It is impossible to pass Cisco 400-101 exam without any help in the short term. Come to Examcollection soon and find the most advanced, correct and guaranteed Cisco 400-101 practice questions. You will get a surprising result by our Renewal CCIE Routing and Switching (v5.0) practice guides.

2021 Nov 400-101 ccie written exam number:

Q321. Refer to the exhibit. 

Two multicast domains are configured as shown and connected with MSDP, but the two 

domains are unable to communicate. Which two actions can you take to correct the problem? (Choose two.) 

A. Change the peering IP address in AS 65220 to 10.0.0.20. 

B. Change the peering AS on R2 to 65210. 

C. Verify that UDP port 639 is open. 

D. Verify that TCP port 139 is open. 

E. Change the MSDP originator-id to GigabitEthernet 0/0/0 on both routers. 

F. Change the MSDP peering IP address on R2 to 172.16.1.13. 

Answer: A,B 


Q322. Refer to the exhibit. 

Which two statements about the device that generated the output are true? (Choose two.) 

A. The SPT-bit is set. 

B. The sparse-mode flag is set. 

C. The RP-bit is set. 

D. The source-specific host report was received. 

Answer: A,D 

Explanation: 

In this example we can see that the s, T, and I flags are set. Here is a list of the flags and their meanings: 

show ip mroute Field Descriptions 

Field Description 

Flags: 

Provides information about the entry. 

D - Dense 

Entry is operating in dense mode. 

S - Sparse 

Entry is operating in sparse mode. 

B - Bidir Group 

Indicates that a multicast group is operating in bidirectional mode. 

s - SSM Group Indicates that a multicast group is within the SSM range of IP addresses. This flag is reset if the SSM range changes. 

C - Connected 

A member of the multicast group is present on the directly connected interface. 

L - Local 

The router itself is a member of the multicast group. 

P - Pruned 

Route has been pruned. The Cisco IOS software keeps this information so that a downstream member can join the source. 

R - RP-bit set 

Indicates that the (S, G) entry is pointing toward the RP. This is typically prune state along the shared tree for a particular source. 

F - Register flag 

Indicates that the software is registering for a multicast source. 

T - SPT-bit set 

Indicates that packets have been received on the shortest path source tree. 

J - Join SPT 

For (*, G) entries, indicates that the rate of traffic flowing down the shared tree is exceeding the SPT-Threshold set for the group. (The default SPT-Threshold setting is 0 kbps.) When the J- Join shortest path tree (SPT) flag is set, the next (S, G) packet received down the shared tree triggers an (S, G) join in the direction of the source, thereby causing the router to join the source tree. 

For (S, G) entries, indicates that the entry was created because the SPT-Threshold for the group was exceeded. When the J- Join SPT flag is set for (S, G) entries, the router monitors the traffic rate on the source tree and attempts to switch back to the shared tree for this source if the traffic rate on the source tree falls below the SPT-Threshold of the group for more than 1 minute. 

M - MSDP created entry 

Indicates that a (*, G) entry was learned through a Multicast Source Discovery Protocol (MSDP) peer. This flag is only applicable for a rendezvous point (RP) running MSDP. 

X - Proxy Join Timer Running 

Indicates that the proxy join timer is running. This flag is only set for (S, G) entries of an RP or "turnaround" router. A "turnaround" router is located at the intersection of a shared path (*, G) tree and the shortest path from the source to the RP. 

A - Advertised via MSDP 

Indicates that an (S, G) entry was advertised through an MSDP peer. This flag is only applicable for an RP running MSDP. 

U - URD 

Indicates that a URD channel subscription report was received for the (S, G) entry. 

I - Received Source Specific Host Report 

Indicates that an (S, G) entry was created by an (S, G) report. This (S, G) report could have been created by IGMPv3, URD, or IGMP v3lite. This flag is only set on the designated router (DR). 

Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/12s_ssm.html 


Q323. DRAG DROP 

Drag each MPLS term on the left to the matching statement on the right. 

Answer: 


Q324. In which two modes do IPv6-in-IPv4 tunnels operate? (Choose two.) 

A. tunnel mode 

B. transport mode 

C. 6to4 mode 

D. 4to6 mode 

E. ISATAP mode 

Answer: C,E 

Explanation: 

*There are 5 tunneling solution in IPv6:* 

*1. Using the “Tunnel mode ipv6ip”, in this case the tunnel source and destination are configured with IPv4 addressing and the tunnel interface is configured with IPv6. This will use protocol 41. This is used for IPv6/IPv4. 

R1(config)#int tunnel 1 

R1(config-if)#ipv6 address 12:1:12::1/64 

R1(config-if)#tunnel source 10.1.12.1 

R1(config-if)#tunnel destination 10.1.12.2 

R1(config-if)#*tunnel mode ipv6ip* 

*

2. Using the “Tunnel mode gre ipv6, in this case the tunnel source and destination are all configured with IPv6 addressing. This is used for IPv6/IPv6. 

BB1(config)#int tunnel 1 

BB1(config-if)#ipv6 address 121:1:121::111/64 

BB1(config-if)#tunnel source 10:1:111::111 

BB1(config-if)#tunnel destination 10:1:112::112 

BB1(config-if)#*tunnel mode gre ipv6* 

*3. 

In this case, the third type, the tunnel mode is NOT used at all, note that the tunnel interface is configured with IPv6 and the tunnel source and destination is configured with IPv4 but no mention of tunnel mode. This configuration will use protocol 47. This is used for IPv6/IPv4. 

R1(config)#int tunnel 13 

R1(config-if)#ipv6 address 13:1:13::1/64 

R1(config-if)#tunnel source 10.1.13.1 

R1(config-if)#tunnel destination 10.1.13.3 

*4. Note in this case a special addressing is assigned to the tunnel interface which is a concatenation of a reserved IPv6 address of 2002followed by the translated IPv4 address of a given interface on the router. In this configuration ONLY the tunnel source address is used and since the tunnel is automatic, the destination address is NOT configured. The tunnel mode is set to “Tunnel mode ipv6ip 6to4. Note the IPv4 address of 10.1.1.1 is translated to 0A.01.01.01 and once concatenated, it will be “2002:0A01:0101: or 2002:A01:101. This is used for IPv6/IPv4. 

R1(config)#interface Tunnel14 

R1(config-if)#ipv6 address 2002:A01:101::/128 

R1(config-if)#tunnel source 10.1.1.1 

R1(config-if)#*tunnel mode ipv6ip 6to4* 

*5. ISATAP, ISATAP works like 6to4 tunnels, with one major difference, it uses a special IPv6 address which is formed as follows: * 

*In this tunnel mode, the network portion can be any IPv6 address, whereas in 6to4 it had to start with 2002.* 

*Note when the IPv6 address is assigned to the tunnel interface, the “eui-64 is used, in this case the host portion of the IPv6 address starts with “0000.5EFE” and then the rest of the host portion is the translated IPv4 address of the tunnel’s source IPv4 address. This translation is performed automatically unlike 6to4. This is used for IPv6/IPv4.* 

R4(config)#int tunnel 46 

R4(config-if)#ipv6 address 46:1:46::/64 eui-64 

R4(config-if)#tunnel source 10.44.44.44 

R4(config-if)#*tunnel mode ipv6ip ISATAP* 


Q325. Which IPv6 tunneling mechanism requires a service provider to use one of its own native IPv6 blocks to guarantee that its IPv6 hosts will be reachable? 

A. 6rd tunneling 

B. automatic 6to4 tunneling 

C. NAT-PT tunneling 

D. ISATAP tunneling 

E. manual ipv6ip tunneling 

F. automatic 4to6 tunneling 

Answer:


Improve 400-101 ccie routing and switching written exam fee:

Q326. Which two statements about MAC Authentication Bypass are true? (Choose two.) 

A. Traffic from an endpoint is authorized to pass after MAB authenticates the MAC address of the endpoint. 

B. During the learning stage, the switch examines multiple packets from the endpoint to determine the MAC address of the endpoint. 

C. After the switch learns the MAC address of the endpoint, it uses TACACS+ to authenticate it. 

D. After learning a source MAC address, it sends the host a RADIUS Account-Request message to validate the address. 

E. The MAC address of a device serves as its user name and password to authenticate with a RADIUS server. 

Answer: A,E 


Q327. Refer to the exhibit. 

Which log levels are enabled for the console? 

A. informational only 

B. informational and debugging 

C. informational, debugging, notifications, warnings, errors, critical, alerts, and emergencies 

D. informational, notifications, warnings, errors, critical, alerts, and emergencies 

Answer:


Q328. DRAG DROP 

Drag and drop the OSPF network type on the left to the correct category of timers on the right. 

Answer: 


Q329. Which two methods can you use to limit the range for EIGRP queries? (Choose two.) 

A. Use an access list to deny the multicast address 224.0.0.1 outbound from select EIGRP neighbor and permit everything else. 

B. Configure route tagging for all EIGRP routes. 

C. Summarize routes at the boundary routers of the EIGRP domain. 

D. Configure unicast EIGRP on all routers in the EIGRP domain. 

E. Configure stub routers in the EIGRP domain. 

F. Use an access list to deny the multicast address 224.0.0.10 outbound from select EIGRP neighbors and permit everything else. 

Answer: C,E 


Q330. What are two reasons to use the ip ospf database filter all out command? (Choose two.) 

A. to maintain a centralized OSPF database on a single master device 

B. to avoid flooding LSAs on low-speed links 

C. to ensure a consistent OSPF database across the network 

D. to selectively filter OSPF routes without disrupting the SPF algorithm 

E. to filter only type 7 LSAs from an OSPF area 

F. to enable OSPF to send triggered updates 

Answer: A,B