CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Cisco®
  5. 300-410

Free 300-410 Exam Braindumps (page: 66)

Page 66 of 156
PDF with 620 Questions

Refer to the exhibit. An administrator configured a Cisco router for TACACS authentication, but the router is using the local enable password instead. Which action resolves the issue?

  1. Configure the aaa authentication login default group admin local if-authenticated command instead.
  2. Configure the aaa authentication login admin group tacacs+ local enable none command instead.
  3. Configure the aaa authentication login admin group tacacs+ local if-authenticated command instead.
  4. Configure the aaa authentication login admin group admin local enable command instead.

Answer(s): D


Reference:

https://community.cisco.com/t5/network-access-control/problem-setting-7606-router-for-tacacs-authentication/td-p/2316903



An administrator attempts to download the .pack NBAR2 file using TFTP from the CPE router to another device over the Gi0/0 interface. The CPE is configured as below:

hostname CPE
!
ip access-list extended WAN
<`¦>
remark => All UDP rules below for WAN ID: S421T18E58F90
permit udp any eq domain any
permit udp any any eq tftp
deny udp any any
!
interface GigabitEthernet0/0
<`¦>
ip access-group WAN in
<`¦>
!
tftp-server flash:pp-adv-csr1000v-1612.1a-37-53.0.0.pack

The transfer fails. Which action resolves this issue?

  1. Make the permit udp any eq tftp any entry the last entry in the WAN ACL
  2. Shorten the file name to the 8+3 naming convention
  3. Change the WAN ACL to permit the entire UDP destination port range
  4. Change the WAN ACL to permit the UDP port 69 to allow TFTP

Answer(s): C



A network administrator must optimize the segment size of the TCP packet on the DMVPN IPsec protected tunnel interface, which carries application traffic from the head office to a designated branch. The TCP segment size must not overwhelm the MTU of the outbound link. Which configuration must be applied to the router to improve the application performance?

  1. interface tunnel30
    ip mtu 1400
    ip tcp payload-size 1360
    !
    crypto ipsec fragmentation before-encryption
  2. interface tunnel30
    ip mtu 1400
    ip tcp adjust-mss 1360
    !
    crypto ipsec fragmentation after-encryption
  3. interface tunnel30
    ip mtu 1400
    ip tcp max-segment 1360
    !
    crypto ipsec fragmentation before-encryption
  4. interface tunnel30
    ip mtu 1400
    ip tcp packet-size 1360
    !
    crypto ipsec fragmentation after-encryption

Answer(s): B


Reference:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dmvpn/configuration/15-mt/sec-conn-dmvpn-15-mt-book/sec-conn-dmvpn-dmvpn.html



In a DMVPN network, the Spoke1 user observed that the voice traffic is coming to Spoke2 users via the hub router. Which command is required on both spoke routers to communicate directly to one another?

  1. ip nhrp nhs multicast
  2. ip nhrp shortcut
  3. ip nhrp map dynamic
  4. ip nhrp redirect

Answer(s): B



Page 66 of 156



Post your Comments and Discuss Cisco® 300-410 exam with other Community members:

Ramu commented on February 24, 2024
I really do not like relying on these exam dumps questions, but this exam has left me no choice. So I purchased this exam dumps and now I feel much relieved and confident preparing for my exam.
Anonymous
upvote

Loren commented on August 06, 2021
I really do not like relying on these exam dumps questions, but this exam has left me no choice. So I purchased this exam dumps and now I feel much relieved and confident preparing for my exam.
UNITED STATES
upvote

Asaya commented on August 04, 2021
It is looking good. I just made my download. Study begins tomorrow.
BRAZIL
upvote

Kalib commented on April 12, 2021
With my busy schedule this is the best source of studying to pass my exam.
AUSTRALIA
upvote