Loading demo links...
Showing 1–20 of 20 questions
Drag and drop the LDP features from the left onto the descriptions on the right
Answer is in the explanation below.
DRAG DROP
Drag and drop the MPLS terms from the left onto the correct definitions on the right.
Select and Place:
Answer is in the explanation below.
LAB SIMULATION
Configure individual VRFs for each customer according to the topology to achieve these goals :
R1
R2
SW1
SW2
SW3
Answer is in the explanation below.
What are two purposes of using IPv4 and VPNv4 address-family configurations in a Layer 3 MPLS VPN? (Choose two.)
Select all that apply, then click Submit answer.
The VPNv4 address is used to advertise the MPLS VPN label.
RD is prepended to the IPv4 route to make it unique.
MP-BGP is used to allow overlapping IPv4 addresses between customers to advertise
through the network.
The IPv4 address is needed to tag the MPLS label.
The VPNv4 address consists of a 64-bit route distinguisher that is prepended to the IPv4
prefix.
What are two functions of IPv6 Source Guard? (Choose two.)
Select all that apply, then click Submit answer.
It works independent from IPv6 neighbor discovery.
It denies traffic from unknown sources or unallocated addresses.
It uses the populated binding table to allow legitimate traffic.
It denies traffic by inspecting neighbor discovery packets for specific patterns.
It blocks certain traffic by inspecting DHCP packets for specific sources.
An engineer must configure a Cisco router to initiate secure connections from the router to other devices in the network but kept failing. Which two actions resolve the issue? (Choose two.)
Select all that apply, then click Submit answer.
Configure transport input ssh command on the console.
Configure a domain name.
Configure a crypto key to be generated.
Configure a source port for the SSH connection to initiate.
Configure a TACACS+ server and enable it.
Refer to the exhibit. Network operations cannot read or write any configuration on the device with this configuration from the operations subnet.
Which two configurations fix the issue? (Choose two.)
Select all that apply, then click Submit answer.
Configure SNMP rw permission in addition to community ciscotest.
Modify access list 1 and allow operations subnet in the access list.
Modify access list 1 and allow SNMP in the access list.
Configure SNMP rw permission in addition to version 1.
Configure SNMP rw permission in addition to community ciscotest 1.
An engineer is trying to copy an IOS file from one router to another router by using TFTP.
Which two actions are needed to allow the file to copy? (Choose two.)
Select all that apply, then click Submit answer.
Copy the file to the destination router with the copy tftp: flash: command
Enable the TFTP server on the source router with the tftp-server flash:
TFTP is not supported in recent IOS versions, so an alternative method must be used
Configure a user on the source router with the username tftp password tftp command
Configure the TFTP authentication on the source router with the tftp-server authentication local command
What are two characteristics of VRF instance? (Choose two.)
Select all that apply, then click Submit answer.
All VRFs share customers routing and CEF tables .
An interface must be associated to one VRF.
Each VRF has a different set of routing and CEF tables
It is defined by the VPN membership of a customer site attached to a P device.
A customer site can be associated to different VRFs
Refer to the exhibit. The server for the finance department is not reachable consistently on the 200.30.40.0/24 network and after every second month it gets a new IP address. What two actions must be taken to resolve this issue? (Choose two.)
Select all that apply, then click Submit answer.
Configure the server to use DHCP on the network with default gateway 200.30.40.100.
Configure the server with a static IP address and default gateway.
Configure the router to exclude a server IP address.
Configure the server to use DHCP on the network with default gateway 200.30.30.100.
Configure the router to exclude a server IP address and default gateway.
Refer to the exhibit.
Which two commands provide the administrator with the information needed to resolve the issue? (Choose two.)
Select all that apply, then click Submit answer.
Show snmp user
debug snmp engine-id
debug snmpv3 engine-id
debug snmp packet
showsnmpv3 user
Refer to the exhibit.
An engineer configured IP SLA on R1 to avoid the ISP link flapping problem. but it is not working as designed IP SLA should wait 30 seconds before switching traffic to a secondary connection and then revert to the primary link after waning 20 seconds, when the primary link is available and stabilized. Which configuration resolves the issue?
Select an option, then click Submit answer.
R1(config)#ip sla 700
R1(config-ip-sla)#delay down 30 up 20
R1(config)#ip sla 700
R1(config-ip-sla)#delay down 20 up 30
R1(config)#track 700 ip sla 700
R1(config-track)#delay down 30 up 20
R1(config)#track 700 ip sla 700
R1(config-track)#delay down 20 up 30
Refer to the exhibit.
R1 and R2 are configured for EIGRP peering using authentication and the neighbors failed to come up. Which action resolves the issue?
Select an option, then click Submit answer.
Configure a matching key-id number on both routers
Configure a matching lowest key-id on both routers
Configure a matching key-chain name on both routers
Configure a matching authentication type on both router
Refer to the exhibits. To provide reachability to network 10.1.1.0/24 from R5, the network administrator redistributes EIGRP into OSPF on R3 but notices that R4 is now taking a suboptimal path through R5 to reach 10.1.1.0/24 network.
Which action fixes the issue while keeping the reachability from R5 to 10.1.1.0/24 network?
Select an option, then click Submit answer.
Change the administrative distance of the external EIGRP to 90.
Apply the outbound distribution list on R5 toward R4 in OSPF.
Change the administrative distance of OSPF to 200 on R5.
Redistribute OSPF into EIGRP on R4.
Refer to the exhibit. The network administrator configured redistribution on an ASBR to reach to all WAN networks but failed.
Which action resolves the issue?
Select an option, then click Submit answer.
The route map EIGRP->OSPF must have the 10.0.106.0/24 entry to exist in one of the three prefix lists to pass
EIGRP must redistribute the 10.0.106.0/24 route instead of using the network statement
The OSPF process must have a metric when redistributing prefixes from EIGRP
The route map must have the keyword prefix-list to evaluate the prefix list entries
Refer to the exhibit. R1 and R2 cannot establish an EIGRP adjacency. Which action establishes EIGRP adjacency?
Select an option, then click Submit answer.
Remove the current autonomous system number on one of the routers and change to a different value.
Remove the passive-interface command from the R2 configuration so that it matches the R1 configuration.
Add the no auto-summary command to the R2 configuration so that it matches the R1 configuration.
Add the passive-interface command to the R1 configuration so that it matches the R2 configuration.
Refer to the exhibit. When an FTP client attempts to use passive FTP to connect to the FTP server, the file transfers fail Which action resolves the issue?
Select an option, then click Submit answer.
Configure active FTP traffic.
Modify FTP-SERVER access list to remove established at the end.
Modify traffic filter FTP-SERVER in to the outbound direction.
Configure to permit TCP ports higher than 1023.
Refer to the exhibit.
The control plane is heavily impacted after the CoPP configuration is applied to the router. Which command removal lessens the impact on the control plane?
Select an option, then click Submit answer.
access-list 120 permit udp any any eq pim-auto-rp
access-list 120 permit eigrp any host 224.0.0.10
access-list 120 permit ospf any
access-list 120 permit tcp any gt 1024 eq bgp log
An engineer configures DMVPN and receives the hub location prefix of 10.1.1.0724 on R2 and R3 The R3 prefix of 10 1.3.0/24 is not received on R2. and the R2 prefix 10.1,2.0/24 is not received on R3. Which action reserves the issue?
Select an option, then click Submit answer.
Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the command no ip split-horizon eigrp 10 on the tunnel interface of R1
There is no spoke-to-spoke connection DMVPN configuration should be modified to enable a tunnel connection between R2 and R3 and neighbor relationship confirmed by use of the show ip eigrp neighbor command
Split horizon prevents the routes from being advertised between spoke routers it should be disabled with the no ip split-horizon eigrp 10 command on the Gi0/0 interface of R1.
There is no spoke-to-spoke connection DMVPN configuration should be modified with a manual neighbor relationship configured between R2 and R3 and confirmed bb use of the show ip eigrp neighbor command.
Refer to the exhibit. The network administrator has configured the Customer Edge router (AS 64511) to send only summarized routes toward ISP-1 (AS 100) and ISP-2 (AS 200).
router bgp 64511
network 172.16.20.0 mask 255.255.255.0
network 172.16.21.0 mask 255.255.255.0
network 172.16.22.0 mask 255.255.255.0
network 172.16.23.0 mask 255.255.255.0
aggregate-address 172.16.20.0 255.255.252.0
After this configuration. ISP-1 and ISP-2 continue to receive the specific routes and the summary route. Which configuration resolves the issue?
Select an option, then click Submit answer.
router bgp 64511
aggregate-address 172.16.20.0 255.255.252.0 summary-only
router bgp 64511
neighbor 192.168.100.1 summary-only
neighbor 192.168.200.2 summary-only
interface E 0/0
ip bgp suppress-map BLOCK_SPECIFIC
!
interface E 0/1
ip bgp suppress-map BLOCK_SPECIFIC
!
ip prefix-list PL_BLOCK_SPECIFIC permit 172.16.20.0/22 ge 24
!
route-map BLOCK_SPECIFIC permit 10
match ip address prefix-list PL_BLOCK_SPECIFIC
ip prefix-list PL_BLOCK_SPECIFIC deny 172.16.20.0/22 ge 22
ip prefix-list PL BLOCK SPECIFIC permit 172.16.20.0/22
!
route-map BLOCK_SPECIFIC permit 10
match ip address prefix-list PL_BLOCK_SPECIFIC
!
router bgp 64511
aggregate-address 172.16.20.0 255 255.252.0 suppress-map BLOCKSPECIFIC
This page holds a free practice test for the Implementing Cisco Enterprise Advanced Routing and Services (300-410 ENARSI) (300-410) certification from Cisco. You will find 20 free questions, drawn from the full Study4Pass practice set of 510 questions for this exam. The free sample includes 9 single-answer, 8 multiple-answer, 2 drag-and-drop and 1 hands-on lab questions — the same mix of formats you will meet in the full set. The questions follow the same topic balance as the real exam: Dual-stack (IPv4, IPv6) architecture, Virtualization and Network segmentation. The Cisco 300-410 ENARSI exam is a professional-level exam that tests a candidate's knowledge and skills related to implementing and operating Cisco Enterprise Network Core and Security technologies.
The Cisco 300-410 exam is designed for experienced IT professionals who want to demonstrate their knowledge of implementing and troubleshooting complex enterprise networks. The recommended prerequisite for the Cisco 300-410 exam is a valid CCNP Routing and Switching certification.
Use the sample the way you would use the real thing: answer each question on your own first, then open the explanation and make sure you understand why the right answer is right. That habit — reasoning instead of memorizing — is what carries over to exam day. When a topic keeps tripping you up, that is your study plan telling you where to go next.
When you finish the sample, do not just count the score — read it. Every missed question names a topic, and the full set lets you train that topic on its own until it stops costing you marks. That loop of test, review and targeted practice is how this set is designed to be used, from the first free question to the last simulation.
Inside the full 300-410 practice set:
Pick an answer for each question and check it straight away — the correct answer and a full explanation appear under the question. There is no time limit and nothing to sign up for. When an explanation is not enough, use Ask AI: this is an AI-Enabled practice test, and Ask AI explains the concept behind the question in plain language. Ready for more? The full 510-question set adds a timed Exam Simulation mode, topic training for your weak areas, and a flagged-question review, so you can practise the way the real exam feels.
Yes — the 20 questions on this page are completely free, with no signup and no payment details needed.
510 questions. The 20 free questions above are a sample of that full set, in the same style and topic balance.
Yes — every question shows the correct answer with an explanation, and Ask AI can explain the concept behind a question in plain words if you want to go deeper.
No. This is a practice test: the questions are written to mirror the real 300-410 exam’s topics and difficulty, not copied from it.
