Free 300-410 Exam Braindumps

- (Exam Topic 3)

Refer to the exhibit.
A shoe retail company implemented the uRPF solution for an antispoofing attack. A network engineer received the call that the branch A server is under an IP spoofing attack. Which configuration must be implemented to resolve the attack?
A)

B)

C)

D)

1. A. Option A
2. B. Option B
3. C. Option C
4. D. Option D

Correct Answer: C

- (Exam Topic 1)
Refer to the exhibit.

After applying IPsec, the engineer observed that the DMVPN tunnel went down, and both spoke-to-spoke and hub were not establishing. Which two actions resolve the issue? (Choose two.)

1. A. Configure the crypto isakmp key cisco address 192.1.1.1 on R2 and R3
2. B. Configure the crypto isakmp key cisco address 0.0.0.0 on R2 and R3.
3. C. Change the mode from mode tunnel to mode transport on R3
4. D. Change the mode from mode transport to mode tunnel on R2.
5. E. Remove the crypto isakmp key cisco address 10.1.1.1 on R2 and R3

Correct Answer: AD
*When using DMVPN with IPSec, it is unnecessary to use tunnel mode. Because DMVPN uses GRE which means that a new IP header is already added by GRE. The GRE encapsulation happens on the tunnel interface before the encryption process takes place.

- (Exam Topic 3)
Refer to the exhibit.

The administrator configured the network devise for end-to-end reachability, but the ASBRs are not propagation routes to each other. Which set of configuration resolves this issue?

1. A. router bgp 100 neighbor 10.1.1.1 route-reflector-client neighbor 10.1.2.2 route-reflector-client neighbor 10.1.3.3 route-reflector-client
2. B. router bgp 100 neighbor 10.1.1.1 next-hop-self neighbor 10.1.2.2 next-hop-self neighbor 10.1.3.3 next-hop-self
3. C. router bgp 100neighbor 10.1.1.1 update-source Loopback0neighbor 10.1.2.2 update-source Loopback0neighbor 10.1 3.3 update-source Loopback0
4. D. router bgp 100neighbor 10.1.1.1 ebgp-multihopneighbor 1021.2.2 ebgp-multihopneighbor 10.1.3.3 ebgp-multihop

Correct Answer: A

- (Exam Topic 1)
Which label operations are performed by a label edge router?

1. A. SWAP and POP
2. B. SWAP and PUSH
3. C. PUSH and PHP
4. D. PUSH and POP

Correct Answer: D
A label edge router (LER, also known as edge LSR) is a router that operates at the edge of an MP and acts as the entry and exit points for the network. LERs push an MPLS label onto an incoming packet and pop it off an outgoing packet.
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx-os/mpls/configuration/guide/mpls_cg/mp_mp

- (Exam Topic 3)
What must be configured by the network engineer to circumvent AS_PATH prevention mechanism in IP/VPN Hub and Spoke deployment scenarios?

1. A. Use allows in and as-override at all Pes.
2. B. Use allowas in and as-override at the PE-Hub.
3. C. Use Allowas-in the PE_Hub
4. D. Use as-override at the PE_Hub

Correct Answer: D