CCNP ENARSI PART 10

Refer to the exhibit. Users on a call center report that they cannot browse the internet on Saturdays during the afternoon. Which configuration resolves the issue?. A. time-range timer no periodic weekend 9:00 to 17:00 periodic weekend 17:00 to 23:59. B. no time-range timer. C. interface gig0/0 ip access-group NO_Internet out. D. ip access-list extended NO_Internet 15 permit tcp any any eq www.

Refer to the exhibit. The IT router is connected with the Sales and Marketing departments. The interfaces have been assigned to their respective VRFs to keep the two department routes isolated. Which configuration set must the IT router use for BGP to distribute routes for each department that maintains their own routing table for network isolation?. A. router bgp 111 address-family ipv4 unicast neighbor 172.16.1.2 remote-as 111 neighbor 172.16.2.2 remote-as 111 neighbor 172.16.11.2 remote-as 111 neighbor 172.16.12.2 remote-as 111. B. router bgp 111 address-family ipv4 vrf Marketing neighbor 172.16.1.2 remote-as 111 neighbor 172.16.2.2 remote-as 111 ! address-family ipv4 vrf Sales neighbor 172.16.11.2 remote-as 111 neighbor 172.16.12.2 remote-as 111. C. router bgp 111 neighbor 172.16.1.2 remote-as 111 neighbor 172.16.2.2 remote-as 111 neighbor 172.16.11.2 remote-as 111 neighbor 172.16.12.2 remote-as 111. D. router bgp 111 address-family ipv4 vrf Marketing neighbor 172.16.1.2 remote-as 111 neighbor 172.16.1.2 Route-reflector-client neighbor 172.16.2.2 remote-as 111 neighbor 172.16.2.2 Route-reflector-client ! address-family ipv4 vrf Sales neighbor 172.16.11.2 remote-as 111 neighbor 172.16.11.2 Route-reflector-client neighbor 172.16.12.2 remote-as 111 neighbor 172.16.12.2 Route-reflector-client.

Refer to the exhibit. An administrator is configuring a GRE tunnel to establish an EIGRP neighbor to a remote router. The other tunnel endpoint is already configured. After applying the configuration as shown, the tunnel started flapping. Which action resolves the issue?. A. Modify the network command to use the Tunnel0 interface netmask. B. Stop sending a route matching the tunnel destination across the tunnel. C. Advertise the Loopback0 interface from R2 across the tunnel. D. Readdress the IP network on the Tunnel0 on both routers using the /31 netmask.

An engineer must override the normal routing behavior of a router. The engineer must send HTTP traffic that is destined to 10.100.100.100 from 10.1.1.0/24 via a next hop of 10.2.2.2, two hops away from the router that is connected to the 10.1.1.0/24 subnet. Which configuration reroutes traffic according to this requirement?. A. access-list 100 permit tcp 10.1.1.0 0.0.0.255 host 10.100.100.100 eq http ! route-map POLICY permit 10 match ip address 100 set ip next-hop recursive 10.2.2.2. B. access-list 100 permit tcp 10.1.1.0 0.0.0.255 host 10.100.100.100 eq http ! route-map POLICY deny 10 match ip address 100 set ip next-hop recursive 10.2.2.2 route-map POLICY permit 20. C. access-list 100 permit tcp 10.1.1.0 0.0.0.255 host 10.100.100.100 eq http ! route-map POLICY permit 10 match ip address 100 set ip next-hop 10.2.2.2 route-map POLICY permit 20. D. access-list 100 permit tcp 10.1.1.0 0.0.0.255 host 10.100.100.100 eq http ! route-map POLICY permit 10 match ip address 100 set ip next-hop 10.2.2.2.

Refer to the exhibit. Two routers are connected back to back via Gigabit Ethernet 0/0 interfaces. Which configuration provides VRF-Lite connectivity for two separate VRFs using the prefixes 10.1.1.0/24 for one VRF and 10.2.2.0/24 for the other VRF?. A. ip vrf 1 rd 65001:1 ip vrf 2 rd 65001:2 ! int GigabitEthernet0/0 no shut ! int GigabitEthernet0/0.1 encapsulation dot1Q 1 ip vrf forwarding ip address 10.1.1.1 255.255.255.0 ! int GigabitEthernet0/0.2 encapsulation dot1Q 2 ip vrf forwarding ip address 10.2.2.1 255.255.255.0. B. ip vrf 1 rd 65001:1 ip vrf 2 rd 65001:1 ! int GigabitEthernet0/0 no shut ! int GigabitEthernet0/0.1 encapsulation dot1Q 1 ip vrf forwarding 1 ip address 10.1.1.1 255.255.255.0 ! int GigabitEthernet0/0.2 encapsulation dot1Q 2 ip vrf forwarding 2 ip address 10.2.2.1 255.255.255.0. C. ip vrf 1 ip vrf 2 int GigabitEthernet0/0 no shut ! int GigabitEthernet0/0.1 encapsulation dot1Q 1 ip vrf forwarding 1 ip address 10.1.1.1 255.255.255.0 ! int GigabitEthernet0/0.2 encapsulation dot1Q 2 ip vrf forwarding 2 ip address 10.2.2.1 255.255.255.0. D. ip vrf 1 ip vrf 2 ! int GigabitEthernet0/0 no shut ! int GigabitEthernet0/0.1 encapsulation dot1Q 1 ip address 10.1.1.1 255.255.255.0 ip vrf forwarding 1 ! int GigabitEthernet0/0.2 encapsulation dot1Q 2 ip address 10.2.2.1 255.255.255.0 ip vrf forwarding 2.

Refer to the exhibit. The network administrator configures the Chicago router to mutually redistribute the LA and New York routes with EIGRP routes to be summarized as a single route in OSPF: router eigrp 100 redistribute ospf 1 metric 10 10 10 10 10 router ospf 1 redistribute eigrp 100 subnets area 0 range 192.168.4.0 255. 255.252.0 After the configuration, the LA router receives all the specific New York routes except the summary route. Which set of configurations resolve the issue on the Chicago router?. A. interface E 0/0 ip summary-address eigrp 100 192.168.4.0 255.255.252.0. B. router ospf 1 summary-address 192.168.4.0 255.255.252.0. C. interface E 0/0 summary-address 192.168.4.0 255.255.252.0. D. router ospf 1 area 0 range 192.168.0.0 255.255.0.0.

Refer to the exhibit. The company implemented uRPF to address an antispoofing attack. A network engineer received a call from the IT security department that the regional data center is under an IP spoofing attack. Which configuration must be implemented on R1 to resolve this issue?. A. interface ethernet0/0 ip verify unicast reverse-path. B. interface ethernet0/1 ip verify unicast reverse-path. C. interface ethernet0/0 ip unicast RPF check reachable-via any allow-default allow-self-ping. D. interface ethernet0/1 ip unicast RPF check reachable-via any allow-default allow-self-ping.

Refer to the exhibit. An engineer configured NetFlow but cannot receive the flows from R1. Which two configurations resolve the issue? (Choose two.). A. R3(config)#ip access-list extended DDOS R3(config-ext-nacl)#5 permit udp any host 10.66.66.66 eq 1090. B. R4(config)#flow exporter FlowExporter1 R4(config-flow-exporter)#destination 10.66.66.66. C. R3(config)#flow exporter FlowExporter1 R3(config-flow-exporter)#destination 10.66.66.66. D. R1(config)#flow exporter FlowExporter1 R1(config-flow-exporter)#destination 10.66.60.66. E. R4(config)#ip access-list extended DDOS R4(config-ext-naci)#5 permit udp any host 10.66.66.66 eq 1090.

Refer to the exhibit. R1 cannot authenticate via TACACS. Which configuration resolves the issue?. A. aaa group server tacacs+ DC1_TACACS server name DC_TACACS. B. tacacs server DC1_TACACS address ipv4 10.66.66.66 key D@t@c3nter1TACACS. C. tacacs server DC1_TACACS address ipv4 10.60.66.66 key D@t@c3nter1TACACS. D. aaa group server tacacs+ DC_TACACS server name DC_TACACS.

Refer to the exhibit. R1 cannot receive the R2 interfaces with individual prefixes. What must be reconfigured to advertise R2 interfaces to R1?. A. EIGRP process on R2 with the command stub summary receive-only. B. EIGRP process on R2 with the command stub summary connected. C. EIGRP process on R2 by removing the stub command keyword summary. D. interface FastEthernet0/1 on R2 with an EIGRP summary for all three loopback prefixes.