we provide Real Cisco passleader 400 101 exam topics which are the best for clearing 400 101 pdf test, and to get certified by Cisco CCIE Routing and Switching (v5.0). The 400 101 pdf Questions & Answers covers all the knowledge points of the real 400 101 dumps exam. Crack your Cisco 400 101 vce Exam with latest dumps, guaranteed!
2026 New 400-101 Exam Dumps with PDF and VCE Free: https://www.2passeasy.com/dumps/400-101/
Q1. With AutoInstall, which mechanism allows for automatic addressing of the serial interface using HDLC?
A. ARP
B. BOOTP
C. DHCP
D. SLARP
Answer: D
Q2. DRAG DROP
Drag and drop each PHB on the left to the functionality it performs on the right.
Answer:
Q3. Refer to the exhibit.
What password will be required to enter privileged EXEC mode on a device with the given configuration?
A. ciscotest
B. ciscocert
C. cisco
D. ciscors
E. ciscoccie
Answer: A
Q4. Consider an OSPFv3 network with four parallel links between each pair of routers. Which measure can you use to reduce the CPU load and at the same time keep all links available for ECMP?
A. Configure some interfaces as passive interface.
B. Configure ipv6 ospf priority 0 on some interfaces.
C. Configure some routers with a distribute list in ingress of the OSPFv3 process.
D. Configure ipv6 ospf database-filter all out on some interfaces.
Answer: D
Explanation:
To filter outgoing link-state advertisements (LSAs) to an Open Shortest Path First version 3 (OSPFv3) interface, use the ipv6 ospf database-filter all out command in interface configuration mode. This can be done on some of the links to reduce the CPU load while still ensuring that all links in the equal cost path are still being used.
Q5. What is the function of an EIGRP sequence TLV packet?
A. to acknowledge a set of sequence numbers during the startup update process
B. to list the peers that should listen to the next multicast packet during the reliable multicast process
C. to list the peers that should not listen to the next multicast packet during the reliable multicast process
D. to define the initial sequence number when bringing up a new peer
Answer: C
Explanation:
EIGRP sends updates and other information between routers using multicast packets to 224.0.0.10. For example in the topology below, R1 made a change in the topology and it needs to send updates to R2 & R3. It sends multicast packets to EIGRP multicast address 224.0.0.10. Both R2 & R3 can receive the updates and acknowledge back to R1 using unicast. Simple, right? But what if R1 sends out updates, only R2 replies but R3 never does? In the case a router sends out a multicast packet that must be reliable delivered (like in this case), an EIGRP process will wait until the RTO (retransmission timeout) period has passed before beginning a recovery action. This period is calculated from the SRTT (smooth round-trip time). After R1 sends out updates it will wait for this period to expire. Then it makes a list of all the neighbors from which it did not receive an Acknowledgement (ACK). Next it sends out a packet telling these routers stop listening to multicast until they are been notified that it is safe again. Finally the router will begin sending unicast packets with the information to the routers that didn’t answer, continuing until they are caught up. In our example the process will be like this:
1. R1 sends out updates to 224.0.0.10
2. R2 responds but R3 does not
3. R1 waits for the RTO period to expire
4. R1 then sends out an unreliable-multicast packet, called a sequence TLV (Type-Length-Value) packet, which tells R3 not to listen to multicast packets any more
5. R1 continues sending any other muticast traffic it has and delivering all traffic, using unicast to R3, until it acknowledges all the packets
6. Once R3 has caught up, R1 will send another sequence TLV, telling R3 to begin listening to multicast again. The sequence TLV packet contains a list of the nodes that should not listen to multicast packets while the recovery takes place. But notice that the TLV packet in step 6 does not contain any nodes in the list.
Note. In the case R3 still does not reply in step 4, R1 will attempt to retransmit the unicast 16 times or continue to retransmit until the hold time for the neighbor in question expires. After this time, R1 will declare a retransmission limit exceeded error and will reset the neighbor.
(Reference: EIGRP for IP: Basic Operation and Configuration)
Q6. Refer to the exhibit.
If EIGRP is configured between two routers as shown in this output, which statement about their EIGRP relationship is true?
A. The routers will establish an EIGRP relationship successfully.
B. The routers are using different authentication key-strings.
C. The reliability metric is enabled.
D. The delay metric is disabled.
Answer: C
Explanation:
The 5 K values used in EIGRP are:
K1 = Bandwidth modifier
K2 = Load modifier
K3 = Delay modifier
K4 = Reliability modifier
K5 = Additional Reliability modifier
However, by default, only K1 and K3 are used (bandwidth and delay). In this output we see that K1, K3, and K4 (Reliability) are all set.
Q7. Which option describes a limitation of Embedded Packet Capture?
A. It can capture data only on physical interfaces and subinterfaces.
B. It can store only packet data.
C. It can capture multicast packets only on ingress.
D. It can capture multicast packets only on egress.
Answer: C
Explanation:
Restrictions for Embedded Packet Capture
. In Cisco IOS Release 12.2(33)SRE, EPC is supported only on 7200 platform.
. EPC only captures multicast packets on ingress and does not capture the replicated packets on egress.
. Currently, the capture file can only be exported off the device; for example, TFTP or FTP servers and local disk.
Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/epc/configuration/15-mt/epc-15-mt-book/nm-packet-capture.html
Q8. Which three statements about GLBP are true? (Choose three.)
A. It uses a virtual MAC address that starts with 0007.b4.
B. It elects a single active virtual gateway to appoint and manage multiple active virtual forwarders.
C. It allows the configured virtual IP address to be used on a physical interface as well.
D. It uses a virtual MAC address that starts with 0070.4b.
E. It elects multiple active virtual gateways to appoint and manage a single active virtual forwarder.
F. Preemption is enabled for the configured active virtual gateway by default.
Answer: A,B,C
Explanation:
The virtual MAC address in GLBP is 0007.b400.xxyy where xx is the GLBP group number and yy is the different number of each gateway (01, 02, 03…). One of the routers in a GLBP group is elected as an AVG – Active Virtual Gateway. There is only one active AVG in a group, and its task is to respond to ARP requests sent to the virtual gateway IP address replying different virtual MAC addresses in response packets. GLBP allows the configured virtual IP address to be used on a physical interface. By default, the GLBP gateway preemptive scheme is disabled. A backup virtual gateway can become the AVG only if the current AVG fails, regardless of the priorities assigned to the virtual gateways.
Q9. Refer to the exhibit.
Which statement about the device routing table is true?
A. Only networks 10.10.10.0/24 and smaller from host 192.168.168.1 are in the routing table.
B. Only networks 10.10.10.0/24 and larger from host 192.168.168.1 are in the routing table.
C. Only network 10.10.10.0/24 from host 192.168.168.1 is in the routing table.
D. Networks 10.10.10.0/24 and smaller from any host are in the routing table.
Answer: A
Explanation:
When you add the keywords “GE” and “LE” to the prefix-list, the “len” value changes its meaning. When using GE and LE, the len value specifies how many bits of the prefix you are checking, starting with the most significant bit. ip prefix-list LIST permit 1.2.3.0/24 le 32
This means: Check the first 24 bits of the prefix 1.2.3.0 The subnet mask must be less than or equal to 32
Reference: http://blog.ine.com/2007/12/26/how-do-prefix-lists-work/
Q10. Refer to the exhibit.
Which configuration is missing that would enable SSH access on a router that is running Cisco IOS XE Software?
A. int Gig0/0/0
management-interface
B. class-map ssh-class
match access-group protect-ssh
policy-map control-plane-in
class ssh-class
police 80000 conform transmit exceed drop
control-plane
service-policy input control-plane-in
C. control-plane host
management-interface GigabitEthernet0/0/0 allow ssh
D. interface Gig0/0/0
ip access-group protect-ssh in
Answer: C
Explanation:
The feature Management Plane Protection (MPP) allows an administrator to restrict on which interfaces management traffic can be received by a device. This allows the administrator additional control over a device and how the device is accessed. This example shows how to enable the MPP in order to only allow SSH and HTTPS on the GigabitEthernet0/1 interface:
!
control-plane host
management-interface GigabitEthernet 0/1 allow ssh https
!
Reference: http://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html