300-410 Practice Test 25 — 15 Questions

Question 1

An engineer configures a route map to filter OSPF routes using a distribute-list in OSPF process 1. The distribute-list references a prefix-list that permits only the 10.0.0.0/8 network. After applying the distribute-list in, the engineer notices that the OSPF neighbor state remains stuck in EXSTART/EXCHANGE. Which is the most likely explanation?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

There is an MTU mismatch between the OSPF neighbors, preventing the exchange of Database Description packets.. OSPF distribute-list in only filters routes in the routing table, not LSAs. It does not affect the exchange of LSAs during adjacency formation. The adjacency stall is unrelated to the distribute-list; the issue is likely an MTU mismatch between the interfaces.

Answer

The distribute-list is applied incorrectly; it should be applied out instead of in.

Answer

The distribute-list filters LSAs during the exchange, causing the neighbor to be stuck.

Answer

The prefix-list is misconfigured; it should permit 10.0.0.0/8 with a ge 24 operator.

Question 2

Which TWO statements about the 'match ip address' command within a route-map are true? (Choose TWO.)

Accepted Answer

It can reference a standard access-list, extended access-list, or prefix-list.. The 'match ip address' command can reference either a standard or extended access-list, or a prefix-list. It matches the destination network of the route. It cannot match source address (that would be 'match ip next-hop' or 'match ip route-source'). The command can be used in both permit and deny sequences. A single route-map sequence can have multiple match commands, but they are logically ANDed only if under the same match statement type.

Answer

It matches the source IP address of the route.

Answer

It can only be used in a route-map sequence with a 'permit' clause.

Answer

The command 'match ip address prefix-list' is not valid.

Question 3

A network engineer runs the following command on Router R1:

R1# show ip route 10.1.1.0
Routing entry for 10.1.1.0/24
  Known via "eigrp 100", distance 170, metric 30720
  Redistributing via eigrp 100
  Last update from 192.168.1.2 on GigabitEthernet0/0, 00:00:05 ago
  Routing Descriptor Blocks:
  * 192.168.1.2, from 192.168.1.2, 00:00:05 ago, via GigabitEthernet0/0
      Route metric is 30720, traffic share count is 1

Based on this output, which statement is correct?

Accepted Answer

The route 10.1.1.0/24 is an EIGRP external route, likely redistributed.. The output shows an EIGRP route with an administrative distance of 170, which is the default distance for EIGRP external routes. This indicates the route was redistributed into EIGRP from another protocol or process. The metric of 30720 is the default for a redistributed connected route.

Answer

The route 10.1.1.0/24 is an EIGRP internal route.

Answer

The route 10.1.1.0/24 is learned via OSPF and redistributed into EIGRP.

Answer

The administrative distance of 170 is non-default and must have been manually configured.

Question 4

A network engineer runs the following command to troubleshoot a SPAN issue:

R1# show monitor session 1 detail
Session 1
---------
Type                   : Local Session
Source Ports           : 
    Both               : Gi0/0
Destination Ports      : Gi0/1
    Encapsulation      : Native
    Ingress            : Disabled

What does this output indicate?

Accepted Answer

The session is correctly configured to send traffic from Gi0/0 to Gi0/1.. The output shows a valid local SPAN session: source Gi0/0 (both directions) is copied to destination Gi0/1 with native encapsulation. Ingress on the destination is disabled by default and is not required for a working SPAN session, so the configuration is correct.

Answer

The session is misconfigured because the destination port should have ingress enabled.

Answer

The session is misconfigured because the source port must be a VLAN.

Answer

The session is misconfigured because encapsulation must be set to 'replicate'.

Question 5

A network engineer runs the following command to verify OSPFv3 database:

R1# show ipv6 ospf database router 2.2.2.2

OSPFv3 Router with ID (1.1.1.1) (Process ID 1)

Router Link States (Area 0)

LS age: 60
  LS Type: Router Links
  Link State ID: 0.0.0.0
  Advertising Router: 2.2.2.2
  LS Seq Number: 80000003
  Checksum: 0x5678
  Length: 40
  Number of Links: 1

Link connected to: a Transit Network
     (Link ID) Interface ID: 2
     (Link Data) Neighbor Interface ID: 1
      Number of TOS metrics: 0
       TOS 0 Metrics: 10

What does this output indicate?

Accepted Answer

The LSA indicates a single transit link with interface IDs, typical for OSPFv3.. The output shows an OSPFv3 Router LSA from router 2.2.2.2 with one link to a transit network, using interface IDs instead of IP addresses.

Answer

The LSA shows a link to a stub network with prefix information.

Answer

The advertising router is 1.1.1.1.

Answer

This is a Type 5 External LSA.

Question 6

Drag and drop the steps to troubleshoot Administrative Distance adjacency or connectivity failures into the correct order, from first to last.

Accepted Answer

Verify physical connectivity and interface status. First, verify the physical connectivity and layer 1/2 status, then check the routing protocol neighbor adjacency, next examine the AD values of the routes learned from the neighbor, then review any route filtering or redistribution policies, and finally test end-to-end connectivity to confirm the fix.

Question 7

A network engineer runs the following command to verify OSPF SPF calculations:

R1# show ip ospf statistics

OSPF Router with ID (1.1.1.1) (Process ID 1)

Area 0: SPF algorithm executed 12 times

SPF calculation time (in msec):
    Total: 12, Average: 1.0
    Minimum: 0, Maximum: 2
  Last SPF due to: LSA change
  Number of LSA changes: 5
  Number of LSA deletions: 2
  Number of LSA additions: 3
  Number of LSA updates: 0

Area 1: SPF algorithm executed 3 times

SPF calculation time (in msec):
    Total: 3, Average: 1.0
    Minimum: 0, Maximum: 1
  Last SPF due to: LSA change
  Number of LSA changes: 2
  Number of LSA deletions: 0
  Number of LSA additions: 2
  Number of LSA updates: 0

What does this output indicate?

Accepted Answer

Area 0 has experienced more network changes than Area 1, as indicated by higher SPF runs and LSA changes.. The output shows Area 0 executed the SPF algorithm 12 times with 5 LSA changes (2 deletions, 3 additions), while Area 1 executed SPF only 3 times with 2 LSA changes. More SPF runs and more LSA changes in Area 0 directly indicate greater topology churn in that area. The 'Last SPF due to: LSA change' line confirms the trigger was an LSA event, not a timer.

Answer

The router has not performed any SPF calculations.

Answer

The SPF calculation time is too high, indicating a performance issue.

Answer

The last SPF was triggered by a timer expiry.

Question 8

Which THREE symptoms indicate a problem with SNMP trap delivery from a Cisco router? (Choose THREE.)

Accepted Answer

The NMS does not receive traps, but other SNMP operations (gets) work.. SNMP traps are sent as unsolicited UDP packets from the router to the NMS, while SNMP get operations use a separate request-response mechanism. If gets succeed but traps fail, the issue is typically with trap configuration (e.g., wrong target IP, community string mismatch, or UDP port 162 blocked) rather than general SNMP or network connectivity.

Answer

The router CPU utilization is consistently above 90%.

Answer

The NMS can ping the router successfully.

Question 9

What is the default administrative distance for a route learned via the Routing Information Protocol (RIP)?

Accepted Answer

120. RIP routes have a default administrative distance of 120.

Answer

100

Answer

110

Answer

130

Question 10

Examine this OSPF configuration on router R5:

router ospf 1
 network 10.0.0.0 0.255.255.255 area 0
 passive-interface default
 no passive-interface GigabitEthernet0/0

What is the effect of the passive-interface default command?

Accepted Answer

All interfaces except GigabitEthernet0/0 will be passive; GigabitEthernet0/0 will send and receive OSPF hellos.. The `passive-interface default` command sets all OSPF-enabled interfaces to passive mode by default, meaning they will not send or receive OSPF hello packets. The subsequent `no passive-interface GigabitEthernet0/0` explicitly overrides this default for that interface, making it active. Therefore, all interfaces except GigabitEthernet0/0 become passive, while GigabitEthernet0/0 participates fully in OSPF by sending and receiving hellos.

Answer

All interfaces are passive, including GigabitEthernet0/0, because the no passive-interface command is ignored.

Answer

Only interfaces with network statements will be affected; other interfaces remain active.

Answer

The configuration is invalid because passive-interface default cannot be used with OSPF.

Question 11

A network engineer is troubleshooting an MPLS L3 VPN where OSPF is used as the PE-CE routing protocol. The customer reports that routes from one site are not being learned at another site. The engineer checks the PE routers and finds that the OSPF routes are present in the VRF routing table but not in the MP-BGP table. What is the most likely cause?

Accepted Answer

The OSPF routes are not being redistributed into BGP.. When OSPF routes are present in the VRF routing table but not in MP-BGP, the most likely cause is that redistribution from OSPF into BGP is not configured. MP-BGP only advertises routes that are explicitly redistributed or network statements are used. Without redistribution, the routes remain local to the VRF and are not propagated as VPNv4 routes. Other issues like route target or VRF configuration would manifest differently.

Answer

The route target configuration is incorrect.

Answer

The OSPF process is not configured with the correct VRF.

Answer

The BGP router ID is not unique.

Question 12

Which TWO configuration steps are required to successfully redistribute OSPF routes into EIGRP on a Cisco router? (Choose TWO.)

Accepted Answer

Enter EIGRP router configuration mode using the 'router eigrp ' command.. Option A is correct because redistribution into EIGRP must be configured from within EIGRP router configuration mode, entered with the 'router eigrp ' command, where the 'redistribute ospf ' statement is then issued. Option D is correct because EIGRP requires a seed metric for redistributed routes; without it the routes are not installed, so you must supply bandwidth, delay, reliability, load, and MTU either via the 'default-metric' command or inline with the redistribute command. Option B is not required because a route-map is optional filtering, not a mandatory step for OSPF-to-EIGRP redistribution. Option C is wrong because 'redistribute eigrp' under OSPF router configuration mode performs the reverse direction (EIGRP into OSPF), not OSPF into EIGRP. Option E is wrong because 'default-information originate' only injects a default route into OSPF and is unrelated to redistributing OSPF routes into EIGRP.

Answer

Configure a route-map under OSPF to match OSPF routes for redistribution.

Answer

Use the 'redistribute eigrp <as-number>' command under OSPF router configuration mode.

Answer

Issue the 'default-information originate' command under OSPF to advertise redistributed routes.

Question 13

Consider the following partial configuration on router R6:

router bgp 65001
 bgp router-id 6.6.6.6
 neighbor 10.0.0.2 remote-as 65002
 neighbor 10.0.0.2 route-map SET-MED out
!
route-map SET-MED permit 10
 set metric 50

What is the effect of this configuration?

Accepted Answer

The route-map will set the MED to 50 for all routes advertised to neighbor 10.0.0.2, and all routes will be advertised.. The route-map SET-MED is applied as an outbound route-map on the BGP neighbor 10.0.0.2. Since the route-map has a permit statement with no match clause, it implicitly matches all routes. The set metric 50 command then sets the MED (Multi-Exit Discriminator) to 50 for all routes advertised to that neighbor. All routes are still advertised because the route-map does not contain any deny statements or match conditions that would filter them.

Answer

Only routes that match a specific prefix will have MED set to 50; other routes will not be advertised.

Answer

The configuration is invalid because the route-map must have a match clause.

Answer

The MED will only be set if the neighbor is also configured with a route-map for inbound updates.

Question 14

Which of the following is true regarding the default behavior of NAT in Cisco IOS when handling ICMP traffic?

Accepted Answer

ICMP NAT entries timeout after 60 seconds by default.. C is correct because Cisco IOS NAT uses a default timeout of 60 seconds for ICMP NAT entries. When an ICMP packet is translated, the router creates a NAT translation entry, and if no subsequent traffic matches that entry within 60 seconds, the entry is removed. This behavior is independent of TCP or UDP timeouts and is specific to ICMP.

Answer

ICMP traffic is not translated by NAT unless explicitly configured.

Answer

ICMP NAT entries use the same timeout as TCP entries by default.

Answer

ICMP NAT entries are permanent and do not time out.

Question 15

Which TWO statements about Flexible NetFlow flow monitors and flow exporters are true? (Choose TWO.)

Accepted Answer

A flow monitor can reference only one flow record, but multiple flow monitors can reference the same flow record.. Option A is correct because a Flexible NetFlow flow monitor is configured with exactly one flow record via the 'record' command, but that same flow record can be reused by any number of flow monitors. Option E is correct because a flow exporter is a reusable configuration object that can be referenced by multiple flow monitors at the same time, allowing several monitors to send data to the same destination. Option B is false because there is no restriction limiting a flow exporter to a single flow monitor. Option C is false because Flexible NetFlow defaults to NetFlow version 9 export format, not version 5. Option D is false because a flow monitor is applied to an interface with the 'ip flow monitor <name> input/output' command, while 'ip flow-export' is used for traditional NetFlow export configuration.

Answer

A flow exporter can be referenced by only one flow monitor to avoid export conflicts.

Answer

The default export format for Flexible NetFlow is NetFlow version 5.

Answer

The flow monitor is applied to an interface using the 'ip flow-export' command.