Free 300-410 Exam Braindumps
Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) Questions 161–168 (page: 22)

Updated On: 9-Jul-2026

Refer to the exhibit. A network administrator successfully logs in to a switch using SSH from a RADIUS server. When the network administrator uses a console port to access the switch, the RADIUS server returns shell:priv-lvl=15" and the switch asks to enter the enable command. When the command is entered, it gets rejected.


Which command set is used to troubleshoot and resolve this issue?


  1. line con 0
    aaa authorization console privl5
    !
    linevty 0 4
    authorization exec

  2. line con 0
    aaa authorization console
    !
    linevty 0 4
    authorization exec

  3. line con 0
    aaa authorization console
    authorization priv15
    !
    linevty 0 4
    transport input ssh

  4. line con 0
    aaa authorization console
    authorization exec
    !
    linevty 0 4
    transport input ssh

Answer(s): D


Reference:

https://flylib.com/books/en/1.233.1.74/1/



Refer to the exhibit. An engineer is troubleshooting a TACACS problem.

Which action resolves the issue?

  1. Configure a matching TACACS server IP.
  2. Configure a matching preshared key.
  3. Generate authentication from a relative source interface.
  4. Apply a configured AAA profile to the VTY.

Answer(s): B


Reference:

https://community.cisco.com/t5/network-access-control/issues-with-tacacs-authentication/td-p/3412001



The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped.

access-list 100 permit ip host 172.16.1.99 any
!
class-map CM-ADMIN
match access-group 100
!
policy-map PM-COPP
class CM-ADMIN
police 500000 conform-action transmit
!
interface E0/0
service-policy input PM-COPP

CoPP failed to capture the desired traffic and the CPU load is getting higher.

Which two configurations resolve the issue? (Choose two.)


  1. interface E0/0
    no service-policy input PM-COPP
    !
    control-plane
    service-policy input PM-COPP

  2. policy-map PM-COPP
    class CM-ADMIN
    no police 500000 conform-action transmit
    police 500 conform-action transmit
    !
    control-plane
    service-policy input PM-COPP

  3. no access-list 100
    access-list 100 permit tcp host 172.16.1.99 any eq 80

  4. no access-list 100
    access-list 100 permit tcp host 172.16.1.99 any eq 80
    access-list 100 permit tcp host 172.16.1.99 any eq 443

  5. policy-map PM-COPP
    class CM-ADMIN
    no police 500000 conform-action transmit
    police 500 conform-action transmit

Answer(s): D



Refer to the exhibit. While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured.


Which command resolves this issue?

  1. access-class INTERNET in
  2. ip access-group INTERNET in
  3. ipv6 traffic-filter INTERNET in
  4. ipv6 access-class INTERNET in

Answer(s): D



Refer to the exhibit. An engineer is trying to connect to R1 via Telnet with no success.
Which configuration resolves the issue?

  1. tacacs server prod
    address ipv4 10.221.10.10
    exit
  2. ip route 10.221.10.10 255.255.255.255 ethernet 0/1
  3. ip route 10.221.0.11 255.255.255.255 ethernet 0/1
  4. tacacs server prod
    address ipv4 10.221.10.11
    exit

Answer(s): D



An engineer is trying to copy an IOS file from one router to another router by using TFTP. Which two actions are needed to allow the file to copy? (Choose two.)

  1. Copy the file to the destination router with the copy tftp: flash: command
  2. Enable the TFTP server on the source router with the tftp-server flash: <filename> command
  3. TFTP is not supported in recent IOS versions, so an alternative method must be used
  4. Configure a user on the source router with the username tftp password tftp command
  5. Configure the TFTP authentication on the source router with the tftp-server authentication local command

Answer(s): A,B



Refer to the exhibit. Users report that IP addresses cannot be acquired from the DHCP server. The DHCP server is configured as shown. About 300 total nonconcurrent users are using this DHCP server, but none of them are active for more than two hours per day. Which action fixes the issue within the current resources?

  1. Modify the subnet mask to the network 192.168.1.0 255.255.254.0 command in the DHCP pool
  2. Configure the DHCP lease time to a smaller value
  3. Configure the DHCP lease time to a bigger value
  4. Add the network 192.168.2.0 255.255.255.0 command to the DHCP pool

Answer(s): B



Refer to the exhibit. ISP 1 and ISP 2 directly connect to the Internet. A customer is tracking both ISP links to achieve redundancy and cannot see the Cisco IOS IP SLA tracking output on the router console. Which command is missing from the IP SLA configuration?

  1. Start-time 00:00
  2. Start-time 0
  3. Start-time immediately
  4. Start-time now

Answer(s): D


Reference:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsla/configuration/15-mt/sla-15-mt-book/sla_icmp_echo.html



Viewing page 22 of 81
Viewing questions 169 - 176 out of 640 questions


Post your Comments and Discuss Cisco 300-410 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!