Free 300-410 Exam Braindumps
Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) Questions 137–144 (page: 19)

Updated On: 9-Jul-2026

In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.)

  1. by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways
  2. by various IPv6 guard features to validate the data link layer address
  3. by the recovery mechanism to recover the binding table in the event of a device reboot
  4. by IPv6 routing protocols to securely build neighborships without the need of authentication
  5. by storing hashed keys for IPsec tunnels for the built-in IPsec features

Answer(s): B,C



Refer to the exhibit. The engineer configured and connected Router2 to Router1. The link came up but could not establish a Telnet connection to Router1 IPv6 address of 2001:DB8::1.


Which configuration allows Router2 to establish a Telnet connection to Router1?

  1. ipv6 unicast-routing
  2. permit ICMPv6 on access list INGRESS for Router2 to obtain IPv6 address
  3. permit ip any any on access list EGRESS2 on Router1
  4. IPv6 address on GigabitEthernet0/0

Answer(s): C



An engineer configured Reverse Path Forwarding on an interface and noticed that the routes are dropped when a route lookup fails on that interface for a prefix that is available in the routing table.

Which interface configuration resolves the issue?

  1. ip verify unicast source reachable-via l2-src
  2. ip verify unicast source reachable-via allow-default
  3. ip verify unicast source reachable-via any
  4. ip verify unicast source reachable-via rx

Answer(s): C



Refer to the exhibit. When monitoring an IPv6 access list, an engineer notices that the ACL does not have any hits and is causing unnecessary traffic through the interface


Which command must be configured to resolve the issue?

  1. ip access-group INTERNET in
  2. ipv6 traffic-filter INTERNET in
  3. ipv6 access-class INTERNET in
  4. access-class INTERNET in

Answer(s): B


Reference:

https://www.cisco.com/c/en/us/support/docs/ip/ip-version-6/113126-ipv6-acl-00.html



Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

  1. VACL blocking broadcast frames from nonauthorized hosts
  2. PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes
  3. PVLANs with community ports associated to route advertisements and isolated ports for nodes
  4. IPv4 ACL blocking route advertisements from nonauthorized hosts

Answer(s): B



Refer to the exhibit. Which action resolves the failed authentication attempt to the router?

  1. Configure aaa authorization console global command
  2. Configure aaa authorization console command on line vty 0 4
  3. Configure aaa authorization login command on line console 0
  4. Configure aaa authorization login command on line vty 0 4

Answer(s): A


Reference:

https://community.cisco.com/t5/network-access-control/console-authorization-issue/td-p/2492619



Refer to the exhibit. A network administrator logs into the router using TACACS+ username and password credentials, but the administrator cannot run any privileged commands.


Which action resolves the issue?

  1. Configure the username from a local database
  2. Configure TACACS+ synchronization with the Active Directory admin group
  3. Configure an authorized IP address for this user to access this router
  4. Configure full access for the username from TACACS+ server

Answer(s): D



Refer to the exhibit. AAA server 10.1.1.1 is configured with the default authentication and accounting settings, but the switch cannot communicate with the server.


Which action resolves this issue?

  1. Correct the timeout value.
  2. Match the authentication port.
  3. Correct the shared secret.
  4. Match the accounting port.

Answer(s): B



Viewing page 19 of 81
Viewing questions 145 - 152 out of 640 questions


Post your Comments and Discuss Cisco 300-410 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!