)

Option

75. Refer to the exhibit.

A network administrator redistributed the default static route into OSPF toward all internal routers to reach to Internet.

Which set of commands restores reachability to the Internet by internal routers?

router ospf 1 default-information originate

router ospf 1 network 0.0.0.0 0.0.0.0 area 0

router ospf 1 redistribute connected 0.0.0.0

router ospf 1 redistribute static subnets

76. R2 has a locally originated prefix 192.168.130.0/24 and has these configurations:

What is the result when the route-map OUT command is applied toward an eBGP neighbor R1 (1.1.1.1) by using the neighbor 1.1.1.1 route-map OUT out command?

R1 sees 192.168.130.0/24 as two AS hops away instead of one AS hop away.

R1 does not accept any routes other than 192.168.130.0/24

R1 does not forward traffic that is destined for 192.168.30.0/24

Network 192.168.130.0/24 is not allowed in the R1 table

77. Which statement about IPv6 RA Guard is true?

It does not offer protection in environments where IPv6 traffic is tunneled.

It cannot be configured on a switch port interface in the ingress direction.

Packets that are dropped by IPv6 RA Guard cannot be spanned.

It is not supported in hardware when TCAM is programmed.

78. Refer to the exhibit.

An engineer configures DMVPN and receives the hub location prefix of 10.1.1.0724 on R2 and R3. The R3 prefix of 10 1.3.0/24 is not received on R2. and the R2 prefix 10.1,2.0/24 is not received on R3.

Which action reserves the issue?

Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the command no ip split-horizon eigrp 10 on the tunnel interface of R1

There is no spoke-to-spoke connection DMVPN configuration should be modified to enable a tunnel connection between R2 and R3 and neighbor relationship confirmed by use of the show ip eigrp neighbor command

Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the no ip split-horizon eigrp 10 command on the Gi0/0 interface of R1.

There is no spoke-to-spoke connection DMVPN configuration should be modified with a manual neighbor relationship configured between R2 and R3 and confirmed bb use of the show ip eigrp neighbor command.

79. What is the function of BFD?

It provides uniform failure detection regardless of media type.

It creates high CPU utilization on hardware deployments.

It negotiates to the highest version if the neighbor version differs.

It provides uniform failure detection on the same media type.

80. Refer to the exhibit.

The R1 routing table has the prefixes for the FTP1 and FTP2 file servers.

A network engineer must configure the R1 with these requirements:

✑ Host1 must use the FTP1 fileserver.

✑ Host2 must use the FTP2 fileserver.

Which configuration meets the requirement on R1?

A)

Option A

Option B

Option C

Option D

Page 9 of 16

81. What is a characteristic of Layer 3 MPLS VPNs?

LSP signaling requires the use of unnumbered IP links for traffic engineering.

Traffic engineering supports multiple IGP instances

Traffic engineering capabilities provide QoS and SLAs.

Authentication is performed by using digital certificates or preshared keys.

82. Refer to the exhibit.

The none area 0 routers in OSPF still receive more specific routes of 10.1.1.0.10.1.2.0.10.1.3.0 from area 0.

Which action resolves the issue?

Configure route summarization on OSPF-enabled interfaces.

Summarize by using the summary-address 10.1.0.0 255.255.252.0 command.

Summarize by using the area range command on ABRs

Configure the summary-address 10.1.0.0 255.255.252.0 command under OSPF process.

83. DRAG DROP

Drag and drop the DHCP messages from the left onto the correct uses on the right.

84. Refer to the exhibit.

An engineer must establish a point-to-point GRE VPN between R1 and the remote site.

Which configuration accomplishes the task for the remote site?

Interface Tunnel1 tunnel source 199.1.1.1 tunnel destination 200.1.1.3 ip address 192.168.1.3 255.255.255.0

Interface Tunnel1 tunnel source 200.1.1.3 tunnel destination 199.1.1.1 ip address 192.168.1.1.255.255.255.0

Interface Tunnel1 tunnel source 200.1.1.3 tunnel destination 199.1.1.1 ip address 192.168.1.3.255.255.255.0

Interface Tunnel lunnel source 199.1.1.1 tunnel destination 200.1.1.3 ip address 192.168.1.1.255.255.255.0

85. Refer to the exhibit.

An engineer configured SNMP Commîmes on UserSW2 switch, but the SNMP server cannot upload modified configurations to the switch.

Which configuration resolves this issue?

snmp-server community Ciscowruser RW 11

snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22

snmp-server community CiscOUs3r RW 11

snmp-server group NETVIEW v2c priv read NETVIEW access 11

86. CORRECT TEXT

A DMVPN network is preconfigured with tunnel 0 IP address 192.168.1.254 on the HUB, IP connectivity, crypto policies, profiles, and EIGRP AS 100. The NHRP password is ccnp123, and the network ID and tunnel key is EIGRP ASN Do not introduce a static route.

Configure DMVPN connectivity between routers BR1 and BR2 to the HUB router using physical interface as the tunnel source to achieve these goals:

87. Refer to the exhibit.

After the network administrator rebuilds the IPv6 DHCP server, clients are not getting the IPv6 address lease.

Which action resolves the issue?

Remove FE80 A8BB CCFF FEOO 5000 assigned by the IPV6 DHCP server.

Add Ipv6 dhcp sarver MY_POOL under the interface ethernet 0/0 on H1.

Add Ipv6 dhcp server MY_POOL under the interface ethernet 0/0 on R1.

Configure FF02::1:2 to discover al IPv6 OHCP cfcents

88. Refer to the exhibit.

After a security audit, the administrator implemented an ACL in the route reflector. The RR became unreachable from any router in the network.

Which two actions resolve the issue? (Choose two.)

Enable the ND proxy feature on the default gateway.

Configure a link-local address on the Ethernet0/1 interface.

Permit ICMPv6 neighbor discovery traffic in the AC

Remove the ACL entry 80.

Change the next hop of the default route to the link-local address of the default gateway.

89. Refer to the exhibit.

An engineer implemented CoPP but did not see OSPF traffic going through it.

Which configuration resolves the issue?

ip access-list extended OSPF permit ospf any any

policy-map COPP class OSFP police 8000 conform-action transmit exceed-action transmit violate-action drop

control-plane service-policy input COPP

class-map match-all OSFP match access-group name OSPF

90. Which method provides failure detection in BFD?

short duration, high overhead

short duration, low overhead

long duration, high overhead

long duration, low overhead

Page 10 of 16

91. Refer to the exhibit

A customer reported an issue with a fiber link failure between RC and RE Users connected through the spoke location face disconnection and packet drops with the primary email server (172.16.16.1) but have no issues with the backup email server (172.16.26.1). All the router loopback IPs are advertised through the OSPF protocol.

Which configuration resolves the issue?

Option A

Option B

Option C

Option D

92. A network engineer must configure a DMVPN network so that a spoke establishes a direct path to another spoke if the two must send traffic to each other. A spoke must send traffic directly to the hub if required.

Which configuration meets this requirement?

Option

93. Exhibit:

An engineer configured R2 and R5 as route reflectors and noticed that not all routes are sent to R1 to advertise to the eBGP peers.

Which iBGP routers must be configured as route reflectors to advertise all routes to restore reachability across all networks?

R1 and R4

R1 and R5

R4 and R5

R2 and R5

94. Refer to the exhibit.

A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log message stream it is impossible to capture the problem.

Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two)

debug condition interface

debug condition ip

debug condition ospf neighbor

debug condition session-id ADJCHG

debug condition all

95. Refer to the exhibit.

The ACL is placed on the inbound Gigabit 0/1 interface of the router. Host 192.168.10.10cannot SSH to host 192.168.100.10 even though the flow is permitted.

Which action resolves the issue without opening full access to this router?

Move the SSH entry to the beginning of the ACL

Temporarily move the permit ip any any line to the beginning of the ACL to see if the flow works

Temporarily remove the ACL from the interface to see if the flow works

Run the show access-list FILTER command to view if the SSH entry has any hit statistic associated with it

96. Refer to the exhibit.

An administrator is troubleshooting a time synchronization problem for the router time to another Cisco IOS XE-based device that has recently undergone hardening.

Which action resolves the issue?

Allow NTP in the ingress ACL on 10.1.225.40 by permitting UDP destined to port 123.

Ensure that he CPE router has a valid route to 10.1.255. 40 for NTP and rectify if not reachable.

NTP service is disabled and must be enabled on 10.1.225.40.

Allow NTP in the ingress ACL on 10.1.255.40 by permitting TCP destined to port 123.

97. Refer to the exhibit.

An administrator must upload the packages conf Me to an FTP server.

However, the FTP server rejected anonymous service and required users to authenticate

What are the two ways to resolve the issue? (Choose two.)

Use is ftp username and ip ftp password configuration commands to specify valid FTP server credentials.

Use the copy flash:packages.conf scp: command instead and enter the FTP server credentials when prompted.

Enter the FTP server credentials directly In the FTP URL using the ftp://username:passwordQ192.0.2.40/ syntax.

Create a user on the rooter matching the username and password on the FTP server and log in before attempting the copy

Use the copy flash-packages conf ftp: command instead and enter the FTP server credent-ais when prompted.

98. Refer to the exhibit.

A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer fails.

Which action resolves this issue?

The SSH service must be enabled with the crypto key generate rsa command.

The SCP service must be enabled with the ip scp server enable command.

The Python interpreter must first be enabled with the guestshell enable command.

The SSH access must be allowed on the VTY lines using the transport input ssh command.

99. Refer to the exhibit.

A network engineer for AS64512 must remove the inbound and outbound traffic from link A during maintenance without closing the BGP session so that there ............ a backup link over link A toward the ASN.

Which BGP configuration on R1 accomplishes this goal?

A)

Option A

Option B

Option C

Option D

100. Refer to the exhibit.

Which command must be configured to make VRF CCNP work?

interface Loopback0 vrf forwarding CCNP

interface Loopback0 ip address 10.1.1.1 255.255.255.0

interface Loopback0 ip address 10.1.1.1 255.255.255.0 vrf forwarding CCNP

interface Loopback0 ip address 10.1.1.1 255.255.255.0 ip vrf forwarding CCNP

Page 11 of 16

101. Refer to the exhibit.

A network administrator must block ping from user 3 to the App Server only. An inbound standard access list is applied to R1 interface G0/0 to block ping. The network administrator was notified that user 3 cannot even ping user 9 anymore.

Where must the access list be applied in the outgoing direction to resolve the issue?

R2 interface G1/0

R2 interface G0/0

SW1 interface G1/10

SW1 interface G2/21

102. Refer to the exhibit.

Which two actions should be taken to access the server? (Choose two.)

Modify the access list to add a second line of permit ip any

Modify the access list to deny the route to 192.168.2.2.

Modify distribute list seq 10 to permit the route to 192.168.2.2.

Add a sequence 20 in the route map to permit access list 1.

Add a floating static route to reach to 192.168.2.2 with administrative distance higher than OSPF

103. Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

VACL blocking broadcast frames from nonauthorized hosts

PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

PVLANs with community ports associated to route advertisements and isolated ports for nodes

IPv4 ACL blocking route advertisements from nonauthorized hosts

104. Refer to the exhibit.

A bank ATM site has difficulty connecting with the bank server. A network engineer troubleshoots the issue and finds that R4 has no active route to the bank ATM site.

Which action resolves the issue?

Advertise 10.10.30.0/24 subnet in R1 EIGRP A

EIGRP peering between R3 and R4 to be fixed.

EIGRP peering between R1 and R2 to be fixed.

Advertise 10.10.30.0/24 subnet in R3 EIGRP A

105. Refer to exhibit.

Routing protocols are mutually redistributed on R3 and R1. Users report intermittent connectivity to services hosted on the 10.1.1.0/24 prefix. Significant routing update changes are noticed on R3 when the show ip route profile command is run.

How must the services be stabilized?

The issue with using BGP must be resolved by using another protocol and redistributing it into EIGRP on R3

The routing loop must be fixed by reducing the admin distance of iBGP from 200 to 100 on R3

The routing loop must be fixed by reducing the admin distance of OSPF from 110 to 80 on R3

The issue with using iBGP must be fixed by running eBGP between R3 and R4

106. What are the two goals of micro BFD sessions? (Choose two.)

The high bandwidth member link of a link aggregation group must run BFD

Run the BFD session with 3x3 ms hello timer

Continuity for each member link of a link aggregation group must be verified

Eny member link on a link aggregation group must run BFD

Each member link of a link aggregation group must run BF

107. Refer to the exhibit.

The Customer Edge router (AS 65500) wants to use ASC100 as the preferred ISP for all external routes.

This configuration failed to send routes to AS 100 as the preferred path.

Which set of configuration resolves the issue?

Option A

Option B

Option C

Option D

108. After some changes in the routing policy, it is noticed that the router in AS 45123 is being used as a transit AS router for several service provides.

Which configuration ensures that the branch router in AS 45123 advertises only the local networks to all SP neighbors?

A)

Option A

Option B

Option C

Option D

109. Refer to the exhibit.

An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+.

Which action produces the desired configuration?

Add the aaa authentication login default none command to the global configuration.

Replace the capital “C” with a lowercase “c” in the aaa authentication login Console local command.

Add the aaa authentication login default group tacacs+ local-case command to the global configuration.

Add the login authentication Console command to the line configuration

110. Refer to the exhibit.

During troubleshooting it was discovered that the device is not reachable using a secure web browser.

What is needed to fix the problem?

permit tcp port 443

permit udp port 465

permit tcp port 465

permit tcp port 22

Page 12 of 16

111. Refer to the exhibit.

# Show IP route on R1

All the serial between R1, R2, and R3 have the Same bandwidth. User on the 192.168.1.0/24 network report slow response times while they access resource on network 192.168.3.0/24. When a traceroute is run on the path. It shows that the packet is getting forwarded via R2 to R3 although the link between R1 and R3 is still up.

What must the network administrator to fix the slowness?

Change the Administrative Distance of EIGRP to 5.

Add a static route on R1 using the next hop of R3.

Remove the static route on R1.

Redistribute theR1 route to EIGRP

112. Refer to the exhibit.

An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead

of current best path.

Which action resolves the issue?

Configure AS_PATH prepend for the current best path

Configure higher MED to select as the best path

Configure AS_PATH prepend for the desired best path

Configure lower LOCAL_PREF to select as the best path

113. Which two solutions are used to overcome a flapping link that causes a frequent label binding exchange between MPLS routers? (Choose two)

Create link dampening on links to protect the session.

Increase input queue on links to protect the session.

Create targeted hellos to protect the session.

Increase a hold-timer to protect the session.

Increase a session delay to protect the session.

114. Refer to the exhibit.

The ISP router is fully configured for customer A and customer B using the VRF-Lite feature.

What is the minimum configuration required for customer A to communicate between routers A1 and A2?

A. A1

interface fa0/0

description To->ISP

ip add 172.31.100.1 255.255.255.0

no shut

!

router ospf 100

net 172.31.100.1 0.0.0.255 area 0

A2

interface fa0/0

description To->ISP

ip add 172.31.200.1 255.255.255.0

no shut

!

router ospf 100

net 172.31.200.1 0.0.0.255 area 0

B. A1

interface fa0/0

description To->ISP

ip vrf forwarding A

ip add 172.31.100.1 255.255.255.0

no shut

!

router ospf 100

net 172.31.100.1 0.0.0.255 area 0

A2

interface fa0/0

description To->ISP

ip vrf forwarding A

ip add 172.31.200.1 255.255.255.0

no shut

!

router ospf 100

net 172.31.200.1 0.0.0.255 area 0

C. A1

interface fa0/0

description To->ISP

ip add 172.31.200.1 255.255.255.0

no shut

!

router ospf 100

net 172.31.200.1 0.0.0.255 area 0

A2

interface fa0/0

description To->ISP

ip add 172.31.100.1 255.255.255.0

no shut

!

router ospf 100

net 172.31.100.1 0.0.0.255 area 0

D. A1

interface fa0/0

description To->ISP

ip vrf forwarding A

ip add 172.31.100.1 255.255.255.0

no shut

!

router ospf 100 vrf A

net 172.31.200.1 0.0.0.255 area 0

A2

interface fa0/0

description To->ISP

ip vrf forwarding A

ip add 172.31.100.1 255.255.255.0

no shut

!

router ospf 100 vrf A

net 172.31.200.1 0.0.0.255 area 0

115. Refer to the exhibit.

The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).

router bgp 64511

network 172.16.20.0 mask 255.255.255.0

network 172.16.21.0 mask 255.255.255.0

network 172.16.22.0 mask 255.255.255.0

network 172.16.23.0 mask 255.255.255.0

aggregate-address 172.16.20.0 255.255.252.0

After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route.

Which configuration resolves the issue?

router bgp 64511 aggregate-address 172.16.20.0 255.255.252.0 summary-only

router bgp 64511 neighbor 192.168.100.1 summary-only neighbor 192.168.200.2 summary-only

interface E 0/0 ip bgp suppress-map BLOCK_SPECIFIC ! interface E 0/1 ip bgp suppress-map BLOCK_SPECIFIC ! ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24 ! route-map BLOCK_SPECIFIC permit 10 match ip address prefix-list PL_BLOCK_SPECIFIC

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22 ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22 ! route-map BLOCK_SPECIFIC permit 10 match ip address prefix-list PL_BLOCK_SPECIFIC ! router bgp 64511 aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

116. Refer to the exhibit.

The Math and Science departments connect through the corporate. IT router but users in the Math department must not be able to reach the Science department and vice versa.

Which configuration accomplishes this task?

vrf definition Science interface E 0/2 ip address 192.168.1.1 255.255.255.0 no shut interface E 0/3 ip address 192.168.2.1 255.255.255.0 no shut

vrf definition Science address-family ipv4 ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 vrf forwarding Science no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 vrf forwarding Science no shut

vrf definition Science address-family ipv4 ! interface E 0/2 ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 ip address 192.168.2.1 255.255.255.0 no shut

vrf definition Science address-family ipv4 ! interface E 0/2 vrf forwarding Science ip address 192.168.1.1 255.255.255.0 no shut ! interface E 0/3 vrf forwarding Science ip address 192.168.2.1

117. Refer to the exhibit.

An engineer configures SW101 to send OSPFv3 interfaces state change messages to the server. However, only some OSPFv3 errors are being recorded. which organization resolves the ..?

snmp-server enable traps ospfv3 state-change if-state-change

snmp-server-enable traps ospfv3 state-change restart-status-change

snmp-server-enable traps ospfv3 state-change neighbor-state-change.

snmp-server-enable traps ospfv3 state-change if-state-change neighbor-state-change

118. Refer to the exhibit.

A network engineer must establish communication between three different customer sites with these requirements:

✑ Site-A: must be restricted to access to any users at Site-B or Site-C.

✑ Site-B and Site-C must be able to communicate between sites and share routes

using OSPF.

Which configuration meets the requirements?

Option A

Option B

Option C

Option D

119. Which table is used to map the packets in an MPLS LSP that exit from the same interface, via the same next hop, and have the same queuing policies?

RIB

FEC

LDP

CEF

120. Which 0S1 model is used to insert an MPLS label?

between Layer 5 and Layer 6

between Layer 1 and Layer 2

between Layer 3 and Layer 4

between Layer 2 and Layer 3

Page 13 of 16

121. What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)

The VPNv4 address is used to advertise the MPLS VPN label.

RD is prepended to the IPv4 route to make it unique.

MP-BGP is used to allow overlapping IPv4 addresses between customers to advertise through the network.

The IPv4 address is needed to tag the MPLS label.

The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4 prefix.

122. A customer reports that traffic is not passing on an EIGRP enabled multipoint interface on a router configured as below:

interface Serial0/0

no ip address

interface Server0/0/0.9 multipoint

ip address 10.1.1.1 255.255.255.248

ip split-horizon eigrp 1

Which action resolves the issue?

Enable poison reverse

Enable split horizon

Disable poison reverse

Disable split horizon

123. Which two components are required for MPLS Layer 3 VPN configuration? (Choose two)

Use pseudowire for Layer 2 routes

Use MP-BGP for customer routes

Use OSPF between PE and CE

Use a unique RD per customer VRF

Use LDP for customer routes

124. Refer to the exhibit.

The engineer configured and connected Router2 to Router1. The link came up but could not establish a Telnet connection to Router1 IPv6 address of 2001:DB8::1.

Which configuration allows Router2 to establish a Telnet connection to Router1?

jpv6 unicast-routing

permit ICMPv6 on access list INGRESS for Router2 to obtain IPv6 address

permit ip any any on access list EGRESS2 on Router1

IPv6 address on GigabitEthernet0/0

125. Which command is used to check IP SLA when an interface is suspected to receive lots of traffic with options?

show track

show threshold

show timer

show delay

126. Refer to the exhibit.

An engineer must filter EIGRP updates that are received to block all 10 10 10.0/24 prefixes. The engineer tests the distribute list and finds one associated prefix.

Which action resolves the issue?

There is a permit in the route map that allows this prefix A deny 20 statement is required with a match condition to match a new ACL that denies all prefixes

There is a permit in the ACL that allows this prefix into EI6R

The ACL should be modified to deny 10.10.10.0 0.0.0.255.

There is a permit in the route map that allows this prefix A deny 20 statement is required with no match condition to block the prefix.

There is a permit in the ACL that allows this prefix into EIGR

The ACL should be modified to deny 10.10.10.0 255.255.255.0.

127. Refer to the exhibit.

The administrator can see the traps for the failed login attempts, but cannot see the traps of successful login attempts.

What command is needed to resolve the issue?

Configure logging history 2

Configure logging history 3

Configure logging history 4

Configure logging history 5

128. An engineer notices that R1 does not hold enough log messages to Identity the root cause during troubleshooting.

Which command resolves this issue?

#logging buffered 4096 critical

(config)#logging buffered 16000 informational

#logging buffered 16000 critical

(config)#logging buffered 4096 informational

129. Refer to the exhibit.

The connected routers do not show up as OSPF neighbors.

Which action resolves the issue?

Change the R1 dead timer to 20.

Change the R2 dead timer to 20.

Change the R2 hello timer to 20.

Change the R1 hello timer to 20.

130. A network administrator cannot connect to a device via SSH.

The line vty configuration is as follows:

Which action resolves this issue?

Increase the session timeout

Change the stopbits to 10.

Configure the transport input SSH

initialize the SSH key

Page 14 of 16

131. Refer to the exhibit.

A network is under a cyberattack. A network engineer connected to R1 by SSH and enabled the terminal monitor via SSH session to find the source and destination of the attack. The session was flooded with messages, which made it impossible for the engineer to troubleshoot the issue.

Which command resolves this issue on R1?

no terminal monitor

(config)#terminal no monitor

#terminal no monitor

(config)#no terminal monitor

132. Refer to the exhibit.

Reachability between servers in a network deployed with DHCPv6 is unstable.

Which command must be removed from the configuration to make DHCPv6 function?

ipv6 dhcp server DHCPPOOL

ipv6 address 2001:0:1:4::/64

ipv6 nd ra suppress

address prefix 2001:0:1:4::/64 lifetime infinite infinite

133. What is an advantage of using BFD?

It detects local link failure at layer 1 and updates routing table.

It detects local link failure at layer 2 and updates routing protocols.

It has sub-second failure detection for layer 1 and layer 3 problems.

It has sub-second failure detection for layer 1 and layer 2 problems.

134. Refer to the exhibit.

An engineer must configure EIGRP between R1 and R2 with no summary route.

Which configuration resolves the issue?

A)

Option A

Option B

Option C

Option D

135. Which list defines the contents of an MPLS label?

20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL

20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit

136. Refer to the exhibit.

The administrator configured route advertisement to a remote low resources router to use only the default route to reach any network but failed.

Which action resolves this issue?

Change the direction of the distribute-list command from out to in.

Remove the line with the sequence number 5 from the prefix list.

Remove the prefix keyword from the distribute-list command.

Remove the line with the sequence number 10 from the prefix list.

137. Which two statements about redistributing EIGRP into OSPF are true? (Choose two)

The redistributed EIGRP routes appear as type 3 LSAs in the OSPF database

The redistributed EIGRP routes appear as type 5 LSAs in the OSPF database

The administrative distance of the redistributed routes is 170

The redistributed EIGRP routes appear as OSPF external type 1

The redistributed EIGRP routes as placed into an OSPF area whose area ID matches the EIGRP autonomous system number

The redistributed EIGRP routes appear as OSPF external type 2 routes in the routing table

138. A customer requested a GRE tunnel through the provider network between two customer sites using loopback to hide internal networks.

Which configuration on R2 establishes the tunnel with R1?

R2(config)# interface Tunnel 1 R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1400 R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 192.168.20.1 R2(config-if)# tunnel destination 192.168.10.1

R2(config)# interface Tunnel 1 R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1400 R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 10.10.2.2 R2(config-if)# tunnel destination 10.10.1.1

R2(config)# interface Tunnel 1 R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1500 R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 192.168.20.1 R2(config-if)# tunnel destination 10.10.1.1

R2(config)# interface Tunnel 1 R2(config-if)# ip address 172.20.1.2 255.255.255.0 R2(config-if)# ip mtu 1500 R2(config-if)# ip tcp adjust-mss 1360 R2(config-if)# tunnel source 10.10.2.2 R2(config-if)# tunnel destination 10.10.1.1

139. Refer to the exhibit.

The administrator successfully logs into R1 but cannot access privileged mode commands.

What should be configured to resolve the issue?

aaa authorization reverse-access

secret cisco123! at the end of the username command instead of password cisco123!

matching password on vty lines as cisco123!

enable secret or enable password commands to enter into privileged mode

140. How is VPN routing information distributed in an MPLS network?

The top level of the customer data packet directs it to the correct CE device

It is established using VPN IPsec peers.

It is controlled using of VPN target communities.

It is controlled through the use of R

Page 15 of 16

141. An engineer configured Reverse Path Forwarding on an interface and noticed that the routes are dropped when a route lookup fails on that interface for a prefix that is available in the routing table.

Which interface configuration resolves the issue?

ip verify unicast source reachable-via rx

ip verify unicast source reachable-via any

ip verify unicast source reachable-via allow-default

ip verify unicast source reachable-via 12-src

142. Which two methods use IPsec to provide secure connectivity from the branch office to the headquarters office? (Choose two.)

DMVPN

MPLS VPN

Virtual Tunnel Interface (VTI)

SSL VPN

PPPoE

143. Refer to the exhibit.

An IPv6 network was newly deployed in the environment and the help desk reports that R3 cannot SSH to the R2s Loopback interface.

Which action resolves the issue?

Modify line 10 of the access list to permit instead of deny.

Remove line 60 from the access list.

Modify line 30 of the access list to permit instead of deny.

Remove line 70 from the access list.

144. How does LDP operate in an MPLS network?

When topology changes occur such as a router failure, LDP generates peer discovery messages that terminate the LDP season to propagate an LSP change.

When an adjacent LSR receives LDP discovery messages. TCP two-way handshake ensures that the LDP session has unidirectional connectivity.

Peer routers establish the LDP session, and the LDP neighbors maintain and terminate the session by exchanging messages

LDP notification messages allow LERs to exchange label information to determine the next hops within a particular LS

145. An engineer must configure a Cisco router to initiate secure connections from the router to other devices in the network but kept failing.

Which two actions resolve the issue? (Choose two.)

Configure a source port for the SSH connection to initiate

Configure a TACACS+ server and enable it

Configure transport input ssh command on the console

Configure a domain name

Configure a crypto key to be generated

146. Refer to the exhibit.

The security department recently installed a monitoring device between routers R3 and R5, which a loss of network connectivity for users connected to R5. Troubleshooting revealed that the monitoring device cannot forward multicast packets. The team already updated R5 with the correct configuration.

Which configuration must be implemented on R3 to resolve the problem by ensuring R3 as the DR for the R3-R5 segment?

A)

Option A

Option B

Option C

Option D

147. Which method changes the forwarding decision that a router makes without first changing the routing table or influencing the IP data plane?

nonbroadcast multiaccess

packet switching

policy-based routing

forwarding information base

148. DRAG DROP

Drag and drop the MPLS VPN device types from the left onto the definitions on the right.

149. Refer to the exhibit.

An engineer applied filter on R1. The interface flapped between R1 and R2 and cleaning the BGP session did not restore the BGP session and failed.

Which action must the engineer take to restore the BGP session from R2 to R1?

Apply the IPv6 traffic filter in the outbound direction on the interface

ICMPv6 must be permitted by the IPv6 traffic filter

Enable the BGP session, which went down when the session was cleared.

Swap the source and destination IP addresses in the IPv6 traffic filter

150. In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router.

Which command is required on both spoke routers to communicate directly to one another?

ip nhrp map dynamic

ip nhrp shortcut

ip nhrp nhs multicast

ip nhrp redirect

Page 16 of 16

151. Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?

multi-paths eibgp 2

maximum-paths 2

Maximum-paths ibgp 2

multi-paths 2

152. Refer to the exhibit.

Which action restores the routes from neighbors while still filtering 1.1.1.0/24?

Add a second line in the access list to permit any.

Modify the route map to permit the access list instead of deny it

Modify the access list to deny instead of permit it.

Add a second sequence in the route map permit 20

153. Refer to the exhibit.

Routers R1, R2, R3, and R4 use EIGRP However, traffic always prefers R1 to R5 backup links in nonfailure scenarios.

Which configuration resolves the issue?

A)

Option A

Option B

Option C

Option D

154. A DMVPN single hub topology is using IPsec + mGRE with OSPF.

What should be configured on the hub to ensure it will be the designated router?

tunnel interface of the hub with ip nhrp ospf dr

OSPF priority to 0

route map to set the metrics of learned routes to 110

OSPF priority greater than 1

155. What are two characteristics of a VRF instance? (Choose two)

It is defined by the VPN membership of a customer site attached to a P device.

Each VRF has a different set of routing and CEF tables.

AII VRFS share customers routing and CEF tables.

An interface must be associated to one VRF

A customer site can be associated to different VRFs.

156. Refer to the exhibit.

Which statement about R1 is true?

OSPF redistributes RIP routes only if they have a tag of one.

RIP learned routes are distributed to OSPF with a tag value of one.

R1 adds one to the metric for RIP learned routes before redistributing to OSP

RIP routes are redistributed to OSPF without any changes.

157. Refer to the exhibit.

The enterprise users fail to authenticate with the TACACS server when a direct fiber link fails between RB and RD.

The NOC team observes:

✑ Users connected on AS65201 fail to authenticate with TACACS server 192 168 1 1

✑ Users connected on AS65101 successfully authenticate with TACACS server 192 168 1 1

✑ All AS65101 and AS65201 users are configured to authenticate with the TACACS server

Which configuration resolves the issue?

A)