Free 300-410 Questions for Cisco Implementing Cisco Enterprise Advanced Routing and Services 300-410 Exam as PDF & Practice Test Engine

Refer to the exhibit. Which action installs route 192.168.2.2/32 in the routing table?

Which feature is required for IPv6 Source Guard to block traffic arriving on the server interface
from unknown sources?

Which three IP SLA performance metrics can you use to monitor enterprise-class networks?
(Choose three.)

Refer to the exhibits. An engineer filtered messages based on severity to minimize log messages.

After applying the filter, the engineer noticed that it filtered required messages as well. Which
action must the engineer take to resolve the issue?

Refer to the exhibit. An engineer examines the BGP update for the IPv6 prefix 2001:db8::1/128.
which should have been summarized into a /64 prefix. Which sequence of actions achieves the
summarization?

An engineer configured the wrong default gateway for the Cisco DNA center enterprise interface
during the install.
Which command must the engineer run to correct the configuration?

An engineer configured policy-based routing for a destination IP address that does not exist in the
routing table. How is the packet treated through the policy for configuring the set ip default next-
hop command?

Refer to the exhibit. Customer B has decided not to receive any routes from R1 that originated
outside the AS 100. Which AS path access list must the engineer choose to meet this
requirement?

A network administrator is troubleshooting a failed AAA login issue on a Cisco Catalyst c3560
switch. When the network administrator tries to log in with SSH using TACACS+ username and
password credentials, the switch is no longer authenticating and is failing back to the local
account. Which action resolves this issue?

Refer to the exhibit. The administrator configured route advertisement to a remote low resources
rooter to use only the default route to reach any network but failed. Which action resolves this
issue?

Refer to the exhibit. While monitoring VTY access to a router, an engineer notices that the router
does not have any filter and anyone can access the router with username and password even
though an ACL is configured.

Which command resolves this issue?

Refer to the exhibit. Routers R1 and R2 exchange routes to each other's loopback through
OSPF. Telnet traffic must be blocked from R2 Lo0 to R1 Lo2. Which configuration resolves the
issue?

Refer to the exhibit. Not all connected and static routes of router B are received by router A even
though EIGRP neighborship is established between the routers. Which configuration resolves the
issue?

LAB SIMULATION 10
Guidelines
This is a lab item in which tasks will be performed on virtual devices.
- Refer to the Tasks tab to view the tasks for this lab item.
- Refer to the Topology tab to access the device console(s) and perform the tasks.
- Console access is available for all required devices by clicking the device icon or using the
tab(s) above the console window.
- All necessary preconfigurations have been applied.
- Do not change the enable password or hostname for any device.
- Save your configurations to NVRAM before moving to the next item.
- Click Next at the bottom of the screen to submit this lab and move to the next question.
- When Next is clicked, the lab closes and cannot be reopened.
Topology

Tasks
Configure IPSec security policy on tunnel interfaces to ensure data confidentiality and integrity
where mGRE tunnels are up and running between HUB and SPOKE routers.
1. Configure the ISAKMP policy parameters with the following attributes:
- AES256
- SHA256
- Group2
- lifetime 86400
2. Ensure that GRE IP Header should be encrypted inside the IPSec packet. Verify IPSec
security association and ISAKMP encrypted key. Use ISAKMP key "abc123".
3. Configure a flexible ISAKMP Policy on the HUB and SPOKES with a dynamic IP address using
an encrypted key. Use a single command to configure it. Use IPSec phase-2 transform-set name
as 'T-SET' and IPSec Profile name as 'IPSEC-PROFILE'.

An engineer configured a router with this configuration:

The router console starts receiving log message "%SEC-6-IPACCESSLOGP: list DENY_TELNET
denied tcp192.168.1.10(10222) (FastEthernet1/0 D508.89gb.003f) ->192.168.2.20(23), 1 packet".
Which action stops messages on the console while still denying Telnet?