300-410 VRF-Lite Practice Test 4 — 15 Questions

Question 1

A network engineer runs the following command to troubleshoot a VRF-Lite redistribution issue:

R1# debug ip routing vrf CUSTOMER_E

Output:
RT: add 10.3.3.0/24 via 10.1.1.2, ospf 200 metric [110/20]
RT: add 10.3.3.0/24 via 10.1.1.2, eigrp 100 metric [90/131072] tag 0
RT: closer admin distance for 10.3.3.0/24, adding via eigrp 100
RT: add 10.3.3.0/24 to routing table, via eigrp 100

What does this output indicate?

Accepted Answer

The route 10.3.3.0/24 is added from EIGRP 100 because it has a lower administrative distance than OSPF.. The 'debug ip routing vrf' command shows route insertion and selection events for a specific VRF. The output shows that route 10.3.3.0/24 is learned from both OSPF 200 (with administrative distance 110) and EIGRP 100 (with administrative distance 90). Because EIGRP has a lower administrative distance, it is chosen as the best path and added to the routing table.

Answer

The route 10.3.3.0/24 is added from OSPF 200 because it has a lower metric.

Answer

The route 10.3.3.0/24 is added from both OSPF and EIGRP, creating an equal-cost path.

Answer

The route 10.3.3.0/24 is not added to the routing table due to a tag mismatch.

Question 2

A network engineer runs the following command to troubleshoot a VRF-Lite MPLS LDP issue:

R1# show mpls ldp bindings vrf CUSTOMER_F

Output:
  lib entry: 10.4.4.0/24, rev 2
    local binding:  label: 16
    remote binding: lsr: 2.2.2.2:0, label: 20
  lib entry: 10.5.5.0/24, rev 3
    local binding:  label: 17
    remote binding: lsr: 2.2.2.2:0, label: 21

What does this output indicate?

Accepted Answer

The VRF CUSTOMER_F has two prefixes with local labels 16 and 17, and remote labels 20 and 21 from LSR 2.2.2.2.. The 'show mpls ldp bindings vrf' command displays MPLS label bindings for a specific VRF. The output shows two prefixes (10.4.4.0/24 and 10.5.5.0/24) with local labels (16 and 17) and remote labels (20 and 21) from LSR 2.2.2.2. This indicates that LDP has successfully exchanged labels for these prefixes within the VRF.

Answer

MPLS LDP has not established a session with the remote LSR 2.2.2.2.

Answer

The labels are not being used because the VRF is not configured correctly.

Answer

The remote LSR is using the same labels as the local router.

Question 3

A network engineer runs the following command to troubleshoot a VRF-Lite DMVPN issue:

R1# show ip nhrp vrf CUSTOMER_G detail

Output:
10.6.6.1/32 via 10.6.6.1, Tunnel0 created 00:01:00, expire 01:59:00
  Type: dynamic, Flags: used
  NBMA address: 192.168.1.1
  (no-socket)
  Registration handle: 0x00000001
  Cache entries: 1

What does this output indicate?

Accepted Answer

The NHRP mapping for 10.6.6.1 is dynamic, with NBMA address 192.168.1.1, and is actively used.. The 'show ip nhrp vrf detail' command displays NHRP cache entries for a specific VRF. The output shows a dynamic NHRP mapping for destination 10.6.6.1/32, with NBMA address 192.168.1.1, learned via Tunnel0. The entry was created 1 minute ago and will expire in 1 hour 59 minutes. The 'used' flag indicates the mapping is actively being used.

Answer

The NHRP mapping is static and was manually configured.

Answer

The NHRP mapping has expired and needs to be refreshed.

Answer

The NHRP mapping is for a multicast group address.

Question 4

A network engineer runs the following command to troubleshoot a VRF-Lite IPsec issue:

R1# show crypto ipsec transform-set vrf CUSTOMER_H

Output:
Transform set combined: { esp-aes 256 esp-sha-hmac }
   will negotiate = { Tunnel,  }

What does this output indicate?

Accepted Answer

The transform set uses ESP with AES 256 and SHA-HMAC in tunnel mode.. The 'show crypto ipsec transform-set vrf' command displays the IPsec transform set for a specific VRF. The output shows a transform set named 'combined' that uses ESP with AES 256-bit encryption and SHA-HMAC authentication. It will negotiate a tunnel mode (as opposed to transport mode).

Answer

The transform set uses ESP with AES 256 and SHA-HMAC in transport mode.

Answer

The transform set uses AH with AES 256 and MD5.

Answer

The transform set does not specify any encryption or authentication.

Question 5

A network engineer runs the following command to troubleshoot a VRF-Lite CoPP issue:

R1# show policy-map control-plane input class CoPP-ACL vrf CUSTOMER_I

Output:
  Class-map: CoPP-ACL (match-all)
    0 packets, 0 bytes
    5 minute offered rate 0 bps, drop rate 0 bps
    Match: access-group 100
    police:
        cir 8000 bps, bc 1500 bytes, be 1500 bytes
      conformed 0 packets, 0 bytes; actions:
        transmit
      exceeded 0 packets, 0 bytes; actions:
        drop
      violated 0 packets, 0 bytes; actions:
        drop

What does this output indicate?

Accepted Answer

The CoPP policy is rate-limiting traffic to 8000 bps, but no traffic has matched the class yet.. The 'show policy-map control-plane input class vrf' command displays CoPP policy statistics for a specific VRF. The output shows class CoPP-ACL matching access-group 100, with a police rate of 8000 bps. All counters are zero, indicating no traffic has matched this class. This could mean the ACL is not matching any packets, or no traffic is being sent to the control plane for this VRF.

Answer

The CoPP policy is dropping all packets that match access-group 100.

Answer

The CoPP policy has matched many packets and is dropping them due to exceeding the rate.

Answer

The CoPP policy is not applied to the control plane for this VRF.

Question 6

In a VRF-Lite environment running EIGRP, what is the default hello timer value on a Frame Relay multipoint interface?

Accepted Answer

60 seconds. By default, EIGRP uses a hello timer of 60 seconds on NBMA networks with bandwidth less than T1, including Frame Relay multipoint interfaces, and 5 seconds on high-speed NBMA links.

Answer

5 seconds

Answer

10 seconds

Answer

30 seconds

Question 7

What is the default OSPF dead timer interval on a point-to-point interface within a VRF-Lite configuration?

Accepted Answer

40 seconds. OSPF defaults to a dead timer of 40 seconds on point-to-point and broadcast interfaces, which is four times the default hello timer of 10 seconds.

Answer

30 seconds

Answer

120 seconds

Answer

10 seconds

Question 8

In a VRF-Lite setup using RIP, what is the default update timer value?

Accepted Answer

30 seconds. RIP sends routing updates every 30 seconds by default, as defined in RFC 1058.

Answer

60 seconds

Answer

90 seconds

Answer

180 seconds

Question 9

Which BGP attribute is used as the first tie-breaker when selecting the best path in a VRF-Lite environment?

Accepted Answer

Weight. BGP selects the path with the highest weight (Cisco proprietary) as the first tie-breaker, followed by local preference.

Answer

Local preference

Answer

AS path length

Answer

MED

Question 10

In a VRF-Lite scenario with OSPF, what is the default network type on a physical Ethernet interface?

Accepted Answer

Broadcast. By default, OSPF sets the network type to broadcast on Ethernet interfaces, which enables DR/BDR election.

Answer

Point-to-point

Answer

Non-broadcast

Answer

Point-to-multipoint

Question 11

Which EIGRP packet type is used to confirm receipt of an update during reliable transport in a VRF-Lite configuration?

Accepted Answer

ACK. EIGRP uses ACK packets, which are hello packets with no data, to acknowledge reliable packets (updates, queries, replies).

Answer

Hello

Answer

Update

Answer

Query

Question 12

What is the default administrative distance for OSPF routes in a VRF-Lite environment on Cisco IOS-XE?

Accepted Answer

110. OSPF has a default administrative distance of 110 for all routes (intra-area, inter-area, and external).

Answer

90

Answer

120

Answer

170

Question 13

In a VRF-Lite environment running EIGRP, what is the default maximum hop count for routes?

Accepted Answer

100. EIGRP uses a maximum hop count of 100 by default, though it is not a metric but a TTL-like limit to prevent routing loops.

Answer

15

Answer

255

Answer

16

Question 14

Which loop prevention mechanism is used by default in RIP within a VRF-Lite configuration?

Accepted Answer

Split horizon. RIP uses split horizon as a default loop prevention mechanism, which prevents a route from being advertised out the interface from which it was learned.

Answer

Route poisoning

Answer

Hold-down timer

Answer

TTL expiry

Question 15

Drag and drop the steps to configure inter-VRF route leaking using static routes in VRF-Lite into the correct order, from first to last.

Accepted Answer

Define VRFs and assign route distinguisher. First, define both VRFs and assign an RD. Then configure the import/export RTs to allow route exchange. Next, assign interfaces to the respective VRFs. After that, configure static routes pointing to the next-hop in the other VRF. Finally, verify the leaked routes are present in the VRF routing table.