Free Implementing Cisco Enterprise Advanced Routing and Services 300-410 Exam Practice Test

Which security feature can protect DMVPN tunnels?

• IPsec
• TACACS+
• RTBH
• RADIUS

A. The administrator distance should be raised to 120 from the ASBR 104 15.5.

• The redistributed prefixes should be advertised as Type 1.
• The ASBR 10 4 17 6 should assign a tag to match and assign a tower metnc on R1
• The administrative distance should be raised to 120 from the ASBR 104 17 6

A network administrator successfully established a DMVPN tunnel with one hub and two spokes using EIGRP. One of the requirements was to enable spoke-to-spoke tunnels through the hub router using EIGRP. Which configuration command must the engineer configure to meet the requirement?

• no ip eigrp 1 mode multipoint
• no ip eigrp 1 split-horizon
• no ip eigrp 1 tunnel-redirect
• no ip eigrp 1 mode mgre

Which IPv6 feature enables a device to reject traffic when it is originated from an address that is not stored in the device binding table?

• IPv6 Snooping
• IPv6 Source Guard
• IPv6 DAD Proxy
• IPv6 RA Guard

Refer to the exhibit.A network engineer receives a fault ticket about traffic drops from BANK SITE to BANKUsers can reach BANK SITE Y from router RA as a source.Routers RB and RD are acting as route reflectors.Which configuration resolves the issue?

• RC(config)#router bgp 65201 RC(config-router)#neighbor 10.10.10.4 route-reflector-client
• RF(config)#router bgp 65201 RF(config-router)#neighbor 10.10.10.6 route-reflector-client
• RC(config)#router bgp 65201 RC(config-router)#neighbor 10.10.10.2 route-reflector-client
• RB(config)router bgp 65201 RB(config-router)#neighbor 10.10.10.3 route-reflector-client

Which statement about IPv6 RA Guard is true?

• It does not offer protection in environments where IPv6 traffic is tunneled.
• It cannot be configured on a switch port interface in the ingress direction.
• Packets that are dropped by IPv6 RA Guard cannot be spanned.
• It is not supported in hardware when TCAM is programmed.

A newly Installeo router starts establishing an LDP session from another MPLS router to which it is not directly connected. Which LDP message type responds by target router to the Initiating router using UDP protocol?

• notification message
• session message
• extended discovery message
• advertisement message

Which statement about MPLS LDP router ID is true?

• If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured.
• The loopback with the highest IP address is selected as the router ID.
• The MPLS LDP router ID must match the IGP router ID.
• The force keyword changes the router ID to the specified address without causing any impact.

An engineer configured SNMP notifications sent to the management server using authentication and encrypting data with DES. An error in the response PDU is received as 'UNKNOWNUSERNAME. WRONGDIGEST'. Which action resolves the issue?

• Configure the correct authentication password using SNMPv3 authPriv .
• Configure the correct authentication password using SNMPv3 authNoPriv.
• Configure correct authentication and privacy passwords using SNMPv3 authNoPriv.
• Configure correct authentication and privacy passwords using SNMPv3 authPriv.

A network administrator added a new spoke site with dynamic IP on the DMVPN network. Which configuration command passes traffic on the DMVPN tunnel from the spoke router?

• ip nhrp registration ignore
• ip nhrp registration no-registration
• ip nhrp registration dynamic
• ip nhrp registration no-unique