[2025-November-New]Braindump2go 300-410 Exam Questions Free[Q409-Q460]
2025/November Latest Braindump2go 300-410 Exam Dumps with PDF and VCE Free Updated Today! Following are some new Braindump2go 300-410 Real Exam Questions!
QUESTION 409
An engineer is creating a policy that overrides normal routing behavior.if the route to a destination of 10.100.100.0/24 is withdrawn from the routing Table, the policy must direct traffic to a next hop of 10.1 1.1. if the route is present in the routing table, then normal forwarding must occur.
Which
configuration meets the requirements?
A. access-list 100 permit ip any any
!
route-map POLICY permit 10
match ip address 100
set ip next-hop recursive 10.1.1.1
B. access-list 100 permit ip any 10.100.100.0 0.0.0.255 !
Route-map POLICY permit 10
match ip address 100
set ip default next-hop 10.1.1.1
C. access-list 100 permit ip any 10.100.100.0 0.0.0.255 !
route-map POLICY permit 10
match ip address 100
set ip next-hop 10.1.1.1
!
route map POLICY permit 20
D. access-list 100 permit ip any 10.100.100.0 0.0.0.255 !
route map POLICY permit 10
match ip address 100
Set ip next-hop recursive 10.1.1.1
!
route-map POLICY permit 20
Answer: D
QUESTION 410
Refer to the exhibit. After a new regional office is set up, not all guests can access the internet via guest Wi Fi. Clients are getting the correct IP address from guest Wi-Fi VLAN 364.
Which action resolves the issue ?
A. Allow 10.66.46.0/23 in the outbound ACL
B. Allow DNS traffic through the outbound ACL
C. Allow DNS traffic through the inbound ACL
D. Allow 10.66.46.0/23 in the inbound ACL
Answer: C
QUESTION 411
An engineer configures PBR on R5 and wants to create a policy that matches traffic destined toward 10.10.10.0/24 and forward 10.1.1.1. The traffic must also have its IP precedence set to 5. All other traffic should be forward toward 10.1.1.2 and have its IP precedence set to 0.
Which configuration meets the requirements?
A. access-list 1 permit 10.10.10.0 0.0.0.255
access-list 2 permit any
route-map CCNP permit 10
match ip address 1
set ip next-hop 10.1.1.1
set ip precedence 5
!
route-map CCNP permit 20
match ip address 2
set ip next-hop 10.1.1.2
set ip precedence 0
route-map CCNP permit 30
B. access-list 100 permit ip any 10.10.10.0 0.0.0.255
route-map CCNP
permit 10 match ip address 100
set ip next-hop 10.1.1.1
set ip precedence 0
!
route-map CCNP permit 20
set ip next-hop 10.1.1.2
set ip precedence 5
!
route-map CCNP permit 30
C. access-list 1 permit 10.10.10.0 0.0.0.255
route-map CCNP
permit 10 match ip address 1
set ipnext- hop 10.1.1.1
set ip precedence 5
!
route-map CCNP permit 20
set ip next-hop 10.1.1.2
set ip precedence 0
D. access-list 100 permit ip any 10.10.10.0 0.0.0.255
route-map CCNP permit 10
match ip address 100
set ip next-hop 10.1.1.1
set ip precedence 5
! route-map CCNP permit 20
set ip next-hop 10.1.1.2
set ip precedence 0
Answer: D
QUESTION 412
Refer to the exhibit. A network administrator is trying to switch to the privileged EXEC level on R1 but failed. Which configuration resolves the issue?
A. Enable password Cisco@123
B. tacass server enable-password Cisco@123
C. tacacs-server enable-password Cisco@123
D. enable-password Cisco@123
Answer: D
QUESTION 413
Which MPLS value is combined with the IP prefix to convert to a VPNv4 prefix?
A. 16-byte Route Distinguisher
B. 8-byte Route Target
C. 16-byte Route Target
D. 8-byte Route Distinguisher
Answer: D
QUESTION 414
What is a function of the IPv6 DHCP Guard feature for DHCP messages?
A. Only access lists are supported for matching traffic.
B. All client messages are always switched regardless of the device role.
C. It blocks only DHCP request messages.
D. If the device is configured as a DHCP server, no message is switched.
Answer: B
Explanation:
DHCPv6 Guard Overview
The DHCPv6 Guard feature blocks reply and advertisement messages that come from unauthorized DHCP servers and relay agents. Packets are classified into one of the three DHCP type messages. All client messages are always switched regardless of device role. DHCP server messages are only processed further if the device role is set to server. Further processing of server messages includes DHCP server advertisements(for source validation and server preference) and DHCP server replies (for permitted prefixes). If the device is configured as a DHCP server, all the messages need to be switched, regardless of the device role configuration.
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_dhcp/configuration/15-sy/dhcp-15-sy-book/ip6-dhcpv6-guard.pdf
QUESTION 415
An engineer creates a default static route on a router with a next hop of 10.1.1.1. On inspection, the engineer finds the router has two VRFs, Red and Blue. The next hop is valid for both VRFs and exists in each assigned VRF. Which configuration achieves connectivity?
A. ip route vrf Red 0.0.0.0 0.0.0.0 10.1.1.1
ip route vrf Blue 0.0.0.0 0.0.0.0 10.1.1.1
B. ip route vrf BLUE 0.0.0.0 255.255.255.255 10.1.1.1
ip route vrf RED 0.0.0.0 255.255.255.255 10.1.1.1
C. ip route vrf Red 0.0.0.0 255.255.255.255 10.1.1.1
D. ip route vrf Blue 0.0.0.0 255.255
Answer: A
QUESTION 416
Refer to the exhibit. R1 has a route map configured, which results in a loss of partial IPv6 prefixes for the BGP neighbor, resulting in service degradation. How can the full service be restored?
A. The neighbor requires a soft reconfiguration, and this will clear the policy without resetting the BGP TCP connection.
B. The prefix lit requires all prefixes that R1 is advertising to be added to it, and this will allow additional prefixes to be advertised.
C. The route map requires a deny 20 statement without set conditions, and this will allow additional prefixes to be advertised.
D. The route map requires a permit 20 statement without set conditions, and this will allow additional prefixes to be advertised.
Answer: D
Explanation:
In BGP, when a route map is applied to filter or manipulate prefixes, only the prefixes explicitly permitted by the route map are processed. If no additional permit statements exist to allow prefixes not matched in the first sequence, those prefixes are denied by default and will not be advertised.
In the provided configuration, the route map PRE-PEND permits only prefixes that match the PRE-PEND-PREFIX prefix list and applies AS-path prepending. Other prefixes that R1 might advertise are implicitly denied due to the absence of additional permit statements in the route map.
Add a permit statement (e.g., permit 20) without any set conditions in the route map. This ensures that prefixes not explicitly matched in earlier sequence numbers are still allowed to be advertised.
QUESTION 417
What is a MPLS PHP label operation?
A. Downstream node signals to remove the label.
B. It improves P router performance by not performing multiple label lookup.
C. It uses implicit-NULL for traffic congestion from source to destination forwarding
D. PE removes the outer label before sending to the P router.
Answer: A
QUESTION 418
Refer to the exhibit. An engineer must filter incoming EIGRP updates to allow only a set of specific prefixes. The distribute list is tested, and it filters out all routes except network 10.10.10.0/24. How should the engineer temporarily allow all prefixes to be learned by the router again without adjusting the existing access list?
A. A permit 20 statement should be added before completing the ACL with the required prefixes, and then the permit 20 statement can be removed.
B. A permit any statement should be added before completing the ACL with the required prefixes and then the permit any statement can be removed.
C. A continue statement should be added within the permit 10 statement before completing the ACL with the required prefixes, and then the continue statement can be removed.
D. An extended access list must be used instead of a standard access list to accomplish the task
Answer: A
Explanation:
To temporarily allow all prefixes without modifying or deleting the existing filter (which currently only permits 10.10.10.0/24), the engineer can add a second permit statement to the access list (e.g., permit any or a broader range) with a higher sequence number, such as 20.
This allows all routes temporarily, and later, the permit 20 line can be removed once the required prefixes are ready to be configured.
This avoids touching the existing permit 10 statement and maintains structured control of route filtering.
QUESTION 419
Refer to the exhibit. A network engineer receives a fault ticket about traffic drops from BANK SITE to BANK Users can reach BANK SITE Y from router RA as a source.
Routers RB and RD are acting as route reflectors.
Which configuration resolves the issue?
A. RC(config)#router bgp 65201
RC(config-router)#neighbor 10.10.10.4 route-reflector-client
B. RF(config)#router bgp 65201
RF(config-router)#neighbor 10.10.10.6 route-reflector-client
C. RC(config)#router bgp 65201
RC(config-router)#neighbor 10.10.10.2 route-reflector-client
D. RB(config)router bgp 65201
RB(config-router)#neighbor 10.10.10.3 route-reflector-client
Answer: A
QUESTION 420
Refer to the exhibit. An administrator is troubleshooting a time synchronization problem for the router time to another Cisco IOS XE-based device that has recently undergone hardening.
Which action resolves the issue?
A. Allow NTP in the ingress ACL on 10.1.225.40 by permitting UDP destined to port 123.
B. Ensure that he CPE router has a valid route to 10.1.255. 40 for NTP and rectify if not reachable.
C. NTP service is disabled and must be enabled on 10.1.225.40.
D. Allow NTP in the ingress ACL on 10.1.255.40 by permitting TCP destined to port 123.
Answer: C
QUESTION 421
Refer to the exhibit. Routers R1 and R2 have established a network adjacency using EIGRP, and both routers are advertising subnets to its neighbor. After issuing the show ip EIGRP topology all-links command in R1, some prefixes are not showing R2 as a successor. Which action resolves the issue?
A. Rectify the incorrect router ID in R2.
B. Enable split-horizon.
C. Configure the network statement on the neighbor.
D. Resolve the incorrect metric on the link.
Answer: D
QUESTION 422
How does LDP operate in an MPLS network?
A. When topology changes occur such as a router failure, LDP generates peer discovery messages that terminate the LDP season to propagate an LSP change.
B. When an adjacent LSR receives LDP discovery messages. TCP two-way handshake ensures that the LDP session has unidirectional connectivity.
C. Peer routers establish the LDP session, and the LDP neighbors maintain and terminate the session by exchanging messages
D. LDP notification messages allow LERs to exchange label information to determine the next hops within a particular LSP.
Answer: C
Explanation:
In an MPLS network, LDP operates by establishing a session between LDP neighbors, where peer routers exchange messages to set up, maintain, and terminate label-switched paths (LSPs).
QUESTION 423
Refer to the exhibit. A network engineer finds that PC1 is accessing the hotel website to do the booking but fails to make payment. Which action resolves the issue?
A. Allow stub network 10.10.202.168/30 on router R3 OSPF.
B. Decrease the AD to 5 OSPF route 192.168.94.0 on R1.
C. Increase the AD to 200 of static route 192.168.94.0 on R3.
D. Configure a reverse route on R1 for PC1 172.16.1.0/24.
Answer: D
QUESTION 424
Refer to the exhibit. A customer reports that user traffic of bank XYZ to the AAA server is not using the primary path via the R3-R2 link. The network team observes:
– No fiber is cut on links R2 and R3.
– AS101 and AS 201 routers established BGP peering.
Which configuration resolves the issue?
Refer to the exhibit. A customer reports that user traffic of bank XYZ to the AAA server is not using the primary path via the R3-R2 link. The network team observes:
• No fiber is cut on links R2 and R3.
• AS101 and AS 201 routers established BGP peering.
Which configuration resolves the issue?
A. R6(config)#router bgp 65201
R6(config-router)#no neighbor 10.10.10.5 weight 32769
B. R1(config)#route-map BGP-Path permit 10
R1(config-route-map)# set local-preference 200
R1(config)#router bgp 65101
R1 (config-router)# neighbor 10.10.10.2 route-map BGP-Path out
C. R4(config)#router bgp 65201
RA(config-router)#no neighbor 10.10.10.6 weight 32769
D. R2(config)#route-map BGP-Path permit 10
R2(config-route-map)# set metric 200
R2(config)#router bgp 65101
R2(config-router)# neighbor 10.10.10.3 route-map BGP-Path out
Answer: A
Explanation:
The issue arises because traffic is not using the primary path between R2 and R3 due to the weight attribute on R6. The weight attribute is a BGP path selection criterion that is locally significant and overrides other metrics. In this case, R6 prefers the route through 10.10.10.6 (via R5) because of the higher weight (32769) set on this neighbor.
To resolve the issue, remove the weight 32769 configuration on R6 for neighbor 10.10.10.5. By doing so, the default weight (0) will be used, allowing the primary path (via R3 and R2) to be selected based on other BGP path attributes, such as Local Preference or AS Path. This change ensures that the desired path (via R3 and R2) is preferred.
QUESTION 425
Refer to the exhibit. A bank ATM site has difficulty connecting with the bank server. A network engineer troubleshoots the issue and finds that R4 has no active route to the bank ATM site. Which action resolves the issue?
A. Advertise 10.10.30.0/24 subnet in R1 EIGRP AS.
B. EIGRP peering between R3 and R4 to be fixed.
C. EIGRP peering between R1 and R2 to be fixed.
D. Advertise 10.10.30.0/24 subnet in R3 EIGRP AS.
Answer: B
Explanation:
R3 has routes, R4 has no routes, therefore there’s no peering between R3 and R4.
QUESTION 426
Refer to the exhibit. An engineer configures SW101 to send OSPFv3 interfaces state change messages to the server.
However, only some OSPFv3 errors are being recorded.
Which organization resolves the issue?
A. snmp-server enable traps ospfv3 state-change if-state-change
B. snmp-server-enable traps ospfv3 state-change restart-status-change
C. snmp-server-enable traps ospfv3 state-change neighbor-state-change.
D. snmp-server-enable traps ospfv3 state-change if-state-change neighbor-state-change
Answer: D
QUESTION 427
Refer to the exhibit. The security department recently installed a monitoring device between routers R3 and R5, which caused a loss of network connectivity for users connected to R5. Troubleshooting revealed that the monitoring device cannot forward multicast packets. The team already updated R5 with the correct configuration. Which configuration must be implemented on R3 to resolve the problem by ensuring R3 as the DR for the R3-R5 segment?
A. interface FastEthernet0/0
ip address 10.99.53.1 255.255.255.252
ip access-group 122 in
ip ospf network non-broadcast
ip ospf priority 100
!
router ospf 10
router-id 10.10.3.255
network 10.99.53.0 0.0.0.3 area 0
neighbor 10.99.53.2
!
access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1
access-list 122 deny 89 any any
access-list 122 permit tcp any any
access-list 122 permit udp any any
access-list 122 permit icmp any any
B. interface FastEthernet0/0
ip address 10.99.53.1 255.255.255.252
ip access-group 122 in
ip ospf network non-broadcast
ip ospf priority 0
!
router ospf 10
router-id 10.10.3.255
neighbor 10.99.53.2
!
access-list 122 permit 88 host 10.99.53.2 host 10.99.53.1
access-list 122 deny 88 any any
access-list 122 permit tcp any any
access-list 122 permit udp any any
access-list 122 permit icmp any any
C. interface FastEthernet0/0
ip address 10.99.53.1 255.255.255.252
ip access-group 122 in
ip ospf network non-broadcast
ip ospf priority 0
!
router ospf 10
router-id 10.10.3.255
network 10.99.53.0 0.0.0.3 area 0
neighbor 10.99.53.2
!
access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1
access-list 122 deny 89 any any
access-list 122 permit tcp any any
access-list 122 permit udp any any
access-list 122 permit icmp any any
D. interface FastEthernet0/0
ip address 10.99.53.1 255.255.255.252
ip access-group 122 in
ip ospf network point-to-point
ip ospf priority 0
!
router ospf 10
router-id 10.10.3.255
network 10.99.53.0 0.0.0.3 area 0
neighbor 10.99.53.2
!
access-list 122 permit 88 host 10.99.53.2 host 10.99.53.1
access-list 122 deny 88 any any
access-list 122 permit tcp any any
access-list 122 permit udp any any
access-list 122 permit icmp any any
Answer: A
QUESTION 428
The network administrator must implement IPv6 in the network to allow only devices that not only have registered IP addresses but are also connecting from assigned locations.
Which security feature must be implemented?
A. IPv6 Snooping
B. IPv6 Destination Guard
C. IPv6 Prefix Guard
D. IPv6 Router Advertisement Guard
Answer: A
QUESTION 429
What must be configured by the network engineer to circumvent AS_PATH loop prevention mechanism in IP/VPN Hub and Spoke deployment scenarios?
A. Use allows in and as-override at all Pes.
B. Use allowas in and as-override at the PE-Hub.
C. Use Allowas-in the PE_Hub
D. Use as-override at the PE_Hub
Answer: D
QUESTION 430
A network engineer must configure a DMVPN network so that a spoke establishes a direct path to another spoke if the two must send traffic to each other. A spoke must send traffic directly to the hub if required. Which configuration meets this requirement?
A. At the hub router:
interface tunnel10
ip nhrp nhs dynamic multipoint
ip nhrp nhs shortcut
tunnel mode gre multicast
On the spokes router:
interface tunnel10
ip nhrp nhs multicast dynamic
ip nhrp nhs redirect
tunnel mode gre multicast
B. At the hub router:
interface tunnel10
ip nhrp map dynamic multipoint
ip nhrp redirect
tunnel mode gre multicast
On the spokes router:
interface tunnel10
ip nhrp map multicast dynamic
ip nhrp shortcut
tunnel mode gre multicast
C. At the hub router:
interface tunnel10
ip nhrp nhs multicast dynamic
ip nhrp nhs shortcut
tunnel mode gre multipoint
On the spokes router:
interface tunnel10
ip nhrp nhs multicast dynamic
ip nhrp nhs redirect
tunnel mode gre multipoint
D. At the hub router:
interface tunnel10
ip nhrp map multicast dynamic
ip nhrp redirect
tunnel mode gre multipoint
On the spokes router:
interface tunnel10
ip nhrp map multicast dynamic
ip nhrp shortcut
tunnel mode gre multipoint
Answer: D
QUESTION 431
Refer to the exhibit R3 cannot authenticate via TACACS. Which configuration resolves the issue?
A. tacacs server SITE6_TACACS
key C!sc0TACACS
B. tacacs server SITE6_TACACS
key C!scoTACACS
C. tacacs server SITE6_TACACS
address ipv4 10.60.66.66
key C!scoTACACS
D. tacacs server SITE6_TACACS
address ipv4 10.66.66.66
key CiscoTACACS
Answer: D
QUESTION 432
Refer to the exhibit. An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established and did not meet the requirement. Which action resolves the issue?
A. Replace OSPF process 10 on the interface with OSPF process 1, and configure an additional router ID with IPv6 address.
B. Replace OSPF process 10 on the interface with OSPF process 1, for the VPv6 addressma nd remove process route ID with IPv6 address.
C. Replace OSPF process 10 on the interface with OSPF process 1, and remove process 10 from the global configuration.
D. Replace OSPF process 10 on the interface with OSPF process 1 for the IPv4 address, and remove process 10 from the global configuration.
Answer: C
QUESTION 433
The summary route is not shown in the Router_B routing table after this below configuration on Router_A:
interface ethernet 0
description location ID:S4318T3E77F02
ip address 192.168.3.1 255.255.255.0
ip summary-address eigrp 1 172.16.80.0 255.255.240.0
Which Router_A configuration resolves the issue by advertising the summary route to Router_B?
A. interface loopback 0
ip address 172.18.81.1 255.255.255.0
interface Ethernet 0
ip address 192.168.3.1 255.255.255.0
ip summary-address eigrp 1 172.16.80.0 255.255.240.0
B. interface loopback 0
ip address 172.16.79.1 255.255.255.0
interface Ethernet 0
ip address 192.168.3.1 255.255.255.0
ip summary-address eigrp 1 172.16.80.0 255.255.240.0
C. interface loopback 0
ip address 172.16.81.1 255.255.255.0
interface Ethernet 0
ip address 192.168.3.1 255.255.255.0
ip summary-address eigrp 1 172.16.80.0 255.255.240.0
D. interface loopback 0
ip address 172.16.96.1 255.255.255.0
interface Ethernet 0
ip address 192.168.3.1 255.255.255.0
ip summary-address eigrp 1 172.16.80.0 255.255.240.0
Answer: D
QUESTION 434
Refer to the exhibit. A network is configured for EIGRP equal-cost load balancing, but the traffic destined to the servers is not load balanced. Link metrics from router R2 to R3 and R4 are the same. Which delay value must be configured to resolve the issue?
A. 200 on R3 E0/1
B. 120 on R4 E0/1
C. 120 on R3 E0/1
D. 2200 on R4 E0/1
Answer: A
Explanation:
It’s clear the only difference between the two routers is the Total delay, R3 is 2000 and R4 is 2200.
QUESTION 435
Refer to the exhibit. An administrator is attempting to disable the automatic logout after a period of inactivity. After logging out, the console stopped responding to all keyboard inputs. Remote access through SSH still works.
Which action resolves the issue?
A. Configure the exec command on line con 0.
B. Configure the absolute-timeout command on line con 0.
C. Configure the default exec-timeout command on line con 0.
D. Configure the no exec-timeout command on line con 0.
Answer: D
QUESTION 436
Refer to the exhibit. A NOC team receives a ticket that data traffic from RA to RF is not forwarded when the link between the RC-RE path goes down. Alll routers leam loopback IP through the IGP protocol. Which configuration resolves the issue?
A. RD(config)#router bgp 65201
RD(config-router)# neighbor 10.10.10.2 update-source loopback 0
B. RD(config-router)# neighbor bgp 65101
RD(config-router)# neighbor 10.10.10.3 ebgp-multihop 3
C. RB(config)# router bgp 65101
RD(config-router)# neighbor 10.10.10.3 update-source loopback 0
D. RD(config)# router bgp 65201
RD(config-router)# neighbor 10.10.10.2 ebgp-multihop 3
Answer: D
Explanation:
The issue arises because eBGP sessions between RD and RB fail when the direct link goes down. By default, eBGP sessions require a single hop between neighbors. However, in this topology, when the RC-RE path goes down, the traffic must traverse multiple hops (via the loopback addresses).
To resolve the issue, enable eBGP multihop: The ebgp-multihop command allows the BGP session to establish across multiple hops. In this case, ebgp-multihop 3 is configured on RD to ensure the session with RB is maintained. Ensure that loopback addresses are used as the BGP neighbor source and are reachable through IGP.
This configuration allows BGP to maintain the session even when the direct link fails, ensuring traffic can still flow through the alternate path.
QUESTION 437
Refer to the exhibit. An engineer is trying to log in to R1 via R3 loopback address. Which action resolves the issue?
A. Add transport input SCP
B. Add transport input none
C. Remove the IPv6 traffic filter from R1, which is blocking the Telnet.
D. Remove the IPv6 traffic from R1, which is blocking the SSH
Answer: C
QUESTION 438
Refer to the exhibit. A network administrator configured name resolution for IPv6 traffic to be allowed through an inbound access list. After the access list is applied to resolve the issue, name resolution still did not work. Which action does the network administrator take to resolve the name resolution problem?
A. Remove ipv6 inspect ipv6-firewall in from interface gi0/1
B. Add permit udp any eq domain any log in the access list.
C. inspect ipv6 inspect name ipv6-firewall udp 53 in global config.
D. Add permit any eq domain 53 any log in the access list.
Answer: B
QUESTION 439
Refer to the exhibit. The administrator configured the network devices for end-to-end reachability, but the ASBRs are not propagating routes to each other. Which set of configurations resolves this issue?
A. router bgp 100
neighbor 10.1.1.1 next-hop-self
neighbor 10.1.2.2 next-hop-self
neighbor 10.1.3.3 next-hop-self
B. router bgp 100
neighbor 10.1.1.1 update-source Loopback0
neighbor 10.1.2.2 update-source Loopback0
neighbor 10.1.3.3 update-source Loopback0
C. router bgp 100
neighbor 10.1.1.1 route-reflector-client
neighbor 10.1.2.2 route-reflector-client
neighbor 10.1.3.3 route-reflector-client
D. router bgp 100
neighbor 10.1.1.1 ebgp-multihop
neighbor 10.1.2.2 ebgp-multihop
neighbor 10.1.3.3 ebgp-muttihop
Answer: C
QUESTION 440
Refer to the exhibit. With the partial configuration of a router-on-a-stick. Clients in VLAN 10 on Gi2 cannot obtain IP configuration from the central DHP server is reachable by a successful ping from the route. Which action resolves the issue?
A. Configure the ip/ip/dhcp pool f and network 192.168.210.0 255.255.255.0 commands.
B. Configure the ip header-address 192.168.265.3 command on the Gi2.10 subinterface.
C. Configure a valid IP address on the Gi2 interface so that DHCP requests can be forwarded.
D. Configure the Ip dhcp excluded-address 192.168.255.3 command on the Gi1.10 subinterface.
Answer: B
Explanation:
The ip helper-address command is used to forward DHCP requests from clients in a VLAN to a central DHCP server. In this case, the configuration applies the ip helper-address command to the main GigabitEthernet2 interface, which does not handle traffic for VLAN 10. The command must be applied to the subinterface Gi2.10 because this subinterface is handling traffic for VLAN 10.
By adding the ip helper-address on Gi2.10, the router forwards DHCP requests from clients in VLAN 10 to the DHCP server at 192.168.255.3.
QUESTION 441
Refer to the exhibits. An engineer investigates a routing issue on R1 and finds that traffic destined to 5.5.5.0/24 does not take all of the paths.
Which action resolves the issue?
A. Increase the variance value in EIGRP.
B. Decrease the variance value in EIGRP.
C. Remove the adjacency of R3 from EIGRP.
D. Stop advertising 192.168.13.0/24 in EIGRP.
Answer: A
Explanation:
EIGRP variante enables unequal cost path balance routing and add those prefixes to the EIGRP routing table.
QUESTION 442
Refer to the exhibit. A network administrator wants to block all traffic toward the Internet after business hours and on weekends. When the administrator applies an access list on interface Gi0/1, all traffic is blocked and there is no access to the Internet at any time.
Which action resolves the issue?
A. Add the permit ip any any time-range no-conn statement after the deny udp any any time-range no-conn command in the access list.
B. Add the permit ip any any statement after the deny icmp any any time-range no-conn command in the access list.
C. Add the permit allowed time-range no-conn statement after the deny icmp any any time-range no-conn command in the access list.
D. Add the permit ip any any time-range no-conn statement after the deny icmp any any time-range no-conn command in the access list.
Answer: B
QUESTION 443
Refer to the exhibit. A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to an overwhelming log messages stream, it is impossible to capture the problem.
Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two.)
A. debug condition ospf neighbor
B. debug condition interface
C. debug condition session-id ADJCHG
D. debug condition all
Answer: BC
Explanation:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/debug/command/a1/db-a1-cr-book/db-c1.html
QUESTION 444
Refer to the exhibit. After reloading the router, an administrator discovered that the interface utilization graphs displayed inconsistencies with their previous history in the NMS.
Which action prevents this issue from occurring after another router reload in the future?
A. Configure SNMP interface index persistence on the router.
B. Save the router configuration to startup-config before reloading the router.
C. Rediscover all the router interfaces through SNMP after the router is reloaded.
D. Configure SNMP to use static OIDs referring to individual router interfaces.
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/15S/configuration/guide/7600_15_0s_book/ifindx.pdf
QUESTION 445
Refer to the exhibit. In an attempt to increase the network security, the administrator applied the Gi3-in ACL to the Gi3 interface. After the ACL was applied, clients in the network connected to Gi3 lost their ability to obtain IP settings from DHCP.
Which two configuration commands must be added to the Gi3-in ACL to reinstate the DHCP service for the clients? (Choose two.)
A. 74 permit udp 192.168.30.0 0.0.0.255 eq bootpc host 192.168.255.3 eq bootps
B. 71 permit udp host 0.0.0.0 eq bootps host 255.255.255.255 eq bootpc
C. 73 permit udp host 0.0.0.0 eq bootpc host 192.168.255.3 eq bootps
D. 72 permit udp host 192.168.255.3 eq bootps 192.168.30.0 0.0.0.255 eq bootpc
E. 75 permit udp host 0.0.0.0 eq bootpc host 255.255.255.255 eq bootps
Answer: DE
QUESTION 446
Refer to the exhibit. An error message “an OSPF-4-FLOOD_WAR” is received on SW2 from SW1. SW2 is repeatedly receiving its own link-state advertisement and flushes it from the network. Which action resolves the issue?
A. Change area 5 to a normal area from a nonstub area.
B. Resolve different subnet mask issue on the link.
C. Configure Layer 3 port channel on interfaces between switches.
D. Resolve duplicate IP address issue in the network.
Answer: D
Explanation:
You receive the OSPF-4-FLOOD_WAR error message. The OSPF flood war occurs when the router repeatedly receives its own Link State Advertisement (LSA) and flushes it from the network or sends a new version of it. This is meant to detect issues with Type-2 LSAs when duplicate IP addresses are present in the network, or with Type-5 LSAs when there is a duplicate router ID in different OSPF Areas.
In order to resolve this issue, reconfigure the IP address on one of the interfaces or shutdown the interface that has the duplicate IP address.
QUESTION 447
Refer to the exhibit. Which configuration resolves the IP SLA issue from R1 to the server?
A. R6(config)#ip sla responder
B. R6(config)#ip sla 650
R6(config-ip-sla)#udp-jitter 10.60.60.6
C. R6(config)#ip sla responder
udp-echo ipaddress 10.60.60.6 po 5000
D. R6(config)#ip sla schedule 10 life forever start-time now
Answer: A
QUESTION 448
Which of the following correctly describes the concept of split horizon with IP routing? (Choose two.)
A. Split horizon is a valid routing loop prevention mechanism
B. Split horizon is used to filter customer routes in an ISP network.
C. When enabled, split horizons informs the router to not advertise routes back out the same interface from where that route was originally received.
D. Split horizons cannot be disabled on WAN interfaces
E. Split horizon is not applicable to EIGRP networks
Answer: AC
QUESTION 449
Refer to the exhibit. An administrator is setting up above shown routers to enable MVPN with mGRE mode. What would be the recommended interface configuration that must be done by the engineer to make it to work?
A. interface Tunnel0
description mGRE – DMVPN Tunnel
ip address 10.0.0.1 255.255.255.0
ip nhrp map multicast dynamic
ip nhrp network-id 1
tunnel source 10.0.0.1
tunnel mode IPSec multipoint
B. interface Tunnel0
description mGRE – DMVPN Tunnel
ip address 10.0.0.1 255.255.255.0
ip nhrp map multicast dynamic
ip nhrp network-id 1
tunnel source 10.0.0.1
tunnel mode gre multipoint
C. interface Tunnel0
description mGRE – DMVPN Tunnel
ip address 10.0.0.1 255.255.255.0
ip nhrp network-id 1
tunnel source 172.17.0.1
tunnel mode IPsec multipoint
D. interface Tunnel0
description mGRE – DMVPN Tunnel
ip address 10.0.0.1 255.255.255.0
ip nhrp map multicast dynamic
ip nhrp network-id 1
tunnel source 10.0.0.1
tunnel destination 172.17.0.2
tunnel mode IPsec multipoint
Answer: B
QUESTION 450
Refer to the Exhibit. The access-lists are configured on the network device. There is a server behind the network device. User are trying to access the server securely however they are not able to access it. What changes would you recommend to the above configuration?
A. Permit tcp port 465
B. Permit tcp port 3389
C. Permit tcp port 443
D. Permit tcp any any
Answer: C
QUESTION 451
You have configured router R1 with multiple VRF’s in order to support multiple customer VPN networks. If you wanted to see the best path for the 10.1.1.0.24 route in VRF Blue, what command would you use?
A. show ip route vrf Blue 10.1.1.0
B. show ip route 10.1.1.0 vrf Blue
C. show route all 10.1.1.0
D. show ip route all 10.1.1.0
Answer: A
QUESTION 452
Which of the following OSPF Link State Advertisements (LSA’s) were created for IPV6 and do not apply to IPv4 OSPF networks? (Choose two.)
A. Link LSA (Type 8)
B. Summary LSA (Type 3)
C. Router LSA (Type 2)
D. Intra-Area Prefix LSA (Type 9)
E. Opaque LSA (Type 9)
Answer: AD
QUESTION 453
Router R1 has been configured with a default route like this:
R1#(config) ip route 0.0.0.0 0.0.0.0 10.2.3.1
You want to redistribute this route into OSPF but when you configure the redistribute static command under the OSPF process the default route is not present.
What will create a default route in the OSPF routing process?
A. Use the redistribute static subnets command.
B. Create a default metric for the static default route.
C. Use the default-information originate command under the OSPF process.
D. Change the static default route to use an Administrative Distance (AD) greater than 110.
Answer: C
QUESTION 454
Which one of the following statements regarding Bidirectional Forwarding Detection (BFD) is correct?
A. BFD echo mode is the default mode of operation.
B. BFD is not supported for HSRP.
C. CEF must be disabled for BFD to work.
D. BFD is not supported when using static routes.
Answer: A
Explanation:
BFD has the following operational modes.
In asynchronous mode routers periodically send control packets to activate and maintain BFD sessions.
Asynchronous mode is available in two versions:
Asynchronous mode without echo
Asynchronous mode with echo (default value on Cisco routers)
QUESTION 455
Which of the following OSPF neighbor adjacency states is applicable only to manually configured OSPF neighbors in a Non Broadcast Multi-Access network?
A. Attempt
B. Init
C. 2-Way
D. Exstart
E. Exchange
Answer: A
QUESTION 456
With Internal BGP, there is a requirement for all peers to be logically fully meshed, where all IBGP routers must peer with all other IBGP routers. For scaling purposes, there are two mechanisms that were developed to bypass this requirement. What are they? (Choose two.)
A. Confederations
B. IBGP to EBGP route redistribution
C. BGP peer filtering
D. Route reflectors.
Answer: AD
QUESTION 457
You have configured policy-based routing on router R1 to force some traffic to go over an alternate link. In order to verify the configuration, which debug command should be used to verify that the specific traffic is taking the intended path?
A. Debug policy routing
B. Debug ip routing
C. Debug ip policy
D. Debug policy map
Answer: C
QUESTION 458
Which BGP attribute can be used to influence the path that incoming traffic takes into your AS from other Autonomous Systems?
A. Metric manipulation
B. AS_Path
C. Weight
D. Local Preference
Answer: B
QUESTION 459
Routers R1 and R2 have been configured to use Bidirectional Forwarding Detection? What is the advantage of doing this?
A. It is able to discover local link failures at layer 1 and provide automatic re-routing
B. It is able to discover local link failures at layer 1 and provide automatic re-routing
C. It is able to discover local link failures at layer 1 only and provides detection for this in less than one second.
D. It is able to discover local link failures at layers 1 and 2 and provides detection for this in less than one second.
Answer: D
QUESTION 460
Which BGP attribute can be used to influence the path that outgoing traffic takes from your AS to other Autonomous Systems? (Choose two.)
A. MED
B. AS_Path
C. Weight
D. Local Preference
Answer: CD
Resources From:
1.2025 Latest Braindump2go 300-410 Exam Dumps (PDF & VCE) Free Share:
https://www.braindump2go.com/300-410.html
2.2025 Latest Braindump2go 300-410 PDF and 300-410 VCE Dumps Free Share:
https://drive.google.com/drive/folders/1NkZ6PH5JebhsyHrMEXD3IWxkOLRjQ-B-?usp=sharing
3.2025 Free Braindump2go 300-410 Exam Questions Download:
https://www.braindump2go.com/free-online-pdf/300-410-VCE-Dumps(409-460).pdf
Free Resources from Braindump2go,We Devoted to Helping You 100% Pass All Exams!