cisco 300-410 practice test

Exam Title: Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Last update: Dec 13 ,2025
Question 1


Refer to the exhibit. A network engineer must establish communication between three different customer sites with these requirements:
* Site-A: must be restricted to access to any users at Site-B or Site-C.
* Site-B and Site-C: must be able to communicate between sites and share routes using OSPF.
PE interface configuration:
interface FastEthernet0/0
ip vrf forwarding Site-A
!
interface FastEthernet0/1
ip vrf forwarding SharedSites
!
interface FastEthernet0/2
ip vrf forwarding SharedSites
Which configuration meets the requirements?

  • A. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 10 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 1
  • B. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 20 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 1
  • C. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 10 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 0
  • D. PE(config)#router ospf 10 vrf Site-A PE(config-router)#network 0.0.0.0 255.255.255.255 area 0 PE(config)#router ospf 20 vrf SharedSites PE(config-router)#network 0.0.0.0 255.255.255.255 area 0
Answer:

c

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 2


Refer to the exhibit. An engineer configures DMVPN and receives the hub location prefix of 10.1.1.0/24 on R2 and R3. The R3 prefix of 10.1.3.0/24 is not received on R2, and the R2 prefix 10.1.2.0/24 is not received on R3. Which action resolves the issue?

  • A. Split horizon prevents the routes from being advertised between spoke routers. It should be disabled with the no ip split-horizon eigrp 10 command on the Gi0/0 interface of R1.
  • B. There is no spoke-to-spoke connection. DMVPN configuration should be modified with a manual neighbor relationship configured between R2 and R3 and confirmed by use of the show ip eigrp neighbor command.
  • C. There is no spoke-to-spoke connection. DMVPN configuration should be modified to enable a tunnel connection between R2 and R3 and neighbor relationship confirmed by use of the show ip eigrp neighbor command.
  • D. Split horizon prevents the routes from being advertised between spoke routers. It should be disabled with the command no ip split-horizon eigrp 10 on the tunnel interface of R1.
Answer:

d

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 3

Which of the following is true regarding IPsec Pre-fragmentation (Look-Ahead Fragmentation)? (Choose two.)

  • A. Operates in tunnel mode only
  • B. Operates in transport mode only
  • C. Is used to help in the overall IPsec throughput since the end host is able to avoid packet reassembly after packet decryption.
  • D. Is not dependent on the MTU of the physical interface used for IPsec.
  • E. Does not support Path MTU Discovery
Answer:

ac

vote your answer:
A
B
C
D
E
A 0 B 0 C 0 D 0 E 0
Comments
Question 4

Which protocol supports labeled paths between PE routers in an MPLS network?

  • A. LDP
  • B. RSVP
  • C. MP-BGP
  • D. IGP
Answer:

a

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 5

R2 has a locally originated prefix 192.168.130.0/24 and has these configurations:

What is the result when the route-map OUT command is applied toward an eBGP neighbor R1 (1.1.1.1) by using the neighbor 1.1.1.1 route-map OUT out command?

  • A. R1 sees 192.168.130.0/24 as two AS hops away instead of one AS hop away.
  • B. R1 does not accept any routes other than 192.168.130.0/24
  • C. R1 does not forward traffic that is destined for 192.168.30.0/24
  • D. Network 192.168.130.0/24 is not allowed in the R1 table
Answer:

a

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 6


Refer to the exhibit. An administrator configured a Cisco router for TACACS authentication, but the router is using the local enable password instead. Which action resolves the issue?

  • A. Configure the aaa authentication login default group admin local if-authenticated command instead.
  • B. Configure the aaa authentication login admin group tacacs+ local enable none command instead.
  • C. Configure the aaa authentication login admin group tacacs+ local if-authenticated command instead.
  • D. Configure the aaa authentication login admin group admin local enable command instead.
Answer:

d


Reference:
https://community.cisco.com/t5/network-access-control/problem-setting-7606-router-for-tacacs-authentication/td-p/2316903

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 7



Refer to the exhibit. An engineer configured SNMP Communities on UserSW2 switch, but the SNMP server cannot upload modified configurations to the switch. Which configuration resolves this issue?

  • A. snmp-server community CiscoUs3r RW 11
  • B. snmp-server community Ciscowruser RW 11
  • C. snmp-server group NETADMIN v3 priv read NETVIEW write NETADMIN access 22
  • D. snmp-server group NETVIEW v2c priv read NETVIEW access 11
Answer:

b

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 8

Refer to the exhibit. An engineer configures a static route on a router, but when the engineer checks the route to the destination, a different next hop is chosen.
What is the reason for this?

  • A. Dynamic routing protocols always have priority over static routes.
  • B. The metric of the OSPF route is lower than the metric of the static route.
  • C. The configured AD for the static route is higher than the AD of OSPF.
  • D. The syntax of the static route is not valid, so the route is not considered.
Answer:

c

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 9

What is LDP used for in an LSR?

  • A. to allow for a system-wide exchange of labels across MPLS network
  • B. to create a label across the PE routers for end-to-end path assignment
  • C. to communicate the routes known for a specific interface
  • D. to create a database of label bindings that allow for hop-by-hop forwarding
Answer:

d

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Question 10



Refer to the exhibit. The security department recently installed a monitoring device between routers R3 and R5, which caused a loss of network connectivity for users connected to R5. Troubleshooting revealed that the monitoring device cannot forward multicast packets. The team already updated R5 with the correct configuration. Which configuration must be implemented on R3 to resolve the problem by ensuring R3 as the DR for the R3-R5 segment?

  • A. interface FastEthernet0/0ip address 10.99.53.1 255.255.255.252ip access-group 122 inip ospf network non-broadcastip ospf priority 100!router ospf 10router-id 10.10.3.255network 10.99.53.0 0.0.0.3 area 0neighbor 10.99.53.2!access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1access-list 122 deny 89 any anyaccess-list 122 permit tcp any anyaccess-list 122 permit udp any anyaccess-list 122 permit icmp any any
  • B. interface FastEthernet0/0ip address 10.99.53.1 255.255.255.252ip access-group 122 inip ospf network non-broadcastip ospf priority 0!router ospf 10router-id 10.10.3.255neighbor 10.99.53.2!access-list 122 permit 88 host 10.99.53.2 host 10.99.53.1access-list 122 deny 88 any anyaccess-list 122 permit tcp any anyaccess-list 122 permit udp any anyaccess-list 122 permit icmp any any
  • C. interface FastEthernet0/0ip address 10.99.53.1 255.255.255.252ip access-group 122 inip ospf network non-broadcastip ospf priority 0!router ospf 10router-id 10.10.3.255network 10.99.53.0 0.0.0.3 area 0neighbor 10.99.53.2!access-list 122 permit 89 host 10.99.53.2 host 10.99.53.1access-list 122 deny 89 any anyaccess-list 122 permit tcp any anyaccess-list 122 permit udp any anyaccess-list 122 permit icmp any any
  • D. interface FastEthernet0/0ip address 10.99.53.1 255.255.255.252ip access-group 122 inip ospf network point-to-pointip ospf priority 0!router ospf 10router-id 10.10.3.255network 10.99.53.0 0.0.0.3 area 0neighbor 10.99.53.2!access-list 122 permit 88 host 10.99.53.2 host 10.99.53.1access-list 122 deny 88 any anyaccess-list 122 permit tcp any anyaccess-list 122 permit udp any anyaccess-list 122 permit icmp any any
Answer:

a

vote your answer:
A
B
C
D
A 0 B 0 C 0 D 0
Comments
Page 1 out of 61
Viewing questions 1-10 out of 619
Go To
page 2