Latest Cisco CCIE 400-101 Real Exam Download 201-210

EnsurepassQUESTION 201 Refer to the exhibit. A network engineer is trying to configure a router as a zone-based firewall and needs to allow DHCP traffic to and from the router on the outside interface. After applying the configuration to the router, he notices that his configuration is not working. What is wrong with the configuration?     A. The UDP ports in access list 111 and access list 112 are incorrect. B. The wrong action has been configured on the policy map. C. The Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 191-200

EnsurepassQUESTION 191 Refer to the exhibit. Spanning tree protocol is running on all three switches. The switches are configured so that Link A is the active link, and Link B is the standby link. There is a problem occurring where Switch B starts forwarding on Link B causing a routing loop.     What is the likely cause of the problem?   A. PortFast is not enabled. B. There is a port duplex mismatch. C. MISTP is enabled without RSTP. D. A single instance of STP is enabled Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 181-190

EnsurepassQUESTION 181 Drag and Drop Question     Answer:       QUESTION 182 Which congestion-avoidance or congestion-management technique can cause global synchronization?   A. Tail drop B. Random early detection C. Weighted random early detection D. Weighted fair queuing   Answer: A     QUESTION 183 Which group of neighbors can be configured as a BGP peer group?   A. a group of iBGP neighbors that have the same outbound route Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 171-180

EnsurepassQUESTION 171 Drag and Drop Question     Answer:       QUESTION 172 Drag and Drop Question     Answer:       QUESTION 173 Refer to the exhibit. If you change the Spanning Tree Protocol from pvst to rapid-pvst, what is the effect on the interface Fa0/1 port state?     A. It transitions to the listening state, and then the forwarding state. B. It transitions to the learning state and then the forwarding state. C. Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 161-170

EnsurepassQUESTION 161 Refer to the exhibit. Which command is configured on this router?     A. bgp update-delay 60 B. neighbor 10.100.1.1 maximum-prefix 200 C. neighbor 10.100.1.1 maximum-path 2 D. neighbor 10.100.1.1 ebgp-multihop 2   Answer: B     QUESTION 162 What is the purpose of Route Target Constraint?   A. to avoid using route reflectors in MPLS VPN networks B. to avoid using multiple route distinguishers per VPN in MPLS VPN networks Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 151-160

EnsurepassQUESTION 151 Refer to the exhibit. All switches have default bridge priorities, and originate BPDUs with MAC addresses as indicated. The numbers shown are STP link metrics. Which two ports are in blocking state after STP converges? (Choose two.)     A. the port on switch SWD that connects to switch SWE B. the port on switch SWF that connects to switch SWG C. the port on switch SWD that connects to switch SWC D. the port on switch SWB that connects to switch SWD Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 141-150

EnsurepassQUESTION 141 Which three statements are true about PPP CHAP authentication? (Choose three.)   A. PPP encapsulation must be enabled globally. B. The LCP phase must be complete and in closed state. C. The hostname used by a router for CHAP authentication cannot be changed. D. PPP encapsulation must be enabled on the interface. E. The LCP phase must be complete and in open state. F. By default, the router uses its hostname to identify itself to the peer.   Answer: Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 81-90

EnsurepassQUESTION 121 Refer to the exhibit. Which three statements about the output are true? (Choose three.)     A. This switch is currently receiving a multicast data stream that is being forwarded out VLAN 150. B. A multicast receiver has requested to join one or more of the multicast groups. C. Group 224.0.1.40 is a reserved address, and it should not be used for multicast user data transfer. D. One or more multicast groups are operating in PIM dense mode. E. One Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 111-120

EnsurepassQUESTION 111 Which statement about the function of poison reverse in EIGRP is true?   A. It tells peers to remove paths that previously might have pointed to this router. B. It tells peers to remove paths to save memory and bandwidth. C. It provides reverse path information for multicast routing. D. It tells peers that a prefix is no longer reachable.   Answer: A     QUESTION 112 What is the preferred method to improve neighbor loss detection in EIGRP? Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 101-110

EnsurepassQUESTION 101 Which authentication method does OSPFv3 use to secure communication between neighbors?   A. plaintext B. MD5 HMAC C. PKI D. IPSec   Answer: D     QUESTION 102 Which three statements are true about OSPFv3? (Choose three.)   A. The only method to enable OSPFv3 on an interface is via the interface configuration mode. B. Multiple instances of OSPFv3 can be enabled on a single link. C. There are two methods to enable OSPFv3 on an Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 91-100

EnsurepassQUESTION 91 Which two options are advantages of NetFlow version 9 over NetFlow version 5? (Choose two.)   A. NetFlow version 9 adds support for IPv6 headers. B. NetFlow version 9 adds support for MPLS labels. C. NetFlow version 9 adds support for the Type of Service field. D. NetFlow version 9 adds support for ICMP types and codes.   Answer: AB     QUESTION 92 Refer to the exhibit. Which two statements about the output are true? (Choose two.)     Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 81-90

EnsurepassQUESTION 81 The session status for an IPsec tunnel with IPv6-in-IPv4 is down with the error message IKE message from 10.10.1.1 failed its sanity check or is malformed. Which statement describes a possible cause of this error?   A. There is a verification failure on the IPsec packet. B. The SA has expired or has been cleared. C. The pre-shared keys on the peers are mismatched. D. There is a failure due to a transform set mismatch. E. An incorrect packet was sent by Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 71-80

EnsurepassQUESTION 71 Which three statements about the designated router election in IS-IS are true? (Choose three.)   A. If the IS-IS DR fails, a new DR is elected. B. The IS-IS DR will preempt. If a new router with better priority is added, it just becomes active in the network. C. If there is a tie in DR priority, the router with a higher IP address wins. D. If there is a tie in DR priority, the router with a higher MAC address wins. E. If the DR fails, the BDR is promoted Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 61-70

EnsurepassQUESTION 61 Refer to the exhibit. Which statement about the output is true?     A. The flow is an HTTPS connection to the router, which is initiated by 144.254.10.206. B. The flow is an HTTP connection to the router, which is initiated by 144.254.10.206. C. The flow is an HTTPS connection that is initiated by the router and that goes to 144.254.10.206. D. The flow is an HTTP connection that is initiated by the router and that goes to 144.254.10.206.   Answer: Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 51-60

EnsurepassQUESTION 51 What is the goal of Unicast Reverse Path Forwarding?   A. to verify the reachability of the destination address in forwarded packets B. to help control network congestion C. to verify the reachability of the destination address in multicast packets D. to verify the reachability of the source address in forwarded packets   Answer: D     QUESTION 52 Which three features are considered part of the IPv6 first-hop security suite? (Choose three.) Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 41-50

EnsurepassQUESTION 41 Refer to the exhibit. Service provider SP 1 is running the MPLS-VPN service. The MPLS core network has MP-BGP configured with RR-1 as route reflector. What will be the effect on traffic between PE1 and PE2 if router P1 goes down?     A. No effect, because all traffic between PE1 and PE2 will be rerouted through P2. B. No effect, because P1 was not the only P router in the forwarding path of traffic. C. No effect, because RR-1 will find an alternative path Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 31-40

EnsurepassQUESTION 31 Refer to the exhibit. This is the configuration of the ASBR of area 110.Which option explains why the remote ABR should not translate the type 7 LSA for the prefix 192.168.0.0/16 into a type 5 LSA? A. The remote ABR translates all type 7 LSA into type 5 LSA, regardless of any option configured in the ASBR. B. The ASBR sets the forwarding address to 0.0.0.0 which instructs the ABR not to translate the LSA into a type 5 LSA. C. The ASBR originates a type 7 LSA with Read more [...]

Latest Cisco CCIE 400-101 Real Exam Download 21-30

EnsurepassQUESTION 21 Which regular expression will only allow prefixes that originated from AS 65000 and that are learned through AS 65001?   A. ^65000_65001$ B. 65000_65001$ C. ^65000_65001 D. ^65001_65000$   Answer: D     QUESTION 22 Which statement describes the BGP add-path feature?   A. It allows for installing multiple IBGP and EBGP routes in the routing table. B. It allows a network engineer to override the selected BGP path with an additional Read more [...]