300-410 Online Practice Questions and Answers

Correct Answer: A

Correct Answer: C

Correct Answer: BE

Correct Answer: B

Correct Answer: C

Correct Answer: C

The IP SLA TCP connect operation is used to gather statistics on connection-oriented services. The tcp- connect 10.0.0.1 23 control disable command specifies the IP address to which the responder should respond, the port number on

which to respond and it disables the control protocol normally used to inform the responder to temporarily enable the port specified .by the configuration in the sender. When the responder is a non-Cisco device, a well-known port number

must be chosen and the control protocol should be disabled on the responder. When a Cisco device is the responder, then any port number can be chosen and the control protocol should be left enabled.

The frequency 30 command specifies how often the test should occur in seconds. It is not changed in any way as a result of the responder being a non-Cisco device.

The timeout 1000 command specifies in milliseconds the amount of time an IP SLAs operation waits for a response from its request packet. It is not changed in any way as a result of the responder being a non-Cisco device.

The tag FLL-RO command simply applies a user-specified identifier to the IP SLAs operation and is changed in any way as a result of the responder being a non-Cisco device.

Objective:

Infrastructure Services

Sub-Objective:

Configure and verify IP SLA

References:

IP SLAs Configuration Guide, Cisco IOS Release 15MandT > Configuring IP SLAs TCP Connect Operations Cisco > Cisco IOS IP SLAs Command Reference > tcp-connect

Correct Answer: B

It provides neither authentication nor encryption. In SNMPv3 there are three combinations of security that can be used:

noAuthNoPriv- no authentication and no encryption noauth keyword in the configuration AuthNoPriv - messages are authenticated but not encrypted auth keyword in the configuration AuthPriv - messages are authenticated and encrypted priv

keyword in the configuration In this case, the keyword noauth in the configuration indicates that no authentication and no encryption are provided. This makes the implementation no more secure than SNMPv1 or SNMPv2.

In SNMPv1 and SNMPv2, authentication is performed using a community string. When you implement SNMP using the noauth keyword, it does not use community strings for authentication. Instead it uses the configured user or group name

(in this case NORMAL). Regardless, it does not provide either authentication or encryption.

Objective:

Infrastructure Services

Sub-Objective:

Configure and verify SNMP

References:

SNMP Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3850 Switches) > SNMPv3

Correct Answer: A

The correct command is show ip bgp.

The BGP table lists all the paths that the BGP router has learned. Each destination network listed might have multiple possible paths listed. Given that the criteria are met for each destination network, BGP will choose a path to put in the IP routing table.

The BGP table is in many ways analogous to EIGRP's topology table in that it lists many known paths, not just the best path. Below is an example partial output of the show ip bgp command:

The following facts can be determined from this output:

All of the routes were redistributed into BGP from an IGP. In the status column (located to the left of the Network column and to right of the column where some lines have a > symbol) is a column that is either blank or has an i symbol. In this

case, all of the columns are blank. If the status column is blank, then BGP learned the route from an external peer. If it has an i symbol, an iBGP neighbor advertised this path to the router. It was learned from an Interior Gateway Protocol

(IGP) and was advertised as a result of executing a network statement on the neighbor under the router bgp context as shown below adding the 30.0.0.0 network under BGP 100.

R4(config)#router bgp 100

R4(config-router)#network 30.0.0.0

Four routes will be installed in the routing table. These routes have both an * symbol and a > symbol. l in the status column. The * symbol indicates that the next hop is valid and the > symbol indicates that this is the best route.

The output is slightly different if you specify the network that you are interested in, as shown below in the show ip bgp 214.5.98.0 command output:

This output focuses solely on the route to the network 214.5.98.0 and provides the following pieces of information:

The neighbor that sent this route is at 192.168.1.1

The AS of the network where 214.5.98.0 is located is 5760

The IGP metric to reach the neighbor that sent this route is 886, as shown by the text 192.168.1.1 (metric 886) The complete metric to 214.5.98.0 is 1652, as shown in the last line by Origin IGP, metric 1652

The commands show ip bgp table and show ip bgp topology are not valid Cisco commands.

The show ip bgp summary command displays the status of BGP connections.

Objective:

Layer 3 Technologies

Sub-Objective:

Explain BGP attributes and best-path selection

References:

Cisco IOS Master Command List, Release 12.4 > l through q > Cisco IOS IP Routing: BGP Command Reference > show ip bgp

Correct Answer: D

R2 can establish a full adjacency with the neighbor at 192.168.5.107 and the neighbor at 192.168.5.165. In a broadcast, multi-access network OSPF network, full adjacencies can only be established with a designated router (DR) or a backup

designated router (BDR).

Objective:

Layer 3 Technologies

Sub-Objective:

Configure and verify OSPF neighbor relationship and authentication

References:

Home.Support > Technology Support > IP > IP Routing > Design > Design Technotes > What does the show ip ospf neighbors command reveal? Cisco > Cisco IOS IP Routing: OSPF Command Reference > show ip ospf neighbor

Correct Answer: D

The destination MAC address is the address of the BNG, so there is no need for it to be verified. If the traffic arrived on the BNG interface, it is correct.

PPPoE is composed of two main phases, the Active Discovery Phase and the PPP Session Phase. The Active Discovery phase consists of the following communications between the PPPoE client and the BNG:

1.

The client sends a PPPoE Active Discovery Initiation (PADI) broadcast signal to the remote device (BNG).

2.

The remote device sends back a PPPoE Active Discovery Offer (PADO) that contains the MAC address of the BNG and destination MAC address of the subscriber (client).

3.

The subscriber (client) send a PPPoE Active Discovery Request (PADR) continuing the destination MAC address of the BNG to which it wishes to establish a session.

4.

The BNG responds with a PPPoE Active Discovery Session-Confirmation (PADS) containing the PPPoE session ID.

Once this process is complete, the session moves on to the PPP Session Phase in which Link Control Protocol (LCP) parameters such as maximum transmission unit (MTU) are agreed to, authentication is performed, and Network Control

Protocols (NCP) for any Layer 3 protocol that will traverse the link are started.

Objective:

Layer 2 Technologies

Sub-Objective:

Configure and verify PPP

References:

Cisco Support Community > ASR9000 BNG debugging PPPoE sessions Cisco > Cisco Security Appliance Command Line Configuration Guide, Version 8.0 > Configuring the PPPoE Client > PPPoE Client Overview

Correct Answer: B

https://www.cisco.com/E-Learning/bulk/public/tac/cim/cib/using_cisco_ios_software/cmdrefs/service_timestamps.htm

Correct Answer: B

Correct Answer: C

Correct Answer: D

Correct Answer: C