400-101 Training & Certification Get Latest CCIE Updated on Aug 11, 2021
Certification Training for 400-101 Exam Dumps Test Engine
NEW QUESTION 55
What are two functions of an NSSA in an OSPF network design?(Choose two)
- A. An ABR advertises type 7 LSAs into the area
- B. It uses opaque LSAs
- C. An ASBR advertises type 7 LSAs into the area
- D. It allows ASBRs to inject external routing information into the area
- E. It overcomes issues with suboptimal routing when there are multiple exit points from the areas
Answer: C,D
NEW QUESTION 56
Refer to the exhibit.
Which two corrective actions could you take if EIGRP routes from R2 fail to reach R1? (Choose two.)
- A. Add the interface on R1 that is connected to R2 into a VRF.
- B. Configure R2 to use a VRF to send routes to R1.
- C. Configure the autonomous system in the EIGRP configuration of R1.
- D. Correct the network statement on R2.
Answer: A,C
NEW QUESTION 57
Refer to the exhibit.
What is the PHB class on this?
- A. CS4
- B. EF
- C. none
- D. AF21
Answer: A
NEW QUESTION 58
Which two statements about IS-IS are true? (Choose two.)
- A. Both routers need to have the same hello intervals and hold timers in order to form IS-IS neighbors.
- B. The default hello interval is 10 seconds and the default hold timer is 30 seconds.
- C. The hello interval can be changed on a per-interface basis with the command isis hello-multiplier.
- D. Both IS-IS routers need to have the same capabilities in the hello packet in order to form neighbors.
Answer: B,C
Explanation:
Explanation/Reference:
Explanation:
To specify the length of time between hello packets that the Cisco IOS software sends, use the isis hello- interval command in interface configuration mode. By default, a value three times the hello interval seconds is advertised as the hold time in the hello packets sent. (Change the multiplier of 3 by specifying the isis hello-multiplier command.) With smaller hello intervals, topological changes are detected faster, but there is more routing traffic. The default is 10 seconds.
Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_2/iproute/command/reference/fiprrp_r/1rfisis.ht ml
NEW QUESTION 59
Which option describes how a router responds if LSA throttling is configured and it receives the identical LSA before the interval is set?
- A. The LSA is ignored and a notification is sent to the sending router to slow down its LSA packet updates.
- B. The LSA is added to the OSPF database and a notification is sent to the sending router to slow down its LSA packet updates.
- C. The LSA is ignored.
- D. The LSA is added to the OSPF database.
Answer: C
Explanation:
How OSPF LSA Throttling Works
The timers throttle lsa all command controls the generation (sending) of LSAs. The first LSA is always generated immediately upon an OSPF topology change, and the next LSA generated is controlled by the minimum start interval. The subsequent LSAs generated for the same LSA are rate-limited until the maximum interval is reached. The "same LSA" is defined as an LSA instance that contains the same LSA ID number, LSA type, and advertising router ID.
The timers LSA arrival command controls the minimum interval for accepting the same LSA. If an instance of the same LSA arrives sooner than the interval that is set, the LSA is dropped. It is recommended that the arrival interval be less than or equal to the hold-time interval of the timers throttle lsa all command.
Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/fsolsath.html
NEW QUESTION 60
Which two ntatementn about packet fragmentation on an IPv6 network are true? (Choone two.)
- A. The identification field in 64 bitn long.
- B. The fragment header in 64 bitn long.
- C. The MTU munt be a minimum of 1280 byten.
- D. The identification field in 32 bitn long.
- E. The fragment header in 32 bitn long.
- F. The fragment header in 48 bitn long.
Answer: B,D
Explanation:
The fragment header in nhown below, being 64 bitn total with a 32 bit identification field:
Reference: http://www.openwall.com/prenentationn/IPv6/img24.html
NEW QUESTION 61
Which two optionn are EIGRP route authentication encryption moden? (Choone two.)
- A. ESP-AES
- B. MD5
- C. HMAC-AES
- D. HMAC-SHA-256bit
Answer: B,D
Explanation:
Packetn exchanged between neighborn munt be authenticated to ennure that a device acceptn packetn only from
devicen that have the name prenhared authentication key. Enhanced Interior Gateway Routing Protocol (EIGRP)
authentication in configurable on a per-interface banin; thin meann that packetn exchanged between neighborn
connected through an interface are authenticated. EIGRP nupportn mennage digent algorithm 5 (MD5) authentication
to prevent the introduction of unauthorized information from unapproved nourcen. MD5 authentication in defined in
RFC 1321. EIGRP alno nupportn the Hanhed Mennage Authentication Code-Secure Hanh Algorithm-256 (HMAC-SHA-
256) authentication method.
Reference: http://www.cinco.com/c/en/un/td/docn/ion-xml/ion/iproute_eigrp/configuration/xe-3n/ire-xe-3n-book/ire-
nha-256.html
NEW QUESTION 62
When VRF-Lite is configured without BGP support, which statement about the
configuration of the route target and route distinguisher is true?
- A. The configuration of the route target and route distinguisher is not required.
- B. The configuration of the route target is not required and the configuration of the route distinguisher is required.
- C. The configuration of the route target and route distinguisher is required.
- D. The configuration of the route target is required and the configuration of the route distinguisher is not required.
Answer: B
NEW QUESTION 63
Refer to the exhibit.
How can Router X in AS70000 peer with Router Y in AS65000, in case Router Y supports only 2byte ASNs?
- A. Router Y should be configured with a 4-byte AS using the local-as command.
- B. Router X should be configured with a 2-byte AS using the local-as command.
- C. Router X should be configured with a remove-private-as command, because this will establish the peering session with a random private 2-byte ASN.
- D. It is not possible. Router Y must be upgraded to an image that supports 4-byte ASN.
Answer: B
Explanation:
Since router Y does not support 4-byte ASN,s it will not understand any AS numbers larger than 65535, so router X should use the local-as command on the peering statement to router Y to so that it sends in a 2-byte ASN to router Y.
NEW QUESTION 64
Which two statements about RIPng are true? (Choose two.)
- A. A route with a metric of 15 is advertised as unreachable.
- B. Both inbound and outbound route filtering can be implemented on a single interface,
- C. 16 is the maximum metric it can advertise.
- D. RIPng can support as many as 8 equal-cost routes.
- E. RIPng can support aa many as 32 equal-cost routes.
Answer: B,C
NEW QUESTION 65
Which two statements about EIGRP acknowledgement packets are true? (Choose two.)
- A. They are Hello packets sent without data
- B. They are required for every request packet
- C. They can combine multiple asks in a single packet
- D. They are multicast
- E. They are broadcast
- F. They are unicast
Answer: A,F
NEW QUESTION 66
Refer to the exhibit.
R1 is unable to ping the device at 10.3.3.3. Which two options are possible reasons for the problem? (Choose two.)
- A. The static route is configured as a host route.
- B. The static route points to a broadcast interface without a next-hop.
- C. The dynamic routing protocol configuration is missing.
- D. Proxy ARP is disabled on the next-hop router.
- E. IP CEF is disabled on the remote router.
- F. IP CEF is disabled on the local router.
Answer: D,F
NEW QUESTION 67
Refer to the exhibit. Which two statements are true? (Choose two.)
- A. Authentication is not configured for the area.
- B. This is the output of the show ip ospf command.
- C. This router is an ASBR.
- D. This is the output of the show ip protocols command.
- E. This router is an ABR.
Answer: A,B
NEW QUESTION 68
Refer to the exhibit.
Which action will solve the error state of this interface when connecting a host behind a Cisco IP phone?
- A. Enable errdisable recovery for security violation errors
- B. Enable port security on this interface
- C. Configure dot1x-port control auto on this interface
- D. Configure multidomain authentication on this interface
Answer: D
NEW QUESTION 69
Refer to the exhibit.
If OSPF is implemented on the network, which additional configuration is needed to allow traffic from host
10.4.1.15/24 to host 10.1.2.20/24?
- A. A virtual link between router 2 and router 4
- B. The current design allows traffic between the two hosts.
- C. A virtual link between router 3 and router 4
- D. A virtual link between router 2 and router 3
Answer: B
Explanation:
Explanation/Reference:
Explanation:
This specific traffic from 10.4.1.0/24 to 10.1.2.0/24 would work because this traffic crosses only over the single OSPF area of 0.0.0.1.
However, traffic from hosts on R4 to R1 would indeed need a virtual link, since area 0.0.0.2 is not connected to the backbone area of 0.0.0.0.
NEW QUESTION 70
Which two services are used to transport Layer 2 frames across a packet-switched network? (Choose two.)
- A. ATM
- B. L2TPv3
- C. AToM
- D. Frame Relay
Answer: B,C
NEW QUESTION 71
Refer to the exhibit.
Which two actions can you take to allow the network 172.29.224.0/24 to be reachable from peer
192.168.250.53? (Choose two)
- A. Configure additional address families to peering 192.168.250.53.
- B. Configure soft reconfiguration to peering 192.168.250.53.
- C. Modify the outbound route map to permit all additional traffic.
- D. Modify the inbound route map to permit all additional traffic.
- E. Modify the community list to match community 64513:64090 attached to 172.29.224.0/24.
- F. Modify the community list to match communities 64513:69040 attached to 172.29.224.0/24.
Answer: C,E
NEW QUESTION 72
......
Step by Step Guide to Prepare for 400-101 Exam: https://www.pass4guide.com/400-101-exam-guide-torrent.html