300-410 Practice Test 35 — 15 Questions

Question 1

In a VRF-Lite setup using RIP, what is the default update timer value?

Accepted Answer

30 seconds. RIP sends routing updates every 30 seconds by default, as defined in RFC 1058.

Answer

60 seconds

Answer

90 seconds

Answer

180 seconds

Question 2

What is the default value of the Router Advertisement (RA) interval in IPv6 First Hop Security (FHS) when using the 'ipv6 nd ra-interval' command on an IOS-XE interface?

Accepted Answer

200 seconds. The default Router Advertisement (RA) interval in IPv6 First Hop Security (FHS) when using the 'ipv6 nd ra-interval' command on an IOS-XE interface is 200 seconds. This value is defined by RFC 4861, which specifies that the default RA interval should be between 30 and 1800 seconds, with Cisco implementing a default of 200 seconds for FHS to balance responsiveness and network overhead.

Answer

100 seconds

Answer

600 seconds

Answer

300 seconds

Question 3

An engineer is troubleshooting a VRF-Lite setup where two VRFs (BLUE and RED) are configured on a router. Hosts in VRF BLUE cannot ping the default gateway of VRF RED. Which TWO statements correctly explain why this is expected behavior? (Choose TWO.)

Accepted Answer

Each VRF maintains its own separate routing table, so VRF BLUE has no route to the subnet of VRF RED.. VRF-Lite provides complete isolation between VRFs at Layer 3. By default, no traffic can flow between VRFs unless explicit inter-VRF routing is configured (e.g., using a router with two interfaces in different VRFs or using route leaking). Option A is correct because VRFs maintain separate routing tables. Option C is correct because by default, a router does not forward packets between VRFs. Option B is incorrect because ARP is per-interface, but the issue is routing, not ARP. Option D is incorrect because the default gateway is reachable within its own VRF. Option E is incorrect because the ping fails due to routing, not because of a missing default route in the source VRF.

Answer

The ARP cache in VRF BLUE does not contain the MAC address of the VRF RED gateway.

Answer

The default gateway in VRF RED is not reachable from VRF BLUE because the gateway interface is in a different VRF.

Answer

The ping fails because VRF BLUE does not have a default route pointing to the VRF RED gateway.

Question 4

A network engineer runs the following command on Router R1:

R1# show snmp engineID

Local SNMP engineID: 800000090300001122334455
Local SNMP engineBoots: 5

Based on this output, which statement is correct?

Accepted Answer

The SNMP engine has rebooted 5 times.. The 'Local SNMP engineBoots: 5' value indicates the number of times the SNMP engine has been initialized or rebooted since the engineID was last configured. This counter increments each time the SNMP agent restarts, typically due to a device reload or SNMP process restart, and is used for SNMPv3 message timeliness and authentication.

Answer

The engine ID is 800000090300001122334455, which is the default for all Cisco devices.

Answer

The engineBoots value is used for SNMPv2c community authentication.

Answer

The engine ID must be the same on all devices in the network.

Question 5

A network engineer is troubleshooting an OSPFv2 adjacency issue between two directly connected routers, R1 and R2, both running IOS-XE. The link is a point-to-point Ethernet link. The engineer issues 'show ip ospf neighbor' on R1 and sees no neighbors. 'show ip ospf interface GigabitEthernet0/0' on R1 shows 'Network Type BROADCAST', but the link is actually a point-to-point link. Both routers have 'ip ospf 1 area 0' configured on the interface. What is the most likely cause of the adjacency not forming?

Accepted Answer

The routers have duplicate OSPF router IDs.. The default OSPF network type on Ethernet interfaces is BROADCAST, which requires a DR/BDR election and uses multicast 224.0.0.5 and 224.0.0.6. On a point-to-point link, if both routers do not agree on the network type, they may not form an adjacency because the hello packets are sent differently. However, since both are BROADCAST, they should form an adjacency. The real issue is likely a mismatch in OSPF network type if one side is manually set to POINT-TO-POINT, but here both are BROADCAST. A more common cause is that the interface is administratively down or there is a Layer 1 issue, but the stem indicates the interface is up. Another common cause is that the router IDs are not configured, leading to OSPF not starting. The most likely cause in this scenario is that the routers have duplicate router IDs, which prevents adjacency formation. The stem does not mention router IDs, so the best answer is that the engineer should check for duplicate router IDs.

Answer

The OSPF network type mismatch between the two routers (one is BROADCAST, the other is POINT-TO-POINT).

Answer

The interface is configured with 'ip ospf passive-interface'.

Answer

The OSPF process is not enabled globally; 'router ospf 1' is missing.

Question 6

Router R1 and R2 are iBGP peers in the same AS. R1 learns a route 172.16.1.0/24 from an eBGP peer with AS_PATH 100 200. R2 learns the same prefix from another eBGP peer with AS_PATH 100. Both routers redistribute the route into OSPF with default administrative distance. R3, an OSPF internal router, sees two OSPF external routes for 172.16.1.0/24: one from R1 (type-5, metric 20) and one from R2 (type-5, metric 30). R3's 'show ip route 172.16.1.0' shows the route via R1. What is the root cause of R3 preferring the route via R1?

Accepted Answer

R3 prefers the route with the lower metric (20) over the higher metric (30), which is correct OSPF behavior.. OSPF prefers external routes based on metric (cost) first for type-5 routes. The route from R1 has metric 20, R2 has metric 30, so R1 is preferred. However, if the administrative distance of OSPF external routes is changed via 'distance ospf external 150', then the route with lower AD is chosen. The correct answer is that the default AD for OSPF external is 110, so metric decides. The question implies a trick: the route from R2 might have a higher metric but lower AD due to a configuration, but the default is unchanged.

Answer

R3 has a static route with AD 1 that overrides both OSPF routes.

Answer

The route from R1 is an OSPF inter-area route (AD 110) while from R2 is external (AD 110), so they are equal; metric decides.

Answer

R3's OSPF process has 'distance 150' configured, making all OSPF routes AD 150, but the route from R2 is redistributed from BGP with a lower AD.

Question 7

A network engineer runs the following command to verify IPv6 traffic filtering with logging:

R1# show logging | include FILTER
*Mar 1 00:04:56.789: %IPV6_ACL-6-ACCESSLOGDP: list FILTER denied tcp 2001:DB8:2::1(12345) -> 2001:DB8:3::1(80), 1 packet

What does this output indicate?

Accepted Answer

A TCP packet from 2001:DB8:2::1 to destination 2001:DB8:3::1 port 80 was denied by the access list.. The log message shows an IPv6 ACL (named FILTER) logging a denied TCP packet from source 2001:DB8:2::1 port 12345 to destination 2001:DB8:3::1 port 80. The keyword 'denied' in the log entry confirms the packet was blocked by the access list, making option A correct.

Answer

A TCP packet was permitted by the access list.

Answer

The access list is not applied to any interface.

Answer

The packet was dropped due to uRPF.

Question 8

Which TWO configuration steps are required to implement Policy-Based Routing (PBR) on a Cisco router? (Choose TWO.)

Accepted Answer

Create a route-map with match and set commands.. To implement PBR, you must create a route-map with match and set commands, then apply it to an interface using 'ip policy route-map'. Configuring an ACL is optional if match criteria use other methods. Enabling CEF is not required for PBR. The 'ip route' command is for static routing, not PBR. 'ip local policy route-map' is only for locally generated packets, not a general requirement.

Answer

Configure an access-list to match the traffic.

Answer

Enable CEF globally.

Answer

Use the 'ip local policy route-map' command.

Question 9

A network engineer runs the following command to verify OSPF SPF calculations:

R1# show ip ospf statistics

OSPF Router with ID (1.1.1.1) (Process ID 1)

Area 0: SPF algorithm executed 12 times

SPF calculation time (in msec):
    Total: 12, Average: 1.0
    Minimum: 0, Maximum: 2
  Last SPF due to: LSA change
  Number of LSA changes: 5
  Number of LSA deletions: 2
  Number of LSA additions: 3
  Number of LSA updates: 0

Area 1: SPF algorithm executed 3 times

SPF calculation time (in msec):
    Total: 3, Average: 1.0
    Minimum: 0, Maximum: 1
  Last SPF due to: LSA change
  Number of LSA changes: 2
  Number of LSA deletions: 0
  Number of LSA additions: 2
  Number of LSA updates: 0

What does this output indicate?

Accepted Answer

Area 0 has experienced more network changes than Area 1, as indicated by higher SPF runs and LSA changes.. The output shows OSPF SPF statistics for multiple areas, including number of SPF runs and LSA changes.

Answer

The router has not performed any SPF calculations.

Answer

The SPF calculation time is too high, indicating a performance issue.

Answer

The last SPF was triggered by a timer expiry.

Question 10

What is the default hello interval for OSPFv3 on a broadcast network type in Cisco IOS-XE?

Accepted Answer

10 seconds. OSPFv3 uses the same default hello interval as OSPFv2 for broadcast and point-to-point network types, which is 10 seconds. This is defined in RFC 5340 and is the default on Cisco IOS-XE for OSPFv3 on broadcast networks.

Answer

30 seconds

Answer

40 seconds

Answer

5 seconds

Question 11

Drag and drop the steps to apply and verify an extended IPv4 ACL on a router interface into the correct order, from first to last.

Accepted Answer

Configure extended ACL with permit and deny entries. The correct order is: first, create the ACL with permit/deny statements; second, verify the ACL syntax with show access-list; third, apply it inbound on the interface; fourth, verify the interface configuration with show ip interface; fifth, test connectivity with ping or traceroute.

Question 12

In a DMVPN Phase 2 network with EIGRP, R1 (hub) and R2 (spoke) are configured with EIGRP stub leaking. R2 is a stub router with 'eigrp stub connected summary'. R3 (another spoke) is not a stub. R2's loopback 10.0.0.1/32 is not reachable from R3, even though R2 advertises it via EIGRP. What is the root cause?

Accepted Answer

NHRP is not configured on R2, preventing route advertisement.. In DMVPN Phase 2, EIGRP stub leaking allows the hub to advertise spoke routes to other spokes, but the next-hop remains the spoke's tunnel IP. For R3 to install the route to 10.0.0.1/32, it must have an NHRP mapping to reach R2's tunnel IP. Without NHRP configured on R2, R3 cannot resolve the next-hop, making the route unreachable. The EIGRP stub configuration is correct, but NHRP is missing.

Answer

R2 is configured with 'eigrp stub receive-only', which prevents it from advertising any routes, including connected ones.

Answer

R3 has a distribute-list filtering the prefix 10.0.0.1/32 from EIGRP updates.

Answer

R2's loopback is not in the same EIGRP autonomous system as the tunnel.

Question 13

A large enterprise network is experiencing intermittent reachability from a specific subnet (10.1.1.0/24) to a critical server (192.168.10.10). Router R1 has PBR configured to forward traffic from 10.1.1.0/24 to next-hop 10.2.2.2, but traffic is also being load-balanced via the routing table to 10.3.3.3. Router R2 shows: 'show ip route 192.168.10.10' returns a route via 10.4.4.4, but 'show ip policy' on R1 shows the route-map is applied. What is the root cause?

Accepted Answer

The route-map is missing the 'set ip next-hop verify-availability' command, causing PBR to forward traffic to an unreachable next-hop.. PBR uses a route-map to match traffic and set next-hop. If the route-map does not have a 'set ip next-hop verify-availability' command, PBR will forward traffic to the next-hop even if it is not reachable. In this scenario, the next-hop 10.2.2.2 is not reachable, but PBR still forwards traffic to it, causing intermittent reachability. The routing table load-balancing to 10.3.3.3 works, but PBR overrides it for matched traffic.

Answer

The ACL in the route-map is incorrectly matching traffic from 10.1.1.0/24, causing PBR to be applied to the wrong traffic.

Answer

The routing table on R1 has a higher administrative distance for the route to 192.168.10.10 via 10.3.3.3, causing PBR to be ignored.

Answer

The next-hop 10.2.2.2 is reachable but the path is congested, causing intermittent packet drops.

Question 14

Drag and drop the steps to verify and validate NetFlow and Flexible NetFlow operational state into the correct order, from first to last.

Accepted Answer

Check flow monitor status on interface. Verification starts with checking that the flow monitor is active on the interface, then confirming flow records are being generated, then checking exporter statistics for sent packets, then validating the collector receives the data, and finally comparing flow counts to interface counters for accuracy.

Question 15

Examine the following EIGRP configuration on Router R3:

interface GigabitEthernet0/1
 ip bandwidth-percent eigrp 100 50

What is the effect of this command?

Accepted Answer

EIGRP will limit its control traffic to 50% of the interface bandwidth.. The `ip bandwidth-percent eigrp` command controls the percentage of the interface bandwidth that EIGRP can use for its control traffic (hello packets, updates, queries, and replies). By setting it to 50%, EIGRP will limit its control traffic to 50% of the configured interface bandwidth, preventing it from overwhelming the link. This does not affect data traffic or metric calculation.

Answer

EIGRP will use only 50% of the interface bandwidth for data traffic.

Answer

EIGRP will adjust the metric calculation to use 50% of the bandwidth.

Answer

EIGRP will form neighbor adjacencies only when bandwidth usage is below 50%.