ENARSI_300-410_May_2023-v1.2.pdf

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)
Exam Name: Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)
Exam Code: 300-410
Exam Price: $300 (USD)
Duration: 90 mins
Number of Questions: 60
Passing Score: 825/1000
Get Latest & Actual Exam's Question and Answers from © Homer CO., LTD. We cover ALL Cisco and Non-Cisco Exam
Dumps. Cisco Written & LAB Dump, Comptia, AWS, Azure, Oracle, Huawei, Aruba, Fortinet, F5 101 & F5 201, RedHat
Linux, Comptia, CEHv11, Palo Alto, Check Point, EC Council and many more.
"We make sale ONLY if the dump is stable" Contact us: cciehomer@gmail.com Whatsapp +1-302-440-1843
Developed by: Emma & Liam
Dump Vendor: Homer Co., Ltd.
Website: COMING SOON
Contact us: cciehomer@gmail.com
© 2021 Homer Co., Ltd.
Get Latest & Actual Exam's Question and Answers from © Homer CO., LTD. We cover ALL Cisco and Non-Cisco Exam Dumps.
Cisco Written & CCIE LAB Dump, AWS, Azure, Oracle, Huawei, Aruba, Fortinet, F5 101 & F5 201, RedHat Linux, Comptia, CEHv11, Palo Alto, Check Point, EC Council and many more.
CCIEHOMER "We make sale ONLY if the dump is stable" Contact us: cciehomer@gmail.com Whatsapp +1-302-440-1843 homerwilliams@cciehomer.com
CCIEHOMER We provide Pratice Test's in PDF and VCE format. FREE VCE PLAYER

Exam A Update 28th April 2023 (83)
QUESTION 1
The network administrator must configure R1 to authenticate Telnet connections based on Cisco ISE using RADIUS. ISE has been configured with an IP
address of 192.168.1.5 and with a network device pointing toward R1 (192.168.1.1) with a shared secret password of Cisco123. The administrator has
configured this on R1:
aaa new-model
!
radius server ISE1
address ipv4 192.168.1.5
key Cisco123
!
aaa group server tacacs+ RAD-SERV
server name ISE1
!
aaa authentication login default group RAD-SERV
The network administrator cannot authenticate to access R1 based on ISE. Which set of configurations fixes the issue?
A. line vty 0 4
login authentication default
B. line vty 0 4
login authentication RAD-SERV
C. aaa group server radius RAD-SERV
server name ISE1
D. aaa group server tacacs+ ISE1
server name RAD-SERV
Correct Answer: C
QUESTION 2
Refer to the exhibit.

An engineer noticed that the router log messages do not have any information about when the event occurred. Which action should the engineer take
when enabling service time stamps to improve the logging functionality at a granular level?
A. Configure the debug uptime option
B. Configure the msec option
C. Configure the timezone option
D. Configure the log uptime option
Correct Answer: D
QUESTION 3

A network engineer received a call from the vendor for a failed attempt to remotely log in to their managed router loopback interface from 192.168.40.15.
Which action must the network engineer take to resolve the issue?

A. The IP access list VENDOR must be applied to interface loopback 100.
B. The source IP summarization must be updated to include the vendor source IP address.
C. The EIGRP configuration must be updated to include a network statement for loopback 100.
D. The time-range configuration must be changed to use absolute instead of periodic.
Correct Answer: B
QUESTION 4
The IPv6 network is under attack by an unknown source that is neither in the binding table nor learned through neighbor discovery. Which feature helps
prevent the attack?
A. IPv6 Destination Guard
B. IPv6 Prefix Guard
C. IPv6 Router Advertisement Guard
D. IPv6 Snooping
Correct Answer: A
QUESTION 5
An engineer configures two ASBRs, 10.4.17.6 and 10.4.15.5, in an OSPF network to redistribute routes from EIGRP. However, both ASBRs show the
EIGRP routes as equal costs even though the next-hop router 10.4.17.6 is closer to R1. How should the network traffic to the EIGRP prefixes be sent via

10.4.17.6?
A. The administrative distance should be raised to 120 from the ASBR 10.4.15.5.
B. The ASBR 104.176 should assign a tag to match and assign a lower metric on R1.
C. The administrative distance should be raised to 120 from the ASBR 104.17.6
D. The redistributed prefixes should be advertised as Type 1
Correct Answer: D
QUESTION 6
What is the purpose of an OSPF sham-link?
A. to correct OSPF backdoor routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
B. to allow inter-area routing when OSPF is used as the PE-CE connection protocol in a MPLS VPN network
C. to correct OSPF backdoor routing when OSPF is used as the PE-PE connection protocol in an MPLS VPN network
D. to allow intra-area routing when OSPF is used as the PE-CE connection protocol in an MPLS VPN network
Correct Answer: A
QUESTION 7

A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log
messages stream, it is impossible to capture the problem. Which two commands reduce console log messages to relevant OSPF neighbor problem
details so that the issue can be resolved? (Choose two)
A. debug condition all
B. debug condition ip
C. debug condition session-id ADJCHG
D. debug condition ospf neighbor
E. debug condition interface
Correct Answer: CE
QUESTION 8

A shoe retail company implemented the uRPF solution for an antispoofing attack. A network engineer received the call that the branch A server is under
an IP spoofing attack. Which configuration must be implemented to resolve the attack?

A. R4
interface ethernet0/1
ip unicast RPF check reachable-via any allow-default alllow-self-ping
B. R3
ip unicast RPF check reachable-via any allow default alllow-self-ping
C. R3
ip verify unicast source reachable-via any allow-default allow-self-ping
D. R4
ip verify unicast source reachable-via any allow-default allow-self-ping
Correct Answer: C
QUESTION 9
router ospfv3 1
router-id 10.1.1.1
address-family ipv4 unicast
passive-interface Loopback0
exit-address-family
address-family ipv6 unicast
passive-interface Loopback0
exit-address-family
interface Loopback0
ip address 10.1.1.1 255.255.255.255
ipv6 address 2001:DB8::1/64
ospfv3 10 ipv4 area 10
interface GigabitEthernet2
ip address 10.10.10.1 255.255.255.0
ipv6 enable
An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established
and did not meet the requirement. Which action resolves the issue?
A. Replace OSPF process 10 on the interfaces with OSPF process 1 for the IPv4 address, and remove process 10 from the global configuration
B. Replace OSPF process 10 on the interfaces with OSPF process 1, and remove process 10 from the global configuration

C. Replace OSPF process 10 on the interfaces with OSPF process 1, and configure an additional router ID with IPv6 address
D. Option is missing. B is right answer so don't worry about this missing option.
Correct Answer: B
QUESTION 10
Bangkok is using ECMP to reach the 172.20.2.0/24 network. The network administrator must configure it in such a way that traffic from 172.16.2.0/24
network uses the Singapore router as the preferred route. Which set of configurations accomplishes this task?
A. Bangkok

access-list 101 permit ip 172.16.2.0 0.0.0.255 172.20.2.0 0.0.0.255
!
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.19.1.2
!
interface Ethernet0/2
ip policy route-map PBR1
B. Dubai
!
!
C. Bangkok
!
!
D. Dubai
!
set ip next-hop peer-address
!
Correct Answer: A
QUESTION 11
Which failure detection mechanism is used for BFD?

A. routing protocol failure
B. Layer 2 protocol failure
C. variable rate
D. consistent rate
Correct Answer: A
QUESTION 12
The network administrator must configure Cape Town to reach Dubai via Tokyo based on the speeds provided by the service provider. It was noticed
that Cape Town is reaching Dubai directly and failed to meet the requirement. Which configuration fixes the issue?
A. CapeTown
router eigrp 100

variance 2
B. Dubai
router eigrp 100
variance 2
C. Cape Town
interface E 0/0
bandwidth 5000
interface E 0/1
bandwidth 10000
Dubai
interface E 0/0
bandwidth 50000
interface E 0/1
bandwidth 5000
Tokyo
interface E 0/0
bandwidth 50000
interface E 0/1
bandwidth 10000
D. CapeTown
interface E0/0
bandwidth 5000
??? (missing command)
Correct Answer: D
QUESTION 13

A network engineer is troubleshooting a failed link between R2 and R3. No traffic loss is reported from router R5 to HQ. Which command fixes the
separated backbone?
A. R2(config-router)#area 21 virtual-link 192.168.125.5
B. R3(config-router)#no area 21 stub
C. R3(config-router)#area 21 virtual-link 192.168.125.5
D. R2(config-router)#no area 21 stub
Correct Answer: B

QUESTION 14
How is a preshared key “Test” for all the remote VPN routers configured in a DMVPN using GRE over IPsec set up?
A. authentication pre-share Test address 0.0.0.0 0.0.0.0
B. set pre-share Test address 0.0.0.0 0.0.0.0
C. crypto ipsec key Test address 0.0.0.0 0.0.0.0
D. crypto isakmp key Test address 0.0.0.0 0.0.0.0
Correct Answer: D
QUESTION 15
Network operations report issues with receiving too many external routes, which caused CPU spoke on routers with smaller memories. Which action
resolves the issue?
A. Configure the area range command when redistributing on ASBR
B. Configure the area range command when redistributing on ABR
C. Configure the summary-address command when redistributing on ABR
D. Configure the summary-address command when redistributing on ASBR
Correct Answer: D
QUESTION 16
Switch(config)# ip vrf 70
Switch(config-vrf)# rd 70:1
Switch(config-vrf)# route-target export 70:1
Switch(config-vrf)# route-target import 70:1
Switch(config-vrf)# exit
Switch(config)# ip vrf 80
Switch(config-vrf)# rd 80:1
Switch(config-vrf)# route-target export 80:1
Switch(config-vrf)# route-target import 80:1
An engineer must extend VRF-Lite over a trunk to another switch for VLAN 70 (10.70.70.0/24) on port GigabitEthernet0/0 and VLAN 80 (10.80.80.0/24)
on port GigabitEthernet0/1. Which configuration accomplishes this objective?
A. interface GigabitEthernet0/0
switchport mode access
switchport access vlan 70

!
interface GigabitEthernet0/1
B. interface GigabitEthernet0/0
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 70
!
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 80
C. interface GigabitEthernet0/0
ip vrf forwarding 70
!
!
D. interface GigabitEthernet0/0
no switchport
ip address 10.70.70.1 255.255.255.0
!
no switchport
ip address 10.80.80.1 255.255.255.0
Correct Answer: B
QUESTION 17
Drag and drop the descriptions from the left onto the corresponding MPLS components on the right.

A. -> routers that connect to the customer routers known as PE routers: LER
-> routers in the core of the provider network known as P routers: LSR
-> path along which the traffic flows across an MPLS network: LSP
-> all traffic to be forwarded using the same path and same label: FEC
-> used for exchanging label mapping information between MPLS enabled routers: LDP
Correct Answer: A
QUESTION 18
The network administrator configured the router for Control Plane Policing so that inbound SSH traffic is policed to 500 kbps. This policy must apply to
traffic coming in from 10.10.10.0/24 and 192.168.10.0/24 networks.
access-list 100 permit ip 10.10.10.0 0.0.0.255 any
access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq 23
!
class-map CLASS-SSH
match access-group 100
!
policy-map PM-COPP
class CLASS-SSH
police 500000 conform-action transmit
!
interface E0/0
service-policy input PM-COPP
!
interface E0/1

The Control Plane Policing is not applied to SSH traffic and SSH is open to use any bandwidth available. Which configuration resolves this issue?
A. no access-list 100
!
interface E0/0
no service-policy input PM-COPP
!
interface E0/1
!
control-plane
B. interface E0/0
!
interface E0/1
!
control-plane
C. no access-list 100
D. no access-list 100
!
policy-map PM-COPP
class CLASS-SSH
Correct Answer: A
QUESTION 19

The Customer Edge router (AS 65500) wants to use AS 100 as the preferred ISP for all external routes.
Customer Edge
route-map SETLP
set local-preference 111
!
router bgp 65500
neighbor 192.168.111.1 remote-as 100
neighbor 192.168.111.1 route-map SETLP out
This configuration failed to send routes to AS 100 as the preferred path. Which set of configurations resolves the issue?
A. route-map SETLP
!

router bgp 65500
neighbor 192.168.111.1 route-map SETLP in
B. route-map SETPP
set as-path prepend 111 111
!
router bgp 65500
neighbor 192.168.111.1 route-map SETPP out
C. route-map SETPP
set as-path prepend 100 100
!
router bgp 65500
neighbor 192.168.111.1 route-map SETPP in
D. route-map SETLP
!
router bgp 65500
neighbor 192.168.111.1 …
Correct Answer: A
QUESTION 20

The network administrator configured BGP as the backup route for 10.0.0.0/8 and it should work only when EIGRP 10.0.0.0/8 failed to install for site
S4266T8E713F6. Which configuration resolves the issued?
A. configure terminal
!
router eigrp 1
distance eigrp 90 170

B. configure terminal
!
ip route 10.0.0.0 269.0.0.0 192.168.90.2
C. configure terminal
!
router eigrp 1
redistribute bgp metric 10000 1 255 1 1500
D. configure terminal
!
router eigrp 1
distance eigrp 10 170
Correct Answer: D
QUESTION 21
interface GigabitEthernet2
no ip address
ip helper-address 192.168.255.3
no shutdown
!
interface GigabitEthernet2.10
encapsulation dot1Q 210
ip address 192.168.210.1 255.255.255.0
ip ospf 1 area 0
no shutdown
With the partial configuration of a router-on-a-stick, clients in VLAN 10 on Gi2 cannot obtain IP configuration from the central DHCP server. The DHCP
server is reachable by a successful ping from the router. Which action resolves the issue?
A. Configure the ip dhcp excluded-address 192.168.255.3 command on the Gi2.10 subinterface
B. Configure a valid IP address on the Gi2 interface so that DHCP requests can be forwarded
C. Configure the ip dhcp pool 1 and network 192.168.210.0 255.255.255.0 commands
D. Configure the ip helper-address 192.168.255.3 command on the Gi2.10 subinterface
Correct Answer: D
QUESTION 22
An engineer configured routing between multiple OSPF domains and introduced a routing loop that caused network instability. Which action resolves the
problem?

A. Set a tag using the redistribute command toward a domain and deny inbound in the other domain by a matching tag
B. Set a tag using the redistribute command toward a different domain and deny the matching tag when exiting from that domain
C. Set a tag using the network command in a domain and use the route-map command to deny the matching tag when exiting toward a different
domain
D. Set a tag using the network command in a domain and use the route-map command to deny the matching tag when entering into a different domain
Correct Answer: A
QUESTION 23
An engineer must configure OSPF with R9 and R10 and configure redistribution between OSPF and RIP, causing a routing loop. Which configuration on
R9 and R10 meets this objective?

A. router ospf 1
redistribute rip subnets tag 20
!
route-map deny_tag20 deny 10
match tag 20
route-map deny_tag20 permit 20
!
B. router ospf 1
distribute-list route-map deny_tag20 in
router ospf 1
!
match tag 20
route-map deny tag20 permit 20
!
C. router ospf 1
router ospf 1
!
match tag 20
route-map deny tag20 deny 20
!
router ospf 1
D. router ospf 1
!
match tag 20
!
router rip 1
Correct Answer: D
QUESTION 24

R1# configure terminal
R1(config)# hostname CPE1
CPE1(config)# ip domain-name example.com
CPE1(config)# crypto key generate rsa
The name for the keys will be: CPE1.example.com
Choose the size of the key modulus in the range of 360 to 4096
for your General Purpose Keys. Choosing a key modulus greater than 512
may take a few minutes.
How many bits in the modulus [512]: 2048
% Generating 2048 bit RSA keys, keys will be non-exportable...
[OK] (elapsed time was 2 seconds)
CPE1(config)# service password-encryption
CPC1(config)# username csadmin secret Secur3p4s$w0rd
CPE1(config)# line vty 0 4
CPE1(config-line)# transport input telnet ssh
CPE1(config-line)# login local
CPE1(config-line)# end
CPE1# copy running-config startup-config
Destination filename [startup-config]?
Building configuration...
[OK]
CPE1# ssh 10.0.0.1
% No user specified nor available for SSH client
An administrator must harden a router, but the administrator failed to test the SSH access successfully to the router. Which action resolves the issue?
A. SSH syntax must be ssh -l user ip to log in to the remote device
B. Configure enable secret to log in to the device
C. SSH must be allowed with the transport output ssh command
D. Configure SSH on the remote device to log in using SSH
Correct Answer: A
QUESTION 25
The summary route is not shown in the Router_B routing table after this below configuration on Router_A:
interface ethernet 0
description location ID:$4295T7B39P69

ip address 192.168.3.1 255 255 255 0
ip summary-address eigrp 1 172.16.80.0 255.255.240.0
Which Router_A configuration resolves the issue by advertising the summary route to Router_B?
A. interface loopback 0
ip address 172.16.81.1 255.255.255.0
interface Ethernet 0
ip address 192.168.3.1 255.255.255.0
B. interface loopback 0
ip address 172.18.81.1 255.255.255.0
ip address 192.168.3.1 255.255.255.0
C. interface loopback 0
ip address 172.16.79.1 255.255.255.0
ip address 192.168.3.1 255.255.255.0
D. interface loopback 0
ip address 172.16.96.1 255.255.255.0
ip address 192.168.3.1 255.255.255.0
Correct Answer: A
QUESTION 26
ip sla 1
icmp-echo 8.8.8.8
threshold 1000
timeout 2000
frequency 5
ip sla schedule 1 life forever start-time now
!
track 1 ip sla 1
!
ip route 0.0.0.0 0.0.0.0 203.0.113.1 name ISP1 track 1
ip route 0.0.0.0 0.0.0.0 198.51.100.1 name ISP2

After recovering from a power failure. Ethernet0/1 stayed down while Ethernet0/0 returned to the up/up state. The default route through ISP1 was not
reinstated in the routing table until Ethernet0/1 also came up. Which action resolves the issue?
A. Remove the references to the interface names from both static default routes.
B. Configure the default route through ISP1 with a higher administrative distance than 2.
C. Add a static route to the 8.8.8.8/32 destination through the next hop 203.0.113.1.
D. Reference the track object 1 in both static default routes.
Correct Answer: D
QUESTION 27
R1(config)#ip access-list standard EIGRP-FILTER
R1(config-std-nacl)# permit 10.10.10.0 0.0.0.255
R1(config)#router eigrp 10
R1(config-router)#distribute-list route-map EIGRP in
!
R1(config)#route-map EIGRP permit 10
R1(config-route-map)#match ip address EIGRP-FILTER
!
R1#show ip route eigrp
D 10.10.10.0/24
An engineer must filter incoming EIGRP updates to allow only a set of specific prefixes. The distribute list is tested, and it filters out all routes except
network 10.10.10.0/24. How should the engineer temporarily allow all prefixes to be learned by the router again without adjusting the existing access list?
A. A continue statement should be added within the permit 10 statement before completing the ACL with the required prefixes, and then the continue
statement can be removed.
B. A permit any statement should be added before completing the ACL with the required prefixes, and then the permit any statement can be removed.
C. An extended access list must be used instead of a standard access list to accomplish the task.
D. A permit 20 statement should be added before completing the ACL with the required prefixes, and then the permit 20 statement can be removed.
Correct Answer: B
QUESTION 28

An administrator is troubleshooting a time synchronization problem for the router’s time to another Cisco IOS XE-based device that has recently
undergone security hardening. Which action resolves the issue?
A. Allow NTP in the ingress ACL on 10.1.255.40 by permitting TCP destined to port 123
B. NTP service is disabled and must be enabled on 10.1.255.40
C. Ensure that the CPE router has a valid route to 10.1.255.40 for NTP and rectify if not reachable
D. Allow NTP in the ingress ACL on 10.1.255.40 by permitting UDP destined to port 123
Correct Answer: B
QUESTION 29
Which MPLS value is combined with the IP prefix to convert to a VPNv4 prefix?
A. 8-byte Route Distinguisher
B. 16-byte Route Distinguisher
C. 8-byte Route Target
D. 16-byte Route Target
Correct Answer: A
QUESTION 30

A NOC team receives a ticket that data traffic from RA to RF is not forwarded when the link between the RC-RE path goes down. All routers learn
loopback IP through the IGP protocol. Which configuration resolves the issue?
A. RB(config)#router bgp 65101
RB(config-router)#neighbor 10.10.10.3 ebgp-multihop 3
B. RB(config)#router bgp 65101
RB(config-router)#neighbor 10.10.10.3 update-source loopback 0
C. RD(config)#router bgp 65201
RD(config-router)#neighbor 10.10.10.2 update-source loopback 0
D. RD(config)#router bgp 65201
RD(config-router)#neighbor 10.10.10.2 ebgp-multihop 3
Correct Answer: A
QUESTION 31
A customer is running an mGRE DMVPN tunnel over WAN infrastructure between hub and spoke sites. The existing configuration allows NHRP to add
spoke routers automatically to the multicast NHRP mappings. The customer is migrating the network from IPv4 to the IPv6 addressing scheme for those
spokes’ routers that support IPv6 and can run DMVPN tunnel over the IPv6 network. Which configuration must be applied to support IPv4 and IPv6
DMVPN tunnels on spoke routers?
A. tunnel mode ipv6ip isatap
B. tunnel mode ipv6ip 6rd
C. tunnel mode ipv6ip 6to4
D. tunnel mode ipv6ip auto-tunnel
Correct Answer: A
QUESTION 32
The network administrator configured CoPP so that an SNMP traffic from Cisco Prime located at 192.168.1.11 toward the router CPU is limited to 1000
kbps. Any traffic that exceeds this limit must be dropped.

The network administrator is not getting the desired result for the SNMP traffic and SNMP traffic is getting dropped frequently. Which set of
configurations resolves the issue?
A.
B. no access-list 100
access-list 100 permit tcp host 192.168.1.11 any eq 161

C.
D.
Correct Answer: A
QUESTION 33

A bank ATM site has difficulty connecting with the bank server. A network engineer troubleshoots the issue and finds that R4 has no active route to the
bank ATM site. Which action resolves the issue?
A. Advertise 10.10.30.0/24 subnet in R3 EIGRP AS.
B. EIGRP peering between R3 and R4 to be fixed.
C. EIGRP peering between R1 and R2 to be fixed.
D. Advertise 10.10.30.0/24 subnet in R1 EIGRP AS.
Correct Answer: B
QUESTION 34

An engineer configures an IPv6 ACL to allow TACACS access to 2001:DB8:B:B::7 and denies any other host. The ACL does not appear to be working.
Which action resolves the issue?
A. Allow the NA and NS messages, which are denied by the implicit deny
B. Apply the ipv6 traffic-filter command to the interface
C. Apply the ACL to the interface.
D. Modify the IPv6 destination address to a valid address
Correct Answer: C
QUESTION 35

A network administrator is trying to switch to the privileged EXEC level on R1 but failed. Which configuration resolves the issue?
A. tacacs server enable-password Cisco@123
B. enable password Cisco@123
C. tacacs-server enable-password Cisco@123
D. enable-password Cisco@123
Correct Answer: B
QUESTION 36
A network engineer finds that PC1 is accessing the hotel website to do the booking but fails to make payment. Which action resolves the issue?

A. Configure a reverse route on R1 for PC1 172.16.1.0/24
B. Decrease the AD to 5 of OSPF route 192.168.94.0 on R1
C. Allow stub network 10.10.202.168/30 on router R3 OSPF
D. Increase the AD to 200 of static route 192.168.94.0 on R3
Correct Answer: D
QUESTION 37
What is a function of the IPv4 DHCP Guard feature for DHCP messages?
A. If the device is configured as a DHCP server, no message is switched
B. It blocks only DHCP request messages
C. Only access lists are supported for matching traffic
D. All client messages are always switched regardless of the device role
Correct Answer: D
QUESTION 38
An engineer creates a default static route on a router with a next hop of 10.1.1.1. On inspection, the engineer finds the router has two VRFs, Red and
Blue. The next hop is valid for both VRFs and exists in each assigned VRF. Which configuration achieves connectivity?
A. ip route vrf Red 0.0.0.0 255.255.255.255 10.1.1.1
ip route vrf Blue 0.0.0.0 255.255.255.255 10.1.1.1
B. ip route vrf Red 0.0.0.0 0.0.0.0 10.1.1.1
ip route vrf Blue 0.0.0.0 0.0.0.0 10.1.1.1
C. ip route vrf BLUE 0.0.0.0 255.255.255.255 10.1.1.1
ip route vrf RED 0.0.0.0 255.255.255.25510.1.1.1
D. ip route 0.0.0.0 0.0.0.0 10.1.1.1
Correct Answer: B
QUESTION 39

The IT router has been configured with the Maths VRF and the interfaces have been assigned to the VRF. Which set of configurations exchanges
routes between the Maths-1 and Maths-2 routers using OSPF in area 0?
A. router ospf 1 vrf Maths
network 192.168.1.0 0.0.0.255 area 0

network 192.168.2.0 0.0.0.255 area 0
B. router ospf 1
network 192.168.1.0 0.0.0.255 area 0
network 102.168.2.0 0.0.0.255 area 0
C. router ospf 1
address-family ipv4 vrf Maths
network 192.168.1.0 0.0.0.255 area 0
network 192.168.2.0 0.0.0.255 area 0
D. router ospf 1 vrf Maths area 0
network 192.168.1.0
network 192.168.2.0
Correct Answer: A
QUESTION 40

R3 cannot authenticate via TACACS. Which configuration resolves the issue?
A. tacacs server SITE6_TACACS
key CiscoTACACS
B. tacacs server SITE6_TACACS
key C!scoTACACS
C. tacacs server SITE6_TACACS
key C!sc0TACACS
D. tacacs server SITE6_TACACS
key C!sc0TACACS
Correct Answer: B
QUESTION 41

Routers R1 and R2 have established a network adjacency using EIGRP, and both routers are advertising subnets to its neighbor. After issuing the show
ip EIGRP topology all-links command in R1, some prefixes are not showing R2 as a successor. Which action resolves the issue?
A. Resolve the incorrect metric on the link.
B. Configure the network statement on the neighbor.

C. Enable split-horizon.
D. Rectify the incorrect router ID in R2.
Correct Answer: B
QUESTION 42
An engineer must establish a connection between two CE routers for two customers with overlapping IP addresses. Customer_a is connected to
interfaces Gig0/0, and Customer_b is connected to interfaces Gig0/1. Routers CE1 and CE2 are configured as follows:
ip vrf customer_a
rd 1:1
route-target both 1:1
!
ip vrf customer_b
rd 2:2
route-target both 2:2
Drag and drop the code snippets from the right onto the boxes in the configuration to establish the needed connection. Snippets may be used more than
once.

A. From top to bottom:
CE1
Box 1: customer_a
Box 2: 192.168.1.1 255.255.255.0
Box 3: customer_b
Box 4: 192.168.1.1 255.255.255.0
CE2
Box 5: customer_a
Box 6: 192.168.1.2 255.255.255.0

Box 7: customer_b
Box 8: 192.168.1.2 255.255.255.0
Correct Answer: A
QUESTION 43
A network engineer must configure a DMVPN network so that a spoke establishes a direct path to another spoke if the two must send traffic to each
other. A spoke must send traffic directly to the hub if required. Which configuration meets this requirement?
A. At the hub router:
interface tunnel 10
ip nhrp nhs dynamic multipoint
ip nhrp nhs shortcut
tunnel mode gre multicast
On the spokes router:
interface tunnel 10
ip nhrp nhs multicast dynamic
ip nhrp nhs redirect
B. At the hub router:
interface tunnel 10
ip nhrp map dynamic multipoint
ip nhrp redirect
interface tunnel10
ip nhrp map multicast dynamic
ip nhrp shortcut
C. At the hub router:
interface tunned10
ip nhrp nhs shortcut
tunnel mode gre multipoint
interface tunnel10
ip nhrp nhs redirect

D. At the hub router:
interface tunnel10
ip nhrp redirect
interface tunnel 10
ip nhrp shortcut
Correct Answer: D
QUESTION 44
An administrator is attempting to disable the automatic logout after a period of inactivity. After logging out, the console stopped responding to all
keyboard inputs. Remote access through SSH still works. Which action resolves the issue?
A. Configure the exec command on line con 0.
B. Configure the absolute-timeout command on line con 0.
C. Configure the default exec-timeout command on line con 0.

D. Configure the no exec-timeout command on line con 0.
Correct Answer: A
QUESTION 45
R1(config)#ipv6 prefix-Jist PRE-PEND-PREFIX permit 2001:db8:0:a::/64
R1(config)#route-map PRE-PEND permit 10
R1(config-route-map)#match ipv6 address prefix-list PRE-PEND-PREFIX
R1(config-route-map)#set as-path prepend 65412
R1(config)#router bgp 65412
R1(config-router)#address-family ipv6
R1(config-router-af)#neighbor 2001:db8:0:20::2 route-map PRE-PEND out
R1 has a route map configured, which results in a loss of partial IPv6 prefixes for the BGP neighbor, resulting in service degradation. How can the full
service be restored?
A. The neighbor requires a soft reconfiguration, and this will clear the policy without resetting the BGP TCP connection.
B. The prefix-list requires all prefixes that R1 is advertising to be added to it, and this will allow additional prefixes to be advertised.
C. The route map requires a deny 20 statement without set conditions, and this will allow additional prefixes to be advertised.
D. The route map requires a permit 20 statement without set conditions, and this will allow additional prefixes to be advertised.
Correct Answer: D
QUESTION 46
R1#show ip bgp 10.10.10.4/32
BGP routing table entry for 10.10.10.4/32, version 23
Paths: (2 available, best #2, table Default-IP-Routing-Table)
Not advertised to any peer
65201
10.10.10.5 (metric 2) from 10.10.10.5 (10.10.10.5)
Origin IGP, metric 0, localpref 100, valid, internal
65201
10.10.10.2 (metric 2) from 10.10.10.2 (10.10.10.2)
Origin IGP, metric 0, localpref 100, valid, internal, best
R4#show ip bgp 192.168.1.1/32
BGP routing table entry for 192.168.1.1/32, version 24
Paths: (2 available, best #1, table Default-IP-Routing-Table)

Not advertised to any peer
65101
10.10.10.6 (metric 156160) from 10.10.10.6 (10.10.10.6)
Origin IGP, metric 0, localpref 100, weight 32769 valid, internal, best
65101
10.10.10.3 (metric 2) from 10.10.10.3 (10.10.10.3)
Origin IGP, metric 0, localpref 100, valid, internal
A customer reports that user traffic of bank XYZ to the AAA server is not using the primary path via the R3-R2 link. The network team observes:
No fiber is cut on links R2 and R3.
65101 and 65201 routers established BGP peering.
Which configuration resolves the issue?
A. R2(config)#route-map BGP-Path permit 10
R2(config-route-map)#set metric 200
R2(config)#router bgp 65101
R2(config-router)#neighbor 10.10.10.3 route-map BGP-Path out
B. R6(config)#router bgp 65201
R6(config-router)#no neighbor 10.10.10.5 weight 32789
C. R4(config)#route-map BGP-Path permit 10
R4(config-router)#no neighbor 10.10.10.6 weight 32769
D. R1(config)#route-map BGP-Path permit 10

R1(config-route-map)#set local-perference 200
R1(config)# router bgp 65101
R1(config-router)#neighbor 10.10.10.2 route-map BGP-Path out
Correct Answer: C
QUESTION 47
How does LDP operate in an MPLS network?
A. When topology changes occur such as a router failure, LDP generates peer discovery messages that terminate the LDP session to propagate an
LSP change.
B. When an adjacent LSR receives LDP discovery messages, TCP two-way handshake ensures that the LDP session has unidirectional connectivity.
C. Peer routers establish the LDP session, and the LDP neighbors maintain and terminate the session by exchanging messages
D. LDP notification messages allow LERs to exchange label information to determine the next hops within a particular LSP.
Correct Answer: C
QUESTION 48
Which feature is used by LDP in the forwarding path within the MPLS cloud?
A. IP forwarding
B. TTL
C. TDP
D. LSP
Correct Answer: D
QUESTION 49
ipv6 inspect udp idle-time 3600
ipv6 inspect name ipv6-firewall tcp
ipv6 inspect name ipv6-firewall udp
ipv6 access-list ipv6-internet
deny ipv6 any DEC0::/10
deny ipv6 any FF00::/8
permit ipv6 any FF02::/16
permit ipv6 any FF0E::/16
permit udp any any eq domain

!
interface gi0/1
ipv6 traffic-filter ipv6-internet in
ipv6 inspect ipv6-firewall in
ipv6 inspect ipv6-firewall out
A network administrator configured name resolution for IPv6 traffic to be allowed through an inbound access list. After the access list is applied to
resolve the issue, name resolution still did not work. Which action does the network administrator take to resolve the name resolution problem?
A. Remove ipv6 inspect ipv6-firewall in from interface gi0/1
B. Add permit udp any eq domain any log in the access list.
C. Inspect ipv6 inspect name ipv6-firewall udp 53 in global config.
D. Add permit any eq domain 53 any log in the access list.
Correct Answer: B
QUESTION 50
How do devices operate in MPLS L3VPN topology?
A. P and associated PE routers with IGP populate the VRF table in different VPNs
B. CE routers connect to the provider network and perform LSP functionality
C. P routers provide connectivity between PE devices with MPLS switching
D. P routers support PE to PE VPN tunnel without LSP functionality
Correct Answer: C
QUESTION 51
{exhibit about the log server which has some OSPFv3-error records}
SW101#sh run
logging host 10.0.0.200
snmp-server enable traps syslog
snmp-server enable traps ospfv3 errors
An engineer configures SW101 to send OSPFv3 interfaces state change messages to the server. However, only some OSPFv3 errors are being
recorded. Which command resolves the issue?
A. snmp-server enable traps ospfv3 state-change if-state-change

B. snmp-server-enable traps ospfv3 state-change restart-status-change
C. snmp-server-enable traps ospfv3 state-change neighbor-state-change
D. snmp-server-enable traps ospfv3 state-change if-state-change neighbor-state-change
Correct Answer: A
QUESTION 52
{exhibit missing} This question is missing the exhibit so we are not sure about the answer. We will update this question when we have more information
about it.
An engineer is trying to log in to R1 via R3 loopback address. Which action resolves the issue?
A. Add transport input SCP
B. Add transport input none
C. Remove the IPv6 traffic filter from R1, which is blocking the Telnet
D. Remove the IPv6 traffic from R1, which is blocking the SSH
Correct Answer: C
QUESTION 53
The network administrator must implement IPv6 in the network to allow only devices that not only have registered IP addresses but are also connecting
from assigned locations. Which security feature must be implemented?
A. IPv6 Snooping
B. IPv6 Destination Guard
C. IPv6 Prefix Guard
D. IPv6 Router Advertisement Guard
Correct Answer: B
QUESTION 54

The security department recently installed a monitoring device between routers R3 and R5, which a loss of network connectivity for users connected to
R5. Troubleshooting revealed that the monitoring device cannot forward multicast packets. The team already updated R5 with the correct configuration.
Which configuration must be implemented on R3 to resolve the problem by ensuring R3 as the DR for the R3-R5 segment?
A. interface FastEthernet0/0
ip address 10.99.53.1 255.255.255.252
ip access-group 122 in
ip ospf network non-broadcast
ip ospf priority 0
!
router ospf 10
router-id 10.10.3.255
neighbor 10.99.53.2
!
access-list 122 permit 88 host 10.99.53.2 host 10.99.53.1
access-list 122 deny 88 any any
access-list 122 permit tcp any any
access-list 122 permit udp any any
access-list 122 permit icmp any any
B. interface FastEthernet0/0
ip address 10.99.53.1 255.255.255.252
ip ospf priority 0
!
router ospf 10

router-id 10.10.3.255
neighbor 10.99.53.0 0.0.0.0 area 0
neighbor 10.99.53.2
!
C. interface FastEthernet0/0
ip address 10.99.53.1 255.255.255.252
ip ospf priority 100
!
router ospf 10
router-id 10.10.3.255
neighbor 10.99.53.0 0.0.0.3 area 0
neighbor 10.99.53.2
!
D. interface FastEthernet0/0
ip address 10.99.53.1 255.255.255.252
ip ospf network point-to-point
ip ospf priority 100
!
router ospf 10
router-id 10.10.3.255
neighbor 10.99.53.0 0.0.0.3 area 0
neighbor 10.99.53.2
!
Correct Answer: C

QUESTION 55
What must be configured by the network engineer to circumvent AS_PATH prevention mechanism in IP/VPN Hub and Spoke deployment scenarios?
A. Use allows-in and as-override at all PEs.
B. Use allowas-in and as-override at the PE-Hub.
C. Use allowas-in the PE_Hub
D. Use as-override at the PE_Hub
Correct Answer: C
QUESTION 56
RD#show ip bgp neighbors 10.10.10.3 advertised-routes
Network Next Hop Metric LocPrf Weight Path
*> 10.0.0.0/30 0.0.0.0 0 32768 i
*> 10.0.0.4/30 0.0.0.0 0 32768 i
r>i10.0.0.12/30 10.10.10.1 0 100 0 i
*> 10.0.0.24/30 0.0.0.0 0 32768 i
r>i10.10.10.1/32 10.10.10.1 0 100 0 i
*> 10.10.10.2/32 0.0.0.0 0 32768 i
*>i172.16.10.10/32 0.10.10.1 0 100 0 i
*>i192.168.1.1/32 10.10.10.1 0 100 0 i
RD#show ip bgp neighbors 10.10.10.4 advertised-routes
Network Next Hop Metric LocPrf Weight
Path
*> 10.0.0.8/30 0.0.0.0 0 32768 i
*>i10.0.0.16/30 10.10.10.6 0 100 0 i
r>i10.0.0.20/30 10.10.10.6 0 100 0 i
*> 10.0.0.28/30 0.0.0.0 0 32768 i
r>i10.10.10.6/32 10.10.10.6 0 100 0 i
*>i172.16.20.1/32 10.10.10.6 0 100 0 i

A network engineer receives a fault ticket about traffic drops from BANK SITE Y to BANK SITE X. The NOC team observe:
– Users can reach BANK SITE Y from router RA as a source.
– Routers RB and RD are acting as route reflectors.
Which configuration resolves the issue?
A. RC(config)#router bgp 65201
RC(config-router)#neighbor 10.10.10.4 route-reflector-client
B. RF(config)#router bgp 65201
RF(config-router)#neighbor 10.10.10.6 route-reflector-client
C. RC(config)#router bgp 65201
RC(config-router)#neighbor 10.10.10.2 route-reflector-client
D. RB(config)#router bgp 65201
RB(config-router)#neighbor 10.10.10.3 route-reflector-client
Correct Answer: D
QUESTION 57

Which configuration resolves the IP SLA issue from R1 to the server?
A. R6(config)#ip sla responder
B. R6(config)#ip sla responder udp-echo ipaddress 10.60.60.6 port 5000
C. R6(config)#ip sla 650
R6(config-ip-sla)# udp-jitter 10.60.60.6
D. R6(config)#ip sla schedule 10 life forever start-time now
Correct Answer: A

QUESTION 58
RF# traceroute 192.168.1.1
1 10.0.0.9 40 msec 28 msec 24 msec
2 * * *
3 * * *
RE#show ip prefix-list detail
Prefix-list with the last deletion/insertion: Customer
ip prefix-list Customer:
count: 2, range entries: 1, sequences: 5 - 10, refcount: 3
seq 5 deny 192.168.1.1/32 (hit count: 5, refcount: 1)
seq 10 permit 0.0.0.0/0 le 32 (hit count: 26, refcount: 1)
RC#show ip prefix-list detail
Prefix-list with the last deletion/insertion: Customer
ip prefix-list Customer:
count: 1, range entries : 1, sequences: 10 — 10, refcount: 4
seq 10 permit 0.0.0.0/0 le 32 (hit count: 7, refcount: 1)
The enterprise users fail to authenticate with the TACACS server when a direct fiber link fails between RB and RD. The NOC team observes Users
connected on AS65201 fail to authenticate with TACACS server 192.168.1.1. Users connected on AS65101 successfully authenticate with TACACS
server 192.168.1.1. All AS65101 and AS65201 users are configured to authenticate with the TACACS server. Which configuration resolves the issue?

A. RC(config)# ip prefix-list Customer seq 5 permit 192.168.30.1/32
B. RC(config)#router bgp 65101
RC(config-router)#neighbor 10.0.0.18 prefix-list Customer in
C. RF(config)#no ip prefix-list Customer seq 5 deny 192.168.1.1/32
D. RF(config)#router bgp 65201
RF(config-router)# neighbor 10.0.0.17 prefix-list Customer out
Correct Answer: B
QUESTION 59

The Customer Edge router wants to use AS 100 as the preferred ISP for all external routes and ISP-2 as a backup.
Customer-Edge
route-map SETAS
set as-path prepend 111
!
router bgp 64555
neighbor 192.168.2.2 route-map SETAS in
After this configuration, all the backup routes have disappeared from the BGP table on the Customer Edge router. Which set of configurations resolves
the issue on the Customer Edge router?

A. route-map SETAS
!
router bgp 64555
B. route-map SETAS
!
router bgp 64555
C. route-map SETAS
!
router bgp 64555
neighbor 192.168.2.2 route-map SETAS out
D. route-map SETAS
!
router bgp 64555
neighbor 192.168.2.2 route-map SETAS out
Correct Answer: B
QUESTION 60

The client server but the show command does not show the IPv6 DHCP bindings on the server. Which action resolves the issue?
A. Extend the DHCP lease time because R1 removed the IPv6 address earlier after the lease expired
B. Configure H1 as the DHCP client that manually assigns the IPv6 address on interface e0/0
C. Use the 2001:DBB:BAD:C0DE::/64 prefix for the DHCP pool on R1
D. Configure authorized DHCP servers to avoid IPv6 addresses from a rogue DHCP server
Correct Answer: C
QUESTION 61

An engineer cannot determine the time of the problem on R1 due to a mismatch between the router local clock and legs. Which command synchronizes
the time between new log entries and the local clock on R1?
A. service timestamps debug datetime msec show-timezone
B. service timestamps log datetime localtime msec
C. service timestamps debug datetime localtime msec
D. service timestamps log datetime msec show-timezone
Correct Answer: B
QUESTION 62
March 10 19:26:53.254 GMT: %SNMP-3-AUTHFAIL: Authentication
failure for SNMP request from host 10.1.1.1

snmp-server community public RO
snmp-server community private RW 16
!
logging snmp-authfail
!
access-list 15 permit 10.1.1.1
access-list 16 permit 10.1.1.2
Which action resolves the issue?
A. Configure host IP address in access-list 16
B. Configure SNMPv3 on the router
C. Configure SNMP authentication on the router
D. Configure a valid SNMP community string
Correct Answer: A
QUESTION 63

Spoke routers do not learn about each other’s routes in the DMVPN Phase2 network. Which action resolves the issue?
A. Remove default route from spoke routers to establish a spoke-to-spoke tunnel.
B. Configure a static route in each spoke to establish a spoke-to-spoke tunnel.
C. Rectify incorrect wildcard mask configured on the hub router network command.
D. Disable EIGRP split horizon on the Tunnel0 interface of the hub router.
Correct Answer: D
QUESTION 64

R1 #show ipv6 access-list
IPv6 access list inbound-acl
permit tcp host 2001 :D88::2 eq bgp host 2001 :DB8::1 (75 matches) sequence 20
permit tcp host 2001:DB8::2 host 2001:DB8::1 eq bgp (17 matches) sequence 30
deny ipv6 2001:DB8::/32 any (77 matches) sequence 40
permit ipv6 any (20 matches) sequence 1000
R1#ping ipv6 2001:DB8::2
Type escape sequence to abort.
Sending 5,100-byte ICMP Echos to 2001:DB8::2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
R1#show ipv6 access-list
IPv6 access list inbound-acl
permit tcp host 2001:DB8::2 eq bgp host 2001:DB8::1 (77 matches) sequence 20
permit tcp host 2001:DB8::2 host 2001:DB8::1 eq bgp (19 matches) sequence 30
deny ipv6 2001:DB8::/32 any (95 matches) sequence 40
permit ipv6 any (23 matches) sequence 1000
R1#
An engineer applied filter on R1. The interface flapped between R1 and R2 and cleaning the BGP session did not restore the BGP session and failed.
Which action must the engineer take to restore the BGP session from R2 to R1?
A. Apply the IPv6 traffic filter in the outbound direction on the interface
B. ICMPv6 must be permitted by the IPv6 traffic filter

C. Enable the BGP session, which went down when the session was cleared
D. Swap the source and destination IP addresses in the IPv6 traffic filter
Correct Answer: B
QUESTION 65
An engineer is investigating an OSPF issue reported by the Cisco DNA Assurance Center. Which action resolves the issue?

A. One of the neighbor links is down. Bring the interface up by running shut and no shut
B. One of the interfaces is using the wrong MTU. Match interface MTU on both links
C. An ACL entry blocking multicast on the interfaces. Allow multicast through the interface ACL
D. One of the interfaces is using the wrong authentication. Match interface authentication on both links
Correct Answer: B
QUESTION 66
R3#
*Sep 5 07:29:34.031: %TCP-6-BADAUTH: No MD5 digest from 10.10.10.2(179) to
10.10.10.3(60942) (RST)
R2# show ip bgp neighbors 10.10.10.3
BGP neighbor is 10.10.10.3, remote AS 65201, external link
BGP version 4, remote router ID 0.0.0.0
BGP state = Idle
Last read 00:02:19, last write 00:02:19, hold tine is 180, keepalive interval is
60 seconds
Message statistics:
InQ depth is 0
OutQ depth is 0
Sent Rcvd
Opens: 2 2
Notifications: 0 0
Updates: 5 6
Keepalives: 10 9
Route Refresh: 0 0
Total: 17 17
Default minimum time between advertisement runs is 30 seconds
Address tracking is enabled, the RIB does have a route to 10.10.10.3
Connections established 2; dropped 2
Last reset 00:11:58, due to Peer closed the session
External BGP neighbor not directly connected.
Transport (tcp) path-mtu-discovery is enabled
No active TCP connection

The network operation team observes a traffic forwarding issue between R2 and R3: Ping and traceroute of loopback IP address from R2 to R3 is
successful. iBGP peering in AS 65101 and AS 65201 is up. Which configuration resolves the issue?
A. Configure MD5 password authentication on R2.
B. Advertise R2 and R3 loopback IPs in AS 65101 and AS 65201.
C. Remove MD5 password authentication on R3.
D. Set up eBGP multihop on R2 and R3 routers.
Correct Answer: A
QUESTION 67
A newly installed router starts establishing an LDP session from another MPLS router to which it is not directly connected. Which LDP message type
responds by target router to the initiating router using UDP protocol?
A. notification message
B. session message
C. extended discovery message
D. advertisement message

Correct Answer: C
QUESTION 68
Which router takes an active role between two LDP neighbors when initiating LDP session negotiation and LDP TCP connection establishment?
A. with one interface in the MPLS backbone
B. with the larger number of LDP TCP neighbors
C. with the lowest IP address
D. with the higher IP address
Correct Answer: D
QUESTION 69
A company builds WAN infrastructure between the head office and POPs using DMVPN hub-and-spoke topology to provide end-to-end communication.
All POPs must maintain point-to-point connectivity with the head office. Which configuration meets the requirement at routers R12 and R13?
A. interface Tunnel0
ip nhrp map multicast 172.16.1.11

ip nhrp map 172.16.1.11 192.168.10.11
ip nhrp network-id 12
ip nhrp nhs 192.168.10.11
R13#
interface Tunnel0
ip nhrp map 172.16.1.11 192.168.10.11
ip nhrp nhs 192.168.10.11
B. R12#
interface Tunnel0
ip nhrp map 172.16.1.11 192.168.10.11
ip nhrp networked 12
ip nhrp nhs 172.16.1.11
R13#
interface Tunnel0
ip nhrp map 172.16.1.11 192.168.10.11
ip nhrp nhs 172.16.1.11
C. Configure routers R12 and R13 as:
interface Tunnel0
ip nhrp map 172.16.1.11 192.168.10.11
ip nhrp nhs 172.16.1.11
D. Configure routers R12 and R13 as:
interface Tunnel0
ip nhrp map 172.16.1.11 192.168.10.11
ip nhrp nhs 192.168.10.11
Correct Answer: C
QUESTION 70

An engineer must configure a per VRF for TACACS+ for company A. Which configuration on RTG-1 accomplishes the task?
A. aaa new-model
aaa group server tacacs+ Tacacscluster
server-private 172.16.1.3 port 49 key routing
ip tacacs source-interface GigabitEthernet 0/0
ip vrf CompanyA
B. aaa new-model
ip vrf forwarding CompanyA
C. aaa new-model

ip vrf CompanyA
D. aaa new-model
ip vrf forwarding CompanyA
Correct Answer: D
QUESTION 71
An engineer must connect the Reno and Detroit spokes using DMVPN phase 2.
Hub tunnel configuration is
Dallas
interface Tunnel0

ip address 10.0.80.1 255.255.255.0
ip nhrp authentication cisco123
ip nhrp multicast dynamic
tunnel source Serial0/0
Which configuration accomplishes the task?
A. Reno
interface Tunnel0
ip address 10.0.80.3 255.255.255.0
ip nhrp map 10.0.80.1 10.92.18.2
ip nhrp nhs 10.0.80.1
tunnel source 10.238.194.2
Detroit
interface Tunnel 0
ip address 10.0.80.4 255.255.255.0
ip nhrp map 10.0.80.1 10.92.18.2
B. Reno
interface Tunnel0
ip address 10.0.80.3 255.255.255.0
nhrp authentication cisco123
ip nhrp map 10.92.18.2 10.0.80.1
Detroit
interface Tunnel0

ip address 10.0.80.4 266.255.255.0
ip nhrp map 10.92.18.2 10.0.80.1
C. Reno
interface Tunnel0
ip address 10.0.80.3 255.255.255.0
ip nhrp map broadcast 10.92.18.2
ip nhrp map 10.0.80.1 10.92.18.2
Detroit
interface Tunnel0
ip address 10.0.80.4 255.255.255.0
ip nhrp map 10.0.80.1 10.92.18.2
ip nhrp map broadcast 10.92.18.2
D. Reno
interface Tunnel0
ip address 10.0.80.3 266.255.255.0
ip nhrp map 10.0.80.1 10.92.18.2
Detroit
interface Tunnel0
ip address 10.0.80.4 255.255.255.0

ip nhrp map 10.0.80.1 10.92.18.2
Correct Answer: A
QUESTION 72
100.0.0.0/32 is subnetted, 3 subnets
C 100.1.1.1 is directly connected, Loopback0
D 100.2.2.2 [90/156160J via 10.1.1.2, 00:00:46, FastEthernet0/0
D 100.3.3.3 [90/158720] via 10.1.1.14, 00:00:44, FastEthernet1/0
[90/158720] via 10.1.1.2, 00:00:44, FastEthernet0/0
10.0.0.0/8 is variably subnetted, 13 subnets, 4 masks
D 10.1.1.8/30 [90/30720] via 10.1.1.14, 00:00:44, FastEthernet1/0
C 10.1.1.12/30 is directly connected, FastEthernet1/0
D 10.1.1.4/30 [90/30720] via 10.1.1.2, 00:00:45, FastEthernet0/0
C 10.100.1.40/32 is directly connected, Loopback40
D EX 10.1.1.80/29[170/33280] via 10.1.1.14, 00:00:45, FastEthernet1/0
S 10.100.1.0/24 is a summary, 00:00:48, Null0
D EX 10.247.10.0/30 [170/2174976] via 10.1.1.14, 00:00:46, FastEthernet1/0
R1 must advertise all loopback interfaces IP addresses to neighbors, but EIGRP neighbors receive a summary route. Which action resolves the issue?
A. Redistribute connected routes into EIGRP Enable
B. EIGRP on loopback interfaces
C. Disable auto summarization on R1
D. Remove the 10.100.1.0/24 static route

Correct Answer: C
QUESTION 73
Which action ensures that 10.10.10.0/24 reaches 10.10.20.0/24 through the direct link between R1 and R2?
A. Configure R1 and R2 LAN links as nonpassive
B. Configure R1 and R2 links under area 1
C. Configure OSPF link cost to 1 between R1 and R2
D. Configure OSPF path cost to 3 between R1 and R2
Correct Answer: B
QUESTION 74

What are the two reasons for RD and VPNv4 addresses in an MPLS Layer 3 VPN? (Choose two)
A. RD is prepended to each prefix to make routes unique.
B. VPN RT communities are used to identify customer unique routes.
C. When the PE redistributes customer routes into MP-BGP, they must be unique.
D. They are on a CE device to use for static configuration.
E. They are used for a BGP session with the CE device.
Correct Answer: AC
QUESTION 75
CPE# show snmp mib ifmib ifindex detail
Description ifIndex Active Persistent Saved TrapStatus
-------------------------------------------------------------
Loopback1 8 yes disabled no enabled
GigabitEthernet1 1 yes disabled no enabled
Gigabit£thernet3.123 10 yes disabled no disabled
VoIP-Null0 5 yes disabled no enabled
Null0 6 yes disabled no enabled
After reloading the router an administrator discovered that the interface utilization graphs displayed inconsistencies with their previous history in the
NMS. Which action prevents this issue from occurring after another router reload in the future?
A. Rediscover all the router interfaces through SNMP after the router is reloaded
B. Save the router configuration to startup-config before reloading the router
C. Configure SNMP to use static OIDs referring to individual router interfaces
D. Configure SNMP interface index persistence on the router
Correct Answer: D
QUESTION 76

R2#show run
interface Loopback10
no ip address
ipv6 address 2002::1/128
ipv6 eigrp 1
!

ENARSI_300-410_May_2023-v1.2.pdf

ENARSI_300-410_May_2023-v1.2.pdf

Recommended

Recommended

More Related Content

Similar to ENARSI_300-410_May_2023-v1.2.pdf

Similar to ENARSI_300-410_May_2023-v1.2.pdf (20)

More from CCIEHOMER

More from CCIEHOMER (7)

Recently uploaded

Recently uploaded (20)

ENARSI_300-410_May_2023-v1.2.pdf