300-410 VOL2

Question 1

In a typical MPLS VPN, routers act as the MPLS label imposition and disposition points in
the network?

Answer 1

C. PE Router

Question 2

In an MPLS network, which of the following describes the role of the Provider (P) router?

Answer 2

B. To connect to PE routers and act as transit routers

Question 3

The MPLS LDP autoconfiguration feature allows you to enable LDP on every interface that is
associated with an IGP instance. Which of the following Interior Gateway Protocols support this?
(Choose two)

Answer 3

A. OSPF
B. IS-IS

Question 4

In an MPLS VPN network, how are customer routes controlled and distributed?

Answer 4

D. It is distributed through the use of route targets

Question 5

At which layer of the OSI model is an MPLS label imposed?

Answer 5

C. Between layers 2 and 3

Question 6

Which of the following are valid IPv6 Router Advertisement (RA) Guard modes? (Select two)

Answer 6

B. Host mode
C. Router mode

Question 7

Which of the following statements are true regarding the e IPv6 RA Guard feature?

Answer 7

B. This feature is supported on private VLANs

Question 8

Unicast Reverse Path Forwarding (uRPF) has been configured on a service provider network to
protect itself from spoofed-based attacks. Which of the following are valid uRPF modes? (Select
two)

Answer 8

A. Strict mode
E. Loose mode

Question 9

Which of the following are commonly used ports when implementing RADIUS-based
authentication and accounting? Select two)

Answer 9

B. UDP port 1812 for authentication
D. UDP port 1813 for accounting

Question 10

Which of the following are valid restrictions when configuring Control Plane Policing (CoPP) on
Cisco devices? (Choose two)

Answer 10

A. You can not use the “log” keyword with CoPP on the access list entries
C. The only match types supported with CoPP is ip precedence, ip dscp, and access-group

Question 11

Which of the following are used to validate the source of IPv6 traffic and are considered IPv6
layer 2 snooping features?

Answer 11

C. IPv6 Source Guard
D. IPv6 Prefix Guard

Question 11

Which of the following are used to validate the source of IPv6 traffic and are considered IPv6
layer 2 snooping features?

Answer 11

C. IPv6 Source Guard
D. IPv6 Prefix Guard

Question 12

You want to implement AAA on router R1 for a more robust authentication and authorization
system. What is typically the first global command used to do this?

Answer 12

A. aaa new-model

Question 13

A time-based access list has been configured on R1 to allow SSH access to the device only on
weekdays. Which of the following are valid options when using the time range command?
(Select two)

Answer 13

C. absolute
D. periodic

Question 14

First-Hop Security (FHS) is a set of features to optimize IPv6 link operation and help with scale in
large L2 domains. Which of the following are valid First-Hop Security features supported by
Cisco? (Select three)

Answer 14

A. IPv6 RA Guard
C. DHCPv6 Guard
D. IPv6 Snooping

Question 15

What are the four stages of obtaining an IP address from a DHCP server that corresponds to the
acronym DORA?

Answer 15

D. Discover, Offer, Request, Acknowledge

Question 16

SNMPv2 has been used throughout a network to manage all of the network devices. You have
been asked to migrate to an SNMPv3 solution instead. What is the biggest advantage to
migrating from SNMPv2 to SNMPv3?

Answer 16

A. Enhanced security, including encryption of passwords

Question 17

You are configuring Netflow on various network elements in order to gain visibility into the traffic
types used. How many export destinations can this Network data be sent to?

Answer 17

A. Up to 2

Question 18

A Cisco router has just been configured for NTP and is synchronized with the configured NTP
server. However, log messages still show an incorrect time. What else should be done to match
the log messages time stamps with the NTP based time?

Answer 18

B. Configure the “service timestamps log datetime localtime” command in global mode.

Question 19

There is an issue between two nodes within your network, and you are using Cisco DNA Center
Path Trace to help troubleshoot the problem. Which of the following statements are true
regarding the Path Trace tool?

Answer 19

C. Path trace between a wired client and a wireless client is supported

Question 20

Which of the following are valid DHCP options that DHCP servers can be configured to use with
DHCP clients when offering a lease? (Choose two)

Answer 20

A. DHCP Option 1: subnet mask