Youre going to get the actual comprehensive reason whenever you encounter issues during your 400-101 research. Exambible give you the actual 400-101 CCIE Routing and Switching (v5.0) tips legibly inside the 400-101 dumps. These are significantly preserving your own expenditures to take part in the actual Cisco classes.

2017 Apr 400-101 actual exam

Q231. Refer to the exhibit. 

Which two conditions can cause this error message to be displayed on the console? (Choose two.) 

A. The EtherChannel is configured as desirable on both ends. 

B. The port-channel on the adjacent device is misconfigured. 

C. There is a speed and duplex mismatch on interface fa0/12. 

D. The EtherChannel is configured as auto on one of the interfaces. 

Answer: B,C 

Q232. Refer to the exhibit. 

Which IP packets will be accepted from EBGP neighbor 

A. IP packets with a TTL count in the header that is equal to or greater than 253 

B. IP packets with a TTL count in the header that is equal to 253 

C. IP packets with a TTL count in the header that is equal to or greater than 2 

D. IP packets with a TTL count in the header that is equal to 2 



neighbor ip-address ttl-security hops hop-count 


Router(config-router)# neighbor ttl-security hops 2 

Configures the maximum number of hops that separate two peers. 

. The hop-count argument is set to number of hops that separate the local and remote peer. 

If the expected TTL value in the IP packet header is 254, then the number 1 should be configured for the hop-count argument. The range of values is a number from 1 to 254. 

. When this feature is enabled, BGP will accept incoming IP packets with a TTL value that is 

equal to or greater than the expected TTL value. Packets that are not accepted are silently discarded. 

. The example configuration sets the expected incoming TTL value to at least 253, which is 255 minus the TTL value of 2, and this is the minimum TTL value expected from the BGP peer. The local router will accept the peering session from the neighbor only if it is 1 or 2 hops away. 


Q233. A configuration includes the line ip route permanent. 

Which option is a benefit of configuring this static route as permanent? 

A. It allows the route to be redistributed into the network even if the outgoing interface is down. 

B. It allows the route to be saved in the running configuration of the device. 

C. It places a hidden tag on the route that can be matched on other devices. 

D. It allows the route to have a tracking status even if no tracking object is configured. 


Q234. What is the ip dhcp snooping information option command used for? 

A. It displays information about the DHCP snooping table. 

B. It sends a syslog and an SNMP trap for a DHCP snooping violation. 

C. It enables the DHCP snooping host tracking feature. 

D. It enables DHCP option 82 data insertion. 



To enable DHCP option-82 data insertion, perform this task: 



Step 1 

Router(config)# ip dhcp snooping information option 

Enables DHCP option-82 data insertion. 

Step 2 

Router(config)# ip dhcp snooping information option replace 


Router(config-if)# ip dhcp snooping information option replace 

(Optional) Replaces the DHCP relay information option received in snooped packets with the switch's option-82 data. 

Step 3 

Router(config)# do show ip dhcp snooping | include 82 



Q235. Which three options are three benefits of an MPLS VPN? (Choose three.) 

A. It allows IP address space overlap by maintaining customer routes in a private routing table. 

B. It offers additional security by preventing intrusions directly into the customer routing table. 

C. It offers a transparent virtual network in which all customer sites appear on one LAN. 

D. It offers additional security by allowing only dynamic routing protocols between CE and PE routers. 

E. It allows IP address space overlap by maintaining customer routes in the global routing table with unique BGP communities. 

F. Providers can send only a default route for Internet access into the customer VPN. 

Answer: A,B,C 

Regenerate 400-101 answers:

Q236. Refer to the exhibit. 

Which configuration is missing that would enable SSH access on a router that is running Cisco IOS XE Software? 

A. int Gig0/0/0 


B. class-map ssh-class 

match access-group protect-ssh 

policy-map control-plane-in 

class ssh-class 

police 80000 conform transmit exceed drop 


service-policy input control-plane-in 

C. control-plane host 

management-interface GigabitEthernet0/0/0 allow ssh 

D. interface Gig0/0/0 

ip access-group protect-ssh in 



The feature Management Plane Protection (MPP) allows an administrator to restrict on which interfaces management traffic can be received by a device. This allows the administrator additional control over a device and how the device is accessed. This example shows how to enable the MPP in order to only allow SSH and HTTPS on the GigabitEthernet0/1 interface: 

control-plane host 

management-interface GigabitEthernet 0/1 allow ssh https 


Q237. Which two statements about BGP prefix-based outbound filtering are true? (Choose two.) 

A. It must be configured per address family. 

B. It can use prefix lists and route maps for filtering. 

C. It can be configured under the global BGP routing process. 

D. It can be configured for external peering sessions only. 

E. It can increase the processing load on the router. 

F. It supports IP multicast routes. 

Answer: A,D 

Q238. Which two statements are true about IPv6 multicast? (Choose two.) 

A. Receivers interested in IPv6 multicast traffic use IGMPv6 to signal their interest in the IPv6 multicast group. 

B. The PIM router with the lowest IPv6 address becomes the DR for the LAN. 

C. An IPv6 multicast address is an IPv6 address that has a prefix of FF00::/8. 

D. The IPv6 all-routers multicast group is FF02:0:0:0:0:0:0:2. 

Answer: C,D 


Multicast addresses in IPv6 have the prefix ff00::/8. 

Well-known IPv6 multicast addresses 




All nodes on the local network segment 


All routers on the local network segment 


Q239. Refer to the exhibit. 

A tunnel is configured between R3 to R4 sourced with their loopback interfaces. The ip pim sparse-dense mode command is configured on the tunnel interfaces and multicast-routing is enabled on R3 and R4. The IP backbone is not configured for multicast routing. 

The RPF check has failed toward the multicast source. 

Which two conditions could have caused the failure? (Choose two.) 

A. The route back to the RP is through a different interface than tunnel 0. 

B. The backbone devices can only route unicast traffic. 

C. The route back to the RP is through the same tunnel interface. 

D. A static route that points the RP to GigabitEthernet1/0 is configured. 

Answer: A,D 


.For a successful RPF verification of multicast traffic flowing over the shared tree (*,G) from RP, an ip mroute rp-address nexthop command needs to be configured for the RP address, that points to the tunnel interface. 

A very similar scenario can be found at the reference link below: 


Q240. Which protocol is the encapsulating protocol for mtrace packets? 







“mtrace” is a diagnostic tool to trace the multicast path from a specified source to a destination for a multicast group. It runs over IGMP protocol. Mtrace uses any information available to it to determine a previous hop to forward the trace towards the source. 

Reference: CAST/wwhelp/wwhimpl/common/html/wwhelp.htm#context=NI_MCAST&file=IP_Multicast. 3.04.html