300-410 Online Practice Questions and Answers

Questions 4

Refer to the exhibit.

An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?

A. no ip ssh disable

B. ip ssh enable

C. ip ssh version 2

D. crypto key generate rsa

Buy Now

Questions 5

Refer to the exhibit. Which option describes why the EIGRP neighbors of this router are not learning routes that are received from OSPF?

A. The subnet defined in OSPF is not part of area 0.

B. Default metrics are not configured under EIGRP.

C. There is no overlap in the subnets advertised.

D. The routing protocols do not have the same AS number.

Buy Now

Questions 6

Which of the following commands enables Unicast Reverse Path forwarding in loose mode?

A. ip verify unicast source reachable-via rx

B. ip verify unicast source reachable-via any

C. ip verify unicast source reachable-via rx allow default

D. ip verify unicast source reachable-via allow default

Buy Now

Questions 7

Refer to the following diagram of an OSPF network.

Which of the following routers generate network link advertisements (NLA)? (Choose all that apply.)

A. R3

B. R4

C. R7

D. R8

E. R9

F. R13

Buy Now

Correct Answer: AE

The R3 and the R9 routers in the scenario generate network link advertisements (NLA). An NLA or a Type 2 LSA is generated only by the designated router (DR) of a segment. Type 2 LSAs are generated only for those networks in which a

DR has been selected. A DR is a router that has the highest OSPF priority on a segment. Until there are two OSPF routers on the segment, no Type 2 LSAs will be generated.

Type 2 LSAs are flooded in the area that contains the network segment with the DR. These advertisements are used by the DR to represent the routers that are connected to the network. This type of LSA is sent to those routers that belong to

the same network as the DR. Therefore, in this case, Type 2 LSAs are generated by the R3 and the R9 routers. R3 sends the LSAs to R1, R2, and R4, while R9 sends LSAs to R8, R10, and R11.

R4, R7, or R8 will not send NLAs or Type 2 LSAs. These three routers are area border routers (ABR) for different OSPF areas. Like any other OSPF router, these routers generate Type 1 LSAs or router link advertisements (RLA). The LSAs

contain the state of the routers that belong to same area. In this case, R4 generates and floods Type 1 LSAs into Area 0 and Area 10. Similarly, R7 and R8 flood Type 1 LSAs into Area 0 and Area 20, and Area 0 and Area 30, respectively.

ABRs also generate Type 3 and Type 4 LSAs or summary link advertisements (SLA). These LSAs are flooded into other areas to and from the backbone area. Type 3 LSAs contain the list of networks that are exchanged between two areas.

In this case, R4 floods Type 3 LSAs into Area 0 and Area 10; R7 floods these LSAs into Area 0 and Area 20; and R8 floods them into Area 0 and Area 30. Type 4 LSAs list the routes that point to autonomous system boundary router (ASBR).

R13 will not generate Type 2 LSAs. R13 is an Area System Border Router (ASBR), which generate Type 5 LSAs apart from Type 1 LSAs. Type 5 LSAs, or external link advertisements, list the routes external to the AS; they are flooded

throughout the OSPF domain except for stub areas.

Objective:

Layer 3 Technologies

Sub-Objective:

Configure and verify network types, area types, and router types

References:

Cisco > Home > Support > Technology Support > IP > IP Routing > Technology Information > Technology Whitepaper > OSPF Design Guide

Questions 8

The network administrator configured R1 to authenticate Telnet connections based on Cisco ISE using TACACS+. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1(192.168.1.1) with a shared secret password of Cisco123.

The administrator has configured this on R1:

aaa new-model ! tacacs server ISE1 address ipv4 192.168.1.5 key Cisco123 ! aaa group server tacacs+ TAC-SERV server name ISE1 ! aaa authentication login telnet group TAC-SERV

The network administrator cannot authenticate to R1 based on ISE. Which configuration fixes the issue?

A. ip tacacs-server host 192.168.1.5 key Cisco123

B. line vty 0 4 login authentication TAC-SERV

C. line vty 0 4 login authentication telnet

D. tacacs-server host 192.168.1.5 key Cisco123

Buy Now

Questions 9

What is the purpose of the DHCPv6 Guard?

A. It messages between a DHCPv6 server and a DHCPv6 client ( or relay agent).

B. It shows that clients of a DHCPv5 server are affected.

C. It block DHCPv6 messages from relay agents to a DHCPv6 server.

D. It allows DHCPv6 replay and advertisements from (rouge) DHCPv6 servers.

Buy Now

Questions 10

Refer to the exhibit.

A network engineer is troubleshooting a failed link between R2 and R3. No traffic loss is reported from router R5 to HQ. Which command fixes the separated backbone?

A. R3(config-router)#area 21 virtual-link 192.168.125.5

B. R2(config-router)#area 21 virtual-link 192.168.125.5

C. R3(config-router)#no area 21 stub

D. R2(config-router)#no area 21 stub

Buy Now

Questions 11

Which of the following OSPF Link State Advertisements (LSA's) were created for IPV6 and do not apply to IPv4 OSPF networks? (Choose two.)

A. Link LSA (Type 8)

B. Summary LSA (Type 3)

C. Router LSA (Type 2)

D. Intra-Area Prefix LSA (Type 9)

E. Opaque LSA (Type 9)

Buy Now

Questions 12

Refer to the exhibit.

After a RADIUS server fails AAA authentication, an engineer is trying to reestablish console access to a switch using the local password. Which configuration reestablishes the console access to switch SW1 via AAA?

A. Option A

B. Option B

C. Option C

D. Option D

Buy Now

Questions 13

Refer to the exhibit.

An organization is installing a new L3 MPLS link to establish DMVPN Phase 2 tunnels between the hub and two spoke routers. Which additional configuration should the engineer implement on each device to achieve optimal routing between the spokes?