Free Cisco 300-410 Exam Questions

Become Cisco Certified with updated 300-410 exam questions and correct answers

Page: 1 / 153

Total 765 Questions | Updated On: Nov 12, 2025

Add To Cart

Question 1

Refer to the exhibit.

An engineer must configure a LAN-to-LAN IPsec VPN between R1 and the remote router. Which IPsec Phase 1 configuration must the engineer use for the local router?

A : crypto isakmp policy 5 authentication pre-shareencryption 3deshash shagroup 2!crypto isakmp key cisco123 address 200.1.1.3

B : crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123 address 200.1.1.3

C : crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123 address 199.1.1.1

D : crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123! address 199.1.1.1

Answer: A

Question 2

What are two functions of IPv6 Source Guard? (Choose two.)

A : It uses the populated binding table for allowing legitimate traffic.

B : It works independent from IPv6 neighbor discovery.

C : It denies traffic from unknown sources or unallocated addresses.

D : It denies traffic by inspecting neighbor discovery packets for specific pattern.

E : It blocks certain traffic by inspecting DHCP packets for specific sources.

Answer: A,C

Question 3

Refer to the exhibit. An engineer must filter prefixes that originate from AS65412. but it is not working correctty. Which configuration must the engineer apply to R1 to resolve the issue?

A :

B :

C :

D :

Answer: D

Question 4

Refer to the exhibit.

A customer reports that user traffic of bank XYZ to the AAA server is not using the primary path via the R3-R2 link. The network team observes: No fiber is cut on links R2 and R3. As101 and AS 201 routers established BGP peering. Which configuration resolves the issue?

A :