首页 > 题库 > 300-410
« 返回题库列表

2026 CCNP 300-410题库免费下载|考试试题与答案解析完整版

问题 #1
Refer to the exhibit. Users in the branch network of 2001:db8:0:4::/64 report that they cannot access the Internet. Which command is issued in IPv6 router EIGRP 100 configuration mode to solve this issue?
A. Issue the eigrp stub command on R1.
B. Issue the no eigrp stub command on R1.
C. Issue the eigrp stub command on R2.
D. Issue the no eigrp stub command on R2.
正确答案:B
问题 #2
R2 has a locally originated prefix 192.168.130.0/24 and has these configurations: What is the result when the route-map OUT command is applied toward an eBGP neighbor R1 (1.1.1.1) by using the neighbor 1.1.1.1 route-map OUT out command?
A. R1 sees 192.168.130.0/24 as two AS hops away instead of one AS hop away.
B. R1 does not accept any routes other than 192.168.130.0/24
C. R1 does not forward traffic that is destined for 192.168.30.0/24
D. Network 192.168.130.0/24 is not allowed in the R1 table
正确答案:A
问题 #3
Which method changes the forwarding decision that a router makes without first changing the routing table or influencing the IP data plane?
A. nonbroadcast multiaccess
B. packet switching
C. policy-based routing
D. forwarding information base
正确答案:C
问题 #4
Refer to the exhibit. An engineer configures a static route on a router, but when the engineer checks the route to the destination, a different next hop is chosen. What is the reason for this?
A. Dynamic routing protocols always have priority over static routes.
B. The metric of the OSPF route is lower than the metric of the static route.
C. The configured AD for the static route is higher than the AD of OSPF.
D. The syntax of the static route is not valid, so the route is not considered.
正确答案:C
问题 #5
Refer to the exhibit. An engineer is trying to generate a summary route in OSPF for network 10.0.0.0/8, but the summary route does not show up in the routing table. Why is the summary route missing?
A. The summary-address command is used only for summarizing prefixes between areas.
B. The summary route is visible only in the OSPF database, not in the routing table.
C. There is no route for a subnet inside 10.0.0.0/8, so the summary route is not generated.
D. The summary route is not visible on this router, but it is visible on other OSPF routers in the same are
A.
正确答案:C
问题 #6
Refer to the exhibit. An engineer is trying to block the route to 192.168.2.2 from the routing table by using the configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?
A. Use an extended access list instead of a standard access list.
B. Change sequence 10 in the route-map command from permit to deny.
C. Use a prefix list instead of an access list in the route map.
D. Add this statement to the route map: route-map RM-OSPF-DL deny 20.
正确答案:B
问题 #7
What is a prerequisite for configuring BFD?
A. Jumbo frame support must be configured on the router that is using BFD.
B. All routers in the path between two BFD endpoints must have BFD enabled.
C. Cisco Express Forwarding must be enabled on all participating BFD endpoints.
D. To use BFD with BGP, the timers 3 9 command must first be configured in the BGP routing process.
正确答案:C
问题 #8
Refer to the exhibit. R2 is a route reflector, and R1 and R3 are route reflector clients. The route reflector learns the route to 172.16.25.0/24 from R1, but it does not advertise to R3. What is the reason the route is not advertised?
A. R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.
B. Route reflector setup requires full IBGP mesh between the routers.
C. In route reflector setup, only classful prefixes are advertised to other clients.
D. In route reflector setups, prefixes are not advertised from one client to another.
正确答案:A
问题 #9
Refer to the exhibit. An engineer is trying to redistribute OSPF to BGP, but not all of the routes are redistributed. What is the reason for this issue?
A. By default, only internal routes and external type 1 routes are redistributed into BGP
B. Only classful networks are redistributed from OSPF to BGP
C. BGP convergence is slow, so the route will eventually be present in the BGP table
D. By default, only internal OSPF routes are redistributed into BGP
正确答案:D
问题 #10
Refer to the exhibit. In which circumstance does the BGP neighbor remain in the idle condition?
A. if prefixes are not received from the BGP peer
B. if prefixes reach the maximum limit
C. if a prefix list is applied on the inbound direction
D. if prefixes exceed the maximum limit
正确答案:D
问题 #11
Which attribute eliminates LFAs that belong to protected paths in situations where links in a network are connected through a common fiber?
A. shared risk link group-disjoint
B. linecard-disjoint
C. lowest-repair-path-metric
D. interface-disjoint
正确答案:A
问题 #12
Refer to the exhibit. An engineer is troubleshooting BGP on a device but discovers that the clock on the device does not correspond to the time stamp of the log entries. Which action ensures consistency between the two times?
A. Configure the service timestamps log uptime command in global configuration mode.
B. Configure the logging clock synchronize command in global configuration mode.
C. Configure the service timestamps log datetime localtime command in global configuration mode.
D. Make sure that the clock on the device is synchronized with an NTP server.
正确答案:C
问题 #13
Refer to the exhibit. What is the result of applying this configuration?
A. The router can form BGP neighborships with any other device.
B. The router cannot form BGP neighborships with any other device.
C. The router cannot form BGP neighborships with any device that is matched by the access list named "BGP".
D. The router can form BGP neighborships with any device that is matched by the access list named "BGP".
正确答案:C
问题 #14
Which command displays the IP routing table information that is associated with VRF-Lite?
A. show ip vrf
B. show ip route vrf
C. show run vrf
D. show ip protocols vrf
正确答案:B
问题 #15
Refer to the exhibit. Which subnet is redistributed from EIGRP to OSPF routing protocols?
A. 10.2.2.0/24
B. 10.1.4.0/26
C. 10.1.2.0/24
D. 10.2.3.0/26
正确答案:A
问题 #16
Which configuration adds an IPv4 interface to an OSPFv3 process in OSPFv3 address family configuration?
A. router ospfv3 1 address-family ipv4
B. Router(config-router)#ospfv3 1 ipv4 area 0
C. Router(config-if)#ospfv3 1 ipv4 area 0
D. router ospfv3 1 address-family ipv4 unicast
正确答案:C
问题 #17
Refer to the exhibit. Which statement about R1 is true?
A. OSPF redistributes RIP routes only if they have a tag of one.
B. RIP learned routes are distributed to OSPF with a tag value of one.
C. R1 adds one to the metric for RIP learned routes before redistributing to OSPF.
D. RIP routes are redistributed to OSPF without any changes.
正确答案:B
问题 #18
Refer to the exhibit. An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 loses reachability with the router R3 Fa0/0 interface. The route has changed to flow through router R2. Which debug command is
A. debug ip flow
B. debug ip sla error
C. debug ip routing
D. debug ip packet
正确答案:C
问题 #19
Which configuration enabled the VRF that is labeled "Inet" on FastEthernet0/0?
A. R1(config)# ip vrf Inet
B. R1(config)#ip vrf Inet FastEthernet0/0
C. R1(config)# ip vrf Inet
D. R1(config)#router ospf 1 vrf Inet
正确答案:C
问题 #20
Refer to the exhibit. After redistribution is enabled between the routing protocols; PC2, PC3, and PC4 cannot reach PC1. Which action can the engineer take to solve the issue so that all the PCs are reachable?
A. Set the administrative distance 100 under the RIP process on R2.
B. Filter the prefix 10.1.1.0/24 when redistributed from OSPF to EIGRP.
C. Filter the prefix 10.1.1.0/24 when redistributed from RIP to EIGRP.
D. Redistribute the directly connected interfaces on R2.
正确答案:B
问题 #21
Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?
A. multi-paths eibgp 2
B. maximum-paths 2
C. maximum-paths ibgp 2
D. multi-paths 2
正确答案:C
问题 #22
Refer to the exhibit. After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and hub were not establishing. Which two actions resolve the issue? (Choose two.)
A. Change the mode from mode tunnel to mode transport on R3.
B. Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3.
C. Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3.
D. Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.
E. Change the mode from mode transport to mode tunnel on R2.
正确答案:BD
问题 #23
Which statement about route distinguishers in an MPLS network is true?
A. Route distinguishers allow multiple instances of a routing table to coexist within the edge router.
B. Route distinguishers are used for label bindings.
C. Route distinguishers make a unique VPNv4 address across the MPLS network.
D. Route distinguishers define which prefixes are imported and exported on the edge router.
正确答案:C
问题 #24
Which statement about MPLS LDP router ID is true?
A. If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.
B. The loopback with the highest IP address is selected as the router ID.
C. The MPLS LDP router ID must match the IGP router ID.
D. The force keyword changes the router ID to the specified address without causing any impact.
正确答案:B
问题 #25
Which list defines the contents of an MPLS label?
A. 20-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL
B. 32-bit label; 3-bit traffic class; 1-bit bottom stack; 8-bit TTL
C. 20-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit
D. 32-bit label; 3-bit flow label; 1-bit bottom stack; 8-bit hop limit
正确答案:A
问题 #26
Refer to the exhibit. What does the imp-null tag represent in the MPLS VPN cloud?
A. Pop the label
B. Impose the label
C. Include the EXP bit
D. Exclude the EXP bit
正确答案:A
问题 #27
Which transport layer protocol is used to form LDP sessions?
A. UDP
B. SCTP
C. TCP
D. RDP
正确答案:C
问题 #28
Refer to the exhibits. Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two commands are missing? (Choose two.)
A. The ip nhrp redirect command is missing on the spoke routers.
B. The ip nhrp shortcut command is missing on the spoke routers.
C. The ip nhrp redirect command is missing on the hub router.
D. The ip nhrp shortcut command is missing on the hub router.
E. The ip nhrp map command is missing on the hub router.
正确答案:BC
问题 #29
Which protocol is used to determine the NBMA address on the other end of a tunnel when mGRE is used?
A. NHRP
B. IPsec
C. MP-BGP
D. OSPF
正确答案:A
问题 #30
Refer to the exhibit. During troubleshooting it was discovered that the device is not reachable using a secure web browser. What is needed to fix the problem?
A. permit tcp port 443
B. permit udp port 465
C. permit tcp port 465
D. permit tcp port 22
正确答案:A
问题 #31
Refer to the exhibit. An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+. Which action produces the desired configuration?
A. Add the aaa authentication login default none command to the global configuration.
B. Replace the capital "C" with a lowercase "c" in the aaa authentication login Console local command.
C. Add the aaa authentication login default group tacacs+ local-case command to the global configuration.
D. Add the login authentication Console command to the line configuration
正确答案:D
问题 #32
Refer to the exhibit. An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH
A. no ip ssh disable
B. ip ssh enable
C. ip ssh version 2
D. crypto key generate rsa
正确答案:D
问题 #33
Which statement about IPv6 ND inspection is true?
A. It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.
B. It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.
C. It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.
D. It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.
正确答案:B
问题 #34
While troubleshooting connectivity issues to a router, these details are noticed: -Standard pings to all router interfaces, including loopbacks, are successful. - Data traffic is unaffected. - SNMP connectivity is intermittent. - SSH is either slow or dis
A. show policy-map control-plane
B. show policy-map
C. show interface | inc drop
D. show ip route
正确答案:A
问题 #35
Refer to the exhibit. Why is user authentication being rejected?
A. The TACACS+ server expects "user", but the NT client sends "domain/user".
B. The TACACS+ server refuses the user because the user is set up for CHAP.
C. The TACACS+ server is down, and the user is in the local database.
D. The TACACS+ server is down, and the user is not in the local database.
正确答案:D
问题 #36
Refer to the exhibit. Which control plane policy limits BGP traffic that is destined to the CPU to 1 Mbps and ignores BGP traffic that is sent at higher rate?
A. policy-map SHAPE_BGP
B. policy-map LIMIT_BGP
C. policy-map POLICE_BGP
D. policy-map COPP
正确答案:D
问题 #37
Which statement about IPv6 RA Guard is true?
A. It does not offer protection in environments where IPv6 traffic is tunneled.
B. It cannot be configured on a switch port interface in the ingress direction.
C. Packets that are dropped by IPv6 RA Guard cannot be spanned.
D. It is not supported in hardware when TCAM is programmed.
正确答案:A
问题 #38
An engineer is trying to copy an IOS file from one router to another router by using TFTP. Which two actions are needed to allow the file to copy? (Choose two.)
A. Copy the file to the destination router with the copy tftp: flash: command
B. Enable the TFTP server on the source router with the tftp-server flash: command
C. TFTP is not supported in recent IOS versions, so an alternative method must be used
D. Configure a user on the source router with the username tftp password tftp command
E. Configure the TFTP authentication on the source router with the tftp-server authentication local command
正确答案:AB
问题 #39
Refer to the exhibit. Users report that IP addresses cannot be acquired from the DHCP server. The DHCP server is configured as shown. About 300 total nonconcurrent users are using this DHCP server, but none of them are active for more than two hours per d
A. Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool
B. Configure the DHCP lease time to a smaller value
C. Configure the DHCP lease time to a bigger value
D. Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool
正确答案:B
问题 #40
Refer to the exhibit. ISP 1 and ISP 2 directly connect to the Internet. A customer is tracking both ISP links to achieve redundancy and cannot see the Cisco IOS IP SLA tracking output on the router console. Which command is missing from the IP SLA configu
A. Start-time 00:00
B. Start-time 0
C. Start-time immediately
D. Start-time now
正确答案:D
问题 #41
Refer to the exhibit. An administrator noticed that after a change was made on R1, the timestamps on the system logs did not match the clock. What is the reason for this error?
A. An authentication error with the NTP server results in an incorrect timestamp.
B. The keyword localtime is not defined on the timestamp service command.
C. The NTP server is in a different time zone.
D. The system clock is set incorrectly to summer-time hours.
正确答案:B
问题 #42
A network engineer is investigating a flapping (up/down) interface issue on a core switch that is synchronized to an NTP server. Log output currently does not show the time of the flap. Which command allows the logging on the switch to show the time of th
A. service timestamps log uptime
B. clock summer-time mst recurring 2 Sunday mar 2:00 1 Sunday nov 2:00
C. service timestamps log datetime localtime show-timezone
D. clock calendar-valid
正确答案:C
问题 #43
When provisioning a device in Cisco DNA Center, the engineer sees the error message "Cannot select the device. Not compatible with template". What is the reason for the error?
A. The template has an incorrect configuration.
B. The software version of the template is different from the software version of the device.
C. The changes to the template were not committed.
D. The tag that was used to filter the templates does not match the device tag.
正确答案:D
问题 #44
While working with software images, an engineer observes that Cisco DNA Center cannot upload its software image directly from the device. Why is the image not uploading?
A. The device must be resynced to Cisco DNA Center.
B. The software image for the device is in install mode.
C. The device has lost connectivity to Cisco DNA Center.
D. The software image for the device is in bundle mode
正确答案:B
问题 #45
An engineer configured the wrong default gateway for the Cisco DNA Center enterprise interface during the install. Which command must the engineer run to correct the configuration?
A. sudo maglev-config update
B. sudo maglev install config update
C. sudo maglev reinstall
D. sudo update config install
正确答案:A
问题 #46
Refer to the exhibit. An administrator that is connected to the console does not see debug messages when remote users log in. Which action ensures that debug messages are displayed for remote logins?
A. Enter the transport input ssh configuration command.
B. Enter the terminal monitor exec command.
C. Enter the logging console debugging configuration command.
D. Enter the aaa new-model configuration command.
正确答案:C
问题 #47
Refer to the exhibit. Network operations cannot read or write any configuration on the device with this configuration from the operations subnet. Which two configurations fix the issue? (Choose two.)
A. Configure SNMP rw permission in addition to community ciscotest.
B. Modify access list 1 and allow operations subnet in the access list.
C. Modify access list 1 and allow SNMP in the access list.
D. Configure SNMP rw permission in addition to version 1.
E. Configure SNMP rw permission in addition to community ciscotest 1.
正确答案:AB
问题 #48
Refer to the exhibit. Why is the remote NetFlow server failing to receive the NetFlow data?
A. The flow exporter is configured but is not used.
B. The flow monitor is applied in the wrong direction.
C. The flow monitor is applied to the wrong interface.
D. The destination of the flow exporter is not reachable.
正确答案:A
问题 #49
Refer to the exhibit. A router receiving BGP routing updates from multiple neighbors for routers in AS 690. What is the reason that the router still sends traffic that isdestined to AS 690 to a neighbor other than10.222.10.1?
A. The local preference value in another neighbor statement is higher than 250.
B. The local preference value should be set to the same value as the weight in the route map.
C. The route map is applied in the wrong direction.
D. The weight value in another statement is higher than 200.
正确答案:D
问题 #50
Which security feature can protect DMVPN tunnels?
A. IPsec
B. TACACS+
C. RTBH
D. RADIUS
正确答案:A
问题 #51
Which two methods use IPsec to provide secure connectivity from the branch office to the headquarters office? (Choose two.)
A. DMVPN
B. MPLS VPN
C. Virtual Tunnel Interface (VTI)
D. SSL VPN
E. PPPoE
正确答案:AC
问题 #52
Which protocol is used in a DMVPN network to map physical IP addresses to logical IP addresses?
A. BGP
B. LLDP
C. EIGRP
D. NHRP
正确答案:D
问题 #53
Which Cisco VPN technology can use multipoint tunnel, resulting in a single GRE tunnel interface on the hub, to support multiple connections from multiple spoke devices?
A. DMVPN
B. GETVPN
C. Cisco Easy VPN
D. FlexVPN
正确答案:A
问题 #54
Which option is the best for protecting CPU utilization on a device?
A. fragmentation
B. COPP
C. ICMP redirects
D. ICMP unreachable messages
正确答案:B
问题 #55
Which SNMP verification command shows the encryption and authentication protocols that are used in SNMPV3?
A. show snmp group
B. show snmp user
C. show snmp
D. show snmp view
正确答案:B
问题 #56
What is the role of a route distinguisher via a VRF-Lite setup implementation?
A. It extends the IP address to identify which VFP instance it belongs to.
B. It manages the import and export of routes berween two or more VRF instances
C. It enables multicast distribution for VRF-Lite setups to enhance EGP routing protocol capabilities
D. It enables multicast distribution for VRF-Lite setups to enhance IGP routing protocol capabilities
正确答案:A
问题 #57
Refer to the following output: Router#show ip nhrp detail 1.1.2/8 via 10.2.1.2, Tunnel1 created 00:00:12, expire 01:59:47 TypE. dynamic, Flags: authoritative unique nat registered used NBMA address: 10.12.1.2 What does the authoritative flag mean in regar
A. It was obtained directly from the next-hop server.
B. Data packets are process switches for this mapping entry.
C. NHRP mapping is for networks that are local to this router.
D. The mapping entry was created in response to an NHRP registration request.
E. The NHRP mapping entry cannot be overwritten
正确答案:A
问题 #58
Which two protocols can cause TCP starvation? (Choose two)
A. TFTP
B. SNMP
C. SMTP
D. HTTPS
E. FTP
正确答案:AB
问题 #59
Which two statements about VRF-Lite configurations are true? (Choose two.)
A. They support the exchange of MPLS labels
B. Different customers can have overlapping IP addresses on different VPNs
C. They support a maximum of 512.000 routes
D. Each customer has its own dedicated TCAM resources
E. Each customer has its own private routing table.
F. They support IS-IS
正确答案:BE
问题 #60
A network engineer needs to verify IP SLA operations on an interface that shows on indication of excessive traffic. Which command should the engineer use to complete this action?
A. show frequency
B. show track
C. show reachability
D. show threshold
正确答案:B
问题 #61
Which protocol does VRF-Lite support?
A. S-IS
B. ODR
C. EIGRP
D. IGRP
正确答案:C
问题 #62
Refer to Exhibit.Which statement about redistribution from BGP into OSPF process 10 is true?
A. Network 172.16.1.0/24 is not redistributed into OSPF.
B. Network 10.10 10.0/24 is not redistributed into OSPF
C. Network 172.16.1.0/24 is redistributed with administrative distance of 1.
D. Network 10.10.10.0/24 is redistributed with administrative distance of 20.
正确答案:A
问题 #63
Which two statements about redistributing EIGRP into OSPF are true? (Choose two)
A. The redistributed EIGRP routes appear as type 3 LSAs in the OSPF database
B. The redistributed EIGRP routes appear as type 5 LSAs in the OSPF database
C. The administrative distance of the redistributed routes is 170
D. The redistributed EIGRP routes appear as OSPF external type 1
E. The redistributed EIGRP routes as placed into an OSPF area whose area ID matches the EIGRP autonomous system number
F. The redistributed EIGRP routes appear as OSPF external type 2 routes in the routing table
正确答案:BF
问题 #64
Refer to the exhibit.Which routes from OSPF process 5 are redistributed into EIGRP?
A. E1 and E2 subnets matching access list TO-OSPF
B. E1 and E2 subnets matching prefix list TO-OSPF
C. only E2 subnets matching access list TO-OSPF
D. only E1 subnets matching prefix listTO-OS1
正确答案:A
问题 #65
Users were moved from the local DHCP server to the remote corporate DHCP server. After the move, none of the users were able to use the network.Which two issues will prevent this setup from working properly? (Choose two)
A. Auto-QoS is blocking DHCP traffic.
B. The DHCP server IP address configuration is missing locally
C. 802.1X is blocking DHCP traffic
D. The broadcast domain is too large for proper DHCP propagation
E. The route to the new DHCP server is missing
正确答案:BE
问题 #66
What is the output of the following command: show ip vrf
A. Show's default RD values
B. Displays IP routing table information associated with a VRF
C. Show's routing protocol information associated with a VRF.
D. Displays the ARP table (static and dynamic entries) in the specified VRF
正确答案:A
问题 #67
Which command is used to check IP SLA when an interface is suspected to receive lots of traffic with options?
A. show track
B. show threshold
C. show timer
D. show delay
正确答案:A
问题 #68
Refer to the exhibit. AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server. Which action resolves this issue?
A. Correct the timeout value
B. Match the authentication port
C. Correct the shared secret
D. Match the accounting port
正确答案:B
问题 #69
Refer to the exhibit. A company is evaluating multiple network management system tools. Trending graphs generated by SNMP data are returned by the NMS and appear to have multiple gaps. While troubleshooting the issue, an engineer noticed the relevant outp
A. Remove the class map NMS from being part of control plane policing
B. Remove the exceed-rate command in the class map
C. Configure the CIR rate to a lower value that accommodates all the NMS tools
D. Separate the NMS class map in multiple class maps based on the specific protocols with appropriate CoPP actions
正确答案:D
问题 #70
Refer to the exhibit. An engineer is monitoring reachability of the configured default routes to ISP1 and ISP2. The default route from ISP1 is preferred if available. How is this issue resolved?
A. Use the icmp-echo command to track both default routes
B. Start IP SLA by matching numbers for track and ip sla commands
C. Start IP SLA by defining frequency and scheduling it
D. Use the same AD for both default routes
正确答案:C
问题 #71
Refer to the exhibit. Redistribution is enabled between the routing protocols, and now PC2 PC3, and PC4 cannot reach PC1. What are the two solutions to fix the problem? (Choose two)
A. Filter RIP and OSPF routes back into OSPF from EIGRP when redistributing into OSPF in R2
B. Filter all routes except EIGRP routes when redistributing into OSPF in R3
C. Filter OSPF routes into RIP from EIGRP when redistributing into RIP in R2
D. Filter all routes except RIP routes when redistributing into EIGRP in R2
E. Filter RIP routes back into RIP when redistributing into RIP in R2
正确答案:CE
问题 #72
Which label operations are performed by a label edge router?
A. PUSH and PHP
B. SWAP and POP
C. SWAP and PUSH
D. PUSH and POP
正确答案:D
问题 #73
Refer to the exhibit. The network administrator configured VRF lite for customer A. The technician at the remote site misconfigured VRF on the router. Which configuration will resolve connectivity for both sites of customer A? ip vrf customer_a rd 1:1 rou
A. ip vrf customer_a
B. ip vrf customer_a
C. ip vrf customer_a
D. ip vrf customer_a
正确答案:A
问题 #74
After some changes in the routing policy, it is noticed that the router in AS 45123 is being used as a transit AS router for several service providers. Which configuration ensures that the branch router in AS 45123 advertises only the local networks to al
A. ip as-path access-list 1 permit ^45123$
B. ip as-path access-list 1 permit ^45123
C. ip as-path access-list 1 permit ^$
D. ip as-path access-list 1 permit
正确答案:C
问题 #75
Refer to the exhibit. An engineer is trying to get a packet destined for 192.168.32.100 forwarded through 10.1.1.1, but it was forwarded through 10.1.1.2. What action forwards the packets through 10.1.1.1? Router#show ip route ... D 192.168.32.0/19 [90/25
A. Configure EIGRP to receive 192.168.32.0 route with lower metric
B. Configure EIGRP to receive 192.168.32.0 route with lower administrative distance
C. Configure EIGRP to receive 192.168.32.0 route with equal or longer prefix than /24
D. Configure EIGRP to receive 192.168.32.0 route with longer prefix than /19
正确答案:C
问题 #76
Refer to the exhibit. A junior engineer updated a branch router configuration. Immediately after the change, the engineer receives calls from the help desk that branch personnel cannot reach any network destinations. Which configuration restores service a
A. ip prefix-list 102 seq 15 permit 0.0.0.0/32 le 32
B. route-map FILTER-IN permit 20
C. ip prefix-list 102 seq 5 permit 0.0.0.0/32 le 32
D. route-map FILTER-IN deny 5
正确答案:B
问题 #77
An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback 0 with an IP of 10.1.1.1 255.255.255.252 along with the summary route. After finishing configuration, the customer complained not receiving summary rou
A. Configure route-map Leak-Route permit 10 and match access-list 1
B. Configure access-list 1 permit 10.1.1.1 0.0.0.252
C. Configure access-list 1 and match under route-map Leak-Route
D. Configure route-map Leak-Route permit 20
E. Configure access-list 1 permit 10.1.1.0 0.0.0.3
正确答案:AE
问题 #78
Refer to the exhibit. An IP SLA is configured to use the backup default route when the primary is down, but it is not working as desired. Which command fixes the issue? R1(config)#ip route 0.0.0.0 0.0.0.0 1.1.1.1 R1(config)#ip route 0.0.0.0 0.0.0.0 2.2.2.
A. R1(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.1 track 1
B. R1 (config)# ip route 0.0.0 0 0.0.0 0 2.2.2 2
C. R1 (config)# ip route 0.0.0.0 0.0.0.0 2.2.2.2 10 track 1
D. R1(config)# ip sla track 1
正确答案:A
问题 #79
What is an advantage of using BFD
A. It detects local link failure at layer 1 and updates routing table
B. It detects local link failure at layer 3 and updates routing protocols
C. It has sub-second failure detection for layer 1 and layer 2 problems
D. It has sub-second failure detection for layer 1 and layer 3 problems
正确答案:D
问题 #80
Refer to the exhibit. The ACL is placed on the inbound GigabitEthernet 0/1 interface of the router. Host 192.168.10.10 cannot SSH to host 192.168.100.1 even though the flow is permitted. Which action resolves the issue without opening full access to this
A. Temporarily move the permit ip any any line to the beginning of the ACL to see if it the flow works
B. Run the show access-list FILTER command to view if the SSH entry has any hit statistics associated with it
C. Move the SSH entry to the beginning of the ACL
D. Temporarily remove the ACL from the interface to see if the flow works
正确答案:C
问题 #81
Which component of MPLS VPN is used to extend the IP address so that an engineer is able to identify to which VPN it belongs?
A. RD
B. VPNv4 address family
C. RT
D. LDP
正确答案:A
问题 #82
Refer to the exhibit. BGP is flapping after the CoPP policy is applied. What are the two solutions to fix the issue? (Choose two) policy-mapp COPP-7600 class COPP-CRITICAL-7600 police cir 2000000 bc 62500 conform-action transmit exceed-action transmit ! c
A. Configure BGP in the COPP-CRITICAL-7600 ACL
B. Configure a higher value for CIR under the default class to allow more packets during peak traffic
C. Configure a higher value for CIR under the class COPP-CRITICAL-7600
D. Configure a three-color policer instead of two-color policer under class COPP-CRITICAL
E. Configure IP CEF to CoPP policy and BGP to work
正确答案:AB
问题 #83
Refer to the exhibit. A client is concerned that passwords are visible when running this show archive log config all. Which router configuration is needed to resolve this issue?
A. MASS-RTR(config-archive-log-cfg)#hidekeys
B. MASS-RTR(config)#service password-encryption
C. MASS-RTR(config)#aaa authentication arap
D. MASS-RTR(config-archive-log-cfg)#password encryption aes
正确答案:A
问题 #84
Refer to the exhibit. A user cannot SSH to the router. What action must be taken to resolve this issue?
A. Configure transport input ssh
B. Configure transport output ssh
C. Configure ip ssh version 2
D. Configure ip ssh source-interface loopback0
正确答案:A
问题 #85
Refer to the exhibit. R1 is being monitored using SNMP and monitoring devices are getting only partial information. What action should be taken to resolve this issue?
A. Modify the CoPP policy to increase the configured exceeded limit for SNMP
B. Modify the access list to include snmptrap.
C. Modify the CoPP policy to increase the configured CIR limit for SNMP
D. Modify the access list to add a second line to allow udp any any eg snmp
正确答案:B
问题 #86
Refer to the exhibit. The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new IP address. What two actions must be taken to resolve this issue? (Choosetwo.)
A. Configure the server to use DHCP on the network with default gateway 200.30.40.100.
B. Configure the server with a static IP address and default gateway
C. Configure the router to exclude a server IP address
D. Configure the server to use DHCP on the network with default gateway 200.30.30.100.
E. Configure the router to exclude a server IP address and default gateway.
正确答案:BE
问题 #87
What does IPv6 Source Guard utilize to determine if IPv6 source addresses should be forwarded?
A. ACLs
B. Binding Table
C. ACE
D. DHCP
正确答案:B
问题 #88
During the maintenance window, an administrator accidentally deleted the Telnet-related configuration that permits a Telnet connection from the inside network (Eth0/0) to the outside of the network between Friday - Sunday night hours only. Which configura
A. interface Ethernet0/0
ip address 10. 1.1.1 255.255.255.0
access-list 101 permit tcp 10. 1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq telnet time-range changewindow
B. interface Ethernet0/0
ip address 10. 1.1.1 255.255.255.0
access-list 101 permit tcp 10. 1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq telnet time-range changewindow
C. interface Ethernet0/0
ip address 10. 1.1.1 255.255.255.0
access-list 101 permit udp 10. 1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq telnet time-range changewindow
D. interface Ethernet0/0
ip address 10. 1.1.1 255.255.255.0
access-list 101 permit udp 10. 1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq telnet time-range changewindow
正确答案:B
问题 #89
Refer to the exhibit. An engineer wanted to set a taq of 30 to route 10.1.80.65/32 but it failed. How is the issue fixed?
A. Modify route-map ospf-to-eigrp permit10 and match prefix-list ccnp2
B. Modify prefix-list ccnp3 to add 10.1.64.0/20 ge 32
C. Modify prefix-list ccnp3 to add 10.1.64.0/20 le 24
D. Modify route-map ospf-to-eigrp permit 30 and match prefix-list ccnp2.
正确答案:A
问题 #90
Refer to the exhibit. Which action resolves intermittent connectivity observed with the SNMP trap packets?
A. Add one new entry in the ACL 120 to permit the UDP port 161
B. Increase the CIR of the mgmt class map
C. Add a new class map to match TCP traffic.
D. Decrease the committed burst size of the mgmt class map.
正确答案:B
问题 #91
Refer to the exhibit. An IT staff member comes into the office during normal office hours and cannot access devices through SSH. Which action should be taken to resolve this issue?
A. Modify the access list to use the correct IP address.
B. Configure the correct time range.
C. Modify the access list to correct the subnet mask.
D. Configure the access list in the outbound direction.
正确答案:A
问题 #92
Refer to the exhibit. A network administrator configured an IPv6 access list to allow TCP return traffic only, but it is not working as expected. Whin changes resolve this issue?
A. ipv6 access-list inbound
B. ipv6 access-list inbound
C. ipv6 access-list inbound
D. ipv6 access-list inbound
正确答案:C
问题 #93
Refer to the exhibit. An engineer receives this error message when trying to access another router in-band from the serial interface corfnected to the console of R1. Which configuration is needed on R1 to resolve this issue?
A. R1(config)#line console 0
B. R1(config)#line vty 0
C. R1(config)#line vty 0
D. R1(confia)#line console 0
正确答案:D
问题 #94
An engineer configured a company's multiple area OSPF Head Office router and Site A Cisco routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone: After finishing both site router configurations, none of the LSA 3, 4, 5, an
A. configure capability vrf-lite on Head Office and its connected PE router under router ospf 1 vrf abc
B. configure capability vrf-lite on both PE routers connected to Head Office and Site A routers under router ospf 1 vrf abc.
C. configure capability vrf-lite on Site A and its connected PE router under router ospf 1 vrf abc
D. configure capability vrf-lite on Head Office and Site A routers under router ospf 1 vrf abc
正确答案:D
问题 #95
Refer to the exhibit. R1 is connected with R2 via GigabitEthernet0/0, and R2 cannot ping R1. What action will fix the issue?
A. Fix route dampening configured on the router.
B. Replace the SFP module because it is not supported.
C. Fix IP Event Dampening configured on the interface
D. Correct the IP SLA probe that failed.
正确答案:C
问题 #96
Refer to the exhibit. An IP SLA is configured to use the backup default route when the primary is down, but it is not working as desired. Which ommand fixes the issue?
A. R1(config)# ip route 0.0.0.0 0.0.0.0 2.2.2.2 10 track 1
B. R1(config)# ip route o.0.0.0 0.0.0.0 2.2.2.2
C. R1(config)#ip sla track 1
D. R1(config)# ip route 0.0.0.0 0.0.0.0 1.1.1.1 track 1
正确答案:D
问题 #97
Refer to the exhibit. To provide reachability to network 10.1.1.0 /24 from R5, the network administrator redistributes EIGRP into OSPF on R3 but.notices that R4 is now taking a suboptimal path through R5 to reach 10.1.1.0 /24 network. Which action fixes t
A. Change the administrative distance of the external EIGRP to 90
B. Apply the outbound distribution list on R5 toward R4 in OSPF.
C. Change the administrative distance of OSPF to 200 on R5
D. Redistribute OSPF into EIGRP on R4
正确答案:A
问题 #98
What does the PE router convert the IPv4 prefix to within an MPLS VPN?
A. VPN-IPv4 prefix combined with the 64-bit route distinguisher
B. 48-bit route combining the IP and PE router-id
C. prefix that combines the ASN, PE router-id, and IP prefix
D. eBGP path association between the PE and CE sessions
正确答案:A
问题 #99
Which IGPs are supported by the MPLS LDP autoconfiguration feature?
A. ISIS and RIPv2
B. RIPv2 and OSPF
C. OSPFand EIGRP
D. OSPF and ISIS
正确答案:D
问题 #100
An engineer configured a leak-map command to summarize EIGRP routes and advertise specifically loopback O with an IP of 10.1.1.1 255.255.255.252 along with the summary route. After finishing configuration, the customer complained about not receiving the s
A. Configure access-list 1 permit 10.1.1.0 0.0.0.3.
B. Configure access-list 1 permit 10.1.1.1 0.0.0.252.
C. Confiqure access-list 1 and match under route-map Leak-Route.
D. Configure route-map Leak-Route permit 10 and match access-list 1.
E. Configure route-map Leak-Route permit 20.
正确答案:AD
问题 #101
Refer to the exhibit. An engineer has configured DMVPN on a spoke router. What is the WAN IP address of another spoke router within the DMVF network?
A. 192.168.1.1
B. 172.18.46.2
C. 172.18.16.2
D. 192.168.1.4
正确答案:B
问题 #102
Refer to the exhibit. A network engineer for AS64512 must remove the inbound and outbound traffic from link A during maintenance without closing the BGP session so that there is still a backup link over link A toward the ASN. Which BGP configuration on R1
A. route-map link-a-in permit 10
B. route-map link-a-in permit 10
C. route-map link-a-in permit 10
D. route-map link-a-in permit 10
正确答案:C
问题 #103
Refer to the exhibit. Which interface configuration must be configured on the HUB router to enable MVPN with mGRE mode?
A. interface Tunnel0
ip address 10. 1.0.1 255.255.255.0
tunnel source 172. 17.0.1
ip nhrp map 10. 0.0.11 172.17.0.2
ip nhrp map 10. 0.0.12 172.17.0.3
B. interface Tunnel0
ip address 10. 0.0.1 255.255.255.0
tunnel source 10. 0.0.1
C. interface Tunnel0
ip address 10. 0.0.1 255.255.255.0
tunnel source 172. 17.0.1
D. interface Tunnel0
ip address 10. 0.0.1 255.255.255.0
tunnel source 10. 0.0.1
tunnel destination 172. 17.0.2
正确答案:C
问题 #104
An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table.What should be configured to accomplish this task?
A. set ip next-hop
B. set ip default next-hop
C. set ip next-hop recursive
D. set ip next-hop verify-availability
正确答案:B
问题 #105
Which protocol does MPLS use to support traffic engineering?
A. Resource Reservation Protocol
B. Label Distribution Protocol
C. Border Gateway Protocol
D. Tag Distribution Protocol
正确答案:A
问题 #106
Refer to the exhibit. Which two actions should be taken to access the server? (Choose two.)
A. Modify the access list to add a second line of permit ip any.
B. Modify the access list to deny the route to 192.168.2.2
C. Modify distribute list seq 10 to permit the route to 192.168.2.2
D. Add a sequence 20 in the route map to permit access list 1
E. Add a floating static route to reach to 192.168 2 2 with administrative distance higher than OSPF
正确答案:CE
问题 #107
An engíineer needs dynamic routing between two routers and is unable to establish OSPF adjacency. The output of the show ip ospf neighbor command shows that the neighbor state is EXSTART/EXCHANGE. Which action should be taken to resolve this issue?
A. match the passwords
B. match the hello timers
C. match the MTUs
D. match the network types
正确答案:C
问题 #108
An engineer configured access list NON-CISCO in a policy to influence routes. route-map PBR, deny, sequence 5 Match clauses: ip address (access-list): NON-CISCO Set clauses: Policy routing matches: 0 packets, 0 bytes route-map PBR, permit, sequence 10 Mat
A. Packets are forwarded to the default gateway
B. Packets are dropped by the access list
C. Packets are not evaluated by sequence 10
D. Packets are evaluated by sequence 10
E. Packets are forwarded using normal route lookup.
正确答案:AD
问题 #109
What are two functions of IPv6 Source Guard? (Choose two.)
A. It denies traffic by inspecting neighbor discovery packets for specific patterns.
B. It denies traffic from unknown sources or unallocated addresses
C. It uses the populated binding table for allowing legitimate traffic.
D. It works independent from IPv6 neighbor discovery.
E. It blocks certain traffic by inspecting DHCP packets for specific sources.
正确答案:BC
问题 #110
Refer to the exhibit. A user has set up an IP SLA probe to test if a non SLA host web server on IP address 10.1.1.1 accepts HTTP sesons prior to deployment. The probe is failing. Which action should the network administrator recommend for the probe to suc
A. Modify the ip sla schedule frequency to forever
B. Add the control disable option to the tcp connect
C. Add icmp-echo command for the host
D. Re-issue the ip sla schedule command
正确答案:B
问题 #111
How are MPLS Layer 3 VPN services deployed?
A. The RD and RT values must match under the VRF
B. The label switch path must be available between the local and remote PE routers.
C. The import and export RT values under a VRF must always be the same.
D. The RD and RT values under a VRF must match on the remote PE router
正确答案:B
问题 #112
Refer to the exhibit. The network administrator must mutually redistribute routes at the Chicago router to the LA and NewYork routers. The confiquration of the Chicago router is this: router ospf 1 redistribute eigrp 100 router eigrp 100 redistribute ospf
A. router eigrp 100
B. router eigrp 100
C. router ospf 1
D. router ospf 1
正确答案:A
问题 #113
Refer to the exhibit. The R1 and R2 configurations are: R1 router bap 100 neighbor 10.1.1.2 remote-as 200 R2 router bgp 200 neighbor 10.1.1.1 remote-as 100 The neighbor relationship is not coming up. Which two sets of configurations bring the neighbors up
A. R2
ip route 10. 1.1.1 255.255.255.255 192.168.1.1
neighbor 10. 1.1.1 tti-security hops 1
neighbor 10. 1.1.1 update-source loopback 0
B. R2
ip route 10. 1.1.1 255.255.255.255 192.168.1.1
neighbor 10. 1.1.1 disable-connected-check
neighbor 10. 1.1.1 update-source loopback 0
C. R2
ip route 10. 1.1.2 255.255.255.255 192.168.1.2
router bgp 100neighbor 10. 1.1.2 ttl-security hops 1
neighbor 10. 1.1.2 update-source loopback 0
D. R1
ip route 10. 1.1.2 255.255.255.255 192.168.1.2
neighbor 10. 1.1.1 ttl-security hops 1
neighbor 10. 1.1.2 update-source loopback 0
E. R1
ip route 10. 1.1.2 255.255.255.255 192.168.1.2
neighbor 10. 1.1.2 disable-connected-check
neighbor 10. 1.1.2 update-source Loopback0
正确答案:BE
问题 #114
An engineer configured SNMP notifications sent to the management server using authentication and encrypting data with DES. An error in the response PDU is received as"UNKNOWNUSERNAME. WRONGDIGEST". Which action resolves the issue?
A. Configure correct authentication and privacy passwords using SNMPv3 authNoPriv
B. Configure the correct authentication password using SNMPv3 authNoPriv
C. Configure the correct authentication password using SNMPv3 authPriv.
D. Configure correct authentication and privacy passwords using SNMPv3 authPrivy.
正确答案:D
问题 #115
#R1 show ip roue Refer to the exhibits. All the serial links between R1, R2, and R3 have the same bandwidth. Users on the 192.168.1.0/24 network report slow response times while they access resources on network 192 168.3.0/24. When a traceroute is run on
A. Add a static route on R1 using the next hop of R3.
B. Redistribute the R1 static route to EIGRP
C. Change the Administrative Distance of EIGRP to 5
D. Remove the static route on R1
正确答案:D
问题 #116
Reter to the exhibits. A company with autonomous system number AS65401 has obtained IP address block 209.165.200.224/27 from ARIN. The company needed more IP addresses and was assigned block 209.165.202.128/27 from ISP2. An engineer in ISP1 reports that t
A. access-list 10 deny 209.165.202.128 0.0.0.31
neighbor 209. 165.201.1 distribute-list 10 out
B. access-list 10 deny 209.165.202.128 0.0.0.31
neighbor 209. 165.201.1 distribute-list 10 in
C. ip route 209.165.200.224 255.255.255.224 209.165.201.1
ip route 209. 165.202.128 255.255.255.224 209.165.201.5
D. ip route 0.0.0.0 0.0.0.0 209.165.201.1
ip route 0. 0.0.0 0.0.0.0 100 209.165.201.5
正确答案:A
问题 #117
Refer to the exhibits. An engineer identified a Layer 2 loop using DNAC. Which command fixes the problem in the SF-D9300-1 switch?
A. spanning-tree backbonefast
B. no spanning-tree uplinkfast
C. spanning-tree loopguard default
D. spanning-tree portfast bpduguard
正确答案:D
问题 #118
Refer to the exhibit. Which two actions restrict access to router R1 by SSH? (Choose two.)
A. Remove class-map ANY from service-policy CoPP
B. Configure transport output ssh on line vty and remove sequence 10 from access list 199
C. Configure transport output ssh on line vty and remove sequence 20 from access list 100
D. Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list 199
E. Configure transport input ssh on line vty and remove sequence 30 from access list 100
正确答案:AE
问题 #119
Refer to the exhibit. An IPv6 network was newly deployed in the environment and the help desk reports that R3 cannot SSH to the R2s Loopback interface. Which action resolves the issue?
A. Modify line 10 of the access list to permit instead of deny.
B. Remove line 60 from the access list.
C. Modify line 30 of the access list to permit instead of deny
D. Remove line 70 from the access list
正确答案:C
问题 #120
What are two functions of LDP? (Choose two.)
A. It uses Forwarding Equivalence Class.
B. It advertises labels per Forwarding Equivalence Class.
C. It requires MPLS Traffic Engineering.
D. It is defined in RFC 3038 and 3039.
E. It must use Resource Reservation Protocol.
正确答案:AB
问题 #121
Refer to the exhibit. A network administrator is using the DNA Assurance Dashboard panel to troubleshoot an OSPF adiacency that failed between Edge NYC Interface GiqabitEthernet1/3 with Neighbor Edge SNJ. The administrator observes that the neighborship i
A. Configure to match the OSPF interface unique IP address and subnet mask on both routers.
B. Configure to match the OSPF interface network types on both routers.
C. Configure to match the OSPF interface speed and duplex settings on both routers
D. Configure to match the OSPF interface MTU settings on both routers
正确答案:D
问题 #122
Refer to the exhibit. A network administrator is discovering a Cisco Catalyst 9300 and a Cisco WLC 3504 in Cisco DNA Center. The Catalyst 9300 is added successfully. However, the WLC is showing error "uncontactable" when the administrator tries to add it
A. Delete the WLC 3504 from Cisco DNA Center and add it to Cisco DNA Center again.
B. Copy the pem file from the Cisco DNA Center on the USB and upload it to the WLC 3504
C. Copy the .cert file from the Cisco DNA Center on the USB and upload it to the WLC 3504
D. Add the WLC 3504 under the hierarchy of the Catalyst 9300 connected devices
正确答案:B
问题 #123
Refer to the exhibit. Bangkok is using ECMP to reach to the 192 168.5.0/24 network. The administrator must configure Bangkok in such a way that Telnet traffic from 192 168 3 0/24 and 192. 168. 4.0/24 networks uses the HongKong router as the preferred rout
A. access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 101 permit ip 192. 168.4.0 0.0.0.255 192.168.5.0 0.0.0.255
set ip next-hop 172. 18.1.2
B. access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23
access-list 101 permit tcp 192. 168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23
set ip next-hop 172. 18.1.2
C. access-list 101 permit tcp 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23
access-list 101 permit tcp 192. 168.4.0 0.0.0.255 192.168.5.0 0.0.0.255 eq 23
set ip next-hop 172. 18.1.2
D. access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 101 permit ip 192. 168.4.0 0.0.0.255 192.168.5.0 0.0.0.255
set ip next-hop 172. 18.1.2
正确答案:C
问题 #124
Refer to the exhibit. Which action resolves the authentication problem?
A. Configure the user name on the TACACS+ server
B. Configure the UDP port 1812 to be allowed on the TACACS+ server
C. Confiqure the TCP port 49 to be reachable by the router
D. Configure the same password between the TACACS+ server and router.
正确答案:D
问题 #125
Refer to the exhibits. A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router. Which set of configurations fixes the issue?
A. Chicago Router
B. LA Router
ip route 192. 168.3.0 255.255.255.0 10.1.1.1
ip route 192. 168.4.0 255.255.255.0 10.1.1.1
C. Chicago Router
D. Chicago Router
ip route 192. 168.3.0 255.255.255.0 10.1.2.2
ip route 192. 168.4.0 255.255.255.0 10.1.2.2
正确答案:C
问题 #126
An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted. Which action resolves the issue?
A. Configure all devices for SNMPv3 traps with auth.
B. Configure all devices for SNMPv3 traps with priv.
C. Configure all devices for SNMPv3 informs with auth.
D. Configure all devices for SNMPv3 informs with priv
正确答案:D
问题 #127
Refer to the exhibits. When DMVPN is configured, which configuration allows spoke-to-spoke communication using loopback as tunnel source?
A. Configure crypto isakmp key cisco address 0.0.0.0 on the hub.
B. Configure crypto isakmp key Cisco address 200.1.0.0 255.255.0.0 on the hub.
C. Configure crypto isakmp key cisco address 200.1.0.0 255.255.0.0 on the spokes.
D. Configure crypto isakmp key cisco address 0.0.0.0 on the spokes
正确答案:D
问题 #128
Refer to the exhibit. The administrator can see the traps for the failed login attempts, but cannot see the traps of successful login attempts. What command is needed to resolve the issue?
A. Configure logging history 2
B. Configure logging history 3
C. Configure logging history 4
D. Configure logging history 5
正确答案:D
问题 #129
Refer to the exhibit. A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?
A. Set a tag in the route map when redistributing EIGRP into OSPF on R1. and match the same tag on R2 to allow when redistributing OSPF into EIGR
B. Apply a prefix list of EIGRP network routes in OSPF domain on R1 to propagate back into the EIGRP routing domain.
C. Set a tag in the route map when redistributing EIGRP into OSPF on R1, and match the same tag on R2 to deny when redistributing OSPF into EIGRP
D. Advertise summary routes of EIGRP to OSPF and deny specific EIGRP routes when redistributing into OSPF.
正确答案:C
问题 #130
Refer to the exhibit Which action restores the routes from neighbors while still filtering 1 1 1 0/24?
A. Add a second line in the access list to permit any
B. Modify the route map to permit the access list instead of deny it
C. Modify the access list to deny instead of permit it
D. Add a second sequence in the route map permit 20
正确答案:D
问题 #131
Refer to the exhibit.The administrator successfully logs into R1 but cannot access privileged mode commands.what should be configured to resolve the issue ?
A. aaa authorization reverse-access
B. secret cisco 123! at the end of the username command instead of password cisco123!
C. matching password on vty lines as cisco123!
D. enable secret or enable password commands to enter into privileged mode
正确答案:D
问题 #132
Refer to the exhibit.The DHCP client is unable to receive an IP address from the DHCP server. RouterB is configured as follows: Interface fastethernet 0/0 Description client DHCP ID388888888 Ip address 172.31.1.1 255.255.255.0 ! Ip route 172.16.1.0 255.25
A. RouterB(config-if)#ip helper-address 255.255.255.255
B. RouterB(config-if)#ip helper-address 172.31.1.1
C. RouterB(config-if)#ip helper-address 172.16.1.2
D. RouterB(config-if)#ip helper-address 172.16.1.1
正确答案:C
问题 #133
Refer to the exhibit An engineer has successfully set up a floating static route from the BRANCH router to the HQ network using HQ_R 1 as the primary default gateway. When the g0/0 goes down on HQ_R1, the branch network cannot reach the HQ network 192 168
A. HQ_R3(config)# ip sla responder
HQ_R3(config)# ip sla responder Icmp-echo 172. 16.35.1
B. BRANCH(config)# ip sla 1
BRANCH(config-ip-sla)# icmp-echo 192. 168.100.2
C. HQ R3(config)# ip sla responder
HQ_R3(config)# ip sla responder icmp-echo 172. 16.35.5
D. BRANCH(config)# ip sla 1
BRANCH(config-ip-sla)# icmp-echo 192. 168.100.1
正确答案:D
问题 #134
Refer to the exhibits An engineer filtered messages based on severity to minimize log messages .After applying the filter, the engineer noticed that it filtered required messages as well Which action must the engineer take to resolve the issue?
A. Configure syslog level 2
B. Configure syslog level 3
C. Configure syslog level 4
D. Configure syslog level 5
正确答案:D
问题 #135
A DMVPN single hub topology is using IPsec + mGRE with OSPF. What should be configured on the hub to ensure it will be the designated router ?
A. OSPF priority greater than 1
B. OSPF priority to 0
C. tunnel interface of the hub with ip nhrp ospf dr
D. route map to set the metrics of learned routes to 110
正确答案:A
问题 #136
An engineer is troubleshooting on the console session of a router and turns on multiple debug commands.The console screen is filled with scrolling debug messages that none of the commands can be verified if entered correctly or display any output Which ac
A. configure the term no mon command globally
B. Configure the no logging console debugging command globally
C. Configure the logging synchronous command
D. Configure the logging synchronous level all command
正确答案:C
问题 #137
An engineer configured policy-based routing for a destination IP address that does not exist in the routing table。How is the packet treated through the policy for configuring the set ip default next-hop command?
A. Packets are forwarded based on a static route
B. Packets are not forwarded to the specific next hop
C. Packets are forwarded based on the touting table
D. Packets are forwarded to the specific next hop
正确答案:D
问题 #138
An engineer must configure a Cisco router to initiate secure connections from the router to other devices in the network but kept failing. When two actions resolve the issue? (Choose two )
A. Configure a domain name
B. Configure transport input ssh command on the console
C. Configure a source port for the SSH connection to initiate
D. Configure a crypto key to be generated
E. Configure a TACACS+ server and enable it
正确答案:AD
问题 #139
Refer to the exhibit The Los Angeles and New York routers are receiving routes from Chicago but not from each other. Which configuration fixes the issue?
A. interface Tunnel 1
B. interface Tunnel 1
C. interface Tunnel 1
D. interface Tunnel 1
正确答案:C
问题 #140
Refer to the exhibits. An engineer identified a Layer 2 loop using DNAC. Which command fixes the problem in the SF switch?
A. no spanning-tree uplinkfast
B. spanning-tree loopguard default
C. spanning-tree portfast bpduguard
D. spanning-tree backbonefast
正确答案:C
问题 #141
Refer to the exhibit.The remote server is failing to receive the Netflow data. Which action resolve the issue?
A. Modify the interface command to ip flow monitor FLOW-MONITOR-1 input
B. Modify the udp port under flow exporter profile to ip transport udp 4739
C. Modify the flow record command record v4_r1 to move under flow exporter profile
D. Moftity the flow transport command transport udp 2065 to move under flow monitor profile
正确答案:A
问题 #142
Refer to the exhibit The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP -1 (AS 100) and ISP-2 (AS 200). router bgp 64511 network 172.16.20.0 mask 255.255.255.0 network 172.16.21.0 mask 25
A. router bgp 64511
neighbor 192. 168.100.1 summary-only
neighbor 192. 168.200.2 summary-only
B. ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22
ip prefix-list PL_BLOCK_SPECIFIC permit 172. 16.20.0/22
aggregate-address 172. 16.20.0 255.255.252.0 suppress-map BLOCK_SPECIFIC
C. interface E 0/0
ip prefix-list PL_BLOCK_SPECIFIC permit 172. 16.20.0/22 ge 24
D. router bgp 64511
aggregate-address 172. 16.20.0 255.255,252.0 summary-only
正确答案:D
问题 #143
Refer to the exhibit. A network administrator redistributed the default static route into OSPF toward all internal routers to reach to Internet.Which set of commands restores reachability to the internet by internal routers?
A. router ospf 1
B. router ospf 1
network 0. 0.0.0 0.0.0.0 area 0
C. router ospf 1
redistribute connected 0. 0.0.0
D. router ospf 1
正确答案:D
问题 #144
Refer to the exhibit.An engineer has configured DMVPN on a spoke router.What is the WAN IP address of another spoke router within the DMVPN network?
A. 172.18.46.2
B. 172.18.16.2
C. 192.168.1.1
D. 192.168.1.4
正确答案:A
问题 #145
When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device.Which action in the Control Plane Policy prevents this problem in a producti
A. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction
B. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction
C. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction
D. Set the conform-action and exceed action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the intput direction
正确答案:D
问题 #146
Refer to the exhibit. R2 has two paths to reach 192.168.13.0/24. but traffic is sent only through R3. Which action allows traffic to use both paths ?
A. Configure the variance 2 command under the EIGRP process on R2
B. Configure the bandwidth 2000 command under interface FastEthernet0/0 on R2
C. Configure the variance 4 command under the EIGRP process on R2
D. Configure the delay 1 command under interface FastEthernet0/0 on R2
正确答案:C
问题 #147
Refer to the exhibit R1 and R2 cannot establish an EIGRP adjacency Which action establishes EIGRP adjacency?
A. Remove the current autonomous system number on one of the routers and change to a different value
B. Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration
C. Add the passive-interface command to the R1 configuration so that it matches the R2 configuration
D. Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration
正确答案:D
问题 #148
In which two ways does the IPv6 First-Hop Security Binding Table operate?(choose two)
A. by IPv6 routing protocols to securely build neighborships without the need of authentication
B. by storing hashed keys for IPsec tunnels for the built-in IPsec features
C. by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways
D. by various IPv6 guard features to validate the data link layer address
E. by the recovery mechanism to recover the binding table in the event of a device reboot
正确答案:DE
问题 #149
An engineer configured two routers connected to two different service providers using BGP with default attributes. One of the links is presenting high delay, which causes slowness in the network. Which BGP attribute must the engineer configure to avoid us
A. AS-PATH
B. WEIGHT
C. LOCAL_PREF
D. MED
正确答案:C
问题 #150
What are two functions of MPLS Layer 3 VPNs?(choose two)
A. Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network
B. BGP is used for signaling customer VPNv4 routes between PE nodes
C. LDP and BGP can be used for Pseudowire signaling
D. It is used for transparent pomt-to-multipomt connectivity between Ethernet links/sites
E. A packet with node segment ID is forwarded along with shortest path to destination
正确答案:AB
问题 #151
What are two MPLS label characteristics? (Choose two.)
A. The label edge router swaps labels on the received packets
B. Labels are imposed in packets after the Layer 3 header
C. LDP uses TCP for reliable delivery of information
D. An MPLS label is a short identifier that identifies a forwarding equivalence class.
E. A maximum of two labels can be imposed on an MPLS packet
正确答案:CD
问题 #152
Refer to the exhibit.The ospf neighbor relationship is not coming up.What must be configured to restore OSPF neighbor adjacency?
A. OSPF on the remote router
B. matching mtu values
C. matching hello timers
D. use router ID
正确答案:B
问题 #153
Refer to the exhibit The administrator configured route advertisement to a remote low resources router to use only the default route to reach any network but failed. Which action resolves this issue?
A. Remove the line with the sequence number 5 from the prefix list
B. Remove the line with the sequence number 10 from the prefix list
C. Change the direction of the distribute-list command from out to in
D. Remove the prefix keyword from the distribute-list command
正确答案:A
问题 #154
Refer to the exhibit A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source The configuration did not work as desired Which service must be enabled to resolve the issue?
A. Enter the service timestamps log datetime clock-period global command
B. Enter the service timestamps log datetime localtime global command
C. Enter the service timestamps log datetime synchronize global command
D. Enter the service timestamps log datetime console global command
正确答案:B
问题 #155
What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)
A. RD is prepended to the IPv4 route to make it unique
B. The VPNv4 address consists of a 64-bit route distmguisher that is prepended to the IPv4 prefix
C. MP-BGP is used to allow overlapping IPv4 addresses between customers to advertise through the network
D. The IPv4 address is needed to lag the MPLS label
E. The VPNv4 address is used to advertise the MPLS VPN label
正确答案:AB
问题 #156
which protocol does MPLS use to support traffic engineering ?
A. LDP
B. BGP
C. RSVP
D. TDP
正确答案:C
问题 #157
Refer to the exhibit The network administrator configured the branch router for IPv6 on the E 0/0 interface The neighboring router is fully configured to meet requirements, but the neighbor relationship is not coming up. Which action fixes the problem on
A. Disable OSPF for IPv4 using the no ospfv3 4 area 0 ipv4 command under the E 0/0 interface
B. Enable the IPv4 address family under the E 0/0 interface by using the address-family ipv4 unicast command
C. Enable the IPv4 address family under the router ospfv3 4 process by using the address-family ipv4 unicast command
D. Disable IPv6 on the E 0/0 interface using the no ipv6 enable command
正确答案:C
问题 #158
An engineer coonfigured a DHCP server for Cisco IP phones to download its configuration from a TFTP sever,but the IP phones failed to load the configuration.what must be configured to resolve the issue ?
A. BOOTP port 67
B. DHCP option 66
C. BOOTP port 68
D. DHCP option 69
正确答案:B
问题 #159
Refer to the exhibit The engineer configured and connected Router2 to Router1.The link came up but could not establish a Telnet connection to Router1 IPv6 address of 2001:DB8::1. Which configuration allows Router2 to establish a Telnet connection to Route
A. ipv6 unicast-routing
B. permit ICMPv6 on access list INGRESS for Router2 to obtain IPv6 address
C. permit ip any any on access list EGRESS2 on Router1
D. IPv6 address on GigabitEthernet0/0
正确答案:D
问题 #160
Refer to the exhibit The OSPF routing protocol is redistributed into the BGP routing protocol, but not all the OSPE routes are distributed into BGP Which action resolves the issue?
A. Include the word external in the redistribute command.
B. Use a route-map command to redistribute OSPF external routes defined in an access list.
C. Include the word internal external in the redistribute command.
D. Use a route-map command to redistribute OSPF external routes defined in a prefix list.
正确答案:C

即刻预约

免费试听-咨询课程-获取免费资料