Share your ROUTE v2.0 Experience

19. what are the two correct statements about enable secret and enable password command
a. the enable password command has a strong encryption algorithm than enable secret
b. if both commands are missing from the global configuration, vty lines use the console password
c. the enable secret command is backwards compatible with more versions of IOS
d. the enable secret and enable password commands must be used together
e. the enable secret command overrides enable password
Ans: B, E

If 172.18.1.1 (router-ID) is the ip address of a PHYSICAL interface, than is A correct.

Hi, are the sims and labs on this website still valid?

@Marco
A console password is NOT equal a vty password.
(config)#line console 0
(config)#line vty 0 15

The are two different interfaces and two different access ways.

I see that things have changed according to previous posts in the past few days and people are failing. I’m using nneettwwrrookkiinngg 477_corrected and these new questions from Zam2u. Is nneettwwrrookkiinngg 477_corrected good still I don’t want to go through 400+ questions and have it be a waste of time :/

Please can someone dispute my answer to this question; I stand to be corrected:

Question 113 on Digitut

Which two areas does OSPF send a summary route by default ? (Choose two)

A. NSSA
B. Backbone
C. Totally stubby
D. Stub
E. Normal

My answer: A and D. But Digitaltut says C and D

Stub areas accept LSA type 1,2,3 and LSA type 3 contain summary routes from the ABR; TStubby doesn’t accept 3,4,5 but only default route by default from the ABR; NSSA accepts LSA type 3 (summary routes) and type 7 (FROM ASBR); TNSSA doesn’t accept type 3 but LSA type 7(FROM ASBR).

The ABR sends summary routes by default if no route summarization is configured–using the command: Area ID range .

That said, why is the answer C&D when the question isn’t talking about default routes but summary routes (LSA type 3)?

@doka
Q38. Other than a working EIGRP configuration, which option must be the same on all routers for EIGRP authentication key role over to work correctly?
A. SMTP
B. SNMP
C. Password
D. Time
Answer: D

D is correct. Please see below:

https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/82110-eigrp-authentication.html

“Requirements
The time must be properly configured on all routers. Refer to Configuring NTP for more information.”

Q54.Which feature is supported with stateful NAT64 ?
a. IP multicast
b. NAT44 and NAT64 on the same interface
c. VRF
d. FTP and ICMP on an application layer gateway

Answer is D.

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-3s/nat-xe-3s-book/iadnat-stateful-nat64.pdf

@doka

19. what are the two correct statements about enable secret and enable password command
a. the enable password command has a strong encryption algorithm than enable secret
b. if both commands are missing from the global configuration, vty lines use the console password
c. the enable secret command is backwards compatible with more versions of IOS
d. the enable secret and enable password commands must be used together
e. the enable secret command overrides enable password
Ans: B, E

Please see the following:
https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/command/reference/fsecur_r/srfpass.html
“Caution If neither the enable password command nor the enable secret command is configured, and if there is a line password configured for the console, the console line password will serve as the enable password for all VTY (Telnet and Secure Shell [SSH]) sessions.”

Hi are the sims and labs on this website still valid?

@Doka:

Q54.Which feature is supported with stateful NAT64 ?
a. IP multicast
b. NAT44 and NAT64 on the same interface
c. VRF
d. FTP and ICMP on an application layer gateway

Answer can not be any of the above options Because even in the link you referenced:

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-3s/nat-xe-3s-book/iadnat-stateful-nat64.pdf

it says: “• Application-level gateways (ALGs) FTP and ICMP are not supported”

so may be in exam, you will get option E

@Zam2u
Yes, or the is the “VFR” option

@@doka
Application-level gateways (ALGs) FTP and ICMP are not supported
D is not correct..

@ Doka, @Marco

Q38. Other than a working EIGRP configuration, which option must be the same on all routers for EIGRP authentication key role over to work correctly?
A. SMTP
B. SNMP
C. Password
D. Time
Answer: C

D is incorrect, because I believe they are specifically asking about : “EIGRP authentication key role over”

and for that Password should be the same on both EIGRP routers.

http s : / / www . cisco . com / c / en /us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/82110-eigrp-authentication . html

@Doka

you are right, this is it:

Q54.Which feature is supported with stateful NAT64 ?
a. IP multicast
b. NAT44 and NAT64 on the same interface
c. VFR [not vrf]
d. FTP and ICMP on an application layer gateway

Answer: C

“When Stateful NAT64 is configured on an interface, Virtual Fragmentation Reassembly (VFR) is configured automatically.”

@Zam2u
I agree with you.
EIGRP authentication key role = Password should be the same on both EIGRP routers.
The lifetime is a OPTIONALLY option

@lolo
Aren’t these the ones mGRE Dnds which you are talking about;

mGRE:

Tunnel Key: A clear text password that confirms the peer connection

MSS: A configurable value that prevents an interface from sending packets that were too large for the tunnel
Keep Alive: A technology that prevents one side of the tunnel from going down while the other stays up.
mGRE: A technology that supports dynamic tunnel end points
IPsec: An encryption protocol used to secure tunnels

Another mGRE:

Protocol used to secure connections: IPsec
Used to authenticate connections: Tunnel key
Amount of data that a device can handle
As un fragmented piece MSS

Protocol to connect multiple destinations mGRE

Used to keep other side if tunnel interface up keep alive
With local side is up

@doka @Zam2u

Q38. Other than a working EIGRP configuration, which option must be the same on all routers for EIGRP authentication key role over to work correctly?
A. SMTP
B. SNMP
C. Password
D. Time

Maybe the wording in the exam is slightly different. If it asks for ‘key-string’ rather than ‘password’, then I agree too. But password is not valid imo

Alrighty, Fellas,

Thanks for your help, I have updated the correct answers and uploaded a new file named “TUT New Question-Corrected”:

drive . google . com / file / d / 1lPPVPAnnhvFukHU1sIQDTOevAzAMW0K9

For people who don’t want to go through previous comments, I added 31 more questions to Raden’s New Tentative Document file from the comments I gathered including the new CoPP DND

Credit goes to all the users.

@Zam2u

Thanks for that correction. I mistook a different feature as this answer.

Hey guys, sorry had to make last few changes, now this is the final version from my side.

TUT New Question-Corrected

htt p s : //drive . google . com / file / d / 1t6ss4Vjzc12WVtUcDASAzGX5TX5yRotU

@raden @Zam2u

Are we missing following new questions in the new updated file. Please check.

1. how ospfv3 make neighbourship ?
a- ipv6 neighbourship along with ipv4 (something like that…)
b- ipv6 neighbourship under interface command.

2.How to prevent unicast loops in metric type of routing network? (check 3 options)
– by filtering and tagging (don’t remember options specifically) but key is filter and tag

3. a questions about entry in cef adjencency table if next fails to write mac address
glunt,geant ,null,discard

@raden @Zam2u

Are we missing following new questions in the new updated file. Please check.

1. how ospfv3 make neighbourship ?
a- ipv6 neighbourship along with ipv4 (something like that…)
b- ipv6 neighbourship under interface command.

2.How to prevent unicast loops in metric type of routing network? (check 3 options)
– by filtering and tagging (don’t remember options specifically) but key is filter and tag

3. a questions about entry in cef adjencency table if next fails to write mac address
glunt,geant ,null,discard

maybe a new question..
What are the benefit of DHCP Relay Agent?
4 options
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_dhcp/configuration/xe-3se/3850/dhcp-xe-3se-3850-book/iad-dhcp-rly-agt-supp.pdf

@Zam2u
Sorry, but q31 is not correct

31. OSPF has R1 router ID 172.18.1.1 . What happens when R1 configure with a new loopback interface IP address 172.17.1.1 ?
a. OSPF chooses 172.17.1.1 as new router ID when R1 is rebooted.
b. OSPF chooses 192.168.21.0 as new router ID when apply new configuration.
c. OSPF chooses 172.17.1.1 as new router ID when apply new configuration.
d. OSPF retains 172.18.1.1 as router ID until interface on which is configured goes down
Answer A 100% sure
All OSPF router-id changes ONLY after reboot or #clear ip ospf process

@doka:

Do you mean the benefits of a regular DHCP Relay Agent or just for Unnumbered interfaces? These are two different schemes.

I do not know the question. That’s just a guess :)

@Doka,

I believe Marco posted this: The answer is D for Q31.

Highest loopback IP address is selected as router-id IF there is no router id set using the “router-id x.x.x.x” command.

In this case, it doesn’t say if 172.18.1.1 was selected as Router ID because it was a loopback interface’s IP or if it was set using the “router-id”. Regardless, 172.18.1.1 will always beat 172.17.1.1.”

According to this, Answer would be D I agree with the above explanation

@Doka

OSPF uses the following criteria to select the router ID:

Manual configuration of the router ID.
Highest IP address on a loopback interface.
Highest IP address on a non-loopback interface.

@Doka, in question it says : “OSPF “HAS” R1 router ID” so our assumption should be that Router ID is configured with router ID command instead of selected from an interface I.P. Hope this helps

31. OSPF has R1 router ID 172.18.1.1 . What happens when R1 configure with a new loopback interface IP address 172.17.1.1 ?
a. OSPF chooses 172.17.1.1 as new router ID when R1 is rebooted.
b. OSPF chooses 192.168.21.0 as new router ID when apply new configuration.
c. OSPF chooses 172.17.1.1 as new router ID when apply new configuration.
d. OSPF retains 172.18.1.1 as router ID until interface on which is configured goes down

Very True: A (A reboot will clear the current ospf process and restart it again–making the new loopback interface the router ID).

“D” cant be the answer because when the interface goes down and the OSPF process is not restarted, the router ID will still have the value of 172.18.1.1; it wont use the newly configured loopback interface–172.17.1.1.

And what it’s??
“OSPF has R1 router ID 172.18.1.1”
for me this means that router ID 172.18.1.1 can be seen in all show commands
sh ip protocols, sh ip ospf etc. hen a new loopback interfece is configured
“UNTIL interface on which is configured goes down” and what is after this.. ??

@DataRT @Doka,

I see, this makes sense, I may have contradicted my own answer as in Answer D, Router ID is pointing toward an interface, hence it is incorrect.

Answer A, prevails !

While we are at it,

q13. A network access serve using TACACAS+ for AAA operations receives an error message from the TACACS+ server. which action does the network access server take next ?
a. It attempts to authenticate the user against RADIUS
b. It restarts and attempts to reconnect to the TACACS+ server
c. It rejects the user access request the
d. It checks the method list for an additional AAA option
Ans: D

some are saying that answer should be C, what do you guys think

D. The key word is ERROR message. The network access server takes an action of looking for other AAA options configured on it, based on the error message it receives from the TACACS+ server.

Digitaltut explained these message types.

can any1 please tell me wheather the dumps are enough to pass the exam or not ?? i am taking my exam in 2 weeks ..

What’s uRPF checking first when the packet enters the interface?

A. It checks the ingress access list
B. It checks the egress access list
C. Route available in FIB or it verifies a reverse patch via the FIB to the source
D. It verifies that the source has a valid CEF adjacency

A or C ?

A

Step 1 Input ACLs configured on the inbound interface are checked.

Step 2 Unicast RPF checks to see if the packet has arrived on the best return path to the source, which it does by doing a reverse lookup in the FIB table.

Step 3 CEF table (FIB) lookup is carried out for packet forwarding.

Step 4 Output ACLs are checked on the outbound interface.

Step 5 The packet is forwarded.

I am re-posting this as nobody has answered me. :)

Please can someone dispute my answer to this question; I stand to be corrected:

Question 113 on Digitut

Which two areas does OSPF send a summary route by default ? (Choose two)

A. NSSA
B. Backbone
C. Totally stubby
D. Stub
E. Normal

My answer: A and D. But Digitaltut says C and D

Stub areas accept LSA type 1,2,3 and LSA type 3 contain summary routes from the ABR; TStubby doesn’t accept 3,4,5 but only default route by default from the ABR; NSSA accepts LSA type 3 (summary routes) and type 7 (FROM ASBR); TNSSA doesn’t accept type 3 but LSA type 7(FROM ASBR).

The ABR sends summary routes by default if no route summarization is configured–using the command: Area ID range .

That said, why is the answer C&D when the question isn’t talking about default routes but summary routes (LSA type 3)?

Thanks for correcting some items by the last minute guys, at least discussions are running and we are getting more correct answers to the new questions, i think imma update the files i have too.

@Zam2u

I believe the answer is D. If AAA fails it will reject, but if it has error it will fall back to additional option

@DataRT

Which two areas does OSPF send a summary route by default ? (Choose two)

A. NSSA
B. Backbone
C. Totally stubby
D. Stub
E. Normal

My answer: A and D. But Digitaltut says C and

I would agree with you, I believe its A&D

@Zam2u @DataRT

I also agree. I think the confusion comes from this question which is similar

Into which two types of areas would an area border router (ABR) inject a default route? (Choose two)
A. stub
B. the autonomous system of an exterior gateway protocol (EGP)
C. NSSA
D. totally stubby
E. the autonomous system of a different interior gateway protocol (IGP)
F. area 0
Correct Answer: AD

taking my exam this Friday… so very nervous… ccna expires month… i am almost done studying through networklessons dot com but I just feel it may not be enough. I hope the dumps help.

btw, while going through networklessons i saw they said uRPF has 2 paths but the official guide says there are 3, strict, loose and vrf. just fyi…

you guys are awesome for keeping this forum up to date.

I meant they said uRPF has 2 types but it has 3.

Question 113 on Digitut

Which two areas does OSPF send a summary route by default ? (Choose two)

A. NSSA
B. Backbone
C. Totally stubby
D. Stub
E. Normal

I’m probably wrong but, when the questions asks that “OSPF sends summary routes by default”. Isn’t that statement true about B (backbone) and E (Normal)??

D and E.. both Stub and Normal areas allow type 3 LSAs

Why are we still discussing this question, it will just make people confused