[2025] 300-410 Exam Dumps, Test Engine Practice Test Questions [Q49-Q70]

[2025] 300-410 Exam Dumps, Test Engine Practice Test Questions

Pass 300-410 exam [Mar 31, 2025] Updated 740 Questions

Cisco 300-410 exam is ideal for professionals who have experience in implementing and managing Cisco enterprise network solutions. 300-410 exam covers various topics, including advanced routing technologies, infrastructure services, VPN services, and infrastructure security. Candidates who pass the Cisco 300-410 exam will demonstrate their proficiency in configuring and troubleshooting these technologies in an enterprise network.

NEW QUESTION # 49
An engineer is configuring a network and needs packets to be forwarded to an interface for any destination address that is not in the routing table. What should be configured to accomplish this task?

A. set ip default next-hop
B. set ip next-hop recursive
C. set ip next-hop
D. set ip next-hop verify-availability

Answer: A

Explanation:

NEW QUESTION # 50
Refer to the exhibit.

Which action makes 10.1.3.2 the feasible successor to reach 10. 200. 1 0/24 for location S42T447E33F95?

A. Increase path bandwidth higher than 10.1 2 2 and higher than 10.1.1.2 between RtrA and the destination
B. Increase path bandwidth higher than 1011 2 and lower than 1012 2 between RtrA and the destination
C. Increase path bandwidth higher than 10.1 2 2 and lower than 101.1.2 between RtrA and the destination.
D. Increase path bandwidth lower than 1011 2 and lower than 1012 2 between RtrA and the destination

Answer: D

NEW QUESTION # 51
Drag and Drop the IPv6 First-Hop Security features from the left onto the definitions on the right.

Answer:

Explanation:

NEW QUESTION # 52
Refer to the exhibit. Which configuration enables OSPF for area 0 interfaces to establish adjacency with a neighboring router with the same VRF?

A. router ospf 1 vrf CCNP
interface Ethernet1
ip ospf 1 area 0.0.0.0
interface Ethernet2
ip ospf 1 area 0.0.0.0
B. router ospf 1 vrf CCNP
network 10.0.0.0 0.0.255.255 area 0
C. router ospf 1 vrf CCNP
network 10.1.1.1 0.0.0.0 area 0
network 10.2.2.2 0.0.0.0 area 0
D. router ospf 1
interface Ethernet1
ip ospf 1 area 0.0.0.0
interface Ethernet2
ip ospf 1 area 0.0.0.0

Answer: C

NEW QUESTION # 53
Refer to the exhibit. The administrator noticed that the connection was flapping between the two ISPs instead of switching to ISP2 when the ISP1 failed. Which action resolves the issue?

A. Modify the static routes to refer both to the next hop and the outgoing intertace.
B. Reference the track object 1 on the default route through ISP2 instead of ISP1.
C. Include a valid source-interface keyword in the icmp-echo statement.
D. Modify the threshold to match the administrative distance of the ISP2 route.

Answer: C

Explanation:
With this configuration, when Track 1 is UP, traffic to the Internet (8.8.8.8 is the well-known DNS of Google) flows through ISP1. When Track 1 is DOWN, traffic to the Internet flows through ISP
2. But there is a problem with this configuration is we did not specify the source IP of the track.
Usually, our router (R1 in the figure below) is connected to two ISPs via two different interface like this:

So if we don't specify the source IP, R1 will ping via E0/0 to ISP1. If the ping fails, R1 will remove the first default route so the backup path via ISP2 will be used and traffic will be sent via E0/1. But it also makes the track UP again (as we did not specify the source IP) and the main path is installed again to the routing table -> The connection will flap between two ISPs.
Therefore, in order to solve this issue, we must configure a source IP for the ping. In the example above, we can configure like this: "icmp-echo 8.8.8.8 source-ip 10.0.12.1".
Note: The configuration above means:
Timeout: 2000 milliseconds
frequency: 5 seconds
threshold: 1000 milliseconds
Reference: https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200785-ISP-Failover-with- default-routes-using-I.html

NEW QUESTION # 54
Drag and drop the addresses from the left onto the correct IPv6 filter purposes on the right.

Answer:

Explanation:

NEW QUESTION # 55

Refer to the exhibit. An engineer is troubleshooting a prefix advertisement issue from R3, which is not directly connected to R1. Which configuration resolves the issue?

Answer: D

NEW QUESTION # 56
What are two functions of MPLS Layer 3 VPNs? (Choose two.)

A. It is used for transparent point-to-multipoint connectivity between Ethernet links/sites.
B. BGP is used for signaling customer VPNv4 routes between PE nodes.
C. Customer traffic is encapsulated in a VPN label when it is forwarded in MPLS network.
D. LDP and BGP can be used for Pseudowire signaling.
E. A packet with node segment ID is forwarded along with shortest path to destination.

Answer: B,C

NEW QUESTION # 57
A network engineer needs to verify IP SLA operations on an interface that shows on indication of excessive traffic. Which command should the engineer use to complete this action?

A. show reachability
B. show track
C. show threshold
D. show frequency

Answer: B

NEW QUESTION # 58
Refer to the exhibit.

Refer to the exhibit. A customer finds that traffic from the application server (192.168.1.1) to the HUB site passes through a congested path that causes random packet drops. The NOC team influences the BGP path with MED on RB. but RD still sees that traffic coming from RA is not taking an alternate route. Which configuration resolves the issue?

Answer: D

NEW QUESTION # 59
An administrator attempts to download the pack NBAR2 file using TFTP from the CPE router to another device over the Gi0/0 interface. The CPE is configured as below:

The transfer fails. Which action resolves the issue?

A. Change the WAN ACL to permit the UDP port 69 to allow TFTP
B. Shorten the file name to the 8+3 naming convention.
C. Change the WAN ACL to permit the entire UDP destination port range
D. Make the permit udp any eq tftp any entry the last entry in the WAN ACL.

Answer: D

NEW QUESTION # 60
Refer to the exhibit.

An engineer is troubleshooting failed access by contractors to the business application server via Telnet or HTTP during the weekend. Which configuration resolves the issue?
A)

B)

C)

D)

A. Option
B. Option
C. Option
D. Option

Answer: D

NEW QUESTION # 61
Refer to the exhibit.

Which configuration denies Telnet traffic to router 2 from 198A:0:200C::1/64?

A. Ipv6 access-list-Deny_Telnet sequence 10 deny tcp host 198A:0:200C::1/64 host
201A:0:205C::1/64 eq telnet
! int Gi0/0
Ipv6 access-map Deny_Telnet in
!
B. Ipv6 access-list-Deny_Telnet sequence 10 deny tcp host 198A:0:200C::1/64 host
201A:0:205C::1/64 eq telnet
! int Gi0/0
6 / 39
Ipv6 traffic-filter Deny_Telnet in
!
C. Ipv6 access-list-Deny_Telnet sequence 10 deny tcp host 198A:0:200C::1/64 host
201A:0:205C::1/64 ! int Gi0/0
Ipv6 access-map Deny_Telnet in
!
D. Ipv6 access-list-Deny_Telnet sequence 10 deny tcp host 198A:0:200C::1/64 host
201A:0:205C::1/64 ! int Gi0/0
Ipv6 traffic-filter Deny_Telnet in
!

Answer: B

NEW QUESTION # 62
Refer to the exhibit. R2 has been receiving routes from R4 that originated outside AS300. A network engineer configured an AS-Path ACL to avoid adding these routes to the R2 BGP table, but the routes are still present in the R2 routing table. Which action resolves the issue?

A. Replace as-path access-list 1 with the ip as-path access-list 1 permit A300_ command.
B. Replace as-path access-list 1 with the ip as-path access-list 1 permit A300." command
C. Replace as-path access-list 1 with the ip as-path access-list 1 permit ..300." command
D. Replace as-path access-list 1 with the ip as-path access-list 1 permit A300$ command

Answer: C

NEW QUESTION # 63

Refer to the exhibit. The administrator configured route advertisement to a remote low resources router to use only the default route to reach any network but failed. Which action resolves this issue?

A. Remove the prefix keyword from the distribute-list command.
B. Change the direction of the distribute-list command from out to in.
C. Remove the line with the sequence number 5 from the prefix list.
D. Remove the line with the sequence number 10 from the prefix list.

Answer: C

NEW QUESTION # 64
Refer to the exhibit.

Which two actions should be taken to access the server? (Choose two.)

A. Modify the access list to add a second line of permit ip any
B. Modify the access list to deny the route to 192.168.2.2.
C. Add a floating static route to reach to 192.168.2.2 with administrative distance higher than OSPF
D. Modify distribute list seq 10 to permit the route to 192.168.2.2.
E. Add a sequence 20 in the route map to permit access list 1.

Answer: B,C

NEW QUESTION # 65
Which is statement about IPv6 inspection is true?

A. It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.
B. It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.
C. It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables.
D. It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.

Answer: B

Explanation:
IPv6 Neighbor Discovery (ND) inspection learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables. IPv6 ND inspection analyzes ND messages in order to build a trusted binding table. IPv6 ND messages that do not have valid bindings are dropped.
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-sy/ip6- nd-inspect.html

NEW QUESTION # 66
Refer to the exhibit.

The neighbor relationship is not coming up Which two configurations bring the adjacency up? (Choose two)

A. NY
router ospf 1
area 0 authentication message-digest
B. LA
interface E 0/0
ip ospf message-digest-key 1 md5 Cisco123
C. LA
router ospf 1
area 0 authentication message-digest
The configuration on NY router is good for OSPF authentication. So we must enable OSPF
D. LA
interface E 0/0
ip ospf authentication-key Cisco123
E. NY
interface E 0/0
no ip ospf message-digest-key 1 md5 Cisco123
ip ospf authentication-key Cisco123

Answer: B,C

Explanation:
authentication on LA router with the following commands:
router ospf 1
area 0 authentication message-digest
interface E0/0
ip ospf message-digest-key 1 md5 Cisco123

NEW QUESTION # 67
Which mechanism provides traffic segmentation within a DMVPN network?

A. iPsec
B. BGP
C. MPLS
D. RSVP

Answer: C

Explanation:
Explanation
To use the DMPVN - Traffic Segmentation Within DMVPN feature you must configure Multiprotocol Label Switching (MPLS) by using the mpls ip command.
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/xe-
16/sec-conn-dmvpn-xe-16-book/sec-conn-dmvpn-dmvpn.html

NEW QUESTION # 68

Refer to the exhibit. An engineer configured two ASBRs, 10.4.17.6 and 10.4.15.5, in an OSPF network to redistribute identical routes from BGR However, only prefixes from 10.4.17.6 are installed into the routing table on R1. Which action must the engineer take to achieve load sharing for the BGP-originated prefixes?

A. The admin distance of the prefixes must be adjusted to 20 on ASBR 10.4.15.5 to advertise prefixes to R1 identically from both ASBRs.
B. The ASBRs are advertising the redistributed prefixes as Type 1 and must be modified to Type 2
C. The ASBRs are advertising the redistributed prefixes with the iBGP metric and must be modified to Type 1 on ASBR 10.4.17.6.
D. The ASBRs are advertising the redistributed prefixes with a different admin distance and must be changed to 110 on ASBR 10.4.15.5.

Answer: B

NEW QUESTION # 69
A network engineer must configure a DMVPN network so that a spoke establishes a direct path to another spoke if the two must send traffic to each other. A spoke must send traffic directly to the hub if required Which configuration meets this requirement?