300-410 Exam - Free Actual Q&as, Page 5 - ExamTopics
300-410 Exam - Free Actual Q&as, Page 5 - ExamTopics
Refer to the exhibit. A network administrator is troubleshooting OSPF adjacency issue by going through the console logs in the router, but due to
Which two commands reduce console log messages to relevant OSPF neighbor problem details so that the issue can be resolved? (Choose two.)
Correct Answer: BC
https://www.examtopics.com/exams/cisco/300-410/view/5/ 1/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
A network is under a cyberattack. A network engineer connected to R1 by SSH and enabled the terminal monitor via SSH session to find the
source and destination of the attack. The session was flooded with messages, which made it impossible for the engineer to troubleshoot the
issue.
A. (config)#terminal no monitor
Correct Answer: D
https://www.examtopics.com/exams/cisco/300-410/view/5/ 2/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
A network administrator has developed a Python script on the local Linux machine and is trying to transfer it to the router. However, the transfer
fails.
A. The Python interpreter must first be enabled with the guestshell enable command.
B. The SSH access must be allowed on the VTY lines using the transport input ssh command.
C. The SSH service must be enabled with the crypto key generate rsa command.
D. The SCP service must be enabled with the ip scp server enable command. Most Voted
Correct Answer: D
https://www.examtopics.com/exams/cisco/300-410/view/5/ 3/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
An engineer configured SNMP communities on the Core_Sw1, but the SNMP server cannot obtain information from Core_Sw1.
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 4/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Which two commands provide the administrator with the information needed to resolve the issue? (Choose two.)
Correct Answer: BC
https://www.examtopics.com/exams/cisco/300-410/view/5/ 5/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
The network administrator can see the DHCP discovery packet in R1, but R2 is not replying to the DHCP request. The R1 related interface is
DHCP helper address. If the PC is directly connected to the Fa0/1 interface on R2, the DHCP server assigns as IP address from the DHCP pool to
the PC.
Correct Answer: DE
https://www.examtopics.com/exams/cisco/300-410/view/5/ 6/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
A network administrator performed a Compact Flash Memory upgrade on a Cisco Catalyst 6509 Switch. Everything is functioning normally except
SNMP, which was configured to monitor the bandwidth of key interfaces but the interface indexes are changed.
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 7/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. R1 is configured with IP SLA to check the availability of the server behind R6 but it kept failing.
B. R6(config)#ip access-list extended DDOS R6(config-ext-nacl)#5 permit icmp host 10.10.10.1 host 10.66.66.66 Most Voted
D. R6(config)#ip access-list extended DDOS R6(config-ext-nacl)#5 permit icmp host 10.66.66.66 host 10.10.10.1
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 8/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. An engineer configured IP SLA on R1 to avoid the ISP link flapping problem, but it is not working as designed. IP SLA should
wait 30 seconds before switching traffic to a secondary connection and then revert to the primary link after waiting 20 seconds, when the primary
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 9/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. An engineer must block access to the console ports for all corporate remote Cisco devices based on the recent corporate
security policy but the security team still can connect through the console port.
B. exec 0 0
Correct Answer: D
https://www.examtopics.com/exams/cisco/300-410/view/5/ 10/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. A network administrator is troubleshooting IPv6 address assignment for a DHCP client that is not getting an IPv6 address
Which configuration retrieves the client IPv6 address from the DHCP server?
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 11/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. A junior engineer configured SNMP to network devices. Malicious users have uploaded different configurations to the network
devices using
Which configuration prevents changes from unauthorized NMS and TFTP servers?
A. access-list 20 permit 10.221.10.11 access-list 20 deny any log ! snmp-server group NETVIEW v3 priv read NETVIEW access 20 snmp-server
group NETADMIN v3 priv read NETVIEW write NETADMIN access 20 snmp-server community Cisc0Us3r RO 20 snmp-server community
B. access-list 20 permit 10.221.10.11 access-list 20 deny any log ! snmp-server group NETVIEW v3 priv read NETVIEW access 20 snmp-server
group NETADMIN v3 priv read NETVIEW write NETADMIN access 20 snmp-server community Cisc0wrus3r RO 20 snmp-server community
Correct Answer: A
An engineer creates a Cisco DNA Center cluster with three nodes, but all the services are running on one host node.
A. Restore the link on the switch interface that is connected to a cluster link on the Cisco DNA Center.
B. Click system updates, and upgrade to the latest version of Cisco DNA Center.
C. Enable service distribution from the Systems 360 page. Most Voted
D. Click the master host node with all the services and select services to be moved to other hosts.
Correct Answer: C
https://www.examtopics.com/exams/cisco/300-410/view/5/ 12/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. The AP status from Cisco DNA Center Assurance Dashboard shows some physical connectivity issues from access switch
interface G1/0/14.
Which command generates the diagnostic data to resolve the physical connectivity issues?
Correct Answer: D
https://www.examtopics.com/exams/cisco/300-410/view/5/ 13/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. An engineer configured NetFlow on R1, but the NMS server cannot see the flow from R1.
Correct Answer: C
https://www.examtopics.com/exams/cisco/300-410/view/5/ 14/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. An engineer cannot copy the IOS.bin file from the FTP server to the switch.
A. Allow file permissions to download the file from the FTP server.
B. Add the IOS.bin file, which does not exist on FTP server. Most Voted
C. Make memory space on the switch flash or USB drive to download the file.
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 15/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. After reloading the router, an administrator discovered that the interface utilization graphs displayed inconsistencies with
Which action prevents this issue from occurring after another router reload in the future?
C. Rediscover all the router interfaces through SNMP after the router is reloaded.
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 16/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. In an attempt to increase the network security, the administrator applied the Gi3-in ACL to the Gi3 interface. After the ACL was
applied, clients in the network connected to Gi3 lost their ability to obtain IP settings from DHCP.
Which two configuration commands must be added to the Gi3-in ACL to reinstate the DHCP service for the clients? (Choose two.)
A. 74 permit udp 192.168.30.0 0.0.0.255 eq bootpc host 192.168.255.3 eq bootps Most Voted
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 17/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. Router R2 should be learning the route for 10.123.187.0/24 via EIGRP. Which action resolves the issue without introducing
more issues?
Correct Answer: D
https://www.examtopics.com/exams/cisco/300-410/view/5/ 18/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. The control plane is heavily impacted after the CoPP configuration is applied to the router. Which command removal lessens
A. access-list 120 permit tcp any gt 1024 eq bgp log Most Voted
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 19/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. An engineer is trying to add an encrypted user password that should not be visible in the router configuration. Which two
(Choose two.)
E. no service password-encryption
Correct Answer: AB
https://www.examtopics.com/exams/cisco/300-410/view/5/ 20/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
A customer reports that traffic is not passing on an EIGRP enabled multipoint interface on a router configured as below:
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 21/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. A loop occurs between R1, R2, and R3 while EIGRP is run with poison reverse enabled. Which action prevents the loop
R3?
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 22/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. An error message "an OSPF-4-FLOOD_WAR" is received on SW2 from SW1. SW2 is repeatedly receiving its own link-state
advertisement and flushes it from the network. Which action resolves the issue?
Correct Answer: D
https://www.examtopics.com/exams/cisco/300-410/view/5/ 23/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Which two components are required for MPLS Layer 3 VPN configuration? (Choose two.)
Correct Answer: CE
Refer to the exhibit. Which configuration resolves the IP SLA issue from R1 to the server?
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 24/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
A network administrator added a new spoke site with dynamic IP on the DMVPN network. Which configuration command passes traffic on the
Correct Answer: C
Refer to the exhibit. Which configuration enables OSPF for area 0 interfaces to establish adjacency with a neighboring router with the same VRF?
A. router ospf 1 vrf CCNP network 10.1.1.1 0.0.0.0 area 0 network 10.2.2.2 0.0.0.0 area 0
B. router ospf 1 interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0
C. router ospf 1 vrf CCNP interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0 Most Voted
Correct Answer: C
https://www.examtopics.com/exams/cisco/300-410/view/5/ 25/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. TCP traffic should be reaching host 10.10.10.10/24 via R2. Which action resolves the issue?
A. Allow TCP in the access list with no changes to the route map. Most Voted
C. TCP traffic will reach the destination via R2 without any changes.
D. Set IP next-hop to 10.10.12.2 under the route-map permit 10 to allow TCP traffic.
Correct Answer: A
A newly installed spoke router is configured for DMVPN with the ip mtu 1400 command. Which configuration allows the spoke to use
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 26/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. During ISP router maintenance, the network produced many alerts because of the flapping interface. Which configuration on
Correct Answer: D
Refer to the exhibit. Reachability between servers in a network deployed with DHCPv6 is unstable. Which command must be removed from the
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 27/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
A customer requested a GRE tunnel through the provider network between two customer sites using loopback to hide internal networks. Which
configuration on
A. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1400 R2(config-if)#ip tcp adjust-mss
B. R2(config)#interface Tunnel1 R2(config-if#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1400 R2(config-if)#ip tcp adjust-mss
C. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1500 R2(config-if)#ip tcp adjust-mss
D. R2(config)#interface Tunnel1 R2(config-if)#ip address 172.20.1.2 255.255.255.0 R2(config-if)#ip mtu 1500 R2(config-if)#ip tcp adjust-mss
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 28/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. R1 and R2 are configured for EIGRP peering using authentication and the neighbors failed to come up. Which action resolves
the issue?
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 29/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. Mutual redistribution is enabled between RIP and EIGRP on R2 and R5. Which configuration resolves the routing loop for the
192.168.1.0/24 network?
A. R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp
10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1
distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any
B. R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp
10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1
distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any
C. R2: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp
10 metric 2 ! access-list 1 deny 192. 168.1.0 access-list 1 permit any R5: router eigrp 10 network 181.16.0.0 redistribute rip metric 1 1 1 1 1
distribute-list 1 in s0 ! router rip network 178.1.0.0 redistribute eigrp 10 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any
D. R2: router eigrp 7 network 181.16.0.0 redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 7
metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any R5: router eigrp 7 network 181.16.0.0 redistribute rip metric 1 1 1 1 1
distribute-list 1 in s1 ! router rip network 178.1.0.0 redistribute eigrp 7 metric 2 ! access-list 1 deny 192.168.1.0 access-list 1 permit any
Most Voted
Correct Answer: D
https://www.examtopics.com/exams/cisco/300-410/view/5/ 30/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Correct Answer: B
Refer to the exhibit. R4 is experiencing packet drop when trying to reach 172.16.2.7 behind R2. Which action resolves the issue?
A. Insert a /24 floating static route on R2 toward R3 with metric 254. Most Voted
C. Enable auto summarization on all three routers R1, R2, and R3.
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 31/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. An engineer must advertise routes into IPv6 MP-BGP and failed. Which configuration resolves the issue on R1?
A. router bgp 64900 no bgp default ipv4-unicast address-family ipv6 unicast redistribute ospf network 2001:DB9::/64
B. router bgp 64900 no bgp default ipv4-unicast address-family ipv6 multicast neighbor 2001:DB8:7000::2 translate-update ipv6 multicast
C. router bgp 65000 no bgp default ipv4-unicast address-family ipv6 unicast network 2001:DB8::/64 Most Voted
D. router bgp 65000 no bgp default ipv4-unicast address-family ipv6 multicast network 2001:DB8::/64
Correct Answer: C
Refer to the exhibit. The administrator is trying to overwrite an existing file on the TFTP server that was previously uploaded by another router.
B. Make the package.conf file writable by all on the TFTP server. Most Voted
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 32/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. A network engineer applied a filter for ISA traffic on OSPFv3 inter area routes on the area 5 ABR to protect advertising the
internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes. After the respective route
ABR, area 5 routes are not visible on any of the areas. How must the filter list be applied on the ABR to resolve this issue?
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 33/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. The R2 loopback interface is advertised with RIP and EIGRP using default values. Which configuration changes make R1 reach
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 34/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. A network administrator notices these console messages from host 10.11.110.12 originating from interface E1/0. The
administrator considers this an unauthorized attempt to access SNMP on R1. Which action prevents the attempts to reach R1 E1/0?
B. Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12. Most Voted
C. Add a permit statement including the host 10.11.110.12 into ACL 90.
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 35/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. R6 should reach R1 via R5>R2>R1. Which action resolves the issue?
Correct Answer: C
An engineer failed to run diagnostic commands on devices using Cisco DNA Center. Which action in Cisco DNA Center resolves the issue?
B. Enable APIs.
C. Enable CDP.
Correct Answer: D
https://www.examtopics.com/exams/cisco/300-410/view/5/ 36/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. The static route is not present in the routing table of an adjacent OSPF neighbor router. Which action resolves the issue?
A. Configure a permit 20 statement to the route map to redistribute the static route.
B. Configure the next-hop interface at the end of the static route for it to get redistributed.
Correct Answer: D
https://www.examtopics.com/exams/cisco/300-410/view/5/ 37/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. Packets arriving from source 209.165.200.215 must be sent with the precedence bit set to 1, and packets arriving from
source
209.165.200.216 must be sent with the precedence bit set to 5. Which action resolves the issue?
Correct Answer: A
https://www.examtopics.com/exams/cisco/300-410/view/5/ 38/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. An engineer must redistribute networks 192.168.10.0/24 and 192.168.20.0/24 into OSPF from EIGRP, where the metric must
be added when traversing through multiple hops to start an external route of 20. The engineer notices that the external metric is fixed and does
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 39/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
An engineer notices that R1 does not hold enough log messages to identify the root cause during troubleshooting. Which command resolves this
issue?
Correct Answer: C
Correct Answer: D
https://www.examtopics.com/exams/cisco/300-410/view/5/ 40/41
3/12/25, 12:23 PM 300-410 Exam - Free Actual Q&As, Page 5 | ExamTopics
Refer to the exhibit. A network administrator must block ping from user 3 to the App Server only. An inbound standard access list is applied to R1
interface G0/0 to block ping. The network administrator was notified that user 3 cannot even ping user 9 anymore. Where must the access list be
A. R2 interface G0/0
C. R2 interface G1/0
Correct Answer: B
https://www.examtopics.com/exams/cisco/300-410/view/5/ 41/41