we provide Pinpoint Cisco ccie 400 101 dumps exam fees which are the best for clearing ccie 400 101 test, and to get certified by Cisco CCIE Routing and Switching (v5.0). The 400 101 ccie Questions & Answers covers all the knowledge points of the real 400 101 pdf exam. Crack your Cisco passleader 400 101 Exam with latest dumps, guaranteed!


2026 New 400-101 Exam Dumps with PDF and VCE Free: https://www.surepassexam.com/400-101-exam-dumps.html

Q1. What are the minimal configuration steps that are required to configure EIGRP HMAC-SHA2 authentication? 

A. classic router mode, interface XX, authentication mode hmac-sha-256 <password> 

B. named router mode, address-family statement, authentication mode hmac-sha-256 <password> 

C. named router mode, address-family statement, af-interface default, authentication mode hmac-sha-256 <password> 

D. named router mode, address-family statement, authentication mode hmac-sha-256 <password> 

Answer: C 

Explanation: 

The example below shows how to configure EIGRP HMAC-SHA2 on Cisco router: 

Device(config)# router eigrp name1 

Device(config-router)# address-family ipv4 autonomous-system 45000 

Device(config-router-af)# af-interface ethernet 0/0 

Device(config-router-af-interface)# authentication mode hmac-sha-256 0 password1 

Device(config-router-af-interface)# end 

Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/15-sy/ire-15-sy-book/ire-sha-256.html 

Q2. Which statement describes the BGP add-path feature? 

A. It allows for installing multiple IBGP and EBGP routes in the routing table. 

B. It allows a network engineer to override the selected BGP path with an additional path created in the config. 

C. It allows BGP to provide backup paths to the routing table for quicker convergence. 

D. It allows multiple paths for the same prefix to be advertised. 

Answer: D 

Explanation: 

BGP routers and route reflectors (RRs) propagate only their best path over their sessions. The advertisement of a prefix replaces the previous announcement of that prefix (this behavior is known as an implicit withdraw). The implicit withdraw can achieve better scaling, but at the cost of path diversity. Path hiding can prevent efficient use of BGP multipath, prevent hitless planned maintenance, and can lead to MED oscillations and suboptimal hot-potato routing. Upon nexthop failures, path hiding also inhibits fast and local recovery because the network has to wait for BGP control plane convergence to restore traffic. The BGP Additional Paths feature provides a generic way of offering path diversity; the Best External or Best Internal features offer path diversity only in limited scenarios. The BGP Additional Paths feature provides a way for multiple paths for the same prefix to be advertised without the new paths implicitly replacing the previous paths. Thus, path diversity is achieved instead of path hiding. 

Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-3s/irg-xe-3s-book/irg-additional-paths.html 

Q3. Refer to the exhibit. 

If the downstream router has a summary route configured, which two actions must you take on the local router to create the summary route that summarizes all routes from the downstream router? (Choose two.) 

A. Configure the summary address on the interface. 

B. Use 10.0.0.0 255.248.0.0 as the summary route. 

C. Configure the summary address in the EIGRP process. 

D. Use 10.0.0.0 255.252.0.0 as the summary route. 

E. Configure a route map to permit the route. 

F. Configure a distribute list in. 

Answer: A,B 

Explanation: 

Route summarization works in conjunction with the ip summary-address eigrp interface configuration command, in which additional summarization can be performed. To correctly summarize all the networks shown, the correct route to use is 10.0.0.0 255.248.0.0 

Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_2/ip/configuration/guide/fipr_c/1cfeigrp.html 

Q4. Which two options are differences between TACACS+ and RADIUS using AAA? (Choose two.) 

A. Only TACACS+ limits the protocols that are supported. 

B. Only RADIUS combines accounting and authentication. 

C. Only TACACS+ uses TCP. 

D. Only RADIUS combines authorization and accounting. 

E. Only RADIUS encrypts the password in packets from the client to the server. But leaves the body of the message unencrypted. 

Answer: C,E 

Q5. DRAG DROP 

Drag and drop the OSPF network type on the left to the correct traffic type category on the right. 

Answer:  

Q6. What is the function of the command ip pim autorp listener? 

A. It allows a border PIM sparse mode router to accept autorp information from another autonomous system. 

B. It allows the mapping agents to accept autorp information from the PIM rendezvous point. 

C. It allows the routers to flood the autorp information in a sparse-mode-only network. 

D. It allows a BSR to accept autorp information and translate it into BSR messages. 

Answer: C 

Explanation: 

To cause IP multicast traffic for the two Auto-RP groups 224.0.1.39 and 224.0.1.40 to be Protocol Independent Multicast (PIM) dense mode flooded across interfaces operating in PIM sparse mode, use the ip pim autorp listener command in global configuration mode. To disable this feature, use the no form of this command. 

Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti/command/imc-cr-book/imc_i3.html#wp3085748429 

Q7. When you migrate a network from PVST+ to rapid-PVST+, which two features become inactive? (Choose two.) 

A. Root guard 

B. Loop guard 

C. UplinkFast 

D. UDLD 

E. BackboneFast 

F. Bridge Assurance 

Answer: C,E 

Explanation: 

It is good to know the UplinkFast and BackboneFast behavior before you start the migration process. 

Here, the Access1 switch runs Cisco IOS. This output is taken before migration to the rapid-PVST+ mode: 

Access1#show spanning-tree vlan 10 

VLAN0010 

Spanning tree enabled protocol ieee 

Root ID Priority 24586 

Address 0015.63f6.b700 

Cost 3019 

Port 107 (FastEthernet3/0/1) 

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec 

Bridge ID Priority 49162 (priority 49152 sys-id-ext 10) 

Address 000f.f794.3d00 

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec 

Aging Time 300 

Uplinkfast enabled 

Interface Role Sts Cost Prio.Nbr Type 

Fa3/0/1 Root FWD 3019 128.107 P2p 

Fa3/0/2 Altn BLK 3019 128.108 P2p 

Access1#show spanning-tree summary 

Switch is in pvst mode 

Root bridge for: none 

Extended system ID is enabled 

Portfast Default is disabled 

PortFast BPDU Guard Default is enabled 

Portfast BPDU Filter Default is disabled 

Loopguard Default is disabled 

EtherChannel misconfig guard is enabled 

UplinkFast is enabled 

BackboneFast is enabled 

Configured Pathcost method used is short 

Name Blocking Listening Learning Forwarding STP Active 

VLAN0010 1 0 0 1 2 

VLAN0020 1 0 0 1 2 

2 vlans 2 0 0 2 4 

This output is taken after the mode is changed to rapid-PVST+: 

Access1#show spanning-tree vlan 10 

VLAN0010 

Spanning tree enabled protocol rstp 

Root ID Priority 24586 

Address 0015.63f6.b700 

Cost 3019 

Port 107 (FastEthernet3/0/1) 

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec 

Bridge ID Priority 49162 (priority 49152 sys-id-ext 10) 

Address 000f.f794.3d00 

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec 

Aging Time 300 

UplinkFast enabled but inactive in rapid-pvst mode 

Interface Role Sts Cost Prio.Nbr Type 

Fa3/0/1 Root FWD 3019 128.107 P2p 

Fa3/0/2 Altn BLK 3019 128.108 P2p 

Access1#show spanning-tree summary 

Switch is in rapid-pvst mode 

Root bridge for: none 

Extended system ID is enabled 

Portfast Default is disabled 

PortFast BPDU Guard Default is enabled 

Portfast BPDU Filter Default is disabled 

Loopguard Default is disabled 

EtherChannel misconfig guard is enabled 

UplinkFast is enabled but inactive in rapid-pvst mode 

BackboneFast is enabled but inactive in rapid-pvst mode 

Configured Pathcost method used is short 

Name Blocking Listening Learning Forwarding STP Active 

VLAN0010 1 0 0 1 2 

VLAN0020 1 0 0 1 2 

2 vlans 2 0 0 2 4 

You can see in the show spanning-tree summary command output that UplinkFast and BackboneFast are enabled, but are inactive in rapid-PVST mode. 

Reference: http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/72836-rapidpvst-mig-config.html#upback1 

Q8. Which two features improve BGP convergence? (Choose two.) 

A. next-hop address tracking 

B. additional paths 

C. advertise map 

D. communities 

E. soft reconfiguration 

Answer: A,B 

Explanation: 

The BGP Support for Next-Hop Address Tracking feature is enabled by default when a supporting Cisco software image is installed. BGP next-hop address tracking is event driven. BGP prefixes are automatically tracked as peering sessions are established. Next-hop changes are rapidly reported to the BGP routing process as they are updated in the RIB. This optimization improves overall BGP convergence by reducing the response time to next-hop changes for routes installed in the RIB. When a best path calculation is run in between BGP scanner cycles, only next-hop changes are tracked and processed. BGP routers and route reflectors (RRs) propagate only their best path over their sessions. The advertisement of a prefix replaces the previous announcement of that prefix (this behavior is known as an implicit withdraw). The implicit withdraw can achieve better scaling, but at the cost of path diversity. Path hiding can prevent efficient use of BGP multipath, prevent hitless planned maintenance, and can lead to MED oscillations and suboptimal hot-potato routing. Upon nexthop failures, path hiding also inhibits fast and local recovery because the network has to wait for BGP control plane convergence to restore traffic. The BGP Additional Paths feature provides a generic way of offering path diversity; the Best External or Best Internal features offer path diversity only in limited scenarios. The BGP Additional Paths feature provides a way for multiple paths for the same prefix to be advertised without the new paths implicitly replacing the previous paths. Thus, path diversity is achieved instead of path hiding. 

References: http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bgp/configuration/15-1sg/irg-nexthop-track.html http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-3s/irg-xe-3s-book/bgp_additional_paths.html 

Q9. Which statement about the EIGRP RTO is true? 

A. It is six times the SRTT. 

B. It is the time that it normally takes for an update to be received by a peer. 

C. It is the time that it normally takes to receive a reply to a query. 

D. It is the average time that it takes for a reliable packet to be acknowledged. 

Answer: A 

Explanation: 

The RTO is typically six times the SRTT, the value may vary from a minimum of 200 microseconds (ms) to a maximum of 5 seconds (s). 

Reference: EIGRP for IP: Basic Operation and Configuration, Alvaro Retana, Russ White, Don Slice - 2000 

Q10. Refer to the exhibit. 

How many LSDBs will router A have? 

A. 0 

B. 1 

C. 2 

D. 3 

Answer: D