Cisco 400-101 Online Practice Questions and Exam Preparation

Cisco 400-101 Online Questions & Answers

• Question 31:

  What command can you configure on a router so that traffic generated from the router is policy-routed?

  A. ip local policy
  B. ip route-cache policy
  C. ip policy
  D. ip route-map
  A. ip local policy

• Question 32:

  How can you protect a device from Dos attacksdirected against its terminal and management ports?

  A. Enable AAA local authentication on the terminal and management ports
  B. Configure TCP keepalives on the terminal and management ports
  C. Reserve a terminal or management port with a highly restrictive ACL
  D. Configure the max-login-attempts command on the terminal and management ports
  D. Configure the max-login-attempts command on the terminal and management ports

• Question 33:

  Which protocol enables routes in an MPLS environment to use labels to move traffic?

  A. LLDP
  B. POP
  C. PPP
  D. FTP
  E. L2TP
  F. LDP
  F. LDP

• Question 34:

  Refer to the exhibit.

  

  What conclusion can you draw from the given ping output?

  A. The ping operation sent packets ranging from 505 to 1500 bytes in size.
  B. Fragmentation failed during the ping operation.
  C. The packet life was exceeded in 5 percent of the operations.
  D. The Verbose option was set in the IP header.
  B. Fragmentation failed during the ping operation.

• Question 35:

  Refer to the exhibit.

  

  Which two actions can you take to allow the network 172.29.224.0./24 to be reachable from peer 192.168.250.53? (Choose two)

  A. Modify the community list to match community 64513:64090 attached to 172.29.224.0/24.
  B. Configure soft reconfiguration to peering 192.168.250.53.
  C. Modify the outbound route map to permit all additional traffic.
  D. Configure additional address families to peering 192.168.250.53.
  E. Modify the inbound route map to permit all additional traffic.
  A. Modify the community list to match community 64513:64090 attached to 172.29.224.0/24.
  C. Modify the outbound route map to permit all additional traffic.

• Question 36:

  When you implement CoPP on your network, what is its default action?

  A. Drop management ingress traffic to the control plane.
  B. Monitor ingress and egress traffic to the control plane by using access groups that are applied to the interface
  C. Block all traffi
  D. Rate-limit bidirectional traffic to the control plane.
  E. Permit all traffic
  E. Permit all traffic

• Question 37:

  Which ISAKMP feature can protect a GDOI from a hacker using a network sniffer while a security association is established?

  A. an ISAKMP Phase 2 GROUPKEY-PULL exchange
  B. an ISAKMP Phase 1 security association
  C. the Proof of Possession (POP)
  D. an ISAKMP Phase 2 security association
  E. a ISAKMP Phase 2 GROUPKEY-PUSH exchange
  B. an ISAKMP Phase 1 security association

• Question 38:

  Which protocol does a host use to request IPv6 multicast traffic?

  A. PIM6
  B. SSM
  C. IGMPv3
  D. MLD
  D. MLD

• Question 39:

  Refer to the exhibit.

  

  Which two conclusions can you draw from this putput? (Choose two)

  A. The packet was source-routed.
  B. The device that produced the output uses the same interface to send and receive traffic to and from the device at 10.9.132.254
  C. The device at 192.168.5.119 is on the same subnet as the next hop for the device at 10.9.132.254
  D. The device that produced the output uses different interfaces to send and receive traffic to and from the device at 10.9.132.254
  E. The device at the 192.168.5.119 routing table has an ARP entry for the device at 10.9.132.254.
  B. The device that produced the output uses the same interface to send and receive traffic to and from the device at 10.9.132.254
  C. The device at 192.168.5.119 is on the same subnet as the next hop for the device at 10.9.132.254

• Question 40:

  Which mechanism does GET VPN use to preserve ip header information?

  A. GRE
  B. MPLS
  C. IPSec transport mode
  D. IPSec tunnel mode
  D. IPSec tunnel mode