How many Select Two (Multi-Select) Questions questions are on this page?

This page has 20 Select Two (Multi-Select) Questions scenario questions for the 300-410 exam, each with detailed explanations and wrong-answer analysis.

How should I approach 300-410 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Cisco CCNP ENARSI 300-410 questions

Scenario-based practice

Select Two (Multi-Select) Questions

Practise Cisco CCNP ENARSI 300-410 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

300-410

exam code

Cisco

vendor

Scenario guide

How to approach select two (multi-select) questions

Multi-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination.

Quick answer

Select Two (Multi-Select) Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1hardmulti select

Full question →

An engineer wants to use EEM to automatically back up the running configuration to a TFTP server whenever a 'write memory' command is executed. Which TWO configuration steps are required? (Choose TWO.)

A
Configure 'event cli pattern "write memory" sync no' under the applet.
Correct. This event triggers on the 'write memory' command without synchronizing, allowing the backup to proceed asynchronously.
B
Use 'action cli command "copy running-config tftp://10.1.1.1/backup-config"' to perform the backup.
Correct. This action executes the copy command to send the running config to the TFTP server.
C
Define the applet using the 'event manager policy' command instead of 'event manager applet'.
Why wrong: Incorrect. 'event manager policy' is used for Tcl policies, not CLI applets.
D
Add an 'event syslog pattern "WRITE"' to detect the write memory operation.
Why wrong: Incorrect. The syslog message for 'write memory' does not contain 'WRITE' consistently; using 'event cli' is more reliable.
E
Include an 'action cli command "enable"' before the copy command to ensure privileged access.
Why wrong: Incorrect. The applet inherits the privilege level of the user who triggered it; an explicit 'enable' is not required and may cause issues.

Select Two (Multi-Select) Questions

How to approach select two (multi-select) questions

Quick answer

Related 300-410 topic practice pages

Layer 3 Technologies practice questions

VPN Technologies practice questions

Infrastructure Security practice questions

Infrastructure Services practice questions

300-410 fundamentals practice questions

300-410 scenario practice questions

300-410 troubleshooting practice questions

Practice scenarios

An engineer wants to use EEM to automatically back up the running configuration to a TFTP server whenever a 'write memory' command is executed. Which TWO configuration steps are required? (Choose TWO.)

Which TWO statements about the 'time-range' feature in IPv4 ACLs are correct? (Choose TWO.)

Which TWO statements correctly describe the behavior of the 'default-information originate' command in the context of route redistribution? (Choose TWO.)

Which TWO statements about IPv6 Neighbor Discovery (ND) Inspection are true? (Choose TWO.)

Which THREE statements about NAT and PAT behavior in Cisco IOS are true? (Choose THREE.)

A network engineer is troubleshooting IPv6 traffic filtering on a Cisco router. Which TWO statements about IPv6 ACLs are true? (Choose TWO.)

Which TWO commands would a network engineer use to verify SNMP agent configuration and connectivity on a Cisco IOS router? (Choose TWO.)

Which TWO statements about EEM environment variables and their scoping are true? (Choose TWO.)

Which TWO statements about the 'distance' command in Cisco IOS routing protocols are true? (Choose TWO.)

An engineer must enable BFD for an OSPF single-hop session between two directly connected routers. Which TWO configuration changes are required on each router? (Choose TWO.)

Which THREE statements about IPv6 unicast RPF (uRPF) are true? (Choose THREE.)

Which TWO commands can be used to verify the operational status of a manually configured IPv6 tunnel on a Cisco IOS router? (Choose TWO.)

Which TWO statements about IPsec site-to-site VPN troubleshooting using 'show crypto session' and 'show crypto ipsec sa' are correct? (Choose TWO.)

Which TWO actions will prevent IPv6 traffic with a spoofed source address from being forwarded in a network where BGP is used for routing? (Choose TWO.)

Which TWO statements correctly describe the behavior of Policy-Based Routing (PBR) when using the 'set ip next-hop' and 'set ip default next-hop' commands? (Choose TWO.)

Which TWO statements about IPv6 unicast RPF (uRPF) behavior in Cisco IOS-XE are correct? (Choose TWO.)

Which TWO configuration steps are required to implement static NAT on a Cisco IOS router? (Choose TWO.)

Which TWO statements about the default administrative distances for different route sources are correct? (Choose TWO.)

Which TWO commands would a network engineer use to verify that syslog messages are being sent to a remote syslog server? (Choose TWO.)

Which THREE statements about MPLS label operations (push, swap, pop) are true? (Choose THREE.)