300-410 Practice Test 2 — 25 Questions

Question 1

A network engineer runs the following command to troubleshoot an IP SLA issue:

R1# debug ip sla trace

IP SLAs trace debugging is on

*Mar  1 12:34:56.789: IP SLAs: Starting operation 10
*Mar  1 12:34:56.789: IP SLAs: Sending ICMP echo request to 192.168.1.1
*Mar  1 12:34:56.790: IP SLAs: Received ICMP echo reply from 192.168.1.1
*Mar  1 12:34:56.790: IP SLAs: RTT = 12 ms
*Mar  1 12:34:56.790: IP SLAs: Operation 10 completed successfully
*Mar  1 12:35:56.789: IP SLAs: Starting operation 10
*Mar  1 12:35:56.789: IP SLAs: Sending ICMP echo request to 192.168.1.1
*Mar  1 12:35:56.790: IP SLAs: Received ICMP echo reply from 192.168.1.1
*Mar  1 12:35:56.790: IP SLAs: RTT = 14 ms
*Mar  1 12:35:56.790: IP SLAs: Operation 10 completed successfully

What does this output indicate?

Accepted Answer

The IP SLA operation is successfully completing each probe cycle.. This debug output shows the IP SLA trace for operation 10 (newer command). It confirms successful ICMP echo probes with RTT values, indicating the operation is functioning correctly.

Answer

The IP SLA operation is failing because the RTT values are too high.

Answer

The IP SLA operation is not configured because no configuration is shown.

Answer

The IP SLA operation is timing out because no reply is received.

Question 2

A router is configured with 'logging host 10.1.1.100' and 'logging trap debugging'. The engineer notices that the router is sending a large number of debug messages to the syslog server, causing high CPU usage. The engineer wants to stop sending debug messages to the remote server but keep them in the local buffer. What is the best command to achieve this?

Accepted Answer

Configure 'logging host 10.1.1.100 trap notifications' to set the remote threshold to severity 5.. To stop sending debug messages to the remote server without affecting local logging, the engineer should change the remote logging severity to a higher level (e.g., 'logging host 10.1.1.100 trap notifications' to set severity 5). This will exclude debug (severity 7) messages from being sent to that specific host. The local buffer can remain at debugging level.

Answer

Configure 'no logging trap debugging' globally.

Answer

Use 'undebug all' to stop all debug output.

Answer

Set 'logging buffered 4096 notifications' to limit local buffer to severity 5.

Question 3

An engineer wants to use EEM to automatically back up the running configuration to a TFTP server whenever a 'write memory' command is executed. Which TWO configuration steps are required? (Choose TWO.)

Accepted Answer

Configure 'event cli pattern "write memory" sync no' under the applet.. The 'event cli' with 'sync no' is needed to avoid blocking the CLI. The 'action cli command' must use the 'copy running-config tftp:' command. The 'event manager applet' is correct, not 'event manager policy'. The 'event syslog' with pattern 'WRITE' is not precise enough. The 'action cli command' should not use 'enable' as a separate action because the applet runs in the same privilege level as the triggering user.

Answer

Define the applet using the 'event manager policy' command instead of 'event manager applet'.

Answer

Add an 'event syslog pattern "WRITE"' to detect the write memory operation.

Answer

Include an 'action cli command "enable"' before the copy command to ensure privileged access.

Question 4

Which TWO statements about the 'time-range' feature in IPv4 ACLs are correct? (Choose TWO.)

Accepted Answer

A time-range can include both absolute and periodic statements simultaneously.. The 'time-range' feature in Cisco IOS allows both absolute (specific start/end dates) and periodic (recurring days/times) statements to be combined within a single time-range definition. This enables flexible scheduling, such as allowing traffic only during business hours on weekdays while also specifying an absolute end date for the policy.

Answer

The time-range is applied to the entire ACL, not individual ACEs.

Answer

If the router's clock is not set, the time-range will be considered active at all times.

Answer

The time-range feature can only be used with extended named ACLs, not standard ACLs.

Question 5

What is the maximum hop count for an EIGRP route?

Accepted Answer

224. EIGRP uses a maximum hop count of 224, not 255 like RIPv2 or other distance-vector protocols. This limit is hard-coded in the EIGRP protocol to prevent routing loops and excessive path lengths, and it is enforced by the EIGRP update process. Routes with a hop count exceeding 224 are considered unreachable and are not installed in the routing table.

Answer

15

Answer

255

Answer

Unlimited

Question 6

An engineer redistributes OSPF routes into EIGRP. The OSPF routes have a metric of 20. After redistribution, the EIGRP topology table shows the routes but they are not installed in the routing table. The 'show ip eigrp topology' shows the route in active state. Which is the most likely explanation?

Accepted Answer

The EIGRP neighbor is stuck-in-active because a query was sent but no reply was received due to a unidirectional link.. When redistributing into EIGRP, a seed metric must be specified. If not, the routes are redistributed with an infinite metric (e.g., 4294967295) and are not installed. However, the question says the route is in active state, which indicates a query is pending. This is an edge case where the route is redistributed with a valid metric but the EIGRP process is stuck-in-active due to a unidirectional link or a neighbor not replying to queries.

Answer

The 'default-metric' command was not configured, so the routes are redistributed with an infinite metric.

Answer

The OSPF routes are external type 2, which are not redistributed by default.

Answer

The 'route-map' used for redistribution has a 'match ip address' that does not match the OSPF routes.

Question 7

A network engineer is troubleshooting an OSPFv2 adjacency issue between two routers connected via a VLAN trunk. R1 and R2 are in different VLANs but are connected through a Layer 2 switch. The engineer has configured 'ip ospf 1 area 0' on the subinterfaces. The adjacency forms but is stuck in INIT state. What is the most likely cause?

Accepted Answer

The routers have the same OSPF router ID.. The INIT state indicates that the router has received a hello packet from the neighbor but the neighbor has not seen its own router ID in the hello packet. This is often due to a mismatch in the OSPF network type or a unicast communication issue. In a VLAN trunk scenario, if the subinterfaces are not in the same VLAN, the routers may not be able to communicate at Layer 2. However, the most common cause is that the routers are using the same router ID, which causes the hello packet to be ignored because the router sees its own router ID in the neighbor list.

Answer

The OSPF hello interval is mismatched between the two routers.

Answer

The subinterfaces are in different VLANs, preventing Layer 2 communication.

Answer

The OSPF network type is set to point-to-point on one side and broadcast on the other.

Question 8

A DMVPN network with NHRP is configured for spoke-to-spoke tunnels. Spoke routers R1 and R2 are both connected to a hub router H1. Spoke-to-spoke traffic is not working. R1's show dmvpn shows a dynamic NHRP mapping for R2's tunnel IP to R2's physical IP, but ping from R1's tunnel IP to R2's tunnel IP fails. R1's show ip nhrp shows the mapping as 'dynamic' with no flags. The hub has no special configuration. What is the root cause?

Accepted Answer

The hub is missing the ip nhrp redirect command, and the spokes are missing ip nhrp shortcut, preventing spoke-to-spoke direct communication.. In a DMVPN phase 3 network, spoke-to-spoke traffic requires the hub to send NHRP redirect messages and the spokes to process them via the `ip nhrp shortcut` command. Without `ip nhrp redirect` on the hub, the hub forwards traffic between spokes without signaling them to establish a direct tunnel. The dynamic NHRP mapping on R1 for R2's tunnel IP indicates that R1 has learned R2's physical address via NHRP registration, but without the shortcut flag, R1 will not use that mapping to send traffic directly; instead, it continues to send traffic through the hub, which fails if the hub does not have a route or if the spoke-to-spoke tunnel is not triggered.

Answer

The spoke routers have incorrect NHRP authentication, causing the mapping to be invalid.

Answer

The tunnel interface on R1 is not in the correct VRF.

Answer

The IPsec transform set is mismatched between spokes.

Question 9

A network engineer runs the following command to troubleshoot an IPv6 traffic filtering issue:

R1# show ipv6 access-list FILTER
IPv6 access list FILTER
    permit ipv6 2001:DB8:1::/48 any sequence 10
    deny ipv6 2001:DB8:2::/48 any sequence 20
    permit ipv6 any any sequence 30

What does this output indicate?

Accepted Answer

The access list will permit traffic from 2001:DB8:1::/48 and deny traffic from 2001:DB8:2::/48, but permit all other IPv6 traffic.. The output shows an IPv6 access list with three explicit entries. Sequence 10 permits traffic from source 2001:DB8:1::/48 to any destination, sequence 20 denies traffic from 2001:DB8:2::/48 to any destination, and sequence 30 permits all other IPv6 traffic. Because sequence 30 explicitly permits any any, traffic not matching the first two entries is permitted, overriding the default implicit deny at the end of the list.

Answer

The access list will permit traffic from 2001:DB8:1::/48 and deny traffic from 2001:DB8:2::/48, and implicitly deny all other IPv6 traffic.

Answer

The access list will deny all traffic because of the deny statement.

Answer

The access list is invalid because IPv6 access lists require implicit deny at the end.

Question 10

What is the default EIGRP composite metric formula used for route calculation?

Accepted Answer

metric = (K1 * bandwidth) + (K3 * delay). The default EIGRP composite metric uses only K1 and K3, which correspond to bandwidth and delay, with K1=1 and K3=1 by default. This yields the formula metric = bandwidth + delay, where bandwidth is calculated as (10^7 / minimum path bandwidth in kbps) * 256 and delay is the sum of interface delays in tens of microseconds multiplied by 256. Option B correctly represents this default behavior.

Answer

metric = bandwidth + delay + load + reliability

Answer

metric = bandwidth + delay + MTU

Answer

metric = (K1 * bandwidth) + (K2 * load) + (K3 * delay) + (K5 / (K4 + reliability))

Question 11

A network engineer notices that routes redistributed from EIGRP into OSPF are causing routing loops. Router R1 has the following relevant configuration: router eigrp 100 redistribute ospf 1 metric 10000 100 255 1 1500 router ospf 1 redistribute eigrp 100 subnets metric-type 1 Router R2 shows: show ip route 192.168.1.0 Routing entry for 192.168.1.0/24 Known via "ospf 1", distance 110, metric 20, type E1 Last update from 10.1.1.1, 00:01:30 ago Also, R2 has a default route via R1. What is the root cause?

Accepted Answer

Mutual redistribution without filtering causes a routing loop; apply distribute-list or route-map with tags.. The mutual redistribution between EIGRP and OSPF without route filtering can cause a routing loop. R1 redistributes OSPF into EIGRP, and EIGRP back into OSPF, creating a feedback loop. The E1 metric of 20 suggests the route was redistributed twice. The correct fix is to implement route tagging and filtering to prevent loop.

Answer

The metric-type 1 should be type 2 to avoid loops.

Answer

The EIGRP metric values are incorrect; they should match OSPF cost.

Answer

The subnets keyword is missing in the redistribute command for OSPF.

Question 12

EIGRP network is experiencing stuck-in-active (SIA) routes. Router R1 shows: show ip eigrp topology active includes 10.0.0.0/24. Router R2 has: interface GigabitEthernet0/0, ip summary-address eigrp 100 10.0.0.0 255.255.255.0. What is the root cause?

Accepted Answer

The summary address on R2 is causing a query for the specific route to be suppressed.. The summary address configured on R2 (ip summary-address eigrp 100 10.0.0.0 255.255.255.0) causes R2 to advertise a single summary route (10.0.0.0/24) to R1. When R1 loses its route to 10.0.0.0/24 and sends a query for the specific prefix, R2 does not reply because the summary address suppresses the query for the more specific route, leaving R1 stuck-in-active (SIA) waiting for a reply that never comes.

Answer

R1 has a stuck interface causing the SIA.

Answer

EIGRP is misconfigured with wrong autonomous system number.

Answer

The route 10.0.0.0/24 is flapping, causing continuous queries.

Question 13

Consider the following partial configuration on a Cisco IOS-XE router:

interface GigabitEthernet0/0
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
!
interface GigabitEthernet0/1
 ip address 203.0.113.1 255.255.255.0
 ip nat outside
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload
access-list 1 permit 192.168.1.0 0.0.0.255

What is the effect of this configuration?

Accepted Answer

All traffic from 192.168.1.0/24 is translated to 203.0.113.1 using PAT.. The configuration uses an ACL (access-list 1) to match traffic from the 192.168.1.0/24 subnet, and the 'ip nat inside source list 1 interface GigabitEthernet0/1 overload' command translates all matching source IP addresses to the single IP address 203.0.113.1 (the outside interface IP) using Port Address Translation (PAT). This is a classic dynamic NAT overload configuration, where multiple internal hosts share one public IP by multiplexing on source ports.

Answer

Only traffic from 192.168.1.1 is translated to 203.0.113.1 using PAT.

Answer

Traffic is translated using static NAT to 203.0.113.1.

Answer

The configuration is incomplete; a NAT pool is required for dynamic translation.

Question 14

What is the default keepalive interval for a GRE tunnel interface on Cisco IOS-XE?

Accepted Answer

10 seconds. The default keepalive interval for a GRE tunnel interface on Cisco IOS-XE is 10 seconds. This is defined by the default behavior of the `keepalive` command on tunnel interfaces, which sends periodic keepalive packets to verify the reachability of the tunnel destination. If no keepalive reply is received within three consecutive intervals (30 seconds by default), the tunnel interface is marked as down.

Answer

5 seconds

Answer

15 seconds

Answer

20 seconds

Question 15

Which IPv6 FHS feature uses a 'device tracking' database to maintain reachability information for hosts?

Accepted Answer

Device Tracking. Device Tracking is the correct answer because it is the IPv6 First Hop Security (FHS) feature that maintains a 'device tracking' database to monitor and store reachability information for hosts. This database tracks the IPv6 address, MAC address, and binding state of each host, enabling features like ND Inspection and DHCPv6 Guard to verify host reachability before forwarding traffic.

Answer

RA Guard

Answer

DHCPv6 Guard

Answer

PACL

Question 16

Router R1 has the following configuration:
```
interface GigabitEthernet0/1
 ip address 10.1.1.1 255.255.255.0
 ip policy route-map PBR-OUT
!
route-map PBR-OUT permit 10
 match ip address 100
 set ip next-hop 192.168.1.1
!
access-list 100 permit ip host 10.1.1.100 any
```
What is the effect of this configuration?

Accepted Answer

Packets received on GigabitEthernet0/1 from source 10.1.1.100 are forwarded to next-hop 192.168.1.1.. The route-map is applied as an inbound policy on the interface, but the name 'PBR-OUT' suggests outbound, which is misleading. However, the 'ip policy route-map' command applies to incoming packets on that interface. The ACL matches source 10.1.1.100 to any destination, and sets next-hop 192.168.1.1.

Answer

Packets transmitted out of GigabitEthernet0/1 to destination 10.1.1.100 are forwarded to next-hop 192.168.1.1.

Answer

All packets from 10.1.1.100 are dropped because the route-map does not have a permit statement.

Answer

The configuration is invalid because the ACL must match destination, not source.

Question 17

What is the default behavior of PBR when a 'set ip next-hop' and a 'set ip default next-hop' are both configured in the same route-map entry?

Accepted Answer

The 'set ip next-hop' is used if reachable; otherwise, the 'set ip default next-hop' is used if the routing table has no explicit route.. The 'set ip next-hop' is evaluated first. If it is reachable, it is used. If not, then the 'set ip default next-hop' is used, but only if there is no explicit route in the routing table.

Answer

The 'set ip default next-hop' is always used first.

Answer

Both are used simultaneously, and the router load-balances.

Answer

The router ignores both and uses the routing table.

Question 18

Which statement accurately describes the default behavior of auto-summary in EIGRP on Cisco IOS-XE?

Accepted Answer

Auto-summary is disabled by default, and EIGRP advertises subnets without automatic summarization.. In Cisco IOS-XE, EIGRP auto-summary is disabled by default. This means that EIGRP advertises subnets without automatically summarizing them at classful boundaries, allowing for more granular route advertisement and preventing routing issues in discontiguous networks.

Answer

Auto-summary is enabled by default, causing EIGRP to summarize at classful boundaries.

Answer

Auto-summary is enabled by default but only for external routes.

Answer

Auto-summary is disabled by default unless the network is configured with a classful mask.

Question 19

Which DHCP message type is used by a client to renew its lease before it expires?

Accepted Answer

DHCPREQUEST. When a DHCP client wants to renew its existing lease before it expires, it sends a unicast DHCPREQUEST message directly to the DHCP server that originally granted the lease. This is part of the renewal process defined in RFC 2131, where the client transitions from the BOUND state to the RENEWING state and uses the server's IP address to request an extension of the lease time.

Answer

DHCPDISCOVER

Answer

DHCPACK

Answer

DHCPRELEASE

Question 20

A network engineer configures an IPv6 over IPv4 GRE tunnel with IPsec protection. The tunnel works for IPv6 traffic, but when the engineer tries to run EIGRP for IPv6 over the tunnel, the neighbor relationship forms but routes are not exchanged. The engineer checks the EIGRP configuration and sees that the tunnel interface is included in the EIGRP process. What is the most likely explanation?

Accepted Answer

EIGRP for IPv6 requires the 'no shutdown' command under the address-family; without it, the process is administratively down.. EIGRP for IPv6 requires the 'no shutdown' command under the address-family configuration to activate the routing process. Without it, the EIGRP process remains administratively down, which prevents route exchange even though the neighbor relationship forms (since EIGRP hellos are sent but routes are not advertised or processed). This is a common misconfiguration when transitioning from EIGRP for IPv4, which does not require an explicit 'no shutdown'.

Answer

The tunnel interface is not configured with 'ipv6 eigrp' under the interface.

Answer

The IPsec transform set does not allow multicast traffic, which EIGRP uses for hellos.

Answer

The GRE tunnel does not support EIGRP for IPv6; only OSPFv3 is supported.