cisco 300-410 practice test

implementing cisco enterprise advanced routing and services (enarsi)

Last exam update: May 12 ,2025
Page 1 out of 62. Viewing questions 1-10 out of 619

Question 1

The network administrator is tasked to configure R1 to authenticate telnet connections based on Cisco ISE using RADIUS. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing towards R1 (192.168.1.1) with a shared secret password of Cisco123. If ISE is down, the administrator should be able to connect using the local database with a username and password combination of admin/cisco123.

The administrator has configured the following on R1:

aaa new-model
!
username admin password cisco123
!
radius server ISE1
address ipv4 192.168.1.5
key Cisco123
!
aaa group server tacacs+ RAD-SERV
server name ISE1
!
aaa authentication login RAD-LOCAL group RAD-SERV

ISE has gone down. The Network Administrator is not able to Telnet to R1 when ISE went down. Which two configuration changes will fix the issue? (Choose two.)

  • A. aaa authentication login RAD-SERV group RAD-LOCAL local
  • B. aaa authentication login RAD-LOCAL group RAD-SERV local
  • C. line vty 0 4login authentication RAD-LOCAL
  • D. line vty 0 4login authentication default
  • E. line vty 0 4login authentication RAD-SERV
Mark Question:
Answer:

bc

User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
vote your answer:
A
B
C
D
E
0 / 1000

Question 2


Refer to the exhibit. While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured.
Which command resolves this issue?

  • A. access-class INTERNET in
  • B. ip access-group INTERNET in
  • C. ipv6 traffic-filter INTERNET in
  • D. ipv6 access-class INTERNET in
Mark Question:
Answer:

d

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 3



Refer to the exhibit. A network engineer cannot remote access R3 using Telnet from switch S1. Which action resolves the issue?

  • A. Allow to use the ssh -| admin 10.0.0.1 command on the switch.
  • B. Add the login admin command on the switch.
  • C. Add the transport input telnet command on R3.
  • D. Allow the inbound connection via the exec command on R3.
Mark Question:
Answer:

d

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 4

What does the PE router convert the IPv4 prefix to within an MPLS VPN?

  • A. eBGP path association between the PE and CE sessions
  • B. prefix that combines the ASN, PE router-id, and IP prefix
  • C. 48-bit route combining the IP and PE router-id
  • D. VPN-IPv4 prefix combined with the 64-bit route distinguisher
Mark Question:
Answer:

d

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 5



Refer to the exhibits. London must reach Rome using a faster path via EIGRP if all the links are up, but it failed to take this path. Which action resolves the issue?

  • A. Change the administrative distance of RIP to 150.
  • B. Increase the bandwidth of the link between London and Barcelona.
  • C. Use the network statement on London to inject the 172.16.X.0/24 networks into EIGRP.
  • D. Use the network statement on Rome to inject the 172.16.X.0/24 networks into EIGRP.
Mark Question:
Answer:

d

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 6

Which of the following are valid DHCP options that DHCP servers can be configured to use with DHCP clients when offering a lease? (Choose two.)

  • A. DHCP Option 1: subnet mask
  • B. DHCP Option 3: Lease Duration
  • C. DHCP Option 4: Client host name
  • D. DHCP Option 6: DNS servers
Mark Question:
Answer:

ad

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 7


Refer to the exhibit. R1 is connected with R2 via GigabitEthernet0/0, and R2 cannot ping R1.
What action will fix the issue?

  • A. Fix route dampening configured on the router.
  • B. Replace the SFP module because it is not supported.
  • C. Fix IP Event Dampening configured on the interface.
  • D. Correct the IP SLA probe that failed.
Mark Question:
Answer:

c

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 8

DRAG DROP Drag and drop the MPLS VPN concepts from the left onto the correct descriptions on the right.
Select and Place:

Mark Question:
Answer:

Discussions
0 / 1000

Question 9

Which technique removes the outermost label of an MPLS-tagged packet before the packet is forwarded to an adjacent LER?

  • A. explicit-null
  • B. PHP
  • C. label swap
  • D. label imposition
Mark Question:
Answer:

b

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 10

A customer requested a GRE tunnel through the provider network between two customer sites using loopback to hide internal networks. Which configuration on
R2 establishes the tunnel with R1?

  • A. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1400 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 192.168.20.1 R2(config-if)#tunnel destination 192.168.10.1
  • B. R2(config)#interface Tunnel1 R2(config-if#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1400 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 10.10.2.2 R2(config-if)#tunnel destination 10.10.1.1
  • C. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1500 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 10.10.2.2 R2(config-if)#tunnel destination 10.10.1.1
  • D. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1500 R2(config-if)#ip tcp adjust-mss 1360 R2(config-if)#tunnel source 192.168.20.1 R2(config-if)#tunnel destination 10.10.1.1
Mark Question:
Answer:

b

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000
To page 2