300-410 Practice Test 10 — 10 Questions

Question 1

In VRF-Lite, which routing protocols can be used within a VRF?

Accepted Answer

OSPF, EIGRP, RIP, and BGP can all be configured per VRF.. VRF-Lite supports running any standard routing protocol independently within each VRF, including OSPF, EIGRP, RIP, and BGP. Each VRF maintains its own routing table and protocol instance, so you configure the protocol under the VRF address family or with the 'vrf' keyword. This per-VRF isolation is the core value of VRF-Lite — multiple virtual routing domains on one physical router.

Answer

Only static routing is supported in VRF-Lite.

Answer

Only OSPF and EIGRP are supported in VRF-Lite.

Answer

BGP cannot be used within a VRF in VRF-Lite.

Question 2

Consider the following BGP configuration with BFD:

router bgp 65000
 neighbor 10.1.1.2 remote-as 65001
 neighbor 10.1.1.2 fall-over bfd
!
interface GigabitEthernet0/0
 ip address 10.1.1.1 255.255.255.252
 bfd interval 200 min_rx 200 multiplier 4
!

What is the effect of the 'neighbor fall-over bfd' command?

Accepted Answer

BGP will use BFD for fast failure detection; if BFD goes down, BGP will reset the session immediately.. The 'neighbor fall-over bfd' command enables BGP to use BFD for fast failure detection. When BFD detects a failure, BGP will immediately tear down the peering session without waiting for the hold timer.

Answer

BGP will use BFD to detect link failures, but the BGP hold timer still applies.

Answer

BGP will ignore the BFD session and continue using its own keepalive/hold mechanism.

Answer

The 'fall-over bfd' command is only needed if BFD timers are less than 100 ms.

Question 3

Which TWO statements about MPLS label imposition, disposition, and swapping are true? (Choose TWO.)

Accepted Answer

Penultimate Hop Popping (PHP) reduces the processing load on the egress LSR by having the penultimate LSR pop the label.. Option A is correct because Penultimate Hop Popping (PHP) lets the penultimate LSR pop the MPLS label before forwarding the packet to the egress LSR, so the egress LSR receives a plain IP packet and avoids an extra label lookup, reducing its processing load. Option B is correct because a core/intermediate LSR performs the label swap operation, replacing the incoming label value with the outgoing label value from its LFIB (LIB) entry before forwarding the frame. Option C is wrong because label imposition (push) is performed by the ingress LSR (ingress edge LER), not the egress LSR, which performs disposition (pop) or receives an already-popped packet. Option D is wrong because PHP is a normal behavior between adjacent LSRs and does not require the egress LSR to be non-adjacent to the penultimate LSR. Option E is wrong because PHP is enabled by default on Cisco IOS routers (the implicit null label is advertised), not disabled by default requiring explicit configuration.

Answer

The egress LSR performs label imposition (push) before forwarding the IP packet to the destination.

Answer

PHP is enabled only when the egress LSR is not directly connected to the penultimate LSR.

Answer

By default, PHP is disabled on Cisco IOS routers and must be explicitly configured.

Question 4

Given the following partial configuration on router R1:

ip sla 10
 icmp-echo 192.168.1.1 source-ip 10.0.0.1
 frequency 10
ip sla schedule 10 life forever start-time now

Which statement best describes the effect of this configuration?

Accepted Answer

It sends ICMP echo requests from 10.0.0.1 to 192.168.1.1 every 10 seconds.. The ip sla 10 configuration defines an ICMP echo operation with destination 192.168.1.1 and source-ip 10.0.0.1, with a frequency of 10 seconds. The ip sla schedule 10 life forever start-time now activates it immediately and indefinitely, so R1 sends ICMP echo requests from 10.0.0.1 to 192.168.1.1 every 10 seconds.

Answer

It sends ICMP echo requests from 192.168.1.1 to 10.0.0.1 every 10 seconds.

Answer

It sends ICMP echo requests every 10 seconds but only after the first successful reply.

Answer

It sends ICMP echo requests only once and then stops.

Question 5

Given this IP SLA configuration on router R4:

ip sla 40
 icmp-echo 10.10.10.1 source-ip 172.16.1.1
 frequency 15
ip sla schedule 40 life forever start-time now

Which statement is true?

Accepted Answer

The source IP 172.16.1.1 must be configured on an interface of R4.. In Cisco IOS IP SLA ICMP-echo operations, the source-ip specified must be a valid IP address configured on a local interface of the router (or reachable via a loopback). The router uses this address as the source of the ICMP echo packets, so it must be locally assigned; otherwise the operation cannot source the probe and will fail. This makes option A correct.

Answer

The source IP 172.16.1.1 can be any IP address, even if not local.

Answer

The operation will fail because frequency 15 is too high.

Answer

The operation will use TCP instead of ICMP.

Question 6

Drag and drop the steps to configure Flexible NetFlow with a custom flow record into the correct order, from first to last.

Accepted Answer

Define flow record with match ipv4 source address. The correct order follows Cisco IOS-XE configuration logic: first define the flow record with match fields, then define the flow exporter with destination and source, then define the flow monitor binding record and exporter, then apply the monitor to an interface in the ingress direction, and finally verify with 'show flow monitor'.

Question 7

A network engineer runs the following command on Router R1:

R1# show ip sla statistics 6

Round Trip Time (RTT) for Index 6
   Latest RTT: 0 ms
   Latest RTT (milliseconds): 0
   Latest RTT (microseconds): 0
   Number of successes: 0
   Number of failures: 100
   Operation time to live: Forever
   Output: No connection

R1# show track 4
Track 4
  IP SLA 6 reachability
  Reachability is Down
    3 changes, last change 00:05:00
  Latest operation return code: No connection
  Latest RTT (milliseconds): 0
  Tracked by:
    ip route 0.0.0.0 0.0.0.0 192.168.4.1 track 4

R1# show ip route 0.0.0.0 0.0.0.0
% Network not in table

Based on this output, which statement is correct?

Accepted Answer

The target 192.168.4.1 is unreachable, causing the IP SLA to fail and the static route to be removed.. The track is down due to 'No connection', and the static route is not in the routing table. This indicates that the IP SLA probe cannot reach the target, and the tracked route has been removed.

Answer

The static route is still present because the track is down.

Answer

The IP SLA operation is successful, but the track is misconfigured.

Answer

The IP SLA operation has a threshold violation, but the route is still active.

Question 8

An engineer configures a route-map to filter OSPF routes using a distribute-list. The distribute-list is applied inbound on an OSPF interface. Unexpectedly, the router still installs the filtered routes. Which is the most likely explanation?

Accepted Answer

The route is also learned via another OSPF neighbor that is not filtered by the distribute-list.. When a distribute-list is applied inbound on an OSPF interface, it filters routes received from that specific neighbor only. If the same route is also learned from another OSPF neighbor (or via a different OSPF process) that is not covered by the distribute-list, the router will still install that route from the unfiltered source. This is because OSPF installs the best route based on metric, regardless of the filtering applied to a single neighbor.

Answer

The distribute-list is applied to the wrong direction; it should be outbound to filter routes being advertised.

Answer

The distribute-list uses an ACL that does not match the route exactly, so the route is permitted.

Answer

The distribute-list is applied after the route is already installed in the routing table, so it has no effect.

Question 9

A network engineer runs the following command on Router R1:

R1# show ip sla summary

IPSLAs Latest Operation Summary

Codes: * active, ^ inactive, ~ pending

ID       Type            Destination       Stats          Return Code      Last
1        icmp-echo       192.168.1.1       RTT=50ms       OK               1s ago
2        icmp-echo       192.168.1.2       RTT=2000ms     Over threshold   2s ago
3        icmp-echo       192.168.1.3       RTT=100ms      OK               3s ago

Based on this output, which statement is correct?

Accepted Answer

IP SLA operation 2 is experiencing high latency, exceeding the configured threshold.. The 'Return Code' column shows 'Over threshold' for ID 2, meaning the RTT exceeded the configured threshold. The other operations are OK. This output does not indicate failure or timeout unless the return code says so.

Answer

IP SLA operation 2 has failed because the destination is unreachable.

Answer

IP SLA operation 1 is not active because it shows 'OK'.

Answer

IP SLA operation 3 has a pending status.

Question 10

A network engineer runs the following command to verify MPLS L3VPN operation:

R1# show bgp ipv4 unicast 10.1.1.0/24

Output:
BGP routing table entry for 10.1.1.0/24, version 10
Paths: (1 available, best #1, table default)
  Advertised to update-groups:
     1
  Refresh Epoch 1
  Local
    0.0.0.0 from 0.0.0.0 (10.0.0.1)
      Origin incomplete, metric 0, localpref 100, weight 32768, valid, sourced, best

What does this output indicate?

Accepted Answer

The route is locally originated and is the best path. The output shows 'Local' origin, '0.0.0.0 from 0.0.0.0', 'weight 32768', and 'sourced, best', which are all indicators that the route was locally originated on this router (e.g., via a network statement or redistribution) and is currently the best path. The 'best #1' and 'valid, sourced, best' confirm it is selected for the BGP table. There is no peer address or AS path, which rules out learning from a BGP neighbor.

Answer

The route is learned from a BGP peer

Answer

The route has an MPLS label

Answer

The route is in a VRF