right answer is:

Apply a filter list inbound on R3 and R7. 


https : // www. examtopics. com / discussions / cisco / view / 80994-exam-350-401-topic-1-question-462-discussion /

EC574: there is missing a passive-interface command on the right answer

Correct answer should be:

Set max-bundle to 2 ...


please check and change right answer if it is really wrong

I started to see ospf issues on only one of the tunnels. It was happening before I configured crypto isakmp policy.  I think it was r1 to r3.  The only task was to configure IPSEC over the tunnel.   The PC off of R1 could never ping the pc off of R3.  It made sense because the tunnel was bouncing.  Show dmvpn looked fine on both spokes.   The IPSEC configs were exactly the same on 3 devices.  The tunnel configs were exactly the same on all nodes.   I spent way too much time on this sim and failed the exam.  Anyone else see this issue.

Fiz o exame Enarsi, fui reprovado porque o how2pass não está atualizado.

A equipe How2pass precisa atualizar o conteúdo e tornar os laboratórios funcionais. Principalmente as configurações de infraestrutura do laboratório.

I took the test on 12-22 and passed. I havent taken a Cisco cert exam in a few years and in the past they gave you a number for your score however this time it just says passed. The section analysis is still there but no number. There were 49 questions total; 4 questions that I did not remember seeing on H2P, 3 drag and drops that were on H2P and 4 labs that were on H2P. I was worried that I would blow through it being that you get 90 minutes but I was largely mistaken. I spent way too much time on the labs and almost ran out of time. Make sure you study them closely and know your stuff. Thanks How2Pass and good luck everyone.

Explanation contradicts the Correct Answer.

Aren't both C and D answers correct or am i missing something?


An engineer must enable a login authentication method that allows a user to log in by using local authentication if all
other defined authentication methods fail. Which configuration should be applied?

A. aaa authentication login CONSOLE group radius local-case enable aaa
B. authentication login CONSOLE group radius local enable none
C. aaa authentication login CONSOLE group radius local enable
D. aaa authentication login CONSOLE group tacacs+ local enable

It looks like your last answer choice is two answers.

The exhibit does not contain enough information to answer this questions.  There is no way of knowing which interface should be inside or outside. There are potentially two correct answers depending on which interface is inside.


int gig 0/0
ip nat inside

int gig 0/1
ip nat outside