Ensurepass
2017 May Cisco Official New Released 400-101 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/400-101.html

CCIE Routing and Switching Written Exam v5.1

QUESTION 341

Which two values comprise the VPN ID for an MPLS VPN? (Choose two.)

 

A.

an OUI

B.

a VPN index

C.

a route distinguisher

D.

a 16-bit AS number

E.

a 32-bit IP address

 

Correct Answer: AB

Explanation:

Each MPLS VPN ID defined by RFC 2685 consists of the following elements:

An Organizational Unique Identifier (OUI), a three-octet hex number: The IEEE Registration Authority assigns OUIs to any company that manufactures components under the ISO/IEC 8802 standard. The OUI is used to generate universal LAN MAC addresses and protocol identifiers for use in local and metropolitan area network applications. For example, an OUI for Cisco Systems is 00-03-6B (hex).

A Virtual Private Network (VPN) index: a four-octet hex number, which identifies the VPN within the company.

 

Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l3_vpns/configuration/15-mt/mp-l3-vpns-15-mt-book/mp-assgn-id-vpn.html

 

 

QUESTION 342

Refer to the exhibit. Which two statements about this configuration are true? (Choose two.)

 

clip_image001

 

A.

It allows 172.16.0.0/16 to be distributed into EIGRP.

B.

It allows a default route to be distributed into EIGRP.

C.

It allows 172.16.0.0/16 and larger subnets to be distributed into EIGRP.

D.

It prevents 172.16.0.0/16 from being distributed into EIGRP.

E.

It prevents a default route from being distributed into EIGRP.

F.

It creates summary routes and injects them into EIGRP.

 

Correct Answer: AB

Explanation:

In this example, the prefix list is configured to only allow the two specific routes of 172.16.0.0/16 and the default route. Any other routes will be filtered.

 

 

 

 

 

 

 

 

 

 

 

 

 

QUESTION 343

DRAG DROP

clip_image003

 

Correct Answer:

clip_image005

 

 

QUESTION 344

What are two advantages to using Asynchronous mode instead of Demand mode for BFD? (Choose two.)

 

A.

Asynchronous mode requires half as many packets as Demand mode for failure detection.

B.

Asynchronous mode can be used in place of the echo function.

C.

Asynchronous mode supports a larger number of BFD sessions.

D.

Asynchronous mode requires one fourth as many packets as Demand mode for failure detection.

E.

Asynchronous mode’s round-trip jitter is less than that of Demand mode.

 

Correct Answer: AB

Explanation:

Pure Asynchronous mode is advantageous in that it requires half as many packets to achieve a particular Detection Time as does the Echo function. It is also used when the Echo function cannot be supported for some reason.

Reference: https://tools.ietf.org/html/rfc5880

QUESTION 345

Which statement describes Cisco PfR link groups?

 

A.

Link groups enable Cisco PfR Fast Reroute when NetFlow is enabled on the external interfaces of the border routers.

B.

Link groups define a strict or loose hop-by-hop path.

C.

Link groups are required only when Cisco PfR is configured to load-balance all traffic.

D.

Link groups are enabled automatically when Cisco PfR is in Fast Reroute mode.

E.

Link groups set a preference for primary and fallback (backup) external exit interfaces.

 

Correct Answer: E

Explanation:

The Performance Routing – Link Groups feature introduced the ability to define a group of exit links as a preferred set of links, or a fallback set of links for PfR to use when optimizing traffic classes specified in an PfR policy. PfR currently selects the best link for a traffic class based on the preferences specified in a policy and the traffic class performance–using parameters such as reachability, delay, loss, jitter or MOS–on a path out of the specified link.

Reference: http://www.cisco.com/c/en/us/td/docs/ios/pfr/configuration/guide/15_1/pfr_15_1_book/pfr-link-group.html

 

 

QUESTION 346

Refer to the exhibit. Why is the router out of memory?

 

clip_image007

 

A.

The router is experiencing a BGP memory leak software defect.

B.

The BGP peers have been up for too long.

C.

The amount of BGP update traffic in the network is too high.

D.

The router has insufficient memory due to the size of the BGP database.

 

Correct Answer: D

Explanation:

Here we can see that this router is running out of memory due to the large size of the BGP routing database. In this case, this router is receiving over 200,000 routes from each of the 4 peers.

 

 

QUESTION 347

Refer to the exhibit. Which statement is true about a valid IPv6 address that can be configured on interface tunnel0?

 

clip_image008

 

A.

There is not enough information to calculate the IPv6 address.

B.

6to4 tunneling allows you to use any IPv6 address.

C.

2001::7DCB:5901::/128 is a valid IPv6 address.

D.

2002::7DCB:5901::/128 is a valid IPv6 address.

 

Correct Answer: D

Explanation:

Most IPv6 networks use autoconfiguration, which requires the last 64 bits for the host. The first 64 bits are the IPv6 prefix. The first 16 bits of the prefix are always 2002:, the next 32 bits are the IPv4 address, and the last 16 bits of the prefix are available for addressing multiple IPv6 subnets behind the same 6to4 router. Since the IPv6 hosts using autoconfiguration already have determined the unique 64 bit host portion of their address, they must simply wait for a Router Advertisement indicating the first 64 bits of prefix to have a complete IPv6 address. A 6to4 router will know to send an encapsulated packet directly over IPv4 if the first 16 bits are 2002, using the next 32 as the destination, or otherwise send the packet to a well-known relay server, which has access to native IPv6.

Reference: http://en.wikipedia.org/wiki/6to4

 

 

QUESTION 348

Which two parameters does the Tunnel Mode Auto Selection feature select automatically? (Choose two.)

 

A.

the tunneling protocol

B.

the transport protocol

C.

the ISAKMP profile

D.

the transform-set

E.

the tunnel peer

 

Correct Answer: AB

Explanation:

The Tunnel Mode Auto Selection feature eases the configuration and spares you about knowing the responder’s details. This feature automatically applies the tunneling protocol (GRE or IPsec) and transport protocol (IPv4 or IPv6) on the virtual template as soon as the IKE profile creates the virtual access interface. This feature is useful on dual stack hubs aggregating multivendor remote access, such as Cisco AnyConnect VPN Client, Microsoft Windows7 Client, and so on.

Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnips/configuration/xe-3s/sec-sec-for-vpns-w-ipsec-xe-3s-book/sec-ipsec-virt-tunnl.html

 

 

QUESTION 349

Refer to the exhibit. Assuming that the peer is configured correctly and the interface is up, how many neighbors will be seen in the EIGRPv6 neighbor table on this IPv6-only router?

 

clip_
image009

 

A.

one neighbor, which will use a local router-id of 6010. AB8. . /64

B.

one neighbor, which will use a local router-id of 6020. AB8. . /64

C.

none, because EIGRPv6 only supports authenticated peers

D.

none, because of the mismatch of timers

E.

none, because there is no EIGRP router ID configured

 

Correct Answer: E

Explanation:

Configuring EIGRP for IPv6 has some restrictions; they are listed
below:

The interfaces can be directly configured with EIGRP for IPv6, without the use of a global IPv6 address. There is no network statement in EIGRP for IPv6.

The router ID needs to be configured for an EIGRPv6 protocol instance before it can run.

EIGRP for IPv6 has a shutdown feature. Ensure that the routing process is in “no shut” mode to start running the protocol.

 

Reference: http://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/113267-eigrp-ipv6-00.html

 

 

QUESTION 350

You are configuring a DMVPN spoke to use IPsec over a physical interface that is located within a VRF. For which three configuration sections must you specify the VRF name? (Choose three.)

 

A.

the ISAKMP profile

B.

the crypto keyring

C.

the IPsec profile

D.

the IPsec transform set

E.

the tunnel interface

F.

the physical interface

 

Correct Answer: BEF

Explanation:

ip vrf forwardingvrf-name

 

Example:

Router(config-if)# ip vrf forwarding green

Associates a virtual private network (VPN) routing and forwarding (VRF) instance with an interface or subinterface.

 

vrf-name is the name assigned to a VRF.

Router(config-if)# tunnel vrfvrf-name

Example:

Router(config-if)# tunnel vrf finance1

Associates a VPN routing and forwarding (VRF) instance with a specific tunnel destination.

vrf-name is the name assigned to a VRF.

Router(config)# crypto keyringkeyring-name [vrf fvrf-name] Defines a crypto keyring to be used during IKE authentication and enters keyring configuration mode.

 

keyring-name–Name of the crypto keyring.

fvrf-name–(Optional) Front door virtual routing and forwarding (FVRF) name to which the keyring will be referenced. fvrf-name must match the FVRF name that was defined during virtual routing and forwarding (VRF) configuration

100% Free Download!
—Download Free Demo:400-101 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 400-101 Full Exam PDF and VCE Q&As:1273
—Get 10% off your purchase! Copy it:TJDN-947R-9CCD [2017.05.01-2017.05.31]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE