300-410 Practice Test 8 — 10 Questions

Question 1

Consider the following configuration:

ipv6 access-list BLOCK-ICMP
 deny icmp any any echo-request
 deny icmp any any echo-reply
 permit ipv6 any any

interface GigabitEthernet0/2
 ipv6 traffic-filter BLOCK-ICMP in

Which statement is true?

Accepted Answer

The ACL blocks ICMP echo-request and echo-reply, but permits all other IPv6 traffic inbound.. The IPv6 ACL explicitly denies ICMPv6 echo-request and echo-reply messages (types 128 and 129) while the final permit ipv6 any any statement allows all other IPv6 traffic. The ipv6 traffic-filter command applied inbound on GigabitEthernet0/2 filters traffic as it enters the interface, so only the specified ICMP types are blocked, and all other IPv6 traffic is permitted.

Answer

The ACL blocks all ICMPv6 traffic because the deny statements are too broad.

Answer

The ACL must be applied outbound to filter echo-request.

Answer

The ACL is missing the 'log' keyword to be effective.

Question 2

Drag and drop the steps to create and register an EEM applet for syslog events into the correct order, from first to last.

Accepted Answer

Enter global configuration mode. The correct order begins with entering global configuration mode, then defining the EEM applet and its syslog trigger, followed by configuring the action to execute, and finally exiting configuration mode to register the applet.

Question 3

What is the default inter-packet interval (in milliseconds) for an IP SLA UDP Jitter operation?

Accepted Answer

20 ms. The default inter-packet interval for UDP Jitter is 20 milliseconds. This is the delay between sending successive packets within a single probe.

Answer

10 ms

Answer

50 ms

Answer

100 ms

Question 4

A network engineer is configuring a Cisco IOS XE router to act as a DHCP server for a subnet. The router must assign IP addresses from the 192.168.100.0/24 pool, but the first 10 addresses and the last address in the range must be excluded from dynamic assignment. Which command accomplishes this requirement?

Accepted Answer

Two separate commands: ip dhcp excluded-address 192.168.100.1 192.168.100.10 and ip dhcp excluded-address 192.168.100.254. The Cisco IOS DHCP server uses the ip dhcp excluded-address command to specify addresses that should not be assigned dynamically. You can configure multiple excluded addresses or ranges by entering the command multiple times. In this scenario, the first 10 addresses and the last address must be excluded, so two separate commands are needed: one for the range and one for the individual address. Combining them into a single command with multiple arguments or using 'and' is not valid syntax.

Answer

ip dhcp excluded-address 192.168.100.1 192.168.100.10 192.168.100.254

Answer

ip dhcp excluded-address 192.168.100.1 192.168.100.10 and ip dhcp excluded-address 192.168.100.254

Answer

ip dhcp excluded-address 192.168.100.1 192.168.100.10

Question 5

Which IP SLA operation type uses ICMP Echo Request/Reply packets to measure round-trip time?

Accepted Answer

ICMP Echo. The IP SLA ICMP Echo operation (type 1) uses ICMP Echo Request and Echo Reply messages to measure network latency and availability.

Answer

UDP Jitter

Answer

TCP Connect

Answer

HTTP

Question 6

A network engineer runs the following command to verify NetFlow export on an interface:

R1# show ip flow interface

GigabitEthernet0/0
  ip flow ingress
  ip flow egress

GigabitEthernet0/1
  ip flow ingress

What does this output indicate?

Accepted Answer

NetFlow is enabled on GigabitEthernet0/0 for both ingress and egress, and on GigabitEthernet0/1 for ingress only.. The 'show ip flow interface' output lists each interface and the direction(s) in which NetFlow is enabled. GigabitEthernet0/0 shows both 'ip flow ingress' and 'ip flow egress', meaning NetFlow captures traffic in both directions. GigabitEthernet0/1 shows only 'ip flow ingress', meaning only ingress traffic is captured. Option B accurately reflects this.

Answer

NetFlow is enabled only on GigabitEthernet0/0 for both directions.

Answer

NetFlow is enabled on GigabitEthernet0/0 for ingress only.

Answer

NetFlow is not enabled on any interface.

Question 7

A network engineer runs the following command to troubleshoot SNMP access lists:

R1# show snmp access
Access-list: 10
Community: public
View: v1default

Access-list: 20
Community: private
View: v1default

What does this output indicate?

Accepted Answer

SNMP access is controlled by ACLs: ACL 10 for 'public' and ACL 20 for 'private'.. The 'show snmp access' output displays the configured SNMP access control entries, which map community strings to access control lists (ACLs). In this case, ACL 10 is associated with the 'public' community and ACL 20 with the 'private' community, meaning SNMP access is restricted based on these ACLs. This is the standard method for controlling SNMPv1/v2c access, as the router uses the ACL to permit or deny SNMP requests from specific source IP addresses.

Answer

No ACLs are applied to SNMP, so all access is allowed.

Answer

The router uses SNMPv3 exclusively.

Answer

The 'public' community has read-write access.

Question 8

Which default administrative distance is assigned to a directly connected interface route?

Accepted Answer

0. Directly connected routes have a default administrative distance of 0, indicating the highest preference.

Answer

1

Answer

5

Answer

110

Question 9

Drag and drop the steps to configure SNMPv3 with auth-priv and verify traps into the correct order, from first to last.

Accepted Answer

Configure SNMPv3 group with auth-priv security level. First, define the SNMPv3 group with security model and privacy settings. Next, create the user with authentication and privacy passwords. Then, enable SNMP traps globally. After that, specify the trap receiver host with the correct security parameters. Finally, verify the configuration using show snmp user and show snmp host.

Question 10

Which EIGRP packet type is used to confirm receipt of a reliable update?

Accepted Answer

ACK. In EIGRP, reliable updates (Update, Query, Reply) require acknowledgment. The ACK packet is a Hello packet with the Acknowledgment field set, and it is used to confirm receipt of a reliable update. It is not a separate packet type but a function of the Hello packet.

Answer

Hello

Answer

Update

Answer

Reply