300-410 Layer 3 Technologies Practice Test 11 — 15 Questions

Question 1

A network engineer is configuring policy-based routing (PBR) on a Cisco router. The router has two interfaces: GigabitEthernet0/0 (LAN) and GigabitEthernet0/1 (WAN). The engineer wants to route traffic from the 192.168.1.0/24 subnet to a next-hop of 10.1.1.2, and all other traffic should follow the default routing table. Which two steps are required to implement this? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Apply the route map to the GigabitEthernet0/0 interface using the ip policy route-map command.. To implement PBR, you must define a route map that matches the traffic (using an ACL) and sets the next-hop. Then, you apply that route map to the ingress interface using the ip policy route-map command. The other options are incorrect: a default route would affect all traffic, PBR is not enabled globally, and applying an ACL directly to the interface would filter rather than route.

Answer

Configure a default route pointing to 10.1.1.2.

Answer

Create an ACL that permits traffic from 192.168.1.0/24 and apply it to the GigabitEthernet0/0 interface inbound.

Answer

Enable PBR globally using the ip policy route-map command in global configuration mode.

Question 2

A network engineer is implementing MPLS Layer 3 VPNs. The engineer needs to configure a PE router to exchange VPNv4 routes with other PE routers. Which BGP configuration is required to enable the exchange of VPNv4 routes?

Accepted Answer

address-family vpnv4. In MPLS Layer 3 VPNs, PE routers use Multiprotocol BGP (MP-BGP) to exchange VPNv4 routes. The VPNv4 address family is specifically designed for this purpose. Configuring address-family vpnv4 and activating neighbors under it enables the exchange of VPNv4 prefixes, which include the route distinguisher and label information. Other address families like ipv4 unicast or ipv4 vrf are used for different purposes.

Answer

address-family ipv6 unicast

Answer

address-family ipv4 unicast

Answer

address-family ipv4 vrf CUSTOMER

Question 3

A network engineer is configuring a GRE tunnel between two Cisco routers across an ISP network. The tunnel source is GigabitEthernet0/0 (IP 203.0.113.1) and the tunnel destination is 203.0.113.2. The engineer notices that the tunnel interface is up, but no traffic is passing through it. The engineer suspects a routing issue. Which command should be used to verify that the tunnel endpoint is reachable?

Accepted Answer

ping 203.0.113.2 source 203.0.113.1. To verify reachability to the tunnel destination, you should ping the destination IP address using the tunnel source address as the source. This tests the underlying transport network and ensures that the tunnel endpoint is reachable. Other commands like show ip interface brief or show interface tunnel only show local status, and traceroute may not use the correct source address.

Answer

show interface tunnel 0

Answer

traceroute 203.0.113.2

Answer

show ip interface brief

Question 4

A network engineer is configuring OSPF on a router with three interfaces: Gi0/0 (10.1.1.1/24), Gi0/1 (10.2.2.1/24), and Gi0/2 (10.3.3.1/24). The engineer wants to prevent OSPF from forming adjacencies on Gi0/2 while still advertising the 10.3.3.0/24 network into OSPF. Which configuration accomplishes this?

Accepted Answer

Configure the Gi0/2 interface as passive with the passive-interface Gi0/2 command under router ospf.. The passive-interface command is designed to stop OSPF from sending and processing hello packets on an interface, which prevents neighbor adjacencies. However, the network prefix associated with that interface is still advertised as a stub network into OSPF, allowing other routers to reach it. This exactly matches the requirement to suppress adjacencies while still advertising the subnet.

Answer

Configure the Gi0/2 interface with the ip ospf database-filter all out command.

Answer

Configure the Gi0/2 interface with the ip ospf network point-to-point command.

Answer

Configure a distribute-list on Gi0/2 to filter OSPF hellos.

Question 5

A network technician is configuring a static route on a Cisco IOS router. The requirement is to forward all traffic destined to the 192.168.1.0/24 network to the next-hop IP address 10.1.1.1. Which command accomplishes this?

Accepted Answer

ip route 192.168.1.0 255.255.255.0 10.1.1.1. The standard syntax for a static route on Cisco IOS is 'ip route prefix mask next-hop'. The command 'ip route 192.168.1.0 255.255.255.0 10.1.1.1' correctly specifies the destination network, subnet mask, and next-hop IP address. Adding a distance metric or name is optional and not required for basic functionality.

Answer

ip route 192.168.1.0 255.255.255.0 10.1.1.1 name STATIC

Answer

ip route 192.168.1.0 255.255.255.0 10.1.1.1 255

Answer

ip route 192.168.1.0 255.255.255.0 10.1.1.1 1

Question 6

A network engineer is implementing policy-based routing (PBR) on a Cisco IOS router. The engineer wants to route traffic from the 10.1.1.0/24 subnet to a next-hop of 192.168.1.1, while all other traffic uses the default routing table. Which configuration correctly implements this?

Accepted Answer

route-map PBR permit 10
 match ip address 10
 set ip next-hop 192.168.1.1
!
interface GigabitEthernet0/0
 ip policy route-map PBR
!
access-list 10 permit 10.1.1.0 0.0.0.255. Policy-based routing (PBR) allows you to override the normal routing table based on criteria such as source IP address. The correct configuration uses a route map with a match statement for the source subnet and a set statement to define the next-hop. The route map is then applied to the interface with the ip policy route-map command. The set ip next-hop command ensures that matched traffic is forwarded to the specified next-hop, while other traffic uses the default routing table.

Answer

route-map PBR permit 10
 match ip address 10
 set ip default next-hop 192.168.1.1
!
interface GigabitEthernet0/0
 ip policy route-map PBR
!
access-list 10 permit 10.1.1.0 0.0.0.255

Answer

route-map PBR permit 10
 match ip address 10
 set ip next-hop 192.168.1.1
!
interface GigabitEthernet0/0
 ip route-cache policy
!
access-list 10 permit 10.1.1.0 0.0.0.255

Answer

route-map PBR permit 10
 match ip address 10
 set interface GigabitEthernet0/1
!
interface GigabitEthernet0/0
 ip policy route-map PBR
!
access-list 10 permit 10.1.1.0 0.0.0.255

Question 7

A network engineer is configuring OSPFv3 on a Cisco IOS XE router. The router has two interfaces: GigabitEthernet0/0 in Area 0 and GigabitEthernet0/1 in Area 1. The engineer wants to ensure that the router acts as an ABR and that inter-area routes are summarized. Which command must be configured under the OSPFv3 router configuration mode to enable ABR functionality?

Accepted Answer

No additional command is required; ABR is automatic.. ABR status in OSPFv3 is not enabled by a command; it is a role that a router assumes when it has interfaces in multiple areas. The engineer must ensure that the interfaces are assigned to different areas, which is already the case. Commands like area range are used for summarization but do not enable ABR. The router ID is necessary for OSPFv3 operation but not for ABR functionality. Therefore, no additional command is required to make the router an ABR.

Answer

area 1 range 2001:db8:1::/64

Answer

router-id 1.1.1.1

Answer

interface GigabitEthernet0/1

Question 8

A network technician is configuring a static route on a Cisco router. The technician wants to ensure that the static route is only used when the primary route is unavailable. Which type of static route should be configured?

Accepted Answer

Floating static route. A floating static route is designed to be a backup by assigning it a higher administrative distance than the primary route. When the primary route is present, the floating static route is not installed in the routing table. If the primary route fails, the floating static route becomes active. This behavior precisely matches the requirement of using the static route only when the primary route is unavailable.

Answer

Default static route

Answer

Summary static route

Answer

Recursive static route

Question 9

A network engineer is implementing MPLS Layer 3 VPN on a Cisco IOS-XE router. The engineer needs to configure the PE router to exchange VPNv4 routes with other PE routers. Which address family must be configured under the BGP routing process to enable VPNv4 route exchange?

Accepted Answer

address-family vpnv4. In MPLS Layer 3 VPN, PE routers exchange VPNv4 routes using the VPNv4 address family under BGP. This address family carries the route distinguisher and extended communities (like route targets) that identify the VPN membership. Configuring 'address-family vpnv4' is essential for the PE routers to exchange customer routes and maintain separate routing tables.

Answer

address-family ipv6 vpnv4

Answer

address-family ipv4 vrf

Answer

address-family ipv4 unicast

Question 10

A network administrator is troubleshooting an EIGRP named mode configuration on a Cisco IOS XE router. The router is not forming an adjacency with a neighbor. The administrator verifies that the AS number is 100, the K-values are default, and authentication is not configured. Which command should be used to verify the EIGRP hello and hold timers on the interface?

Accepted Answer

show ip eigrp interfaces detail. To verify EIGRP hello and hold timers on an interface, the show ip eigrp interfaces detail command is used. It provides per-interface EIGRP parameters, including hello interval and hold time. Other commands like show ip eigrp neighbors detail focus on neighbor state, while show ip protocols gives a global view. The topology table shows routes, not timers. Therefore, the interfaces detail command is the correct choice for troubleshooting timer mismatches.

Answer

show ip eigrp neighbors detail

Answer

show ip protocols

Answer

show ip eigrp topology

Question 11

A network administrator is implementing MPLS Layer 3 VPNs. The administrator wants to ensure that customer routes are not leaked between different VRFs on the same PE router. Which mechanism should be used to isolate the VRFs?

Accepted Answer

Route targets. Route targets are extended BGP communities that define which VRFs can import and export routes. By configuring distinct route targets for each VRF, you control route distribution and prevent leaking. Route distinguishers only make prefixes unique, MPLS labels are for forwarding, and standard BGP communities are not specific to VRF isolation.

Answer

BGP communities

Answer

Route distinguishers

Answer

MPLS labels

Question 12

A network engineer is configuring a static route on a Cisco IOS router to reach the network 10.1.1.0/24 via the next-hop 192.168.1.1. The engineer wants the route to be removed from the routing table if the next-hop becomes unreachable. Which command should be used?

Accepted Answer

ip route 10.1.1.0 255.255.255.0 192.168.1.1 track 1. To remove a static route when the next-hop becomes unreachable, the track keyword must be used. It associates the route with a tracked object that monitors the next-hop. The permanent keyword does the opposite, keeping the route installed. The name keyword only labels the route. A standard static route without tracking remains in the table even if the next-hop fails. Therefore, the track option is correct.

Answer

ip route 10.1.1.0 255.255.255.0 192.168.1.1

Answer

ip route 10.1.1.0 255.255.255.0 192.168.1.1 permanent

Answer

ip route 10.1.1.0 255.255.255.0 192.168.1.1 name TRACK

Question 13

A network engineer is deploying OSPFv3 in an IPv6 network. The engineer wants to enable OSPFv3 on a router and ensure that it can form adjacencies with neighbors. Which two commands are required on the router to enable OSPFv3 globally and on an interface? (Choose two.)

Accepted Answer

ipv6 ospf 1 area 0. To enable OSPFv3, you must start the OSPFv3 process with 'ipv6 router ospf 1' and then enable it on an interface with 'ipv6 ospf 1 area 0'. The other commands are either for OSPFv2, general IPv6 routing, or interface IPv6 enabling, which are not the specific OSPFv3 enabling commands.

Answer

ipv6 unicast-routing

Answer

router ospf 1

Answer

ipv6 enable

Question 14

A network engineer is implementing Policy-Based Routing (PBR) on a Cisco IOS router. The engineer wants to route traffic from subnet 10.10.10.0/24 to a next-hop of 192.168.2.2, but only for HTTP traffic (TCP port 80). Which configuration sequence is required?

Accepted Answer

Create an extended ACL that permits TCP port 80 from the subnet, create a route-map that matches the ACL and sets the next-hop, then apply the route-map to the interface with ip policy route-map.. PBR requires an extended ACL to match traffic based on source, destination, and port. The route-map then matches the ACL and sets the next-hop. Finally, the route-map is applied to the ingress interface with ip policy route-map. A standard ACL cannot match port numbers, and global application is not supported. Therefore, the sequence with an extended ACL and interface application is correct.

Answer

Create a route-map with a match statement for the source subnet and a set statement for the next-hop, then apply it globally with ip policy route-map.

Answer

Create a route-map with a match statement for the source subnet and a set statement for the next-hop, then apply it to the interface with ip policy route-map.

Answer

Create a standard ACL that permits the subnet, create a route-map that matches the ACL and sets the next-hop, then apply the route-map to the interface with ip policy route-map.

Question 15

A network engineer is configuring Policy-Based Routing (PBR) on a Cisco router. The goal is to forward all HTTP traffic (TCP port 80) from the 10.1.1.0/24 subnet to next-hop 192.168.2.1. Which configuration sequence is correct?

Accepted Answer

Create an extended ACL that permits TCP port 80 from 10.1.1.0/24 to any, reference it in a route-map with a match ip address statement, set the next-hop to 192.168.2.1, and apply the route-map to the incoming interface with the ip policy route-map command.. PBR requires an ACL to classify traffic based on source, destination, and port. An extended ACL can match TCP port 80. The route-map then matches the ACL and sets the next-hop. Finally, the route-map is applied to the incoming interface with the ip policy route-map command. The other options either match all traffic, use a standard ACL that cannot match ports, or attempt to match ports directly in a route-map, which is not supported.

Answer

Create a route-map with a match statement for TCP port 80 and a set statement for next-hop 192.168.2.1, then apply it globally with the ip policy route-map command.

Answer

Create a standard ACL that permits 10.1.1.0/24, reference it in a route-map with a match ip address statement, set the next-hop to 192.168.2.1, and apply the route-map to the outgoing interface with the ip policy route-map command.

Answer

Create a route-map with a match statement for IP address 10.1.1.0/24 and a set statement for next-hop 192.168.2.1, then apply it to the incoming interface with the ip policy route-map command.