Free 300-410 Exam Braindumps
Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) Questions 249–256 (page: 33)

Updated On: 9-Jul-2026

Which feature minimizes DoS attacks on an IPv6 network?

  1. IPv6 Binding Security Table
  2. IPv6 Router Advertisement Guard
  3. IPv6 Prefix Guard
  4. IPv6 Destination Guard

Answer(s): D



Refer to the exhibit. A network administrator must block ping from user 3 to the App Server only. An inbound standard access list is applied to R1 interface G0/0 to block ping. The network administrator was notified that user 3 cannot even ping user 9 anymore. Where must the access list be applied in the outgoing direction to resolve the issue?

  1. R2 interface G0/0
  2. SW1 interface G1/10
  3. R2 interface G1/0
  4. SW1 interface G2/21

Answer(s): B



Refer to the exhibit. Clients on ALS2 receive IPv4 and IPv6 addresses, but clients on ALS1 receive only IPv4 addresses and not IPv6 addresses. Which action on DSW1 allows clients on ALS1 to receive IPv6 addresses?

  1. Configure DSW1(dhcp-config)#default-router 2002:A04:A01::A04:A01
  2. Configure DSW1(config-if)#ipv6 dhcp relay destination 2002:404:404::404:404 GigabitEthernet1/2
  3. Configure DSW1(config)#ipv6 route 2002:404:404::404:404/128 FastEthernet1/0
  4. Configure DSW1(config-if)#ipv6 helper address 2002:404:404::404:404

Answer(s): B



Refer to the exhibit. An engineer configured BGP and wants to select the path from 10.77.255.57 as the best path instead of current best path. Which action resolves the issue?

  1. Configure higher MED to select as the best path.
  2. Configure AS_PATH prepend for the current best path.
  3. Configure AS_PATH prepend for the desired best path.
  4. Configure lower LOCAL_PREF to select as the best path.

Answer(s): B



What is a function of IPv6 Source Guard?

  1. It inspects ND and DHCP packets to build an address binding table.
  2. It works with address glean or ND to find existing addresses.
  3. It notifies the ND protocol to inform hosts if the traffic is denied by it.
  4. It denies traffic from known sources and allocated addresses.

Answer(s): B



Refer to the exhibit.



A network engineer must establish communication between three different customer sites with these requirements:

* Site-A: must be restricted to access to any users at Site-B or Site-C.
* Site-B and Site-C: must be able to communicate between sites and share routes using OSPF.

PE interface configuration:
interface FastEthernet0/0
ip vrf forwarding Site-A
!
interface FastEthernet0/1
ip vrf forwarding SharedSites
!
interface FastEthernet0/2
ip vrf forwarding SharedSites

Which configuration meets the requirements?

  1. PE(config)#router ospf 10 vrf Site-A
    PE(config-router)#network 0.0.0.0 255.255.255.255 area 0
    PE(config)#router ospf 10 vrf SharedSites
    PE(config-router)#network 0.0.0.0 255.255.255.255 area 1
  2. PE(config)#router ospf 10 vrf Site-A
    PE(config-router)#network 0.0.0.0 255.255.255.255 area 0
    PE(config)#router ospf 20 vrf SharedSites
    PE(config-router)#network 0.0.0.0 255.255.255.255 area 1
  3. PE(config)#router ospf 10 vrf Site-A
    PE(config-router)#network 0.0.0.0 255.255.255.255 area 0
    PE(config)#router ospf 10 vrf SharedSites
    PE(config-router)#network 0.0.0.0 255.255.255.255 area 0
  4. PE(config)#router ospf 10 vrf Site-A
    PE(config-router)#network 0.0.0.0 255.255.255.255 area 0
    PE(config)#router ospf 20 vrf SharedSites
    PE(config-router)#network 0.0.0.0 255.255.255.255 area 0

Answer(s): D



What is LDP label binding?

  1. destination prefix with label
  2. two routers with label distribution session
  3. source prefix with label
  4. neighboring router with label

Answer(s): A


Reference:

https://www.cisco.com/en/US/docs/general/Test/kwoodwar/fsinbd4.pdf



Refer to the exhibit. An administrator configures a router to stop using a particular default route if the DNS server 8.8.8.8 is not reachable through that route.


However, this configuration did not work as desired and the default route still works even if the DNS server 8.8.8.8 is unreachable. Which two configuration changes resolve the issue? (Choose two.)

  1. Use a separate track object to reference the existing IP SLA 1 probe for every static route.
  2. Use a separate IP SLA probe and track object for every static route.
  3. Associate every IP SLA probe with the proper WAN address of the router.
  4. Reference the proper exit interfaces along with the next hops in both static default routes.
  5. Configure two static routes for the 8.8.8.8/32 destination to match the IP SLA probe for each ISP.

Answer(s): B,C



Viewing page 33 of 81
Viewing questions 257 - 264 out of 640 questions


Post your Comments and Discuss Cisco 300-410 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!