Exams > Cisco > 300-410: Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)
300-410: Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)
Page 20 out of 44 pages Questions 191-200 out of 436 questions
Question#191


Refer to the exhibit. An administrator configured a Cisco router for TACACS authentication, but the router is using the local enable password instead. Which action resolves the issue?

  • A. Configure the aaa authentication login default group admin local if-authenticated command instead.
  • B. Configure the aaa authentication login admin group tacacs+ local enable none command instead.
  • C. Configure the aaa authentication login admin group tacacs+ local if-authenticated command instead.
  • D. Configure the aaa authentication login admin group admin local enable command instead.
Discover Answer Hide Answer

D
Reference:
https://community.cisco.com/t5/network-access-control/problem-setting-7606-router-for-tacacs-authentication/td-p/2316903

Question#192

An administrator attempts to download the .pack NBAR2 file using TFTP from the CPE router to another device over the Gi0/0 interface. The CPE is configured as below: hostname CPE
!
ip access-list extended WAN
<`¦>
remark => All UDP rules below for WAN ID: S421T18E58F90
permit udp any eq domain any
permit udp any any eq tftp
deny udp any any
!
interface GigabitEthernet0/0
<`¦>
ip access-group WAN in
<`¦>
!
tftp-server flash:pp-adv-csr1000v-1612.1a-37-53.0.0.pack
The transfer fails. Which action resolves this issue?

  • A. Make the permit udp any eq tftp any entry the last entry in the WAN ACL
  • B. Shorten the file name to the 8+3 naming convention
  • C. Change the WAN ACL to permit the entire UDP destination port range
  • D. Change the WAN ACL to permit the UDP port 69 to allow TFTP
Discover Answer Hide Answer

C

Question#193

A network administrator must optimize the segment size of the TCP packet on the DMVPN IPsec protected tunnel interface, which carries application traffic from the head office to a designated branch. The TCP segment size must not overwhelm the MTU of the outbound link. Which configuration must be applied to the router to improve the application performance?

  • A. interface tunnel30 ip mtu 1400 ip tcp payload-size 1360 ! crypto ipsec fragmentation before-encryption
  • B. interface tunnel30 ip mtu 1400 ip tcp adjust-mss 1360 ! crypto ipsec fragmentation after-encryption
  • C. interface tunnel30 ip mtu 1400 ip tcp max-segment 1360 ! crypto ipsec fragmentation before-encryption
  • D. interface tunnel30 ip mtu 1400 ip tcp packet-size 1360 ! crypto ipsec fragmentation after-encryption
Discover Answer Hide Answer

B
Reference:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/15-mt/sec-conn-dmvpn-15-mt-book/sec-conn-dmvpn-dmvpn.html

Question#194

In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router. Which command is required on both spoke routers to communicate directly to one another?

  • A. ip nhrp nhs multicast
  • B. ip nhrp shortcut
  • C. ip nhrp map dynamic
  • D. ip nhrp redirect
Discover Answer Hide Answer

B

Question#195


Refer to the exhibit.
RR Configuration:
router bgp 100
neighbor IBGP peer-group
neighbor IBGP route-reflector-client
neighbor 10.1.1.1 remote-as 100
neighbor 10.1.2.2 remote-as 100
neighbor 10.1.3.3 remote-as 100
The network administrator configured the network to establish connectivity between all devices and notices that the ASBRs do not have routes for each other.
Which set of configurations resolves this issue?

  • A. router bgp 100 neighbor IBGP update-source Loopback0
  • B. router bgp 100 neighbor IBGP next-hop-self
  • C. router bgp 100 neighbor 10.1.1.1 next-hop-self neighbor 10.1.2.2 next-hop-self neighbor 10.1.3.3 next-hop-self
  • D. router bgp 100 neighbor 10.1.1.1 peer-group IBGP neighbor 10.1.2.2 peer-group IBGP neighbor 10.1.3.3 peer-group IBGP
Discover Answer Hide Answer

D

Question#196


Refer to the exhibit. A prefix list is created to filter routes inbound to an EIGRP process except for network 10 prefixes. After the prefix list is applied, no network 10 prefixes are visible in the routing table from EIGRP. Which configuration resolves the issue?

  • A. ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32
  • B. ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9 ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32
  • C. ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9
  • D. ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8
Discover Answer Hide Answer

D

Question#197


Refer to the exhibit. An engineer configured SNMP traps to record spoofed packets drop of more than 48000 a minute on the ethernet0/0 interface. During an IP spoofing attack, the engineer noticed that no notifications have been received by the SNMP server. Which configuration resolves the issue on R1?

  • A. ip verify unicast notification threshold 800
  • B. ip verify unicast notification threshold 8000
  • C. ip verify unicast notification threshold 48000
  • D. ip verify unicast notification threshold 80
Discover Answer Hide Answer

A
Reference:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_urpf/configuration/12-4t/sec-data-urpf-12-4t-book/sec-urpf-mib.html

Question#198


Refer to the exhibit. An engineer implemented an access list on R1 to allow anyone to Telnet except R2 Loopback0 to R1 Loopback4. How must sequence 20 be replaced on the R1 access list to resolve the issue?

  • A. sequence 20 permit tcp host 1001:ABC:2011:7::1 host 400A:0:400C::1 eq telnet
  • B. sequence 20 deny tcp host 400A:0:400C::1 host 1001:ABC:2011:7::1 eq telnet
  • C. sequence 20 permit tcp host 400A:0:400C::1 host 1001:ABC:2011:7::1 eq telnet
  • D. sequence 20 deny tcp host 1001:ABC:2011:7::1 host 400A:0:400C::1 eq telnet
Discover Answer Hide Answer

D

Question#199


Refer to the exhibit. An engineer implemented CoPP to limit Telnet traffic to protect the router CPU. It was noticed that the Telnet traffic did not pass through
CoPP. Which configuration resolves the issue?

  • A. ip access-list extended TELNET permit tcp host 10.2.2.1 host 10.2.2.4 eq telnet permit tcp host 10.1.1.1 host 10.1.1.3 eq telnet
  • B. policy-map COPP class TELNET police 8000 conform-action transmit exceed-action transmit
  • C. ip access-list extended TELNET permit tcp host 10.2.2.4 host 10.2.2.1 eq telnet permit tcp host 10.1.1.3 host 10.1.1.1 eq telnet
  • D. policy-map COPP class TELNET police 8000 conform-action transmit exceed-action transmit violate-action drop
Discover Answer Hide Answer

C

Question#200


Refer to the exhibit. After configuring OSPF in R1, some external destinations in the network became unreachable. Which action resolves the issue?

  • A. Disconnect the router with the OSPF router ID 0.0.0 0 from the network.
  • B. Increase the SPF delay interval on R1 to synchronize routes.
  • C. Change the R1 router ID from 10.255.255.1 to a unique value and clear the process.
  • D. Clear the OSPF process on R1 to flush stale LSAs sent by other routers.
Discover Answer Hide Answer

C
Reference:
https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/118880-technote-ospf-00.html

chevron rightPrevious Nextchevron right