CCNP300-410学习笔记(251-281)
创始人
2025-05-29 07:15:44
0

251、Refer to the exhibit An engineer configured NetFlow on R1 but the NMS server cannot see the flow from ethernet 0/0 of R1. Which configuration resolves the issue?

A. flow monitor Flowmonitor1
source Ethernet0/0
B. interface Ethernet0/1
ip flow monitor Flowmonitor1 input
ip flow monitor Flowmonitor1 output
C. interface Ethernet0/0
ip flow monitor Flowmonitor1 input

ip flow monitor Flowmonitor1 output
D. flow exporter FlowAnalyzer1
source Ethernet0/0 

252、R2#show ip route eigrp | include 10.1.
D 10.1.1.0/ 24
R3#show ip route eigrp | include 10.1.
D 10.1.1.0/ 24

Refer to the exhibit. An engineer configures DMVPN and receives the hub loacation prefix of 10.1.1.0/24 on R2 and R3. The R3 prefix of 10.1.3.0/24 is not
received on R2, and the R2 prefix 10.1.2.0/24 is not received on R3. Which action resolves the issue?
A. Split honzon prevents the routes from being advertised between spoke routers. It should be disabled with the command no ip split-horizon eigrp 10 on the tunnel interface of R1
B. There is no spoke-to-spoke connection DMVPN configuration should be modified to enable a tunnel connection between R2 and R3 and neighbor relationship confirmed by use of the show ip eigrp neighbor command
C. Split horizon prevents the routes from being advertised between spoke routers It should be disabled with the no ip split-horizon eigrp 10 command on the Gi0/0 interface of R1
D. There is no spoke-to-spoke connection DMVPN configuration should be modified with a manual neighbor relationship configured between R2 and R3 and confirmed by use of the show ip eigrp neighbor command 

253、

Refer to the exhibit. The ISP router is fully configured for customer A and customer B using the VRF-Lite feature. What is the minimum configuration required for
customer A to communicate between routers A1 and A2?
A. A1:
interface fa0/0
description To->ISP
ip vrf forwarding A
ip add 172.31.100.1 255.255.255.0
no shut
!
router ospf 100
net 172.31.100.1 0.0.0.255 area 0
A2:
interface fa0/0
description To->ISP
ip vrf forwarding A
ip add 172.31.200.1 255.255.255.0
no shut
!
router ospf 100
net 172.31.200.1 0.0.0.255 area 0
B. A1:
interface fa0/0description To->ISP
ip add 172.31.200.1 255.255.255.0
no shut
!
router ospf 100
net 172.31.200.1 0.0.0.255 area 0
A2:
interface fa0/0
description To->ISP
ip add 172.31.100.1 255.255.255.0
no shut
!
router ospf 100
net 172.31.100.1 0.0.0.255 area 0
C. A1:
interface fa0/0
description To->ISP
ip vrf forwarding A
ip add 172.31.100.1 255.255.255.0
no shut
!
router ospf 100 vrf A
net 172.31.100.1 0.0.0.255 area 0
A2:
interface fa0/0
description To->ISP
ip vrf forwarding A
ip add 172.31.200.1 255.255.255.0
no shut
!
router ospf 100 vrf A
net 172.31.200.1 0.0.0.255 area 0

D. A1:
interface fa0/0
description To->ISP
ip add 172.31.100.1 255.255.255.0
no shut
!
router ospf 100
net 172.31.100.1 0.0.0.255 area 0A2:
interface fa0/0
description To->ISP
ip add 172.31.200.1 255.255.255.0
no shut
!
router ospf 100
net 172.31.200.1 0.0.0.255 area 0 

254、The network administator configured R1 for Control Plane Policing so that the inbound Telnet traffic is policed to 100 kbps. This policy must not apply to traffic
coming in from 10.1.1.1/32 and 172.16.1.1/32 The administrator has configured
this:
access-list 101 permit tcp host 10.1.1.1 any eq 23
access-list 101 permit tcp host 172.16.1.1 any eq 23
!
class-map CoPP-TELNET
match access-group 101
!
policy-map PM-CoPP
class CoPP-TELNET
police 100000 conform transmit exceed drop
!
control-plane
service-policy input PM-CoPP
The network administrator is not getting the desired results. Which set of configurations resolves this issue?
A. no access-list 101
access-list 101 deny tcp host 10.1.1.1 any eq 23
access-list 101 deny tcp host 172.16.1.1 any eq 23
access-list 101 permit ip any any

B. no access-list 101
access-list 101 deny tcp host 10.1.1.1 any eq 23
access-list 101 deny tcp host 172.16.1.1 any eq 23
access-list 101 permit ip any any
!
interface E0/0
service-policy input PM-CoPPC. control-plane
no service-policy input PM-CoPP
!
interface Ethernet 0/0
service-policy input PM-CoPP
D. control-plane
no service-policy input PM-CoPP
service-policy input PM-CoPP

255、

Refer to the exhibit. An OSPF neighbor relationship between R2 and R3 is showing stuck in EXCHANGE/EXSTART state. The neighbor is established between
R1 and R2. The network engineer can ping from R2 to R3 and vice versa, but the neighbor is still down. Which action resolves the issue?
A. Restore the Layer 2/Layer 3 conectivity issue in the ISP network.

B. Match MTU on both router interfaces or ignore MTU.
C. Administrative "shut then no shut" both router interfaces
D. Enable OSPF on the interface, which is required. 

256、

Refer to the exhibit. An engineer is troubleshooting a failed Telnet session from PC to the DHCP server. Which action resolves the issue?
A. Remove sequence 30 and add it back to the IPv6 traffic filter as sequence 5.
B. Remove sequence 20 and add it back to the IPv6 traffic filter as sequence 5.
C. Remove sequence 10 to add the PC source IP address and add it back as sequence 10.
D. Remove sequence 20 for sequence 40 in the access list to allow Telnet 

257、

Refer to the exhibit. The administrator noticed that the connection was flapping between the two ISPs instead of switching to ISP2 when the ISP1 failed. Which action resolves the issue?
A. Include a valid source-interface keyword in the icmp-echo statement.
B. Reference the track object 1 on the default route through ISP2 instead of ISP1.
C. Modifty the static routes to refer both to the next hop and the outgoing intertace.
D. Modify the threshold to match the administrative distance of the ISP2 route. 

258、

Refer to the exhibit. After a security audit, the administrator implemented an ACL in the route reflector. The RR became unreachable from any router in the network. Which two actions resolve the issue? (Choose two.)
A. Enable the ND proxy feature on the default gateway.
B. Configure a link-local address on the Ethernet0/1 interface.
C. Permit ICMPv6 neighbor discovery taffic in the ACL.

D. Remove the ACL entry 80.
E. Change the next hop of the default route to the link-local address of the default gateway. 

259、

Refer to the exhibit. Which command must be configured to make VRF CCNP work?
A. interface Loopback0
vrf forwarding CCNP
B. interface Loopback0
ip address 10.1.1.1 255.255.255.0

C. interface Loopback0
ip address 10.1.1.1 255.255.255.0
vrf forwarding CCNP
D. interface Loopback0
ip address 10.1.1.1 255.255.255.0
ip vrf forwarding CCNP

260、 A network administrator performed a Compact Flash Memory upgrade on a Cisco Catalyst 6509 Switch. Everything is functioning normally except SNMP, which was configured to monitor the bandwidth of key interfaces but the interface indexes are changed. Which global configuration resolves the issue?
A. snmp-server ifindex persist

B. snmp ifindex permanent
C. snmp ifindex persist
D. snmp-server ifindex permanent

261、IPv6 is enabled in the infrastructure to support customers with an IPv6 network over WAN and to connect the head office to branch offices in the local network One of the customers is already running IPv6 and wants to enable IPv6 over the DMVPN network infrastructure between the headend and branch sites. Which configuration command must be appied to establish an mGRE IPv6 tunnel neighborship?
A. ipv6 nhrp holdtime 30
B. tunnel protection mode ipv6
C. tunnel mode gre multipoint ipv6
D. ipv6 unicast-routing

262、

RR
router bgp 100
neighbor 10.1.1.1 remote-as 100
neighbor 10.1.2.2 remote-as 100
neighbor 10.1.3.3 remote-as 100ASBR3
router bgp 100
neighbor 10.1.1.4 remote- as 100
ASBR3
router bgp 100
neighbor 10.1.2.4 remote- as 100
ASBR4
router bgp 100
neighbor 10.1.3.4 remote-as 100
Refer to the exhibit The administrator configured the network devices for end-to end reachability, but the ASBRs are not propagating routes to each other. Which
set of configurations resolves this issue?
A. router bgp 100
neighbor 10.1.1.1 route-reflector-client
neighbor 10.1.2.2 route-reflector-client
neighbor 10.1.3.3 route-reflector-client

B. router bgp 100
neighbor 10.1.1.1 next-hop-self
neighbor 10.1.2.2 next-hop-self
neighbor 10.1.3.3 next-hop-self
C. router bgp 100
neighbor 10.1.1.1 update-source Loopback0
neighbor 10.1.2.2 update-source Loopback0
neighbor 10.1.3.3 update-source Loopback0
D. router bgp 100
neighbor 10.1.1.1 ebgp-multihop
neighbor 10.1.2.2 ebgp-multihop
neighbor 10.1.3.3 ebgp-multihop

263、 A company is expanding business by opening 35 branches over the Internet A network engineer must configure DMVPN at the branch routers to connect with the hub router and allow NHRP to add spoke routers securely to the multicast NHRP mappings automatically. Which configuration meets this requirement at the hub router?
A. interface Tunnel0
ip address 10.0.0.1 255.255.255.0
ip nhrp authentication KEY1
ip nhrp nhs dynamicip nhrp network-id 10
tunnel mode mgre auto
B. interface Tunnel0
ip address 10.0.0.1 255.255.255.0
ip nhrp authentication KEY1
ip nhrp registration no-unique
ip nhrp network-id 10
tunnel mode gre nmba
C. interface Tunnel0
ip address 10.0.0.1 255.255.255.0
ip nhrp authentication KEY1
ip nhrp map multicast dynamic
ip nhrp network-id 10
tunnel mode gre multipoint

D. interface Tunnel0
ip address 10.0.0.1 255.255.255.0
ip nhrp authentication KEY1
ip nhrp map muiticast 224.0.0.0
ip nhrp network-id 10
tunnel mode gre ipv4

264、What is an advantage of implementing BFD?
A. BFD provides faster updates for any flapping route.
B. BFD provides millisecond failure detection.
C. BFD is deployed without the need to run any routing protocol.
D. BFD provides better capabilities to maintain the routing table

265、What is a function of IPv6 Source Guard?
A. It works with address glean or ND to find existing addresses.
B. It inspects ND and DHCP packets to build an address binding table.
C. It denies traffic from known sources and allocated addresses.

D. It notifies the ND protocol to inform hosts if the traffic is denied by it

266、What is the purpose of the DHCPv6 Guard?
A. It messages between a DHCPv6 server and a DHCPv6 client (or relay agent).
B. It shows that clients of a DHCPv6 server are affected.
C. It blocks DHCPv6 messages from relay agents to a DHCPv6 server.
D. It allows DHCPv6 reply and advertisements from (rogue) DHCPv6 servers

267、Which type of ports are protected by IPv6 Source Guard?
A. trunk ports
B. Layer 3 ports
C. Layer 2 ports
D. access ports

268、Reterto the exhibit A network adminstrator is troubleshooting an authentcation failure issue during login into R2 using a RADIUS server user account. The network administrator can ping the RADIUS server, but the user access to SSH is denied on R2. Which action resolves the issue?

A. Modily the aaa command to replace TACACS+ with RADIUS
B. Remove ''local'' from the aaa authentication command
C. Enable AAA authorzation to allow SSH connections
D. Conigure the usemame in RADIUS server database 

269、What does the MP-BGP OPEN message contain?
A. MPLS labels and the IP address of the router that receives the message
B. the version number and the AS number to which the router belongs
C. IP routing information and the AS number to which the router belongs
D. NLRI, path attributes, and IP addresses of the sending and receiving routers

270、What statement about route distinguishes in an MPLS network is true?
A. Route distinguishes make a unique VPNv4 address across the MPLS network.
B. Route distinguishers allow multiple instances of a routing table to coexist within the edge router.
C. Route distinguishes are used for label bindings
D. Route distinguishes define which prefixes are imported and exported on the edge router

271、Refer to the exhibit. An engineer configures the router 10.1.100.10 for EIGRP autosummarization so that R1 should receive the summary route of 10.0.0.0/8.
However, R1 receives more specific /24 routes. Which action resolves this issue?

A. Router R1 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.
B. Router R1 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are received on R1.
C. Router 10.1.100.10 should configure ip route 10.0.0.0 255.0.0.0 null 0 for the routes that are summarized toward R1.
D. Router 10.1.100.10 should configure ip summary address eigrp (AS number) 10.0.0.0 255.0.0.0 for the R1 Fast Ethernet 0/0 connected interface.

272、 Refer to the exhibit. Although summarization is configured for R1 to receive 10.0.0.0/8. more specific routes are received by R1. How should the 10.0.0.0/8 summary route be received from the neighbor, attached to R1 via Fast Ethernet0/0 interface?

A. R1 should configure the ip summary-address eigrp 10.0.0.0.255.0.0.0 command under the Fast Ethernet 0/0 interface.
B. The summarization condition is not met Router 10 1 100.10 requires a route for 10 0.0.0/8 that points to null 0
C. The summarization condition is not met. The network 10.1.100.0/24 should be changed to 172.16.0.0/24.
D. R1 should configure the ip summary-address eigrp 10.0.0.0 0.0.0.255 command under the Fast Ethernet 0/0 interface 

273、Refer to the exhibit. A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network devices using SNMP and TFTP servers. Which configuration prevents changes from unauthorized NMS and TFTP servers?

A. access-list 20 permit 10.221.10.11
access-list 20 deny any log!
snmp-server group NETVIEW v3 priv read NETVIEW access 20
snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20 snmp-server
community Cisc0Us3r RO 20 snmp-server community Cisc0wrus3r RW 20 snmp-server tftp-server-list 20

B. access-list 20 permit 10.221.10.11
access-list 20 deny any log
!
snmp-server group NETVIEW v3 priv read NETVIEW access 20
snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 20 snmp-server
community Cisc0wrus3r RO 20 snmp-server community Cisc0Us3r RW 20 snmp-server tftp-server-list 20
C. access-list 20 permit 10.221.10.11
access-list 20 deny any log
D. access-list 20 permit 10.221.10.11

274、Refer to the exhibit. An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead of current best path. Which action resolves the issue?

A. Configure AS_PATH prepend for the current best path
B. Configure higher MED to select as the best path
C. Configure AS_PATH prepend for the desired best path
D. Configure lower LOCAL_PREF to select as the best path

275、 The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is
limited to 500 kbps. Any traffic that exceeds this limit must be dropped. CoPP failed to capture the desired traffic and the CPU load is getting higher. Which two
configurations resolve the issue? (Choose two.)
access-list 100 permit ip host 172.16.1.99 any
!
class-map CM-ADMIN
match access-group 100
!
policy-map PM-COPP
class CM-ADMIN
police 500000 conform-action transmit
!
interface E0/0
service-policy input PM-COPP
A. interface E0/0
no service-policy input PM-COPP
!
control-plane

service-policy input PM-COPP
B. policy-map PM-COPP
class CM-ADMIN
no police 500000 conform-action transmit
police 500 conform-action transmit
!
control-plane
service-policy input PM-COPP
C. no access-list 100
access-list 100 permit tcp host 172.16.1.99 any eq 80
D. no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80
access-list 100 permit tcp host 172.16.1.99 any eq 443

E. policy-map PM-COPP
class CM-ADMIN
no police 500000 conform-action transmit
police 500 conform-action transmit

276、Refer to the exhibit. A prefix list is created to filter routes inbound to an EIGRP process except for network 10 prefixes After the prefix list is applied no network 10
prefixes are visible in the routing table from EIGRP. Which configuration resolves the issue?
R1(config)#ip prefix-list EIGRP seq 10 deny 0.0.0.0/0 le 32
R1(config)#ip prefix-list EIGRP seq 20 permit 10.0.0.0/8
R1(config)#router eigrp 10
R1(config-router)#distribute-list prefix EIGRP in Ethernet0/0
R1#show ip route eigrp
A. ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9.
B. ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32
C. ip prefix-list EIGRP seq 5 permit 10.0.0.0/8 ge 9 no ip prefix-list EIGRP seq 20 permit 10.0.0.0/8
D. ip prefix-list EIGRP seq 20 permit 10.0.0.0/8 ge 9 ip prefix-list EIGRP seq 10 permit 0.0.0.0/0 le 32

277、What are the two prerequisites to enable BFD on Cisco routers? (Choose two)
A. A supported IP routing protocol must be configured on the participating routers.
B. OSPF Demand Circuit must run BFD on all participating routers.
C. ICMP must be allowed on all participating routers.
D. UDP port 1985 must be allowed on all participating routers
E. Cisco Express Forwarding and IP Routing must be enabled on all participating routers.

278、Which two solutions are used to overcome a flapping link that causes a frequent label binding exchange between MPLS routers? (Choose two)

A. Create link dampening on links to protect the session.
B. Increase input queue on links to protect the session.
C. Create targeted hellos to protect the session.
D. Increase a hold-timer to protect the session.

E. Increase a session delay to protect the session.

279、Refer to the exhibit. An engineer cannot copy the IOS.bin. Which action resolves the issue?

A. Allow file permissions to download the file from the FTP server.
B. Add the IOS.bin file, which does not exist on FTP server.
C. Make memory space on the switch flash or USB drive to download the file
D. Use the copy flash:/ ftp://cisco@10.0.0.2/IOS.bin command

280、 Drag and frop the descriptions from the left onto the corresponding MPLS components on the right.

 281、Drag and frop the descriptions from the left onto the corresponding MPLS components on the right.

相关内容

热门资讯

AWSECS:访问外部网络时出... 如果您在AWS ECS中部署了应用程序,并且该应用程序需要访问外部网络,但是无法正常访问,可能是因为...
AWSElasticBeans... 在Dockerfile中手动配置nginx反向代理。例如,在Dockerfile中添加以下代码:FR...
银河麒麟V10SP1高级服务器... 银河麒麟高级服务器操作系统简介: 银河麒麟高级服务器操作系统V10是针对企业级关键业务...
北信源内网安全管理卸载 北信源内网安全管理是一款网络安全管理软件,主要用于保护内网安全。在日常使用过程中,卸载该软件是一种常...
AWR报告解读 WORKLOAD REPOSITORY PDB report (PDB snapshots) AW...
AWS管理控制台菜单和权限 要在AWS管理控制台中创建菜单和权限,您可以使用AWS Identity and Access Ma...
​ToDesk 远程工具安装及... 目录 前言 ToDesk 优势 ToDesk 下载安装 ToDesk 功能展示 文件传输 设备链接 ...
群晖外网访问终极解决方法:IP... 写在前面的话 受够了群晖的quickconnet的小水管了,急需一个新的解决方法&#x...
不能访问光猫的的管理页面 光猫是现代家庭宽带网络的重要组成部分,它可以提供高速稳定的网络连接。但是,有时候我们会遇到不能访问光...
Azure构建流程(Power... 这可能是由于配置错误导致的问题。请检查构建流程任务中的“发布构建制品”步骤,确保正确配置了“Arti...