Free Cisco 300-410 Exam Dumps Questions & Answers

A switch has been configured to provide DHCP relay on VLAN100 to a server with an IP address
of 10.1.1.1. The DHCP server is sending syslog reports of multiple TFTP requests that also
originate from the switch. As a result, the server CPU exceeded a configured threshold. Which
action does the network administrator recommend to bring the server CPU threshold down?

• A.  Configure the switch with a VACL on VLAN100 to deny TFTP.
• B.  Configure the switch with no ip forward-protocol udp 69 on VLAN100.
• C.  Configure the switch with ip forward-protocol udp 67 globally.
• D.  Configure the switch with an access list on VLAN100 to deny TFTP.

Refer to the exhibit. An administrator must harden a router, but the administrator failed to test the
SSH access successfully to the router. Which action resolves the issue?

• A.  Configure enable secret to log in to the device.
• B.  Configure SSH on the remote device to log in using SSH.
• C.  SSH must be allowed with the transport output ssh command.
• D.  SSH syntax must be ssh -l user ip to log in to the remote device.

Refer to the exhibit. An engineer receives this error message when trying to access another
router in-band from the serial interface connected to the console of R1.
Which configuration is needed on R1 to resolve this issue?

• A.  R1(config)#line console 0
  R1(config-line)# transport preferred ssh
• B.  R1(config)#line vty 0
  R1(config-line)# transport output ssh
  R1(config-line)# transport preferred ssh
• C.  R1(config)#line vty 0
  R1(config-line)# transport output ssh
• D.  R1(config)#line console 0
  R1(config-line)# transport output ssh

Which router attaches the VPN label to incoming packets from CE routing?

• A.  CE router
• B.  P router
• C.  PE router
• D.  core router

What are two characteristics of IPv6 Source Guard? (Choose two.)

• A.  requires IPv6 snooping on Layer 2 access or trunk ports
• B.  requires that validate prefix be enabled
• C.  Used in service provider deployments to protect DDoS attacks
• D.  requires the user to configure a static binding
• E.  recovers missing binding table entries