300-410 Practice Test 27 — 15 Questions

Question 1

What is the maximum number of actions that can be configured in a single EEM applet?

Accepted Answer

255. In Cisco IOS Embedded Event Manager (EEM), a single applet can contain a maximum of 255 actions. This limit is defined by the EEM applet action numbering range, which goes from 1 to 255. Exceeding this limit requires splitting the logic into multiple applets or using Tcl policies, which do not have the same restriction.

Answer

128

Answer

512

Answer

Unlimited

Question 2

Given this configuration:

ip nat pool GLOBAL 203.0.113.1 203.0.113.10 prefix-length 28
ip nat inside source list 10 pool GLOBAL overload
access-list 10 permit 10.0.0.0 0.255.255.255

What is the effect?

Accepted Answer

Inside hosts matching ACL 10 are translated to addresses in the pool using PAT.. The configuration uses `ip nat inside source list 10 pool GLOBAL overload`, which combines a NAT pool with the `overload` keyword to enable Port Address Translation (PAT). ACL 10 permits all 10.0.0.0/8 addresses, so inside hosts matching this ACL are translated to the pool addresses (203.0.113.1–203.0.113.10) with port multiplexing, allowing many hosts to share the same public IP. This is the standard Cisco PAT behavior, making option C correct.

Answer

All inside hosts are translated to the first pool address only.

Answer

Each inside host gets a unique pool address without port translation.

Answer

The prefix-length 28 is invalid; a netmask must be used instead.

Question 3

Drag and drop the steps to configure a Control Plane Policing (CoPP) policy into the correct order, from first to last.

Accepted Answer

Create a class-map to match control plane traffic. The correct order starts by identifying traffic with a class-map, then grouping classes in a policy-map, applying actions (e.g., drop), attaching the policy to the control-plane, and finally verifying the configuration. This follows the standard MQC (Modular QoS CLI) workflow.

Question 4

Drag and drop the steps to troubleshoot Control Plane Policing (CoPP) adjacency or connectivity failures into the correct order, from first to last.

Accepted Answer

Check if CoPP is applied to the control-plane. Troubleshooting CoPP failures starts by checking if the control-plane policy is applied, then verifying the class-map matches the correct protocol, checking for dropped packets, temporarily disabling CoPP to test, and finally adjusting the policy to permit the necessary traffic. This systematic approach isolates the issue without disrupting the network.

Question 5

Which THREE symptoms indicate that IPv6 unicast RPF is misconfigured or failing on an interface? (Choose THREE.)

Accepted Answer

Traffic from a valid source IP is being dropped on the interface.. IPv6 unicast RPF (uRPF) drops traffic when the source address is not reachable via the incoming interface according to the FIB. If a valid source IP is being dropped, it indicates that the RPF check is failing, often due to asymmetric routing or a missing route in the FIB for that source prefix.

Answer

The command 'ipv6 verify unicast source reachable-via any' is present in the running config.

Answer

High CPU utilization is observed due to RPF processing.

Question 6

A network engineer runs the following command on Router R1:

R1# show dmvpn
Legend: Attrb -> S: Static, D: Dynamic, I: Incomplete
        N: NATed, L: Local, X: No Socket
# Entries: 2
Interface: Tunnel0, IPv4 NHRP Details
Type: Hub, NHRP Peers: 2,

# Ent  Peer NBMA Addr Peer Tunnel Addr State  UpDn Tm Attrb
 ----- --------------- --------------- ----- -------- -----
     1 192.168.1.2     10.0.0.2        UP    00:15:30 D
     2 192.168.2.2     10.0.0.3        UP    00:14:20 D

Based on this output, which statement is correct?

Accepted Answer

Both spoke routers have established dynamic NHRP registrations with the hub.. The output shows two dynamic (D) NHRP entries for peers 10.0.0.2 and 10.0.0.3, each with an NBMA address of 192.168.1.2 and 192.168.2.2 respectively. The 'D' attribute indicates these registrations were established dynamically via NHRP registration requests from the spoke routers to the hub, confirming that both spokes have successfully registered with the hub. This is the expected behavior for a DMVPN Phase 2 or Phase 3 hub, where spokes dynamically register their tunnel and NBMA addresses.

Answer

The DMVPN tunnel is not functioning because there are only two peers.

Answer

The hub router has static NHRP entries for the spokes.

Answer

The spokes are not able to communicate with each other.

Question 7

Examine the following partial configuration on a PE router:

interface GigabitEthernet0/1
 ip vrf forwarding CUSTOMER-A
 ip address 10.1.1.1 255.255.255.252
!
router bgp 65000
 neighbor 192.168.1.1 remote-as 65000
 neighbor 192.168.1.1 update-source Loopback0
!
 address-family ipv4 vrf CUSTOMER-A
  neighbor 10.1.1.2 remote-as 65001
  neighbor 10.1.1.2 activate
 exit-address-family

What is the effect of this configuration?

Accepted Answer

The eBGP session between PE and CE will be established successfully.. The configuration shows that the eBGP session between the PE and CE router will be established successfully because the neighbor is configured under the VRF address family with the correct remote-as (65001) and activated. The PE router's interface is in VRF CUSTOMER-A with IP 10.1.1.1/30, and the CE neighbor is 10.1.1.2, which is reachable. The global BGP neighbor 192.168.1.1 is for iBGP and does not affect the VRF session.

Answer

The BGP session will fail because the neighbor must be configured under the global BGP process.

Answer

The BGP session will fail because the neighbor remote-as must match the AS of the PE router.

Answer

The BGP session will fail because the update-source is not specified for the VRF neighbor.

Question 8

Which statement correctly describes the behavior of the 'default-information originate' command in OSPF?

Accepted Answer

It injects a default route as a Type 5 LSA only if a default route exists in the routing table.. The 'default-information originate' command in OSPF injects a default route (0.0.0.0/0) into the OSPF domain as a Type 5 External LSA, but only if a default route already exists in the routing table. Without an existing default route, the command has no effect unless the 'always' keyword is appended. This behavior ensures the router does not advertise a default path it cannot actually use.

Answer

It always injects a default route into OSPF regardless of the routing table.

Answer

It injects a default route as a Type 3 LSA.

Answer

It injects a default route as a Type 7 LSA in all OSPF areas.

Question 9

A network engineer runs the following command on Router R1:

R1# show ip route 10.0.0.0 255.255.252.0 longer-prefixes

Routing entry for 10.0.0.0/22
  Known via "eigrp 100", distance 90, metric 2172416, type internal
  Last update from 192.168.1.2 on GigabitEthernet0/0, 00:00:10 ago
  Routing Descriptor Blocks:
  * 192.168.1.2, from 192.168.1.2, 00:00:10 ago, via GigabitEthernet0/0
      Route metric is 2172416, traffic share count is 1

Routing entry for 10.0.1.0/24
  Known via "eigrp 100", distance 90, metric 2812416, type internal
  Last update from 192.168.1.2 on GigabitEthernet0/0, 00:00:10 ago
  Routing Descriptor Blocks:
  * 192.168.1.2, from 192.168.1.2, 00:00:10 ago, via GigabitEthernet0/0
      Route metric is 2812416, traffic share count is 1

Based on this output, what is the effect of the summary route 10.0.0.0/22?

Accepted Answer

The summary route is not suppressing the more specific route 10.0.1.0/24.. The presence of both the summary route (10.0.0.0/22) and a more specific route (10.0.1.0/24) in the routing table indicates that the summary route is not suppressing the more specific routes, possibly due to a configuration issue or because the summary is not configured as a discard route.

Answer

The summary route is working correctly and suppressing all specifics.

Answer

The summary route has a better metric than the specific route.

Answer

The summary route is not installed in the routing table.

Question 10

Drag and drop the steps to configure an ERSPAN session for remote traffic capture into the correct order, from first to last.

Accepted Answer

Configure source interface and direction. First, you must define the source interface and traffic direction. Next, specify the ERSPAN ID and destination IP address. Then, configure the ERSPAN origin IP address on the source switch. After that, enable the ERSPAN session globally. Finally, verify the session is active.

Question 11

What is the default OSPF hello interval on a point-to-point serial interface?

Accepted Answer

10 seconds. The default OSPF hello interval on a point-to-point serial interface is 10 seconds. This is because OSPF hello intervals are determined by the network type, and point-to-point networks use a 10-second hello interval. This matches the default for broadcast networks, while non-broadcast and point-to-multipoint networks use 30 seconds.

Answer

30 seconds

Answer

40 seconds

Answer

20 seconds

Question 12

Which OSPF LSA type is used to advertise external routes and is flooded throughout the entire OSPF domain?

Accepted Answer

Type 5 (AS-external LSA). Type 5 (AS-external LSA) is correct because it is originated by an ASBR to advertise external routes redistributed into OSPF from another routing domain. These LSAs are flooded throughout the entire OSPF domain, including all areas, and their flooding scope is AS-wide, as defined in RFC 2328.

Answer

Type 1 (Router LSA)

Answer

Type 3 (Summary LSA)

Answer

Type 4 (ASBR Summary LSA)

Question 13

snmp-server community public RO
snmp-server community private RW
snmp-server location DataCenter
snmp-server contact admin@example.com

What is the effect of this configuration?

Accepted Answer

SNMPv2c is enabled with read-only community 'public' and read-write community 'private'.. The configuration uses SNMPv2c community strings 'public' (read-only) and 'private' (read-write), which are plain-text authentication mechanisms. SNMPv2c is enabled by default when community strings are configured, and the 'RO' and 'RW' keywords explicitly define the access levels. This matches option B exactly.

Answer

SNMPv3 is enabled with authentication.

Answer

Only read-only access is allowed using the 'private' community.

Answer

SNMP traps are enabled to the location DataCenter.

Question 14

A network engineer configures BGP on router R4:

router bgp 65004
 bgp router-id 4.4.4.4
 neighbor 10.4.4.3 remote-as 65003
 neighbor 10.4.4.3 password BGPsecret
!

What is the effect of the password command?

Accepted Answer

It enables MD5 authentication for the TCP session; the neighbor must also have the same password.. The 'neighbor ... password' command in Cisco IOS BGP enables MD5 authentication for the TCP session between BGP peers. The password is used to generate an MD5 hash that is included in TCP segments, and both neighbors must be configured with the same password for the session to establish. This prevents unauthorized BGP peering and protects against TCP reset attacks.

Answer

It encrypts the BGP updates using the password as a key.

Answer

It sets a simple password that is sent in clear text with each BGP update.

Answer

It has no effect unless the neighbor is configured with the same password.

Question 15

A network engineer runs the following command to troubleshoot a Route Redistribution issue:

R1# show ip bgp vpnv4 vrf CUSTOMER routes

And sees the following output:

Network          Next Hop            Metric LocPrf Weight Path
Route Distinguisher: 100:1 (default for vrf CUSTOMER)
*> 192.168.10.0/24  10.1.1.2                 0    100      0 65001 i
*> 192.168.20.0/24  10.1.1.2                 0    100      0 65001 i

What does this output indicate?

Accepted Answer

The VRF CUSTOMER has two routes learned via BGP from AS 65001.. The output shows two prefixes (192.168.10.0/24 and 192.168.20.0/24) inside the VRF CUSTOMER's VPNv4 table, each with an AS path of '65001 i' and next hop 10.1.1.2. The trailing 'i' indicates the origin is IGP (network statement or redistribution with origin i), and the AS path shows the routes were received from eBGP peer in AS 65001. Therefore the VRF has two BGP-learned routes from AS 65001.

Answer

The routes are redistributed from OSPF into BGP within the VRF.

Answer

The VRF is not receiving any routes because of a redistribution issue.

Answer

The routes are locally originated within the VRF.