3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #601 Topic 1

What are two features of BFD? (Choose two.)

A. reliable

B. replaces hello messages Most Voted

C. requires routing protocols

D. scalable Most Voted

E. intensive on CPU for Layer 2 links

Correct Answer: BD

Community vote distribution

BD (100%)

Question #602 Topic 1

What is the role of LDP in MPLS networks?

A. It creates MPLS packet forwarding along with the IGP routes.

B. It enables label binding information to exchange with peer LSRs. Most Voted

C. It disables label binding information to exchange with peer LSRs.

D. It enables label binding that exchanges route descriptors.

Correct Answer: B

Community vote distribution

B (100%)

Question #603 Topic 1

Which Layer 3 VPN attribute allows different customers to connect to the same MPLS network with overlapping IP ranges?

A. RT

B. RD Most Voted

C. VRF

D. MP-BGP

Correct Answer: B

Community vote distribution

B (100%)

https://www.examtopics.com/exams/cisco/300-410/view/5/ 1/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #604 Topic 1

Refer to the exhibit. An engineer configured IP SLA to monitor a next hop on a router for reachability. When the next hop is unreachable, the router

is executing tracking and falling over another route, but packet loss is experienced because the reachability is flapping. Which action resolves the

issue?

A. Increase the frequency of the sla probe to 60.

B. Append delay up 60 down 60 to the track command. Most Voted

C. Append delay up 0 down 0vto the track command.

D. Increase the timeout of the sla probe to 6000.

Correct Answer: B

Community vote distribution

B (100%)

https://www.examtopics.com/exams/cisco/300-410/view/5/ 2/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #605 Topic 1

Refer to the exhibit. The services at branch B are down. An engineer notices that router A and router B are not exchanging any routes. Which

configuration resolves the issue on router B?

A.

B.

C.

https://www.examtopics.com/exams/cisco/300-410/view/5/ 3/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

D. Most Voted

Correct Answer: D

Community vote distribution

D (100%)

Question #606 Topic 1

What is the use of IPv6 snooping?

A. captures IPv6 routing protocol packets to analyze

B. requires an external IPv6 packet analyzer

C. required for the operation of IPv6 RA Guard

D. captures any type of user traffic to create a binding table Most Voted

Correct Answer: D

Community vote distribution

D (86%) 14%

https://www.examtopics.com/exams/cisco/300-410/view/5/ 4/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #607 Topic 1

Refer to the exhibit. An engineer must troubleshoot a connectivity issue impacting the redistribution of the subnet 172.16.2.48/28 into the OSPF

domain. Which configuration on router R1 advertises this subnet into the OSPF domain?

A. R1(config)#route-map CCNP permit 10

R1(config-route-map)#match tag 200

https://www.examtopics.com/exams/cisco/300-410/view/5/ 5/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

R1(conflg-route-map)#exit -

R1(config)#router ospf 10 -

R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

Most Voted

B. R1(config)#route-map CCNP deny 10

R1(conflg-route-map)#match tag 200

R1(config)#route-map CCNP permit 10

R1(config)#router ospf 10 -

R1(conflg-router)#redistrlbute eigrp 100 subnets route-map CCNP

C. R1(config)#route-map CCNP permit 10

R1(config-route-map)#match route-type internal

R1(config)#router ospf 10 -

R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

D. R1(config)#route-map CCNP permit 10

R1(config-route-map)#match route-type level-2

R1(config)#router ospf 10 -

R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

Correct Answer: A

Community vote distribution

A (75%) B (25%)

https://www.examtopics.com/exams/cisco/300-410/view/5/ 6/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #608 Topic 1

SIMULATION

Guidelines

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.

• Refer to the Topology tab to access the device console(s) and perform the tasks.

• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

• All necessary preconfigurations have been applied.

• Do not change the enable password or hostname for any device.

• Save your configurations to NVRAM before moving to the next item.

• Click Next at the bottom of the screen to submit this lab and move to the next question.

• When Next is clicked, the lab closes and cannot be reopened.

Topology

Tasks

Configure IPSec security policy on tunnel interfaces to ensure data confidentiality and integrity where mGRE tunnels are up and running between

HUB and SPOKE routers.

1. Configure the ISAKMP policy parameters with the following attributes:

• AES256

https://www.examtopics.com/exams/cisco/300-410/view/5/ 7/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

• SHA256

• Group2

• lifetime 86400

2. Ensure that GRE IP Header should be encrypted inside the IPSec packet. Verify IPSec security association and ISAKMP encrypted key. Use

ISAKMP key "abc123".

3. Configure a flexible ISAKMP Policy on the HUB to add peers that have the dynamic IP addresses where SPOKES must add HUB IP static entry

using an encrypted key. Use a single command to configure it. Use IPSec phase-2 transform-set name as T-SET and IPSec Profile name as ’IPSEC-

PROFILE’.

https://www.examtopics.com/exams/cisco/300-410/view/5/ 8/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Correct Answer:

https://www.examtopics.com/exams/cisco/300-410/view/5/ 9/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #609 Topic 1

Which feature drops packets if the source address is not found in the snooping table?

A. IPv6 Destination Guard

B. IPv6 Source Guard Most Voted

C. Binding Table Recovery

D. IPv6 Prefix Guard

Correct Answer: B

Community vote distribution

B (100%)

https://www.examtopics.com/exams/cisco/300-410/view/5/ 10/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #610 Topic 1

Refer to the exhibit. An engineer must advertise LAN network 192.168.1.0 of router A to router B through OSPF. The engineer notices that router B

was configured, but the LAN network of router A is not in the routing table of router B. Which configuration on router A resolves the problem?

A.

https://www.examtopics.com/exams/cisco/300-410/view/5/ 11/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

B.

Most Voted

C.

D.

Correct Answer: B

Community vote distribution

B (100%)

https://www.examtopics.com/exams/cisco/300-410/view/5/ 12/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #611 Topic 1

Refer to the exhibit. R1 is multihomed to ISP1 and ISP2. uRPF strict mode has been configured on both interfaces uplinked to the ISPs. Traffic

destined to the Internet over ISP1 returns to R1 via ISP2 and is immediately dropped.

Which configuration changes address this issue and allow return traffic from the other ISP?

A. R1(config)#interface fastethernet 0/1

R1(config-if)# ip verify unicast source reachable-via any

B. R1(config)#interface fastethernet 0/1

R1(config-if)# ip verify unicast source reachable-via any allow-default Most Voted

C. R1(config)#interface fastethernet 0/0

R1(config-if)# no ip verify unicast source reachable-via any allow-default

D. R1(config)#interface fastethernet 0/0

R1 (config-if)# ip verify unicast source reachable-via rx

Correct Answer: B

Community vote distribution

B (63%) A (38%)

https://www.examtopics.com/exams/cisco/300-410/view/5/ 13/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #612 Topic 1

Refer to the exhibit. Routers R1 and R2 exchange routes to each other's loopback through OSPF. Telnet traffic must be blocked from R2 Lo0 to R1

Lo2. Which configuration resolves the issue?

https://www.examtopics.com/exams/cisco/300-410/view/5/ 14/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

A.

B.

https://www.examtopics.com/exams/cisco/300-410/view/5/ 15/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

C.

Most Voted

D.

Correct Answer: C

Community vote distribution

C (89%) 11%

https://www.examtopics.com/exams/cisco/300-410/view/5/ 16/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #613 Topic 1

Refer to the exhibit. After an engineer configured a new Cisco router as a DHCP server, users reported two primary issues:

• Devices in the HR subnet have intermittent connectivity problems.

• Workstations in the LEGAL subnet cannot obtain IP addresses.

Which configurations must the engineer apply to ROUTER_1 to restore connectivity for the affected devices?

A.

B.

C.

https://www.examtopics.com/exams/cisco/300-410/view/5/ 17/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

D. Most Voted

Correct Answer: D

Community vote distribution

D (100%)

https://www.examtopics.com/exams/cisco/300-410/view/5/ 18/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #614 Topic 1

Refer to the exhibit. The default route from R1 must be withdrawn from the routing table if R1 cannot ping 10.1.1.1, but it is not working correctly.

Which configuration resolves the issue?

A.

Most Voted

B.

C.

https://www.examtopics.com/exams/cisco/300-410/view/5/ 19/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

D.

Correct Answer: A

Community vote distribution

A (100%)

Question #615 Topic 1

What is the purpose of the DHCPv6 Guard?

A. It messages between a DHCPv6 server and a DHCPv6 client (or relay agent).

B. It allows DHCPv6 reply and advertisements from (rogue) DHCPv6 servers.

C. It shows that clients of a DHCPv6 server are affected.

D. It blocks DHCPv6 messages from relay agents to a DHCPv6 server. Most Voted

Correct Answer: D

Community vote distribution

D (58%) A (25%) C (17%)

Question #616 Topic 1

An engineer must configure encrypted packets for a single router OSPF neighborship. Which configuration meets this requirement?

A.

B.

Most Voted

C.

D.

Correct Answer: B

Community vote distribution

B (100%)

https://www.examtopics.com/exams/cisco/300-410/view/5/ 20/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #617 Topic 1

Refer to the exhibit. Customer B has decided not to receive any routes from R1 that originated outside the AS 100. Which AS path access list must

the engineer choose to meet this requirement?

A. ip as-path access-list 1 permit ^10[0-9]*$

B. ip as-path access-list 1 permit ^100$ Most Voted

C. ip as-path access-list 1 permit _100$

D. ip as-path access-list 1 permit _100_

Correct Answer: B

Community vote distribution

B (100%)

https://www.examtopics.com/exams/cisco/300-410/view/5/ 21/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #618 Topic 1

Refer to the exhibit. An engineer is troubleshooting an issue using the debug ip packet command and notices that no time stamps are shown on

R4 to establish the event time. Which configuration resolves this issue by showing time stamps regardless of the time zone in R4 logs?

A. service timestamps log datetime localtime msec

B. service timestamps debug datetime localtime msec Most Voted

C. service timestamps log datetime msec show-timezone

D. service timestamps debug datetime msec show-timezone

Correct Answer: B

Community vote distribution

B (57%) D (43%)

Question #619 Topic 1

How do devices operate in MPLS L3VPN topology?

A. P routers provide connectivity between PE devices with MPLS switching.

B. P and associated PE routers with IGP populate the VRF table in different VPNs.

C. CE routers connect to the provider network and perform LSP functionality.

D. P routers support PE to PE VPN tunnel without LSP functionality.

https://www.examtopics.com/exams/cisco/300-410/view/5/ 22/23
3/13/25, 8:36 AM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics

Question #620 Topic 1

Refer to the exhibit. The engineer is reviewing the logs on the DENVER router and notices that this error message repeats constantly:

*Jun 12 13:42:03.399: %TCP-6-BADAUTH: No MD5 digest from 10.40.1.1(27174) to 10.40.1.2(179) tableid - 0

Which action resolves the issue?

A. Configure OSPF link authentication on the router with IP address 10.40.1.1.

B. Configure NTP authentication on the router with IP address 10.40.1.1.

C. Configure BGP authentication on the router with IP address 10.40.1.2.

D. Configure BGP authentication on the router with IP address 10.40.1.1. Most Voted

Correct Answer: D

Community vote distribution

D (100%)

Browse atleast 50% to increase passing rate

 Previous Questions

Viewing page 5 out of 5 pages.

Viewing questions 201-220 out of 620 questions

https://www.examtopics.com/exams/cisco/300-410/view/5/ 23/23