300-410: Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) Part 4
Question #: 181
Topic #: 1
An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted.
Which action resolves the issue?
A. Configure all devices for SNMPv3 informs with auth.
B. Configure all devices for SNMPv3 informs with priv.
C. Configure all devices for SNMPv3 traps with auth.
D. Configure all devices for SNMPv3 traps with priv.
Selected Answer: B
Question #: 182
Topic #: 1
Refer to the exhibit. An engineer is monitoring reachability of the configured default routes to ISP1 and ISP2. The default route from ISP1 is preferred if available.
How is this issue resolved?
A. Use the icmp-echo command to track both default routes.
B. Use the same AD for both default routes.
C. Start IP SLA by matching numbers for track and ip sla commands.
D. Start IP SLA by defining frequency and scheduling it.
Selected Answer: D
Question #: 183
Topic #: 1
Refer to the exhibits. An engineer identified a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?
A. spanning-tree portfast bpduguard
B. no spanning-tree uplinkfast
C. spanning-tree backbonefast
D. spanning-tree loopguard default
Selected Answer: D
Question #: 184
Topic #: 1
Refer to the exhibit. An engineer receives this error message when trying to access another router in-band from the serial interface connected to the console of
R1.
Which configuration is needed on R1 to resolve this issue?
A. R1(config)#line vty 0 R1(config-line)# transport output ssh
B. R1(config)#line console 0 R1(config-line)# transport output ssh
C. R1(config)#line console 0 R1(config-line)# transport preferred ssh
D. R1(config)#line vty 0 R1(config-line)# transport output ssh R1(config-line)# transport preferred ssh
Selected Answer: B
Question #: 185
Topic #: 1
Refer to the exhibit. The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new
IP address.
What two actions must be taken to resolve this issue? (Choose two.)
A. Configure the server to use DHCP on the network with default gateway 200.30.40.100.
B. Configure the server with a static IP address and default gateway.
C. Configure the router to exclude a server IP address.
D. Configure the server to use DHCP on the network with default gateway 200.30.30.100.
E. Configure the router to exclude a server IP address and default gateway.
Selected Answer: BC
Question #: 186
Topic #: 1
Refer to the exhibit. A user has set up an IP SLA probe to test if a non SLA host web server on IP address 10.1.1.1 accepts HTTP sessions prior to deployment.
The probe is failing.
Which action should the network administrator recommend for the probe to succeed?
A. Re-issue the ip sla schedule command.
B. Add the control disable option to the tcp connect.
C. Modify the ip sla schedule frequency to forever.
D. Add icmp-echo command for the host.
Selected Answer: B
Question #: 187
Topic #: 1
Refer to the exhibit. A network administrator is using the DNA Assurance Dashboard panel to troubleshoot an OSPF adjacency that failed between Edge_NYC
Interface GigabitEthernet1/3 with Neighbor Edge_SNJ. The administrator observes that the neighborship is stuck in the exstart state.
How does the administrator fix this issue?
A. Configure to match the OSPF interface network types on both routers.
B. Configure to match the OSPF interface speed and duplex settings on both routers.
C. Configure to match the OSPF interface MTU settings on both routers.
D. Configure to match the OSPF interface unique IP address and subnet mask on both routers.
Selected Answer: C
Question #: 188
Topic #: 1
Refer to the exhibit. A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log messages stream, it is impossible to capture the problem.
Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two.)
A. debug condition ospf neighbor
B. debug condition interface
C. debug condition session-id ADJCHG
D. debug condition all
Selected Answer: BC
Question #: 189
Topic #: 1
Refer to the exhibit.
A network is under a cyberattack. A network engineer connected to R1 by SSH and enabled the terminal monitor via SSH session to find the source and destination of the attack. The session was flooded with messages, which made it impossible for the engineer to troubleshoot the issue.
Which command resolves this issue on R1?
A. (config)#terminal no monitor
B. (config)#no terminal monitor
C. #no terminal monitor
D. #terminal no monitor
Selected Answer: D
Question #: 190
Topic #: 1
Refer to the exhibit.
A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer fails.
Which action resolves this issue?
A. The Python interpreter must first be enabled with the guestshell enable command.
B. The SSH access must be allowed on the VTY lines using the transport input ssh command.
C. The SSH service must be enabled with the crypto key generate rsa command.
D. The SCP service must be enabled with the ip scp server enable command.
Selected Answer: D
Question #: 191
Topic #: 1
Refer to the exhibit.
An engineer configured SNMP communities on the Core_Sw1, but the SNMP server cannot obtain information from Core_Sw1.
Which configuration resolves this issue?
A. access-list 20 permit 10.221.10.11
B. snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22
C. snmp-server group NETVIEW v2c priv read NETVIEW access 20
D. access-list 20 permit 10.221.10.12
Selected Answer: A
Question #: 192
Topic #: 1
Refer to the exhibit.
Which two commands provide the administrator with the information needed to resolve the issue? (Choose two.)
A. debug snmpv3 engine-id
B. show snmp user
C. debug snmp packet
D. debug snmp engine-id
E. show snmpv3 user
Selected Answer: BC
Question #: 193
Topic #: 1
Refer to the exhibit.
The network administrator can see the DHCP discovery packet in R1, but R2 is not replying to the DHCP request. The R1 related interface is configured with the
DHCP helper address. If the PC is directly connected to the Fa0/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC.
Which two commands resolve this issue? (Choose two.)
A. service dhcp-relay command on R1
B. ip dhcp relay information enable command on R1
C. ip dhcp option 82 command on R2
D. service dhcp command on R1
E. ip dhcp relay information trust-all command on R2
Selected Answer: DE
Question #: 194
Topic #: 1
A network administrator performed a Compact Flash Memory upgrade on a Cisco Catalyst 6509 Switch. Everything is functioning normally except SNMP, which was configured to monitor the bandwidth of key interfaces but the interface indexes are changed.
Which global configuration resolves the issue?
A. snmp-server ifindex persist
B. snmp-server ifindex permanent
C. snmp ifindex persist
D. snmp ifindex permanent
Selected Answer: A
Question #: 195
Topic #: 1
Refer to the exhibit. R1 is configured with IP SLA to check the availability of the server behind R6 but it kept failing.
Which configuration resolves the issue?
A. R6(config)#ip sla responder udp-echo ip address 10.10.10.1 port 5000
B. R6(config)#ip access-list extended DDOS R6(config-ext-nacl)#5 permit icmp host 10.10.10.1 host 10.66.66.66
C. R6(config)#ip sla responder
D. R6(config)#ip access-list extended DDOS R6(config-ext-nacl)#5 permit icmp host 10.66.66.66 host 10.10.10.1
Selected Answer: B
Question #: 196
Topic #: 1
Refer to the exhibit. An engineer configured IP SLA on R1 to avoid the ISP link flapping problem, but it is not working as designed. IP SLA should wait 30 seconds before switching traffic to a secondary connection and then revert to the primary link after waiting 20 seconds, when the primary link is available and stabilized.
Which configuration resolves the issue?
A. R1(config)#track 700 ip sla 700 R1 (config-track)#delay down 30 up 20
B. R1 (config)#ip sla 700 R1(config-ip-sla)#delay down 30 up 20
C. R1 (config)#ip sla 700 R1(config-ip-sla)#delay down 20 up 30
D. R1(config)#track 700 ip sla 700 R1(config-track)#delay down 20 up 30
Selected Answer: A
Question #: 197
Topic #: 1
Refer to the exhibit. An engineer must block access to the console ports for all corporate remote Cisco devices based on the recent corporate security policy but the security team still can connect through the console port.
Which configuration on the console port resolves the issue?
A. login and password
B. exec 0 0
C. transport input telnet
D. no exec
Selected Answer: D
Question #: 198
Topic #: 1
Refer to the exhibit. A network administrator is troubleshooting IPv6 address assignment for a DHCP client that is not getting an IPv6 address from the server.
Which configuration retrieves the client IPv6 address from the DHCP server?
A. ipv6 address autoconfig command on the interface
B. ipv6 dhcp server automatic command on DHCP server
C. ipv6 dhcp relay-agent command on the interface
D. service dhcp command on DHCP server
Selected Answer: A
Question #: 199
Topic #: 1
Refer to the exhibit. A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using
SNMP and TFTP servers.
Which configuration prevents changes from unauthorized NMS and TFTP servers?
A. access-list 20 permit 10.221.10.11 access-list 20 deny any log ! snmp-server group NETVIEW v3 priv read NETVIEW access 20 snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20 snmp-server community Cisc0Us3r RO 20 snmp-server community Cisc0wrus3r RW 20 snmp-server tftp-server-list 20
B. access-list 20 permit 10.221.10.11 access-list 20 deny any log ! snmp-server group NETVIEW v3 priv read NETVIEW access 20 snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20 snmp-server community Cisc0wrus3r RO 20 snmp-server community Cisc0Us3r RW 20 snmp-server tftp-server-list 20
C. access-list 20 permit 10.221.10.11 access-list 20 deny any log
D. access-list 20 permit 10.221.10.11
Selected Answer: A
Question #: 200
Topic #: 1
An engineer creates a Cisco DNA Center cluster with three nodes, but all the services are running on one host node.
Which action resolves this issue?
A. Restore the link on the switch interface that is connected to a cluster link on the Cisco DNA Center.
B. Click system updates, and upgrade to the latest version of Cisco DNA Center.
C. Enable service distribution from the Systems 360 page.
D. Click the master host node with all the services and select services to be moved to other hosts.
Selected Answer: C
Question #: 201
Topic #: 1
Refer to the exhibit. The AP status from Cisco DNA Center Assurance Dashboard shows some physical connectivity issues from access switch interface G1/0/14.
Which command generates the diagnostic data to resolve the physical connectivity issues?
A. check cable-diagnostics tdr interface GigabitEthernet1/0/14
B. verify cable-diagnostics tdr interface GigabitEthernet1/0/14
C. show cable-diagnostics tdr interface GigabitEthernet1/0/14
D. test cable-diagnostics tdr interface GigabitEthernet1/0/14
Selected Answer: D
Question #: 202
Topic #: 1
Refer to the exhibit. An engineer configured NetFlow on R1, but the NMS server cannot see the flow from R1.
Which configuration resolves the issue?
A. interface Ethernet0/1 flow-destination 10.221.10.11
B. interface Ethernet0/0 flow-destination 10.221.10.11
C. flow exporter FlowAnalyzer1 destination 10.221.10.11
D. flow monitor Flowmonitor1 destination 10.221.10.11
Selected Answer: C
Question #: 203
Topic #: 1
Refer to the exhibit. An engineer cannot copy the IOS.bin file from the FTP server to the switch.
Which action resolves the issue?
A. Allow file permissions to download the file from the FTP server.
B. Add the IOS.bin file, which does not exist on FTP server.
C. Make memory space on the switch flash or USB drive to download the file.
D. Use the copy flash:/ ftp://cisco@10.0.0.2/IOS.bin command.
Selected Answer: B
Question #: 204
Topic #: 1
Refer to the exhibit. After reloading the router, an administrator discovered that the interface utilization graphs displayed inconsistencies with their previous history in the NMS.
Which action prevents this issue from occurring after another router reload in the future?
A. Configure SNMP interface index persistence on the router.
B. Save the router configuration to startup-config before reloading the router.
C. Rediscover all the router interfaces through SNMP after the router is reloaded.
D. Configure SNMP to use static OIDs referring to individual router interfaces.
Selected Answer: A
Question #: 205
Topic #: 1
Refer to the exhibit. In an attempt to increase the network security, the administrator applied the Gi3-in ACL to the Gi3 interface. After the ACL was applied, clients in the network connected to Gi3 lost their ability to obtain IP settings from DHCP.
Which two configuration commands must be added to the Gi3-in ACL to reinstate the DHCP service for the clients? (Choose two.)
A. 74 permit udp 192.168.30.0 0.0.0.255 eq bootpc host 192.168.255.3 eq bootps
B. 71 permit udp host 0.0.0.0 eq bootps host 255.255.255.255 eq bootpc
C. 73 permit udp host 0.0.0.0 eq bootpc host 192.168.255.3 eq bootps
D. 72 permit udp host 192.168.255.3 eq bootps 192.168.30.0 0.0.0.255 eq bootpc
E. 75 permit udp host 0.0.0.0 eq bootpc host 255.255.255.255 eq bootps
Selected Answer: A
Question #: 206
Topic #: 1
Refer to the exhibit. Router R2 should be learning the route for 10.123.187.0/24 via EIGRP. Which action resolves the issue without introducing more issues?
A. Redistribute the route in EIGRP with metric, delay, and reliability.
B. Use distribute-list to modify the route as an internal EIGRP route.
C. Use distribute-list to filter the external routes in OSPF.
D. Remove route redistribution in R2 for this route in OSPF.
Selected Answer: D
Question #: 207
Topic #: 1
Refer to the exhibit. The control plane is heavily impacted after the CoPP configuration is applied to the router. Which command removal lessens the impact on the control plane?
A. access-list 120 permit tcp any gt 1024 eq bgp log
B. access-list 120 permit ospf any
C. access-list 120 permit udp any any eq pim-auto-rp
D. access-list 120 permit eigrp any host 224.0.0.10
Selected Answer: A
Question #: 208
Topic #: 1
Refer to the exhibit. An engineer is trying to add an encrypted user password that should not be visible in the router configuration. Which two configuration commands resolve the issue?
(Choose two.)
A. username Admin password Cisco@123
B. service password-encryption
C. username Admin secret Cisco@123
D. password encryption aes
E. no service password-encryption
F. username Admin password 5 Cisco@123
Selected Answer: AB
Question #: 209
Topic #: 1
A customer reports that traffic is not passing on an EIGRP enabled multipoint interface on a router configured as below:
Which action resolves the issue?
A. Enable poison reverse.
B. Disable split horizon.
C. Disable poison reverse.
D. Enable split horizon.
Selected Answer: B
Question #: 210
Topic #: 1
Refer to the exhibit. A loop occurs between R1, R2, and R3 while EIGRP is run with poison reverse enabled. Which action prevents the loop between R1, R2, and
R3?
A. Enable split horizon.
B. Configure R3 as stub receive-only.
C. Configure route tagging.
D. Configure route filtering.
Selected Answer: D
Question #: 211
Topic #: 1
Refer to the exhibit. An error message “an OSPF-4-FLOOD_WAR” is received on SW2 from SW1. SW2 is repeatedly receiving its own link-state advertisement and flushes it from the network. Which action resolves the issue?
A. Change area 5 to a normal area from a nonstub area.
B. Resolve different subnet mask issue on the link.
C. Configure Layer 3 port channel on interfaces between switches.
D. Resolve duplicate IP address issue in the network.
Selected Answer: D
Question #: 212
Topic #: 1
Which two components are required for MPLS Layer 3 VPN configuration? (Choose two.)
A. Use LDP for customer routes.
B. Use pseudowire for Layer 2 routes.
C. Use a unique RD per customer VRF.
D. Use OSPF between PE and CE.
E. Use MP-BGP for customer routes.
Selected Answer: CE
Question #: 213
Topic #: 1
Refer to the exhibit. Which configuration resolves the IP SLA issue from R1 to the server?
A. R6(config)#ip sla responder
B. R6(config)#ip sla 650 R6(config-ip-sla)#udp-jitter 10.60.60.6
C. R6(config)#ip sla responder udp-echo ipaddress 10.60.60.6 po 5000
D. R6(config)#ip sla schedule 10 life forever start-time now
Selected Answer: A
Question #: 214
Topic #: 1
A network administrator added a new spoke site with dynamic IP on the DMVPN network. Which configuration command passes traffic on the DMVPN tunnel from the spoke router?
A. ip nhrp registration no-registration
B. ip nhrp registration dynamic
C. ip nhrp registration no-unique
D. ip nhrp registration ignore
Selected Answer: D
Question #: 215
Topic #: 1
Refer to the exhibit. Which configuration enables OSPF for area 0 interfaces to establish adjacency with a neighboring router with the same VRF?
A. router ospf 1 vrf CCNP network 10.1.1.1 0.0.0.0 area 0 network 10.2.2.2 0.0.0.0 area 0
B. router ospf 1 interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0
C. router ospf 1 vrf CCNP interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0
D. router ospf 1 vrf CCNP network 10.0.0.0 0.0.255.255 area 0
Selected Answer: C
Question #: 216
Topic #: 1
Refer to the exhibit. TCP traffic should be reaching host 10.10.10.10/24 via R2. Which action resolves the issue?
A. Allow TCP in the access list with no changes to the route map.
B. Add a permit 20 statement in the route map to allow TCP traffic.
C. TCP traffic will reach the destination via R2 without any changes.
D. Set IP next-hop to 10.10.12.2 under the route-map permit 10 to allow TCP traffic.
Selected Answer: A
Question #: 217
Topic #: 1
A newly installed spoke router is configured for DMVPN with the ip mtu 1400 command. Which configuration allows the spoke to use fragmentation with the maximum negotiated TCP MTU over GRE?
A. ip tcp adjust-mss 1360 crypto ipsec fragmentation mtu-discovery
B. ip tcp adjust-mss 1360 crypto ipsec fragmentation after-encryption
C. ip tcp payload-mtu 1360 crypto ipsec fragmentation after-encryption
D. ip tcp payload-mtu 1360 crypto ipsec fragmentation mtu-discovery
Selected Answer: B
Question #: 218
Topic #: 1
Refer to the exhibit. During ISP router maintenance, the network produced many alerts because of the flapping interface. Which configuration on R1 resolves the issue?
A. ip verify drop-rate notify hold-down 60
B. snmp trap link-status down
C. snmp trap ip verify drop-rate
D. no snmp trap link-status
Selected Answer: D
Question #: 219
Topic #: 1
Refer to the exhibit. Reachability between servers in a network deployed with DHCPv6 is unstable. Which command must be removed from the configuration to make DHCPv6 function?
A. ipv6 nd ra suppress
B. address prefix 2001:0:1:4::/64 lifetime infinite infinite
C. ipv6 dhcp server DHCP POOL
D. ipv6 address 2001:0:1:4::1/64
Selected Answer: A
Question #: 220
Topic #: 1
A customer requested a GRE tunnel through the provider network between two customer sites using loopback to hide internal networks. Which configuration on
R2 establishes the tunnel with R1?
A. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1400 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 192.168.20.1 R2(config-if)#tunnel destination 192.168.10.1
B. R2(config)#interface Tunnel1 R2(config-if#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1400 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 10.10.2.2 R2(config-if)#tunnel destination 10.10.1.1
C. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1500 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 10.10.2.2 R2(config-if)#tunnel destination 10.10.1.1
D. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1500 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 192.168.20.1 R2(config-if)#tunnel destination 10.10.1.1
Selected Answer: B
Question #: 221
Topic #: 1
Refer to the exhibit. R1 and R2 are configured for EIGRP peering using authentication and the neighbors failed to come up. Which action resolves the issue?
A. Configure a matching lowest key-id on both routers.
B. Configure a matching authentication type on both routers.
C. Configure a matching key-id number on both routers.
D. Configure a matching key-chain name on both routers.
Selected Answer: A
Question #: 222
Topic #: 1
Refer to the exhibit. Mutual redistribution is enabled between RIP and EIGRP on R2 and R5. Which configuration resolves the routing loop for the 192.168.1.0/24 network?
A. R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any
B. R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any
C. R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192. 168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any
D. R2: router eigrp 7 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 7 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 7 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 7 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any
Selected Answer: D
Question #: 223
Topic #: 1
Which method provides failure detection in BFD?
A. long duration, low overhead
B. short duration, low overhead
C. long duration, high overhead
D. short duration, high overhead
Selected Answer: B
Question #: 224
Topic #: 1
Refer to the exhibit. R4 is experiencing packet drop when trying to reach 172.16.2.7 behind R2. Which action resolves the issue?
A. Insert a /24 floating static route on R2 toward R3 with metric 254.
B. Disable auto summarization on R2.
C. Enable auto summarization on all three routers R1, R2, and R3.
D. Insert a /16 floating static route on R2 toward R3 with metric 254.
Selected Answer: A
Question #: 225
Topic #: 1
Refer to the exhibit. An engineer must advertise routes into IPv6 MP-BGP and failed. Which configuration resolves the issue on R1?
A. router bgp 64900 no bgp default ipv4-unicast address-family ipv6 unicast redistribute ospf network 2001:DB9::/64
B. router bgp 64900 no bgp default ipv4-unicast address-family ipv6 multicast neighbor 2001:DB8:7000::2 translate-update ipv6 multicast
C. router bgp 65000 no bgp default ipv4-unicast address-family ipv6 unicast network 2001:DB8::/64
D. router bgp 65000 no bgp default ipv4-unicast address-family ipv6 multicast network 2001:DB8::/64
Selected Answer: C
Question #: 226
Topic #: 1
Refer to the exhibit. The administrator is trying to overwrite an existing file on the TFTP server that was previously uploaded by another router. However, the attempt to update the file fails.
Which action resolves this issue?
A. Make the TFTP folder writable by all on the TFTP server.
B. Make the package.conf file writable by all on the TFTP server.
C. Make the package.conf file executable by all on the TFTP server.
D. Make sure to run the TFTP service on the TFTP server.
Selected Answer: B
Question #: 227
Topic #: 1
Refer to the exhibit. A network engineer applied a filter for ISA traffic on OSPFv3 inter area routes on the area 5 ABR to protect advertising the internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes. After the respective route filtering configuration is applied on the
ABR, area 5 routes are not visible on any of the areas. How must the filter list be applied on the ABR to resolve this issue?
A. in the “in” direction for area 5 on router R1
B. in the “in” direction for area 20 on router R2
C. in the “out” direction for area 20 on router R2
D. in the “out” direction for area 5 on router R1
Selected Answer: C
Question #: 228
Topic #: 1
Refer to the exhibit. The R2 loopback interface is advertised with RIP and EIGRP using default values. Which configuration changes make R1 reach the R2 loopback using RIP?
A. R1(config)#router rip R1(config-router)#distance 90
B. R1(config)#router eigrp 1 R1(config-router)#distance eigrp 130 120
C. R1(config)#router rip R1(config-router)#distance 100
D. R1(config)#router eigrp 1 R1(config-router)#distance eigrp 120 120
Selected Answer: B
Question #: 229
Topic #: 1
Refer to the exhibit. A network administrator notices these console messages from host 10.11.110.12 originating from interface E1/0. The administrator considers this an unauthorized attempt to access SNMP on R1. Which action prevents the attempts to reach R1 E1/0?
A. Configure IOS control plane protection using ACL 90 on interface E1/0.
B. Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12.
C. Add a permit statement including the host 10.11.110.12 into ACL 90.
D. Configure IOS management plane protection using ACL 90 on interface E1/0.
Selected Answer: B
Question #: 230
Topic #: 1
Refer to the exhibit. R6 should reach R1 via R5>R2>R1. Which action resolves the issue?
A. Decrease the cost to 2 between R6-R5-R2.
B. Increase the cost to 61 between R2-R3-R1.
C. Increase the cost to 61 between R2 and R3.
D. Decrease the cost to 41 between R2 and R1.
Selected Answer: C
Question #: 231
Topic #: 1
An engineer failed to run diagnostic commands on devices using Cisco DNA Center. Which action in Cisco DNA Center resolves the issue?
A. Enable Secure Shell.
B. Enable APIs.
C. Enable CDP.
D. Enable Command Runner.
Selected Answer: D
Question #: 232
Topic #: 1
Refer to the exhibit. The static route is not present in the routing table of an adjacent OSPF neighbor router. Which action resolves the issue?
A. Configure a permit 20 statement to the route map to redistribute the static route.
B. Configure the next-hop interface at the end of the static route for it to get redistributed.
C. Configure the next hop of 10.20.20.1 in the prefix list DMZ-STATIC.
D. Configure the subnets keyword in the redistribution command.
Selected Answer: D
Question #: 233
Topic #: 1
Refer to the exhibit. Packets arriving from source 209.165.200.215 must be sent with the precedence bit set to 1, and packets arriving from source
209.165.200.216 must be sent with the precedence bit set to 5. Which action resolves the issue?
A. set ip precedence critical in route-map Texas permit 20
B. set ip precedence critical in route-map Texas permit 10
C. set ip precedence priority in route-map Texas permit 20
D. set ip precedence immediate in route-map Texas permit 10
Selected Answer: A
Question #: 234
Topic #: 1
Refer to the exhibit. An engineer must redistribute networks 192.168.10.0/24 and 192.168.20.0/24 into OSPF from EIGRP, where the metric must be added when traversing through multiple hops to start an external route of 20. The engineer notices that the external metric is fixed and does not add at each hop. Which configuration resolves the issue?
A. R2(config)#access-list 10 permit 192.168.10.0 0.0.0.255 R2(config)#access-list 10 permit 192.168.20.0 0.0.0.255 ! R2(config)#route-map RD permit 10 R2(config-route-map)#match ip address 10 R2(config-route-map)#set metric 20 R2(config-route-map)#set metric-type type-2 ! R2(config)#router ospf 10 R2(confjg-router)#redistribute eigrp 10 subnets route-map RD
B. R2(config)#access-list 10 permit 192.168.10.0 0.0.0.255 R2(config)#access-list 10 permit 192.168.20.0 0.0.0.255 ! R2(config)#route-map RD permit 10 R2(config-route-map)#match ip address 10 R2(config-route-map)#set metric 20 R2(config-route-map)#set metric-type type-1 ! R2(config)#router ospf 10 R2(config-router)#redistribute eigrp 10 subnets route-map RD
C. R1(config)#access-list 10 permit 192.168.10.0 0.0.0.255 R1(config)#access-list 10 permit 192.168.20.0 0.0.0.255 ! R1(config)#route-map RD permit 10 R1(config-route-map)#match ip address 10 R1(config-route-map)#set metric 20 R1(config-route-map)#set metric-type type-1 ! R1(config)#router ospf 10 R1(config-router)#redistribute eigrp 10 subnets route-map RD
D. R1(config)#access-list 10 permit 192.168.10.0 0.0.0.255 R1(config)#access-list 10 permit 192.168.20.0 0.0.0.255 ! R1(config)#route-map RD permit 10 R1(config-route-map)#match ip address 10 R1(config-route-map)#set metric 20 R1(config-route-map)#set metric-type type-2 ! R1(config)#router ospf 10 R1(config-router)#redistribute eigrp 10 subnets route-map RD
Selected Answer: B
Question #: 235
Topic #: 1
An engineer notices that R1 does not hold enough log messages to identify the root cause during troubleshooting. Which command resolves this issue?
A. #logging buffered 4096 critical
B. #logging buffered 16000 critical
C. (config)#logging buffered 16000 informational
D. (config)#logging buffered 4096 informational
Selected Answer: C
Question #: 236
Topic #: 1
Which feature minimizes DoS attacks on an IPv6 network?
A. IPv6 Binding Security Table
B. IPv6 Router Advertisement Guard
C. IPv6 Prefix Guard
D. IPv6 Destination Guard
Selected Answer: D
Question #: 237
Topic #: 1
Refer to the exhibit. A network administrator must block ping from user 3 to the App Server only. An inbound standard access list is applied to R1 interface G0/0 to block ping. The network administrator was notified that user 3 cannot even ping user 9 anymore. Where must the access list be applied in the outgoing direction to resolve the issue?
A. R2 interface G0/0
B. SW1 interface G1/10
C. R2 interface G1/0
D. SW1 interface G2/21
Selected Answer: B
Question #: 238
Topic #: 1
Refer to the exhibit. Clients on ALS2 receive IPv4 and IPv6 addresses, but clients on ALS1 receive only IPv4 addresses and not IPv6 addresses. Which action on
DSW1 allows clients on ALS1 to receive IPv6 addresses?
A. Configure DSW1(dhcp-config)#default-router 2002:A04:A01::A04:A01
B. Configure DSW1(config-if)#ipv6 dhcp relay destination 2002:404:404::404:404 GigabitEthernet1/2
C. Configure DSW1(config)#ipv6 route 2002:404:404::404:404/128 FastEthernet1/0
D. Configure DSW1(config-if)#ipv6 helper address 2002:404:404::404:404
Selected Answer: B
Question #: 239
Topic #: 1
Refer to the exhibit. An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead of current best path. Which action resolves the issue?
A. Configure higher MED to select as the best path.
B. Configure AS_PATH prepend for the current best path.
C. Configure AS_PATH prepend for the desired best path.
D. Configure lower LOCAL_PREF to select as the best path.
Selected Answer: B
Question #: 240
Topic #: 1
What is a function of IPv6 Source Guard?
A. It inspects ND and DHCP packets to build an address binding table.
B. It works with address glean or ND to find existing addresses.
C. It notifies the ND protocol to inform hosts if the traffic is denied by it.
D. It denies traffic from known sources and allocated addresses.
Selected Answer: B
