Cisco 300-410 問題練習

Question No : 1
Refer to the exhibit.



An administrator must harden a router, but the administrator failed to test the SSH access successfully to the router.
Which action resolves the issue?

• A.Configure SSH on the remote device to log in using SS
• B.SSH syntax must be ssh -I user ip to log in to the remote device.
• C.SSH must be allowed with the transport output ssh command.
• D.Configure enable secret to log in to the device.

答えを確認する

正解:

Question No : 2
Refer to the exhibit.



AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server.
Which action resolves this issue?

• A.Match the accounting port.
• B.Correct the shared secret.
• C.Correct the timeout value.
• D.Match the authentication port.

答えを確認する

正解:

Question No : 3
Refer to the exhibit.



Which policy configuration on R1 forwards any traffic that Is sourced from the 192.168.130.0/24 network to R2?

• A.access-list 1 permit 192.168.130.0 0.0.0.255 i interface Gi0/1 ip policy route map test I route-map test permit 10 match ip address 1 set ip next-hop 172.20.40.2
• B.access-list 1 permit 192.168.130.0 0.0.0.255 I interface Gi0/1 ip policy route-map test i route-map test permit 10 match ip address 1 set ip next-hop 172.20.40.1
• C.access-list 1 permit 192.168.130.0 0.0.0.255 I interface Gi0/2 ip policy route-map test i route-map test permit 10 match ip address 1 set ip next-hop 172.20.20.1
• D.access-list 1 permit 192.168.130.0 0.0.0.255 i interface Gi0/2 ip policy route-map test i route-map test permit 10 match ip address 1 set ip next-hop 172.20.20.2

答えを確認する

正解:

Question No : 4
Refer to the exhibit.






An engineer must troubleshoot a connectivity issue Impacting the redistribution of the subnet 172.16.2.48/28 Into the OSPF domain.
Which configuration on router R1 advertises this subnet Into the OSPF
domain?

• A.R1 (config)#route-map CCNP permit 10 R1(config-route-map)#match tag 200 R1 (config-route-map)#exit R1 (config)#router ospf 10 R1(config-router)#redistribute eigrp 100 subnets route-map CCNP
• B.R1 (config)#route-map CCNP deny 10 R1(config-route-map)#match tag 200 R1 (config)#route-map CCNP permit 10 R1 (config)#router ospf 10 R1(config-router)#redistribute eigrp 100 subnets route-map CCNP C R1 (config)#route-map CCNP permit 10 R1(config-route-map)#match route-type internal R1 (config)#router ospf 10 R1(config-router)#redistribute eigrp 100 subnets route-map CCNP
• C.R1 (config)#route-map CCNP permit 10 R1(config-route-map)#match route-type level-2 R1 (config )#router ospf 10 R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

答えを確認する

正解:

Question No : 5
Refer to the exhibit.






The administrator configured the network devices for end-to-end reachability, but the ASBRs are not propagating routes to each other.
Which set of configurations resolves this issue?

• A.router bgp 100 neighbor 10.1.1.1 route-reflector-client neighbor 10.1.2.2 route-reflector-client neighbor 10.1.3.3 route-reflector-client
• B.router bgp 100 neighbor 10.1.1.1 ebgp-multihop neighbor 10.1.2.2 ebgp-multihop neighbor 10.1.3.3 ebgp-multihop
• C.router bgp 100 neighbor 10.1.1.1 next-hop-self neighbor 10.1.2.2 next-hop-self neighbor 10.1.3.3 next-hop-self
• D.router bgp 100 neighbor 10.1.1.1 update-source Loopback0 neighbor 10.1.2.2 update-source Loopback0 neighbor 10.1.3.3 update-source Loopback0

答えを確認する

正解:

Question No : 6
16.0.0/16
The network administrator on R1 must improve convergence by blocking all subnets of 172.16.0.0/16 major network with a mask lower than 23 from coming in.
Which set of configurations accomplishes the task on R1?

• A.ip prefix-list PL-1 deny 172.16.0.0/16 ge 23 ip prefix-list PL-1 permit 0.0.0.0/0 le 32 I router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in
• B.access-list 1 deny 172.16.0.0 0.0.254.255 access-list 1 permit any I router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 distribute-list 1 in
• C.ip prefix-list PL-1 deny 172.16.0.0/16 le 23 ip prefix-list PL-1 permit 0.0.0.0/0 le 32 I router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in
• D.ip prefix-list PL-1 deny 172.16.0.0/16 ip prefix-list PL-1 permit 0.0.0.0/0 i router bgp 100 neighbor 192.168.100.2 remote-as 200 neighbor 192.168.100.2 prefix-list PL-1 in

答えを確認する

正解:

Question No : 7
Refer to the exhibit.



An engineer must block access to the console ports for all corporate remote Cisco devices based on the recent corporate security policy but the security team still can connect through the console port.
Which configuration on the console port resolves the issue?

• A.login and password
• B.exec 0 0
• C.no exec
• D.transport input telnet

答えを確認する

正解:

Question No : 8
Refer to the exhibit.



Host A successfully pings host C, but host B fails to ping host C.
Which action resolves this issue?

• A.Change the first statement in access list 100 to permit access.
• B.Enable loose mode uRP
• C.Disable auto-summary In RIP and EIGR
• D.Redistribute EIGRP 100 into RIP on R1.

答えを確認する

正解:

Question No : 9
Refer to the exhibit.



An engineer is troubleshooting an issue using the debug ip packet command and notices that no time stamps are shown on R4 to establish the event time.
Which configuration resolves this issue by showing time stamps regardless of the time zone in R4 logs?

• A.service timestamps log datetime msec show-timezone
• B.service timestamps log datetime localtime msec
• C.service timestamps debug datetime msec show-timezone
• D.service timestamps debug datetime localtime msec

答えを確認する

正解:

Question No : 10
Refer to the exhibit.



An engineer configured SNMP in R1 to be able to save and upload configurations to the SNMP server but failed when they tried to backup R1 configuration on the server.
Which configuration resolves the issue?

• A.copy running-config tftp://10.66.66.66/r1-config
• B.copy running-config tftp://10.66.66.66/c: r1-config
• C.snmp-server tftp-server-list 66
• D.snmp-server tftp-server-list 20

答えを確認する

正解:

Question No : 11
Which router translates the customer routing information into VPNv4 routes to exchange VPNv4 routes with other devices through MP-BGP?

• A.CE
• B.PE
• C.P
• D.VPNv4 RR

答えを確認する

正解:

Question No : 12
What is a role of route distinguishers in an MPLS network?

• A.Route distinguishers are used for label bindings.
• B.Route distinguishers allow multiple instances of a routing table to coexist within the edge router.
• C.Route distinguishers make a unique VPNv4 address across the MPLS network.
• D.Route distinguishers define which prefixes are imported and exported on the edge router.

答えを確認する

正解:

Question No : 13
Refer to the exhibit.



A user cannot SSH to the router.
What action must be taken to resolve this issue?

• A.Configure transport input ssh
• B.Configure transport output ssh
• C.Configure ip ssh version 2
• D.Configure ip ssh source-interface loopback0

答えを確認する

正解:
Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960-x_cg_chapter_01001.html

Question No : 14
Refer to the exhibit.



Which two actions should be taken to access the server? (Choose two.)

• A.Modify the access list to add a second line of permit ip any
• B.Modify the access list to deny the route to 192.168.2.2.
• C.Modify distribute list seq 10 to permit the route to 192.168.2.2.
• D.Add a sequence 20 in the route map to permit access list 1.
• E.Add a floating static route to reach to 192.168.2.2 with administrative distance higher than OSPF

答えを確認する

正解:

Question No : 15
Refer to the exhibit.



An engineer receives this error message when trying to access another router in-band from the serial interface connected to the console of R1.
Which configuration is needed on R1 to resolve this issue?

• A.R1(config)#line console 0 R1(config-line)#transport preferred ssh
• B.R1(config)#line vty 0 R1(config-line)#transport output ssh
• C.R1(config)#line vty 0 R1(config-line)#transport output ssh R1(config-line)#transport preferred ssh
• D.R1(config)#line console 0 R1(config-line)#transport output ssh

答えを確認する

正解:
Explanation:
https://community.cisco.com/t5/other-network-architecture/out-of-band-router-access/td-p/333295
The “transport output none” command prevents any protocol connection made from R1. Therefore our SSH connection to 192.168.12.2 was refused. In order to fix this problem we can configure “transport output ssh” under “line console 0” of R1.
Note: The parameter “-l” specifies the username to log in as on the remote machine.