Free 300-410 Exam braindumps download (300-410 exam dumps Free)

QUESTION: 145 Exam Topic: Infrastructure Security

Refer to the exhibit. R1 is being monitored using SNMP and monitoring devices are getting only partial information.

What action should be taken to resolve this issue?

Modify the CoPP policy to increase the configured exceeded limit for SNMP.
Modify the access list to include snmptrap.
Modify the CoPP policy to increase the configured CIR limit for SNMP.
Modify the access list to add a second line to allow udp any anyeqsnmp.

Answer(s): B

Show Answer Next Question

QUESTION: 146 Exam Topic: Infrastructure Security

Refer to the exhibit. A client is concerned that passwords are visible when running this show archive log config all.

Which router configuration is needed to resolve this issue?

MASS-RTR(config)#aaa authentication arap
MASS-RTR(config-archive-log-cfg)#password encryption aes
MASS-RTR(config)#service password-encryption
MASS-RTR(config-archive-log-cfg)#hidekeys

Answer(s): D

Show Answer Next Question

QUESTION: 147 Exam Topic: Infrastructure Security

Refer to the exhibit. BGP is flapping after the CoPP policy is applied. What are the two solutions to fix the issue? (Choose two.)

Configure a higher value for CIR under the Class COPP-CRITICAL-7600.
Configure a higher value for CIR under the default class to allow more packets during peak traffic.
Configure BGP in the COPP-CRITICAL-7600 ACL.
Configure IP CEF for CoPP policy and BGP to work.
Configure a three-color policer instead of two-color policer under Class COPP-CRITICAL-7600.

Answer(s): B,C

Show Answer Next Question

QUESTION: 148 Exam Topic: Infrastructure Security

Refer to the exhibit. A network administrator configured an IPv6 access list to allow TCP return traffic only, but it is not working as expected.

Which changes resolve this issue?

Answer(s): A

Show Answer Next Question

QUESTION: 149 Exam Topic: Infrastructure Security

What are two functions of IPv6 Source Guard? (Choose two.)

It works independent from IPv6 neighbor discovery.
It denies traffic from unknown sources or unallocated addresses.
It uses the populated binding table for allowing legitimate traffic.
It denies traffic by inspecting neighbor discovery packets for specific patterns.
It blocks certain traffic by inspecting DHCP packets for specific sources.

Answer(s): B,C

Show Answer Next Question

QUESTION: 150 Exam Topic: Infrastructure Security

Refer to the exhibit. Which two actions restrict access to router R1 by SSH? (Choose two.)

Remove class-map ANY from service-policy CoPP.
Configure transport output ssh on line vty and remove sequence 20 from access list 100.
Configure transport input ssh on line vty and remove sequence 30 from access list 100.
Remove sequence 10 from access list 100 and add sequence 20 deny tcp any anyeq telnet to access list 199.
Configure transport output ssh on line vty and remove sequence 10 from access list 199.

Answer(s): A,C

Show Answer Next Question

QUESTION: 151 Exam Topic: Infrastructure Security

Refer to the exhibit. Which action resolves intermittent connectivity observed with the SNMP trap rackets?

Decrease the committed burst size of the mgmt class map.
Increase the CIR of the mgmt class map.
Add one new entry in the ACL 120 to permit the UDP port 161.
Add a new class map to match TCP traffic.

Answer(s): B

Show Answer Next Question

QUESTION: 152 Exam Topic: Infrastructure Security

DRAG DROP (Drag and Drop is not supported)
Refer to the exhibit.

Drag and drop the credentials from the left onto the remote login information on the right to resolve a failed login attempt to vtys. Not all credentials are used.
Select and Place: