Category Archives: 400-101 Real Tests (July)

Download New Updated (July) Cisco 400-101 Actual Test 381-390

Ensurepass  QUESTION 381 What is the new designation for the MPLS EXP (experimental) bits?   A. QoS bits B. traffic class bits C. flow bits D. precedence bits   Correct Answer: B Explanation: To avoid misunderstanding about how this field may be used, it has become increasingly necessary to rename this field. This document changes the name of the EXP field to the “Traffic Class field” (“TC field”). In doing so, it also updates documents that define the current use of Read more […]

Download New Updated (July) Cisco 400-101 Actual Test 391-400

Ensurepass      QUESTION 391 What is the most secure way to store ISAKMP/IPSec preshared keys in Cisco IOS?   A. Use the service password-encryption command. B. Encrypt the ISAKMP preshared key in secure type 5 format. C. Encrypt the ISAKMP preshared key in secure type 7 format. D. Encrypt the ISAKMP preshared key in secure type 6 format.   Correct Answer: D Explanation: Using the Encrypted Preshared Key feature, you can securely store plain text passwords in Read more […]

Download New Updated (July) Cisco 400-101 Actual Test 371-380

Ensurepass  QUESTION 371 Refer to the exhibit. Which LISP component do routers in the public IP network use to forward traffic between the two networks?     A. EID B. RLOC C. map server D. map resolver   Correct Answer: B Explanation: Locator ID Separation Protocol (LISP) is a network architecture and protocol that implements the use of two namespaces instead of a single IP address: Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/15-mt/irl-15-mt-book/irl-overview.html Read more […]

Download New Updated (July) Cisco 400-101 Actual Test 361-370

Ensurepass    QUESTION 361 Which statement describes the function of rekey messages?   A. They prevent unencrypted traffic from passing through a group member before registration. B. They refresh IPsec SAs when the key is about to expire. C. They trigger a rekey from the server when configuring the rekey ACL. D. They authenticate traffic passing through a particular group member.   Correct Answer: B Explanation: Rekey messages are used to refresh IPsec SAs. When Read more […]

Download New Updated (July) Cisco 400-101 Actual Test 351-360

EnsurepassQUESTION 351 Which two are features of DMVPN? (Choose two.)   A. It does not support spoke routers behind dynamic NAT. B. It requires IPsec encryption. C. It only supports remote peers with statically assigned addresses. D. It supports multicast traffic. E. It offers configuration reduction.   Correct Answer: DE Explanation: DMVPN Hub-and-spoke deployment model: In this traditional topology, remote sites (spokes) are aggregated into a headend VPN device at the Read more […]

Download New Updated (July) Cisco 400-101 Actual Test 341-350

Ensurepass    QUESTION 341 For which kind of MPLS deployment is the next-hop-self all keyword used on a BGP neighbor command?   A. 6VPE B. MPLS Carrier’s carrier C. inter-AS MPLS VPN option D D. inter-AS MPLS VPN option C E. Unified MPLS   Correct Answer: E Explanation: Since the core and aggregation parts of the network are integrated and end-to-end LSPs are provided, the Unified MPLS solution is also referred to as “Seamless MPLS.” New technologies or protocols Read more […]

Download New Updated (July) Cisco 400-101 Actual Test 331-340

Ensurepass  QUESTION 331 Refer to the exhibit. A spoke site that is connected to Router-A cannot reach a spoke site that is connected to Router- B, but both spoke sites can reach the hub. What is the likely cause of this issue?     A. There is a router doing PAT at site B. B. There is a router doing PAT at site A. C. NHRP is learning the IP address of the remote spoke site as a /32 address rather than a /24 address. D. There is a routing issue, as NHRP registration is Read more […]

Download New Updated (July) Cisco 400-101 Actual Test 321-330

Ensurepass  QUESTION 321 Refer to the exhibit. Service provider SP 1 is running the MPLS-VPN service. The MPLS core network has MP-BGP configured with RR-1 as route reflector. What will be the effect on traffic between PE1 and PE2 if router P1 goes down?     A. No effect, because all traffic between PE1 and PE2 will be rerouted through P2. B. No effect, because P1 was not the only P router in the forwarding path of traffic. C. No effect, because RR-1 will find an alternative Read more […]

Download New Updated (July) Cisco 400-101 Actual Test 291-300

Ensurepass  QUESTION 291 Which three statements about RIP timers are true? (Choose three.)   A. The default update timer is 30 seconds. B. The default invalid timer is 180 seconds. C. The default holddown timer is 180 seconds. D. The default flush timer is 60 seconds. E. The default scan timer is 60 seconds. F. The default hello timer is 5 seconds.   Correct Answer: ABC Explanation: The routing information protocol uses the following timers as part of its operation: Read more […]