Get 300-410 Braindumps & 300-410 Real Exam Questions
Cisco 300-410 Actual Questions and Braindumps
Certification Topics of Cisco 300-410 Exam
Our Cisco 300-410 exam dumps covers the following objectives of Cisco 300-410 Exam.
- VPN Technologies 20%
- Infrastructure Services 25%
- Infrastructure Security 20%
- Layer 3 Technologies 35%
Cisco 300-410 exam assesses candidates' abilities to implement and troubleshoot advanced routing technologies, such as OSPFv2, OSPFv3, IS-IS, BGP, and PBR. Additionally, the exam covers advanced services such as QoS, multicast, VPN, and MPLS. With these technologies and services, IT professionals can build highly scalable and efficient networks that meet the needs of modern enterprises.
NEW QUESTION # 204
Refer to the exhibit.
An engineer must configure DMVPN Phase 3 hub-and-spoke topology to enable a spoke-to-spoke tunnel.
Which NHRP configuration meets the requirement on R6?
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: B
NEW QUESTION # 205
Exhibit:
Bangkok is using ECMP to reach to the 192.168.5.0/24 network. The administrator must configure Bangkok in such a way that Telnet traffic from 192.168.3.0/24 and192.168.4.0/24 networks uses the HongKong router as the preferred router. Which set of configurations accomplishes this task?
- A. access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23
!
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
interface Ethernet0/1
ip policy route-map PBR1 - B. access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23
!
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
!
interface Ethernet0/3
ip policy route-map PBR1 - C. access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255
!
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
!
interface Ethernet0/1
ip policy route-map PBR1 - D. access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 access-list 101 permit tcp 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255
!
route-map PBR1 permit 10
match ip address 101
set ip next-hop 172.18.1.2
interface Ethernet0/3
ip policy route-map PBR1
Answer: B
Explanation:
We need to use Policy Based Routing (PBR) here on Bangkok router to match the traffic from 192.168.3.0/24 & 192.168.4.0/24 and "set ip next-hop" to HongKong router(172.18.1.2 in this case).
Note: Please notice that we have to apply the PBR on incoming interface e0/3 to receive traffic from 192.168.3.0/24 and 192.168.4.0/24.
NEW QUESTION # 206 
Refer to the exhibit. An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R1 as the primary default gateway When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192.168.20.0/24. Which set of configurations resolves the issue?
- A. HQ_R3(config)# ip sla responder
HQ_R3(config)# ip sla responder icmp-echo 172.16.35.1 - B. HQ R3(config)# Ip sla responder
HQ R3(config)# Ip sla responder Icmp-echo 172.16.35.5 - C. BRANCH(config)# ip sla 1
BRANCH(config-ip-sla)# icmp-echo 192.168.100.2 - D. BRANCH(config)# Ip sla 1
BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1
Answer: D
NEW QUESTION # 207
An engineer configured a DHCP server for Cisco IP phones to download its configuration from a TFTP server, but the IP phones failed to toad the configuration What must be configured to resolve the issue?
- A. BOOTP port 68
- B. BOOTP port 67
- C. DHCP option 66
- D. DHCP option 69
Answer: C
Explanation:
Explanation
DHCP options 3, 66, and 150 are used to configure Cisco IP Phones. Cisco IP Phones download their configuration from a TFTP server. When a Cisco IP Phone starts, ifit does not have both the IP address and TFTP server IP address preconfigured, it sends a request with option 150 or 66 to the DHCP server to obtain this information.+ DHCP option 150 provides the IP addresses of a list of TFTP servers.+ DHCP option 66 gives the IP address or the hostname of a single TFTP server.
Reference:
http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/basic_dhcp.pdf
NEW QUESTION # 208
Refer to the exhibit.
An engineer is troubleshooting BGP on a device but discovers that the clock on the device does not correspond to the time stamp of the log entries. Which action ensures consistency between the two times?
- A. Make sure that the clock on the device is synchronized with an NTP server.
- B. Configure the service timestamps log uptime command in global configuration mode.
- C. Configure the logging clock synchronize command in global configuration mode.
- D. Configure the service timestamps log datetime localtime command in global configuration mode.
Answer: D
Explanation:
Explanation
https://community.cisco.com/t5/networking-documents/router-log-timestamp-entries-are-different-from-the-syste
NEW QUESTION # 209
Refer to the exhibit. BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1. Users report packet loss and interruption of service to applications hosted on the 10.1.1.0724 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command. Which action stabilizes the service?
- A. Place an OSPF distribute-list outbound on R3 to block the 10.1.10/24 prefix from being advertised back to R3.
- B. Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.
- C. Repeat the test from R4 using ICMP ping on the local 10.1.1.0/24 prefix, and fix any Layer 2 errors on the host or switch side of the subnet.
- D. Reduce frequent OSPF SPF calculations on R3 that cause a high CPU and packet loss on traffic traversing R3.
Answer: B
Explanation:
As it states in the debug "Connection refused by remote host".
Extra step needed on the remote router (R3) which is to activate the neighbor in address-family ipv6 unicast and run the "neighbor <neighbor_IP> activate" command.
NEW QUESTION # 210
Refer to the exhibit.
After a security audit, the administrator implemented an ACL in the route reflector. The RR became unreachable from any router in the network. Which two actions resolve the issue? (Choose two.)
- A. Change the next hop of the default route to the link-local address of the default gateway.
- B. Enable the ND proxy feature on the default gateway.
- C. Remove the ACL entry 80.
- D. Permit ICMPv6 neighbor discovery traffic in the ACL.
- E. Configure a link-local address on the Ethernet0/1 interface.
Answer: C,D
NEW QUESTION # 211
Refer to the exhibit.
Packets arriving from source 209.165.200.215 must be sent with the precedence bit set to 1, and packets arriving from source 209.165.200.216 must be sent with the precedence bit set to 5. Which action resolves the issue?
- A. set ip precedence critical in route-map Texas permit 20
- B. set ip precedence immediate in route-map Texas permit 10
- C. set ip precedence critical in route-map Texas permit 10
- D. set ip precedence priority in route-map Texas permit 20
Answer: A
NEW QUESTION # 212
Refer to the exhibit.
A company is evaluating multiple network management system tools. Trending graphs generated by SNMP data are returned by the NMS and appear to have multiple gaps. While troubleshooting the issue, an engineer noticed the relevant output. What solves the gaps in the graphs?
- A. Remove the class map NMS from being part of control plane policing.
- B. Configure the CIR rate to a lower value that accommodates all the NMS tools
- C. Separate the NMS class map in multiple class maps based on the specific protocols with appropriate CoPP actions
- D. Remove the exceed-rate command in the class map.
Answer: C
Explanation:
Reference:
https://tools.cisco.com/security/center/resources/copp_best_practices
The class-map NMS in the exhibit did not classify traffic into specific protocols so many packets were dropped. We should create some class-map to classify the receiving traffic. It is also a recommendation of CoPP/CPP policy:
"Developing a CPP policy starts with the classification of the control plane traffic. To that end, the control plane traffic needs to be first identified and separated into different class maps."
NEW QUESTION # 213
Refer to the exhibit.
ISP 1 and ISP 2 directly connect to the Internet. A customer is tracking both ISP links to achieve redundancy and cannot see the Cisco IOS IP SLA tracking output on the router console. Which command is missing from the IP SLA configuration?
- A. Start-time now
- B. Start-time 00:00
- C. Start-time immediately
- D. Start-time 0
Answer: A
NEW QUESTION # 214
Refer to the exhibit. The Los Angeles and New York routers are receiving routes from Chicago but not from each other Which configuration fixes the issue?
- A. Interface Tunnel1
tunnel mode Ipsec Ipv4 - B. Interface Tunnel1
no ip split-horizon eigrp 111 - C. Interface Tunnel1
Ip next-hop-self elgrp 111 - D. Interface Tunnel1
tunnel protection ipsec profile IPSec-PROFILE
Answer: B
Explanation:
In this topology, Chicago router (Hub) will receive advertisements from Los Angeles (Spoke1) router on its tunnel interface. The problem here is that it also has a connection with New York (Spoke2) on that same tunnel interface. If we don't disable EIGRP split-horizon, then the Hub will not relay routes from Spoke1 to Spoke2 and the other way around. That is because it received those routes on interface Tunnel1 and therefore it cannot advertise back out that same interface (splithorizon rule). Therefore we must disable split-horizon on the Hub router to make sure the Spokes know about each other.
NEW QUESTION # 215
Refer to the exhibit.
R4 is experiencing packet drop when trying to reach 172.16.2.7 behind R2. Which action resolves the issue?
- A. Disable auto summarization on R2
- B. Insert a /16 floating static route on R2 toward R3 with metric 254
- C. Insert a /24 floating static route on R2 toward R3 with metric 254
- D. Enable auto summarization on all three routers R1, R2, and R3
Answer: A
NEW QUESTION # 216
When provisioning a device in Cisco DNA Center, the engineer sees the error message "Cannot select the device. Not compatible with template".
What is the reason for the error?
- A. The template has an incorrect configuration.
- B. The changes to the template were not committed.
- C. The software version of the template is different from the software version of the device.
- D. The tag that was used to filter the templates does not match the device tag.
Answer: D
Explanation:
If you use tags to filter the templates, you must apply the same tags to the device to which you want to apply the templates. Otherwise, you get the following error during provisioning: Cannot select the device. Not compatible with template.
Reference:
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-c
NEW QUESTION # 217
What are the two prerequisites to enable BFD on Cisco routers? (Choose two)
- A. UDP port 1985 must be allowed on all participating routers.
- B. Cisco Express Forwarding and IP Routing must be enabled on all participating routers.
- C. A supported IP routing protocol must be configured on the participating routers.
- D. ICMP must be allowed on all participating routers.
- E. OSPF Demand Circuit must run BFD on all participating routers.
Answer: B,D
NEW QUESTION # 218 
Refer to the exhibit. Not all connected and static routes of router B are received by router A even though EIGRP neighborship is established between the routers. Which configuration resolves the issue?
- A.
- B.
- C.
- D.
Answer: A
NEW QUESTION # 219
Refer to the exhibit. Which command must be configured to make VRF CCNP work?
- A. interface Loopback0
ip address 10.1.1.1 255.255.255.0 - B. interface Loopback0
vrf forwarding CCNP - C. interface Loopback0
ip address 10.1.1.1 255.255.255.0
ip vrf forwarding CCNP - D. interface Loopback0
ip address 10.1.1.1 255.255.255.0
vrf forwarding CCNP
Answer: A
Explanation:
It's the feature of MPLS VPN, it will create separate routing table other than global routing table and same will be referred only by interfaces who are in same VRF instance. This is why interface ip needs to be removed from global routing table. Interfaces in VRF will not be referred to global routing table under normal configuration.
NEW QUESTION # 220
Refer to the exhibit.
An engineer is trying to generate a summary route in OSPF for network 10.0.0.0/8, but the summary route does not show up in the routing table. Why is the summary route missing?
- A. The summary-address command is used only for summarizing prefixes between areas.
- B. There is no route for a subnet inside 10.0.0.0/8, so the summary route is not generated.
- C. The summary route is not visible on this router, but it is visible on other OSPF routers in the same area.
- D. The summary route is visible only in the OSPF database, not in the routing table.
Answer: B
Explanation:
Explanation
The summary-address is only used to create aggregate addresses for OSPF at an autonomous system boundary.
It means this command should only be used on the ASBR when you are trying to summarize externally redistributed routes from another protocol domain or you have a NSSA area. But a requirement to create a summarized route is:
The ASBR compares the summary route's range of addresses with all routes redistributed into OSPF on that ASBR to find any subordinate subnets (subnets that sit inside the summary route range). If at least one subordinate subnet exists, the ASBR advertises the summary route.
NEW QUESTION # 221
An engineer configured SNMP notifications sent to the management server using authentication and encrypting data with DES. An error in the response PDU is received as
"UNKNOWNUSERNAME, WRONGDIGEST". Which action resolves the issue?
- A. Configure correct authentication and privacy passwords using SNMPv3 authPriv.
- B. Configure the correct authentication password using SNMPv3 authNoPriv.
- C. Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.
- D. Configure the correct authentication password using SNMPv3 authPriv .
Answer: A
NEW QUESTION # 222
What are two characteristics of VRF instance? (Choose two.)
- A. An interface must be associated to one VRF.
- B. It is defined by the VPN membership of a customer site attached to a P device.
- C. Each VRF has a different set of routing and CEF tables
- D. All VRFs share customers routing and CEF tables .
- E. A customer site can be associated to different VRFs
Answer: A,C
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipswitch_cef/configuration/xe-3s/isw-cef-xe-3s- book/isw-cef-basic-config.html
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l3_vpns/configuration/15-s/mp-l3-vpns-15-s-book/mp- bgp-mpls-vpn.pdf
NEW QUESTION # 223
......
300-410 Dumps To Pass Cisco Exam in 24 Hours - Actual4Exams: https://latestdumps.actual4exams.com/300-410-real-braindumps.html