300-410 Practice Test 46 — 15 Questions

Question 1

Which TWO symptoms indicate that syslog messages are not being sent to the remote syslog server? (Choose TWO.)

Accepted Answer

The syslog server receives messages from other devices but not from this router.. Option B is correct because if the remote syslog server is receiving messages from other devices but not from this specific router, it directly indicates that this router's syslog messages are not reaching the server, isolating the fault to the router's logging configuration or connectivity. Option D is correct because the 'show logging' output includes a 'Logging to' section that lists configured remote syslog hosts; if the syslog server's IP address is absent there, no remote logging destination is configured, so messages cannot be sent to it. Option A does not indicate a problem, since messages appearing in the local buffer is normal and can coexist with successful remote logging. Option C is not a valid symptom because 'show log' is not a standard Cisco IOS command for verifying syslog destinations, and no output would not specifically prove remote syslog failure. Option E is not a reliable indicator because debug output appearing on the console is expected behavior and does not by itself show that syslog messages are failing to reach the remote server.

Answer

The 'show logging' command shows messages in the local buffer.

Answer

The 'show log' command returns no output.

Answer

Debug output appears on the console but not on the syslog server.

Question 2

Which statement about the Next Hop Resolution Protocol (NHRP) in DMVPN is correct regarding the purpose of NHRP Registration Request packets?

Accepted Answer

They are used to register the spoke's tunnel IP and NBMA address with the hub.. NHRP Registration Request packets are sent by spokes to the hub to register their tunnel IP address and NBMA (Non-Broadcast Multiple Access) address. This allows the hub to maintain a mapping of tunnel IPs to NBMA addresses, enabling dynamic tunnel establishment between spokes.

Answer

They are used to resolve the NBMA address of a destination tunnel IP address.

Answer

They are used to purge outdated NHRP cache entries on the hub.

Answer

They are used to establish an IPsec security association between spokes.

Question 3

In EIGRP, what is the default behavior of auto-summary in IOS-XE versions 15.0 and later?

Accepted Answer

Auto-summary is disabled by default.. Starting with Cisco IOS 15.0(1)M and IOS-XE 15.x, EIGRP auto-summary is disabled by default for both classic and named modes. This change aligned EIGRP with modern classless routing behavior and prevents the suboptimal routing caused by summarizing at classful boundaries.

Answer

Auto-summary is enabled by default.

Answer

Auto-summary is enabled only for EIGRP named mode.

Answer

Auto-summary is disabled only for EIGRP classic mode.

Question 4

Which statement correctly describes the behavior of the 'logging synchronous' command on a Cisco IOS device?

Accepted Answer

It causes syslog messages to be displayed only after a carriage return.. The 'logging synchronous' command on a Cisco IOS device ensures that syslog messages are displayed only after the user presses Enter (carriage return). This prevents log messages from interrupting the user's command input, making the console session more readable.

Answer

It disables all syslog messages on the console line.

Answer

It changes the severity level of messages sent to the console.

Answer

It enables logging to a synchronous serial interface.

Question 5

A network engineer is troubleshooting a BGP route advertisement issue. Router R1 (AS 65001) has an eBGP session with R2 (AS 65002). R1 is advertising the prefix 192.168.1.0/24 to R2. On R2, the route appears in the BGP table but is not installed in the routing table. The output of 'show ip bgp 192.168.1.0/24' on R2 shows the route as valid, best, but with the 'r' flag (RIB-failure). The routing table on R2 shows a static route for 192.168.1.0/24 with administrative distance 1. What is the most likely cause?

Accepted Answer

The BGP route is not installed because a static route with a lower administrative distance exists for the same prefix.. RIB-failure occurs when BGP tries to install a route but a route with a lower administrative distance already exists. Here, the static route (AD 1) is preferred over the eBGP route (AD 20).

Answer

The BGP route is not installed because the next-hop is unreachable.

Answer

The BGP route is not installed because BGP synchronization is enabled.

Answer

The BGP route is not installed because the prefix length is too long.

Question 6

Which statement correctly describes the behavior of PBR when the next-hop specified in a 'set ip next-hop' command is unreachable?

Accepted Answer

The router uses the routing table to forward the packet.. When the next-hop specified by 'set ip next-hop' is unreachable, PBR does not drop the packet by default. Instead, the router falls back to the normal routing table lookup for the destination and forwards the packet accordingly. This fallback behavior preserves connectivity when the PBR next-hop fails.

Answer

The packet is dropped immediately.

Answer

The router sends an ICMP unreachable message.

Answer

The router uses the default route if configured.

Question 7

In OSPF, what is the default hello interval on a point-to-point network type?

Accepted Answer

10 seconds. In OSPF, the default hello interval on a point-to-point network type is 10 seconds, matching the default for broadcast networks. The dead interval is 4 times the hello interval, so 40 seconds on point-to-point. These timers must match between OSPF neighbors on the same segment for adjacency to form.

Answer

30 seconds

Answer

5 seconds

Answer

40 seconds

Question 8

In OSPFv3, what is the purpose of the link-local address in the neighbor adjacency process?

Accepted Answer

The link-local address is used as the source address for OSPFv3 packets and for next-hop resolution.. In OSPFv3, the link-local address (fe80::/10) is used as the source address for OSPFv3 packets and for next-hop resolution. OSPFv3 uses link-local addresses for neighbor discovery and adjacency formation, and all OSPFv3 control packets are sent from the link-local address. This is a key difference from OSPFv2, which uses the interface's global IPv4 address. The link-local address ensures that OSPFv3 operates independently of global unicast addressing.

Answer

The link-local address is used as the router ID for OSPFv3.

Answer

The link-local address is only used for DR/BDR election.

Answer

The link-local address is not used in OSPFv3; global unicast addresses are used instead.

Question 9

A router has the following BFD configuration for a static route:

ip route 10.0.0.0 255.255.255.0 192.168.1.2
bfd map 192.168.1.2 10.0.0.0 255.255.255.0
interface GigabitEthernet0/0
 ip address 192.168.1.1 255.255.255.0
 bfd interval 100 min_rx 100 multiplier 3
!

What is the purpose of the 'bfd map' command in this context?

Accepted Answer

It creates a BFD session to the next-hop 192.168.1.2 and associates it with the static route to 10.0.0.0/24.. For static routes, BFD must be explicitly mapped to the next-hop and destination prefix. The 'bfd map' command associates a BFD session with a static route so that if BFD detects a failure, the static route is removed from the routing table.

Answer

It maps the BFD session to the interface, enabling BFD for all static routes using that interface.

Answer

It maps the BFD session to the OSPF process, which is incorrect for static routes.

Answer

It is used to configure BFD for multiple static routes simultaneously.

Question 10

An engineer configured IP SLA 40 with a UDP echo probe to monitor a remote server port 80. The IP SLA is used in a track object for a backup static route. The engineer observes that the IP SLA state is 'Timeout' even though the server is reachable via ping from the router. What is the most likely cause?

Accepted Answer

The server is not running a UDP service on port 80; HTTP uses TCP, so the UDP probe will fail.. UDP echo probes require a service listening on the specified port. If the server does not have a UDP service on port 80 (HTTP uses TCP), the probe will timeout.

Answer

The router's firewall is blocking UDP packets to the server.

Answer

The IP SLA frequency is set too high, causing the router to miss responses.

Answer

The track object is misconfigured with the wrong IP SLA number.

Question 11

What is the default behavior of LDP when establishing a session between two directly connected routers?

Accepted Answer

LDP uses TCP port 646 for session establishment and UDP port 646 for hellos.. LDP uses UDP port 646 for the initial Hello discovery messages (sent to multicast 224.0.0.2) and TCP port 646 for the reliable session establishment and label advertisement exchange. This dual-transport design is fundamental to how LDP separates neighbor discovery from session maintenance.

Answer

LDP sends hellos to the unicast address of each neighbor.

Answer

LDP hellos are sent to the all-OSPF-routers multicast address 224.0.0.5.

Answer

LDP sessions are established using UDP for reliability.

Question 12

What is the problem with this NAT configuration?

interface GigabitEthernet0/0
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
!
interface GigabitEthernet0/1
 ip address 203.0.113.1 255.255.255.0
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload
access-list 1 permit 192.168.1.0 0.0.0.255

Accepted Answer

The interface GigabitEthernet0/1 is missing the 'ip nat outside' command.. The configuration is missing the 'ip nat outside' command on interface GigabitEthernet0/1. For NAT to function, Cisco IOS requires that the inside interface be marked with 'ip nat inside' and the outside interface with 'ip nat outside'. Without this, the router does not know which interface is the external (outside) interface, and the NAT translation will not be applied to outgoing packets.

Answer

The ACL is too permissive; it should only permit specific hosts.

Answer

The 'overload' keyword is unnecessary for this configuration.

Answer

The inside interface should be GigabitEthernet0/1.

Question 13

Two OSPF routers R1 and R2 are connected via a GigabitEthernet link in area 0. R1 has interface GigabitEthernet0/0 ip ospf network point-to-point, while R2 has the default OSPF network type broadcast. R1's show ip ospf neighbor shows R2 in FULL state, but R2's show ip ospf neighbor shows R1 in FULL state. However, routes from R1 are not appearing in R2's routing table. Show ip ospf database on R2 shows the router LSA from R1 but not the network LSA. What is the root cause?

Accepted Answer

The OSPF network type mismatch causes R1 to not generate a network LSA, and R2 cannot install routes that rely on that LSA.. When R1 has the OSPF network type set to point-to-point on the GigabitEthernet link, it does not elect a DR/BDR and therefore does not generate a Type 2 (Network) LSA. R2, with the default broadcast network type, expects a Network LSA to build complete routing information for the segment. Although the adjacency reaches FULL and R2 receives R1's Type 1 (Router) LSA, the missing Network LSA prevents R2 from installing routes that depend on that LSA, such as those for networks advertised by R1 that are not directly connected to the link.

Answer

The OSPF adjacency is stuck in EXSTART state due to MTU mismatch.

Answer

R2 has a firewall blocking Type 2 LSAs.

Answer

R1's router LSA has an incorrect metric, causing R2 to ignore it.

Question 14

A network engineer runs the following command to troubleshoot a VRF-Lite issue:

R1# show ip eigrp vrf CUSTOMER_B topology 10.1.1.0/24

Output:
IP-EIGRP (AS 100): Topology entry for 10.1.1.0/24 for VRF CUSTOMER_B
  State is Passive, Query origin flag is 1, 1 Successor(s), FD is 131072
  Routing Descriptor Blocks:
  10.1.1.1 (GigabitEthernet0/1), from 10.1.1.1, Send flag is 0x0
      Composite metric is (131072/128256), Route is Internal
      Vector metric:
        Minimum bandwidth is 100000 Kbit
        Total delay is 100 microseconds
        Reliability is 255/255
        Load is 1/255
        Minimum MTU is 1500
        Hop count is 1

What does this output indicate?

Accepted Answer

The route 10.1.1.0/24 has one successor with a feasible distance of 131072 and is learned via 10.1.1.1.. The output shows 'State is Passive' (no query in progress), '1 Successor(s)', and 'FD is 131072', with the successor learned via 10.1.1.1 on GigabitEthernet0/1. The composite metric (131072/128256) shows the feasible distance and reported distance, and 'Route is Internal' confirms it is a native EIGRP route, not redistributed. This is a healthy, stable EIGRP topology entry.

Answer

The route 10.1.1.0/24 is in Active state, indicating an EIGRP query is in progress.

Answer

The route 10.1.1.0/24 is an external EIGRP route redistributed into the VRF.

Answer

The route 10.1.1.0/24 has multiple successors due to equal-cost paths.

Question 15

An engineer applies a CoPP policy to a router to protect the control plane from a DDoS attack. The policy includes a class-map matching UDP traffic to port 123 (NTP) and polices it to 1000 bps. After the policy is applied, the engineer notices that the router's clock is not synchronizing with its NTP server. The NTP server is reachable via ping. What is the most likely cause?

Accepted Answer

The CoPP policy is dropping NTP packets because the police rate is too low.. The CoPP policy is policing NTP traffic (UDP port 123) to only 1000 bps. NTP synchronization requires a steady exchange of packets, and a 1000 bps rate is extremely low—likely insufficient to allow the NTP packets through, causing them to be dropped. Since the NTP server is reachable via ping (ICMP is not affected by this CoPP policy), the issue is clearly that the police rate is too restrictive for NTP traffic.

Answer

The NTP server is not responding because of the DDoS attack.

Answer

The CoPP class-map is not matching NTP packets because it uses the wrong port number.

Answer

The router's NTP configuration has a wrong server IP address.