Practice Free 300-410 Exam Online Questions
What is a function of an end device configured with DHCPv6 guard?
- A . If it is configured as a server, only prefix assignments are permitted.
- B . If it is configured as a relay agent, only prefix assignments are permitted.
- C . If it is configured as a client, messages are switched regardless of the assigned role.
- D . If it is configured as a client, only DHCP requests are permitted.
C
Explanation:
The DHCPv6 Guard feature blocks reply and advertisement messages that come from unauthorized DHCP servers and relay agents.
Packets are classified into one of the three DHCP type messages. All client messages are always switched regardless of device role. DHCP server messages are only processed further if the device role is set to server. Further processing of server messages includes DHCP server advertisements (for source validation and server preference) and DHCP server replies (for permitted prefixes).
If the device is configured as a DHCP server, all the messages need to be switched, regardless of the device role configuration.
What is a function of an end device configured with DHCPv6 guard?
- A . If it is configured as a server, only prefix assignments are permitted.
- B . If it is configured as a relay agent, only prefix assignments are permitted.
- C . If it is configured as a client, messages are switched regardless of the assigned role.
- D . If it is configured as a client, only DHCP requests are permitted.
C
Explanation:
The DHCPv6 Guard feature blocks reply and advertisement messages that come from unauthorized DHCP servers and relay agents.
Packets are classified into one of the three DHCP type messages. All client messages are always switched regardless of device role. DHCP server messages are only processed further if the device role is set to server. Further processing of server messages includes DHCP server advertisements (for source validation and server preference) and DHCP server replies (for permitted prefixes).
If the device is configured as a DHCP server, all the messages need to be switched, regardless of the device role configuration.
What is a role of route distinguishers in an MPLS network?
- A . Route distinguishers define which prefixes are imported and exported on the edge router
- B . Route distinguishers allow multiple instances of a routing table to coexist within the edge router.
- C . Route distinguishers are used for label bindings.
- D . Route distinguishers make a unique VPNv4 address across the MPLS network
Refer to the exhibit.
While troubleshooting an EIGRP neighbor adjacency problem, the network engineer notices that the interface connected to the neighboring router is not participating in the EIGRP process.
Which action resolves the issues?
- A . Configure the network command to network 172.16.0.1 0.0.0.0
- B . Configure the network command under EIGRP address family vrf CLIENT1
- C . Configure EIGRP metrics on interface FastEthernet0/3
- D . Configure the network command under EIGRP address family ipv4
B
Explanation:
router eigrp 1
!
address-family ipv4 vrf CLIENT1
network 172.16.0.0 0.0.0.255
no auto-summary
autonomous-system 1
exit-address-family
A customer requested a GRE tunnel through the provider network between two customer sites using loopback to hide internal networks.
Which configuration on R2 establishes the tunnel with R1?
- A . R2(config)# interface Tunnel 1
R2(config-if)# ip address 172.20.1.2 255.255.255.0
R2(config-if)# ip mtu 1400
R2(config-if)# ip tcp adjust-mss 1360
R2(config-if)# tunnel source 192.168.20.1
R2(config-if)# tunnel destination 192.168.10.1 - B . R2(config)# interface Tunnel 1
R2(config-if)# ip address 172.20.1.2 255.255.255.0
R2(config-if)# ip mtu 1400
R2(config-if)# ip tcp adjust-mss 1360
R2(config-if)# tunnel source 10.10.2.2
R2(config-if)# tunnel destination 10.10.1.1 - C . R2(config)# interface Tunnel 1
R2(config-if)# ip address 172.20.1.2 255.255.255.0
R2(config-if)# ip mtu 1500
R2(config-if)# ip tcp adjust-mss 1360
R2(config-if)# tunnel source 192.168.20.1
R2(config-if)# tunnel destination 10.10.1.1 - D . R2(config)# interface Tunnel 1
R2(config-if)# ip address 172.20.1.2 255.255.255.0
R2(config-if)# ip mtu 1500
R2(config-if)# ip tcp adjust-mss 1360
R2(config-if)# tunnel source 10.10.2.2
R2(config-if)# tunnel destination 10.10.1.1
DRAG DROP
Drag and drop the operations from the left onto the locations where the operations are performed on the right.
Explanation:
Label Switch Router
Which protocol must be secured with MD-5 authentication across the MPLS cloud to prevent hackers from introducing bogus routers?
- A . MP-BGP
- B . LSP
- C . RSVP
- D . LDP
An engneer must configure encrypted packets for a single router OSPF neighoorsMp.
Which configuration meets this requirement?
- A . Option A
- B . Option B
- C . Option C
- D . Option D
Refer to the exhibit.
An administrator wanted to make R1 always elected as DR. R2 as BDR. and R3 as DROTHER but could not achieve the desired results.
Which two configurations resolve the issue? (Choose two.)
- A . On the R1 FO/0 interface, configure OSPF priority to 255.
- B . On the R2 FO/0 interface, configure OSPF priority to 201.
- C . On the R1 F0/0 interface, configure OSPF priority to 202.
- D . On the R3 FO’O interface, configure OSPF priority to 201.
- E . On the R2 FO/0 interface, configure OSPF priority to 200.
Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?
- A . VACL blocking broadcast frames from nonauthorized hosts
- B . PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes
- C . PVLANs with community ports associated to route advertisements and isolated ports for nodes
- D . IPv4 ACL blocking route advertisements from nonauthorized hosts
B
Explanation:
The IPv6 Router Advertisement Guard feature provides support for allowing the network administrator to block or reject unwanted or rogue router advertisement guard messages that arrive at the network device platform. Router Advertisements are used by devices to announce themselves on the link. The IPv6 Router Advertisement Guard feature analyzes these router advertisements and filters out router advertisements that are sent by unauthorized devices.
Certain switch platforms can already implement some level of rogue RA filtering by the administrator configuring Access Control Lists (ACLs) that block RA ICMP messages that might be inbound on “user” ports.
Reference: https://datatracker.ietf.org/doc/html/rfc6104