Share your ROUTE v2.0 Experience

Hi guys,

I know nneettwwrrookkiinngg’s dump is the one to use, which within this dump are the majority of the questions coming from?

@doka @nnetworkking @R’hllor
Please add new questions and check answers
Q1
Where do you enable RIPng?

A. Interface config
B. Something config
C. Global config
D. Router config
E. Something else config

Ans: C

Q2
What has been included in eigrp for ipv6?

Ans: spf algorithm

Q3
Two routers are configured with RIPng but can’t form neighbors as traffic traverses a firewall
Which port does the firewall need to permit to form neighbors

A. TCP Port 521
B. UDP Port 521
C. TCP Port 520
D. UDP Port 520
E. IP Protocol 520
F. IP Protocol 521

Ans: F

Q4
The network engineer types the follow commands in a router:
logging host 172.16.10.12 logging trap 5
What do these commands do?

A. Export messages of notifications for an external server
B. Show notifications in CLI
C. Sends info to host 172.16.10.12 with notifications less than or equal to 5
D. Sends info to host 172.16.10.12 with notifications greater than or equal to 5

Ans: C

Q5
Where does the EVN marks the traffic to separate different users ? (something like that)

A. On the edge interface, with vnet tag
B. On the edge, with 801.q
C. On the trunk, with vnet tag
D. On the trunk, with 802.1 q

Ans: C

Q6
Where to place a Cisco IP SLA in a network

A. Distribution edge
B. Access Edge
C. User Edge
D. Provider Edge

Ans: D+ or A or C

Q7
How EIGRP metric is calculated

A. Bandwidth+Delay
B. Bandwidth*Delay
C. Bandwidth-Delay
D. Bandwidth/Delay

Ans: A or D

Q8
Enable secret encryption type

A.7
B.5
C.MD5
D.other options

Ans: C

Q9
Which EIGRP packets use unreliable delivery (not 100% accurate) (Choose two)

A.query
B.reply
C.request
D.hello
E.update

Ans: C,D

Q10
Exihibit: PCA R1 R2 R3 PCB. What will be the maximum data device A would send to device B, when host A has values MTU of 1500 and MSS of 4000, and host B with MTU of 9198 and MSS of 32000

A. 1500
B. 4000
C. 9198
D. 32000

Ans: B (not sure)

Q11
What LSA type is related to link-local updates.

A. Type 5
B. Type 8
C. Type 4
D. Type 9

Ans: B

Q12
What is the purpose of the following configs: (forgot the exact sentence)
Interface gig 0/1
vnet trunk
ip address 192.168.0.1 255.255.255.0
vnet name cisco

A. Assign the interface to the EVN trunk
B.
C.
D.

Ans: A ?

Q13
Which two statement about GRE tunnel interface are true?

A. A tunnel can be established when a source the source interface is in the up/down state
B. A tunnel destination must be routable, but it can be unreachable
C. To establish a tunnel the source interface must be a loopback
D. To establish a tunnel the source interface must be up/up state
E. A tunnel destination must be a physical interface that is on up/up state

Ans: B,D

Q14
A router is connected to a Windows Syslog server which does not function. What is the reason?

A. Firewall is blocking UDP port 514
B. Firewall is blocking IP port 514
C. Firewall is blocking TCP port 514
D. Firewall is blocking UDP port 512

Ans: A

Q15
Frame Relay LMI autosense. What are true? (Choose two)

A. Line should be up and protocol should be down
B. Protocol must be up
C. It only works on DTEs
D. It only works on DCEs

Ans: A,C

Q16
What other action does an IPv6 filter do when it drops a packet?

Ans: generates an ICMP unreachable message

Q17
Drag drop about DMVPN components.

Ans:

Hub – …. next-hop server
Spoke – … device …. dynamic address
mGRE – … multi tunnel endpoint …
NHRP – … protocol …

Q18
A topology with eigrp, a hub and two spokes, where the loopback of the spokes are not seeing each others.

Ans: Disable split horizon on the hub

Q19/394
A network engineer needs to verify IP SLA operations on an interface that shows an indication of excessive traffic. Which action use to complete this action?

A. Show connectivity
B. Show reachability
C. Show track
D. Show threshold
E. Show frequency

Ans: C

Q20
Where the output will be shown of the command debug condition interface fa0/1?

A. It will show on interface f0/1
B. It will show on interface f0/0
C. Both interfaces will show debugging ouput
D. An interface cannot be used as condition

Ans: A or C

@doka @nnetworkking @R’hllor
Please add new questions and check answers

Q21
Allowing website access between certain times

Ans: Filters using Time-Based ACLs

Q22
IPv6 access list and need to apply it to block traffic INBOUND telnet and interface (Choose two)

Ans: there are 5 choices 2 inbound 3 outbound so we have to choose 2 inbound choices only

Q23
Which access list used to filter upper layer protocol?

A. extended access-list
B. standard access-list

Ans: A

Q24
What are characteristics of PAP and CHAP?

A. PAP provides a challenge to the client
B. CHAP provides a challenge to the client
C. PAP can be used by TACACS+ for with
D. PAP requires a username and optional password
E. CHAP requires a username and optional password

Ans: B,C

Q25

Which command instruct a PPPoE client to obtain its IP address from the PPPoE server?

A. interface dialer
B. ip address negotiated
C. pppoe enable
D. ip address dhcp
E. ip address dynamic

Ans: B

Q26
What show command is used here?

TCB Local Address Foreign Address (state)
6523A4FC 10.1.25.3.11000 10.1.25.3.23 ESTAB
65239A84 10.1.25.3.23 10.1.25.3.11000 ESTAB
653FCBBC *.1723 *.* LISTEN

A. show tcp brief
B. show tcp brief all
C. show tcp brief numeric
D. show tcp brief ip

Ans: C

Q27
Congestion in the network. What is the effect on UDP?

A. Sender will have to buffer more data
B. Receiver will have to buffer more data. Before sending packets to higher layers
C. There will be latency

Ans: C

Q28
What is the maximum hop count with RIP?

A. 15
B. 255
C. 0
D. 16

Ans: A

Q29
RIPv2 Question. Cannot receive RIP updates. Why?

A. Firewall Port block UDP 520
B. Firewall Port block TCP 520
C. Firewall Port block UDP 502
D. Firewall Port block TCP 502

Ans: A

Q30
Engineer has to enable RIP on a link. Where he will issue the command?

A. IPv6
B. Global
C. Router sub command
D. Interface sub command

Ans: C

Q31
Meaning of priority 0 configured in OSPF router?

A. That router cannot participate in the election of DR (or something like that).
B. That router has the highest priority to become a DR
C. That router will not advertise any OSPF route
D. Priority 0 does not exist

Ans: A

Q32
Which OSPF network type doesn’t require a DR/BDR election? (Choose two)
A. Broadcast
B. Point to point
C. Non-Broadcast
D. Point-to-multipoint

Ans: B,D

Q33
OSPF chooses routes in which order, regardless of route’s adminstrative distance and metric?

A. Interarea
B. Intra-area
C. NSSA type1
D. NSSA type 2
E. External type1
F. External type2

Ans:

Order: B A E F C D (Intra-Area (O); Inter-Area (O IA); External Type 1 (E1); External Type 2 (E2); NSSA Type 1 (N1); NSSA Type 2 (N2))

Q34
area 1 range 10.1.0.0 255.255.0.0
summary address 10.1.0.0 255.255.0000

What is the effect of those two commands?

A. area 1 range: command applied to summarize internal OSPF routes (ABR)
B. area 1 range: command applied to summarize external OSPF routes (ASBR)
C. Summary address: command applied to summarize external OSPF routes (ASBR)
D. Summary address: command applied to summarize internal OSPF routes (ABR)

Ans: A,C

Q35
Which LSAs present in OSPF stub area?

A. LSA 1,2,3,4,5
B. LSA 1,2,5
C. LSA 1,2,3
D. LSA 3,5

Ans: C

Q36
Which OSPF area has type 7 LSA?

A. NSSA
B. Total stubby
C. Stubby area
D. Normal area

Ans: A

Q37
A route map was configured and it was distributing OSPF external routes.

A. Distributing E1 only
B. Distributing E1 and E2 using prefix list
C. Distributing E1 and E2 using access list
D. Distributing E2 routes

Ans: B

Q38
You have a router has some interface configured with 10Gbps interface and 1Gbps interface. Which command you use to optimize higher bandwidth?

A. auto-cost reference-bandwidth 10000
B. cost 10000
C. reference-bandwidth 10000
D. auto-cost 10000

Ans: A

Q39
Which are new LSA types in OSPF for IPv6 (OSPFv3)? (Choose two)

A. LSA Type 8
B. LSA Type 9
C. LSA Type 10
D. LSA Type 12

Ans: A,B

Q40
If routers in a single area are configured with the same priority value, what value does a router use for the OSPF Router ID in the absence of a loopback interface?

A. The lowest IP address of any physical interface
B. The highest IP address of any physical interface
C. The lowest IP address of any logical interface
D. The highest IP address of any logical interface

Ans: B

@doka @nnetworkking @R’hllor
Please add new questions and check answers

Q41
You get a call from a network administrator who tells you that he typed the following into his router:
Router(config)#router ospf 1
Router(config-router)#network 10.0.0.0 255.0.0.0 area 0
He tells you he still can’t see any routes in the routing table. What configuration error did the administrator make?

A. The wildcard mask is incorrect
B. The OSPF area is wrong
C. The OSPF process ID is incorrect
D. The AS configuration is wrong

Ans: A

Q42
Which type of OSPF router can be aggregated? (Choose two)

A. the ABR
B. the ASBR
C. Backbone Router
D. Intra Router

Ans: A,B

Q43
If you want to migrate an IS-IS network to another routing protocol. Which routing protocols should you choose? (Choose two)

A. UDP
B. internal BGP
C. TCP/IP
D. EIGRP
E. OSPF
F. RIP

Ans: D,E

Q44
If you configure one router in your network with the auto-cost reference-bandwidth 100 command, which effect on the data path is true?

A. The data path remains the same for all links
B. The data path changes for 10Mbps links only
C. The data path changes for all links
D. The data path changes for 10Gbps links only

Ans: C or A?

Hi all.
I have download the pdf from digitaltut where the questions are categorized on sections similar to the structure of the digitaltut site (as you can see them on the right part, Below ROUTE 300-101). Totally they are almost 373 questions + DND +labs=410. But i am reading a lots of comments refering to a 470 questions dump. Is this the same ? if not where can i find this set of 470q?

i am taking the exam next week, so quick answers are appreciated :-)

@nneettwwoorrkkiinngg

You won’t answer any of my letters.
Please, answer me!

Q44
If you configure one router in your network with the auto-cost reference-bandwidth 100 command, which effect on the data path is true?

A. The data path remains the same for all links
B. The data path changes for 10Mbps links only
C. The data path changes for all links
D. The data path changes for 10Gbps links only

Ans: C or A?

A

I’ve seen all the questions you posted so they are not new friend

@Bonsai
Yes you are right
But I can’t find this questions in dump from nneettwwoorrkkiinngg.

@Bonsai
Yes you are right
But I can’t find this questions in dump from nneettwwoorrkkiinngg.

@doka @nnetworkking @R’hllor
Please add questions and check answers

Q45
EIGRP is implemented in a Frame Relay network but there is no adjacency. Which options cause the adjacency to come up? (choose two)

A. Disable split horizon
B. Neighbor command to configure it for a point to multipoint on the WAN interface
C. Create an static route pointing to the destination
D. EIGRP is not supported for Frame Relay

Ans: A,B

Q46
Which authentication methods are EIGRP uses?

A. SHA
B. MD5
C. XDA
D. CHAP
E. Cisco

Ans: B

Q47
What is true about EIGRP’s redistributed static routes and summarized routes? (Choose two)
A. summary routes have AD of 5
B. static redistributed routes have AD of 170

Ans: A B

Q48
An exhibit with three routers with three loopback interfaces. One of them was configured as EIGRP stub, question was to choose what appears in the other router routing table?

A. Loopback of the stub router advertised
B. Loopback of the stub router was not advertised

Ans: A

Q49
Which type of message does a device configured with the eigrp stub command send in response to EIGRP queries?

A. invalid request
B. unavailable
C. stuck in active
D. stub-only
E. reject
F. inaccessible

Ans: F

Q50
What command would you use to set EIGRP routes to be prioritized?

A. distance 100
B. distance 89
C. distance eigrp 100
D. distance eigrp 89

Ans: D

Q51
Where are EIGRP successor routes stored?

A. In the routing table only
B. In the neighbor table only
C. In the topology table only
D. In the routing table and the topology table
E. In the routing table and the neighbor table

Ans: D

Q52
You need the IP address of the devices with which the router has established an adjacency. Also, the retransmit interval and the queue counts for the adjacent routers need to be checked. What command will display the required information?

A. show ip eigrp adjacency
B. show ip eigrp topology
C. show ip eigrp interfaces
D. show ip eigrp neighbor

Ans: D

Q53
What is used in EIGRP metric calculation?

A. maximum delay
B. minimum delay
C. average delay
D. minimum interface bandwidth

Ans: D

Q54
Which command will display all the EIGRP feasible successor routes known to a router?

A. show ip routes
B. show ip eigrp summary
C. show ip eigrp topology
D. show ip eigrp adjacencies

Ans: C

Q55
Which statement about local policy routing is true?

A. It is used to policy route packets that are generated by the device.
B. It requires all packets to be packet switched.
C. It is used to policy route packets that pass through the device.
D. It requires all packets to be CEF switched.
E. It supports IPv4 packets only.
F. It requires an ip address or access list as the matching criteria.

Ans: A

Q56
Valid range for BGP private ASNs?

A. 64512-65535
B. 1-64000
C. 64512-65534

Ans: A

Q57
Which TCP port for BGP?

A. port 179
B. port 197
C. port 180
D. port 178

Ans: A

Q58
What are two BGP neighborship states? (Choose two)

A. Connect
B. Open Sent
C. Open
D. Passive

Ans: A B

Q59
What attribute is used to influence traffic from AS200 and AS300 so that it uses link to reach AS100?

A. MED
B. AS_path
C. weight
D. local preference

Ans: A

Q60
What is the function of the command “redistribute ospf 1 match internal” ?

A. means that just inter and intra will be redistributed
B. means routes that match “internal” route-map will be redistributed
C. all routes except internal routes will be redistributed

Ans: A

Q61
Redistributing BGP into OSPF what statement is correct? (there is a graphic of redistributing BGP into OSPF with a route-map)
route-map deny 10
match ip address 10
route-map permit 20
access-list 10 permit 172.16.0.0 0.0.0.255

A. 172.16.0.0/24 will NOT be redistributed into OSPF
B. 172.16.0.0/24 will be redistributed into OSPF
C. Routes permitted by ACL 10 will be redistributed
D. All routes will be filtered

Ans: A

Q62
Which is an invalid option when redistributing from EIGRP into OSPF?

A. ACL
B. tag
C. metric
D. route map

Ans: A

Q63
Got a diagram and asked how to configure ipv6 dhcp relay

A. DHCPv6 server facing Interface:
ipv6 address autoconfig
ipv6 enable
exit
In clients facing interface
ipv6 address
ipv6 dhcp relay destination

B. DHCPv6 server facing Interface:
ipv6 dhcp relay destination
ipv6 address
exit
In clients facing interface
ipv6 enable
ipv6 address autoconfig

Ans: A

Q64
Which three configuration parameters can a DHCPv6 pool contain? (Choose three)

A. domain search list
B. router IP
C. default gateway
D. prefix delegation
E. DNS servers
F. subnet mask

Ans: A,D,E

Q65
Refer in the exhibit. A packet capture indicates that the router is not forwarding the DHCP packets that it receives on interface FastEthernet0/0. Which command needs to be entered in global configuration mode to resolve this issue?

A. ip helper-address
B. ip DHCP relay
C. service DHCP
D. ip forward-protocol

Ans: B

Q66
Refer in the exhibit. A packet capture indicates that the router is not forwarding the DHCP packets that it receives on interface FastEthernet0/0. Which command needs to be entered in global configuration mode to resolve this issue?

A. ip helper-address
B. ip DHCP relay
C. service DHCP
D. ip forward-protocol

Ans: B

Q67
What is the output of the following command?
show ip vrf

A. show the vrf present in the route and their associated route distinguisher
B. Displays IP routing table information associated with a VRF
C. Show’s routing protocol information associated with a VRF.
D. Displays the ARP table (static and dynamic entries) in the specified VRF.

Ans: A

Q68
Which two statements about route targets that are configured with VRF-Lite are true? (Choose two)

A. Route targets uniquely identify the customer routing table
B. Route targets control the import and export of routes into a customer routing table
C. Route targets are supported only when BGP is configured
D. When IS-IS is configured, route targets identify the circuit level in which the customer resides
E. When BGP is configured, route targets are transmitted as BGP standard communities
F. Route targets allows customers to be assigned overlapping addresses

Ans: B,C

Q69
Technologies used in preparing Service Provider IPv6? (Choose two)

A. 6ND
B. 6RD
C. 6VPE
D. VRF-Lite
E. DS-Lite
F. Dual-stack

Ans: B,E

Q70
What other action does an IPv6 filter do when it drops a packet?

A. Generates an ICMP unreachable message
B. Generates an Router Advertisement unreachable message
C. Generates an Router Solicitation unreachable message

Ans: A

Q71
What is the command to only check neighbor router using RIPng?

A. show ipv6 rip one next-hops
B. show ipv6 rip next-hops one
C. show ipv6 next-hops rip
D. show ipv6 next-hops one rip

Ans: A

Q72
What is the most security SNMP version?

A. v2c auth
B. v2c
C. v3
D. v1

Ans: C

Q73
What is the reasons of command:
Router(config)#snmp-server host 192.168.1.3 traps version 2c CISCORO

A. For network system to management server
B. allow 192.168.1.3 only

Ans: A

Q74
Up/ down interface, what log severity level?

A. level 3
B. level 4
C. level 5
D. level 0

Ans: A

Q75
The network engineer types the follow commands in a router:
logging host 172.16.10.12 logging trap 5

What do these commands do?

A. Export messages of notifications for an external server
B. Show notifications in CLI
C. Sends info to host 172.16.10.12 with notifications less than or equal to 5
D. Sends info to host 172.16.10.12 with notifications greater than or equal to 5

Ans: C

Q76
Question about NTP Stratum:

A. stratum 0
B. stratum 1
C. stratum 2
D. stratum 15
E. stratum 16

Ans: depends on the question:

Stratum 0 – highest, GPS clock
Stratum 1- primary time servers, connected to stratum 0
The upper limit for Stratum is 15;
Stratum 16 is used to indicate that a device is unsynchronized

Q77
What is the viable successor of NAT-PT?

A. NAT
B. NAT64
C. NPTv6
D. DHCPv6

Ans: B

Q78
NPTv6 restrictions?

Possible ans:

– Virtual Routing and Forwarding (VRF)
– NAT64 on the same interface.
– Multicast and Firewall is not supported.
– Payload address or port translation is not supported.
– Syslog is not supported.

Q79
Which option can you use to monitor voice traffic when configuring an IP SLA?

A. UDP-Jitter
B. TCP-Jitter
C. ip sla logging traps
D. ip sla reaction-configuration

Ans: A

Q80
Which command is used to check IP SLA when an interface is suspected to receive lots of traffic with options?

A. show track
B. show threshold
C. show timer
D. show delay

Ans: A

Q81
Refer to the exhibit. How can you configure a second export destination for IP address 192.168.10.1?
configure terminal
ip flow-export destination 192.168.10.1 9991
ip flow-export version 9

A. Specify a different TCP port
B. Specify a different UDP port
C. Specify a VRF
D. Configure a version 5 flow-export to the same destination
E. Specify a different flow ID

Answer: B

Q82
How route tags can be set? (Choose two)

A. only with route-maps
B. only with tag lists
C. can be set with route-maps
D. can be set with taglist
E. only used on link state RPs

Ans: C,D

I did not find 1-82 questions in the I did not find 1-82 questions in the dump nneettwwoorrkkiinngg dump

Q3
Two routers are configured with RIPng but can’t form neighbors as traffic traverses a firewall
Which port does the firewall need to permit to form neighbors

A. TCP Port 521
B. UDP Port 521
C. TCP Port 520
D. UDP Port 520
E. IP Protocol 520
F. IP Protocol 521

This must be “D”. RIP works on UDP/520.
How all of you can tell IP 521???

IP is used only for EIGRP (IP/88) and for OSPF (IP/89). RIP uses UDP 520 and BGP uses TCP 179

RIPng use UDP 521
RIP use UDP 520

OK, then. You’re right. So It should be “B” then. Permit UDP 521.

@All.. especially Doka & Jimmy… I passed with a 9xx..

Sims were EIGRP Stub, OSPF SIM “not the evaluation” and EIGRP Redistribution

EIGRP Stub is exacly as shown here in digitaltut premium

OSPF SIM has the area changed and IP address but everything was the same.

EIGRP Redistribution: I got the FA0/0 link between R2 and R3 so had to use the Distance EIGRP 95 105 on R2 EIGRP configuration mode so that the path can go from R2, R3 and R4.

D&D were LMI, Loose and Strict Mode, Access List, Adverse Network Conditions

I can see all the questions from the June update corrected Kikavich 477 and Premium so study that as much as you can because about 30 odd questions are from that important document alone, I would say 80 percent and about 5 new questions.

Questions in the route exam I can remember:-

Q. Which two statements about NTP operation are true? (Choose two)

A. If multiple NTP servers are configured, the one with the lowest stratum is preferred
B. By default, NTP communications use UDP port 123.
C. If multiple NTP servers are configured, the one with the highest stratum is preferred.
D. Locally configured time overrides time received from an NTP server.
E. “Stratum” refers to the number of hops between the NTP client and the NTP server.

Verified Answer: A, B

Which set of actions does a network engineer perform to set the IPv6 address of a DHCP relay server at the VLAN interface level?

A. Enter the VLAN interface configuration mode and define the IPv6 address of a DHCP relay server

B. Enter the global configuration mode and enable the IPv6 DHCP relay

C. Enter the global configuration mode, enable IPv6 DHCP relay from interface configuration mode and define the IPv6 address of a DHCP relay server

D. Enter the VLAN interface configuration mode, enable IPv6 DHCP relay, and define the IPv6 address of a DHCP relay server

Verified Answer: D

2. What LSA type is related to link-local updates.

A. Type 5
B. Type 8
C. Type 4
D. Type 9

Verified Answer: B

Which statements are true to configure IPv6 EIGRP configuration for route advertisements? Choose

A. Route Advertisements are configured at the router global configuration
B. Route Advertisements are configured at the interface configuration
C. An IPV6 router ID
D. Uses link-local ip address for route advertisements
E. Ipv6 eigrp uses only the configured ipv6 global addresses for communication
F. Other option

Verified Answer: B and D

What is the purpose of the following configs: (Can’t remember the entire question)

Interface gig 0/1
vnet trunk
ip address 192.168.0.1 255.255.255.0
vnet name cisco

Verified Answer “This configuration assigns a EVN trunk interface”

In which state do DR and BDR establish adjacency with each OSPF router in the network?

A. Init State
B. Exstart State
C. Exchange State
D. ???

Verified Answer: B

Which two statements about Frame Relay Point-to-Point connections are true? (Choose Two)

A. Changing a point-to-point sub interface to a different type requires the device to be reloaded.
B. They use two DLCIs to communicate with multiple endpoints over the Frame Relay cloud.
C. The device can establish a point-to-point connection to the cloud without a DLCI.
D. They can operate normally without a DLCI map.
E. Each physical interface that extends to the Frame Relay cloud can support a single SVC.

Verified Answer: A, B

The enterprise network WAN link has been receiving several denial of service attacks from both IPv4 and IPv6 sources. Which three elements can you use to identify an IPv6 packet via its header, in order to filter future attacks? (Choose three)

A. Traffic Class
B. Source address
C. Flow Label
D. Hop Limit
E. Destination Address
F. Fragment Offset

Verified Answer A, C, D

Which traffic characteristic is the reason that UDP traffic that carries voice and video is assigned to the queue only on a link that is at least 768 kbps?

A. typically is not fragmented
B. typically is fragmented
C. causes windowing
D. causes excessive delays for video traffic

Verified Answer: A

What happens when a router receives a packet with a TTL of 0?

a. the router sends an ICMP Destination Unreachable Message to the host that sent the packet.
b. the router attempts to forward the packet along an alternate path in the routing table
c. the router flags the packet and forwards it to the next hop
d. the router sends an ICMP Time Exceeded Message to the host that sent the packet

Verified Answer: A

Which is an invalid command/keyword when configuring redistribution

a. tag
b. access list
c. route map
d. other (valid) option

Verified Answer: B.

Which action can you take to mitigate unicast flooding in a network?
A. Configure VLANs to span multiple access-layer switches.
B. Implement a nonlooped network topology.
C. Set the ARP timer value to less than the CAM timer value.
D. Set the CAM timer value to less than the ARP timer value.

Verified Answer: C

Which is an invalid command/keyword when configuring redistribution?

a. tag
b. access list
c. route map
d. other (valid) option

Verified Answer: B

Multicast application must be accessible between sites, but not be accessible outside of the organization. Based on the scoping requirements, the multicast group address for the application will be allocated out of which range?

A. FF00::/16
B. FF08::/16
C. FF02::/16
D. FF0E::/16

Verified Answer: B

18. VPN support for IPv4 and IPv6 address families. Which command enables a VRF that supports these requirements?

Router (config-vrf)#route-target 004:006
Router(config)#ip vrf CUSTOMER
Router(config)#vrf definition CUSTOMER
Router(config-vrf)#rd 004:006

Verified Answer: C

What are the two correct statements about enable secret and enable password command?

a. the enable password command has a strong encryption algorithm than enable secret
b. if both commands are missing from the global configuration, vty lines use the console password
c. the enable secret command is backwards compatible with more versions of IOS
d. the enable secret and enable password commands must be used together
e. the enable secret command overrides enable password

Verified Answer: C, E

Which feature is supported with stateful NAT64 ?

a. IP multicast
b. NAT44 and NAT64 on the same interface
c. VFR
d. FTP and ICMP on an application layer gateway

Verified Answer: C

What is indicated by the show ip cef command for an address?

A. CEF is unable to get routing information for this route.
B. CEF cannot switch packet for this route and passes it to the next best switching method.
C. A valid entry and is pointed to hardware based forwarding.
D. CEF cannot switch packet for this route and drops it.

Verified Answer: B

Other than a working EIGRP configuration, which option must be the same on all routers for EIGRP authentication key role over to work correctly?

A. SMTP
B. SNMP
C. Password
D. Time

Verified Answer: D

Which purpose of the AAA accounting feature is true when you use TACACS+ authentication?

a. It prompts users to change their passwords when they expire
b. it saves a timestamped record of user activity
c. it controls the activities that the user is permitted to perform
d. it verifies the user identity.

Verified Answer: B

How can you configure a second export destination for IP address 192.168.10.1?

A. Specify a different TCP Port
B. Specify a different UDP port.
C. Specify a VRF
D. Configure a version 5 flow-export to the same destination
E. Specify a different flow ID

Verified Answer: B

Which of the following situations results in a routing loop ?

A. when you have a single point of redistribution
B. when you use NAT translation on the edge of your network
C. when you implement contiguous IP routing blocks
D. when you implement noncontiguous IP routing blocks
E. when you have multiple points of redistribution

Verified Answer: E

Which two tasks must you perform to configure a BGP peer group?

A. Configure the soft-update value
B. Set the advertisement interval
C. Assign neighbours to the peer group
D. Activate each neighbour
E. Activate the default route

Verified Answer: C and D

True statement about conditional debugging

A. limited to Ethernet, serial, and multilink interfaces
B. generates debug messages only for packets entering the router
C. limit the output to a specific interface
D. support only one condition at a time

Verified Answer: C

What are the two benefits of BGP peer groups

A. support groups of paths
B. A configuration change can be applied simultaneously to all peers in the peer group
C. optimize backdoor routes
D. updated via multicast
E. each neighbour in a peer group can have different inbound BGP Policies
F. they use soft updates to minimize bandwidth consumption

Verified Answer: B, F

Which two features are added in MSCHAP Version 2

A. Backwards-compatibility with MSCHAP version 1
B. Using the MD5 hash for stronger security
C. Ability to change an expired password
D. using 3 way handshakes for authentication
E. mutual authentication between peers

Verified Answer: C, E

“I got this wrong as I chose A and E, I couldn’t remember, as I had over 200 plus questions in my head, so give me a break lol”

4.What is the default authentication in RIPv2 when authentication is enabled

A. SHA1 authentication
B. Enable password authentication
C. Plaintext authentication
D. MD5 authentication

Verified Answer: C

5. Where must a network engineer configure the ip helper-address command on a router

A. On the interface that will receive the broadcasts
B. On the DHCP configuration
C. the interface that is closed to the destination DHCP server
D. on the global configuration mode

Verified Answer: A

If device R1 has 1-Gigabit and 10-Gigabit Ethernet interfaces, which command do you enter so that it takes full advantage of OSPF costs ?

A. R1(config-router)#auto-cost reference-bandwidth 10000
B. R1(config-router)#auto-cost reference-bandwidth 10000000000
C. R1(config-if)# ip ospf cost 10000000000
D. R1(config-if)# ip ospf cost 10000
E. R1(config-route-map)#set metric 10000
F R1(config-route-map)#set metric 10000000000

Verified Answer: A

Which three NTP operating modes must the trusted-Key command be configured on for authentication to operate properly? (Choose Three)

A. interface
B. client
C. peer
D. server
E. broadcast

Verified Answer: B,D,E

Which two statements about Frame Relay LMI autosense are true on a Router? (Choose two)

A. It requires the LMI type to be explicitly configured.
B. It operates on Frame Relay DTE interfaces.
C. It operates on Frame Relay DCE interfaces.
D. It operates when the line is up by the line protocol is down.
E. It requires the line protocol to be up.

Verified Answer: B,D

Refer to the exhibit. After configuring GRE between two routers running OSPF that are connected to each other via a WAN link, a network engineer notices that the two routers cannot establish the GRE tunnel to begin the exchange of routing updates. What is the reason for this?

A. Either a firewall between the two routers or an ACL on the router is blocking IP protocol number 47.
B. Either a firewall between the two routers or an ACL on the router is blocking UDP 57.
C. Either a firewall between the two routers or an ACL on the router is blocking TCP 47.
D. Either a firewall between the two routers or an ACL on the router is blocking IP protocol number 57.

Verified Answer: A

Other than a working EIGRP configuration, which option must be the same on all routers for EIGRP authentication key role over to work correctly?

A. SMTP
B. SNMP
C. Password
D. Time

Verified Answer: D

Which SNMP verification command shows the encryption and authentication protocols that are used in SNMPv3?

A. show snmp view
B. show snmp
C. show snmp user
D. show snmp group

Verified Answer: C

What is EIGRP Summary Route Administrative Distance?

A. 90
B. 170
C. 5
D. 110

Verified Answer: C

Refer to the following configuration command.
router(conttg)# ip nat inside source static tcp 172.16.10.8 8080 172.16.10.8 80
Which statement about the command is true?

A. Any packet that is received in the inside interface with a source IP port address of 1 72.16.10.8:80 is translated to 172.16.10.8 8:80
B. Any packet that is received in the inside interface with a source IP address of 172 16 10 8 is redirected to port 8080 or port 80
C. The router accepts only a TCP connection from port 8080 and port 80 on IP address 1 72 16 10 8
D. Any packet that is received in the inside interface with a source IP port address of 172 1 6 10 8 8080 is translated to 172.16.10.8 80

Verified Answer: D

A Network engineer wants to configure logging to compile and send information to an external server. Which type of logging must be configured?

A. Terminal
B. Syslog
C. Buffer
D. Console

Verified Answer: B

Which two OSPF router types can perform summarize in an OSPF network? (Choose two)

A. summary router
B. area border router
C. autonomous system boundary router
D. internal router
E. backbone router

Verified Answer: B,C

In which two ways can split horizon issues be overcome in a Frame Relay network environment? (choose two.)

A. Configuring one physical serial interface with Frame Relay to various remote sites.
B. Configure a loopback interface with Frame Relay to various remote sites.
C. Configuring multiple subinterfaces on a single physical interface to various remote sites.
D. Enabling split horizon.
E. Disabling split horizon

Verified Answer: C,E

Which two features does RADIUS combine? (choose two)

A. Telnet
B. Accouting
C. SSH
D. Authenticaiton
E. Authorization

Verified Answer: D,E

During which DMVPN phase is spoke-to-spoke communication enabled?

A. Phase 1
B. Phase 6
C. Phase 5
D. Phase 2
E. Phase 4

Verified Answer: D

Which three benefits does the Cisco Easy Virtual Network provide to an enterprise network? (Choose three.)

A. simplified Layer 3 network virtualization
B. improved shared services support
C. enhanced management, troubleshooting, and usability
D. reduced configuration and deployment time for dot1q trunking
E. increased network performance and throughput
F. decreased BGP neighbor configurations

Verified Answer: A, B, C

Questions about TACAS AAA local database question Authentication— can’t remember exactly but I believe I got it wrong as I had not seen this questions anyway on this site or through any new updates

Options were
Local does not do accounting
Limited to only username authentication once
???
???

Which two tasks does a DHCP relay agent perform? (Choose two)
A. It forwards DHCPHELLO and DHCPREQUEST messages to the DHCP server
B. It forwards DCHPREQUEST and DHCPACK messages to the DHCP server
C. It forwards DHCPOFFER and DHCPCOMPLETE messages to the DHCP server
D. It forwards DHCPDISCOVER and DHCPREQUEST messages to the DHCP server
E. It forwards DHCPOFFER and DHCPACK messages to the DCHP server

Verified Answer: DE
“I might have got this one wrong as I couldn’t remember, but D and E is correct, I choose D and another one”

Where must a network engineer configure the ip helper-address command on a router

A. On the interface that will receive the broadcasts
B. On the DHCP configuration
C. the interface that is closed to the destination DHCP server
D. on the global configuration mode

Verified Answer: A

What is a function of NPTv6?

A. It interferes with encryption of the full IP payload.
B. It maintains a per-node state.
C. It is checksum-neutral.
D. It rewrites transport layer headers.

Verified Answer: C

What are two limitations when in use of NPTv6 for IPV6 vs IPV6 Address translation?

A. stateful address translation
B. a limit of 32 1-to-1 translations
C. lack of overloading functionality
D. identify all interfaces NAT inside or outside
E. 1-to-1 prefix rewrite
F. mismatched prefix allocations

Verified Answer: C,F

I again want to thank Digital Tut Premium, Kikavich Document, Doka and Jimmy for their contributions as they made it possible…

It was a very hard exam and I studied like a lunatic, day in day out… completely obsessed with study, to the point I have ringing in my ears due to stress… I can now take a big sigh of relief and finish my CCNP with Switch… however I am not going to study until a few months…

Easily the hardest exam out of the 3, due to questions being constantly updated and such a large pool of questions to choose from, I have taken switch before but it has expired so I know it is a much easier exam than Route..

Study your ass off if you want to pass this, and if you want to gaurantee a pass, just study the concept like I did with the help of this site.

Phew… what a day… I need a break.. jeez

Good Luck everyone!

@mark_of_the_colossus, is the tut premium worth it?. I did email them and as per them, they only have about 80% dumps.

Hi guys,
Passed with 9XX. Labs and DnD same as @mark_of_the_colossus, but GRE features DnD too.
Neeetworkiiiiiing dump is perfectly valid. Review the last questions commented above. I got some of them in my exam. I remember only 5 or 6 new questions. One is about command “show track 1” .. what info provides? I answered tracking information statistics..

Thank you very much to digitaltut and the guys in this forum for your help!!!

How can you configure a second export destination for IP address 192.168.10.1?
A. Specify a different TCP Port
B. Specify a different UDP port.
C. Specify a VRF
D. Configure a version 5 flow-export to the same destination
E. Specify a different flow ID

answer B or C

Hello All,

I´m trying to open simlets from @nneettwwrrookkiinnggg, but i still get this error:

….The image c3745-adventerprisek9-mz.124-25d.image is missing….

I have gns 2.1.8(2.1.6 tried) and I have imported above mentioned file.

Could you please help me?

Thank you

Maybe I have bad image, but when I have tried it, router was working.

thanks

Hi

@GNS:
Try with GNS 0.8.7. You can install it as a different program, there is not need to uninstall GNS 2.1.8.

@Kot:
Almost all of the questions are in all the dumps around the website. Please don´t Spam, world will thank you that ;)

Hi,

@delwans, thanks for answer, it is not working too, there is som Error, do you have some different idea? Is it working for you ?

Thank you

Using new backup router in spite of faulty one in ospf domain but relationship with neighbor in one
interface only not working , what is the reason of this problem? (Choose Two)
A. area Id match
B. authentication mismatch
C. process id of ospf not match
D. ospf timers not match
E. MTU mismatch
DE or BD
PLS ANS THIS QUESTION GUYS

Hi,

I´m sorry, I thought that, I have simlets from @nneettwwrrookkiinnggg, but I have them from digitaltut, question is whrere I can find simlets from @nneettwwrrookkiinnggg ? because I found only questions from him.

Thank you

Tough test.
4labs: EIGRP STUB, OSPF/EIGRP REDIS, OSPF TOTALLY STUBBY, and IPv6 Virtual Link (yep4)
DND: Radius/Tacacs,NAT64/NTv6, COPP/MPP, Adverse Network Cond., ACLS, BGP, AAA
Few new questions #8xx

@anonymous
Q388 fixed

@Anonymous

A,D

https: / / vceguide.com/what-is-the-reason-of-this-problem-2/

Hi All

Update Files

drive.google.com/drive/u/0/folders/1Cf4MHTm8Qt5-_jYzJt6PXNy6b6YOBEx1

Thanks nneett

@kot

What we need are the actual questions from the exam. You are not helping at all.

QUESTION 71
The enterprise network WAN link has been receiving several denial of service attacks from both IPv4 and IPv6 sources. Which three elements can you use to identify an IPv6 packet via
its header, in order to filter future attacks? (Choose three)
A. Traffic Class
B. Source address
C. Flow Label
D. Hop Limit
E. Destination Address
F. Fragment Offset

BCE oh ACD??????

I am also confused with the correct answer on the question above ^

The enterprise network WAN link has been receiving several denial of service attacks from both IPv4 and IPv6 sources. Which three elements can you use to identify an IPv6 packet via
its header, in order to filter future attacks? (Choose three)
A. Traffic Class
B. Source address
C. Flow Label
D. Hop Limit
E. Destination Address
F. Fragment Offset

BCE oh ACD??????

Please SOMEONE EXPLAIN. :)

Are the premium dumps included in nneettwwrrookkiinnggg’s dumps???

@nneettwwrrookkiinnggg
@delwans
@R’hllor
@Bonsai
@ Borysomierz
@Luna

Please forgive me.
Just trying to help.

@nneettwwrrookkiinnggg

Hello, @nneettwwrrookkiinnggg

Please could you help me with your simlets, I cannot find them, please share with me link with valid simlets.

Thank you very much

QUESTION 629 answer is wrong. The correct answer from answer from the Official Cert Guide and Cisco is A

Where do you enable RIPng?
A. Interface config
B. Something config
C. Global config
D. Router config
E. Something else config

Correct Answer: A

Reference:
R1# show running-config

interface FastEthernet0/0.1
ipv6 address 2012::1/64
ipv6 rip fred ENABLE

Getting nervous with this exam, got it on the 7th August!

Questions I’m ok with, it’s the DnDs and Sims :(

@Excellence
Thanks bro Fixed the answer

GNS

why didn’t find simlets

int the vce file EIGRP-OSPF simlets questions

h t t p s : / / drive.google.com/file/d/1BLpk9sf4pLemjlWOSs5HZ1g3xcapJtNV/view?usp=sharing

Hello People,

I am being quietly around in this forum for at least 3 months, and start talking like two weeks ago. With this, I am telling that trust a little more the dumps than actual people over here that “found” a mistake, because normally the dump has the true answer, and if any of you have a correction please please post it with some links that sustain your argument although they seem completely obvious to you. With that I will ask for your forgiveness and please @nneettwwoorrkkiinngg refix this question:

Which configuration can you apply to a device so that it always blocks outbound web traffic on
Saturdays and Sundays between the hours of 1:00 AM and
11:59 PM?

A.
time-range SATSUN periodic Saturday Sunday 1:00 to 23:59
access-list 102 permit udp any any eq 80 time-range SATSUN
access-list 102 permit tcp any any eq 443 time-range SATSUN
interface Vlan303
ip address 10.9.5.3 255.255.255.0
ip access-group 102 out

B.
time-range SATSUN periodic Saturday Sunday 1:00 to 23:59
access-list 102 permit tcp any any eq 80 time-range SATSUN
access-list 102 permit tcp any any eq 443 time-range SATSUN
interface Vlan303
ip address 10.9.5.3 255.255.255.0
ip access-group 102 in

C.
time-range SATSUN periodic Saturday Sunday 1:00 to 11:59
access-list 102 permit tcp any any eq 80 time-range SATSUN
access-list 102 permit tcp any any eq 443 time-range SATSUN
interface Vlan303
ip address 10.9.5.3 255.255.255.0
ip access-group 102 in

D.
time-range SATSUN absolute Saturday Sunday 1:00 to 23:59
access-list 102 permit tcp any any eq 80 time-range SATSUN
access-list 102 permit tcp any any eq 443 time-range SATSUN
interface Vlan303
ip address 10.9.5.3 255.255.255.0
ip access-group 102 in

the correct Answer should be A instead of B.

Explanation:

A. the access list includes UDP port instead of TCP. And that still true, but the question is “block” not “permit”, the ACL are “permit” not “deny”, that means the only the UDP 80 and TCP 443 will pass the ACL and the rest of traffic including the TCP 80 will be blocked by the implicit deny.
C. The time range has 11:59 instead of 23:59, that’s wrong time for 11:59PM
D. The time range is Absolute, should be periodic.

Note: Although the access-group is applied in “in” direction, we don’t know exactly where this vlan is configured in the router, it can be the VLAN where the traffic enters the router so it will work as well.

@LUNA

The enterprise network WAN link has been receiving several denial of service attacks from both IPv4 and IPv6 sources. Which three elements can you use to identify an IPv6 packet via
its header, in order to filter future attacks? (Choose three)
A. Traffic Class
B. Source address
C. Flow Label
D. Hop Limit
E. Destination Address
F. Fragment Offset

Nneettwwoorrkkiinngg dump has an explanation that I quote:

Explanation/Reference:
Which three elements can you use to identify an IPv6 packet via its header, in order to filter future attacks?
Correct answer is BCE
Google: Basic_IPv6_Security_Considerations (I have problems with links)
The key word is …in order to filter future attacks? Not What is different between IPV4 and IPV6 header.
That would be so eased, Cisco won’t give ease questions :)
Please read the article from the link that I provide you”

And there you can read this:

“Packet classifiers use the triplet of Flow Label, Source Address, and Destination Address fields to identify to which flow a particular packet belongs. Packets are processed in a flow-specific manner by the nodes that have been set up with flow-specific state. “

@TIM…..yeah I hear you……questions I am getting comfortable with….DND and SIMS……..very worried and I test on the 1st

@R’hllor, thanks for the update.

@kot,

The correct answer for the question below is B (UDP 521) from Cisco Official Cert (explicitly stated on page 108)

Q3
Two routers are configured with RIPng but can’t form neighbors as traffic traverses a firewall
Which port does the firewall need to permit to form neighbors

A. TCP Port 521
B. UDP Port 521
C. TCP Port 520
D. UDP Port 520
E. IP Protocol 520
F. IP Protocol 521

Ans: B

What show command is used here?

TCB Local Address Foreign Address (state)
6523A4FC 10.1.25.3.11000 10.1.25.3.23 ESTAB
65239A84 10.1.25.3.23 10.1.25.3.11000 ESTAB
653FCBBC *.1723 *.* LISTEN

A. show tcp brief
B. show tcp brief all
C. show tcp brief numeric
D. show tcp brief ip

Ans: B

Take note of the last line with the word LISTEN. In order to get the LISTEN state, you must enter the command sh tcp br all. There is nothing like sh tcp brief numeric in any version of Cisco IOS.

Reference:the output below is from my WAN Edge (Cisco ASR 1006) in production ( I have removed the actual IP addresses)
#show tcp brief ?
all All end-points (even listeners)
numeric Numeric Display
| Output modifiers

#show tcp brief all
TCB Local Address Foreign Address (state)
7F1B2850B168 x.x.x.x x.x.x.x ESTAB
7F1B28DD40F0 x.x.x.x x.x.x.x LASTACK
7F1B26D0E7D8 x.x.x.x x.x.x.x* LISTEN

#show tcp brief
TCB Local Address Foreign Address (state)
7F1B2850B168 x.x.x.x x.x.x.x ESTAB
7F1B28DD40F0 x.x.x.x x.x.x.x LASTACK

sh tcp br command does not show the LISTEN state

@Everest 74

Good luck buddy, update on here once you’ve taken it :)

@Excellence
Thanks Bro
Updated and Add Questions

@nneettwwrrookkiinnggg

When will you share the updated .VCE???

@R’hllor and All

I told my friend 1 hour ago
He pass the exam yesterday :) I am happy to hear
He said me my dump is valid

@Pete
take it
drive.google.com/drive/u/0/folders/1Cf4MHTm8Qt5-_jYzJt6PXNy6b6YOBEx1

All we need just one dump file
so if you know new questions give me
I will add vce and pdf

@nneettwwrrookkiinnggg when are you taking the exam? I’ll have it really really soon