[Free] 2017(July) Ensurepass Braindumps Cisco 400-101 Latest Dumps 91-100

Ensurepass
2017 July Cisco Official New Released 400-101 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/400-101.html

CCIE Routing and Switching Written Exam v5.1

QUESTION 91

Refer to the exhibit. What is the meaning of the asterisk (*) in the output?

 

clip_image002

 

A.

PIM neighbor 10.1.5.6 is the RPF neighbor for the group 232.1.1.1 for the shared tree.

B.

PIM neighbor 10.1.5.6 is the one that is seen as the RPF neighbor when performing the command show ip rpf 10.1.4.7.

C.

PIM neighbor 10.1.5.6 is the winner of an assert mechanism.

D.

The RPF neighbor 10.1.5.6 is invalid.

 

< b>Correct Answer: C

Explanation:

show ip mroute Field Descriptions

Field

Description

RPF neighbor or RPF nbr

IP address of the upstream router to the source. Tunneling indicates that this router is sending data to the RP encapsulated in register packets. The hexadecimal number in parentheses indicates to which RP it is registering. Each bit indicates a different RP if multiple RPs per group are used. If an asterisk (*) appears after the IP address in this field, the RPF neighbor has been learned through an assert.

Reference: http://www.cisco.com/c/en/us/td/docs/ios/12_2/ipmulti/command/reference/fiprmc_r/1rfmult3.html

 

 

QUESTION 92

Which two options are causes of out-of-order packets? (Choose two.)

 

A.

a routing loop

B.

a router in the packet flow path that is intermittently dropping packets

C.

high latency

D.

packets in a flow traversing multiple paths through the network

E.

some packets in a flow being process-switched and others being interrupt-switched on a transit router

 

Correct Answer: DE

Explanation:

In traditional packet forwarding systems, using different paths have varying latencies that cause out of order packets, eventually resulting in far lower performance for the network application. Also, if some packets are process switched quickly by the routing engine of the router while others are interrupt switched (which takes more time) then it could result in out of order packets. The other options would cause packet drops or latency, but not out of order packets.

 

 

QUESTION 93

What are two reasons to define static peers in EIGRP? (Choose two.)

 

A.

Security requirements do not allow dynamic learning of neighbors.

B.

The link between peers requires multicast packets.

C.

Back-level peers require static definition for successful connection.

D.

The link between peers requires unicast packets.

 

Correct Answer: AD

Explanation:

There are two ways we can create EIGRP neighbor relationship:

+ Use “network ” command. this is the more popular way to create EIGRP neighbor relationship. That router will check which interfaces whose IP addresses belong to the and turn EIGRP on that interface. EIGRP messages are sent via multicast packets.

+ Use “neighbor” command. The interface(s) that have this command applied no longer send or receive EIGRP multicast packets. EIGRP messages are sent via unicast. The router only accepts EIGRP packets from peers that are explicitly configured with a neighbor statement. Consequently, any messages coming from routers without a corresponding neighbor statement are discarded. This helps prevent the insertion of unauthorized routing peers -> A and D are correct.

QUESTION 94

Refer to the exhibit. Which statement about the output is true?

 

clip_image004

 

A.

The flow is an HTTPS connection to the router, which is initiated by 144.254.10.206.

B.

The flow is an HTTP connection to the router, which is initiated by 144.254.10.206.

C.

The flow is an HTTPS connection that is initiated by the router and that goes to 144.254.10.206.

D.

The flow is an HTTP connection that is initiated by the router and that goes to 144.254.10.206.

 

Correct Answer: A

Explanation:

We can see that the connection is initiated by the Source IP address shown as 144.254.10.206. We also see that the destination protocol (DstP) shows 01BB, which is in hex and translates to 443 in decimal. SSL/HTTPS uses port 443.

 

 

QUESTION 95

Like OSPFv2, OSPFv3 supports virtual links. Which two statements are true about the IPv6 address of a virtual neighbor? (Choose two.)

 

A.

It is the link-local address, and it is discovered by examining the hello packets received from the virtual neighbor.

B.

It is the link-local address, and it is discovered by examining link LSA received by the virtual neighbor.

C.

It is the global scope address, and it is discovered by examining the router LSAs received by the virtual neighbor.

D.

Only prefixes with the LA-bit not set can be used as a virtual neighbor address.

E.

It is the global scope address, and it is discovered by examining the intra-area-prefix-LSAs received by the virtual neighbor.

F.

Only prefixes with the LA-bit set can be used as a virtual neighbor address.

 

Correct Answer: EF

Explanation:

OSPF for IPv6 assumes that each router has been assigned link-local unicast addresses on each of the router’s attached physical links. On all OSPF interfaces except virtual links, OSPF packets are sent using the interface’s associated link-local unicast address as the source address. A router learns the link-local addresses of all other routers attached to its links and uses these addresses as next-hop information during packet forwarding.

On virtual links, a global scope IPv6 address MUST be used as the source address for OSPF protocol packets.

The collection of intra-area-prefix-LSAs originated by the virtual neighbor is examined, with the virtual neighbor’s IP address being set to the first prefix encountered with the LA-bit set.

Reference: https://tools.ietf.org/html/rfc5340

 

 

QUESTION 96

Refer to the exhibit. Which statement is true?

 

clip_image006

 

A.

It is impossible for the destination interface to equal the source interface.

B.

NAT on a stick is performed on interface Et0/0.

C.

There is a potential routing loop.

D.

This output represents a UDP flow or a TCP flow.

 

Correct Answer: C

Explanation:

In this example we see that the source interface and destination interface are the same (Et0/0). Typically this is seen when there is a routing loop for the destination IP address.

 

 

QUESTION 97

Which two statements describe characteristics of HDLC on Cisco routers? (Choose two.)

 

A.

It supports multiple Layer 3 protocols.

B.

It supports multiplexing.

C.

It supports only synchronous interfaces.

D.

It supports authentication.

 

Correct Answer: AC

Explanation:

Cisco High-Level Data Link Controller (HDLC) is the Cisco proprietary protocol for sending data over synchronous serial links using HDLC. Cisco HDLC also provides a simple control protocol called Serial Line Address Resolution Protocol (SLARP) to maintain serial link keepalives. Cisco HDLC is the default for data encapsulation at Layer 2 (data link) of the Open System Interconnection (OSI) stack for efficient packet delineation and error control. The absence of a protocol type field in the HDLC header posed a problem for links that carried traffic from more than one Layer 3 protocol. Cisco, therefore, added an extra Type field to the HDLC header, creating a Cisco-specific version of HDLC. Cisco routers can support multiple network layer protocols on the same HDLC link. For example an HDLC link between two Cisco routers can forward both IPv4 and IPv6 packets because the Type field can identify which type of packet is carried inside each HDLC frame.

Reference: http://www.cisco.com/c/en/us/td/docs/routers/access/800/819/software/configuration/Guide/819_SCG/6ser_conf.html#pgfId-1073734

 

 

 

 

QUESTION 98

Refer to the exhibit. What is the role of this multicast router?

 

clip_image007

 

A.

a first-hop PIM router

B.

a last-hop PIM router

C.

a PIM rendezvous point

D.

a PIM inter-AS router

 

Correct Answer: C

Explanation:

The following is sample output from the show ip pim tunnel taken from an RP. The output is used to verify the PIM Encap and Decap Tunnel on the RP:

Switch# show ip pim tunnel

 

Tunnel0

Type : PIM Encap

RP : 70.70.70.1*

Source. 70.70.70.1

Tunnel1*

Type : PIM Decap

RP : 70.70.70.1*

Source. -R2#

 

The asterisk (*) indicates that the router is the RP. The RP will always have a PIM Encap and Decap Tunnel interface.

 

Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3650/software/release/3se/multicast/co mmand_reference/b_mc_3se_3650_cr/b_mc_3se_3650_cr_chapter_010.html#wp1286920037

 

 

QUESTION 99

Which is the way to enable the control word in an L2 VPN dynamic pseudowire connection on router R1?

 

A.

R1(config)# pseudowire-class cw-enable

R1(config-pw-class)# encapsulation mpls

R1(config-pw-class)# set control-word

B.

R1(config)# pseudowire-class cw-enable

R1(config-pw-class)# encapsulation mpls

R1(config-pw-class)# enable control-word

C.

R1(config)# pseudowire-class cw-enable

R1(config-pw-class)# encapsulation mpls

R1(config-pw-class)# default control-word

D.

R1(config)# pseudowire-class cw-enable

R1(config-pw-class)# encapsulation mpls

R1(config-pw-class)# control-word

 

Correct Answer: D

Explanation:

The following example shows how to enable the control word in an AToM dynamic pseudowire connection:

 

Device(config)# pseudowire-class cw-enable

Device(config-pw-class)# encapsulation mpls

Device(config-pw-class)# control-word

Device(config-pw-class)# exit

 

Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mpls/command/mp-cr-book/mp-a1.html

 

 

QUESTION 100

The session status for an IPsec tunnel with IPv6-in-IPv4 is down with the error message IKE message from 10.10.1.1 failed its sanity check or is malformed. Which statement describes a possible cause of this error?

 

A.

There is a verification failure on the IPsec packet.

B.

The SA has expired or has been cleared.

C.

The pre-shared keys on the peers are mismatched.

D.

There is a failure due to a transform set mismatch.

E.

An incorrect packet was sent by an IPsec peer.

 

Correct Answer: C

Explanation:

IKE Message from X.X.X.X Failed its Sanity Check or is Malformed

This debug error appears if the pre-shared keys on the peers do not match. In order to fix this issue, check the pre-shared keys on both sides.

1d00H:%CRPTO-4-IKMP_BAD_MESSAGE. IKE message from 150.150.150.1 failed its sanity check or is malformed

Reference: http://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/5409-ipsec-debug-00.html#ike

100% Free Download!
—Download Free Demo:400-101 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 400-101 Full Exam PDF and VCE Q&As:1299
—Get 10% off your purchase! Copy it:TJDN-947R-9CCD [2017.07.01-2017.07.31]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE