300-410 VOL3 Flashcards
Which feature of the Cisco DNA Center allows you to run diagnostic CLI commands to the devices
that are managed by DNA Center for troubleshooting purposes?
A. Command Runner
You want to change the Administrative Distance of external EIGRP routes from the default of 170
to 130 instead on router R1 while leaving the default AD value for internal EIGRP routes. Which
set of commands will accomplish this?
B. R1(config)#router eigrp 1
R1(config-router)#distance eigrp 90 130
Which of the following are valid TFTP error codes? (Choose two)
A. Error Code 1 – File not found
D. Error code 6 – File already exists
Refer to the exhibit. For a DMVPN network on the hub router, OSPF routing protocol was set up
by an administrator. Suggest a command from below options that will enable DMVPN to establish
tunnel with multiple spokes?
B. ip ospf network point-to-multipoint on both spoke routers
What are the two prerequisites of setting up DMVPN tunnel? (Choose two)
A. Before a multipoint GRE (mGRE) and IPsec tunnel can be established, define an
Internet Key Exchange (IKE) policy by using the crypto isakmp policy command.
C. To enable 2547oDMPVN - Traffic Segmentation Within DMVPN configure
multiprotocol label switching (MPLS) by using the mpls ip command
Refer to the exhibit. An administrator is setting up above shown routers to enable MVPN with
mGRE mode. What would be the recommended interface configuration that must be done by
the engineer to make it to work?
B. interface Tunnel0
description mGRE - DMVPN Tunnel
ip address 10.0.0.1 255.255.255.0
ip nhrp map multicast dynamic
ip nhrp network-id 1
tunnel source 10.0.0.1
tunnel mode gre multipoint
Select three benefits of setting up an MPLS Network from the below options. (Choose three)
A. Connection less Service
B. Security as good as connection-oriented VPNs
D. Integrated QoS support
Refer to the Exhibit. The access-lists are configured on the network device. There is a server
behind the network device. User are trying to access the server securely however they are not
able to access it. What changes would you recommend to the above configuration?
C. Permit tcp port 443
Which of the following is true regarding IPsec Pre-fragmentation (Look-Ahead Fragmentation)?
(Select two)
C. Is used to help in the overall IPsec throughput since the end host is able to avoid packet
reassembly after packet decryption.
Which of the following correctly describes the concept of split horizon with IP routing? (Choose
two)
A. Split horizon is a valid routing loop prevention mechanism
C. When enabled, split horizons informs the router to not advertise routes back out the
same interface from where that route was originally received.
A network administrator is reloading a router and during the bootup, he is getting the error
message “%Error opening tftp://255.255.255.255/network-confg (Socket error)”. What
command need to be applied on Cisco Router to fix this issue.
A. No service config
What is the term used when it causes the packets to lose their MPLS labels including the VPN
information that lies in the inner MPLS Label i.e. if a packet goes through an untagged interface,
the VPN information is lost and VPN sites lose connectivity.
B. Black Hole
An administrator wants to implement security on his company’s router. Please select three
options that you will use on your router to secure it. (Choose three).
A. Control Access to the router
C. Restrict SNMP
E. Encrypt all passwords
What command will you run to identify the issue?
B. Debug crypto isakmp
Select the best option from the below options that you would recommend to implement.
C. DMVPN
