Free 300-410: Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) Exam Questions and Answers

Last updated: August 31, 2026

Exam code

300-410

Provider

Cisco

Questions in our bank

1000+

Free to read

First 10, with answers

Official page

Official Exam website

Our test mode duration & pass mark

130 mins · 70%

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   - (Exam Topic 3) Refer to the exhibit. The administrator configured the network devise for end-to-end reachability, but the ASBRs are not propagation routes to each other. Which set of configuration resolves this issue?

   • A. router bgp 100 neighbor 10.1.1.1 route-reflector-client neighbor 10.1.2.2 route-reflector-client neighbor 10.1.3.3 route-reflector-client
   • B. router bgp 100 neighbor 10.1.1.1 next-hop-self neighbor 10.1.2.2 next-hop-self neighbor 10.1.3.3 next-hop-self
   • C. router bgp 100neighbor 10.1.1.1 update-source Loopback0neighbor 10.1.2.2 update-source Loopback0neighbor 10.1 3.3 update-source Loopback0
   • D. router bgp 100neighbor 10.1.1.1 ebgp-multihopneighbor 1021.2.2 ebgp-multihopneighbor 10.1.3.3 ebgp-multihop
   Reveal Answer

2. Question #2

   - (Exam Topic 3) Refer to the exhibit. Mutual redistribution is enabled between RIP and EIGRP on R2 and R5. Which configuration resolves the routing loop for the 192.168.1.0/24 network?

   • A. R2:router eigrp 10network 181.16.0.0redistribute rip metric 1 1 1 1 1distribute-list 1 in s1!router ripnetwork 178.1.0.0redistribute eigrp 10 metric 2!access-list 1
   • B. R2:router eigrp 10network 181.16.0.0redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0!router ripnetwork 178.1.0.0redistribute eigrp 10 metric 2!access-list 1
   • C. R2:router eigrp 10network 181.16.0.0redistribute rip metric 1 1 1 1 1 distribute-list 1 in s0!router ripnetwork 178.1.0.0redistribute eigrp 10 metric 2!access-list 1
   • D. R2:router eigrp 7network 181.16.0.0redistribute rip metric 1 1 1 1 1 distribute-list 1 in s1!router ripnetwork 178.1.0.0redistribute eigrp 7 metric 2!access-list 1
   Reveal Answer

3. Question #3

   - (Exam Topic 3) Refer to the exhibit. The AP status from Cisco DNA Center Assurance Dashboard shows some physical connectivity issues from access switch interface G1/0/14. Which command generates the diagnostic data to resolve the physical connectivity issues?

   • A. test cable diagnostics tdr interface GigabitEthernet1/0/14
   • B. Check cable-diagnostics tdr interface GigabitEthernet1/0/14
   • C. show cable-diagnostics tdr interface GigabitEthernet1/0/14
   • D. Verify cable-diagnostics tdr interface GigabitEthernet1/0/14
   Reveal Answer

4. Question #4

   - (Exam Topic 3) An engineer configured a router with this configuration ip access-hst DENY TELNET 10 deny tcp any any eq 23 log-input The router console starts receiving log message :%SEC-6-IPACCESSLOGP: list DENY_TELNET denied tcp 192.168.1.10(1022)(FastEthernet1/0 D508.89gb.003f) ->192.168.2.20(23), 1 packet" Which action stops messages on the console while still denying Telnet?

   • A. Configure a 20 permit ip any any command
   • B. Remove log-Input keyword from the access list.
   • C. Replace log-input keyword with the log keyword in the access list.
   • D. Configure a 20 permit ip any any log-input command.
   Reveal Answer

5. Question #5

   - (Exam Topic 3) The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped. access-list 100 permit ip host 172.16.1.99 any ! class-map CM-ADMIN match access-group 100 ! policy-map PM-COPP class CM-ADMIN police 500000 conform-action transmit ! interface E0/0 service-policy input PM-COPP CoPP failed to capture the desired traffic and the CPU load is getting higher. Which two configurations resolve the issue? (Choose two.)

   Select 2 answers.

   • A. interface E0/0no service-policy input PM-COPP!control-planeservice-policy input PM-COPP
   • B. policy-map PM-COPP class CM-ADMINno police 500000 conform-action transmit police 500 conform-action transmit!control-planeservice-policy input PM-
   • C. no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80
   • D. no access-list 100access-list 100 permit tcp host 172.16.1.99 any eq 80access-list 100 permit tcp host 172.16.1.99 any eq 443
   Reveal Answer

6. Question #6

   - (Exam Topic 3) Refer to the exhibit. An engineer must filter incoming EIGRP updates to allow only a set of specific prefixes. The distribute list is tested, and it filters out all routes except network 10.10.10.0/24. How should the engineer temporarily allow all prefixes to be learned by the routers again without adjusting the existing access list?

   • A. A permit 20 statement should be added before completing the ACL with the required prefixes, and then the permit 20 statement can be removed.
   • B. A permit any statement should be added before completing the ACL with the required prefixes and then the permit any statement can be removed.
   • C. A continue statement should be added within the permit 10 statement before completing the ACL with the required prefixes, and then the continue statement
   • D. An extended access list must be used instead of a standard access list to accomplish the task
   Reveal Answer

7. Question #7

   - (Exam Topic 3) Refer to the exhibit. While monitoring VTY access to a router, an engineer notices that the router does not have any filter and anyone can access the router with username and password even though an ACL is configured. Which command resolves this issue?

   • A. access-class INTERNET in
   • B. ip access-group INTERNET in
   • C. ipv6 traffic-filter INTERNET in
   • D. ipv6 access-class INTERNET in
   Reveal Answer

8. Question #8

   - (Exam Topic 3) Refer to the exhibit. An engineer is investigating an OSPF issue reported by the Cisco DNA Assurance Center. Which action resolves the issue?

   • A. One of the neighbor links is down Bring the interface up by running shut and no shut
   • B. One of the interfaces is using the wrong MTU Match interface MTU on both links
   • C. An ACL entry blocking multicast on the interfaces Allow multicast through the interface ACL
   • D. One of the interfaces is using the wrong authentication Match interface authentication on both links
   Reveal Answer

9. Question #9

   - (Exam Topic 3) Refer to the exhibit. An administrator is configuring a GRE tunnel to establish an EIGRP neighbor to a remote router. The other tunnel endpoint is already configured. After applying the configuration as shown, the tunnel started flapping. Which action resolves the issue?

   • A. Stop sending a route matching the tunnel destination across the tunnel.
   • B. Modify the network command to use the Tunne10 Interface netmask.
   • C. Advertise the Loopback0 interface from R2 across the tunnel.
   • D. Readdress the IP network on the Tunne10 on both routers using the /31 netmask.
   Reveal Answer

10. Question #10

    - (Exam Topic 3) What is considered the primary advantage of running BFD?

    • A. reduction in time needed to detect Layer 2 switched neighbor failures
    • B. reduction in time needed to detect Layer 3 routing neighbor failures
    • C. reduction in CPU needed to detect Layer 2 switch neighbor failures
    • D. reduction in CPU needed to detect Layer 3 routing neighbor failures
    Reveal Answer