400-101 Premium Bundle

400-101 Premium Bundle

CCIE Routing and Switching (v5.0) Certification Exam

4.5 
(32295 ratings)
0 QuestionsPractice Tests
0 PDFPrint version
November 21, 2024Last update

Cisco 400-101 Free Practice Questions

Q1. Refer to the exhibit. 

Which two statements about this configuration are true? (Choose two.) 

A. Spoke devices will be dynamically added to the NHRP mappings. 

B. The next-hop server address must be configured to 172.168.1.1 on all spokes. 

C. The next-hop server address must be configured to 192.168.1.1 on all spokes. 

D. R1 will create a static mapping for each spoke. 

Answer: A,C 

Explanation: 

NHRP is a client/server model protocol which is defined by RFC2332. The hub is considered to be the Next Hop Server (NHS) and the spokes are considered to be the Next Hop Client (NHC). The hub must be configured as the next-hop server. NHRP provides a mapping between the inside and outside address of a tunnel endpoint. These mappings can be static or dynamic. In a dynamic scenario, a next-hop server (NHS) is used to maintain a list of possible tunnel endpoints. Each endpoint using the NHS registers its own public and private mapping with the NHS. The local mapping of the NHS must always be static. It is important to note that the branch points to the inside or protected address of the NHS server. This scenario is an example of dynamic mappings. 

Reference: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/WAN_and_MAN/DMVPDG/DMV PN_2_Phase2.html 

Q2. Which statement about the VLAN database is true? 

A. Manually deleting the vlan.dat file can cause inconsistency in the database. 

B. Private VLAN information is stored in the database. 

C. VLAN configurations 1 through 4096 are stored in the vlan.dat file. 

D. The VLAN database is used only if the VTP domain name in the VLAN database matches the VTP domain name in the startup-config file. 

Answer:

Q3. Which two statements about OSPF are true? (Choose two.) 

A. External type 2 routes are preferred over interarea routes. 

B. Intra-area routes are preferred over interarea routes. 

C. External type 1 routes are preferred over external type 2 routes. 

D. External type 1 routes are preferred over intra-area routes. 

E. External type 2 routes are preferred over external type 1 routes. 

Answer: B,C 

Q4. Which two statements about 6VPE are true? (Choose two.) 

A. It allows a service provider to use an existing MPLS network to provide VPN services to IPv6 customers. 

B. It uses MP-BGP as the carrier protocol to transport IPv6 connectivity. 

C. It provides IPv6 connectivity to MPLS-VPN customers when IPv6 overlay tunneling is also configured. 

D. It allows a service provider to use an existing MPLS network to provide global addressing to their IPv6 customers. 

E. It requires the configuration of a GRE tunnel tagged with a VLAN ID. 

F. It allows a service provider to use an existing L2TPv3 network to provide VPN services to IPv6 customers. 

Answer: A,B 

Explanation: 

The IPv6 MPLS VPN service model is similar to that of IPv4 MPLS VPNs. Service providers who have already deployed MPLS IPv4 VPN services over an IPv4 backbone can deploy IPv6 MPLS VPN services over the same IPv4 backbone by upgrading the PE router IOS version and dual-stack configuration, without any change on the core routers. IPv4 services can be provided in parallel with IPv6 services. IPv6 VPN service is exactly the same as MPLS VPN for IPv4. 6VPE offers the same architectural features as MPLS VPN for IPv4. It offers IPv6 VPN and uses the same components, such as: . 

Multiprotocol BGP (MP-BGP) VPN address family . 

Route distinguishers . 

VPN Routing and Forwarding (VRF) instances . 

Site of Origin (SOO) . 

Extended community . 

MP-BGP 

Reference: http://www.cisco.com/c/en/us/td/docs/net_mgmt/ip_solution_center/5-2/mpls_vpn/user/guide/mpls52book/ipv6.html 

Q5. Into which two pieces of information does the LISP protocol split the device identity? (Choose two.) 

A. Routing Locator 

B. Endpoint Identifier 

C. Resource Location 

D. Enterprise Identifier 

E. LISP ID 

F. Device ID 

Answer: A,B 

Q6. Refer to the exhibit. 

Which option explains why the forwarding address is set to 0.0.0.0 instead of 110.100.1.1? 

A. The interface Ethernet0/1 is in down state. 

B. The next-hop ip address 110.100.1.1 is not directly attached to the redistributing router. 

C. The next-hop interface (Ethernet0/1) is specified as part of the static route command; therefore, the forwarding address is always set to 0.0.0.0. 

D. OSPF is not enabled on the interface Ethernet0/1. 

Answer:

Explanation: 

From the output of the “show ip ospf database” command (although this command is not shown) we can conclude this is an ASBR (with Advertising Router is itself) and E0/1 is the ASBR’s next hop interface for other routers to reach network 192.168.10.0. 

The Forwarding Address is determined by these conditions: 

* The forwarding address is set to 0.0.0.0 if the ASBR redistributes routes and OSPF is not enabled on the next hop interface for those routes. 

* These conditions set the forwarding address field to a non-zero address: 

+ OSPF is enabled on the ASBR’s next hop interface AND 

+ ASBR’s next hop interface is non-passive under OSPF AND 

+ ASBR’s next hop interface is not point-to-point AND 

+ ASBR’s next hop interface is not point-to-multipoint AND 

+ ASBR’s next hop interface address falls under the network range specified in the router ospf command. 

* Any other conditions besides these set the forwarding address to 0.0.0.0. 

-> We can see E0/1 interface is not running OSPF because it does not belong to network 110.110.0.0 0.0.255.255 which is declared under OSPF process -> F.A address is set to 0.0.0.0. 

Reference: http://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13682-10.html 

Q7. Refer to the exhibit. 

Which three statements about this configuration are true? (Choose three.) 

A. The default route appears in the global routing table. 

B. The static route appears in the VRF red routing table. 

C. The subnet 192.168.1.0 is unique to the VRF red routing table. 

D. The static route is added to the global routing table and leaked from the VRF red. 

E. The subnet 192.168.1.0 is unique to the global routing table. 

F. 192.168.1.1 is reachable using any of the addresses on the router where the static route is configured. 

Answer: A,B,E 

Explanation: 

This is an example of the route leaking feature. Here, this static route is created for the red VRF so it will be installed into the red VRF routing table, but the use of the global keyword will cause this default route to appear in the global routing table. 

Q8. Which configuration sets a minimum quality of service on a Layer 2 access switch? 

A. mls qos cos override 

mls qos cos 2 

B. mls qos cos 2 

C. mls qos trust cos 

mls qos cos 2 

D. mls qos trust cos 

E. mls qos trust dscp 

Answer:

Explanation: 

The mls qos cos override interface command must be used to ensure that untrusted CoS values are explicitly set 0 (default). 

Reference: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/WAN_and_MAN/QoS_SRND/Qo S-SRND-Book/QoSDesign.html 

Q9. DRAG DROP 

Drag and drop each step of the Unicast RPF process on the left into the correct order on the right. 

Answer:  

Q10. Which three options are characteristics of a Type 10 LSA? (Choose three.) 

A. It is an area-local, opaque LSA. 

B. Data is flooded to all routers in the LSA scope. 

C. It is used for traffic-engineering extensions to OSPF. 

D. It is a link-local, opaque LSA. 

E. Data is flooded only to the routers in the LSA scope that understand the data. 

F. It is used for traffic-engineering extensions to LDP. 

Answer: A,B,C 

Q11. Which two statements about SoO checking in EIGRP OTP deployments are true? (Choose two). 

A. During the import process, the SoO value in BGP is checked against the SoO value of the site map. 

B. During the reception of an EIGRP update, the SoO value in the EIGRP update is checked against the SoO value of the site map on the ingress interface. 

C. At the ingress of the PE/CE link, the SoO in the EIGRP update is checked against the SoO within the PE/CE routing protocol. 

D. At the egress of the PE/CE link, the SoO is checked against the SoO within the PE/CE routing protocol. 

E. The SoO is checked at the ingress of the backdoor link. 

F. The SoO is checked at the egress of the backdoor link. 

Answer: A,B 

Explanation: 

. SoO checking: 

– During the import process the SoO value in BGP update is checked against the SoO value of the site-map attached to VRF interface. The update is propagated to CE only if there is no match (this check is done regardless of protocol used on PE/CE link). 

– At reception of EIGRP update, the SoO value in the EIGRP update is checked against the SoO value of site-map attached to the incoming interface. This update is accepted only if there is no match (this check can optionally be done on backdoor router). 

Reference: http://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ip-routing/whitepaper_C11-730404.html 

Q12. Which statement describes Cisco PfR link groups? 

A. Link groups enable Cisco PfR Fast Reroute when NetFlow is enabled on the external interfaces of the border routers. 

B. Link groups define a strict or loose hop-by-hop path pReference: 

C. Link groups are required only when Cisco PfR is configured to load-balance all traffic. 

D. Link groups are enabled automatically when Cisco PfR is in Fast Reroute mode. 

E. Link groups set a preference for primary and fallback (backup) external exit interfaces. 

Answer:

Explanation: 

The Performance Routing - Link Groups feature introduced the ability to define a group of exit links as a preferred set of links, or a fallback set of links for PfR to use when optimizing traffic classes specified in an PfR policy. PfR currently selects the best link for a traffic class based on the preferences specified in a policy and the traffic class performance—using parameters such as reachability, delay, loss, jitter or MOS—on a path out of the specified link. 

Reference: http://www.cisco.com/c/en/us/td/docs/ios/pfr/configuration/guide/15_1/pfr_15_1_book/pfr-link-group.html 

Q13. Refer to the exhibit. 

Which statement about the device routing table is true? 

A. Only networks 10.10.10.0/24 and smaller from host 192.168.168.1 are in the routing table. 

B. Only networks 10.10.10.0/24 and larger from host 192.168.168.1 are in the routing table. 

C. Only network 10.10.10.0/24 from host 192.168.168.1 is in the routing table. 

D. Networks 10.10.10.0/24 and smaller from any host are in the routing table. 

Answer:

Explanation: 

When you add the keywords “GE” and “LE” to the prefix-list, the “len” value changes its meaning. When using GE and LE, the len value specifies how many bits of the prefix you are checking, starting with the most significant bit. ip prefix-list LIST permit 1.2.3.0/24 le 32 

This means: Check the first 24 bits of the prefix 1.2.3.0 The subnet mask must be less than or equal to 32 

Reference: http://blog.ine.com/2007/12/26/how-do-prefix-lists-work/ 

Q14. Refer to the exhibit. 

Which command can you enter to resolve this error message on a peer router? 

A. username <username> password <password> 

B. ppp chap <hostname> 

C. aaa authorization exec if-authenticated 

D. aaa authorization network if-authenticated 

Answer:

Q15. Which two loop-prevention mechanisms are implemented in BGP? (Choose two.) 

A. A route with its own AS in the AS_PATH is dropped automatically if the route reenters its own AS. 

B. A route with its own cluster ID in the CLUSTER_LIST is dropped automatically when the route reenters its own AS. 

C. The command bgp allowas-in enables a route with its own AS_PATH to be dropped when it reenters its own AS. 

D. The command bgp bestpath as-path ignore enables the strict checking of AS_PATH so that they drop routes with their own AS in the AS_PATH. 

E. The command bgp bestpath med missing-as-worst assigns the smallest possible MED, which directly prevents a loop. 

Answer: A,B 

Explanation: 

When dealing with the possibility of routing updates making their way back into an AS, BGP relies on the information in the AS_path for loop detection. An update that tries to make its way back into the AS it was originated from will be dropped by the border router. With the introduction of route reflectors, there is a potential for having routing loops within an AS. A routing update that leaves a cluster might find its way back inside the cluster. Loops inside the AS cannot be detected by the traditional AS_path approach because the routing updates have not left the AS yet. BGP offers two extra measures for loop avoidance inside an AS when route reflectors are configured. 

Using an Originator ID 

The originator ID is a 4-byte, optional, nontransitive BGP attribute (type code 9) that is created by the route reflector. This attribute carries the router ID of the originator of the route in the local AS. If, because of poor configuration, the update comes back to the originator, the originator ignores it. 

Using a Cluster List 

The cluster list is an optional, nontransitive BGP attribute (type code 10). Each cluster is represented with a cluster ID. 

A cluster list is a sequence of cluster IDs that an update has traversed. When a route reflector sends a route from its clients to nonclients outside the cluster, it appends the local cluster ID to the cluster list. If the route reflector receives an update whose cluster list contains the local cluster ID, the update is ignored. This is basically the same concept as the AS_path list applied between the clusters inside the AS. 

Reference: http://borg.uu3.net/cisco/inter_arch/page11.html