300-410 ENARSI：Implementing Cisco Enterprise Advanced Routing and Services
Update：November 11, 2025
Questions and Answers: 615 Q&A
1.
A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log message stream it is impossible to capture the problem Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two)
2.
A network administrator is trying to access a branch router using TACACS+ username and password credentials, but the administrator cannot log in to the router because the WAN connectivity is down. The branch router has following AAA configuration:
aaa new-model
aaa authorization commands 15 default group tacacs+
aaa accounting commands 1 default stop-only group tacacs+
aaa accounting commands 15 default stop-only group tacacs+
tacacs-server host 10.100.50.99
tacacs-server key CiSco123
Which command will resolve this problem when WAN connectivity is down?
3.
The remote server is failing to receive the NetFlow data Which action resolves the issue?
4.
The forwarding entries how that the next hop for prefixes from the 172.16.0.0/16 network is set to 10.2.2.2 instead of 10.1.1.1. Which action resolves the issue?
ip prefix-list 1 permit 172.16.0.0/16
ip prefix-list 2 permit 192.168.2.0/24
!
route-map RED permit 10
match ip address prefix-list 1
set ip next hop10.1.1.1
continue 20
exit
route-map RED permit 20
match ip address prefix-list 2
set ip next hop 10.2.2.2
end
5.
The primary link between R1 and R2wentdownbutR3isstill advertising the 192.166.200.0/24 networktoR1 and the 192.166.100.0/24 networktoR2, which createsaloop. Which action resolves the issue?
6.
Which control plane policy limits BGP traffic that is destined to the CPU to 1 Mbps and ignores BGP traffic that is sent at higher rate?
7.
Network operations cannot read or write any configuration on the device with this configuration from the operations subnet. Which two configurations fix the issue? (Choose two.)
snmp-server community ciscotest 1
snmp-server host 192.168.1.128 ciscotest
snmp-sever enable traps bgp
8.
A network engineer receives a fault ticket about traffic drops from BANK SITE to BANK Users can reach BANK SITE Y from router RA as a source. Routers RB and RD are acting as route reflectors. Which configuration resolves the issue?
9.
What is a MPLS PHP label operation?
11.
A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source The configuration did not work as desired Which service must be enabled to resolve the issue?
12.
An engineer configures PBR on R5 and wants to create a policy that matches traffic destined toward 10.10.10.0/24 and forward 10.1.1.1. The traffic must also have its IP precedence set to 5.All other traffic should be forward toward 10.1.1.2 and have its IP precedence set to 0.Which configuration meets the requirements?
13.
Which action restores the routes from neighbors while still filtering 1.1.1.0/24?
access-list 1 permit 1.1.1.0 0.0.0.255
route-map FILTER1 deny 10
match ip address 1
router eigrp 1
distribute-list route-map FILTER1 in
14.
How does LDP operate in an MPLS network?
15.
Drag and drop the OSPF adjacency states from the left onto the correct descriptions on the right.
16.
Redistribution is enabled between the routing protocols, and nowPC2 PC3, and PC4 cannot reach PC1. What are the two solutions to fix the problem? (Choose two.)
17.
What are two characteristics of IPv6 Source Guard? (Choose two.)
18.
What statement about route distinguishes in an MPLS network is true?
19.
Drag and drop the MPLS VPN device types from the left onto the definitions on the right.
20.
A network administrator enables DHCP snooping on the Cisco Catalyst 3750-X switch and configures the uplink port (Port-channel2) as a trusted port. Clients are not receiving an IP address, but when DHCP snooping is disabled, clients start receiving IP addresses. Which global command resolves the issue?
21.
Drag and drop the LDP features from the left onto the descriptions on the right
22.
After a security audit, the administrator implemented an ACL in the route reflector. The RR became unreachable from any router in the network. Which two actions resolve the issue? (Choose two.)
23.
The output of the trace route from R5 shows a loop in the network. Which configuration prevents this loop?
24.
Which statement about IPv6 ND inspection is true?
25.
The engineer is trying to transfer the newIOSfile to the router R3 but is getting an error Which configuration achieves the file transfer?
26.
A network engineer must configure a DMVPN network so that a spoke establishes a direct path to another spoke if the two must send traffic to each other. A spoke must send traffic directly to the hub if required Which configuration meets this requirement?
27.
An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead of current best path. Which action resolves the issue?
28.
An engineer configures router A to mark all inside to outside traffic from network 192 168 1 0, except from host 192 168 1 1. with critical IP precedence. The policy did not work as expected Which configuration resolves the issue?
29.
What is a function of IPv6 Source Guard?
30.
Which feature minimizes DoS attacks on an IPv6 network?
31.
An engineer must redistribute networks 192.168.10.0/24 and 192.168.20.0/24 into OSPF from EIGRP. where the metric must be added when traversing through multiple hops to start an external route of 20 The engineer notices that the external metric is fixed and does not add at each hop. Which configuration resolves the issue?
32.
In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.)
33.
The company implemented uRPF to address an antispoofing attack. A network engineer received a call from the IT security department that the regional data center is under an IP attack Which configuration must be implemented on R1 to resolve this issue?
34.
How does MPLS Layer 3 VPN function?
35.
An IPv6 network was newly deployed in the environment and the help desk reports that R3 cannot SSH to the R2s Loopback interface. Which action resolves the issue?
36.
The neighbor is not coming up. Which two sets of configurations bring the neighbors up? (Choose two.)
The R1 and R2 configurations are:
R1
router bgp 100neighbor 10.1.1.2 remote-as 200
R2
router bgp 200neighbor 10.1.1.1 remote-as 100
37.
A network is under a cyberattack. A network engineer connected to R1 by SSH and enabled the terminal monitor via SSH session to find the source and destination of the attack. The session was flooded with messages, which made it impossible for the engineer to troubleshoot the issue. Which command resolves this issue on R1?
38.
Which configuration configures a policy on R1 to forward any traffic that is sourced from the 192.168.130.0/24 network to R2?
39.
What are two characteristics of a VRF instance? (Choose two)
40.
Which two actions restrict access to router R1 by SSH? (Choose two.)
41.
The enterprise users fail to authenticate with the TACACS server when a direct fiber link fails between RB and RD The NOC team observes
Users connected on AS65201 fail to authenticate with TACACS server 192 168 1 1
Users connected on AS65101 successfully authenticate with TACACS server 192 168 1 1
All AS65101 and AS65201 users are configured to authenticate with the TACACS server
Which configuration resolves the issue?
42.
Drag and Drop the IPv6 First-Hop Security features from the left onto the definitions on the right.
43.
A network engineer is troubleshooting an AAA authentication issue for R1 from R2 When an engineer tries to open a telnet connection to R1 it opens the connection but shows a %Authorization failed error message on the terminal and closes the connection silently Which action resolves the issue?
44.
The network engineer configured the summarization of the RIP routes into the OSPF domain on R5 but still sees four different 172.16.0.0/24 networks on R4. Which action resolves the issue?
45.
An administrator is configuring a GRE tunnel to establish an EIGRP neighbor to a remote router. The other tunnel endpoint is already configured. After applying the configuration as shown, the tunnel started flapping. Which action resolves the issue?
46.
Which two actions should be taken to access the server? (Choose two.)
47.
Which label operations are performed by a label edge router?
48.
Which action resolves the failed authentication attempt to the router?
49.
Which command allows traffic to load-balance in an MPLS Layer 3 VPN configuration?
50.
A user cannot SSH to the router. What action must be taken to resolve this issue?
51.
An engineer is troubleshooting failed access by contractors to the business application server via Telnet or HTTP during the weekend. Which configuration resolves the issue?
52.
When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device. Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?
53.
An engineer configured NetFlow on R1, but the NMS server cannot see the flow from R1. Which configuration resolves the issue?
54.
A network administrator configured mutual redistribution on R1 and R2 routers, which caused instability in the network. Which action resolves the issue?
55.
An administrator that is connected to the console does not see debug messages when remote users log in. Which action ensures that debug messages are displayed for remote logins?
56.
What is a function of BFD?
57.
What is the role of a route distinguisher via a VRF-Lite setup implementation?
58.
The R1 OSPF neighbor is not receiving type 5 external LSAs for 132.108.2.0/24 and 132.108.3.0/24 networks. Which configuration command resolves the issue?
R1#
router ospf 1
redistribute rip subnets
network 131.108.1.00.0.0.255 area 2
network 131.108.2.00.0.0.255 area 2
distribute-list01 out
access-list 1 permit 132.108.4.00.0.0.255
59.
To provide reachability to network 10.1.1.0 /24 from R5, the network administrator redistributes EIGRP into OSPF on R3 but notices that R4 is now taking a ........... path through R5 to reach 10.1.1.0/24 network. Which action fixes the issue while keeping the reachability from R5 to 10.1.1.0/24 network?
60.
An engineer troubleshoots a connectivity problem that is impacting the communication from the users at segment 172.16.3.16/28 to the server farm at 192.168.5.16/ 28. Which configuration resolves the issue on router R1?
61.
A network administrator successfully established a DMVPN tunnel with one hub and two spokes using EIGRP. One of the requirements was to enable spoke-to-spoke tunnels through the hub router using EIGRP. Which configuration command must the engineer configure to meet the requirement?
62.
An engineer failed to run diagnostic commands on devices using Cisco DNA Center. Which action in Cisco DNA Center resolves the issue?
63.
Which routing protocol is used by the PE router to advertise routes to a CE router without redistribution or static after removing the RD tag from the P router?
64.
Drag and drop the descriptions from the left onto the corresponding MPLS components on the right.
65.
R1 must advertise all loopback interfaces IP addresses to neighbors, but EIGRP neighbors receive a summary route. Which action resolves the issue?
66.
The 130.130.130.0/24 route shows in the R2 routing table but is getting filtering toward R3. Which action resolves the issue?
67.
AS 111 wanted to use AS 200 as the preferred path for 172.20.5.0/24 and AS 100 as the backup. After the configuration, AS 100 is not used for any other routes. Which configuration resolves the issue?
68.
An engineer configures two ASBRs 10 4 17.6 and 10 4 15 5 in an OSPF network to redistribute routes from EIGRP However, both ASBRs show the EIGRP routes as equal costs even though the next-hop router 10 4 17 6 is closer to R1 How should the network traffic to the EIGRP prefixes be sent via 10 4.17.6?
69.
Which statement about redistribution from BGP into OSPF process 10 is true?
70.
A network administrator performed a Compact Flash Memory upgrade on a Cisco Catalyst 6509 Switch. Everything is functioning normally except SNMP, which was configured to monitor the bandwidth of key interfaces but the interface indexes are changed. Which global configuration resolves the issue?
71.
A network administrator is tasked to permit http and https traffic only toward the internet from the User1 laptop to adhere to company’s security policy. The administrator can still ping to www.cisco.com Which interface should the access list 101 be applied to resolve this issue?
72.
What is the purpose of the DHCPv6 Guard?
73.
Which two protocols work in the control plane of P routers across the MPLS cloud? (choose two)
74.
Users from the 192 168.2.0/24 network cannot connect to the 172.16 2 32/28 network Which configuration resolves the issue'?
75.
The network administrator must mutually redistribute routes at the Chicago router to the LA and NewYork routers. The configuration of the Chicago router is this:
router ospf 1
redistribute eigrp 100
router eigrp 100
redistribute ospf 1
After the configuration, the LA router receives all the NewYork routes, but NewYork router does
not receive any LA routes. Which set of configurations fixes the problem on the Chicago router?
76.
A network engineer applied a filter for LSA traffic on OSPFv3 interarea routes on the area 5 ABR to protect advertising the internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes. After the respective route filtering configuration is applied on the ABR, area 5 routes are not visible on any of the areas. How must the filter list be applied on the ABR to resolve this issue?
77.
An engineer receives this error message when trying to access another router in-band from the serial interface connected to the console of R1. Which configuration is needed on R1 to resolve this issue?
78.
Which configuration advertises more specific routes to R1 without sending a BGP summary route?
79.
An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established and did not meet the requirement. Which action resolves the issue?
80.
After configuring OSPF in R1, some external destinations in the network became unreachable. Which action resolves the issue?
81.
R1 and R2 are configured for EIGRP peering using authentication and the neighbors failed to come up. Which action resolves the issue?
82.
After a misconfiguration by a junior engineer, the console access to router A is not working Which configuration allows access to router A?
83.
APC is configured to obtain an IP address automatically, but it receives an IP address only from the 169.254.0.0 subnet The DHCP server logs contained no DHCPDISCOVER message from the MAC address of the PC. Which action resolves the issue?
84.
What are two features of BFD? (Choose two.)
85.
A network is configured for EIGRP equal-cost load balancing, but the traffic destined to the servers is not load balanced. Link metrics from router R2 to R3 and R4 are the same. Which delay value must be configured to resolve the issue?
86.
The route to 192 168 200 0 is flapping between R1 and R2 Which set of configuration changes resolves the flapping route?
87.
Which two configurations allow clients to get dynamic ip addresses assigned?
ip dhcp excluded-address 172.16.16.1172.16.16.2
!
ip dhcp pool 0
network 172.16.16.0 255.255.255.0
domain-name cisco.com
dns-server 172.16.16.2
lease 30
interface Ethernet0/0
ip address 10.1.1.1255.255.255.252
ip access-group 100 in
access-list 100 deny udp any any
access-list 100 permit ip any any
88.
An engineer configured a company’s multiple area OSPF head office router and Site A cisco routers with VRF lite. Each site router is connected to a PE router of an MPLS backbone.
After finishing both site router configurations, none of the LSA 3,4 5, and 7 are installed at Site A
router. Which configuration resolves this issue?
89.
An engineer must configure a Cisco router to initiate secure connections from the router to other devices in the network but kept failing. Which two actions resolve the issue? (Choose two.)
90.
A company is evaluating multiple network management system tools. Trending graphs generated by SNMP data are returned by the NMS and appear to have multiple gaps. While troubleshooting the issue, an engineer noticed the relevant output. What solves the gaps in the graphs?
91.
How is a preshared key "Test’’ for all the remote VPN rooters configured In a DMVPN using GRE over IPsec set up?
92.
After an engineer modified the configuration for area 7 to permit type 1 2 and 7 LSAs only users connected to router R9 reported that they could no longer access the internet. Which configuration restores internet access to users on R9 and permits only LSA type 1,2, and 7?
93.
What is an advantage of implementing BFD?
94.
While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured. Which command resolves this issue?
ipv6 access-list INTERNET
permit ipv62001:DB8:AD59:BA21::/642001:DB8:COAB:BA14::/64
permit tcp 2001:DB8:AD59:BA21::/642001:DB8:COAB:BA13::/64 eq telnet
permit tcp 2001:DB8:AD59:BA21::/64 any eq http
permit ipv62001:DB8:AD59::/48 any
deny ipv6 any any log
95.
Drag and drop the SNMP attributes in Cisco IOS devices from the left onto the correct SNMPv2c or SNMPV3 categories on the right.
96.
An engineer configured IP SLA to monitor a next hop on a router for reachability When the next hop is unreachable, the router is executing tracking and failing over another route, but packet loss is experienced because the reachability is flapping. Which action resolves the issue?
ip sla 10
icmp-echo 10.1.1.10
timeout 2000
threshold 2000
frequency 40
ip sla schedule 10 life forever start-time now
track 1 ip sla 10 reachability
98.
A DMVPN network is preconfigured with tunnel 0 IP address 192.168.1.254 on the HUB, IP connectivity, crypto policies, profiles, and EIGRP AS 100. The NHRP password is ccnp123, and the network ID and tunnel key is EIGRP ASN Do not introduce a static route. Configure DMVPN connectivity between routers BR1 and BR2 to the HUB router using physical interface as the tunnel source to achieve these goals
99.
An engineer configured the wrong default gateway for the Cisco DNA Center enterprise interface during the install. Which command must the engineer run to correct the configuration?
100.
How are CE advertised routes segmented from other CE routers on an MPLS PE router?
101.
BGP and EIGRP are mutually redistributed on R3, and EIGRP and OSPF are mutually redistributed on R1. Users report packet loss and interruption of service to applications hosted onthe 10.1.1.0724 prefix. An engineer tested the link from R3 to R4 with no packet loss present but has noticed frequent routing changes on R3 when running the debug ip route command. Which action stabilizes the service?
102.
A network administrator must optimize the segment size of the TCP packet on the DMVPN IPsec protected tunnel interface, which carries application traffic from the head office to a designated branch. The TCP segment size must not overwhelm the MTU of the outbound link. Which configuration must be applied to the router to improve the application performance?
