Best Quality of 400 101 ccie free draindumps materials and forum for Cisco certification for IT specialist, Real Success Guaranteed with Updated ccie 400 101 pdf dumps vce Materials. 100% PASS CCIE Routing and Switching (v5.0) exam Today!


2026 New 400-101 Exam Dumps with PDF and VCE Free: https://www.2passeasy.com/dumps/400-101/

Q1. In which two modes do IPv6-in-IPv4 tunnels operate? (Choose two.) 

A. tunnel mode 

B. transport mode 

C. 6to4 mode 

D. 4to6 mode 

E. ISATAP mode 

Answer: C,E 

Explanation: 

*There are 5 tunneling solution in IPv6:* 

*1. Using the “Tunnel mode ipv6ip”, in this case the tunnel source and destination are configured with IPv4 addressing and the tunnel interface is configured with IPv6. This will use protocol 41. This is used for IPv6/IPv4. 

R1(config)#int tunnel 1 

R1(config-if)#ipv6 address 12:1:12::1/64 

R1(config-if)#tunnel source 10.1.12.1 

R1(config-if)#tunnel destination 10.1.12.2 

R1(config-if)#*tunnel mode ipv6ip* 

*

2. Using the “Tunnel mode gre ipv6, in this case the tunnel source and destination are all configured with IPv6 addressing. This is used for IPv6/IPv6. 

BB1(config)#int tunnel 1 

BB1(config-if)#ipv6 address 121:1:121::111/64 

BB1(config-if)#tunnel source 10:1:111::111 

BB1(config-if)#tunnel destination 10:1:112::112 

BB1(config-if)#*tunnel mode gre ipv6* 

*3. 

In this case, the third type, the tunnel mode is NOT used at all, note that the tunnel interface is configured with IPv6 and the tunnel source and destination is configured with IPv4 but no mention of tunnel mode. This configuration will use protocol 47. This is used for IPv6/IPv4. 

R1(config)#int tunnel 13 

R1(config-if)#ipv6 address 13:1:13::1/64 

R1(config-if)#tunnel source 10.1.13.1 

R1(config-if)#tunnel destination 10.1.13.3 

*4. Note in this case a special addressing is assigned to the tunnel interface which is a concatenation of a reserved IPv6 address of 2002followed by the translated IPv4 address of a given interface on the router. In this configuration ONLY the tunnel source address is used and since the tunnel is automatic, the destination address is NOT configured. The tunnel mode is set to “Tunnel mode ipv6ip 6to4. Note the IPv4 address of 10.1.1.1 is translated to 0A.01.01.01 and once concatenated, it will be “2002:0A01:0101: or 2002:A01:101. This is used for IPv6/IPv4. 

R1(config)#interface Tunnel14 

R1(config-if)#ipv6 address 2002:A01:101::/128 

R1(config-if)#tunnel source 10.1.1.1 

R1(config-if)#*tunnel mode ipv6ip 6to4* 

*5. ISATAP, ISATAP works like 6to4 tunnels, with one major difference, it uses a special IPv6 address which is formed as follows: * 

*In this tunnel mode, the network portion can be any IPv6 address, whereas in 6to4 it had to start with 2002.* 

*Note when the IPv6 address is assigned to the tunnel interface, the “eui-64 is used, in this case the host portion of the IPv6 address starts with “0000.5EFE” and then the rest of the host portion is the translated IPv4 address of the tunnel’s source IPv4 address. This translation is performed automatically unlike 6to4. This is used for IPv6/IPv4.* 

R4(config)#int tunnel 46 

R4(config-if)#ipv6 address 46:1:46::/64 eui-64 

R4(config-if)#tunnel source 10.44.44.44 

R4(config-if)#*tunnel mode ipv6ip ISATAP* 

Q2. Which technology is not necessary to set up a basic MPLS domain? 

A. IP addressing 

B. an IGP 

C. LDP or TDP 

D. CEF 

E. a VRF 

Answer:

Explanation: 

The simplest form of VRF implementation is VRF Lite. In this implementation, each router within the network participates in the virtual routing environment in a peer-based fashion. While simple to deploy and appropriate for small to medium enterprises and shared data centres, VRF Lite does not scale to the size required by global enterprises or large carriers, as there is the need to implement each VRF instance on every router, including intermediate routers. VRFs were initially introduced in combination with MPLS, but VRF proved to be so useful that it eventually evolved to live independent of MPLS. This is the historical explanation of the term VRF Lite. Usage of VRFs without MPLS. 

Reference: http://en.wikipedia.org/wiki/Virtual_routing_and_forwarding 

Q3. For which two conditions is Cisco Express Forwarding recursion disabled by default when the BGP Prefix Independent Convergence functionality is enabled? (Choose two.) 

A. next hops learned with a /24 mask 

B. next hops learned with any mask shorter than /32 

C. next hops learned with a /32 mask 

D. next hops that are directly connected 

Answer: C,D 

Explanation: 

Recursion is the ability to find the next longest matching path when the primary path goes down. When the BGP PIC feature is not installed, and if the next hop to a prefix fails, Cisco Express Forwarding finds the next path to reach the prefix by recursing through the FIB to find the next longest matching path to the prefix. This is useful if the next hop is multiple 

hops away and there is more than one way of reaching the next hop. 

However, with the BGP PIC feature, you may want to disable Cisco Express Forwarding recursion for the following reasons: 

. Recursion slows down convergence when Cisco Express Forwarding searches all the FIB entries. 

. BGP PIC Edge already precomputes an alternate path, thus eliminating the need for Cisco Express Forwarding recursion. 

When the BGP PIC functionality is enabled, Cisco Express Forwarding recursion is disabled by default for two conditions: 

. For next hops learned with a /32 network mask (host routes) 

. For next hops that are directly connected 

For all other cases, Cisco Express Forwarding recursion is enabled. 

Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe-3s/irg-xe-3s-book/irg-bgp-mp-pic.html 

Q4. Which two options are advantages of NetFlow version 9 over NetFlow version 5? (Choose two.) 

A. NetFlow version 9 adds support for IPv6 headers. 

B. NetFlow version 9 adds support for MPLS labels. 

C. NetFlow version 9 adds support for the Type of Service field. 

D. NetFlow version 9 adds support for ICMP types and codes. 

Answer: A,B 

Explanation: 

NetFlow version 9 includes support for all of these fields that version 5 supports and can optionally include additional information such as Multiprotocol Label Switching (MPLS) labels and IPv6 addresses and ports. 

Q5. Which two statements are true about IS-IS? (Choose two.) 

A. IS-IS DIS election is nondeterministic. 

B. IS-IS SPF calculation is performed in three phases. 

C. IS-IS works over the data link layer, which does not provide for fragmentation and reassembly. 

D. IS-IS can never be routed beyond the immediate next hop. 

Answer: C,D 

Explanation: 

IS-IS runs directly over the data link alongside IP. On Ethernet, IS-IS packets are always 802.3 frames, with LSAPs 0xFEFE while IP packets are either Ethernet II frames or SNAP frames identified with the protocol number 0x800. OSPF runs over IP as protocol number 89. 

IS-IS runs directly over layer 2 and hence: 

-cannot support virtual links unless some explicit tunneling is implemented 

-packets are kept small so that they don't require hop-by-hop fragmentation 

-uses ATM/SNAP encapsulation on ATM but there are hacks to make it use VcMux encapsulation 

-some operating systems that support IP networking have been implemented to differentiate Layer 3 packets in kernel. Such Oss require a lot of kernel modifications to support IS-IS for IP routing. 

-can never be routed beyond the immediate next hop and hence shielded from IP spoofing and similar Denial of Service attacks. 

Reference: https://tools.ietf.org/html/draft-bhatia-manral-diff-isis-ospf-00 

Q6. Which feature of Cisco IOS XE Software allows for platform-independent code abstraction? 

A. its security 

B. Common Management Enabling Technology 

C. the Linux-based environment 

D. its modularity 

Answer:

Q7. DRAG DROP 

Drag and drop the RIP configuration command on the left to the function it performs on the right. 

Answer:  

Q8. Which two options are actions that EEM can perform after detecting an event? (Choose two.) 

A. Place a port in err-disabled. 

B. Generate an SNMP trap. 

C. Reload the Cisco IOS Software. 

D. Send an SMS. 

Answer: B,C 

Explanation: 

action snmp-trap 

To specify the action of generating a Simple Network Management Protocol (SNMP) trap when an Embedded Event Manager (EEM) applet is triggered, use the action snmp-trap command in applet configuration mode. 

ction reload 

To specify the action of reloading the Cisco IOS software when an Embedded Event Manager (EEM) applet is triggered, use the action reload command in applet configuration mode. 

Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_2s/feature/guide/fs_eem2.html 

Q9. Which two functions are performed by the DR in OSPF? (Choose two.) 

A. The DR originates the network LSA on behalf of the network. 

B. The DR is responsible for the flooding throughout one OSPF area. 

C. The DR forms adjacencies with all other OSPF routers on the network, in order to synchronize the LSDB across the adjacencies. 

D. The DR is responsible for originating the type 4 LSAs into one area. 

Answer: A,C 

Explanation: 

The DR originates the network LSA (LSA Type 2) which lists all the routers on the segment it is adjacent to -> A is correct. Types 2 are ooded within its area only; does not cross ABR -> B is incorrect. The broadcast and non-broadcast network types elect a DR/BDR. They form adjacencies to all other OSPF routers on the network and help synchronize the Link State Database (LSDB) across the adjacencies -> C is correct. LSAs Type 4 are originated by the ABR to describe an ASBR to routers in other areas so that routers in other areas know how to get to external routes through that ASBR -> D is incorrect. 

Q10. Refer to the exhibit. 

Which action must you take to enable the WAN link to function properly? 

A. Enter a clock rate on the DCE interface. 

B. Enter a clock rate on the DTE interface. 

C. Enter a compression algorithm on both interfaces. 

D. Configure both interfaces for HDLC encapsulation. 

Answer:

Explanation: 

When connecting a serial cable to the serial interface of the router, clocking is provided by an external device, such as a CSU/DSU device. A CSU/DSU (Channel Service Unit/Data Service Unit) is a digital-interface device used to connect a router to a digital circuit. The router is the DTE (Data Terminal Equipment) and the external device is the DCE (Data Communications Equipment), where the DCE provides the clocking. However, in some cases we might connect two routers back-to-back using the routers’ serial interfaces (Example. Inside the router labs). Each router is a DTE by default. Since clocking is required to enable the interface, one of the two routers should function as DCE and should provide clocking. This can be done by using the "clock rate" command, from the interface configuration mode. 

Reference: http://www.omnisecu.com/cisco-certified-network-associate-ccna/how-to-configure-router-serial-interfaces.php