300-410 ENARSI：Implementing Cisco Enterprise Advanced Routing and Services
Update：2026年1月16日
Questions and Answers: 615 Q&A
1.
A router receiving BGP routing updates from multiple neighbors for routers in AS 690. What is the reason that the router still sends traffic that is destined to AS 690 to a neighbor other than 10.222.1.1?
2.
An OSPF neighbor relationship between R2 and R3 is showing stuck in EXCHANGE/EXSTART state. The neighbor is established between R1 and R2. The network engineer can ping from R2 to R3 and vice versa, but the neighbor is still down. Which action resolves the issue?
3.
Which attribute eliminates LFAs that belong to protected paths in situations where links in a network are connected through a common fiber?
4.
Reachability between servers in a network deployed with DHCPv6 is unstable. Which command must be removed from the configuration to make DHCPv6 function?
ipv6 dhcp pool DHCPPOOL
address prefix 2001:0:1:4::/64 lifetime infinite infinite
interface FastEthernet0/0
ip address 10.0.0.1255.255.255.240
duplex auto
speed auto
ipv6 address 2001:0:1:4::1/64
ipv6 enableipv6 nd ra suppress
ipv6 ospf 1 area 1
ipv6 dhcp server DHCPPOOL
5.
A network engineer cannot remote access R3 using Telnet from switch S1. Which action resolves the issue?
6.
When DMVPN is configured, which configuration allows spoke-to-spoke communication using loopback as a tunnel source?
7.
An engineer must troubleshoot a connectivity issue impacting the redistribution of the subnet 172.16.2.48/28 into the OSPF domain. Which configuration on router R1 advertises this subnet into the OSPF domain?
8.
Which two labet distribution methods are used by routers in MPLS? (Choose two )
9.
Redistribution is enabled between the routing protocols, and nowPC2 PC3, and PC4 cannot reach PC1. What are the two solutions to fix the problem? (Choose two.)
10.
What does IPv6 Source Guard utilize to determine if IPv6 source addresses should be forwarded?
11.
An engineer must override the normal routing behavior of a router for Telnet traffic that is destined to 10.10.10.10 from 10.10.1.0/24 via a next hop of 10.4.4.4. which is directly connected to the router that is connected to the 10.1.1.0/24 subnet Which configuration reroutes traffic according to this requirement?
12.
What is the result of applying this configuration?
13.
An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table. What should be configured to accomplish this task?
14.
Drag and drop the DHCP messages from the left onto the correct uses on the right.
15.
A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?
16.
The network administrator configured redistribution on an ASBR to reach to all WAN networks but failed Which action resolves the issue?
17.
Which feature minimizes DoS attacks on an IPv6 network?
18.
Which statement about R1 is true?
R1(config)#route-map ADD permit 20
R1(config)#router ospf 1
R1(config-route-map)#set tag 1
R1(config-router)#redistribute rip subnets route-map ADD
19.
Which set of commands restore reachability to loopback0?
20.
After a security audit, the administrator implemented an ACL in the route reflector. The RR became unreachable from any router in the network. Which two actions resolve the issue? (Choose two.)
21.
Drag and drop the OSPF adjacency states from the left onto the correct descriptions on the right.
22.
A network is configured for EIGRP equal-cost load balancing, but the traffic destined to the servers is not load balanced. Link metrics from router R2 to R3 and R4 are the same. Which delay value must be configured to resolve the issue?
23.
Which two components are needed for a service provider to utilize the LVPN MPLS application? (Choose two.)
24.
A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?
25.
What are the two reasons for RD and VPNv4 addresses in an MPLS Layer 3 VPN? (Choose two.)
26.
An engineer is trying to copy an IOS file from one router to another router by using TFTP. Which two actions are needed to allow the file to copy? (Choose two.)
27.
An engineer is trying to generate a summary route in OSPF for network 10.0.0.0/8, but the summary route does not show up in the routing table. Why is the summary route missing?
28.
A DMVPN network is preconfigured with tunnel 0 IP address 192.168.1.254 on the HUB, IP connectivity, crypto policies, profiles, and EIGRP AS 100. The NHRP password is ccnp123, and the network ID and tunnel key is EIGRP ASN Do not introduce a static route. Configure DMVPN connectivity between routers BR1 and BR2 to the HUB router using physical interface as the tunnel source to achieve these goals:
29.
The administrator configured the network devise for end-to-end reachability, but the ASBRs are not propagation routes to each other. Which set of configuration resolves this issue?
RR
router bgp 100
neighbor10.1.1.1 remote-as100
neighbor10.1.2.2remote-as100
neighbor10.1.3.3remote-as 100
ASBR2
router bgp 100
neighbor 10.1.1.4 remote-as 100
ASBR3
router bgp 100
neighbor 10.1.2.4 remote-as 100
ASBR4
router bgp 100
neighbor 10.1.3.4 remote-as 100
30.
A shoe retail company implemented the uRPF solution for an antispoofing attack. A network engineer received the call that the branch A server is under an IP spoofing attack. Which configuration must be implemented to resolve the attack?
31.
Traffic from the branch network should route through HQ R1 unless the path is unavailable. An engineer tests this functionality by shutting down interface on the BRANCH router toward HQ_R1 router but 192.168.20.0/24 is no longer reachable from the branch router. Which set of configurations resolves the issue?
BRANCH(config)# ip route 0.0.0.0 0.0.0.0 172.16.35.2 track 1
BRANCH(config)# ip route 0.0.0.0 0.0.0.0 172.16.35.6 5
!
BRANCH(config)# ip sla l
BRANCH(config-ip-sla)# icmp-echo 172.16.35.6
BRANCH(config-ip-sla)# timeout 200
BRANCH(config-ip-sla)# frequency 5
1
BRANCH(config)# ip sla schedule 1 life forever start-time now!
BRANCH(config)# track 1 ip sla 1 reachability
32.
An administrator is configuring a GRE tunnel to establish an EIGRP neighbor to a remote router. The other tunnel endpoint is already configured. After applying the configuration as shown, the tunnel started flapping. Which action resolves the issue?
33.
An engineer must configure EIGRP between R1 and R2 with no summary route. Which configuration resolves the issue?
34.
A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log message stream it is impossible to capture the problem Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two)
35.
Router ABR-Rtr is not propagating the internet routes in OSPF area 10. which causes internet reachability problems in the area. Which action resolves the issue?
36.
Which routes from OSPF process 5 are redistributed into EIGRP?
router eigrp 1
redistribute ospf 5 match external route-map OSPF-TO-EIGRP
metric 10000200025511500
route-map OSPF-TO-EIGRP
match ip address TO-OSPF
37.
An IT staff member comes into the office during normal office hours and cannot access devices through SSH Which action should be taken to resolve this issue?
interface Ethernet0/0
ip address 10.1.1.1255.255.255.0
ip access-group 101 in
time-range Office-hour
periodic weekdays 08:00 to 17:00
access-list 101 permit tcp 10.0.0.00.0.0.0172.16.1.00.0.0.255 eq ssh time-range Office-hour
38.
The Math and Science departments connect through the corporate. IT router but users in the Math department must not be able to reach the Science department and vice versa Which configuration accomplishes this task?
39.
An engineer creates a default static route on a router with a hop of 10.1.1.1. On inspection, the engineer finds the router has two VRFs, Red and Blue. The next hop is valid for both VRFs and exists in each assigned VRF. Which configuration achieves connectivity?
40.
Which action resolves the adjacency issue?
41.
A network administrator is troubleshooting a high utilization issue on the route processor of a router that was reported by NMS The administrator logged into the router to check the control plane policing and observed that the BGP process is dropping a high number of routing packets and causing thousands of routes to recalculate frequently. Which solution resolves this issue?
42.
Site1 must perform unequal cost load balancing toward the segments behind Site2 and Site3. Some of the routes are getting load balanced but others are not. Which configuration allows Site1 to load balance toward all the LAN segments of the remote routers?
43.
A client is concerned that passwords are visible when running this show archive log config all. Which router configuration is needed to resolve this issue?
44.
A customer reports that traffic is not passing on an EIGRP enabled multipoint interface on a router configured as below:
interface Serial0/0
no ip address
interface Server0/0/0.9 multipoint
ip address 10.1.1.1 255.255.255.248
ip split-horizon eigrp 1
Which action resolves the issue?
45.
R10 attempts to copy an image file from R11 using TFTP, and the operation is timing out. Which action resolves the issue?
46.
To provide reachability to network 10.1.1.0 /24 from R5, the network administrator redistributes EIGRP into OSPF on R3 but notices that R4 is now taking a ........... path through R5 to reach 10.1.1.0/24 network. Which action fixes the issue while keeping the reachability from R5 to 10.1.1.0/24 network?
47.
An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead of current best path. Which action resolves the issue?
48.
R2 has a locally originated prefix 192.168.130.0/24 and has these configurations:
ip prefix-list test seq 5 permit 192.168.130.0/24
!
route-map OUT permit10
match ip address prefix-list test
set as-path prepend 65000
What is the result when the route-map OUT command is applied toward an eBGP neighbor R1
(1.1.1.1) by using the neighbor 1.1.1.1 route-map OUT out command?
49.
A network engineer received a call from the vendor for a failed attempt to remotely log in to their managed rooter loopback interface from 192 168.40 15 Which action must the network engineer take to resolve the issue?
50.
R1 and R2 have been configured where the neighbor relationship must be authenticatedusmgMD5
R1
router bgp 100
neighbor 172.16.1.2 remote-as 200
neighbor 172.16.1.1 password cisco123
R2
router bgp 200
neighbor 172.16.1.1 remote-as 100
neighbor 172.16.1.1 password cisco
The neighbor relationship is not coming up. Which configuration resolves the issue?
51.
What are two MPLS label characteristics? (Choose two.)
52.
An engineer configured IP SLA on R1 to avoid the ISP link flapping problem. but it is not working as designed IP SLA should wait 30 seconds before switching traffic to a secondary connection and then revert to the primary link after waning 20 seconds, when the primary link is available and stabilized. Which configuration resolves the issue?
53.
An engineer implemented an access list on R1 to allow anyone to Telnet except R2 Loopback0 to R1 Loopback4 How must sequence 20 be replaced on the R1 access list to resolve the issue?
54.
An engineer configured a router with this configuration
ip access-hst DENY TELNET
10 deny tcp any any eq 23 log-input
The router console starts receiving log message :%SEC-6-IPACCESSLOGP: list DENY_TELNET
denied tcp 192.168.1.10(1022)(FastEthernet1/0 D508.89gb.003f) ->192.168.2.20(23), 1 packet"
Which action stops messages on the console while still denying Telnet?
55.
A network administrator configured name resolution for IPv6 traffic to be allowed through an inbound access list. After the access list is applied to resolve the issue, name resolution still did not work. Which action does the network administrator take to resolve the name resolution problem?
57.
Router R2 should be learning the route for 10.123.187.0/24 via EIGRP. Which action resolves the issue without introducing more issues?
58.
Which router attaches the VPN label to incoming packets from CE routing?
59.
Branch 2 hosts cannot receive dynamic IP addresses. Which action resolves the issue?
60.
An engineer is troubleshooting a prefix advertisement issue from R3, which is not directly connected to R1. Which configuration resolves the issue?
61.
An engineer must advertise routes into IPv6 MP-BGP and failed. Which configuration resolves the issue on R1?
62.
A network administrator must configure DMVPN tunnels between the hub and spoke with dynamic spoke-to-spoke tunnel capabilities using EIGRP. Which tunnel interface command must the network administrator configure to establish an EIGRP peer?
63.
Which two commands provide the administrator with the information needed to resolve the issue? (Choose two.)
64.
Phase-3 tunnels cannot be established between spoke-to-spoke in DMVPN. Which two commands are missing? (Choose two.)
65.
Which action adds the 10 1 7.6-32 route to the BGP table?
66.
The network operation team observes a traffic forwarding issue between R2 and R3: Ping and traceroute of loopback IP address from R2 to R3 is successful. iBGP peering in AS 65101 and AS 65201 is up. Which configuration resolves the issue?
67.
How does an MPLS Layer 3 VPN function?
68.
Troubleshoot R-WEST to achieve the desired results:
Troubleshoot R-WEST to achieve the desired results:
1.The locally generated logs should have sequence numbers,date and time.
2.The SNMP traps related to OSPF and participating interfacestate changes utilizing RFC1253-MIB OSPFv2 should be sendto SNMP server.
69.
A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using SNMP and TFTP servers. Which configuration prevents changes from unauthorized NMS and TFTP servers?
70.
The engineer is getting an error when trying to transfer a new IOS file to the router. Which action resolves the issue?
71.
After redistribution is enabled between the routing protocols; PC2, PC3, and PC4 cannot reach PC1. Which action can the engineer take to solve the issue so that all the PCs are reachable?
72.
An engineer must configure a LAN-to-LAN IPsec VPN between R1 and the remote router. Which IPsec Phase 1 configuration must the engineer use for the local router?
73.
Which statement about IPv6 RA Guard is true?
74.
An engineer failed to run diagnostic commands on devices using Cisco DNA Center. Which action in Cisco DNA Center resolves the issue?
75.
What is a limitation of IPv6 RA Guard?
76.
An engineer has configured DMVPN on a spoke router. What is the WAN IP address of another spoke router within the DMVPN network?
77.
A customer reported an issue with a fiber link failure between RC and RE Users connected through the spoke location face disconnection and packet drops with the primary email server (172.16.16.1) but have no issues with the backup email server (172.16.26.1). All the router loopback IPs are advertised through the OSPF protocol. Which configuration resolves the issue?
78.
An engineer received a ticket about a router that has reloaded. The monitoring system graphs show different traffic patterns between logical and physical interfaces when the router is rebooted. Which action resolves the issue?
79.
SanFrancisco and Boston routers are choosing slower links to reach each other despite the direct links being up Which configuration fixes the issue?
80.
London must reach Rome using a faster path via EIGRP if all the links are up but it failed to take this path Which action resolves the issue?
81.
Which mechanism must be chosen to optimize the reconvergence time for OSPF at company location 407173257 that is less CPU-intensive than reducing the hello and dead timers?
82.
Why is user authentication being rejected?
83.
The traffic from spoke to hub is dropping. The operations team observes:
R2-R3 link is down due to the fiber cut.
R2 and R5 receive traffic from R1 in AS 65101.
R3 and R5 receive traffic from R4 in AS 65201.
Which configuration resolves the issue?
84.
Which Cisco VPN technology can use multipoint tunnel, resulting in a single GRE tunnel interface on the hub, to support multiple connections from multiple spoke devices?
85.
A network engineer is adding a new spoke router into an existing DMVPN Phase 3 tunnel with a hub router to provide secure communication between sites Which additional configuration must the engineer apply to enable the tunnel to come up?
interface Tunnel 0
ip address 172.23.5.10255.255.255.0no
ip redirectsip mtu 1420
ip nhrp authentication c@trts81
ip nhrp map multicast 192.168.200.1
ip nhrp map 172.23.5.1192.168.200.1
ip nhrp network-id 10ip nhrp holdtime 300
ip nhrp shortcutip ospf network broadcast
ip ospf priority 0tunnel source 192.168.100.146
tunnel mode gre multipoin
ttunnel key 100
86.
The administrator can see the traps for the failed login attempts, but cannot see the traps of successful login attempts. What command is needed to resolve the issue?
login block-for 15 attempts 10 within 120
login on-failure log
login on-success log
archive
log config
logging enable
logging size 300
notify syslog
snmp-server enable traps syslog
snmp-server host 172.16.17.1 public syslog
87.
An engineer configured NetFlow to capture traffic information through the router, but it iOS not working as expected. Which action captures the flow information from this router to the collector?
88.
The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped.
access-list 100 permit ip host 172.16.1.99 any
!
class-map CM-ADMIN
match access-group 100
!
policy-map PM-COPP
class CM-ADMIN
police 500000 conform-action transmit
!
interface E0/0
service-policy input PM-COPP
CoPP failed to capture the desired traffic and the CPU load is getting higher.
Which two configurations resolve the issue? (Choose two.)
89.
t An engineer observes that every time the ICMP packet is lost at a polling interval, track 1 goes down, which causes unnecessary disruption and instability in the network. The engineer does not want the traffic to be rerouted if the loss of ICMP packets is negligible. If the packet loss is persistent for a longer duration, the track must go down and the traffic must be rerouted. Which action resolves the issue?
90.
A network engineer receives a report that Spoke 1 users can perform bank transactions with the server located at the Center site, but Spoke 2 users cannot. Which action resolves the issue?
91.
Which component of MPLS VPNs is used to extend the IP address so that an engineer is able to identify to which VPN it belongs?
92.
Which two solutions are used to overcome a flapping link that causes a frequent label binding exchange between MPLS routers? (Choose two)
93.
What are the two goals of micro BFD sessions? (Choose two.)
94.
During troubleshooting it was discovered that the device is not reachable using a secure web browser. What is needed to fix the problem?
95.
An administrator must harden a router, but the administrator failed to test the SSH access successfully to the router. Which action resolves the issue?
96.
Users on a call center report that they cannot browse the internet on Saturdays during the afternoon. Which configuration resolves the issue?
97.
R1 cannot establish a neighbor relationship with R2 Which action resolves the issue"?
98.
A network engineer is troubleshooting an AAA authentication issue for R1 from R2 When an engineer tries to open a telnet connection to R1 it opens the connection but shows a %Authorization failed error message on the terminal and closes the connection silently Which action resolves the issue?
99.
An engineer noticed that the router log messages do not have any information about when the event occurred. Which action should the engineer take when enabling service time stamps to improve the logging functionality at a granular level?
100.
A network administrator is troubleshooting a failed AAA login issue on a Cisco Catalyst c3560 switch. When the network administrator tries to log in with SSH using TACACS+ username and password credentials, the switch is no longer authenticating and is failing back to the local account. Which action resolves this issue?
101.
R1 must advertise all loopback interfaces IP addresses to neighbors, but EIGRP neighbors receive a summary route. Which action resolves the issue?
102.
An engineer configures DMVPN and receives the hub location prefix of 10.1.1.0724 on R2 and R3 The R3 prefix of 10 1.3.0/24 is not received on R2. and the R2 prefix 10.1,2.0/24 is not received on R3. Which action reserves the issue?
