I started to see ospf issues on only one of the tunnels. It was happening before I configured crypto isakmp policy.  I think it was r1 to r3.  The only task was to configure IPSEC over the tunnel.   The PC off of R1 could never ping the pc off of R3.  It made sense because the tunnel was bouncing.  Show dmvpn looked fine on both spokes.   The IPSEC configs were exactly the same on 3 devices.  The tunnel configs were exactly the same on all nodes.   I spent way too much time on this sim and failed the exam.  Anyone else see this issue.

Fiz o exame Enarsi, fui reprovado porque o how2pass não está atualizado.

A equipe How2pass precisa atualizar o conteúdo e tornar os laboratórios funcionais. Principalmente as configurações de infraestrutura do laboratório.

I took the test on 12-22 and passed. I havent taken a Cisco cert exam in a few years and in the past they gave you a number for your score however this time it just says passed. The section analysis is still there but no number. There were 49 questions total; 4 questions that I did not remember seeing on H2P, 3 drag and drops that were on H2P and 4 labs that were on H2P. I was worried that I would blow through it being that you get 90 minutes but I was largely mistaken. I spent way too much time on the labs and almost ran out of time. Make sure you study them closely and know your stuff. Thanks How2Pass and good luck everyone.

Explanation contradicts the Correct Answer.

Aren't both C and D answers correct or am i missing something?


An engineer must enable a login authentication method that allows a user to log in by using local authentication if all
other defined authentication methods fail. Which configuration should be applied?

A. aaa authentication login CONSOLE group radius local-case enable aaa
B. authentication login CONSOLE group radius local enable none
C. aaa authentication login CONSOLE group radius local enable
D. aaa authentication login CONSOLE group tacacs+ local enable

It looks like your last answer choice is two answers.

The exhibit does not contain enough information to answer this questions.  There is no way of knowing which interface should be inside or outside. There are potentially two correct answers depending on which interface is inside.


int gig 0/0
ip nat inside

int gig 0/1
ip nat outside

I don't see how an ACL can impact one command but not the other.

the max-message size is set for 10 Kilobytes.  This could be fine for a small command output such as show line, but something larger like show run would require the max-message size to be increased.


https://www.cisco.com/c/en/us/td/docs/io...sshv2.html

Step 6
netconf max-message size


Example:
Device(config)# netconf max-message 37283
 
(Optional) Specifies the maximum size, in kilobytes (KB), for the messages received in a NETCONF session.

• The valid range is 1 to 2147483. The default value is infinite.
  
• To set the maximum size to infinite, use the no netconf max-message command.
  

Exhibit  doesn't match answer options. The file server is on gig 0/2

correct answer is

monitor session 1 source int gig 0/2
monitor session 1 destination int gig 0/1 encap replicate

the command show monitor is not required for span to work but it is a better option than show ip route or show vlan.

What do aironet extensions have to do with this?

I think coverage hole detection is a more likely cause.

The first order of business is to detect coverage holes, and second to mitigate them (if possible and wise) by increasing power/coverage. 


https://www.cisco.com/c/en/us/td/docs/wi...r/chd.html