Practice Free 300-410 Exam Online Questions
Refer to the exhibit.
The network administrator has configured the Customer Edge router (AS 64511)
to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).
router bgp 64511
network 172.16.20.0 mask 255.255.255.0
network 172.16.21.0 mask 255.255.255.0
network 172.16.22.0 mask 255.255.255.0
network 172.16.23.0 mask 255.255.255.0
aggregate-address 172.16.20.0 255.255.252.0
After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route.
Which configuration resolves the issue?
- A . router bgp 64511
aggregate-address 172.16.20.0 255.255.252.0 summary-only - B . router bgp 64511
neighbor 192.168.100.1 summary-only
neighbor 192.168.200.2 summary-only - C . interface E 0/0
ip bgp suppress-map BLOCK_SPECIFIC
!
interface E 0/1
ip bgp suppress-map BLOCK_SPECIFIC
!
ip prefix-list PL_BLOCK_SPECIFIC
permit 172.16.20.0/22 ge 24
!
route-map BLOCK_SPECIFIC permit 10
match ip address prefix-list PL_BLOCK_SPECIFIC - D . ip prefix-list PL_BLOCK_SPECIFIC
deny 172.16.20.0/22 ge 22
ip prefix-list PL BLOCK SPECIFIC
permit 172.16.20.0/22
!
route-map BLOCK_SPECIFIC permit 10
match ip address prefix-list PL_BLOCK_SPECIFIC
!
router bgp 64511
aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC
A
Explanation:
When the aggregate-address command is used within BGP routing, the aggregated address is advertised, along with the more specific routes. The exception to this rule is through the use of the summary-only command. The “summary-only” keyword suppresses the more specific routes and announces only the summarized route.
Refer to the exhibit.
A shoe retail company implemented the uRPF solution for an antispoofing attack. A network engineer received the call that the branch A server is under an IP spoofing attack.
Which configuration must be implemented to resolve the attack?
A)
B)
C)
D)
- A . Option A
- B . Option B
- C . Option C
- D . Option D
Refer to the exhibit.
An engineer is trying to add an encrypted user password that should not be visible in the router configuration.
Which two configuration commands resolve the issue? (Choose two)
- A . password encryption aes
- B . username Admin password Cisco@maedeh motamedi
- C . username Admin password 5 Cisco@maedeh motamedi
- D . username Admin secret Cisco@maedeh motamedi
- E . no service password-encryption
- F . service password-encryption
In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router.
Which command is required on both spoke routers to communicate directly to one another?
- A . ip nhrp map dynamic
- B . ip nhrp shortcut
- C . ip nhrp nhs multicast
- D . ip nhrp redirect
Refer to the exhibit.
A customer reports that user traffic of bank XYZ to the AAA server is not using the primary path via the R3-R2 link.
The network team observes:
No fiber is cut on links R2 and R3.
As101 and AS 201 routers established BGP peering.
Which configuration resolves the issue?
A)
B)
C)
D)
- A . Option A
- B . Option B
- C . Option C
- D . Option D
Refer to the exhibit.
An engineer must filter prefixes that originate from AS65412. but it is not working correctly.
Which configuration must the engineer apply to R1 to resolve the issue?
- A . Option A
- B . Option B
- C . Option C
- D . Option D
What are two functions of IPv6 Source Guard? (Choose two.)
- A . It uses the populated binding table for allowing legitimate traffic.
- B . It works independent from IPv6 neighbor discovery.
- C . It denies traffic from unknown sources or unallocated addresses.
- D . It denies traffic by inspecting neighbor discovery packets for specific pattern.
- E . It blocks certain traffic by inspecting DHCP packets for specific sources.
A,C
Explanation:
Refer to the exhibit.
An engineer must advertise routes into IPv6 MP-BGP and failed.
Which configuration resolves the issue on R1?
- A . router bgp 65000
no bgp default ipv4-unicast
address-family ipv6 multicast
network 2001:DB8::/64 - B . router bgp 65000
no bgp default ipv4-unicast
address-family ipv6 unicast
network 2001:DB8::/64 - C . router bgp 64900
no bgp default ipv4-unicast
address-family ipv6 unicast
network 2001:DB8::/64 - D . router bgp 64900
no bgp default ipv4-unicast
address-family ipv6 multicast
neighbor 2001:DB8:7000::2 translate-update ipv6 multicast
Which protocol must be secured with MD-5 authentication across the MPLS cloud to prevent hackers from introducing bogus routers?
- A . MP-BGP
- B . LSP
- C . RSVP
- D . LDP
Which feature is required for IPv6 Source Guard to block traffic arriving on the server interface from unknown sources?
- A . Dynamic ARP Inspection
- B . IPv6 RA Guard
- C . IPv6 ND Inspection
- D . DHCPv6 Guard