{"id":12063,"date":"2026-09-15T05:48:00","date_gmt":"2026-09-15T05:48:00","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12063"},"modified":"2026-09-15T05:48:00","modified_gmt":"2026-09-15T05:48:00","slug":"cisco-ccnp-300-410-practice-test-questions-and-exam-dumps-part-17-q321-340","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccnp-300-410-practice-test-questions-and-exam-dumps-part-17-q321-340\/","title":{"rendered":"Cisco CCNP 300-410 Practice Test Questions and Exam Dumps Part 17 Q321-340"},"content":{"rendered":"

View Full\u00a0Cisco 300-410 Exam Dumps<\/a>\u00a0and Practice Test Dumps.<\/p>\n

 <\/p>\n

Q321. Which OSPF feature allows routes from one area to be summarized when they are advertised into another area?<\/b><\/h3>\n

1)<\/b> Route summarization<\/span><\/p>\n

2)<\/b> Split horizon<\/span><\/p>\n

3)<\/b> Route reflection<\/span><\/p>\n

4)<\/b> NHRP<\/span><\/p>\n

Correct Answer: 1) Route summarization<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> OSPF route summarization allows multiple specific routes to be represented by a single summary route, reducing the number of routes advertised between areas. Inter-area summarization is typically configured on an ABR, where routes from one area can be summarized before being advertised into another area. This can reduce routing-table size and limit the propagation of topology changes. Summarization is particularly useful in hierarchical OSPF designs because it helps isolate instability within an area. However, administrators must choose summary ranges carefully because an overly broad summary can attract traffic for destinations that do not actually exist.<\/span><\/p>\n

Q322. Which OSPF command is commonly used to advertise a default route into an OSPF domain?<\/b><\/h3>\n

1)<\/b> default-route advertise<\/span><\/p>\n

2)<\/b> default-information originate<\/span><\/p>\n

3)<\/b> redistribute default<\/span><\/p>\n

4)<\/b> ip ospf default<\/span><\/p>\n

Correct Answer: 2) <\/b>default-information originate<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> The OSPF <\/span>default-information originate<\/span> command allows a router to advertise a default route, represented as <\/span>0.0.0.0\/0<\/span>, into the OSPF routing domain. This is commonly used when one router provides Internet or upstream connectivity and other OSPF routers should send unknown destinations toward that router. By default, the router generally needs a default route in its own routing table before advertising it. The <\/span>always<\/span> keyword can be used when the administrator wants the router to advertise the default route even when a default route is not currently installed locally. Proper default-route advertisement is important in enterprise and service-provider edge designs.<\/span><\/p>\n

Q323. What happens when an OSPF interface has a priority of zero on a broadcast network?<\/b><\/h3>\n

1)<\/b> It becomes the DR immediately<\/span><\/p>\n

2)<\/b> It becomes the BDR immediately<\/span><\/p>\n

3)<\/b> It cannot participate in the DR\/BDR election<\/span><\/p>\n

4)<\/b> It stops running OSPF<\/span><\/p>\n

Correct Answer: 3) It cannot participate in the DR\/BDR election<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> An OSPF interface priority of zero prevents that router from becoming either the Designated Router or Backup Designated Router on a broadcast or NBMA network. The router can still form OSPF neighbor relationships and exchange routing information normally. This is useful when an administrator wants to ensure that a particular router does not take the DR or BDR role, perhaps because the router has limited resources or is not intended to coordinate the multiaccess segment. Other routers with eligible priorities participate in the election. A priority of zero does not disable OSPF on the interface and does not prevent the router from learning or advertising OSPF routes.<\/span><\/p>\n

Q324. Which OSPF state indicates that two routers have successfully exchanged database information and are maintaining a full adjacency?<\/b><\/h3>\n

1)<\/b> Down<\/span><\/p>\n

2)<\/b> Init<\/span><\/p>\n

3)<\/b> 2-Way<\/span><\/p>\n

4)<\/b> Full<\/span><\/p>\n

Correct Answer: 4) Full<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> The OSPF Full state indicates that two routers have completed the database exchange process and have synchronized their link-state databases. On point-to-point links, routers normally progress to Full when the adjacency is successfully established. On broadcast networks, routers form Full adjacencies with the DR and BDR, while relationships with other non-DR\/non-BDR routers generally remain in the 2-Way state. If an expected adjacency remains stuck in ExStart, Exchange, or another intermediate state, troubleshooting should focus on issues such as MTU mismatches, packet loss, authentication problems, or incompatible OSPF parameters. The Full state therefore represents successful database synchronization.<\/span><\/p>\n

Q325. Which EIGRP command can be used to prevent specific routes from being installed or advertised based on an access control list?<\/b><\/h3>\n

1)<\/b> distribute-list<\/span><\/p>\n

2)<\/b> router-id<\/span><\/p>\n

3)<\/b> variance<\/span><\/p>\n

4)<\/b> passive-interface<\/span><\/p>\n

Correct Answer: 1) <\/b>distribute-list<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> An EIGRP <\/span>distribute-list<\/span> can be used to filter routing information based on specified criteria, commonly through an access control list or prefix list. It can control which routes are accepted from a neighbor or which routes are advertised to a neighbor. This provides administrators with more precise control over route propagation. For example, a network administrator can prevent a particular prefix from being advertised to a specific neighboring router without disabling the entire EIGRP relationship. Careful filtering is important because accidentally blocking essential routes can create connectivity problems. Route filtering should therefore be planned with a clear understanding of the direction and scope of the policy.<\/span><\/p>\n

Q326. What is the purpose of an EIGRP query boundary?<\/b><\/h3>\n

1)<\/b> To encrypt EIGRP packets<\/span><\/p>\n

2)<\/b> To limit the propagation of EIGRP queries<\/span><\/p>\n

3)<\/b> To elect an EIGRP leader<\/span><\/p>\n

4)<\/b> To increase the EIGRP hello interval<\/span><\/p>\n

Correct Answer: 2) To limit the propagation of EIGRP queries<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> An EIGRP query boundary helps prevent queries from propagating unnecessarily throughout a large network. When an EIGRP route becomes Active and a router cannot immediately find a feasible successor, it may query neighboring routers for an alternate path. In poorly designed networks, these queries can spread widely and increase convergence time. Techniques such as EIGRP summarization and stub routing can help establish boundaries that limit query propagation. This improves scalability and reduces the likelihood of widespread Stuck-In-Active conditions. Proper EIGRP design therefore focuses not only on route selection but also on controlling the scope of topology queries.<\/span><\/p>\n

Q327. Which EIGRP metric component represents the administrative preference for the reliability of a path?<\/b><\/h3>\n

1)<\/b> Delay<\/span><\/p>\n

2)<\/b> Bandwidth<\/span><\/p>\n

3)<\/b> Reliability<\/span><\/p>\n

4)<\/b> Load<\/span><\/p>\n

Correct Answer: 3) Reliability<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> EIGRP’s classic composite metric can consider bandwidth, delay, reliability, load, and MTU, although the default K values primarily use bandwidth and delay. Reliability represents the reliability of the path and is derived from interface measurements. While reliability is available as a metric component, it is not included in the default EIGRP metric calculation because the default K values give it no influence. Administrators should be cautious when modifying EIGRP metric coefficients because inconsistent K values between neighbors can prevent adjacency formation. Understanding the individual metric components is important when troubleshooting unexpected EIGRP path selection or designing advanced routing policies.<\/span><\/p>\n

Q328. Which BGP attribute is generally considered when choosing between routes learned from different external neighbors and prefers a shorter AS_PATH?<\/b><\/h3>\n

1)<\/b> AS_PATH<\/span><\/p>\n

2)<\/b> MED<\/span><\/p>\n

3)<\/b> Community<\/span><\/p>\n

4)<\/b> Originator ID<\/span><\/p>\n

Correct Answer: 1) AS_PATH<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> The BGP AS_PATH attribute records the autonomous systems through which a route has passed. During BGP best-path selection, a shorter AS_PATH is generally preferred over a longer AS_PATH when the relevant earlier attributes are equal. AS_PATH also serves an important loop-prevention function because a BGP router normally rejects a route if its own AS number already appears in the path. Administrators can deliberately influence inbound traffic by using AS-path prepending to make a particular route appear less attractive to neighboring autonomous systems. Therefore, AS_PATH serves both a routing-policy purpose and a fundamental loop-prevention purpose in BGP.<\/span><\/p>\n

Q329. Which BGP mechanism allows a router to request updated routing information without tearing down an established BGP session?<\/b><\/h3>\n

1)<\/b> Route refresh<\/span><\/p>\n

2)<\/b> TCP reset<\/span><\/p>\n

3)<\/b> Session restart<\/span><\/p>\n

4)<\/b> Neighbor shutdown<\/span><\/p>\n

Correct Answer: 1) Route refresh<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> BGP Route Refresh allows a router to request that a neighbor resend its routing information without resetting the established BGP session. This is especially useful after changing inbound routing policies. Instead of performing a disruptive hard reset, the router can request the relevant routes again and apply the updated policy. Route Refresh therefore reduces the operational impact of policy changes and helps maintain stable BGP sessions. It is preferable to repeatedly resetting BGP sessions when supported by the peers. Administrators can inspect neighbor capabilities and session behavior using BGP operational commands when troubleshooting route-policy changes and route refresh operations.<\/span><\/p>\n

Q330. What is the primary advantage of BGP soft reset using inbound policy refresh mechanisms?<\/b><\/h3>\n

1)<\/b> It permanently deletes all BGP routes<\/span><\/p>\n

2)<\/b> It applies changed policies without unnecessarily terminating the BGP session<\/span><\/p>\n

3)<\/b> It changes the remote AS number<\/span><\/p>\n

4)<\/b> It disables route advertisements<\/span><\/p>\n

Correct Answer: 2) It applies changed policies without unnecessarily terminating the BGP session<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> A BGP soft reset allows routing policies to be changed and reapplied without completely tearing down the BGP session. This is operationally safer than performing a hard reset because the TCP connection and BGP relationship can remain established. Modern implementations commonly use Route Refresh to request the necessary routes again from the neighbor. Soft policy refresh is particularly useful when administrators modify inbound route maps, prefix lists, or other filtering policies and need the new rules to take effect. It reduces unnecessary service disruption and helps maintain stable routing operations while allowing administrators to validate the results of policy changes.<\/span><\/p>\n

Q331. Which MPLS operation removes the top label from a packet before it reaches the egress PE?<\/b><\/h3>\n

1)<\/b> Push<\/span><\/p>\n

2)<\/b> Swap<\/span><\/p>\n

3)<\/b> Pop<\/span><\/p>\n

4)<\/b> Rewrite<\/span><\/p>\n

Correct Answer: 3) Pop<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> An MPLS pop operation removes an MPLS label from the packet. In many MPLS networks, Penultimate Hop Popping (PHP) allows the router immediately before the egress PE to remove the outer transport label. This means the egress PE does not need to perform an additional lookup to remove that transport label before processing the remaining information. PHP can improve efficiency by reducing label-processing work at the egress edge. MPLS also uses other operations, such as push when adding a label and swap when replacing one label with another. Understanding these operations is essential when troubleshooting MPLS forwarding behavior.<\/span><\/p>\n

Q332. Which command displays the labels and forwarding information maintained by an MPLS-enabled router?<\/b><\/h3>\n

1)<\/b> show mpls forwarding-table<\/span><\/p>\n

2)<\/b> show ip bgp vpnv4<\/span><\/p>\n

3)<\/b> show ip nhrp<\/span><\/p>\n

4)<\/b> show crypto session<\/span><\/p>\n

Correct Answer: 1) <\/b>show mpls forwarding-table<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> The <\/span>show mpls forwarding-table<\/span> command displays the MPLS Label Forwarding Information Base and provides information about how labeled packets are forwarded. It can show local labels, incoming labels, outgoing labels, next-hop information, and forwarding actions such as swapping or popping labels. This command is particularly useful when troubleshooting an MPLS forwarding problem because it allows administrators to verify whether the expected label operations exist. Additional commands may be required to inspect the underlying LDP neighbors or routing table. However, the forwarding table provides a direct view of how the router handles MPLS-labeled traffic.<\/span><\/p>\n

Q333. Which command is most useful for verifying active NHRP mappings on a DMVPN router?<\/b><\/h3>\n

1)<\/b> show ip ospf database<\/span><\/p>\n

2)<\/b> show ip nhrp<\/span><\/p>\n

3)<\/b> show ip bgp summary<\/span><\/p>\n

4)<\/b> show mpls ldp neighbor<\/span><\/p>\n

Correct Answer: 2) <\/b>show ip nhrp<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> The <\/span>show ip nhrp<\/span> command displays NHRP information, including mappings between tunnel addresses and NBMA addresses. This is especially useful when troubleshooting DMVPN connectivity because NHRP is responsible for resolving the logical tunnel addresses of remote peers to their underlying transport addresses. If expected mappings are missing or incorrect, direct spoke-to-spoke communication may fail in DMVPN designs that depend on dynamic NHRP resolution. Administrators can use this command together with <\/span>show dmvpn<\/span> and routing-table commands to determine whether the problem is related to NHRP registration, routing, or the underlying tunnel configuration.<\/span><\/p>\n

Q334. Which DMVPN phase supports direct spoke-to-spoke tunnels while maintaining the original spoke routes learned through the hub?<\/b><\/h3>\n

1)<\/b> Phase 1<\/span><\/p>\n

2)<\/b> Phase 2<\/span><\/p>\n

3)<\/b> Phase 0<\/span><\/p>\n

4)<\/b> Phase 4<\/span><\/p>\n

Correct Answer: 2) Phase 2<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> DMVPN Phase 2 allows spokes to establish direct spoke-to-spoke communication while preserving the original routing next-hop information needed for those direct paths. NHRP is used to resolve the remote spoke’s NBMA address, allowing the source spoke to create a direct dynamic tunnel. The routing design is important because the spoke must learn routes with an appropriate next hop that allows it to resolve the destination spoke directly. Phase 1 generally forces spoke traffic through the hub, while Phase 3 introduces additional NHRP shortcut behavior that can simplify routing designs. Understanding these differences is essential when selecting the appropriate DMVPN phase for a network.<\/span><\/p>\n

Q335. Which IPsec protocol provides encryption, authentication, integrity, and anti-replay protection for IP traffic?<\/b><\/h3>\n

1)<\/b> ESP<\/span><\/p>\n

2)<\/b> AH<\/span><\/p>\n

3)<\/b> GRE<\/span><\/p>\n

4)<\/b> NHRP<\/span><\/p>\n

Correct Answer: 1) ESP<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> IPsec Encapsulating Security Payload, or ESP, can provide confidentiality through encryption as well as integrity, authentication, and anti-replay protection. ESP is widely used for site-to-site VPNs because it can protect the contents of transmitted IP packets while allowing secure communication across untrusted networks. Authentication Header, or AH, can provide integrity and authentication but does not provide encryption. GRE is an encapsulation protocol rather than an encryption protocol, while NHRP is used for address resolution in technologies such as DMVPN. In practical VPN deployments, ESP is frequently combined with IKE, which negotiates security parameters and establishes the cryptographic framework.<\/span><\/p>\n

Q336. Which IKE version is commonly preferred for modern IPsec VPN deployments because of improved negotiation capabilities and flexibility?<\/b><\/h3>\n

1)<\/b> IKEv1 only<\/span><\/p>\n

2)<\/b> IKEv2<\/span><\/p>\n

3)<\/b> GREv2<\/span><\/p>\n

4)<\/b> ESPv2<\/span><\/p>\n

Correct Answer: 2) IKEv2<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> IKEv2 is widely used for modern IPsec VPN deployments because it provides a more streamlined negotiation process and several improvements over IKEv1. It supports stronger and more flexible authentication and provides mechanisms for handling mobility, reliability, and reauthentication more effectively. IKE itself does not encrypt user data directly; instead, it negotiates security associations and establishes the parameters that IPsec uses to protect traffic. Once the necessary security associations are established, protocols such as ESP protect the actual data. When troubleshooting an IKEv2 VPN, administrators commonly examine IKE security associations, IPsec security associations, proposals, authentication, and peer reachability.<\/span><\/p>\n

Q337. Which HSRP configuration allows a router to reclaim the Active role after recovering from a failure when it has the highest priority?<\/b><\/h3>\n

1)<\/b> standby preempt<\/span><\/p>\n

2)<\/b> standby shutdown<\/span><\/p>\n

3)<\/b> standby track disable<\/span><\/p>\n

4)<\/b> standby authentication none<\/span><\/p>\n

Correct Answer: 1) <\/b>standby preempt<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> The HSRP <\/span>standby preempt<\/span> command allows a router with a higher HSRP priority to take over the Active role after it becomes available again. Without preemption, another router that assumed the Active role during the failure may continue operating as Active even after the preferred router recovers. Preemption is therefore commonly configured when administrators want a specific router to be the normal active gateway. HSRP priority determines which router is preferred, while preemption determines whether that preferred router can reclaim the Active role. This is particularly useful when the preferred router has superior uplink connectivity or hardware resources.<\/span><\/p>\n

Q338. Which IPv6 mechanism allows hosts to automatically obtain addressing information from router advertisements without requiring a DHCPv6 server for address assignment?<\/b><\/h3>\n

1)<\/b> NAT64<\/span><\/p>\n

2)<\/b> SLAAC<\/span><\/p>\n

3)<\/b> NHRP<\/span><\/p>\n

4)<\/b> HSRP<\/span><\/p>\n

Correct Answer: 2) SLAAC<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> IPv6 Stateless Address Autoconfiguration, or SLAAC, allows hosts to automatically configure IPv6 addresses using information provided through Router Advertisement messages. The router advertisement can contain the network prefix and other configuration parameters, allowing a host to construct its own interface identifier and form a usable IPv6 address. This eliminates the requirement for a DHCPv6 server when only stateless address configuration is needed. SLAAC is commonly used alongside IPv6 Neighbor Discovery. DHCPv6 can still be used when administrators need additional configuration information or stateful address assignment. Understanding the flags contained in Router Advertisement messages helps determine how hosts obtain their IPv6 configuration.<\/span><\/p>\n

Q339. Which IPv6 protocol message is sent by a host to discover routers on its local network?<\/b><\/h3>\n

1)<\/b> Router Solicitation<\/span><\/p>\n

2)<\/b> Router Advertisement<\/span><\/p>\n

3)<\/b> Neighbor Advertisement<\/span><\/p>\n

4)<\/b> Echo Reply<\/span><\/p>\n

Correct Answer: 1) Router Solicitation<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> An IPv6 host sends a Router Solicitation message when it wants to discover available routers on the local network. Router Solicitation is part of IPv6 Neighbor Discovery and uses ICMPv6. Routers receiving the solicitation can respond with Router Advertisement messages containing information such as network prefixes, configuration flags, and other parameters. Hosts can also receive unsolicited Router Advertisements periodically, but Router Solicitation allows a host to actively request the information instead of waiting. This process is important for SLAAC and IPv6 default-router discovery. Troubleshooting IPv6 connectivity should therefore include checking whether Router Solicitations and Router Advertisements are being exchanged correctly.<\/span><\/p>\n

Q340. Which IP SLA feature can automatically influence routing behavior when a monitored destination becomes unreachable?<\/b><\/h3>\n

1)<\/b> Object tracking<\/span><\/p>\n

2)<\/b> BGP communities<\/span><\/p>\n

3)<\/b> MPLS PHP<\/span><\/p>\n

4)<\/b> OSPF DR election<\/span><\/p>\n

Correct Answer: 1) Object tracking<\/b><\/p>\n

Explanation:<\/b>
\n<\/b> IP SLA can actively monitor network conditions such as reachability, latency, or response time, while object tracking can use the IP SLA result to influence other configuration elements. For example, a router can track whether an important remote destination is reachable and modify a static route or HSRP priority when the tracked object changes state. This allows the network to respond dynamically to failures instead of relying only on physical interface status. A common design uses an IP SLA probe to test an upstream destination, an object-tracking statement to monitor the probe, and a routing or first-hop redundancy mechanism to react when the test fails.<\/span><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

View Full\u00a0Cisco 300-410 Exam Dumps\u00a0and Practice Test Dumps.   Q321. Which OSPF feature allows routes from one area to be summarized when they are advertised into another area? 1) Route summarization 2) Split horizon 3) Route reflection 4) NHRP Correct Answer: 1) Route summarization Explanation: OSPF route summarization allows multiple specific routes to be represented […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12063"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12063"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12063\/revisions"}],"predecessor-version":[{"id":12070,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12063\/revisions\/12070"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12063"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12063"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}