Download Latest 300-410 Questions

Explanation

In the “crypto isakmp key … address ” command, the address must be of the IP address of the other

end (which is 200.1.1.3 in this case) so Option A and Option B are correct. The difference between

these two options are in the hash SHA or MD5 method but both of them can be used although SHA is

better than MD5 so we choose Option A the best answer.

Note: Cisco no longer recommends using 3DES, MD5 and DH groups 1, 2 and 5.

Explanation

From the output, we learn that the current best path is from 10.57.255.11 (which includes “…valid,

confed-external, best“) and this path is 2 ASes away (64955 65003). Although there are some paths

with only 1 AS away (path from 172.16.254.234 for example) but they were not chosen the best path

so AS_PATH was not used to determine the best path -> Answers A and answer C are not correct.

All the paths in the output have metric of 0 and this is the lowest (best) value for this attribute. If we

configure higher MED then it is less preferred over other paths -> Answer B is not correct.

Only answer D is left but LOCAL_PREF attribute should be configured with higher value to be preferred

so we hope “lower LOCAL_PREF” here means higher value. But this is the best answer.