Practice Free 300-410 Exam Online Questions
The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps.
Any traffic that exceeds this limit must be dropped.
access-list 100 permit ip host 172.16.1.99 any
!
class-map CM-ADMIN
match access-group 100
!
policy-map PM-COPP
class CM-ADMIN
police 500000 conform-action transmit
!
interface E0/0
service-policy input PM-COPP
CoPP failed to capture the desired traffic and the CPU load is getting higher.
Which two configurations resolve the issue? (Choose two.)
- A . interface E0/0
no service-policy input PM-COPP
!
control-plane
service-policy input PM-COPP - B . policy-map PM-COPP
class CM-ADMIN
no police 500000 conform-action transmit
police 500 conform-action transmit
!
control-plane
service-policy input PM-COPP - C . no access-list 100
access-list 100 permit tcp host 172.16.1.99 any eq 80 - D . no access-list 100
access-list 100 permit tcp host 172.16.1.99 any eq 80
access-list 100 permit tcp host 172.16.1.99 any eq 443 - E . policy-map PM-COPP
class CM-ADMIN
no police 500000 conform-action transmit
police 500 conform-action transmit
A network administrator is troubleshooting a high utilization issue on the route processor of a router that was reported by NMS The administrator logged into the router to check the control plane policing and observed that the BGP process is dropping a high number of routing packets and causing thousands of routes to recalculate frequently.
Which solution resolves this issue?
- A . Police the cir for BGP, conform-action transmit, and exceed action transmit.
- B . Shape the pir for BGP, conform-action set-prec-transmit, and exceed action set-frde-transmit.
- C . Shape the cir for BGP. conform-action transmit, and exceed action transmit.
- D . Police the pir for BGP, conform-action set-prec-transmit, and exceed action set-clp-transmit.
Refer to the exhibit.
The forwarding entries how that the next hop for prefixes from the 172.16.0.0/16 network is set to 10.2.2.2 instead of 10.1.1.1.
Which action resolves the issue?
- A . Add set ip next hop 10.1.1.1 in route-map RED permit 20.
- B . Add the continue statement in route-map RED permit 10 instead of continue 20.
- C . Remove match ip address prefix-list 1 from route-map RED permit 10.
- D . Remove the continue 20 statement from route-map RED permit 10
Refer to the exhibit.
A network engineer notices that R1 and R2 cannot establish an eBGP peering.
The following messages appear in the log:
Which configuration must the engineer apply to R1 to restore the eBGP peering?
A)
B)
C)
D)
- A . Option A
- B . Option B
- C . Option C
- D . Option D
Refer to the exhibit.
R2 is a route reflector, and R1 and R3 are route reflector clients. The route reflector learns the route to 172.16.25.0/24 from R1, but it does not advertise to R3.
What is the reason the route is not advertised?
- A . R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.
- B . Route reflector setup requires full IBGP mesh between the routers.
- C . In route reflector setup, only classful prefixes are advertised to other clients.
- D . In route reflector setups, prefixes are not advertised from one client to another.
An engineer configured a DHCP server for Cisco IP phones to download its configuration from a TFTP server, but the IP phones failed to toad the configuration.
What must be configured to resolve the issue?
- A . BOOTP port 67
- B . DHCP option 66
- C . BOOTP port 68
- D . DHCP option 69
Refer to the exhibit.
Which action resolves the failed authentication attempt to the router?
- A . Configure aaa authorization login command on line vty 0 4
- B . Configure aaa authorization login command on line console 0
- C . Configure aaa authorization console global command
- D . Configure aaa authorization console command on line vty 0 4
Refer to the exhibit.
An engineer configured SNMP traps to record spoofed packets drop of more than 48000 a minute on the ethernet0/0 interlace. During an IP spoofing attack, the engineer noticed that no notifications have been received by the SNMP server.
Which configuration resolves the issue on R1?
- A . ip verity unicast notification threshold 48000
- B . ip verify unicast notification threshold 8000
- C . ip verify unicast notification threshold 800
- D . ip verify unicast notification threshold 80