Free Access Cisco.300-410.v2025-02-03.q609 Practice Test (Page 20)

Question 91

LAB SIMULATION
Configure individual VRFs for each customer according to the topology to achieve these goals :

SW1

SW2

SW3

Correct Answer:

Use cu-red under interfaces facing SW1 & SW3:
On R1:
interface Ethernet0/0
ip vrf forwarding cu-red
ip address 192.168.1.254 255.255.255.0
Check reachability to SW1:
R1#ping vrf cu-red 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
On R2:
interface Ethernet0/0
ip vrf forwarding cu-red
ip address 192.168.2.254 255.255.255.0
Check reachability to SW3:
R2#ping vrf cu-red 192.168.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Use vrf cu-green for SW2 & SW4:
On R1:
interface Ethernet0/1
ip vrf forwarding cu-green
ip address 192.168.20.254 255.255.255.0
Test reachability to SW2:
R1#ping vrf cu-green 192.168.20.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.22.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
On R2:
interface Ethernet0/1
ip vrf forwarding cu-green
ip address 192.168.22.254 255.255.255.0
Test reachability to SW4:
R2#ping vrf cu-green 192.168.22.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
On R1:
interface Ethernet0/2.100
mpls ip
!
interface Ethernet0/2.200
mpls ip
!
Configure BGP:
router bgp 65000
neighbor 10.10.10.2 remote-as 65000
neighbor 10.10.20.2 remote-as 65000
!
address-family vpnv4
neighbor 10.10.10.2 activate
neighbor 10.10.20.2 activate
exit-address-family
!
address-family ipv4 vrf cu-green
redistribute connected
exit-address-family
!
address-family ipv4 vrf cu-red
redistribute connected
exit-address-family
!
R1(config)#ip vrf cu-red
R1(config-vrf)#route-target both 65000:100
!
R1(config)#ip vrf cu-green
R1(config-vrf)#route-target both 65000:200
On R2:
interface Ethernet0/2.100
mpls ip
!
interface Ethernet0/2.200
mpls ip
!
router bgp 65000
neighbor 10.10.10.1 remote-as 65000
neighbor 10.10.20.1 remote-as 65000
!
address-family vpnv4
neighbor 10.10.10.1 activate
neighbor 10.10.20.1 activate
exit-address-family
!
address-family ipv4 vrf cu-green
redistribute connected
exit-address-family
!
address-family ipv4 vrf cu-red
redistribute connected
exit-address-family
R2(config)#ip vrf cu-red
R2(config-vrf)#route-target both 65000:100
!
R2(config)#ip vrf cu-green
R2(config-vrf)#route-target both 65000:200
Verification:
From SW1 to SW3:
SW1#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
But can't Reach SW2 or SW4 in VRF cu-green:
SW1#ping 192.168.22.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.22.1, timeout is 2 seconds:
U. U.U
Success rate is 0 percent (0/5)
SW1#ping 192.168.20.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:
U. U.U
Success rate is 0 percent (0/5)
Same Test for SW2:
From SW2 to SW4:
SW2#ping 192.168.20.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
But can't Reach SW3 or SW1 in VRF cu-red:
SW2#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
U. U.U
Success rate is 0 percent (0/5)
SW2#ping 192.168.2.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
U. U.U
Success rate is 0 percent (0/5)
Both R1 & R2 has separate tables for VRFs cu-red and cu-green.

Question 92

Refer to the exhibit.

An engineer is trying to configure local authentication on the console line, but the device is trying to authenticate using TACACS+. Which action produces the desired configuration?

A.Add the login authentication Console command to the line configuration

B.Add the aaa authentication login default group tacacs+ local-case command to the global configuration.

C.Replace the capital "C" with a lowercase "c" in the aaa authentication login Console local command.

D.Add the aaa authentication login default none command to the global configuration.

Question 93

Refer to the exhibit.

A network administrator successfully logs in to a switch using SSH from a (RADIUS server When the network administrator uses a console port to access the switch the RADIUS server returns shell:priv-lvl=15'' and the switch asks to enter the enable command \ the command is entered, it gets rejected. Which command set is used to troubleshoot and reserve this issue?

A.line con 0
aaa authorization console
!
line vty 0 4
authorization exec

B.line con 0
aaa authorization console
authorization exec
!
line vty 0 4
transport input ssh

C.line con 0
aaa authorization console priv15
!
line vty 0 4
authorization exec

D.line con 0
aaa authorization console
authorization priv15
!
line vty 0 4
transport input ssh

Question 94

Refer to the exhibit.

The network administrator configured redistribution on an ASBR to reach to all WAN networks but failed Which action resolves the issue?

A.The route map EIGRP->OSPF must have the 10.0.106.0/24 entry to exist in one of the three prefix lists to pass

B.The OSPF process must have a metric when redistributing prefixes from EIGRP.

C.EIGRP must redistribute the 10.0.106.0/24 route instead of using the network statement

D.The route map must have the keyword prefix-list to evaluate the prefix list entries

Question 95

Refer to the exhibit.

Which two actions restrict access to router R1 by SSH? (Choose two.)

A.Remove sequence 10 from access list 100 and add sequence 20 deny tcp any any eq telnet to access list
199

B.Remove class-map ANY from service-policy CoPP

C.Configure transport input ssh on line vty and remove sequence 30 from access list 100.

D.Configure transport output ssh on line vty and remove sequence 20 from access list 100.

E.Configure transport output ssh on line vty and remove sequence 10 from access list 199.

Other Version: 10266Cisco.300-410.v2024-12-18.q447; 3709Cisco.300-410.v2023-04-25.q268; 3989Cisco.300-410.v2023-01-28.q148; 2288Cisco.300-410.v2022-11-26.q118; 3209Cisco.300-410.v2022-07-26.q136; 4018Cisco.300-410.v2022-05-02.q98; 7223Cisco.300-410.v2022-01-27.q256

Latest Upload: 289PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 425Nokia.4A0-113.v2026-05-01.q69; 453EC-COUNCIL.312-49v11.v2026-04-30.q214; 427Microsoft.MB-820.v2026-04-30.q101; 287Salesforce.MC-202.v2026-04-30.q57; 336BICSI.INSTC_V8.v2026-04-29.q53; 473NMLS.MLO.v2026-04-28.q82; 304NCARB.Project-Management.v2026-04-28.q27; 565EMC.D-AV-DY-23.v2026-04-27.q184; 1428ServiceNow.CSA.v2026-04-27.q483

Question 91

Question 92

Question 93

Question 94

Question 95

Download PDF File