Question 1

Which statement about IPv6 ND inspection is true?

Accepted Answer

A)  It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables. 
B)  It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables. 
C)  It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables. 
D)  It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables. 
A)  It learns and secures bindings for stateless autoconfiguration addresses in Layer 3 neighbor tables. 
B)  It learns and secures bindings for stateless autoconfiguration addresses in Layer 2 neighbor tables. 
C)  It learns and secures bindings for stateful autoconfiguration addresses in Layer 3 neighbor tables. 
D)  It learns and secures bindings for stateful autoconfiguration addresses in Layer 2 neighbor tables.

Question 2

Which statement about IPv6 RA Guard is true?

Accepted Answer

A)  It does not offer protection in environments where IPv6 traffic is tunneled. 
B)  It cannot be configured on a switch port interface in the ingress direction. 
C)  Packets that are dropped by IPv6 RA Guard cannot be spanned. 
D)  It is not supported in hardware when TCAM is programmed. 
A)  It does not offer protection in environments where IPv6 traffic is tunneled. 
B)  It cannot be configured on a switch port interface in the ingress direction. 
C)  Packets that are dropped by IPv6 RA Guard cannot be spanned. 
D)  It is not supported in hardware when TCAM is programmed.

Question 3

Refer to the exhibit. The OSPF neighbor relationship is not coming up. What must be configured to restore OSPF neighbor adjacency?

Accepted Answer

A)  matching hello timers 
B)  OSPF on the remote router 
C)  use router ID 
D)  matching mtu values 
A)  matching hello timers 
B)  OSPF on the remote router 
C)  use router ID 
D)  matching mtu values

Question 4

Refer to the exhibit. An engineer is trying to block the route to 192.168.2.2 from the routing table by using the configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?

Accepted Answer

A)  Use an extended access list instead of a standard access list. 
B)  Change sequence 10 in the route-map command from permit to deny . Change sequence 10 in the route-map command from permit to deny . 
C)  Use a prefix list instead of an access list in the route map. 
D)  Add this statement to the route map: route-map RM-OSPF-DL deny 20 . Add this statement to the route map: route-map RM-OSPF-DL deny 20 
A)  Use an extended access list instead of a standard access list. 
B)  Change sequence 10 in the route-map command from permit to deny . Change sequence 10 in the route-map command from permit to deny . 
C)  Use a prefix list instead of an access list in the route map. 
D)  Add this statement to the route map: route-map RM-OSPF-DL deny 20 . Add this statement to the route map: route-map RM-OSPF-DL deny 20

Question 5

Refer to the exhibit. An engineer is troubleshooting BGP on a device but discovers that the clock on the device does not correspond to the time stamp of the log entries. Which action ensures consistency between the two times?

Accepted Answer

A)  Configure the service timestamps log uptime command in global configuration mode. Configure the service timestamps log uptime command in global configuration mode. 
B)  Configure the logging clock synchronize command in global configuration mode. logging clock synchronize 
C)  Configure the service timestamps log datetime localtime command in global configuration mode. service timestamps log datetime localtime 
D)  Make sure that the clock on the device is synchronized with an NTP server. 
A)  Configure the service timestamps log uptime command in global configuration mode. Configure the service timestamps log uptime command in global configuration mode. 
B)  Configure the logging clock synchronize command in global configuration mode. logging clock synchronize 
C)  Configure the service timestamps log datetime localtime command in global configuration mode. service timestamps log datetime localtime 
D)  Make sure that the clock on the device is synchronized with an NTP server.

Question 6

Refer to the exhibit. An IT staff member comes into the office during normal office hours and cannot access devices through SSH. Which action should be taken to resolve this issue?

Accepted Answer

A)  Modify the access list to use the correct IP address. 
B)  Configure the correct time range. 
C)  Modify the access list to correct the subnet mask. 
D)  Configure the access list in the outbound direction. 
A)  Modify the access list to use the correct IP address. 
B)  Configure the correct time range. 
C)  Modify the access list to correct the subnet mask. 
D)  Configure the access list in the outbound direction.

Question 7

An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted. Which action resolves the issue?

Accepted Answer

A)  Configure all devices for SNMPv3 informs with auth. 
B)  Configure all devices for SNMPv3 informs with priv. 
C)  Configure all devices for SNMPv3 traps with auth. 
D)  Configure all devices for SNMPv3 traps with priv. 
A)  Configure all devices for SNMPv3 informs with auth. 
B)  Configure all devices for SNMPv3 informs with priv. 
C)  Configure all devices for SNMPv3 traps with auth. 
D)  Configure all devices for SNMPv3 traps with priv.

Question 8

Refer to the exhibits. A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router. Which set of configurations fixes the issue?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 9

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

Accepted Answer

A)  Packets are not forwarded to the specific next hop. 
B)  Packets are forwarded based on the routing table. 
C)  Packets are forwarded based on a static route. 
D)  Packets are forwarded to the specific next hop. 
A)  Packets are not forwarded to the specific next hop. 
B)  Packets are forwarded based on the routing table. 
C)  Packets are forwarded based on a static route. 
D)  Packets are forwarded to the specific next hop.

Question 10

An engineer configured access list NON-CISCO in a policy to influence routes.   What are the two effects of this route map configuration? (Choose two.)

Accepted Answer

A)  Packets are forwarded using normal route lookup. 
B)  Packets are forwarded to the default gateway. 
C)  Packets are dropped by the access list. 
D)  Packets are evaluated by sequence 10. 
E)  Packets are not evaluated by sequence 10. 
A)  Packets are forwarded using normal route lookup. 
B)  Packets are forwarded to the default gateway. 
C)  Packets are dropped by the access list. 
D)  Packets are evaluated by sequence 10. 
E)  Packets are not evaluated by sequence 10.

Question 11

Refer to the exhibit. A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source. The configuration did not work as desired. Which service must be enabled to resolve the issue?

Accepted Answer

A)  Enter the service timestamps log datetime clock-period global command. Enter the service timestamps log datetime clock-period global command. 
B)  Enter the service timestamps log datetime synchronize global command. service timestamps log datetime synchronize 
C)  Enter the service timestamps log datetime console global command. service timestamps log datetime console 
D)  Enter the service timestamps log datetime localtime global command. service timestamps log datetime localtime 
A)  Enter the service timestamps log datetime clock-period global command. Enter the service timestamps log datetime clock-period global command. 
B)  Enter the service timestamps log datetime synchronize global command. service timestamps log datetime synchronize 
C)  Enter the service timestamps log datetime console global command. service timestamps log datetime console 
D)  Enter the service timestamps log datetime localtime global command. service timestamps log datetime localtime

Question 12

Which configuration enables the VRF that is labeled "Inet" on FastEthernet0/0?

Accepted Answer

A)  R1(config)# ip vrf Inet R1(config-vrf)#ip vrf FastEthernet0/0 
B)  R1(config)#ip vrf Inet FastEthernet0/0 
C)  R1(config-vrf)#interface FastEthernet0/0 R1(config-if)#ip vrf forwarding Inet 
D)  R1(config)#router ospf 1 vrf Inet R1(config-router)#ip vrf forwarding FastEthernet0/0 
A)  R1(config)# ip vrf Inet R1(config-vrf)#ip vrf FastEthernet0/0 
B)  R1(config)#ip vrf Inet FastEthernet0/0 
C)  R1(config-vrf)#interface FastEthernet0/0 R1(config-if)#ip vrf forwarding Inet 
D)  R1(config)#router ospf 1 vrf Inet R1(config-router)#ip vrf forwarding FastEthernet0/0

Question 13

Refer to the exhibit. An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 loses reachability with the router R3 Fa0/0 interface. The route has changed to flow through router R2. Which debug command is used to troubleshoot this issue?

Accepted Answer

A)  debug ip flow 
B)  debug ip sla error 
C)  debug ip routing 
D)  debug ip packet 
A)  debug ip flow 
B)  debug ip sla error 
C)  debug ip routing 
D)  debug ip packet

Question 14

Refer to the exhibit. What is the result of applying this configuration?

Accepted Answer

A)  The router can form BGP neighborships with any other device. 
B)  The router cannot form BGP neighborships with any other device. 
C)  The router cannot form BGP neighborships with any device that is matched by the access list named "BGP". 
D)  The router can form BGP neighborships with any device that is matched by the access list named "BGP". 
A)  The router can form BGP neighborships with any other device. 
B)  The router cannot form BGP neighborships with any other device. 
C)  The router cannot form BGP neighborships with any device that is matched by the access list named "BGP". 
D)  The router can form BGP neighborships with any device that is matched by the access list named "BGP".

Question 15

Refer to the exhibit. An engineer configures a static route on a router, but when the engineer checks the route to the destination, a different next hop is chosen. What is the reason for this?

Accepted Answer

A)  Dynamic routing protocols always have priority over static routes. 
B)  The metric of the OSPF route is lower than the metric of the static route. 
C)  The configured AD for the static route is higher than the AD of OSPF. 
D)  The syntax of the static route is not valid, so the route is not considered. 
A)  Dynamic routing protocols always have priority over static routes. 
B)  The metric of the OSPF route is lower than the metric of the static route. 
C)  The configured AD for the static route is higher than the AD of OSPF. 
D)  The syntax of the static route is not valid, so the route is not considered.

Question 16

Refer to the exhibit. Why is user authentication being rejected?

Accepted Answer

A)  The TACACS+ server expects "user", but the NT client sends "domain / user". 
B)  The TACACS+ server refuses the user because the user is set up for CHAP. 
C)  The TACACS+ server is down, and the user is in the local database. 
D)  The TACACS+ server is down, and the user is not in the local database. 
A)  The TACACS+ server expects "user", but the NT client sends "domain / user". 
B)  The TACACS+ server refuses the user because the user is set up for CHAP. 
C)  The TACACS+ server is down, and the user is in the local database. 
D)  The TACACS+ server is down, and the user is not in the local database.

Question 17

Which statement about MPLS LDP router ID is true?

Accepted Answer

A)  If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured. 
B)  The loopback with the highest IP address is selected as the router ID. 
C)  The MPLS LDP router ID must match the IGP router ID. 
D)  The force keyword changes the router ID to the specified address without causing any impact. The force keyword changes the router ID to the specified address without causing any impact. 
A)  If not configured, the operational physical interface is chosen as the router ID even if a loopback is configured. 
B)  The loopback with the highest IP address is selected as the router ID. 
C)  The MPLS LDP router ID must match the IGP router ID. 
D)  The force keyword changes the router ID to the specified address without causing any impact. The force keyword changes the router ID to the specified address without causing any impact.

Question 18

Refer to the exhibit. The output of the trace route from R5 shows a loop in the network. Which configuration prevents this loop?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 19

Refer to the exhibit. The administrator configured route advertisement to a remote low resources router to use only the default route to reach any network but failed. Which action resolves this issue?

Accepted Answer

A)  Remove the prefix keyword from the distribute-list command. Remove the prefix keyword from the distribute-list command. 
B)  Remove the line with the sequence number 10 from the prefix list. 
C)  Change the direction of the distribute-list command from out to in. Change the direction of the command from out to in. 
D)  Remove the line with the sequence number 5 from the prefix list. 
A)  Remove the prefix keyword from the distribute-list command. Remove the prefix keyword from the distribute-list command. 
B)  Remove the line with the sequence number 10 from the prefix list. 
C)  Change the direction of the distribute-list command from out to in. Change the direction of the command from out to in. 
D)  Remove the line with the sequence number 5 from the prefix list.

Question 20

In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.)

Accepted Answer

A)  by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways 
B)  by various IPv6 guard features to validate the data link layer address 
C)  by the recovery mechanism to recover the binding table in the event of a device reboot 
D)  by IPv6 routing protocols to securely build neighborships without the need of authentication 
E)  by storing hashed keys for IPsec tunnels for the built-in IPsec features 
A)  by IPv6 HSRP to make sure neighbors are authenticated before being used as gateways 
B)  by various IPv6 guard features to validate the data link layer address 
C)  by the recovery mechanism to recover the binding table in the event of a device reboot 
D)  by IPv6 routing protocols to securely build neighborships without the need of authentication 
E)  by storing hashed keys for IPsec tunnels for the built-in IPsec features

Exam 8: Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Which statement about IPv6 ND inspection is true?

Which statement about IPv6 RA Guard is true?

Refer to the exhibit. The OSPF neighbor relationship is not coming up. What must be configured to restore OSPF neighbor adjacency?

Refer to the exhibit. An engineer is trying to block the route to 192.168.2.2 from the routing table by using the configuration that is shown. The route is still present in the routing table as an OSPF route. Which action blocks the route?

Refer to the exhibit. An engineer is troubleshooting BGP on a device but discovers that the clock on the device does not correspond to the time stamp of the log entries. Which action ensures consistency between the two times?

Refer to the exhibit. An IT staff member comes into the office during normal office hours and cannot access devices through SSH. Which action should be taken to resolve this issue?

An engineer configured a Cisco router to send reliable and encrypted notifications for any events to the management server. It was noticed that the notification messages are reliable but not encrypted. Which action resolves the issue?

Refer to the exhibits. A user on the 192.168.1.0/24 network can successfully ping 192.168.3.1, but the administrator cannot ping 192.168.3.1 from the LA router. Which set of configurations fixes the issue?

An engineer configured policy-based routing for a destination IP address that does not exist in the routing table. How is the packet treated through the policy for configuring the set ip default next-hop command?

An engineer configured access list NON-CISCO in a policy to influence routes. What are the two effects of this route map configuration? (Choose two.)

Refer to the exhibit. A network administrator configured NTP on a Cisco router to get synchronized time for system and logs from a unified time source. The configuration did not work as desired. Which service must be enabled to resolve the issue?

Which configuration enables the VRF that is labeled "Inet" on FastEthernet0/0?

Refer to the exhibit. An IP SLA was configured on router R1 that allows the default route to be modified in the event that Fa0/0 loses reachability with the router R3 Fa0/0 interface. The route has changed to flow through router R2. Which debug command is used to troubleshoot this issue?

Refer to the exhibit. What is the result of applying this configuration?

Refer to the exhibit. An engineer configures a static route on a router, but when the engineer checks the route to the destination, a different next hop is chosen. What is the reason for this?

Refer to the exhibit. Why is user authentication being rejected?

Which statement about MPLS LDP router ID is true?

Refer to the exhibit. The output of the trace route from R5 shows a loop in the network. Which configuration prevents this loop?

Refer to the exhibit. The administrator configured route advertisement to a remote low resources router to use only the default route to reach any network but failed. Which action resolves this issue?

In which two ways does the IPv6 First-Hop Security Binding Table operate? (Choose two.)

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters