首页 > 题库 > 300-410

2026思科CCNP 300-410考试试题与答案解析合集｜最新题库PDF+高频考点汇总

问题 #1

Which list defines the contents of an MPLS label?

A. 20-bit label; 3-bit flow label; 1-bit bottom stack, 8-bit hop limit

B. 20-bit label; 3-bit traffic class; 1-bit bottom stack, 8-bit TTL

C. 32-bit label; 3-bit traffic class; 1-bit bottom stack, 8-bit TTL

D. 32-bit label; 3-bit flow label; 1-bit bottom stack, 8-bit hop limit

正确答案：B

问题 #2

What are two functions of MPLS Layer 3 VPNs? (Choose two.)

A. A packet with node segment ID is forwarded along with shortest path to destination.

B. It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.

C. Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.

D. BGP is used for signaling customer VPNv4 routes between PE nodes.

E. LDP and BGP can be used for Pseudowire signaling.

正确答案：CD

问题 #3

Which MPLS value is combined with the IP prefix to convert to a VPNv4 prefix?

A. 8-byte Route Distinguisher

B. 8-byte Route Target

C. 16-byte Route Target

D. 16-byte Route Distinguisher

正确答案：A

问题 #4

An engineer failed to run diagnostic commands on devices using Cisco DNA Center. Which action in Cisco DNA Center resolves the issue?

A. Enable Command Runner.

B. Enable CDP.

C. Enable APIs.

D. Enable Secure Shell.

正确答案：A

问题 #5

How do devices operate in MPLS L3VPN topology?

A. P routers support PE to PE VPN tunnel without LSP functionality.

B. P and associated PE routers with IGP populate the VRF table in different VPNs.

C. P routers provide connectivity between PE devices with MPLS switching.

D. CE routers connect to the provider network and perform LSP functionality.

正确答案：C

问题 #6

A customer reports that traffic is not passing on an EIGRP enabled multipoint interface on a router configured as below: interface Serial0/0/0 no ip address interface Serial0/0/0.9 multipoint ip address 10.1.1.1 255.255.255.248 ip split-horizon eigrp 1 Wh

A. Disable split horizon.

B. Enable split horizon.

C. Disable poison reverse.

D. Enable poison reverse.

正确答案：A

问题 #7

While working with software images, an engineer observes that Cisco DNA Center cannot upload its software image directly from the device. Why is the image not uploading?

A. The device has lost connectivity to Cisco DNA Center.

B. The software image for the device is in install mode.

C. The software image for the device is in bundle mode.

D. The device must be resynced to Cisco DNA Center.

正确答案：B

问题 #8

Which two technologies optimize MPLS infrastructure using bandwidth protection services when experiencing slow response? (Choose two.)

A. Fast-Reroute

B. MPLS OAM

C. SD-MPLS

D. IP LFA

E. VPLS

正确答案：AD

问题 #9

When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device. Which action in the Control Plane Policy prevents this problem in a product

A. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction.

B. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction.

C. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction.

D. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction.

正确答案：B

问题 #10

An engineer creates a Cisco DNA Center cluster with three nodes, but all the services are running on one host node. Which action resolves this issue?

A. Enable service distribution from the Systems 360 page.

B. Restore the link on the switch interface that is connected to a cluster link on the Cisco DNA Center.

C. Click the master host node with all the services and select services to be moved to other hosts.

D. Click system updates, and upgrade to the latest version of Cisco DNA Center.

正确答案：A

问题 #11

Which protocol must be secured with MD5 authentication across the MPLS cloud to prevent hackers from introducing bogus routers?

A. MP-BGP

B. LDP

C. LSP

D. RSVP

正确答案：B

问题 #12

What are the two goals of micro BFD sessions? (Choose two.)

A. The high bandwidth member link of a link aggregation group must run BFD.

B. Each member link of a link aggregation group must run BFD.

C. Run the BFD session with 3x3 ms hello timer.

D. Continuity for each member link of a link aggregation group must be verified.

E. Any member link on a link aggregation group must run BFD.

正确答案：BD

问题 #13

What is LDP used for in an LSR?

A. to create a database of label bindings that allow for hop-by-hop forwarding

B. to allow for a system-wide exchange of labels across MPLS network

C. to create a label across the PE routers for end-to-end path assignment

D. to communicate the routes known for a specific interface

正确答案：A

问题 #14

Which technique removes the outermost label of an MPLS-tagged packet before the packet is forwarded to an adjacent LER?

A. PHP

B. label imposition

C. explicit-null

D. label swap

正确答案：A

问题 #15

Network operations report issues with receiving too many external routes, which caused CPU spike on routers with smaller memories. Which action resolves the issue?

A. Configure the summary-address command when redistributing on ASBR.

B. Configure the summary-address command when redistributing on ABR.

C. Configure the area range command when redistributing on ABR.

D. Configure the area range command when redistributing on ASBR.

正确答案：A

问题 #16

What are the two benefits of using BFD? (Choose two.)

A. forwarding path failure detection

B. supports all routing protocols

C. subsecond failure detection

D. synchronous path determination

E. supports UDLD failure

正确答案：AC

问题 #17

What does the PE router convert the IPv4 prefix to within an MPLS VPN?

A. 48-bit route combining the IP and PE router-id

B. eBGP path association between the PE and CE sessions

C. VPN-IPv4 prefix combined with the 64-bit route distinguisher

D. prefix that combines the ASN, PE router-id, and IP prefix

正确答案：C

问题 #18

The network administrator configured R1 to authenticate Telnet connections based on Cisco ISE using TACACS+. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1 (192.168.1.1) with a shared secret password

A. aaa authentication login RAD-LOCAL group RAD-SERV local

B. aaa authentication login RAD-SERV group RAD-LOCAL local

C. line vty 0 4 login authentication default

D. line vty 0 4 login authentication RAD-SERV

E. line vty 0 4 login authentication RAD-LOCAL

正确答案：AE

问题 #19

Which Layer 3 VPN attribute installs customer routes in the VRF?

A. RT

B. MPLS label

C. RD

D. extended-community

正确答案：A

问题 #20

Which characteristic is representative of a hub-and-spoke topology between PE routers in a Layer 3 MPLS VPN network?

A. Each PE router uses a different RD to identify all branches.

B. The PE routers use different RDs for each VRF to import and export MP-BGP prefixes.

C. The PE routers use different RTs to import and export MP-BGP prefixes.

D. The PE routers are configured with multiple VRFs for all branches.

正确答案：C

问题 #21

Which IP precedence value does BFD use to prioritize traffic within an infrastructure device?

A. 4

B. 5

C. 6

D. 7

正确答案：C

问题 #22

How does LDP operate in an MPLS network?

A. When topology changes occur such as a router failure, LDP generates peer discovery messages that terminate the LDP session to propagate an LSP change.

B. Peer routers establish the LDP session, and the LDP neighbors maintain and terminate the session by exchanging messages.

C. When an adjacent LSR receives LDP discovery messages, TCP two-way handshake ensures that the LDP session has unidirectional connectivity.

D. LDP notification messages allow LERs to exchange label information to determine the next hops within a particular LSP.

正确答案：B

问题 #23

Which protocol does MPLS use to support traffic engineering?

A. LDP

B. BGP

C. TDP

D. RSVP

正确答案：D

问题 #24

An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network. Which BGP attribute must the engineer configure to avoid us

A. WEIGHT

B. MED

C. AS-PATH

D. LOCAL_PREF

正确答案：D

问题 #25

An engineer is creating a policy that overrides normal routing behavior. If the route to a destination of 10.100.100.0/24 is withdrawn from the routing table, the policy must direct traffic to a next-hop of 10.1.1.1. If the route is present in the routing

A. access-list 100 permit ip any 10.100.100.0 0.0.0.255 route-map POLICY permit 10 match ip address 100 set ip default next-hop 10.1.1.1

B. access-list 100 permit ip any any route-map POLICY permit 10 match ip address 100 set ip next-hop recursive 10.1.1.1

C. access-list 100 permit ip any 10.100.100.0 0.0.0.255 route-map POLICY permit 10 match ip address 100 set ip next-hop 10.1.1.1 route-map POLICY permit 20

D. access-list 100 permit ip any 10.100.100.0 0.0.0.255 route-map POLICY permit 10 match ip address 100 set ip next-hop recursive 10.1.1.1 route-map POLICY permit 20

正确答案：A

问题 #26

An engineer needs dynamic routing between two routers and is unable to establish OSPF adjacency. The output of the show ip ospf neighbor command shows that the neighbor state is EXSTART/EXCHANGE. Which action should be taken to resolve this issue?

A. match the passwords

B. match the hello timers

C. match the MTUs

D. match the network types

正确答案：C

问题 #27

Which method provides failure detection in BFD?

A. long duration, high overhead

B. short duration, low overhead

C. long duration, low overhead

D. short duration, high overhead

正确答案：B

问题 #28

An engineer must confirm whether a router configured as a DHCP server is receiving DHCP requests. Which debug output confirms that the router received DHCP requests?

A. 00:18:48: UDP: sent src=0.0.0.0(68), dst=255.255.255.255(67), length=333

B. 00:18:49: IP: s=0.0.0.0 (Ethernet2/0), d=255.255.255.255, len 604, rcvd 2

C. 00:18:49: UDP src=68, dst=67 00:18:49: IP: s=0.0.0.0 (Ethernet2/0), d=255.255.255.255, len 604, rcvd 2

D. 00:18:49: UDP src=67, dst=68 00:18:49: UDP: sent src=0.0.0.0(67), dst=255.255.255.255(68), length=333

正确答案：C

问题 #29

An engineer is troubleshooting on the console session of a router and turns on multiple debug commands. The console screen is filled with scrolling debug messages that none of the commands can be verified if entered correctly or display any output. Which

A. Configure the term no mon command globally.

B. Configure the logging synchronous level all command.

C. Configure the no logging console debugging command globally.

D. Configure the logging synchronous command.

正确答案：D

问题 #30

R1 and R2 are configured as eBGP neighbors. R1 is in AS100 and R2 is in AS200. R2 is advertising these networks to R1: 172.16.16.0/20, 172.16.3.0/24, 172.16.4.0/24, 192.168.1.0/24, 192.168.2.0/24, 172.16.0.0/16. The network administrator on R1 must improv

A. access-list 1 deny 172.16.0.0 0.0.254.255 access-list 1 permit any ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 distribute-list 1 in

B. ip prefix-list PL-1 deny 172.16.0.0/16 ip prefix-list PL-1 permit 0.0.0.0/0 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in

C. ip prefix-list PL-1 deny 172.16.0.0/16 le 23 ip prefix-list PL-1 permit 0.0.0.0/0 le 32 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in

D. ip prefix-list PL-1 deny 172.16.0.0/16 ge 23 ip prefix-list PL-1 permit 0.0.0.0/0 le 32 ! router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in

正确答案：C

问题 #31

What is the role of MPBGP in Layer 3 VPN?

A. It propagates VRF reachability information to all members of a VPN community.

B. It provides a list of all Layer 3 VPN members.

C. It transports all traffic between all VPN community members.

D. It keeps a list of available links for Layer 2 forwarding.

正确答案：A

问题 #32

A newly installed router starts establishing an LDP session from another MPLS router to which it is not directly connected. Which LDP message type responds by target router to the initiating router using UDP protocol?

A. extended discovery message

B. advertisement message

C. notification message

D. session message

正确答案：A

问题 #33

How does an MPLS Layer 3 VPN differentiate the IP address space used between each VPN?

A. by MP-BGP

B. by address family

C. by RT

D. by RD

正确答案：D

问题 #34

What is a role of route distinguishers in an MPLS network?

A. Route distinguishers make a unique VPNv4 address across the MPLS network.

B. Route distinguishers are used for label bindings.

C. Route distinguishers define which prefixes are imported and exported on the edge router.

D. Route distinguishers allow multiple instances of a routing table to coexist within the edge router.

正确答案：A

问题 #35

Which router translates the customer routing information into VPNv4 routes to exchange VPNv4 routes with other devices through MP-BGP?

A. P

B. CE

C. VPNV4 RR

D. PE

正确答案：D

问题 #36

Which role does the LDP play in establishing label-switched paths in an MPLS network?

A. LDP uses hop-by-hop labels for end-to-end MPLS VPN communication.

B. LDP negotiates QoS experimental bits for packet forwarding.

C. LDP is responsible for determining the shortest path between routers.

D. LDP exchanges label mappings to bind labels to forwarding equivalence classes.

正确答案：D

问题 #37

What is the failure detection time with BFD?

A. 3 seconds

B. 1 second

C. 2 seconds

D. less than a second

正确答案：D

问题 #38

An engineer configured a router with this configuration: ip access-list DENY_TELNET 10 deny tcp any any eq 23 log-input The router console starts receiving log message %SEC-6-IPACCESSLOGP: list DENY_TELNET denied tcp 192.168.1.10(1022) (FastEthernet1/0) -

A. Configure a 20 permit ip any any command.

B. Configure a 20 permit ip any any log-input command.

C. Remove log-input keyword from the access list.

D. Replace log-input keyword with the log keyword in the access list.

正确答案：C

查看更多题库 »