Pass4sure cisco 400 101 Questions are updated and all ccie 400 101 dumps answers are verified by experts. Once you have completely prepared with our 400 101 ccie exam prep kits you will be ready for the real 400 101 dumps exam without a problem. We have Replace Cisco ccie 400 101 dumps dumps study guide. PASSED cisco 400 101 First attempt! Here What I Did.

Q241. Which three message types are used for prefix delegation in DHCPv6? (Choose three.) 

A. DHCP Discover 

B. Renew 

C. Solicit 

D. DHCP Offer 

E. Advertise 

F. DHCP Ack 

Answer: B,C,E 

Explanation: 

DHCPv6 Message Types 

For a client to get an IPv6 address successfully from a DHCPv6 server, the Client-Server Conversation happens using the following messages. 

Client--->Server Messages 

Server--->Client Messages 

Solicit, Request, Confirm, Renew, Rebind, Release, Decline, Information-Request Advertise, Reply, Reconfigure 

Lets look at each message types in detail: 

SOLICIT 

This is the first step in DHCPv6, where a DHCPv6 client sends a Solicit message to locate DHCPv6 servers. 

ADVERTISE 

Upon receiving a Solicit Message from the client, the DHCPv6 server sends an Advertise message to indicate that it is available for DHCP service, in response to a Solicit message received from a client. 

REQUEST 

This message is sent by the DHCPv6 client.Client sends a Request message to request configuration parameters which includes IP addresses or delegated prefixes, from a specific server. 

CONFIRM 

Confirm message is sent by the client to any available server in the network to confirm that the client is still on the same link or it has to be removed. This message also confirms the IPv6 addresses that are assigned to the link are still valid. This could happen in case when a client detects a change in link-layer connectivity or if the device is powered on and it is found that one or more leases are still valid. Note that only the prefix portion of the addresses are validated and not the actual leases. 

RENEW 

A client sends a Renew message to the server when it wants to extend the lifetimes on the addresses and other configuration parameters assigned to the client and also to update other configuration parameters. 

REBIND 

In case of No response from the DHCPv6 Server for the Renew message, the client sends a Rebind message to any available server to extend the lifetimes on the address and to update other configuration parameters. 

REPLY 

A Reply message is sent by the DHCPv6 Server in response to a Solicit, Request, Renew, Rebind message received from a client. The reply message is sent by the server in response to a confirm message (either confirming or denying) that the addresses assigned to the client are appropriate.In short the server acknowledge receipt of a Release or Decline message by sending a REPLY message. 

RELEASE 

Release message as the name implies, is sent by the client to the server that has assigned the addresses, to indicate that the client will no longer use the assigned addresses (one or more). 

DECLINE 

Client sends a Decline message to the DHCPv6 server to tell that the one or more addresses assigned by the server is already in use 

RECONFIGURE 

The Reconfigure Message is sent by the DHCPv6 server to the client when the server has new or updated information of configuration parameters. It tells the client to initiate a information-request/reply message to the server so as to receive the updated information. 

INFORMATION-REQUEST 

Information-Request message is sent by the client to the server to update the configuration parameters 

Reference: https://supportforums.cisco.com/blog/153426/implementing-dhcpv6-introduction 


Q242. Packets from a router with policy-based routing configured are failing to reach the next hop. 

Which two additions can you make to the router configuration to enable the packets to flow correctly? (Choose two.) 

A. Enable ip proxy-arp on the exiting interface. 

B. Specify the next hop as an address. 

C. Specify the next hop as an interface. 

D. Add a match-any permit statement to the route map. 

Answer: A,B 

Explanation: 

Here is an example: 

Router(config)#route-map Engineers permit 20 

Router(config-route-map)#match ip address 2 

Router(config-route-map)#set interface Ethernet1 

Here, instead of specifying a next-hop, it specifies that any packets matching this rule will be forwarded directly out the interface Ethernet1. This means that either the destination device must be on this segment, or there must be a router configured with Proxy ARP that can forward the packet to the ultimate destination. 


Q243. Which command sets the maximum segment size for a TCP packet initiated from a router? 

A. ip mtu 

B. ip tcp adjust-mss 

C. ip tcp mss 

D. ip tcp window-size 

Answer:


Q244. What is the function of the command ip pim autorp listener? 

A. It allows a border PIM sparse mode router to accept autorp information from another autonomous system. 

B. It allows the mapping agents to accept autorp information from the PIM rendezvous point. 

C. It allows the routers to flood the autorp information in a sparse-mode-only network. 

D. It allows a BSR to accept autorp information and translate it into BSR messages. 

Answer:

Explanation: 

To cause IP multicast traffic for the two Auto-RP groups 224.0.1.39 and 224.0.1.40 to be Protocol Independent Multicast (PIM) dense mode flooded across interfaces operating in PIM sparse mode, use the ip pim autorp listener command in global configuration mode. To disable this feature, use the no form of this command. 

Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti/command/imc-cr-book/imc_i3.html#wp3085748429 


Q245. Refer to the exhibit. 

Assume that Cisco Discovery Protocol is supported and enabled only on switches A and C. 

Which information is returned when you issue the command show cdp neighbors on switch C? 

A. a limited amount of information about switch B 

B. neighbor details for switch A 

C. neighbor details for switch B 

D. neighbor details for switch C 

Answer:


Q246. Refer to the exhibit. 

Which two commands are required on R3 in order for MPLS to function? (Choose two.) 

A. mpls ip 

B. ip cef 

C. mpls label protocol tdp 

D. mpls ip propagate-ttl 

Answer: A,B 


Q247. Which three condition types can be monitored by crypto conditional debug? (Choose three.) 

A. Peer hostname 

B. SSL 

C. ISAKMP 

D. Flow ID 

E. IPsec 

F. Connection ID 

Answer: A,D,F 

Explanation: 

Supported Condition Types 

The new crypto conditional debug CLIs--debug crypto condition, debug crypto condition unmatched, and show crypto debug-condition--allow you to specify conditions (filter values) in which to generate and display debug messages related only to the specified conditions. The table below lists the supported condition types. 

Table 1 Supported Condition Types for Crypto Debug CLI 

Condition Type (Keyword) 

Description 

connid 1 

An integer between 1-32766. Relevant debug messages will be shown if the current IPSec operation uses this value as the connection ID to interface with the crypto engine. 

flowid 1 

An integer between 1-32766. Relevant debug messages will be shown if the current IPSec operation uses this value as the flow-ID to interface with the crypto engine. 

FVRF 

The name string of a virtual private network (VPN) routing and forwarding (VRF) instance. Relevant debug messages will be shown if the current IPSec operation uses this VRF instance as its front-door VRF (FVRF). 

IVRF 

The name string of a VRF instance. Relevant debug messages will be shown if the current IPSec operation uses this VRF instance as its inside VRF (IVRF). 

peer group 

A Unity group-name string. Relevant debug messages will be shown if the peer is using this group name as its identity. 

peer hostname 

A fully qualified domain name (FQDN) string. Relevant debug messages will be shown if the peer is using this string as its identity; for example, if the peer is enabling IKE Xauth with this FQDN string. 

peeripaddress 

A single IP address. Relevant debug messages will be shown if the current IPSec operation is related to the IP address of this peer. 

peer subnet 

A subnet and a subnet mask that specify a range of peer IP addresses. Relevant debug messages will be shown if the IP address of the current IPSec peer falls into the specified subnet range. 

peer username 

A username string. Relevant debug messages will be shown if the peer is using this username as its identity; for example, if the peer is enabling IKE Extended Authentication (Xauth) with this username. 

SPI 1 

A 32-bit unsigned integer. Relevant debug messages will be shown if the current IPSec operation uses this value as the SPI. 

Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_vpnips/configuration/xe-3s/sec-sec-for-vpns-w-ipsec-xe-3s-book/sec-crypto-debug-sup.html 


Q248. Which statement about BGP and diverse path advertisement is true? 

A. The BGP best-path selection must be disabled. 

B. The BGP best-path selection algorithm has been changed to always ignore the IGP metric. 

C. The BGP best-path selection algorithm has been changed so that two BGP paths can be flagged as best in the BGP table. 

D. The BGP best-path selection algorithm has not been changed. 

E. The BGP best-path selection is disabled for BGP routes for which the feature is enabled. 

Answer:

Explanation: 

The BGP Diverse Path Using a Diverse-Path Route Reflector feature allows BGP to distribute an alternative path other than the best path between BGP speakers when route reflectors are deployed. This additional path is added to the best-path, and the best path algorithm still remains unchanged. 


Q249. Refer to the exhibit. 

You have just created a new VRF on PE3. You have enabled debug ip bgp vpnv4 unicast updates on PE1, and you can see the route in the debug, but not in the BGP VPNv4 table. 

Which two statements are true? (Choose two.) 

A. VPNv4 is not configured between PE1 and PE3. 

B. address-family ipv4 vrf is not configured on PE3. 

C. After you configure route-target import 999:999 for a VRF on PE3, the route will be accepted. 

D. PE1 will reject the route due to automatic route filtering. 

E. After you configure route-target import 999:999 for a VRF on PE1, the route will be accepted. 

Answer: D,E 

Explanation: 

The route target extended community for VPLS auto-discovery defines the import and export policies that a VPLS instance uses. The export route target sets an extended community attribute number that is appended to all routes that are exported from the VPLS instance. The import route target value sets a filter that determines the routes that are accepted into the VPLS instance. Any route with a value in its import route target contained in its extended attributes field matching the value in the VPLS instance’s import route target are accepted. Otherwise the route is rejected. 


Q250. Which three statements about EIGRP wide metrics are true? (Choose three.) 

A. The maximum metric is 65536. 

B. The default delay is 1,000,000 picoseconds. 

C. They allow up to 100 hops. 

D. They allow up to 256 hops. 

E. The default delay is 1,000,000 milliseconds. 

F. The maximum metric is 51200. 

Answer: A,B,C