support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Cisco
  4. 300-410

Free 300-410 Exam Braindumps
Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) Questions 129–136 (page: 18)

Updated On: 9-Jul-2026
Page 18 of 81
PDF with 640 Questions

Refer to the exhibit. An engineer is trying to connect to a device with SSH but cannot connect. The engineer connects by using the console and finds the displayed output when troubleshooting. Which command must be used in configuration mode to enable SSH on the device?

  1. no ipssh disable
  2. ipssh enable
  3. ipssh version 2
  4. crypto key generate rsa

Answer(s): D



Which statement about IPv6 ND inspection is true?

  1. It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables.
  2. It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables.
  3. It learns and secures bindings for statefulautoconfiguration addresses in Layer 3 neighbor tables.
  4. It learns and secures bindings for statefulautoconfiguration addresses in Layer 2 neighbor tables.

Answer(s): B


Reference:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-s/ip6f-15-s-book/ip6-snooping.pdf



While troubleshooting connectivity issues to a router, these details are noticed:

-Standard pings to all router interfaces, including loopbacks, are successful.
-Data traffic is unaffected.
-SNMP connectivity is intermittent.
-SSH is either slow or disconnects frequently.

Which command must be configured first to troubleshoot this issue?

  1. show policy-map control-plane
  2. show policy-map
  3. show interface | inc drop
  4. show ip route

Answer(s): A



Refer to the exhibit. Why is user authentication being rejected?

  1. The TACACS+ server expects “user”, but the NT client sends “domain/user”.
  2. The TACACS+ server refuses the user because the user is set up for CHAP.
  3. The TACACS+ server is down, and the user is in the local database.
  4. The TACACS+ server is down, and the user is not in the local database.

Answer(s): D


Reference:

https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/13864-tacacs-pppdebug.html



Refer to the exhibit. Which control plane policy limits BGP traffic that is destined to the CPU to 1 Mbps and ignores BGP traffic that is sent at higher rate?

  1. policy-map SHAPE_BGP
  2. policy-map LIMIT_BGP
  3. policy-map POLICE_BGP
  4. policy-map COPP

Answer(s): D



Which statement about IPv6 RA Guard is true?

  1. It does not offer protection in environments where IPv6 traffic is tunneled.
  2. It cannot be configured on a switch port interface in the ingress direction.
  3. Packets that are dropped by IPv6 RA Guard cannot be spanned.
  4. It is not supported in hardware when TCAM is programmed.

Answer(s): A


Reference:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16/ip6f-xe-16-book/ip6-ra-guard.pdf



An engineer must configure a Cisco router to initiate secure connections from the router to other devices in the network but kept failing.

Which two actions resolve the issue? (Choose two.)

  1. Configure transport input ssh command on the console.
  2. Configure a domain name.
  3. Configure a crypto key to be generated.
  4. Configure a source port for the SSH connection to initiate.
  5. Configure a TACACS+ server and enable it.

Answer(s): B,C



When configuring Control Plane Policing on a router to protect it from malicious traffic, an engineer observes that the configured routing protocols start flapping on that device.

Which action in the Control Plane Policy prevents this problem in a production environment while achieving the security objective?

  1. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction.
  2. Set the conform-action and exceed-action to transmit initially to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction.
  3. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy in the input direction.
  4. Set the conform-action to transmit and exceed-action to drop to test the ACLs and transmit rates and apply the Control Plane Policy in the output direction.

Answer(s): B



  PDF
Viewing page 18 of 81
Viewing questions 137 - 144 out of 640 questions


Post your Comments and Discuss Cisco 300-410 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!