[Jun-2024] Cisco 300-410 Exam Practice Test Questions - ExamDiscuss [Q320-Q344]

[Jun-2024] Cisco 300-410 Exam Practice Test Questions - ExamDiscuss

Updated Certification Exam 300-410 Dumps - Practice Test Questions

Cisco 300-410 exam is a proctored exam that consists of 60-70 multiple-choice questions. Candidates have 90 minutes to complete the exam. 300-410 exam is available in English and Japanese. To pass the exam, candidates must score at least 825 out of 1000. 300-410 exam fee is $400.

Cisco 300-410 exam is designed for network professionals who are responsible for designing, implementing, and troubleshooting complex enterprise network solutions. It requires a deep understanding of advanced routing concepts and protocols, as well as the ability to configure and troubleshoot complex network services. 300-410 exam also tests candidates' knowledge of automation tools and techniques, which are increasingly important in modern network environments. Passing 300-410 exam demonstrates that the candidate has the necessary skills to design and implement advanced routing and services solutions in enterprise networks.

NEW QUESTION # 320
Refer to the exhibit.

After a security audit, the administrator implemented an ACL in the route reflector. The RR became unreachable from any router in the network. Which two actions resolve the issue? (Choose two.)

A. Enable the ND proxy feature on the default gateway.
B. Permit ICMPv6 neighbor discovery traffic in the ACL.
C. Configure a link-local address on the Ethernet0/1 interface.
D. Change the next hop of the default route to the link-local address of the default gateway.
E. Remove the ACL entry 80.

Answer: B,E

NEW QUESTION # 321
Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.

Answer:

Explanation:

Reference:
https://www.rogerperkin.co.uk/featured/route-distinguisher-vs-route-target/

NEW QUESTION # 322
Refer to the exhibit.
R1 is configured with IP SLA to check the availability of the server behind R6 but it kept failing. Which configuration resolves the issue?

A. R6(config)# ip sla responder udp-echo ip address 10.10.10.1 port 5000
B. R6(config)# ip sla responder
C. R6(config)# ip access-list extended DDOS
R6(confg ext-nac)# 5 permit icmp host 10.10.10.1 host 10.66.66.66
D. R6(config)# ip access-list extended DDOS
R6(config ext-nac)# 5 permit icmp host 10.66 66.66 host 10.10.10.1

Answer: C

Explanation:
In this IP SLA tracking, we don't need a IP SLA Responder so the command "ip sla responder" on R6 is not necessary.
We also notice that the ACL is blocking ICMP packets on both interfaces E0/0 & E0/1 of R6 so we need to allow ICMP from source 10.10.10.1 to destination 10.66.66.66.

NEW QUESTION # 323

Refer to the exhibit. An engineer is troubleshooting a prefix advertisement issue from R3, which is not directly connected to R1. Which configuration resolves the issue?

Answer: B

NEW QUESTION # 324
Refer to the exhibit.

An engineer is troubleshooting failed access by contractors to the business application server via Telnet or HTTP during the weekend. Which configuration resolves the issue?

Answer: B

NEW QUESTION # 325

Refer to the exhibit. A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?

A. Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.
B. Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGRP.
C. Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.
D. Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to deny when redistributing OSPF into EIGRP.

Answer: D

Explanation:
When doing mutual redistribution at multiple points (between OSPF and EIGRP on R1 & R2), we may create routing loops so we should use route-map to prevent redistributed routes from redistributing again into the original domain.
In the below example, the route-map "SET-TAG" is used to prevent any routes that have been redistributed into EIGRP from redistributed again into OSPF domain by tagging these routes with tag 1:

NEW QUESTION # 326
Refer to the exhibit.

An administrator noticed that after a change was made on R1, the timestamps on the system logs did not match the clock.
What is the reasons for this error?

A. The NTP server is in an different time zone.
B. An authentication error with the NTP server results in an incorrect timestamp.
C. The keyword localtime is defined on the timestamp service command.
D. The system clock is set incorrectly to summer-time hours

Answer: C

NEW QUESTION # 327
Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.

Answer:

Explanation:

Reference:
https://www.rogerperkin.co.uk/featured/route-distinguisher-vs-route-target/

NEW QUESTION # 328
Refer to the exhibit.

The network administrator configured the network to establish connectivity between all devices and notices that the ASBRs do not have routes for each other. Which set of configurations resolves this issue?

A. Option A
B. Option B
C. Option D
D. Option C

Answer: C

NEW QUESTION # 329
Drag and drop the operations from the left onto the locations where the operations are performed on the right.

Answer:

Explanation:

Explanation
Label Switch Router 1. Reads labels and forwards the packet based on the based on the label.
2. Performs PHP
Label Edge Router: 1 Assigns labels and unlabeled packets.
2. Handles traffic between multiple VPNs

NEW QUESTION # 330
A network is configured with CoPP to protect the CORE router route processor for stability and DDoS protection. As a company policy, a class named class-default is preconfigured and must not be modified or deleted. Troubleshoot CoPP to resolve the issues introduced during the maintenance window to ensure that:

WAN

CORE

MGMT

A. See the solution below in Explanation

Answer: A

Explanation:
CORE
policy-mao CoPP
class CoPP-CRITICAL
police 1000000 50000 50000 conform-action transmit exceed-action transmit

CORE# Copy run start
TESTING: -
CORE

MGMT

NEW QUESTION # 331
Refer to the exhibit.

Refer to the exhibit. An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R1 as the primary default gateway When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192.168.20.0/24. Which set of configurations resolves the issue?

A. HQ_R3(config)# ip sla responder
HQ_R3(config)# ip sla responder icmp-echo 172.16.35.1
B. BRANCH(config)# Ip sla 1
BRANCH(config-ip-sta)# Icmp-echo 192.168.100.1
C. HQ R3(config)# Ip sla responder
HQ R3(config)# Ip sla responder Icmp-echo 172.16.35.5
D. BRANCH(config)# ip sla 1
BRANCH(config-ip-sla)# icmp-echo 192.168.100.2

Answer: B

NEW QUESTION # 332
Refer to Exhibit:

AS 111 wanted to use AS 200 as the preferred path for 172.20.5.0/24 and AS 100 as the backup. After the configuration, AS 100 is not used for any other routes. Which configuration resolves the issue?

A. route-mmap SETLP permit 10
match ip address prefix-list PLIST1
set local-preference 99
route-map SETLP permit 20
B. router bgp 111
no neighbor 192.168.10.1 route-map SETLP in
neighbor 192.168.10.1 route-map SETLP out
C. router bap 111
no neighbor 192.168.10.1 route-map SETLP in
neighbor 192.168.20.2 route-map SE TLP in
D. route-map SETLP permit 10
match ip address prefix-list PLIST1
set local-preference 110
route-map SETLP permit 20

Answer: A

Explanation:
Explanation
There is an implicit deny all at the end of any route-map so all other traffic that does not match 172.20.5.0/24 would be dropped. Therefore we have to add a permitsequence at the end of the route-map to allow other traffic.
The default value of Local Preference is 100 and higher value is preferred so we have to set the local preference of AS100 lower than that of AS200.

NEW QUESTION # 333
Refer to the exhibit.

A company is evaluating multiple network management system tools. Trending graphs generated by SNMP data are returned by the NMS and appear to have multiple gaps. While troubleshooting the issue, an engineer noticed the relevant output. What solves the gaps in the graphs?

A. Remove the class map NMS from being part of control plane policing.
B. Remove the exceed-rate command in the class map.
C. Configure the CIR rate to a lower value that accommodates all the NMS tools
D. Separate the NMS class map in multiple class maps based on the specific protocols with appropriate CoPP actions

Answer: D

NEW QUESTION # 334

Refer to the exhibit. Why is the remote NetFlow server failing to receive the NetFlow data?

A. The destination of the flow exporter is not reachable.
B. The flow monitor is applied to the wrong interface.
C. The flow monitor is applied in the wrong direction.
D. The flow exporter is configured but is not used.

Answer: A

Explanation:
Section: Infrastructure Services

NEW QUESTION # 335
Which statement about IPv6 RA Guard is true?

A. Packets that are dropped by IPv6 RA Guard cannot be spanned.
B. It cannot be configured on a switch port interface in the ingress direction.
C. It is not supported in hardware when TCAM is programmed.
D. It does not offer protection in environments where IPv6 traffic is tunneled.

Answer: D

Explanation:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-3s/ip6f-xe-3s-book/ip6-ra-guard.html#GUID-589AF00C-7499-439F-AD23-51005D61CAB7 The IPv6 RA Guard feature does not offer protection in environments where IPv6 traffic is tunneled.

NEW QUESTION # 336
Clients on ALS2 receive IPv4 and IPv6 addresses but clients on ALS1 receive only IPv4 addresses and not IPv6 addresses. Which action on DSW1 allows clients on ALS1 to receive IPv6 addresses?

A. Option A
B. Configure DSW1(config-if)#ipv6 dhcp relay destination 2002:404:404::404:404 GigabitEthernet1/2
C. Configure DSW1(config-if)#ipv6 helper address 2002:404:404::404:404
D. Option B
E. Option B
F. Configure DSW1(config)#ipv6 route 2002:404:404:404:404/128 FastEthernet1/0
G. Option C
H. Configure DSW1(dhcp-config)#default-router 2002:A04:A01::A04:A01

Answer: H

Explanation:
https://community.cisco.com/t5/networking-documents/stateful-dhcpv6-relay-configuration-example/ta-p/31493

NEW QUESTION # 337
What is the purpose of the DHCPv6 Guard?

A. It block DHCPv6 messages from relay agents to a DHCPv6 server.
B. It shows that clients of a DHCPv5 server are affected.
C. It messages between a DHCPv6 server and a DHCPv6 client ( or relay agent).
D. It allows DHCPv6 replay and advertisements from (rouge) DHCPv6 servers.

Answer: C

Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16/ip6fxe-
16-book/ip6-dhcpv6-guard.html

NEW QUESTION # 338
What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)

A. MP-BGP is used to allow overlapping IPv4 addresses between customers to advertise through the network.
B. The IPv4 address is needed to tag the MPLS label.
C. RD is prepended to the IPv4 route to make it unique.
D. The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4 prefix.
E. The VPNv4 address is used to advertise the MPLS VPN label.

Answer: C,D

Explanation:
VPNv4 address consists of 64-bit Route Distinguisher (RD) prepended to IPv4 prefix. This is to make routes unique that are in different VRFs.

NEW QUESTION # 339
An engineer is troubleshooting on the console session of a router and turns on multiple debug commands. The console screen is filled with scrolling debug messages that none of the commands can be verified if entered correctly or display any output. Which action allows the engineer to see entered console commands while still continuing the analysis of the debug messages?

A. Configure the logging synchronous command
B. Configure the no logging console debugging command globally
C. Configure the term no mon command globally
D. Configure the logging synchronous level all command

Answer: A

Explanation:
Explanation
Let's see how the "logging synchronous" command affect the typing command:
Without this command, a message may pop up and you may not know what you typed if that message is too long. When trying to erase (backspace) your command, you realize you are erasing the message instead.

With this command enabled, when a message pops up you will be put to a new line with your typing command which is very

NEW QUESTION # 340
Refer to Exhibit.

A network administrator enables DHCP snooping on the Cisco Catalyst 3750-X switch and configures the uplink port (Port-channel2) as a trusted port. Clients are not receiving an IP address, but when DHCP snooping is disabled, clients start receiving IP addresses. Which global command resolves the issue?

A. ip dhcp relay information trust portchannel2
B. No ip dhcp snooping information option
C. ip dhcp snooping
D. ip dhcp snooping trust

Answer: B

NEW QUESTION # 341
When provisioning a device in Cisco DNA Center, the engineer sees the error message "Cannot select the device. Not compatible with template".
What is the reason for the error?

A. The tag that was used to filter the templates does not match the device tag.
B. The template has an incorrect configuration.
C. The software version of the template is different from the software version of the device.
D. The changes to the template were not committed.

Answer: A

Explanation:
Explanation
If you use tags to filter the templates, you must apply the same tags to the device to which you want to apply the templates. Otherwise, you get the following error during provisioning: Cannot select the device. Not compatible with template.
Reference:
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-c

NEW QUESTION # 342
What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)

A. The IPv4 address is needed to tag the MPLS label.
B. RD is prepended to the IPv4 route to make it unique.
C. The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4 prefix.
D. MP-BGP is used to allow overlapping IPv4 addresses between customers to advertise through the network.
E. The VPNv4 address is used to advertise the MPLS VPN label.

Answer: B,D

NEW QUESTION # 343
Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPV3 categories on the right.