[2021-New] Cisco 400-101 Dumps With Update Exam Questions (161-170)

400-101 Dumps

400-101 Exam Questions - Online Test

400-101 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. Which three statements about GLBP are true? (Choose three.)

A. It uses a virtual MAC address that starts with 0007.b4.

B. It elects a single active virtual gateway to appoint and manage multiple active virtual forwarders.

C. It allows the configured virtual IP address to be used on a physical interface as well.

D. It uses a virtual MAC address that starts with 0070.4b.

E. It elects multiple active virtual gateways to appoint and manage a single active virtual forwarder.

F. Preemption is enabled for the configured active virtual gateway by default.

Answer: A,B,C

Explanation:

The virtual MAC address in GLBP is 0007.b400.xxyy where xx is the GLBP group number and yy is the different number of each gateway (01, 02, 03…). One of the routers in a GLBP group is elected as an AVG – Active Virtual Gateway. There is only one active AVG in a group, and its task is to respond to ARP requests sent to the virtual gateway IP address replying different virtual MAC addresses in response packets. GLBP allows the configured virtual IP address to be used on a physical interface. By default, the GLBP gateway preemptive scheme is disabled. A backup virtual gateway can become the AVG only if the current AVG fails, regardless of the priorities assigned to the virtual gateways.

Q2. Refer to the exhibit.

What is wrong with the configuration of the tunnel interface of this DMVPN Phase II spoke router?

A. The interface MTU is too high.

B. The tunnel destination is missing.

C. The NHRP NHS IP address is wrong.

D. The tunnel mode is wrong.

Answer: D

Explanation:

By default, tunnel interfaces use GRE as the tunnel mode, but a DMVPN router needs to be configured for GRE multipoint by using the “tunnel mode gre multipoint” interface command.

Q3. Refer to the exhibit.

Which statement about the output is true?

A. The flow is an HTTPS connection to the router, which is initiated by 144.254.10.206.

B. The flow is an HTTP connection to the router, which is initiated by 144.254.10.206.

C. The flow is an HTTPS connection that is initiated by the router and that goes to 144.254.10.206.

D. The flow is an HTTP connection that is initiated by the router and that goes to 144.254.10.206.

Answer: A

Explanation:

We can see that the connection is initiated by the Source IP address shown as 144.254.10.206. We also see that the destination protocol (DstP) shows 01BB, which is in hex and translates to 443 in decimal. SSL/HTTPS uses port 443.

Q4. Refer to the exhibit.

All switches have default bridge priorities, and originate BPDUs with MAC addresses as indicated. The numbers shown are STP link metrics.

After STP converges, you discover that traffic from switch SWG toward switch SWD takes a less optimal path. What can you do to optimize the STP tree in this switched network?

A. Change the priority of switch SWA to a lower value than the default value.

B. Change the priority of switch SWB to a higher value than the default value.

C. Change the priority of switch SWG to a higher value than the default value.

D. Change the priority of switch SWD to a lower value than the default value.

Answer: D

Explanation:

In this topology, we see that all port paths and priorities are the same, so the lowest MAC address will be used to determine the best STP path. From SWG, SWE will be chosen as the next switch in the path because it has a lower MAC address than SWF. From SWE, traffic will go to SWC because it has a lower MAC address, and then to SWD, instead of going from SWE directly to SWD. If we lower the priority of SWD (lower means better with STP) then traffic will be sent directly to SWD.

Q5. Refer to the exhibit.

All routers are running EIGRP and the network has converged. R3 and R4 are configured as EIGRP Stub. If the link between R1 and R3 goes down, which statement is true?

A. R1 sends traffic destined to 192.168.0.100 via R2.

B. R2 does not have a route to 192.168.0.0/24 in the routing table.

C. The prefix 192.168.0.0/24 becomes stuck-in-active on R4.

D. R3 does not advertise 192.168.0.0/24 to R4 anymore.

Answer: B

Q6. Which mechanism does Cisco recommend for CE router interfaces that face the service provider for an EVPL circuit with multiple EVCs and multiple traffic classes?

A. HCBWFQ

B. LLQ

C. tail drop

D. WRED

Answer: A

Explanation:

In a simple handoff, packets may be discarded in the service provider network, either because of congestion on a link without an appropriate QoS policy or because of a policer QoS configuration on the service provider network that serves to rate limit traffic accessing the WAN core. To address these issues, QoS on the CE device is applied at a per-port level. A QoS service policy is configured on the outside Ethernet interface, and this parent policy includes a shaper that then references a second or subordinate (child) policy that enables queueing within the shaped rate. This is called a hierarchical CBWFQ (HCBWFQ) configuration.

Reference: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/WAN_and_MAN/Ethernet_Acces s_for_NG_MAN_WAN_V3-1_external.html

Q7. DRAG DROP

Drag and drop each SNMP security model and level on the left to the corresponding mode of authentication on the right.

Answer:

Q8. DRAG DROP

Drag each GETVPN component on the left to its function on the right.

Answer:

Q9. Refer to the exhibit.

Which statement about authentication on Router A is true?

A. The router will attempt to authenticate users against TACACS+ only.

B. The router will attempt to authenticate users against the local database only.

C. The router will attempt to authenticate users against the local database first, and fall back to TACACS+ if the local database authentication fails.

D. The router will authenticate users against the default database only.

E. The router will attempt to authenticate users against TACACS+ first, and fall back to the local database if the TACACS+ authentication fails.

Answer: E

Q10. Refer to the exhibit.

NHRP registration is failing; what might be the problem?

A. invalid IP addressing

B. fragmentation

C. incorrect NHRP mapping

D. incorrect NHRP authentication

Answer: D

Explanation:

Configuring an authentication string ensures that only routers configured with the same string can communicate using NHRP. Therefore, if the authentication scheme is to be used, the same string must be configured in all devices configured for NHRP on a fabric

Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_4/ip_addr/configuration/guide/hadnhrp.html#w p1055432