300-410 Exam Dumps - Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI)

Go to page:

<< First
Prev
2
3
4
5
6
7
8
9
10
11
Next
Last >>

Question # 49

Drag and drop the MPLS VPN device types from the left onto the definitions on the right.

Full Access

Question # 50

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

Packets are not forwarded to the specific next hop.

Packets are forwarded based on the routing table.

Packets are forwarded based on a static route.

Packets are forwarded to the specific next hop.

Full Access

Question # 51

Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).

router bgp 64511

network 172.16.20.0 mask 255.255.255.0

network 172.16.21.0 mask 255.255.255.0

network 172.16.22.0 mask 255.255.255.0

network 172.16.23.0 mask 255.255.255.0

aggregate-address 172.16.20.0 255.255.252.0

After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?

router bgp 64511aggregate-address 172.16.20.0 255.255.252.0 summary-only

router bgp 64511neighbor 192.168.100.1 summary-onlyneighbor 192.168.200.2 summary-only

interface E 0/0ip bgp suppress-map BLOCK_SPECIFIC!interface E 0/1ip bgp suppress-map BLOCK_SPECIFIC!ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC

ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22!route-map BLOCK_SPECIFIC permit 10match ip address prefix-list PL_BLOCK_SPECIFIC!router bgp 64511aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC

Full Access

Question # 52

Refer to the exhibit.

Troubleshoot and ensure that branch B only ever uses the MPLS B network to reach HQ. Which action achieves this requirement?

Introduce an AS path filter on branch A routers so that only local prefixes are advertised into BGP

increase the local preference for all HQ prefixes received at branch B from the MPLS B network to be higher than the local preferences used on the MPLS A network

Introduce AS path prepending on the branch A MPLS B network connection so that any HQ advertisements from branch A toward the MPLS B network are prepended three times

Modify the weight of all HQ prefixes received at branch B from the MPLS B network to be higher than the weights used on the MPLS A network

Full Access

Question # 53

Refer to the exhibit.

The network administrator can see the DHCP discovery packet in R1. but R2 is not replying to the DHCP request. The R1 related interface is configured with the DHCP helper address. If the PC is directly connected to the FaO/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to the PC. Which two commands resolve this issue? (Choose two.)

service dhcp-relay command on R1

ip dhcp option 82 command on R2

service dhcp command on R1

ip dhcp relay information enable command on R1

ip dhcp relay information trust-all command on R2

Full Access

Answer:

Explanation:

1. R1 received DHCP packet and its interface was configured with the DHCP helper address. But we are not sure if R1 forward DHCP packet to R2 or not. 2. If we connect PC directly to R2 then this problem will not appear -> DHCP Server function was configured on R2.

From these facts, the most likely problem is related to Option 82. Maybe R2 ignored DHCP request packets because it was receiving these packets with the giant field set to 0.0.0.0.

By default Cisco IOS devices reject packets with zero â€œgiaddrâ€ and by default Cisco Catalyst switches use â€œgiaddrâ€ of zero when configured for DHCP snooping! Reference: https://blog.ine.com/2009/07/22/understanding-dhcp-option-82

If we can run the â€œdebug ip dhcp server packetâ€ on R2, we may see these messages:

*Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, input feature, MCI Check(64), rtype 0, forus FALSE, sendself FALSE, mtu 0, fw dchk FALSE *Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, rcvd 2 *Feb 22 23:54:57.759: IP: s=0.0.0.0 (FastEthernet0/1), d=255.255.255.255, len 34 4, stop process pak for forus packet

*Feb 22 23:54:57.759: DHCPD: inconsistent relay information. *Feb 22 23:54:57.759: DHCPD: relay information option exists, but giaddr is zero

We are receiving the DHCP packet from R1, source 0.0.0.0, and destination 255.255.255.255 broadcast, but if you notice from the debug output, R2, our DHCP Server, is complaining that the relay information is inconsistent. Option 82, Information Option, is contained in the packet but the GIADDR is zero. The GIADDR stands for Gateway IP Address, which is the IP Address of the relaying agent. The Option 82, Information Option, would then contain the receiving port and hostname of the Relaying Agent by default.

R2 sees the Option 82 information, signalling that the DHCP packet might have been relayed, BUT there is no relaying IP Address. This is the behavior of DHCP Snooping when enabling it on a switch, and since the switchport does not contain an IP Address, since itâ€™s Layer 2, no GIADDR will be added.

Instead, just the Option 82 Information is added and this is the problem we have, but there are options:

1. You could trust all on R2 the DHCP Server, which will cause the server to not be so suspicious: â€“ ip dhcp relay information trust-all â€“ ip dhcp relay information trusted 2. Disable theaddition of Option 82 information on SW: â€“ no ip dhcp snooping information option 3. Trust the port that is receiving the DHCP Discover: â€“ ip dhcp snooping trust

Any of these options will fix our predicament.

[Reference: https://evilttl.com/wiki/DHCP-Snooping, But in the answer choices, we only have 1 correct answer which is the command â€œip dhcp relay information trust-allâ€. We checked if we need any â€œservice dhcpâ€¦â€ command on both IOS version 12.4 and 15.1:, , , , Therefore we only have the â€œservice dhcpâ€ command, we donâ€™t have any â€œservice dhcp-relayâ€ command available. But the description of the â€œservice dhcpâ€ command says that it enables both DHCP server and relay agent so this is the best answer left., , , , , ]

Question # 54

Exhibit:

Which action resolves the authentication problem?

Configure the user name on the TACACS+ server

Configure the UDP port 1812 to be allowed on the TACACS+ server

Configure the TCP port 49 to be reachable by the router

Configure the same password between the TACACS+ server and router.

Full Access

Question # 55

An engineer configured access list NON-CISCO in a policy to influence routes

What are the two effects of this route map configuration? (Choose two.)

Packets are not evaluated by sequence 10.

Packets are evaluated by sequence 10.

Packets are forwarded to the default gateway.

Packets are forwarded using normal route lookup.

Packets are dropped by the access list.

Full Access

Question # 56

Refer to the exhibit.

The administrator noticed that the connection was flapping between the two ISPs instead of switching to ISP2 when the ISP1 failed. Which action resolves the issue?

Include a valid source-interface keyword in the icmp-echo statement.

Reference the track object 1 on the default route through ISP2 instead of ISP1.

Modify the static routes to refer both to the next hop and the outgoing intertace.

Modify the threshold to match the administrative distance of the ISP2 route.

Full Access