300-410 Practice Test 5 — 10 Questions

Question 1

A network engineer runs the following command on Router R1:

R1# show ip sla statistics 1

Round Trip Time (RTT) for Index 1
   Latest RTT: 200 ms
   Latest RTT (milliseconds): 200
   Latest RTT (microseconds): 200000
   Number of successes: 50
   Number of failures: 10
   Operation time to live: Forever
   Output: Over threshold

Based on this output, which statement is correct?

Accepted Answer

The latest RTT has exceeded the configured threshold value.. The 'Output: Over threshold' line indicates that the latest RTT exceeded the configured threshold. The number of failures (10) suggests some probes failed, but the key clue is the threshold violation. This does not necessarily mean the operation is down; it means a threshold event occurred.

Answer

The IP SLA operation has failed due to a timeout.

Answer

The IP SLA operation is not reachable and has been disabled.

Answer

The IP SLA responder is not configured on the target device.

Question 2

A network engineer runs the following command on Router R1:

R1# show bgp neighbors 10.1.12.2 received-routes
BGP table version is 15, local router ID is 10.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete

Network          Next Hop            Metric LocPrf Weight Path
*> 10.2.2.0/24      10.1.12.2                0             0 65002 i

Total number of prefixes 1

Based on this output, what can be inferred about the BGP session?

Accepted Answer

The BGP session is established and the neighbor is advertising one prefix.. The output shows that R1 has received one prefix (10.2.2.0/24) from neighbor 10.1.12.2. The prefix is valid and best. This indicates the BGP session is established and exchanging routes.

Answer

The BGP session is not established.

Answer

The BGP session is in Active state.

Answer

The BGP session is in Idle state.

Question 3

Drag and drop the steps to verify and validate IP SLA operational state into the correct order, from first to last.

Accepted Answer

Check 'show ip sla configuration' for operation details. Begin by checking the overall IP SLA configuration to confirm the operation is defined, then review the latest statistics for RTT and success rate, examine the reaction configuration if tracking is used, verify the tracking object status, and finally confirm that tracked objects are influencing routing or policy.

Question 4

Given the following configuration on a router:
```
router ospf 1
 distance 150
```
What is the effect of this configuration?

Accepted Answer

It sets the administrative distance for OSPF routes to 150, overriding the default of 110.. This command sets the administrative distance for all OSPF routes to 150, overriding the default of 110.

Answer

It sets the administrative distance for OSPF routes to 150, but only for intra-area routes.

Answer

It sets the administrative distance for OSPF external routes to 150.

Answer

It sets the administrative distance for OSPF routes to 150, but only for routes learned from a specific neighbor.

Question 5

Given this configuration on router R2:
```
ip vrf CUSTOMER_D
 rd 100:1
!
interface GigabitEthernet0/0
 ip vrf forwarding CUSTOMER_D
 ip address 192.168.2.1 255.255.255.0
!
router ospf 1 vrf CUSTOMER_D
 network 192.168.2.0 0.0.0.255 area 0
```
What will happen when this configuration is applied?

Accepted Answer

OSPF will run on GigabitEthernet0/0 and form adjacencies within VRF CUSTOMER_D.. The OSPF process is tied to VRF CUSTOMER_D, so it only runs on interfaces that belong to that VRF. The network command matches the interface, so OSPF will form adjacencies on that interface within the VRF.

Answer

OSPF will fail because the OSPF process must be configured globally, not under the VRF.

Answer

OSPF will run on all interfaces, including those not in VRF CUSTOMER_D.

Answer

The network command is invalid because it uses a wildcard mask instead of a subnet mask.

Question 6

A network engineer runs the following command to troubleshoot a Control Plane Policing (CoPP) issue:

R1# show policy-map control-plane input class class-default

Class-map: class-default (match-any)
  0 packets, 0 bytes
  5 minute offered rate 0 bps, drop rate 0 bps
  Match: any
  police:
      cir 1000000 bps, bc 31250 bytes, be 31250 bytes
    conformed 0 packets, 0 bytes; actions:
      transmit
    violated 0 packets, 0 bytes; actions:
      drop
    conformed 0 bps, exceed 0 bps, violated 0 bps

What does this output indicate?

Accepted Answer

The CoPP policy is not matching any traffic, indicating a possible ACL or class-map misconfiguration.. The output shows zero packets matched in class-default, meaning no traffic is being classified by the CoPP policy. This indicates a possible misconfiguration in the ACL or class-map that defines the traffic to be policed, causing the policy to be effectively inactive. A correctly configured CoPP policy would show non-zero packet counts for matched traffic.

Answer

The CoPP policy is dropping all traffic due to a misconfigured CIR.

Answer

The CoPP policy is working correctly and policing traffic at 1 Mbps.

Answer

The CoPP policy is only applied to the output direction.

Question 7

In OSPF, what is the default behavior for auto-summary on Cisco IOS-XE?

Accepted Answer

Auto-summary is disabled by default. Cisco IOS-XE has auto-summary disabled by default for OSPF, meaning that redistributed routes are not summarized to their classful boundaries unless explicitly configured.

Answer

Auto-summary is enabled by default

Answer

Auto-summary is only enabled for external routes

Answer

Auto-summary is enabled only for inter-area routes

Question 8

Which EIGRP packet type is used to confirm receipt of an update during reliable transport in a VRF-Lite configuration?

Accepted Answer

ACK. EIGRP uses Reliable Transport Protocol (RTP) for Update, Query, and Reply packets, and the ACK packet is the mechanism that confirms receipt of those reliable packets. In a VRF-Lite configuration the same RTP behavior applies per-VRF, so an ACK is still the packet type that acknowledges an Update. Hello packets are unreliable and are not acknowledged, which is why ACK is the correct answer.

Answer

Hello

Answer

Update

Answer

Query

Question 9

A network engineer runs the following command on Router R1:

R1# show ipv6 interface gigabitethernet 0/0 | include uRPF
  IPv6 uRPF: strict mode

Based on this output, which statement is true?

Accepted Answer

uRPF is enabled in strict mode. The command output explicitly shows 'IPv6 uRPF: strict mode', which confirms that unicast Reverse Path Forwarding (uRPF) is enabled and operating in strict mode. In strict mode, the router verifies that the source address of an incoming packet matches a route in the FIB and that the incoming interface is the same as the outgoing interface for that route. This prevents spoofed traffic from entering the network.

Answer

uRPF is disabled

Answer

uRPF is enabled in loose mode

Answer

uRPF is enabled but only for multicast

Question 10

In IPv6 First Hop Security, which feature is used to prevent duplicate address detection (DAD) attacks by snooping Neighbor Discovery (ND) messages?

Accepted Answer

ND Snooping. C is correct because ND Snooping (Neighbor Discovery Snooping) is the IPv6 First Hop Security feature that prevents duplicate address detection (DAD) attacks by inspecting Neighbor Solicitation (NS) and Neighbor Advertisement (NA) messages. It builds a binding table of valid IPv6-to-MAC address mappings and drops any NS messages that attempt to claim an address already in use by another device, thereby blocking DAD-based spoofing attacks.

Answer

RA Guard

Answer

DHCPv6 Guard

Answer

Source Guard