ETExamTower
Sign in
300-410Updated 1d ago · Sep 4, 2026

300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and Services

620 questions across 1 topics, with suggested answers, explanations where available, and imported community discussion. The first 62 questions are free to preview.

Browse questions Practice mode

Topics

#TopicQuestionsFree
1VPN Technologies62062

Preview

62 of 620 accessible
Question 1 · VPN Technologies Open

Refer to the exhibit. The network administrator has configured VRF Lite for customer A. The technician at the remote site incorrectly configured VRF on the router. Which configuration resolves connectivity for customer_a at both sites?

Question exhibitQuestion exhibitQuestion exhibitQuestion exhibitQuestion exhibit
Answer: D Both sites must use route target `1:1` for importing and exporting customer_a routes so each VRF accepts the other site's routes. The remote VRF needs a distinct route distinguisher, `1:2`, to keep VPN route identities unique; `route-target both 1:1` supplies the required symmetric import and export policy. Cisco documents `rd` as the VRF route distinguisher and `route-target both` as configuring both import and export route-target communities. **Learn more:** [Cisco IOS XE: Configuring VRF-lite](https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9600/software/release/17-16/configuration_guide/rtng/b_1716_rtng_9600_cg/configuring_vrf_lite.html)
Question 2 · Infrastructure Services Open

Refer to the exhibit. ISP 1 and ISP 2 are directly connected to the Internet. A customer is monitoring both ISP links to provide redundancy but cannot view the Cisco IOS IP SLA tracking output on the router console. Which command is absent from the IP SLA configuration?

Question exhibit
Answer: D Cisco IOS IP SLA operations remain in the pending state and collect no data until they are scheduled. The `ip sla schedule` command accepts `start-time now` to start an operation immediately, allowing tracking output to be generated. **Learn more:** [Cisco IOS IP SLAs Command Reference — ip sla schedule](https://www.cisco.com/c/en/us/td/docs/ios/ipsla/command/reference/sla_book/sla_02.html)
Question 3 · Infrastructure Security Open

Refer to the exhibit. A network administrator successfully logs in to a switch through SSH from a RADIUS server. When the administrator accesses the switch through the console port, the RADIUS server returns `shell:priv-lvl=15`, but the switch prompts for the `enable` command. When entered, the command is rejected. Which command set is used to troubleshoot and resolve this issue?

Question exhibit
Answer: D Cisco IOS disables AAA authorization on the console by default, so the RADIUS shell:priv-lvl=15 attribute does not apply to console sessions. Enabling `aaa authorization console` followed by `authorization exec` on the line con 0 allows the console to leverage RADIUS authorization. Option D includes both commands, enabling the console to respect the RADIUS privilege level. **Learn more:** [Configuring Authorization (AAA, console exec)](https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/xe-3s/sec-usr-aaa-xe-3s-book/sec-cfg-authorizatn.html)