300-410 Infrastructure Services — All Questions With Answers

An engineer is configuring MPLS L3VPN on a Cisco IOS XE router. The customer edge (CE) router uses OSPF and the provider edge (PE) router must redistribute OSPF routes into MP-BGP. Which configuration is required on the PE to prevent routing loops and ensure proper route propagation?

Question 2mediummultiple choice

A network engineer is configuring a Cisco IOS router to provide first-hop redundancy for a group of hosts on VLAN 10. The design requires that the virtual IP address be the same as the real IP address of the active router, and that the standby router preempts immediately when it becomes available. Which First Hop Redundancy Protocol (FHRP) should be implemented to meet these requirements?

Question 3mediummultiple choice

A network administrator is configuring IPv6 addressing on a Cisco router. The router must automatically generate a link-local address and use EUI-64 format for interface identifiers. Which command enables this behavior on an interface?

Question 4hardmultiple choice

A network administrator is deploying MPLS Layer 3 VPNs with OSPF as the PE-CE routing protocol. The customer requires that OSPF routes learned from one site be redistributed into BGP with the correct extended community to prevent routing loops and ensure proper propagation. Which BGP extended community must be attached to the redistributed routes?

Question 5hardmulti select

A network engineer is troubleshooting a DMVPN Phase 2 deployment where spoke-to-spoke tunnels are not forming. The hub is configured correctly. Which two actions should be taken on the spokes to enable direct spoke-to-spoke communication? (Choose two.)

Question 6hardmultiple choice

A network administrator is implementing IPv6 First Hop Security on a Cisco Catalyst switch. The goal is to prevent rogue DHCPv6 servers from assigning addresses to clients on a VLAN. Which feature should be enabled on the VLAN to achieve this?

Question 7mediummultiple choice

A network administrator is implementing a DMVPN Phase 3 hub-and-spoke topology using Cisco IOS routers. The hub router is configured with a multipoint GRE interface and NHRP. Spoke routers register with the hub, and the hub has a mapping for each spoke. However, when a spoke attempts to reach another spoke's LAN subnet, the traffic goes through the hub instead of directly between spokes. Which additional configuration is required on the hub to enable spoke-to-spoke direct communication?

Question 8hardmulti select

A network administrator is configuring a Cisco IOS router to support MPLS Layer 3 VPNs. The router will act as a Provider Edge (PE) device. Which two tasks are required to enable MPLS VPN functionality on the PE router? (Choose two.)

Question 9mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to act as a DHCP relay. The router interface GigabitEthernet0/0 is connected to a subnet where DHCP clients reside, and the DHCP server is at 10.1.1.10. The engineer enters the command 'ip helper-address 10.1.1.10' on interface GigabitEthernet0/0. However, clients are not receiving IP addresses. Which additional configuration is required to allow DHCP relay to function?

Question 10mediummulti select

A network engineer is implementing IPv6 First Hop Security on a Cisco switch to mitigate rogue router advertisements. Which two features should be enabled to prevent rogue RA messages from being processed by hosts? (Choose two.)

Question 11mediummultiple choice

A network engineer is configuring a Cisco router to authenticate OSPF neighbors using MD5. The engineer wants to ensure that only routers with the correct key can form adjacencies. Which command is required on the interface to enable OSPF MD5 authentication?

Question 12mediummulti select

A network engineer is configuring a DMVPN Phase 3 hub-and-spoke network with OSPF as the routing protocol. The engineer wants to ensure that spoke-to-spoke communication can occur directly when needed, and that the hub can send redirects to spokes. Which two commands are required on the hub router to support this functionality? (Choose two.)

Question 13mediummulti select

A network engineer is troubleshooting a DHCP relay configuration on a Cisco IOS router. The router is not forwarding DHCP requests from clients on VLAN 10 to the DHCP server at 10.1.1.100. The interface VLAN 10 is up and has an IP address. Which two commands should the engineer verify are configured correctly on the router? (Choose two.)

Question 14mediummultiple choice

A network engineer is configuring a DMVPN Phase 3 hub with dual ISPs for redundancy. The hub router has two WAN interfaces, both participating in the same mGRE tunnel interface. The engineer wants to ensure that spoke-to-spoke traffic can be dynamically redirected by the hub, and that the hub can advertise a single public IP address to all spokes. Which technology should be implemented on the hub to achieve this?

Question 15mediummultiple choice

A network engineer is configuring a DMVPN Phase 3 hub-and-spoke topology using mGRE and IPsec. The hub router is Cisco IOS XE. The engineer wants to ensure that spoke-to-spoke traffic flows directly without traversing the hub, even when the spokes are in different DMVPN networks. Which NHRP command must be configured on the hub to support this?

Question 16hardmultiple choice

Study the full AAA explanation →

A network engineer is deploying DMVPN Phase 2 with OSPF as the routing protocol. The hub router is configured as a broadcast network, and spokes are configured as non-broadcast. OSPF adjacencies are not forming between spokes and the hub. Which configuration change is required on the spoke routers to allow OSPF neighbor formation?

Question 17hardmulti select

A network engineer is configuring a Cisco IOS router to use TACACS+ for authorization of EXEC commands. The engineer wants to ensure that if the TACACS+ server is unavailable, the router will allow users to execute EXEC commands with privilege level 1. Which two commands are required to achieve this? (Choose two.)

Question 18hardmultiple choice

A network administrator is configuring DMVPN Phase 3 with IKEv2 on a hub router. The spoke routers must be able to dynamically establish direct spoke-to-spoke tunnels when needed. Which configuration on the hub is required to support this behavior?

Question 19hardmultiple choice

A company deploys MPLS Layer 3 VPNs with OSPF as the PE-CE routing protocol. The customer requires that routes learned from one site be redistributed into BGP with specific community attributes for traffic engineering. Which configuration step is necessary on the PE router to ensure that OSPF routes are redistributed with the correct BGP extended community for VPNv4?

Question 20mediummultiple choice

A network administrator is configuring a Cisco IOS router for MPLS L3VPN. The router is a PE device with a VRF named CUSTOMER. The administrator wants to ensure that routes from the CUSTOMER VRF are exported with the correct route target and that routes from other VRFs are not imported into CUSTOMER. Which configuration is required to accomplish this?

Question 21hardmultiple choice

A network administrator is deploying MPLS Layer 3 VPNs across a service provider core. The core consists of P and PE routers running OSPF as the IGP. The administrator wants to ensure that customer routes are not leaked into the global routing table and that VPNv4 prefixes are exchanged correctly. Which BGP address family must be activated on the PE routers to carry customer VPN routes?

Question 22easymultiple choice

A network administrator is configuring a Cisco IOS router to act as a DHCP server for a remote subnet. The router is not directly connected to that subnet. Which command is necessary to configure the router to assign IP addresses from a pool to clients on that remote subnet?

Question 23hardmulti select

A network engineer is troubleshooting an MPLS L3VPN setup where customer routes are not being advertised from one PE router to another. The engineer suspects an issue with the BGP configuration on the PE routers. Which two BGP configuration elements are required on the PE routers to exchange VPNv4 routes? (Choose two.)

Question 24hardmultiple choice

A network administrator is troubleshooting a DMVPN Phase 3 configuration on a Cisco IOS router. The hub router is configured with 'ip nhrp redirect' and the spoke with 'ip nhrp shortcut'. The administrator notices that spoke-to-spoke traffic is still flowing through the hub instead of directly between spokes. Which action should be taken to allow direct spoke-to-spoke communication?

Question 25hardmultiple choice

A service provider is deploying MPLS Traffic Engineering (TE) with RSVP-TE to ensure bandwidth guarantees for critical traffic. The network uses OSPF as the IGP. An engineer notices that TE tunnels are not being established even though the IGP has full reachability. Which configuration is required to enable MPLS TE on the interfaces and allow RSVP to signal the tunnels?

Question 26hardmultiple choice

A network engineer is troubleshooting a DMVPN Phase 2 network where spoke-to-spoke tunnels are not forming. The engineer verifies that NHRP registrations are successful and that the hub has routes to all spokes. Which command on the spoke routers is most likely missing to enable direct spoke-to-spoke communication?

Question 27mediummultiple choice

A network engineer is configuring a Cisco IOS router to act as a DHCP relay agent. The DHCP server is located on a different subnet, and the router's interface facing the clients is configured with the ip helper-address 10.1.1.100 command. Clients report that they are not receiving IP addresses. The engineer verifies that the DHCP server is operational and has a valid scope for the client subnet. Which action should be taken to resolve the issue?

Question 28hardmultiple choice

A network administrator is troubleshooting a DMVPN Phase 3 configuration using OSPF as the routing protocol. Spoke routers are not forming OSPF adjacencies with the hub, although IPsec tunnels are up. The hub is configured with 'ip nhrp map multicast dynamic' and 'ip nhrp network-id 100'. Spoke routers have 'ip nhrp map multicast <hub-tunnel-ip>' and 'ip nhrp nhs <hub-tunnel-ip>'. Which additional configuration is required on the spoke routers to enable OSPF neighbor formation over the DMVPN?

Question 29mediummultiple choice

A network administrator is configuring a Cisco IOS router to use PBR to route traffic from the 10.10.10.0/24 subnet to a next-hop of 192.168.1.2. The configuration includes a route-map named PBR-MAP with a match statement for the source subnet and a set ip next-hop 192.168.1.2 statement. After applying the route-map to the interface with ip policy route-map PBR-MAP, the administrator notices that traffic from 10.10.10.0/24 is still following the default routing table. What is the most likely cause?

Question 30hardmultiple choice

A network administrator is configuring a Cisco IOS XE router as a DHCPv6 server for a dual-stack network. The router must provide IPv6 addresses and DNS server information to clients. The administrator has configured the DHCPv6 pool with the 'address prefix' and 'dns-server' commands. However, clients are not receiving the DNS server information. Which action should be taken to resolve this issue?

Question 31mediummultiple choice

A network engineer is configuring a Cisco IOS router to act as a DHCP relay agent. The DHCP server is at 10.1.1.100 on the same subnet as the router's interface. The engineer enters the global configuration command 'ip dhcp relay information option' and then configures the interface with 'ip helper-address 10.1.1.100'. However, DHCP clients on the subnet are not receiving IP addresses. Which action will resolve the issue?

Question 32hardmulti select

A network engineer is configuring a DMVPN Phase 2 hub-and-spoke topology with IPsec protection. The engineer wants to ensure that spoke-to-spoke communication is possible without traffic traversing the hub after the initial packet. Which two NHRP commands are required on the spokes to enable direct spoke-to-spoke tunnels? (Choose two.)

Question 33mediummultiple choice

A network engineer is configuring a Cisco IOS router to act as a DHCPv4 server for a remote branch. The branch clients are on the 192.168.10.0/24 subnet, but the DHCP server is not on the same broadcast domain. The engineer wants the router to assign addresses from a pool named BRANCH_POOL and also provide the default gateway and DNS server. Which configuration step must be performed on the router to ensure that DHCP requests from the remote subnet are correctly processed?

Question 34mediummultiple choice

A network engineer is configuring a Cisco IOS router to support a DMVPN Phase 3 hub-and-spoke topology. The hub must dynamically learn spoke tunnel endpoints and allow direct spoke-to-spoke communication. Which NHRP command must be configured on the hub to enable this behavior?

Question 35hardmultiple choice

A network engineer is configuring MPLS L3VPN on a Cisco IOS XR router. The customer edge (CE) router is connected to the provider edge (PE) router via a single link using OSPF as the routing protocol. The engineer wants to prevent the CE from learning routes from other VPN sites and to ensure that the CE only receives routes from its own VPN. Which configuration step is required on the PE router?

Question 36mediummultiple choice

A network engineer is configuring a Cisco router to support MPLS Layer 3 VPN. The router is a PE device connected to a CE router via a VRF. The engineer has configured the VRF and assigned the interface to it. Which additional step is required to enable the PE router to exchange VPNv4 routes with other PE routers?

Question 37hardmulti select

A network administrator is implementing MPLS Layer 3 VPNs on a Cisco IOS XR router. The administrator needs to ensure that customer routes are properly propagated across the MPLS backbone. Which two configurations are required on the PE router to enable MP-BGP VPNv4 route exchange with other PE routers? (Choose two.)

Question 38hardmultiple choice

A network engineer is configuring MPLS Layer 3 VPN on a Cisco IOS XE router. The customer wants to use OSPF as the PE-CE routing protocol. The engineer has configured the VRF, the OSPF process within the VRF, and the BGP VPNv4 address family. However, the CE router is not receiving any OSPF routes from the PE. Which configuration step is most likely missing on the PE router?

Question 39hardmulti select

Study the full AAA explanation →

A network engineer is deploying a DMVPN Phase 3 hub-and-spoke topology using Cisco IOS routers. The hub is configured with a multipoint GRE interface and NHRP. The engineer wants to ensure that spoke-to-spoke traffic can be dynamically established without traversing the hub. Which two configurations are required on the spoke routers to enable direct spoke-to-spoke communication? (Choose two.)

Question 40hardmultiple choice

A network engineer is configuring a Cisco IOS router to authenticate users via TACACS+. The router is configured with 'aaa authentication login default group tacacs+ local'. A user attempts to log in, but the TACACS+ server is unreachable. What will happen?

Question 41mediummultiple choice

A network engineer is configuring a Cisco router to support a branch site with dual ISP connections. The engineer wants to use Policy-Based Routing (PBR) to route traffic from a specific subnet out of ISP2 while all other traffic uses ISP1. The engineer creates a route map named PBR-MAP and applies it to the LAN interface with the command `ip policy route-map PBR-MAP`. However, after applying the configuration, the engineer notices that traffic from the specific subnet is still going out of ISP1. Which action should the engineer take to resolve this issue?

Question 42hardmulti select

A network engineer is configuring a Cisco IOS router for IPv6 addressing and routing. The engineer wants to enable IPv6 on an interface and have the router automatically obtain an IPv6 address and default gateway from the directly connected router. Which two commands are required to accomplish this? (Choose two.)

Question 43hardmulti select

A network engineer is configuring a Cisco router to act as a DHCPv6 server for a dual-stack network. The engineer wants to provide IPv6 addresses and other configuration parameters to clients. Which two of the following are valid methods for the router to assign IPv6 addresses to clients? (Choose two.)

Question 44hardmulti select

A network administrator is deploying MPLS Layer 3 VPNs across a service provider backbone. The administrator must ensure that customer routes are properly propagated and that VRFs are correctly configured on provider edge (PE) routers. Which two statements about MPLS Layer 3 VPN operation are true? (Choose two.)

Question 45hardmultiple choice

An engineer is configuring NAT on a Cisco IOS router. The requirement is to translate all internal addresses to a single public address, but also to allow the internal server at 192.168.1.100 to be reachable from the Internet on port 80. Which NAT configuration accomplishes this?

Question 46mediummultiple choice

A network engineer is troubleshooting a DMVPN Phase 3 deployment using Cisco IOS routers. Spoke-to-spoke communication is failing, but spoke-to-hub connectivity works. The hub router is configured with ip nhrp redirect, and the spokes are configured with ip nhrp shortcut. The engineer notices that the spokes are not receiving NHRP redirect messages from the hub. Which action should be taken to resolve the issue?

Question 47mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to support DMVPN Phase 3. The hub router must advertise a default route to all spokes while allowing spoke-to-spoke communication without traffic traversing the hub. Which NHRP configuration on the hub is required to achieve this?

Question 48hardmultiple choice

A network administrator is implementing IPv6 DHCPv6 Prefix Delegation (DHCPv6-PD) on a Cisco IOS XE router that acts as a requesting router (client) to obtain a prefix from an upstream DHCPv6 server. The router's WAN interface is GigabitEthernet0/0, and the LAN interface is GigabitEthernet0/1. The administrator configures `ipv6 dhcp client pd PREFIX` on GigabitEthernet0/0 and `ipv6 address PREFIX ::1:0:0:1/64` on GigabitEthernet0/1. However, the LAN interface does not receive an IPv6 address. What is the most likely cause?

Question 49hardmulti select

A network engineer is configuring a Cisco IOS router for MPLS Traffic Engineering (TE) to establish a TE tunnel to a remote router. The engineer has enabled MPLS TE globally and on the interfaces, configured OSPF with TE extensions, and set up the tunnel interface with the appropriate destination and bandwidth. However, the TE tunnel is not coming up. Which two actions should the engineer verify to troubleshoot the issue? (Choose two.)

Question 50easymultiple choice

A network administrator is configuring a Cisco IOS router to support IPv6. The router needs to obtain an IPv6 address automatically from the local link and also learn a default route from a neighboring router. Which command should be used on the router's interface to enable IPv6 and allow it to automatically configure an address using the link-local prefix?

Question 51hardmultiple choice

A network administrator is deploying IPv6 and wants to implement First Hop Security to prevent rogue Router Advertisement (RA) messages. The administrator configures IPv6 RA Guard on a switch port connected to a host. After configuration, the administrator notices that legitimate RAs from the authorized router are being blocked. Which additional configuration is required to allow RAs from the authorized router while still blocking rogue RAs?

Question 52easymultiple choice

A network administrator is configuring a Cisco IOS router to support IPv6. The router needs to automatically obtain its IPv6 address and default route from the local ISP router. Which command enables this?

Question 53mediummultiple choice

A network engineer is configuring a Cisco IOS router to support a site-to-site IPsec VPN with a remote peer that uses a dynamic public IP address. The engineer wants the router to act as the responder and accept connections from any peer, but only if the peer provides the correct pre-shared key. Which command must be applied to the crypto keyring to allow this?

Question 54mediummultiple choice

A network engineer is troubleshooting an OSPFv3 network. The engineer notices that a router is not forming an adjacency with its neighbor. The engineer verifies that the interfaces are up and IPv6 addresses are configured correctly. Which of the following could prevent OSPFv3 adjacency formation?

Question 55mediummultiple choice

A network engineer is configuring a DMVPN Phase 3 hub router. The spoke routers are behind NAT devices and have dynamic public IP addresses. The engineer wants the hub to dynamically learn the public IP address of each spoke and allow direct spoke-to-spoke communication. Which configuration on the hub is required to achieve this?

Question 56easymultiple choice

A network administrator is configuring a Cisco IOS router to support IPv6 and wants to enable OSPFv3 on an interface. The administrator enters the command ipv6 ospf 1 area 0 under the interface configuration. However, OSPFv3 does not form an adjacency with a neighboring router. Which additional step is required to enable OSPFv3 on the interface?

Question 57mediummultiple choice

A network engineer is configuring DMVPN Phase 3 with OSPF as the routing protocol. The hub router is configured with 'ip nhrp redirect' and the spoke routers with 'ip nhrp shortcut'. After the configuration, spoke-to-spoke traffic still traverses the hub. Which configuration is required on the spoke routers to enable direct spoke-to-spoke communication?

Question 58mediummultiple choice

A network engineer is configuring a Cisco IOS router to use Policy-Based Routing (PBR) to forward traffic from a specific source subnet to a next-hop router that differs from the default path. The engineer creates a route map named PBR_MAP and applies it to the ingress interface. However, traffic from the subnet is still following the default route. What is the most likely cause?

Question 59hardmultiple choice

A network engineer is troubleshooting a Cisco IOS XE router that is configured as a DHCPv6 server. Clients on the LAN are not receiving IPv6 addresses. The engineer verifies that the router has a pool configured with the `address prefix` command and that the interface facing the clients has the `ipv6 dhcp server` command. Which additional configuration is required for the DHCPv6 server to provide addresses to clients?

Question 60hardmultiple choice

A network engineer is troubleshooting a Cisco IOS router that is supposed to forward DHCP requests to a DHCP server at 10.1.1.100. The router interface GigabitEthernet0/1 has ip helper-address 10.1.1.100 configured, but clients are not receiving IP addresses. Which action should the engineer take to resolve the issue?

Question 61hardmultiple choice

A network engineer is troubleshooting a DMVPN Phase 3 network using Cisco IOS routers. Spokes are unable to establish direct spoke-to-spoke tunnels even though the hub is reachable and NHRP registrations are successful. Which command should the engineer verify on the hub to ensure that spoke-to-spoke communication is enabled?

Question 62mediummulti select

A network engineer is implementing MPLS Layer 3 VPNs on a Cisco IOS XE router. The engineer needs to configure the PE router to support VRFs and MP-BGP. Which two configurations are required to enable the PE router to exchange VPNv4 routes with other PE routers? (Choose two.)

Question 63hardmulti select

A network administrator is deploying MPLS Layer 3 VPNs with Cisco IOS XE. The administrator must ensure that customer routes are propagated correctly between PE routers and that the VPNv4 prefix is uniquely identified. Which two BGP attributes are used to identify a VPNv4 prefix? (Choose two.)

Question 64hardmultiple choice

A network administrator is deploying MPLS Layer 3 VPNs. The service provider uses OSPF as the PE-CE routing protocol. The customer requires that their OSPF routes be redistributed into MP-BGP on the PE routers, and that the OSPF domain ID be consistent across all sites. Which BGP extended community must be configured on the PE routers to ensure that OSPF routes are properly redistributed and loop prevention is maintained?

Question 65hardmultiple choice

A network administrator is troubleshooting a DMVPN Phase 3 deployment using Cisco IOS routers. Spoke-to-spoke communication is failing, although spoke-to-hub and hub-to-spoke communication work fine. The administrator verifies that NHRP registration is successful and that the hub has the correct mappings. Which configuration issue on the spokes is most likely causing the spoke-to-spoke failure?

Question 66mediummultiple choice

A network engineer is troubleshooting a DMVPN Phase 2 network. Spoke-to-spoke communication is failing, although spoke-to-hub and hub-to-spoke connectivity is working. The engineer verifies that NHRP registrations are successful and that the hub has a complete NHRP mapping table. Which action is most likely to resolve the issue?

Question 67hardmultiple choice

A network engineer is configuring a Cisco router to support MPLS Traffic Engineering (TE) tunnels. The engineer has enabled MPLS TE globally and on the interfaces, and has configured OSPF with TE extensions. The engineer wants to establish a TE tunnel from Router A to Router D. The path from A to D goes through Router B and Router C. The engineer configures an explicit path on Router A that lists the loopback addresses of B, C, and D. However, the tunnel fails to establish. Which of the following is the most likely reason for the failure?

Question 68mediummultiple choice

A network administrator is configuring IPv6 routing with OSPFv3 on a Cisco router. The administrator wants to enable OSPFv3 on an interface and ensure that it participates in the OSPFv3 process with process ID 1. Which command is correct?

Question 69hardmultiple choice

A network administrator is implementing MPLS Layer 3 VPNs with OSPF as the PE-CE routing protocol. The customer requires that OSPF routes from one site be redistributed into MP-BGP and then into OSPF at another site without being re-advertised back into MP-BGP. Which BGP extended community should be used to prevent routing loops?

Question 70mediummulti select

A network engineer is troubleshooting a Cisco IOS router that is configured for NAT. Inside hosts are unable to reach an external web server. The engineer runs 'show ip nat translations' and sees no entries. Which two actions should the engineer take to troubleshoot the NAT configuration? (Choose two.)

Question 71hardmultiple choice

A network administrator is implementing MPLS Layer 3 VPNs on a Cisco IOS XE router. The administrator wants to ensure that customer routes are advertised with the correct extended community attributes to control route selection and prevent routing loops. Which BGP extended community should be used to identify the originating VRF and prevent routes from being re-imported into the same VRF?

Question 72mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to support a DMVPN Phase 3 hub with multiple spokes. The design requires that spoke-to-spoke traffic flows directly between spokes without traversing the hub after the initial route resolution. Which technology should be implemented on the hub to enable dynamic spoke-to-spoke tunnels while maintaining a single multipoint GRE interface?

Question 73hardmulti select

A network engineer is troubleshooting a Cisco IOS XE router that is not establishing an OSPFv3 adjacency with a neighbor. The engineer suspects a mismatch in OSPFv3 configuration. Which two parameters must match for an OSPFv3 adjacency to form? (Choose two.)

Question 74mediummulti select

A network administrator is configuring SNMPv3 on a Cisco IOS XE router to provide secure management access. The administrator wants to ensure that SNMPv3 authentication and encryption are used, and that the SNMP engine ID is unique. Which two configuration steps are required to meet these requirements? (Choose two.)

Question 75mediummultiple choice

A network engineer is troubleshooting a Cisco IOS router that is not redistributing routes from OSPF into BGP. The engineer has configured the router bgp command and the redistribute ospf 1 command under the BGP router configuration. However, the routes are not appearing in the BGP table. What is the most likely reason?

Question 76hardmulti select

A network engineer is configuring a Cisco IOS router to support MPLS Traffic Engineering (TE) with RSVP-TE. The engineer wants to ensure that the router can establish TE tunnels and signal them correctly. Which two statements about MPLS TE configuration are true? (Choose two.)

Question 77mediummultiple choice

A network engineer is configuring a Cisco IOS XE router as a Dynamic Host Configuration Protocol (DHCP) client on its GigabitEthernet0/0 interface. The DHCP server is at 10.1.1.1 and provides the client with an IP address of 10.1.1.100/24, but does not provide a default gateway. The engineer wants the router to automatically install a default route via 10.1.1.1. Which command should be configured on the router?

Question 78hardmulti select

A network engineer is deploying MPLS L3VPN on a Cisco IOS XE PE router using OSPF as the PE-CE routing protocol for VRF CUST. The customer reports that routes learned from the CE are present in the VRF but are not being advertised into MP-BGP. The engineer verifies that the OSPF process is up and the MP-BGP neighbor is established. The engineer must ensure that the OSPF routes are redistributed into MP-BGP and that the OSPF domain ID is carried in the BGP extended community. Which two commands are required to accomplish this? (Choose two.)

Question 79hardmultiple choice

A network engineer is configuring a Cisco IOS XE router to act as a DHCP relay agent for a subnet on VLAN 20. The DHCP server is at 10.10.10.5, which is reachable via the router's GigabitEthernet0/1 interface. The engineer enters the command 'ip helper-address 10.10.10.5' on the VLAN 20 SVI. However, clients on VLAN 20 are not receiving IP addresses. Which additional step is most likely required to resolve the issue?

Question 80hardmulti select

A network engineer is configuring an MPLS L3VPN with OSPF as the PE-CE routing protocol. The customer uses OSPF area 1, and the PE router must redistribute OSPF routes into MP-BGP while preserving the OSPF domain ID and preventing routing loops. Which two configurations are required on the PE router to achieve this? (Choose two.)

Question 81mediummulti select

A network engineer is deploying MPLS L3VPN on a Cisco IOS XE PE router. The customer VRF uses OSPF as the PE-CE routing protocol, and the same OSPF process is used for multiple VPN customers. To prevent routes from leaking between VRFs and to allow the PE to distinguish identical OSPF routes from different customers, the engineer must configure which two features? (Choose two.)

Question 82easymultiple choice

A network administrator is configuring a Cisco IOS router to act as a DHCP server for the 192.168.10.0/24 subnet. The router must assign IP addresses from the pool 'LAN_POOL' but must not assign the first 10 addresses and the last address of the subnet to DHCP clients. Which command sequence correctly configures the exclusion?

Question 83mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to provide IPv6 connectivity to a dual-stack LAN. The design requires that hosts on the LAN automatically derive their IPv6 addresses from the router's advertised prefix and use the router as the default gateway without any DHCPv6 server. Which command set on the router's LAN interface accomplishes this?

Question 84hardmultiple choice

A network engineer is troubleshooting a Cisco IOS XE router that is configured as a DHCP relay agent. Clients on the 192.168.1.0/24 subnet are not receiving IP addresses from the DHCP server at 10.1.1.1. The engineer verifies that the 'ip helper-address 10.1.1.1' command is configured on the GigabitEthernet0/0 interface, which is the default gateway for the clients. The engineer also confirms that the router can ping 10.1.1.1. Which action should the engineer take next to resolve the issue?

Question 85mediummultiple choice

A network engineer is configuring a Cisco IOS XE router as a Dynamic Host Configuration Protocol (DHCP) relay agent. The router has two interfaces: GigabitEthernet0/0 (10.1.1.1/24, connected to clients) and GigabitEthernet0/1 (10.2.2.1/24, connected to the DHCP server). The engineer enters the command 'ip helper-address 10.2.2.100' on GigabitEthernet0/0. Which additional command must be configured to prevent the router from dropping DHCP requests when the client subnet is not directly connected to the DHCP server?

Question 86easymultiple choice

A network administrator is configuring a Cisco IOS XE router to act as a DHCPv6 server for a LAN segment. The router must provide IPv6 addresses and DNS server information to clients. Which command is required to enable the DHCPv6 server functionality and specify the address pool?

Question 87mediummultiple choice

A network engineer is configuring a Cisco IOS XE router as a PE in an MPLS L3VPN environment. The router must assign a unique route distinguisher (RD) for VRF CUSTOMER to ensure that overlapping customer prefixes are uniquely identified in the MPLS backbone. Which command correctly configures the RD under the VRF definition?

Question 88hardmulti select

A network engineer is configuring a Cisco IOS XE router to act as a DHCPv6 server for a dual-stack network. The engineer wants to provide IPv6 addresses and other configuration parameters to clients. Which two commands are required to enable the DHCPv6 server functionality and define an address pool? (Choose two.)

Question 89mediummultiple choice

Read the full Infrastructure Services explanation →

A network engineer is troubleshooting an MPLS L3 VPN where OSPF is used as the PE-CE routing protocol. The customer reports that routes from one site are not being learned at another site. The engineer notices that the PE router is setting the DN bit on OSPF LSAs received from the CE. What is the purpose of the DN bit in this context?

Question 90mediummultiple choice

A network engineer is deploying Locator/ID Separation Protocol (LISP) in a Cisco IOS XE environment. The design requires that a LISP site can be reached by remote sites without the remote sites needing to know the site's RLOC addresses. Which LISP component is responsible for mapping EIDs to RLOCs and responding to Map-Requests?

Question 91mediummulti select

A network engineer is configuring MPLS L3VPN on a Cisco IOS XE PE router. The PE router uses MP-BGP to exchange VPNv4 routes with a remote PE. The engineer must ensure that the PE router accepts only VPNv4 routes that carry the correct route target for VRF CUSTOMER. Which two statements about route target configuration are true? (Choose two.)

Question 92mediummultiple choice

A network engineer is deploying MPLS L3VPN with BGP as the PE-CE routing protocol. The customer edge router (AS 65001) peers with the provider edge router (AS 100). The provider requires that the customer's BGP autonomous system number be hidden from the rest of the MPLS core while still allowing the customer to use their own AS. Which BGP feature should be configured on the PE router?

Question 93mediummultiple choice

A network engineer is deploying a Cisco IOS XE router as a PE for an MPLS L3VPN customer using eBGP as the PE-CE routing protocol. The customer's CE advertises the 172.16.10.0/24 prefix with BGP AS 65001, and the PE is in the provider AS 65000. The engineer wants the customer prefix to enter the VPNv4 table with a route distinguisher of 65000:100 and be advertised to remote PEs, but the prefix is missing from the remote PE's VRF CUSTOMER routing table while it appears locally in the VRF. Which configuration element on the local PE is most likely missing?

Question 94mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to support MPLS L3VPN. The router is a PE device with a VRF named CUSTOMER. The engineer needs to verify that the VRF is correctly associated with the correct route distinguisher and route targets. Which command displays the VRF configuration, including the route distinguisher and route targets?

Question 95mediummulti select

A network engineer is configuring a Cisco IOS XE router as a PE in an MPLS L3VPN environment. The engineer needs to verify that the VRF named BLUE is correctly configured and operational. Which two commands would provide the necessary information? (Choose two.)

Question 96mediummultiple choice

A network engineer is deploying a Cisco IOS XE router as the active device in a first-hop redundancy group for hosts on VLAN 20. The design requires that the virtual IP be 10.20.20.1, the virtual MAC be 0000.0c07.ac14, and the group use HSRP version 1 for compatibility with existing devices. The engineer issues the commands under interface Vlan20 and the group comes up active, but hosts cannot reach the default gateway. Which configuration issue is most likely causing the failure?

Question 97mediummultiple choice

A network engineer is configuring a Cisco IOS XE router as a PE in an MPLS L3VPN environment. The engineer needs to assign a route distinguisher (RD) to a VRF named RED. The RD must be unique and use the format ASN:nn. Which command correctly assigns the RD?

Question 98mediummultiple choice

A network engineer is configuring a Cisco IOS XE router as a Dynamic Host Configuration Protocol (DHCP) client. The router's GigabitEthernet0/0 interface must obtain its IP address from a DHCP server. After applying the configuration, the interface remains in an 'up/up' state but has no IP address. Which command should be used to verify whether the router received a DHCP offer?

Question 99hardmulti select

A network engineer is configuring a Cisco IOS XE router to act as a DHCP server for the 192.168.50.0/24 subnet on interface GigabitEthernet0/1. The design requires that the DHCP pool exclude the addresses used by static devices (192.168.50.1 through 192.168.50.20) and that clients receive the DNS server 192.168.50.5 and the domain name corp.example.com. The engineer has already created the pool and configured the network statement and default router. Which two additional commands must be issued to meet these requirements? (Choose two.)

Question 100hardmultiple choice

A network engineer is implementing a DMVPN Phase 3 hub-and-spoke topology using Cisco IOS XE routers. The hub router is configured with 'ip nhrp redirect' and the spokes with 'ip nhrp shortcut'. The engineer notices that spoke-to-spoke traffic is still traversing the hub instead of building direct tunnels. Which of the following is the most likely cause?

Question 101hardmultiple choice

A service provider is running MPLS Traffic Engineering with RSVP-TE on Cisco IOS XE routers. An engineer has configured an explicit-path tunnel from PE1 to PE2 that must follow a specific set of core routers. The tunnel interface is up, RSVP reservations appear on the path, but the tunnel does not carry traffic because the headend reports that the path is not usable. The engineer verifies that the explicit path lists the correct router IDs in order. Which condition on the headend most likely prevents the tunnel from becoming operational?

Question 102mediummultiple choice

A network engineer is deploying a Cisco IOS XE router as a Dynamic Multipoint VPN (DMVPN) Phase 3 hub in a dual-cloud design. The design requires that each spoke be able to reach other spokes through the hub while still allowing direct spoke-to-spoke tunnels to form on demand. The engineer has configured the hub with 'ip nhrp redirect' and each spoke with 'ip nhrp shortcut'. After testing, the engineer notices that spoke-to-spoke traffic is not taking the direct path; all inter-spoke traffic still traverses the hub. Which additional command must be configured on the hub to enable NHRP to resolve the shortcut path?

Question 103mediummulti select

A network engineer is configuring a Cisco IOS XE router to act as a DHCP relay agent. The DHCP server is on a different subnet, and the router must forward DHCP requests from clients on the 10.1.1.0/24 subnet to the server at 192.168.1.100. The engineer has already configured the interface with an IP address and enabled it. Which two additional commands are required on the router to complete the DHCP relay configuration? (Choose two.)

Question 104mediummultiple choice

A network engineer is deploying a Cisco IOS XE router as a Dynamic Host Configuration Protocol (DHCP) snooping-enabled access switch for a VLAN. The design requires that DHCP server messages from the legitimate DHCP server be permitted while all other DHCP server messages be dropped. Which command must be applied on the access switch?

Question 105hardmultiple choice

A network engineer is configuring a Cisco IOS XE router to provide DHCP service for a guest wireless subnet. The router must assign IP addresses from the 192.168.100.0/24 pool, but the first 10 addresses and the last address in the range must be excluded from dynamic assignment. Additionally, the router must send the DNS server address 8.8.8.8 and the domain name 'guest.local' to clients. The engineer has already created the DHCP pool and entered the network statement. Which set of commands must be applied to the DHCP pool to meet these requirements?

Question 106mediummultiple choice

A network engineer is deploying MPLS L3VPN on a Cisco IOS XE PE router. The PE router must advertise VPNv4 routes to a remote PE router using MP-BGP. The engineer has configured the address-family ipv4 vrf CUSTOMER and redistributed the static routes into BGP. However, the remote PE router does not receive any VPNv4 prefixes. Which command is required on the PE router to enable the exchange of VPNv4 prefixes with the remote PE?

Question 107hardmultiple choice

A network engineer is configuring a Cisco IOS XE router to support MPLS L3VPN with a VRF named CUST. The customer edge (CE) router uses eBGP, and the service provider requires that the CE's autonomous system number be preserved end-to-end. The PE router must accept routes with the CE's AS number in the AS_PATH. Which BGP feature must be configured on the PE router?

Question 108mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to serve as a DHCP relay agent for a remote subnet. The DHCP server is at 10.1.1.10, and the router interface facing the clients is GigabitEthernet0/1 with IP address 10.2.2.1/24. The engineer wants the relay agent to insert the client's subnet information into DHCP requests. Which command is required on the interface?

Question 109mediummultiple choice

A network engineer is configuring a Cisco IOS XE router as a PE device in an MPLS L3VPN environment. The router must support a VRF named BLUE for a customer that uses OSPF as the PE-CE routing protocol. The engineer has configured the VRF, assigned interfaces, and set up MP-BGP. However, the customer reports that routes from the BLUE VRF are not being advertised into MP-BGP. Which command must be configured under the BGP address-family configuration to redistribute the OSPF routes from the VRF into MP-BGP?

Question 110hardmulti select

A network engineer is configuring a Cisco IOS XE router to act as a DHCP relay agent. The DHCP server is on a remote subnet, and the router's interface facing the clients is GigabitEthernet0/1 with IP address 10.1.1.1/24. The DHCP server's IP address is 10.2.2.2. The engineer wants to ensure that DHCP requests are forwarded correctly and that the server can assign addresses from the correct pool. Which two commands are required to configure the relay agent on the router? (Choose two.)

Question 111mediummultiple choice

A network engineer is deploying a Cisco IOS XE router as a Dynamic Multipoint VPN (DMVPN) hub in a Phase 2 topology. The design requires that all spoke-to-spoke traffic traverse the hub rather than building direct spoke-to-spoke tunnels. Which configuration on the hub tunnel interface ensures this behavior?

Question 112hardmulti select

A network engineer is configuring a Cisco IOS XE router to support MPLS L3VPN with a VRF named CUSTOMER. The engineer must ensure that the PE router can import and export routes correctly using route targets. Which two commands are required to configure route targets for the VRF? (Choose two.)

Question 113easymultiple choice

A network engineer is configuring a Cisco IOS XE router to act as a DHCP server for a subnet. The engineer wants the router to automatically update DNS records for DHCP clients. Which command must be configured globally to enable this feature?

Question 114hardmulti select

A network engineer is configuring a Cisco IOS XE router to support MPLS Layer 3 VPNs. The router is a PE device and must exchange VPNv4 routes with a remote PE. The engineer has enabled MPLS IP on the core interfaces and configured a VRF named CUSTOMER. Which two additional configurations are required to establish the MP-BGP session and exchange VPNv4 routes? (Choose two.)

Question 115mediummultiple choice

A network engineer is configuring a Cisco IOS router to act as a DHCP server for a subnet. The router must assign IP addresses to clients on the 10.1.1.0/24 network. The engineer wants to ensure that the router does not assign the first 10 addresses and the last address of the subnet. Which command accomplishes this?

Question 116hardmultiple choice

A network engineer is troubleshooting an MPLS L3VPN where OSPF is used as the PE-CE routing protocol. The customer reports that routes from one site are not being advertised to another site. The engineer verifies that the OSPF neighbor relationship between the CE and PE is up and that routes are present in the OSPF database. Which configuration on the PE router is most likely missing to allow the routes to be redistributed into MP-BGP?

Question 117mediummultiple choice

A network engineer is configuring a Cisco IOS router to provide first-hop redundancy for a group of hosts on VLAN 10. The design requires that the virtual IP address be 10.10.10.1 and that the router with the highest priority become the active gateway. The engineer also wants to ensure that if the active router fails, the standby router takes over within 3 seconds. Which protocol and configuration should be used?

Question 118mediummultiple choice

A network engineer is deploying a DMVPN Phase 3 hub-and-spoke topology. The hub router must dynamically learn spoke-to-spoke routes and allow direct spoke-to-spoke tunnels. Which technology should be implemented on the hub to achieve this?

Question 119mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to support a DMVPN Phase 3 hub-and-spoke topology. The hub router must be able to redirect spoke-to-spoke traffic without requiring the spokes to have a direct route to each other. Which technology should be implemented on the hub to enable the hub to inform the originating spoke of the optimal spoke-to-spoke path?

Question 120hardmultiple choice

A network administrator is troubleshooting an OSPFv3 network. Routers R1 and R2 are directly connected on a point-to-point link. R1 is configured with OSPFv3 area 0, and R2 is configured with OSPFv3 area 1. The administrator notices that no OSPFv3 adjacency forms between them. What is the most likely cause?

Question 121mediummultiple choice

A network engineer is configuring a DMVPN Phase 3 spoke router. The spoke must establish a direct tunnel to another spoke when traffic requires it. The hub is already configured with 'ip nhrp redirect'. Which additional command must be configured on the spoke to enable it to request and receive shortcut replies from the hub?

Question 122hardmultiple choice

A network administrator is deploying MPLS Layer 3 VPNs with Cisco IOS XE routers. The administrator wants to ensure that customer routes are not leaked into the global routing table and that each VPN instance maintains separate routing and forwarding tables. Which of the following must be configured on the PE routers to achieve this isolation?

Question 123mediummultiple choice

A network engineer is configuring a Cisco IOS router to authenticate OSPFv2 neighbors using MD5. The engineer wants to ensure that the authentication key is not sent in clear text and that the key can be changed without disrupting the adjacency. Which command should be used to configure the key on the interface?

Question 124mediummultiple choice

Review the full routing breakdown →

A network engineer is configuring a Cisco IOS router to act as a Dynamic Host Configuration Protocol (DHCP) relay agent. The router receives DHCP broadcast requests on interface GigabitEthernet0/1 and must forward them to a DHCP server at 10.1.1.100. Which command is required to enable this functionality?

Question 125mediummultiple choice

A company has a Cisco IOS XE router configured with IP SLA and Object Tracking to monitor the reachability of a primary ISP. The router should fail over to a backup ISP when the primary path becomes unreachable. The engineer wants to ensure that the failover occurs quickly and that the primary path is restored when it becomes available again. Which configuration element is required to achieve this behavior?

Question 126hardmulti select

A network engineer is deploying MPLS Layer 3 VPNs on Cisco IOS routers. The engineer must ensure that customer routes are properly propagated across the MPLS core and that labels are correctly assigned. Which two protocols are used within the MPLS core to distribute labels and VPNv4 routes? (Choose two.)

Question 127hardmultiple choice

A network administrator is deploying IPv6 First Hop Security (FHS) on a Cisco Catalyst switch to mitigate rogue Router Advertisement (RA) attacks. The switch is running Cisco IOS Software and is configured with the command ipv6 nd raguard policy POLICY1. Which additional step is required to activate RA guard on an interface?

Question 128hardmulti select

A network administrator is deploying a DMVPN Phase 3 hub-and-spoke topology using Cisco IOS routers. The hub router is configured with a multipoint GRE (mGRE) interface and NHRP. Spokes are configured with mGRE and NHRP as well. The administrator wants to ensure that spoke-to-spoke traffic flows directly without traversing the hub after initial registration. Which two statements about DMVPN Phase 3 operation are true? (Choose two.)

Question 129mediummultiple choice

A network engineer is configuring a Cisco IOS router to support a new branch office that requires dynamic IPv4 addressing for clients. The router is already configured with a DHCP pool named BRANCH_POOL. The engineer notices that clients are not receiving IP addresses. Which command, when applied globally, is required to enable the DHCP service on the router?

Question 130easymultiple choice

A network administrator is configuring a Cisco IOS XE router to support IPv6. The administrator wants to enable IPv6 routing and assign an IPv6 address to an interface. Which command must be configured globally to enable IPv6 routing?

Question 131mediummultiple choice

A network engineer is configuring DMVPN Phase 3 on a hub router. The hub must forward traffic directly between spokes without traversing the hub. Which command is required on the hub to enable this behavior?

Question 132easymultiple choice

A network technician is configuring a Cisco router to act as a DHCP relay agent. The router's interface Gi0/0 is connected to the DHCP clients, and the DHCP server is reachable via interface Gi0/1. Which command must be configured on interface Gi0/0 to forward DHCP requests to the server at 192.168.1.10?

Question 133mediummultiple choice

A network engineer is configuring a Cisco IOS router to use Policy-Based Routing (PBR) to forward traffic from a specific subnet to a next-hop address. The route-map is named PBR_MAP, and the interface is GigabitEthernet0/0. Which command sequence correctly applies the route-map to the interface for incoming packets?

Question 134easymultiple choice

A network technician is configuring a Cisco IOS router to act as a DHCP server for a subnet. The technician wants the router to exclude a range of addresses from being assigned to clients. Which command should be used to exclude the addresses?

Question 135hardmultiple choice

A network administrator is troubleshooting an MPLS L3VPN where customer routes are not being propagated between PE routers. The PE routers are Cisco IOS-XE devices running MP-BGP. Which address family must be configured on the PE routers to exchange VPNv4 prefixes?

Question 136hardmulti select

A network engineer is implementing MPLS Traffic Engineering (TE) with RSVP-TE. The engineer must ensure that the TE tunnel can be established and that the headend router can signal the path. Which two statements about RSVP-TE operation are true? (Choose two.)

Question 137mediummultiple choice

A network engineer is configuring a Cisco IOS router to act as a DHCP relay agent. The router interface GigabitEthernet0/0 is connected to a subnet with DHCP clients, and the DHCP server is located at 192.168.100.10. Which command must be applied to the interface to forward DHCP requests to the server?

Question 138mediummultiple choice

A network engineer is configuring a Cisco IOS router to send syslog messages to a remote syslog server at 10.1.1.100. The router's loopback0 interface is 192.168.1.1. The engineer wants syslog messages to be sourced from the loopback0 interface. Which command must be configured?

Question 139hardmultiple choice

A company is deploying IPv6 and wants to use stateful DHCPv6 to assign addresses to clients. The network administrator configures the router with the 'ipv6 dhcp pool' command and sets the 'address prefix' and 'dns-server' options. However, clients are not receiving IPv6 addresses. Which additional configuration is required on the client-facing interface to enable stateful DHCPv6?

Question 140mediummultiple choice

Study the full AAA explanation →

A network engineer is troubleshooting an IPv4 Network Address Translation (NAT) configuration on a Cisco IOS router. The router is configured with NAT overload (PAT) using the command ip nat inside source list 1 interface GigabitEthernet0/0 overload. Inside hosts cannot reach the Internet. The engineer verifies that interface GigabitEthernet0/0 is up and has an IP address, and that access list 1 permits the inside subnet. Which additional configuration is most likely missing?

Question 141hardmultiple choice

A network administrator is configuring a Cisco IOS router to authenticate users via TACACS+ using a TACACS+ server at 10.1.1.50. The administrator wants to ensure that if the TACACS+ server is unreachable, the router will fall back to using the local username database. Which command set achieves this?

Question 142easymultiple choice

A network engineer is configuring a Cisco IOS router to support MPLS L3VPN. The router will act as a PE router and needs to assign a unique identifier to each customer VRF to allow overlapping address spaces. Which MPLS L3VPN component provides this function?

Question 143mediummultiple choice

A network engineer is configuring a branch router to obtain its WAN interface IPv4 address from an ISP using DHCP. The provider requires the router to send a specific client identifier. Which command must be applied under the interface configuration to meet this requirement?

Question 144hardmultiple choice

A network administrator is deploying IPv6 First Hop Security features on a Cisco Catalyst switch. The goal is to prevent rogue DHCPv6 servers from assigning addresses to clients. The administrator configures DHCPv6 Guard on the switch. Which additional configuration is necessary to ensure that DHCPv6 Guard operates correctly?

Question 145mediummultiple choice

A network engineer is configuring SNMPv3 on a Cisco IOS router. The requirement is to authenticate and encrypt SNMP messages using the user 'admin' with SHA authentication and AES encryption. Which command correctly configures the SNMPv3 user?

Question 146mediummultiple choice

A network engineer is deploying an MPLS Layer 3 VPN for a customer. The customer requires that the provider edge (PE) routers support a unique route distinguisher (RD) per VRF and that the same customer routes be imported into multiple VRFs. Which configuration on the PE router accomplishes this requirement?

Question 147hardmultiple choice

A network engineer is troubleshooting a DHCP relay configuration on a Cisco IOS router. The router is configured with the ip helper-address 10.1.1.1 command on interface GigabitEthernet0/0, but clients on the 192.168.1.0/24 subnet are not receiving IP addresses from the DHCP server at 10.1.1.1. The engineer verifies that the DHCP server is operational and has a pool for 192.168.1.0/24. What is the most likely cause?

Question 148easymultiple choice

A network engineer is configuring a Cisco IOS router to support MPLS Layer 3 VPNs. The engineer needs to enable the provider edge (PE) router to exchange VPNv4 routes with other PE routers. Which protocol is used to distribute VPNv4 routes between PE routers?

Question 149mediummulti select

Study the full EIGRP explanation →

A network engineer is configuring a Cisco IOS router to act as a DHCP server for a subnet 10.10.10.0/24. The engineer wants to ensure that the router provides the default gateway, DNS server, and domain name to DHCP clients. Which three commands must be configured in the DHCP pool? (Choose three.)

Question 150easymultiple choice

A network administrator is deploying a DMVPN Phase 2 network with EIGRP as the routing protocol. The hub router is configured with a multipoint GRE interface and NHRP. Spokes are configured with tunnel interfaces and are registering with the hub. However, the administrator notices that spoke routers are not forming EIGRP neighbor adjacencies with the hub. Which command is most likely missing on the hub's mGRE interface?

Question 151hardmultiple choice

A network administrator is configuring a Cisco IOS router as a DHCP server. The router has two interfaces: GigabitEthernet0/0 with IP 192.168.1.1/24 and GigabitEthernet0/1 with IP 10.0.0.1/24. The administrator wants the router to assign addresses from the 192.168.1.0/24 subnet to clients on GigabitEthernet0/0. Which command must be configured in the DHCP pool to ensure that the router only assigns addresses from the correct subnet?

Question 152hardmultiple choice

A network engineer is troubleshooting a DMVPN Phase 3 network where spoke-to-spoke communication is not working. The hub is configured with ip nhrp redirect, and spokes are configured with ip nhrp shortcut. The routing protocol is OSPF, and the hub is configured with ip nhrp map multicast dynamic. The engineer notices that when a spoke pings another spoke's LAN IP, the first few pings fail, but subsequent pings succeed. However, the engineer wants to eliminate the initial packet loss. Which of the following is the most likely cause of the initial packet loss?

Question 153mediummultiple choice

A network engineer is configuring a Cisco IOS router to authenticate a branch office VPN client with a digital certificate. The certificate is issued by an external CA, and the engineer must ensure that the router can validate the certificate chain. Which command is required to install the CA certificate?

Question 154mediummultiple choice

A network engineer configures a Cisco IOS router with the command 'ip dhcp excluded-address 10.10.10.1 10.10.10.20'. The DHCP pool is defined as 'ip dhcp pool LAN' with network 10.10.10.0 /24. Which statement accurately describes the effect of the excluded-address command?

Question 155easymultiple choice

A network administrator needs to configure a Cisco IOS router to send SNMP traps to a management server at 192.168.1.200 using SNMPv2c with the community string 'public'. Which command is required?

Question 156easymultiple choice

A network engineer is configuring a Cisco router to act as a DHCP relay agent. The DHCP server is located on a different subnet. Which command is required on the router's interface to forward DHCP requests to the server?

Question 157mediummultiple choice

A network engineer is configuring a Cisco IOS router to act as a DHCP server for a remote subnet. The router interface connected to that subnet is configured with the address 10.10.10.1/24. The engineer wants the router to assign addresses from the 10.10.10.0/24 range and also provide the default gateway and DNS server information to clients. Which configuration is required on the router to accomplish this?

Question 158mediummultiple choice

Study the full multicast explanation →

A network engineer is configuring a Cisco IOS XE router to authenticate VPN users against a Microsoft Active Directory server. The router must use RADIUS and send the user's original username without modification. Which command set correctly configures the router to use the AD server at 10.1.1.50 with the shared secret 'Cisco123'?

Question 159easymultiple choice

A network engineer is configuring a GRE tunnel between two Cisco IOS routers to transport multicast traffic. The engineer notices that multicast packets are not being forwarded over the tunnel. Which command is required on the tunnel interface to enable multicast forwarding?

Question 160mediummultiple choice

A network engineer is configuring a DMVPN Phase 3 hub router. Spoke routers are behind dynamic NAT and cannot receive inbound connections. The engineer needs to ensure that spoke-to-spoke traffic flows directly without traversing the hub. Which technology must be enabled on the hub to achieve this?

Question 161hardmultiple choice

A network administrator is implementing MPLS Layer 3 VPNs. The customer edge (CE) router is connected to the provider edge (PE) router via a single link and runs OSPF with the PE. The administrator wants to prevent the customer's OSPF routes from being redistributed into the provider's IGP and to keep the customer's OSPF topology separate. Which OSPF process configuration on the PE router achieves this?

Question 162mediummultiple choice

A network engineer is troubleshooting an MPLS L3VPN where customer routes are not being advertised from one PE to another. The engineer verifies that the VRFs are configured correctly, the IGP is converged, and the PE routers have established an MP-BGP session. Which command should the engineer use to verify that the VPNv4 prefixes are being exchanged correctly?

Question 163mediummultiple choice

A network administrator is deploying a DMVPN Phase 3 hub-and-spoke topology. Spokes must be able to communicate directly with each other without traffic traversing the hub. The administrator has configured NHRP and IPsec on all routers. Which additional configuration is required on the hub to enable direct spoke-to-spoke communication?

Question 164mediummultiple choice

A network engineer is configuring a Cisco router as a Dynamic Host Configuration Protocol (DHCP) server for a remote subnet. The router's interface that connects to the remote subnet is GigabitEthernet0/1 with IP address 10.10.10.1/24. The engineer wants the router to assign addresses from the 10.10.10.0/24 pool to clients on that subnet. Which command must be issued in DHCP pool configuration mode to specify the default gateway that clients will receive?

Question 165easymultiple choice

A network engineer is configuring a Cisco router to act as a DHCPv6 server for a dual-stack network. The engineer wants to provide IPv6 addresses to clients and also supply them with DNS server addresses. Which DHCPv6 message type should the server use to send the DNS server information to the clients?

Question 166easymultiple choice

A network engineer configures a Cisco IOS router as a DHCP relay agent. The router interface connected to the DHCP clients is configured with 'ip helper-address 192.168.1.10'. Which type of traffic will be forwarded to the DHCP server at 192.168.1.10 by default?

Question 167mediummulti select

A network engineer is deploying DMVPN Phase 3 with IPsec protection. The hub router is configured with a multipoint GRE tunnel interface and NHRP. Which two statements are true regarding the configuration that must be applied to the spoke routers to enable direct spoke-to-spoke communication? (Choose two.)

Question 168hardmultiple choice

A network engineer is troubleshooting an MPLS L3VPN where customer routes are not being propagated between PE routers. The engineer verifies that the MP-BGP session between the PEs is established and that VRFs are configured correctly. Which of the following is the most likely cause for the missing routes?

Question 169mediummultiple choice

A network engineer is troubleshooting a DMVPN Phase 3 network. Spoke-to-spoke tunnels are not being established directly; traffic between spokes is going through the hub. The hub is configured with 'ip nhrp redirect' and spokes with 'ip nhrp shortcut'. Which additional configuration is required on the spokes to enable direct spoke-to-spoke communication?

Question 170hardmultiple choice

A network administrator is implementing IPsec VPN between two Cisco routers. The administrator wants to ensure that only specific traffic, defined by an extended access list, is encrypted and sent through the tunnel, while all other traffic is sent unencrypted. Which IPsec configuration element is used to define this traffic?

Question 171mediummultiple choice

A network administrator is configuring a Cisco IOS router to support MPLS Layer 3 VPNs. The router is a PE device that must exchange VPNv4 routes with other PE routers. The administrator has enabled MPLS LDP on the core-facing interfaces and configured BGP with the address-family vpnv4. Which additional configuration is required on the PE router to properly forward MPLS VPN traffic?

Question 172mediummulti select

Review the full routing breakdown →

A network administrator is configuring a Cisco IOS router to support MPLS Layer 3 VPN. The administrator needs to enable the provider edge (PE) router to exchange VPNv4 routes with other PE routers. Which two configurations are required on the PE router to enable MP-BGP for VPNv4? (Choose two.)

Question 173easymultiple choice

A network technician is configuring a GRE tunnel between two routers. The tunnel source is a physical interface, and the tunnel destination is a loopback interface on the remote router. The technician notices that the tunnel interface is up, but line protocol is down. What is the most likely cause?

Question 174mediummulti select

A network administrator is configuring a GRE tunnel between two Cisco IOS routers. The tunnel must support multicast traffic and be protected by IPsec. Which two statements about the configuration are true? (Choose two.)

Question 175mediummultiple choice

A network engineer is configuring a Cisco router to support MPLS Layer 3 VPNs. The engineer needs to enable the router to exchange VPNv4 routes with a provider edge (PE) router. Which address family must be configured under the BGP routing process to support this?

Question 176mediummultiple choice

A network engineer is configuring an MPLS L3VPN. The PE router is running OSPF with the CE router in VRF CUSTOMER. The engineer notices that routes from the customer are being redistributed into the provider's global OSPF process, causing instability. Which configuration change on the PE router will prevent this redistribution while still allowing customer routes to be advertised across the MPLS core?

Question 177easymultiple choice

A network technician is configuring a Cisco router to act as a DHCP relay agent. The router's interface GigabitEthernet0/0 is connected to a subnet where clients need to obtain IP addresses from a DHCP server located on a different subnet. Which command is required on the router to enable DHCP relay?

Question 178hardmulti select

A network administrator is deploying MPLS Layer 3 VPNs on Cisco IOS routers. The administrator must ensure that customer routes are exchanged between PE routers without requiring customer involvement. Which two protocols or features are required to accomplish this? (Choose two.)

Question 179mediummultiple choice

Study the full ACL explanation →

A network administrator is deploying DMVPN Phase 3 with IKEv2. The hub router is configured with a dynamic multipoint VPN tunnel and is using NHRP. Spoke routers are configured to register with the hub. After configuration, the administrator notices that spoke-to-spoke traffic is still going through the hub instead of directly between spokes. Which configuration change is most likely to resolve this issue?

Question 180mediummultiple choice

A network engineer is implementing CoPP (Control Plane Policing) on a Cisco IOS router to protect the route processor from excessive traffic. The engineer wants to limit ICMP echo requests destined to the router itself to 100 kbps. Which action must be taken to ensure that CoPP applies only to traffic destined to the control plane?

Question 181mediummultiple choice

A network engineer is configuring a DMVPN Phase 3 hub-and-spoke topology. Spokes are behind NAT devices and have dynamically assigned public IP addresses. The engineer wants to ensure that spoke-to-spoke traffic can be established directly without traversing the hub. Which technology should be implemented on the hub to achieve this?

Question 182easymultiple choice

A network engineer is configuring a Cisco IOS router to act as a DHCP relay agent. The router receives DHCP discover messages on interface GigabitEthernet0/1 and must forward them to a DHCP server at 10.1.1.100. Which command is required on the router?

Question 183easymultiple choice

A network administrator is configuring a Cisco IOS router to use NAT overload (PAT) for a small office. The inside network is 192.168.1.0/24, and the router's outside interface is GigabitEthernet0/0 with IP address 203.0.113.5. The administrator enters the following commands:

access-list 1 permit 192.168.1.0 0.0.0.255
ip nat inside source list 1 interface GigabitEthernet0/0 overload
interface GigabitEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
interface GigabitEthernet0/0
 ip address 203.0.113.5 255.255.255.0
 ip nat outside

However, hosts on the inside network cannot access the Internet. Which command is missing?

Question 184easymultiple choice

A network administrator is implementing policy-based routing (PBR) on a Cisco IOS router. The goal is to route traffic from a specific subnet (192.168.1.0/24) through a next-hop of 10.1.1.2 instead of the default route. The administrator has created a route map named PBR-MAP and configured a match statement for the subnet. Which action must be configured in the route map to set the next-hop?

Question 185mediummultiple choice

A network engineer is configuring DHCPv6 on a Cisco IOS-XE router. The router must provide IPv6 addresses and other configuration parameters to clients on the LAN. The engineer wants the router to assign addresses using stateless address autoconfiguration (SLAAC) but also provide DNS server information via DHCPv6. Which command set correctly configures the router's LAN interface to achieve this?

Question 186mediummultiple choice

A network engineer is configuring a Cisco router to support Network Address Translation (NAT) for a small office. The engineer wants to translate internal private addresses to a single public address using Port Address Translation (PAT). Which command enables PAT by allowing the router to use the interface's IP address for translation?

Question 187easymultiple choice

A network engineer is configuring a Cisco IOS XE router to support MPLS Layer 3 VPNs. The engineer has enabled MPLS IP on the core interfaces and configured OSPF as the IGP. Which additional configuration is required on the PE routers to exchange VPNv4 routes with other PE routers?

Question 188hardmultiple choice

A network engineer is configuring a Cisco IOS router for IPv6 First Hop Security. The requirement is to prevent rogue DHCPv6 servers from assigning addresses to clients on a VLAN. The engineer has already enabled IPv6 snooping on the VLAN. Which additional feature should be configured to meet this requirement?

Question 189easymultiple choice

A network engineer is configuring a Cisco router to act as a DHCP server for a remote subnet. The router's interface connected to the remote subnet is configured with the `ip helper-address` command pointing to the DHCP server. However, clients on the remote subnet are not receiving IP addresses. The engineer verifies that the DHCP server is operational and has a valid pool for the remote subnet. What is the most likely cause of the problem?

Question 190mediummultiple choice

A network engineer is configuring a Cisco IOS router to support MPLS Traffic Engineering (TE). The engineer has enabled MPLS TE globally and on the interfaces, and has configured a TE tunnel. However, the tunnel is not coming up. The engineer verifies that the IGP (OSPF) is advertising TE information. Which additional configuration is required to establish the TE tunnel?

Question 191hardmultiple choice

A network engineer is troubleshooting an MPLS L3VPN where customer routes are not being advertised between PE routers. The engineer verifies that the VRFs are configured correctly and that MPLS forwarding is operational. Which MP-BGP configuration is required to exchange VPNv4 routes between PE routers?

Question 192easymultiple choice

A network administrator is configuring a Cisco IOS router to act as a DHCP server for a LAN segment. The administrator wants to exclude a range of IP addresses from being assigned to clients because those addresses are statically assigned to servers and printers. Which command should be used to accomplish this?

Question 193hardmultiple choice

A network engineer is troubleshooting an MPLS L3 VPN where OSPF is used as the PE-CE routing protocol. The customer reports that routes from one site are not being learned at another site. The engineer checks the PE routers and finds that the OSPF routes are present in the VRF routing table but not in the MP-BGP table. What is the most likely cause?

Question 194hardmultiple choice

A network engineer is configuring IPsec VPN on a Cisco IOS router. The engineer wants to ensure that only traffic from the 192.168.1.0/24 subnet to the 10.0.0.0/24 subnet is encrypted, while all other traffic is sent unencrypted. Which configuration element is used to define this traffic?

Question 195hardmultiple choice

A network administrator is deploying MPLS Layer 3 VPNs across a service provider backbone. The provider uses OSPF as the IGP and MP-BGP for VPNv4 route distribution. The administrator notices that VPNv4 routes are not being advertised between PE routers. Which configuration step is most likely missing on the PE routers?

Question 196easymultiple choice

A network administrator is configuring a Cisco IOS XE router for MPLS Traffic Engineering (TE). The administrator wants to ensure that the router can signal an MPLS TE tunnel using RSVP. Which protocol must be enabled on the interfaces along the path to reserve bandwidth and distribute labels?

Question 197easymultiple choice

A network engineer is configuring a Cisco IOS router to support IPv6 OSPFv3. The engineer wants to enable OSPFv3 on an interface and ensure that it forms adjacencies with neighbors. Which command must be used to enable OSPFv3 on an interface?

Question 198mediummultiple choice

A network engineer is deploying an MPLS L3VPN using BGP as the PE-CE routing protocol. The customer requires that the PE router accept only routes with a specific BGP community and set a local preference of 200 for those routes. Which configuration on the PE router accomplishes this requirement?

Question 199mediummultiple choice

A network engineer is configuring a Cisco IOS XE router as a Dynamic Multipoint VPN (DMVPN) Phase 3 hub. The hub must support spoke-to-spoke direct tunnels while allowing the hub to remain in the data path for initial spoke-to-spoke communication. The engineer has configured the tunnel interface with 'ip nhrp redirect' on the hub. Which additional command must be configured on the spoke routers to enable them to dynamically create direct tunnels to other spokes?

Question 200mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to support First Hop Redundancy Protocol (FHRP) for a group of hosts on VLAN 10. The design requires that the virtual IP address and virtual MAC address remain the same even if the active router changes. The engineer decides to use Virtual Router Redundancy Protocol (VRRP) version 2. Which statement about VRRPv2 is true?

Question 201hardmultiple choice

A service provider is deploying MPLS Traffic Engineering (TE) with RSVP-TE to guarantee bandwidth for critical traffic. The network uses OSPF as the IGP with TE extensions enabled. An engineer notices that a TE tunnel fails to establish because the path computation cannot find a path with sufficient bandwidth, even though the physical links have enough capacity. Which action should the engineer take to ensure that RSVP-TE can reserve bandwidth on the links?

Question 202easymultiple choice

A network engineer is configuring a Cisco IOS XE router to act as a DHCP server for a subnet. The router must assign IP addresses from the 192.168.100.0/24 pool, but the first 10 addresses and the last address in the range must be excluded from dynamic assignment. Which command accomplishes this requirement?

Question 203mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to support MPLS L3VPN. The router is a PE device with a VRF named CUSTOMER. The engineer wants to ensure that the PE router can forward traffic for the CUSTOMER VRF using MPLS labels. Which command must be configured on the PE router's core-facing interface to enable MPLS forwarding?

Question 204mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to support MPLS Traffic Engineering (TE) with RSVP-TE. The engineer has enabled MPLS TE globally and on the interfaces. The engineer wants to ensure that the router can signal an LSP with a specific bandwidth requirement of 100 Mbps. Which command is required to enable RSVP-TE signaling on the interface?

Question 205hardmultiple choice

A network engineer is troubleshooting a Cisco IOS XE router that is configured for IPv6 First Hop Security on a user VLAN. Hosts report intermittent connectivity, and the engineer suspects that IPv6 Router Advertisement (RA) messages from an unauthorized device are being accepted. Which feature should be enabled to ensure that only RAs from the legitimate router are processed by hosts?

Question 206mediummulti select

A network engineer is configuring a Cisco IOS XE router to act as an IPv6 DHCP server for a LAN segment. The router must provide IPv6 addresses and other configuration parameters to hosts. Which two tasks must the engineer perform to enable stateful DHCPv6 operation on the router? (Choose two.)

Question 207hardmultiple choice

A service provider is deploying MPLS Traffic Engineering (TE) with RSVP-TE to ensure bandwidth guarantees for critical traffic. The network engineer has configured an MPLS TE tunnel on a Cisco IOS XE router. The tunnel must be able to signal an explicit path that includes a specific link with a reserved bandwidth of 50 Mbps. Which RSVP-TE object is used to carry the explicit route information in the Path message?

Question 208easymultiple choice

Review the full routing breakdown →

A network administrator is configuring a Cisco IOS XE router to act as a DHCP relay agent. The router is connected to a client subnet on GigabitEthernet0/0 and to a DHCP server at 192.168.1.100 on GigabitEthernet0/1. The administrator enters the command 'ip helper-address 192.168.1.100' on GigabitEthernet0/0. Which statement is true about the behavior of this configuration?

Question 209hardmultiple choice

A network engineer is configuring a Cisco IOS XE router as a LISP ITR. The router must encapsulate traffic from local EIDs to remote RLOCs. Which command is required to enable LISP functionality and allow the router to act as an ITR?

Question 210hardmultiple choice

A network engineer is troubleshooting a DMVPN Phase 3 deployment on a Cisco IOS XE hub. Spokes use NHRP to register with the hub and have working mGRE tunnels to the hub. The design requires that spoke-to-spoke traffic be sent directly between spokes without transiting the hub's data path. The engineer observes that all spoke-to-spoke packets still traverse the hub even though spoke registration and routing are correct. Which configuration change on the hub is required to enable direct spoke-to-spoke forwarding?

Question 211easymultiple choice

A network administrator is configuring a Cisco IOS XE router to support MPLS L3VPN. The administrator needs to enable MPLS forwarding on an interface that connects to the service provider core. Which command should be applied to the interface?

Question 212hardmultiple choice

A network engineer is configuring a Cisco IOS XE router to act as a DHCP relay agent. The router receives DHCP discover messages on interface GigabitEthernet0/1 and must forward them to a DHCP server at 10.1.1.100. The engineer configures the command 'ip helper-address 10.1.1.100' on GigabitEthernet0/1. However, the DHCP server is not receiving the requests. Which additional configuration is required to ensure that DHCP relay works correctly?

Question 213hardmultiple choice

A network engineer is configuring an MPLS L3VPN on a Cisco IOS XE PE router. The customer edge (CE) router uses eBGP to peer with the PE router. The engineer wants to ensure that the CE can advertise its routes to the PE and that the PE can propagate them to other PE routers via MP-BGP. The engineer has configured the VRF, the PE-CE eBGP session, and MP-BGP on the PE. However, the routes from the CE are not appearing in the MP-BGP table. Which configuration step is most likely missing on the PE router?

Question 214mediummultiple choice

A network engineer is configuring a Cisco IOS XE router as a Dynamic Host Configuration Protocol (DHCP) server for a guest wireless subnet. The router must dynamically allocate addresses from the 192.168.50.0/24 pool, but the first 30 addresses must be reserved for static assignment to access points and controllers. Which command must be issued to prevent the DHCP server from offering those addresses?

Question 215easymultiple choice

A network administrator is configuring a Cisco IOS router to provide first-hop redundancy for a group of hosts on VLAN 10. The design requires that the virtual IP address be 10.1.10.1 and that the router with the highest priority become the active gateway. The administrator has configured the interface with 'standby 10 ip 10.1.10.1' and 'standby 10 priority 150'. Which additional command is required to ensure that the router preempts and becomes the active gateway if it reboots?

Question 216hardmultiple choice

A network engineer is deploying MPLS Layer 3 VPNs on a Cisco IOS XE PE router. The customer VRF CUST_A uses OSPF as the PE-CE routing protocol. The engineer must ensure that OSPF routes from the customer are redistributed into MP-BGP and that the OSPF domain ID is preserved across the MPLS backbone. Which configuration step is required on the PE router?

Question 217mediummultiple choice

A network engineer is configuring a Cisco IOS XE router as a DHCPv6 server for a dual-stack network. The router must provide IPv6 addresses and other configuration parameters to clients on VLAN 20. The engineer has configured a DHCPv6 pool named POOL1 with the address prefix 2001:DB8:20::/64 and the DNS server 2001:DB8::53. The clients are not receiving IPv6 addresses. Which additional configuration is required on the router's VLAN 20 interface to ensure DHCPv6 clients can obtain addresses?

Question 218mediummultiple choice

A network engineer is configuring a Cisco IOS XE router to act as a Dynamic Host Configuration Protocol (DHCP) client on its WAN interface. The service provider requires the router to send a specific client identifier in its DHCP requests. Which command accomplishes this?

Question 219hardmultiple choice

A network engineer is configuring MPLS Traffic Engineering (TE) with RSVP-TE on a Cisco IOS XE router. The engineer wants to establish a TE tunnel from Router A to Router D. The path must be explicitly defined to go through Router B and then Router C. The engineer has configured the tunnel interface with the destination and an explicit path. However, the tunnel is not coming up. Which command is required to enable RSVP-TE on the core interfaces of Router A, B, C, and D?

Question 220hardmulti select

A network engineer is configuring MPLS Traffic Engineering (TE) with RSVP-TE on a Cisco IOS XE router to provide bandwidth guarantees for delay-sensitive traffic. The engineer must ensure that the TE tunnel can signal the required bandwidth and that the path is computed based on available resources. Which two statements about the configuration are true? (Choose two.)

Question 221mediummultiple choice

A network engineer is configuring a Cisco IOS XE router for MPLS L3VPN. The router is a PE device with a VRF named CUSTOMER. The engineer wants to redistribute routes from the VRF into MP-BGP so they can be advertised to a remote PE. The engineer has configured the VRF and assigned interfaces. Which command sequence correctly redistributes the connected routes from the VRF into BGP?

Question 222hardmultiple choice

A network engineer is configuring a Cisco IOS XE router to act as a DHCPv6 relay agent. The router is connected to a LAN segment with DHCPv6 clients and must forward DHCPv6 messages to a DHCPv6 server at 2001:DB8::100. The engineer has configured the interface with ipv6 address 2001:DB8:1::1/64 and ipv6 enable. Which command is required to enable DHCPv6 relay on the interface?

Question 223easymultiple choice