Free 300-410 Practice Test Questions 2026

Refer to the exhibit. An engineer Is troubleshooting a routing loop on the network to reach the 172.16.3.0/16 from the OSPF domain. Which configuration on router R1 resolves the Issue?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

A company is expanding business by opening 35 branches over the Internet. A network engineer must configure DMVPN at the branch routers to connect with the hub router and allow NHRP to add spoke routers securely to the multicast NHRP mappings automatically Which configuration meets this requirement at the hub router?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

IPv6 is enabled in the infrastructure to support customers with an IPv6 network over WAN and to connect the head office to branch offices in the local network. One of the customers is already running IPv6 and wants to enable IPv6 over the DMVPN network infrastructure between the headend and branch sites. Which configuration command must be applied to establish an mGRE IPv6 tunnel neighborship?

A.

tunnel protection mode ipv6

B.

ipv6 unicast-routing

C.

ipv6 nhrp holdtime 30

D.

tunnel mode gre multipoint ipv6

The network administrator configured the router for Control Plane Policrg so that inbound SSH traffic is policed to 500 kbps This policy must apply to traffic coming in from 101010 0<24 and 192 168 10.0/24 networks

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Refer to the exhibit.

TCP traffic should be reaching host 10.10.10.10/24 via R2. Which action resolves the issue?

A.

TCP traffic will reach the destination via R2 without any changes

B.

Add a permit 20 statement in the route map to allow TCP traffic

C.

Allow TCP in the access list with no changes to the route map

D.

Set IP next-hop to 10.10.12.2 under the route-map permit 10 to allow TCP traffic.

Refer to the exhibit. The administrator is troubleshooting a BGP peering between PE1 and PE3 that is unable to establish Which action resolves the issue?

A.

P2 must have a route to PE3 to establish a BGP session to PE1

B.

Disable sending ICMP unreachables on P2 to allow PE1 to establish a session with PE3

C.

Ensure that the PE3 loopback address is used as a source for BGP peering to PE1

D.

Remove the traffic filtering rules on P2 blocking the BGP communication between PE1 and PE3

Refer to the exhibit.

R1 is configured with uRPF, and ping to R1 is failing from a source present in the R1 routing table via the GigatxtEthernet 0/0 interface. Which action resolves the issue?

A.

Remove the access list from the interface GigabrtEthernet 0/0

B.

Modify the uRPF mode from strict to loose

C.

Enable Cisco Express Forwarding to ensure that uRPF is functioning correctly

D.

Add a floating static route to the source on R1 to the GigabitEthernet 0/1 interface

Refer to the exhibit.

Routers R1 and R2 have established a network adjacency using EIGRP, and both routers are advertising subnets to its neighbor. After issuing the show ip EIGRP topology all-links command in R1, some prefixes are no showing R2 as a successor. Which action resolves the issue?

A.

Rectify the incorrect router ID in R2.

B.

Enable split-horizon.

C.

Configure the network statement on the neighbor.

D.

Resolve the incorrect metric on the link.

Refer to the exhibit. The services at branch B are down. An engineer notices mal rouler A and router B are not exchanging any routes Which configuration resolves the issue on router B?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

A.

Option A

B.

Option B

C.

Option C

D.

Option D

The network administrator configured R1 to authenticate Telnet connections based on Cisco ISE using TACACS+. ISE has been configured with an IP address of 192.168.1.5 and with a network device pointing toward R1(192.168.1.1) with a shared secret password of Cisco123.

The administrator cannot authenticate to R1 based on ISE. Which configuration fixes the issue?

A.

ip tacacs-server host 192.168.1.5 key Cisco123

B.

line vty 0 4
login authentication TAC-SERV

C.

line vty 0 4
login authentication telnet

D.

tacacs-server host 192.168.1.5 key Cisco123

Refer to the exhibit.

A.

Option A

B.

Option B

C.

Option C

D.

Option D