Cisco 300-410 Free Practice Questions — Page 2

Correct Answer: B. Change sequence 10 in the route-map command from permit to deny.

The current route-map RM-OSPF-DL has permit at sequence 10, which matches 192.168.2.2 and permits it into the routing table — the opposite of what is needed. To block the route, sequence 10 must be changed to deny so that matched routes are filtered out. A distribute-list with a route-map using deny will prevent the matched prefix from being installed. Option A is wrong because standard access lists match host addresses, and this ACL already correctly matches 192.168.2.2; an extended ACL is not needed here. Option C is wrong because a prefix-list could also work, but the issue is the permit action, not the match method. Option D is wrong because adding a deny 20 without fixing the permit 10 still allows the route through at sequence 10 first.

Correct Answer: C. Cisco Express Forwarding must be enabled on all participating BFD endpoints.

BFD (Bidirectional Forwarding Detection) requires Cisco Express Forwarding (CEF) to be enabled on all routers participating as BFD endpoints. CEF is needed because BFD runs at the hardware/forwarding plane level for fast failure detection. BFD does not require all routers in the path to have BFD enabled — only the two endpoints. Option A is wrong because jumbo frames are not a BFD requirement. Option B is wrong because intermediate routers do not need BFD; only the two endpoints do. Option D is wrong because BFD with BGP does not require specific BGP timer configuration; BFD operates independently of BGP timers.

Correct Answer: A. R2 does not have a route to the next hop, so R2 does not advertise the prefix to other clients.

From the exhibit, R2's BGP table shows the route 172.16.25.0/24 with next-hop 209.165.200.225, marked as * i (valid, internal) but not best (no >). A BGP route reflector will only advertise a route to other clients if the route is selected as the best path. If R2 cannot resolve the next-hop 209.165.200.225 in its own routing table, the route is not usable and will not be advertised. Option B is wrong because route reflectors are specifically designed to eliminate the full IBGP mesh requirement. Option C is wrong because BGP in modern IOS supports classless prefixes — there is no classful restriction. Option D is wrong because the entire purpose of a route reflector is to advertise routes between clients.

Correct Answer: D. if prefixes exceed the maximum limit

The exhibit shows the BGP neighbor is in Idle (PfxCt) state, which specifically means the prefix count limit has been exceeded. When configured with maximum-prefix, if the number of received prefixes exceeds the limit, BGP tears down the session and places it in Idle. Option A is wrong because not receiving prefixes does not cause Idle state. Option B is wrong because reaching (not exceeding) the limit triggers a warning, not necessarily Idle. Option C is wrong because applying a prefix list does not cause the Idle state. The (PfxCt) tag in the state column is a clear indicator that the prefix maximum was exceeded.

Correct Answer: A. shared risk link group-disjoint

SRLG (Shared Risk Link Group)-disjoint is the LFA (Loop-Free Alternate) tiebreaker attribute used to eliminate backup paths that share a common physical fiber with the protected primary path. When multiple links are physically bundled through the same fiber, they share the same risk — if the fiber fails, all links fail together. SRLG-disjoint ensures the LFA backup path does not traverse any link in the same SRLG as the protected link. Option B (linecard-disjoint) ensures the backup path uses a different linecard, not fiber. Option C (lowest-repair-path-metric) selects the backup with the lowest metric, unrelated to shared fiber. Option D (interface-disjoint) avoids using the same interface but does not consider shared physical fiber risk.