[2023年11月] 無料300-410試験問題集試験点数を伸ばそう [Q103-Q128]

[2023年11月] 無料300-410試験問題集試験点数を伸ばそう

2023年最新の300-410実際問題集には試験のコツがあるPDF試験材料

Cisco 300-410認定試験では、高度なルーティングプロトコル、VPNテクノロジー、QoS、ネットワークセキュリティなど、幅広いトピックをカバーしています。候補者は、試験に合格するためにこれらのトピックを深く理解する必要があります。また、この試験では、Cisco Technologiesを使用してエンタープライズネットワークソリューションの実装と管理において、候補者が実践的な経験を積む必要があります。

質問 # 103
Refer to the exhibit.

The administrator can see the traps for the failed login attempts, but cannot see the traps of successful login attempts. What command is needed to resolve the issue?

A. Configure logging history 4
B. Configure logging history 5
C. Configure logging history 3
D. Configure logging history 2

正解：B

解説：
Explanation
By default, the maximum severity sent as a syslog trap is warning. That is why you see syslog traps for login failures. Since a login success is severity 5 (notifications), those syslog messages will not be converted to traps. To fix this, configure:

Note:
The syntax of login block is:
login block-for seconds attempts tries within seconds

質問 # 104
Drag and drop the MPLS VPN device types from the left onto the definitions on the right.

正解：

解説：

質問 # 105
Refer to the exhibit.

Why is user authentication being rejected?

A. The TACACS+ server expects "user", but the NT client sends "domain/user".
B. The TACACS+ server is down, and the user is not in the local database.
C. The TACACS+ server refuses the user because the user is set up for CHAP.
D. The TACACS+ server is down, and the user is in the local database.

正解：B

質問 # 106
Refer to the exhibit.

An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+ Which action produces the desired configuration?

A. Replace the capital "C" with a lowercase "c" m the aaa authentication login Console local command
B. Add the aaa authentication login default group tacacs+ local-case command to the global configuration
C. Add the aaa authentication login default none command to the global configuration
D. Add the login authentication Console command to the line configuration

正解：C

質問 # 107
Refer to the exhibit.

The R1 and R2 configurations are:

The neighbor is not coming up. Which two sets of configurations bring the neighbors up? (Choose two.)

A. R1
ip route 10.1.1.2 255.255.255.255 192.168.1.2
!
router bgp 100
neighbor 10.1.1.2 disable-connected-check
neighbor 10.1.1.2 update-source Loopback0
B. R2
ip route 10.1.1.1 255.255.255.255 192.168.1.1
!
router bgp 200
neighbor 10.1.1.1 disable-connected-check
neighbor 10.1.1.1 update-source loopback 0
C. R1
ip route 10.1.1.2 255.255.255.255 192.168.1.2
!
router bgp 100
neighbor 10.1.1.1 ttl-security hops 1
neighbor 10.1.1.2 update-source loopback 0
D. R2
ip route 10.1.1.2 255.255.255.255 192.168.1.2
!
router bgp 100neighbor 10.1.1.2 ttl-security hops 1
neighbor 10.1.1.2 update-source loopback 0
E. R2
ip route 10.1.1.1 255.255.255.255 192.168.1.1
!
router bgp 200
neighbor 10.1.1.1 tti-security hops 1
neighbor 10.1.1.1 update-source loopback 0

正解：A、B

質問 # 108
Refer to the exhibit.

An engineer must configure a LAN-to-LAN IPsec VPN between R1 and the remote router. Which IPsec Phase 1 configuration must the engineer use for the local router?

A. crypto isakmp policy 5
authentication pre-share
encryption 3des
hash md5
group 2
!
crypto isakmp key cisco123 address 199.1.1.1
B. crypto isakmp policy 5
authentication pre-share
encryption 3des
hash md5
group 2
!
crypto isakmp key cisco123 address 200.1.1.3
C. crypto isakmp policy 5
authentication pre-share
encryption 3des
hash sha
group 2
!
crypto isakmp key cisco123 address 200.1.1.3
D. crypto isakmp policy 5
authentication pre-share
encryption 3des
hash md5
group 2
!
crypto isakmp key cisco123! address 199.1.1.1

正解：C

解説：
Explanation
In the "crypto isakmp key ... address " command, the address must be of the IP address of the other end (which is 200.1.1.3 in this case) so Option A and Option B are correct. The difference between these two options are in the hash SHA or MD5 method but both of them can be used although SHA is better than MD5 so we choose Option A the best answer.
Note: Cisco no longer recommends using 3DES, MD5 and DH groups 1, 2 and 5.
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_imgmt/configuration/xe-16-
5/sec-ipsec-management-xe-16-5-book/sec-ipsec-usability-enhance.html

質問 # 109
Refer to the exhibit.

An administrator must configure the router with OSPF for IPv4 and IPv6 networks under a single process. The OSPF adjacencies are not established and did not meet the requirement. Which action resolves the issue?

A. Replace OSPF process 10 on the interface with OSPF process 1, and configure an additional router ID with IPv6 address.
B. Replace OSPF process 10 on the interface with OSPF process 1, and remove process 10 from the global configuration.
C. Replace OSPF process 10 on the interface with OSPF process 1, for the VPv6 addressma nd remove process route ID with IPv6 address.
D. Replace OSPF process 10 on the interface with OSPF process 1 for the IPv4 address, and remove process 10 from the global configuration.

正解：B

質問 # 110
Users were moved from the local DHCP server to the remote corporate DHCP server. After the move, none of the users were able to use the network.
Which two issues will prevent this setup from working properly? (Choose two)

A. The DHCP server IP address configuration is missing locally
B. Auto-QoS is blocking DHCP traffic.
C. The broadcast domain is too large for proper DHCP propagation
D. 802.1X is blocking DHCP traffic
E. The route to the new DHCP server is missing

正解：A、E

質問 # 111
White working with software images, an engineer observes that Cisco DNA Center cannot upload its software image directly from the device.
Why is the image not uploading?

A. The software image for the device is in bundle mode
B. The device has lost connectivity to Cisco DNA Center.
C. The software image for the device is in install mode.
D. The device must be resynced to Cisco DNA Center

正解：C

質問 # 112
Refer to the exhibit.

Refer to the exhibit While troubleshooting an issue on the network, an engineer notices that a TCP Connect operation failed on port 3000 between R101 and R201. Which command must be configured on R201 to respond to the R101 IP SLA configurations with a control connection on UDP port 1967?

A. ip sla responder tcp-connect ipaddress 1.1.1.1 port 3000
B. ip sla responder udp-echo ipaddress 1.1.1.1 port 1967
C. ip sla responder tcp-connect ipaddress 2.2.2.2 port 3001
D. ip sla responder

正解：B

質問 # 113

An engineer sets up a DMVPN connection to connect branch 1 and branch 2 to HQ branch 1 and branch 2 cannot communicate with each other. Which change must be made to resolve this issue?

A. Option A
B. Option B
C. Option C
D. Option D

正解：D

解説：
Explanation
R1(config)#int tunnel 1
R1(config-if) no ip split-horizon eigrp 100

質問 # 114
A network administrator is trying to access a branch router using TACACS+ username and password credentials, but the administrator cannot log in to the router because the WAN connectivity is down. The branch router has following AAA configuration:

Which command will resolve this problem when WAN connectivity is down?

A. aaa authentication login default group tacacs+ enable
B. aaa authentication login default group tacacs+ local
C. aaa authentication login console group tacacs+ enable
D. aaa authentication login default group tacacs+ console

正解：B

解説：
With the "aaa authentication login default group tacacs+ local " command configured, when logging in, the password supplied will be attempted to be verified by the TACACS+ server before access is granted. If the server is unavailable/unreachable, then the switch will fall back to using the local authentication database.

質問 # 115
What must be configured by the network engineer to circumvent AS_PATH prevention mechanism in IP/VPN Hub and Spoke deployment scenarios?

A. Use allows in and as-override at all Pes.
B. Use Allowas-in the PE_Hub
C. Use allowas in and as-override at the PE-Hub.
D. Use as-override at the PE_Hub

正解：D

質問 # 116
Refer to the exhibit.

All the serial between R1, R2, and R3 have the Same bandwidth. User on the 192.168.1.0/24 network report slow response times while they access resource on network 192.168.3.0/24. When a traceroute is run on the path. It shows that the packet is getting forwarded via R2 to R3 although the link between R1 and R3 is still up. What must the network administrator to fix the slowness?

A. Change the Administrative Distance of EIGRP to 5.
B. Remove the static route on R1.
C. Add a static route on R1 using the next hop of R3.
D. Redistribute theR1 route to EIGRP

正解：B

質問 # 117
Refer to the exhibit.

While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured.
Which command resolves this issue?

A. access-class INTERNET in
B. ipv6 access-class INTERNET in
C. ip access-group INTERNET in
D. ipv6 traffic-filter INTERNET in

正解：B

質問 # 118

Refer to the exhibit. The DHCP client is unable to receive an IP address from the DHCP server RouterB is configured as follows:
Interface fastethernet 0/0
description Client DHCP ID 394482431
Ip address 172 31 11 255 255.255 0
!
ip route 172.16.1.0 255 255 255.0 10.1.1.2
Which command is required on the fastethernet 0/0 interface of RouterB to resolve this issue?

A. RouterB(config-if)#lp helper-address 172.31.1.1
B. RouterB(config-if)#lp helper-address 172.16.1.1
C. RouterBiconfig-ififclp helper-address 255.255 255 255
D. RouterB(config-if)#lp helper-address 172.16.1.2

正解：D

質問 # 119
Which command displays the IP routing table information that is associated with VRF-Lite?

A. show ip protocols vrf
B. show ip route vrf
C. show ip vrf
D. show run vrf

正解：B

解説：
Section: Layer 3 Technologies
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/50sg/configuration/guide/ Wrapper-46SG/vrf.html#wp1045708

質問 # 120
Drag and drop the OSPF adjacency states from the left onto the correct descriptions on the right.

正解：

解説：

Reference:
Down
This is the first OSPF neighbor state. It means that no information (hellos) has been received from this neighbor, but hello packets can still be sent to the neighbor in this state.
During the fully adjacent neighbor state, if a router doesn't receive hello packet from a neighbor within the Router Dead Interval time (RouterDeadInterval = 4*HelloInterval by default) or if the manually configured neighbor is being removed from the configuration, then the neighbor state changes from Full to Down.
Attempt
This state is only valid for manually configured neighbors in an NBMA environment. In Attempt state, the router sends unicast hello packets every poll interval to the neighbor, from which hellos have not been received within the dead interval.
Init
This state specifies that the router has received a hello packet from its neighbor, but the receiving router's ID was not included in the hello packet. When a router receives a hello packet from a neighbor, it should list the sender's router ID in its hello packet as an acknowledgment that it received a valid hello packet.
2-Way
This state designates that bi-directional communication has been established between two routers. Bi-directional means that each router has seen the other's hello packet. This state is attained when the router receiving the hello packet sees its own Router ID within the received hello packet's neighbor field. At this state, a router decides whether to become adjacent with this neighbor. On broadcast media and non-broadcast multiaccess networks, a router becomes full only with the designated router (DR) and the backup designated router (BDR); it stays in the 2-way state with all other neighbors. On Point-to-point and Point-to-multipoint networks, a router becomes full with all connected routers.
At the end of this stage, the DR and BDR for broadcast and non-broadcast multiaccess networks are elected. For more information on the DR election process, refer to DR Election.
Note: Receiving a Database Descriptor (DBD) packet from a neighbor in the init state will also a cause a transition to 2-way state.
Exstart
Once the DR and BDR are elected, the actual process of exchanging link state information can start between the routers and their DR and BDR. (ie. Shared or NBMA networks).
In this state, the routers and their DR and BDR establish a master-slave relationship and choose the initial sequence number for adjacency formation. The router with the higher router ID becomes the master and starts the exchange, and as such, is the only router that can increment the sequence number. Note that one would logically conclude that the DR/BDR with the highest router ID will become the master during this process of master-slave relation. Remember that the DR/BDR election might be purely by virtue of a higher priority configured on the router instead of highest router ID. Thus, it is possible that a DR plays the role of slave. And also note that master/slave election is on a per-neighbor basis.
Exchange
In the exchange state, OSPF routers exchange database descriptor (DBD) packets. Database descriptors contain link-state advertisement (LSA) headers only and describe the contents of the entire link-state database. Each DBD packet has a sequence number which can be incremented only by master which is explicitly acknowledged by slave. Routers also send link-state request packets and link-state update packets (which contain the entire LSA) in this state. The contents of the DBD received are compared to the information contained in the routers link-state database to check if new or more current link-state information is available with the neighbor.
Loading
In this state, the actual exchange of link state information occurs. Based on the information provided by the DBDs, routers send link-state request packets. The neighbor then provides the requested link-state information in link-state update packets. During the adjacency, if a router receives an outdated or missing LSA, it requests that LSA by sending a link-state request packet. All link-state update packets are acknowledged.
Full
In this state, routers are fully adjacent with each other. All the router and network LSAs are exchanged and the routers' databases are fully synchronized.
Full is the normal state for an OSPF router. If a router is stuck in another state, it is an indication that there are problems in forming adjacencies. The only exception to this is the 2-way state, which is normal in a broadcast network. Routers achieve the FULL state with their DR and BDR in NBMA/broadcast media and FULL state with every neighbor in the remaining media such as point-to-point and point-to-multipoint.
Note: The DR and BDR that achieve FULL state with every router on the segment will display FULL/DROTHER when you enter the show ip ospf neighbor command on either a DR or BDR. This simply means that the neighbor is not a DR or BDR, but since the router on which the command was entered is either a DR or BDR, this shows the neighbor as FULL/DROTHER.

質問 # 121
Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.

正解：

解説：

質問 # 122
Refer to the exhibit.

Refer to the exhibit.
An engineer configured route exchange between two different companies for a migration project EIGRP routes were learned in router C but no OSPF routes were learned in router A.
Which configuration allows router A to receive OSPF routes?

A. Option D
B. Option A
C. Option C
D. Option B

正解：D

質問 # 123
Refer to the exhibit.

A network is under a cyberattack. A network engineer connected to R1 by SSH and enabled the terminal monitor via SSH session to find the source and destination of the attack. The session was flooded with messages, which made it impossible for the engineer to troubleshoot the issue. Which command resolves this issue on R1?

A. #terminal no monitor
B. (config)#terminal no monitor
C. (config)#no terminal monitor
D. no terminal monitor

正解：A

質問 # 124
Refer to the exhibit.

The output of the trace route from R5 shows a loop in the network. Which configuration prevents this loop?
A)

B)

C)

D)

A. Option D
B. Option B
C. Option A
D. Option C

正解：C

質問 # 125
Refer to the exhibit.

A)

B)

C)

D)

A. Option
B. Option
C. Option
D. Option

正解：B

質問 # 126
Refer to the exhibit.

ISP 1 and ISP 2 directly connect to the Internet. A customer is tracking both ISP links to achieve redundancy and cannot see the Cisco IOS IP SLA tracking output on the router console. Which command is missing from the IP SLA configuration?

A. Start-time immediately
B. Start-time 00:00
C. Start-time now
D. Start-time 0

正解：C

解説：
Reference:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsla/configuration/15-mt/sla-15-mt-book/sla_icmp_echo.html

質問 # 127
Refer to the exhibits.

A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping
192.168.3.1 from the LA router. Which set of configurations fixes the issue?