[UPDATED Mar-2024] Best Value Available Preparation Guide for 300-410 Exam [Q317-Q336]

Rate this post

[UPDATED Mar-2024] Best Value Available Preparation Guide for 300-410 Exam

1 Full 300-410 Practice Test and 563 Unique Questions, Get it Now!

Passing the Cisco 300-410 exam requires a deep understanding of advanced routing and services technologies, as well as hands-on experience with Cisco routers and switches. To prepare for the exam, candidates can take official Cisco training courses, use study guides and practice exams, and gain practical experience through lab exercises and network simulations.

The 300-410 exam focuses on advanced routing technologies such as Border Gateway Protocol (BGP), Multiprotocol Label Switching (MPLS), and Quality of Service (QoS), as well as advanced services such as VPN, IP SLA, and Network Address Translation (NAT). 300-410 exam is designed for network engineers who are responsible for designing, implementing, and managing complex enterprise networks that require advanced routing and services.

Q317. LAB SIMULATION
A network is configured with CoPP to protect the CORE router route processor for stability and DDoS protection. As a company policy, a class named class-default is preconfigured and must not be modified or deleted. Troubleshoot CoPP to resolve the issues introduced during the maintenance window to ensure that:

WAN

CORE

MGMT

Q318. Refer to the exhibit.

R1 and R2 are configured for EIGRP peering using authentication and the neighbors failed to come up. Which action resolves the issue?

Configure a matching key-id number on both routers

Configure a matching lowest key-id on both routers

Configure a matching key-chain name on both routers

Configure a matching authentication type on both router

Q319. An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table. What should be configured to accomplish this task?

set ip next-hop

set ip default next-hop

set ip next-hop recursive

set ip next-hop verify-availability

Q320. Refer to the exhibit.

The network administrator configured VRF lite for customer
The technician at the remote site misconfigured VRF on the router. Which configuration will resolve connectivity for both sites of customer_a?

Option A

Option B

Option C

Option D

Q321. Refer to the exhibit.

BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1.
Users report packet loss and interruption of service to applications hosted on the 10.1.1.0724 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command. Which action stabilizes the service?

Tag the 10.1.1.0/24 prefix and deny the prefix from being redistributed into OSPF on R1.

Repeat the test from R4 using ICMP ping on the local 10.1.1.0/24 prefix, and fix any Layer 2 errors on the host or switch side of the subnet.

Place an OSPF distribute-list outbound on R3 to block the 10.1.10/24 prefix from being advertised back to R3.

Reduce frequent OSPF SPF calculations on R3 that cause a high CPU and packet loss on traffic traversing R3.

Q322. The network administrator configured R1 to authenticate Telnet connections based on Cisco ISE using TACACS+. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1(192.168.1.1) with a shared secret password of Cisco123.

The administrator cannot authenticate to R1 based on ISE. Which configuration fixes the issue?

ip tacacs-server host 192.168.1.5 key Cisco123

line vty 0 4
login authentication TAC-SERV

line vty 0 4
login authentication telnet

tacacs-server host 192.168.1.5 key Cisco123

Q323. Refer to the exhibit.

The neighbor relationship is not coming up Which two configurations bring the adjacency up? (Choose two)

NY
router ospf 1
area 0 authentication message-digest

LA
interface E 0/0
ip ospf message-digest-key 1 md5 Cisco123

NY
interface E 0/0
no ip ospf message-digest-key 1 md5 Cisco123
ip ospf authentication-key Cisco123

LA
interface E 0/0
ip ospf authentication-key Cisco123

LA
router ospf 1
area 0 authentication message-digest

Q324.

A network administrator is trying to access a branch router using TACACS+ username and password credentials, but the administrator cannot log in to the router because the WAN connectivity is down. The branch router has following AAA configuration:

Which command will resolve this problem when WAN connectivity is down?

aaa authentication login default group tacacs+ local

aaa authentication login default group tacacs+ enable

aaa authentication login default group tacacs+ console

aaa authentication login console group tacacs+ enable

Q325. Refer to Exhibit.

Which statement about redistribution from BGP into OSPF process 10 is true?

Network 172.16.1.0/24 is not redistributed into OSPF.

Network 10.10 10.0/24 is not redistributed into OSPF

Network 172.16.1.0/24 is redistributed with administrative distance of 1.

Network 10.10.10.0/24 is redistributed with administrative distance of 20.

Q326. Refer to the exhibit.

An engineer must advertise routes into IPv6 MP-BGP and failed. Which configuration resolves the issue on R1?

router bgp 65000
no bgp default ipv4-unicast
address-family ipv6 multicast
network 2001:DB8::/64

router bgp 65000
no bgp default ipv4-unicast
address-family ipv6 unicast
network 2001:DB8::/64

router bgp 64900
no bgp default ipv4-unicast
address-family ipv6 unicast
network 2001:DB8::/64

router bgp 64900
no bgp default ipv4-unicast
address-family ipv6 multicast
neighbor 2001:DB8:7000::2 translate-update ipv6 multicast

Q327. Refer to the exhibit.

Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are uf SLA by defining frequency and schedulingsed

Q328. Refer to the exhibit. After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and hub were not establishing. Which two actions resolve the issue? (Choose two.)

Change the mode from mode tunnel to mode transport on R3.

Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3.

Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3.

Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.

Change the mode from mode transport to mode tunnel on R2.

Q329. What command disables 802.1x authentication on a port and permits traffic without authentication?

dot1x port-control disable

dot1x port-control force-unauthorized

dot1x port-control auto

dot1x port-control force-authorized

The command dot1x port-control force-authorized is used to disable 802.1x on a port and permit traffic without authentication. Dot1x ports are in one of two states, authorized or unauthorized. Authorized ports permit user traffic to flow through the port. This state usually follows successful authentication. Unauthorized ports only permit authorization traffic to flow through the port. Usually a port begins in the unauthorized state. A user is then allowed to exchange AAA authentication traffic with the port. Once the user has been authenticated successfully, the port is changed to the authorized state and the user is permitted to use the port normally.
Normal use of 802.1x has the port configured with the dot1x port-control auto statement. This places the port in the unauthorized state until successful authentication. After successful authentication, the port is changed to the authorized state.
When 802.1x is initially configured, the default port control of the ports is force-authorized. This forces the port to be in the authorized state without successful authentication. This setting disables the need for authentication and permits all traffic.
The force-unauthorized keyword configures the port as an unauthorized port regardless of authentication traffic.
A port configured with this key word would not permit user traffic, not even authentication traffic.
The command dot1x port-control disable is not a valid command due to incorrect syntax.
Objective:
Infrastructure Security
Sub-Objective:
Describe device security using Cisco IOS AAA with TACACS+ and RADIUS
References:
Cisco > Catalyst 6500 Series Release 15.0SY Software Configuration Guide > Security > IEEE 802.1X Port- Based Authentication Cisco > Catalyst 4500 Series Switch Cisco IOS Command Reference, 12.2(52)SG > aaa accounting dot1x default start-stop group radius through instance > dot1x port-control Cisco > Catalyst 4500 Series Switch Cisco IOS Command Reference, 12.2(52)SG > aaa accounting dot1x default start-stop group radius through instance > dot1x port-control

Q330. Refer to the exhibit.

Which configuration configures a policy on R1 to forward any traffic that is sourced from the 192.168.130.0/24 network to R2?

Option A

Option B

Option C

Option D

Q331. Drag and drop the actions from the left into the correct order on the right to configure a policy to avoid following packet forwarding based on the normal routing path.

Q332. Refer to the exhibit.

The AP status from Cisco DNA Center Assurance Dashboard shows some physical connectivity issues from access switch interface G1/0/14. Which command generates the diagnostic data to resolve the physical connectivity issues?

test cable diagnostics tdr interface GigabitEthernet1/0/14

Check cable-diagnostics tdr interface GigabitEthernet1/0/14

show cable-diagnostics tdr interface GigabitEthernet1/0/14

Verify cable-diagnostics tdr interface GigabitEthernet1/0/14

Q333.

Refer to the exhibit. A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.

Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.

Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.

Q334. Refer to the exhibit.

Q335. The network administrator configured the router for Control Plane Policing to limit OSPF traffic to be policed to 1 Mbps. Any traffic that exceeds this limit must also be allowed at this point for traffic analysis. The router configuration is:
access-list 100 permit ospf any any
!
class-map CM-OSPF
match access-group 100
!
policy-map PM-COPP
class CM-OSPF
police 1000000 conform-action transmit
!
control-plane
service-policy output PM-COPP
The Control Plane Policing failed to monitor and police OSPF traffic. Which configuration resolves this issue?

policy-map PM-COPP
class CM-OSPF
no police 1000000 conform-action transmit
police 1000000 conform-action transmit
exceed-action transmit
!
control-plane
no service-policy output PM-COPP

policy-map PM-COPP
class CM-OSPF
no police 1000000 conform-action transmit
police 1000000 conform-action transmit
exceed-action transmit

control-plane
no service-policy output PM-COPP
service-policy input PM-COPP

no access-list 100
access-list 100 deny ospf any any
access-list 100 permit ip any any
!
policy-map PM-COPP
class CM-OSPF
no police 1000000 conform-action transmit
police 1000000 conform-action transmit
exceed-action drop
!
control-plane
no service-policy output PM-COPP
service-policy input PM-COPP

Q336. What is an advantage of using BFD?

It detects local link failure at layer 1 and updates the routing table.

It detects local link failure at layer 3 and updates the routing protocols.

It has sub-second failure detection for layer 1 and layer 3 problems.

It has sub-second failure detection for layer 1 and layer 2 problems.