Most Up to Date Version of Cisco 400-101 Exam Dumps in CertBus for Free

CertBus 2017 Latest Cisco 400-101 CCIE Exam VCE and PDF Dumps for Free Download!

☆ 400-101 CCIE Exam PDF and VCE Dumps : 828QAs Instant Download: https://www.certgod.com/400-101.html [100% 400-101 Exam Pass Guaranteed or Money Refund!!]
☆ Free view online pdf on CertBus free test 400-101 PDF: https://www.certgod.com/online-pdf/400-101.pdf
☆ CertBus 2017 Latest 400-101 CCIE exam Question PDF Free Download from Google Drive Share: https://drive.google.com/file/d/0B_3QX8HGRR1mdEpkTFZvSDJDc2c/view?usp=sharing

Following 400-101 828QAs are all new published by Cisco Official Exam Center

No doubt that CCIE Latest 400-101 vce dumps exam is a tough task to accomplish. But you should not feel hesitant against the confronting difficulties. CertBus provides the latest version of Hotest 400-101 free download CCIE Routing and Switching Written v5.0 VCE dumps. Get a complete hold on CCIE Newest 400-101 vce exam syllabus through CertBus and boost up your skills. Besides, the Cisco dumps are the latest. It would be great helpful to your CCIE Dec 09,2017 Hotest 400-101 pdf CCIE Routing and Switching Written v5.0 exam.

CertBus – latest update source for all 400-101 certification exams. CertBus – our goal is to help all candidates pass their 400-101 exams and get their certifications in their first attempt. money back guarantee. CertBus – provide the latest 400-101 real exam practice questions and answers. 400-101 certification training tips | resources for 400-101 exam study 400-101 certification application guide and 400-101 training.

We CertBus has our own expert team. They selected and published the latest 400-101 preparation materials from Cisco Official Exam-Center: https://www.certgod.com/400-101.html

QUESTION NO:6

Why would a rogue host that is running a DHCP server on a campus LAN network present a

security risk?

A. It may allocate IP addresses from an unknown subnet to the users.

B. All multicast traffic can be sniffed by using the DHCP multicast capabilities.

C. The CPU utilization of the first hop router can be overloaded by exploiting DHCP relay open

ports.

D. A potential man-in-the-middle attack can be used against the clients.

Answer: D

Explanation:

QUESTION NO:15

Which three options are considered in the spanning-tree decision process? (Choose three.)

A. lowest root bridge ID

B. lowest path cost to root bridge

C. lowest sender bridge ID

D. highest port ID

E. highest root bridge ID

F. highest path cost to root bridge

Answer: A,B,C

Explanation:

Configuration bridge protocol data units (BPDUs) are sent between switches for each port.

Switches use s four step process to save a copy of the best BPDU seen on every port. When a

port receives a better BPDU, it stops sending them. If the BPDUs stop arriving for 20 seconds

(default), it begins sending them again.

Step 1 Lowest Root Bridge ID (BID)

Step 2 Lowest Path Cost to Root Bridge

Step 3 Lowest Sender BID

Step 4 Lowest Port ID

Reference

Cisco General Networking Theory Quick Reference Sheets

QUESTION NO:21

Refer to the exhibit.

A packet from RTD with destination RTG, is reaching RTB. What is the path this packet will take

from RTB to reach RTG?

A. RTB – RTA – RTG

B. RTB – RTD – RTC – RTA – RTG

C. RTB – RTF – RTE – RTA – RTG

D. RTB will not be able to reach RTG since the OSPF configuration is wrong.

Answer: C

Explanation:

QUESTION NO:23

What action will a BGP route reflector take when it receives a prefix marked with the community

attribute NO ADVERTISE from a client peer?

A. It will advertise the prefix to all other client peers and non-client peers.

B. It will not advertise the prefix to EBGP peers.

C. It will only advertise the prefix to all other IBGP peers.

D. It will not advertise the prefix to any peers.

Answer: D

Explanation:

QUESTION NO:30

What is the flooding scope of an OSPFv3 LSA, if the value of the S2 bit is set to 1 and the S1 bit is

set to 0?

A. link local

B. area wide

C. AS wide

D. reserved

Answer: C

Explanation:

The Type 1 router LSA is now link local and the Type 2 Network LSA is AS Wide

S2 and S1 indicate the LSA’s flooding scope. Table 9-1 shows the possible values of these two

bits and the associated flooding scopes.

Table 9-1 S bits in the OSPFv3 LSA Link State Type field and their associated flooding scopes

LSA Function Code, the last 13 bits of the LS Type field, corresponds to the OSPFv2 Type field.

Table 9-2 shows the common LSA types used by OSPFv3 and the values of their corresponding

LS Types. If you decode the hex values, you will see that the default U bit of all of them is 0. The S

bits of all LSAs except two indicate area scope. Of the remaining two, AS External LSAs have an

AS flooding scope and Link LSAs have a linklocal flooding scope. Most of the OSPFv3 LSAs have

functional counterparts in OSPFv2; these OSPFv2 LSAs and their types are also shown in Table

9-2.

Table 9-2 OSPFv3 LSA types and their OSPFv2 counterparts

Reference

http://www.networkworld.com/subnets/cisco/050107-ch9-ospfv3.html?page=1

400-101 VCE Dumps400-101 Exam Questions400-101 Braindumps

QUESTION NO:45

Refer to the exhibit.

What does the incoming interface of the above (*, G) entry indicate?

A. the interface closest to the source, according to the unicast routing table

B. the interface where an IGMP join has been received

C. the interface with the highest IP address

D. the last interface to hear a PIM (*, G) join

E. the interface closest to the RP, according to the unicast routing table

Answer: E

Explanation:

Source Trees

A source tree is the simplest form of distribution tree. The source host of the multicast traffic is

located at the root of the tree, and the receivers are located at the ends of the branches. Multicast

traffic travels from the source host down the tree toward the receivers. The forwarding decision on

which interface a multicast packet should be transmitted out is based on the multicast forwarding

table. This table consists of a series of multicast state entries that are cached in the router. State

entries for a source tree use the notation (S, G) pronounced S comma G. The letters represents

the IP address of the source, and G represents the group address.

Shared Trees

Shared trees differ from source trees in that the root of the tree is a common point somewhere in

the network.

This common point is referred to as the rendezvous point (RP). The RP is the point at which

receivers join to learn of active sources. Multicast sources must transmit their traffic to the RP.

When receivers join a multicast group on a shared tree, the root of the tree is always the RP, and

multicast traffic is transmitted from the RP down toward the receivers. Therefore, the RP acts as a

go-between for the sources and receivers. An RP can be the root for all multicast groups in the

network, or different ranges of multicast groups can be associated with different RPs.

Multicast forwarding entries for a shared tree use the notation (*, G), which is pronounced star

comma G. This is because all sources for a particular group share the same tree. (The multicast

groups go to the same RP.)

Therefore, the * or wildcard represents all sources.

Additional Information from Microsoft

Multicast traffic from source 162.10.4.1 (for example) uses the RPT, meaning the source sends it

to the RP rather than to the multicast group (the router would denote this by having a (*, G) entry

rather than a (S, G) entry). Before sending this traffic, Router 1 checks its unicast routing table to

see if packets from the RP are arriving on the correct interface. In this case they are, because they

arrive on interface I1, and the packets are forwarded.

Reference

http://technet.microsoft.com/en-us/library/bb742462.aspx

QUESTION NO:53

Refer to the exhibit.

Which statement is correct?

A. This configuration is not valid.

B. Control Plane Policing is configured; however you cannot determine on which interface it is

configured.

C. NTP is not configured on the router.

D. Telnet traffic will be dropped.

Answer: C

Explanation: Display the current connection table for the router. For example, for IOS routers,

type “show control-plane host open-ports” Press “Enter.” The router will display a table with one

line for each currently open connection. The fourth column from the left is labeled “Service;” the

entries under that column correspond to the protocols currently in use. The current TCP traffic

corresponds exactly to the table entries that have “TCP” under the fourth column.

QUESTION NO:54

What does Cisco recommend when you are enabling Cisco IOS IPS?

A. Do not enable all the signatures at the same time.

B. Do not enable the ICMP signature.

C. Disable the Zone-Based Policy Firewall because it is not compatible with Cisco IOS IPS.

D. Disable CEF because it is not compatible with Cisco IOS IPS. .

Answer: A

Explanation:

QUESTION NO:56

Which two statements are true about Unicast Reverse Path Forwarding Loose Mode? (Choose

two.)

A. It is used in multihome network scenarios.

B. It can be used with BGP to mitigate DoS and DDoS.

C. It does not need to have CEF enabled.

D. It is enabled via the interface level command ip verify unicast reverse-path.

E. It cannot be used with “classification” access lists.

Answer: A,B

Explanation: The Unicast Reverse Path Forwarding Loose Mode feature creates a new option for

Unicast Reverse Path Forwarding (Unicast RPF), providing a scalable anti-spoofing mechanism

suitable for use in multihome network scenarios. This mechanism is especially relevant for Internet

Service Providers (ISPs), specifically on routers that have multiple links to multiple ISPs. In

addition, Unicast RPF (strict or loose mode), when used in conjunction with a Border Gateway

Protocol (BGP) “trigger, ” provides an excellent quick reaction mechanism that allows network

traffic to be dropped on the basis of either the source or destination IP address, giving network

administrators an efficient tool for mitigating denial of service (DoS) and distributed denial of

service (DDoS) attacks.

Reference

http://www.cisco.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ft_urpf.html

QUESTION NO:59

What is true about IP Source Guard with port security?

A. Binding should be manually configured.

B. It is not supported if IEEE 802.1x port-based authentication is enabled

C. The DHCP server must support option 82, or the client is not assigned an IP address.

D. It filters based on source IP address only.

Answer: C

Explanation:

CertBus exam braindumps are pass guaranteed. We guarantee your pass for the 400-101 exam successfully with our Cisco materials. CertBus CCIE Routing and Switching Written v5.0 exam PDF and VCE are the latest and most accurate. We have the best Cisco in our team to make sure CertBus CCIE Routing and Switching Written v5.0 exam questions and answers are the most valid. CertBus exam CCIE Routing and Switching Written v5.0 exam dumps will help you to be the Cisco specialist, clear your 400-101 exam and get the final success.

400-101 Latest questions and answers on Google Drive(100% Free Download): https://drive.google.com/file/d/0B_3QX8HGRR1mdEpkTFZvSDJDc2c/view?usp=sharing

400-101 Cisco exam dumps (100% Pass Guaranteed) from CertBus: https://www.certgod.com/400-101.html [100% Exam Pass Guaranteed]

Why select/choose CertBus?

Millions of interested professionals can touch the destination of success in exams by certgod.com. products which would be available, affordable, updated and of really best quality to overcome the difficulties of any course outlines. Questions and Answers material is updated in highly outclass manner on regular basis and material is released periodically and is available in testing centers with whom we are maintaining our relationship to get latest material.

Brand	Certbus	Testking	Pass4sure	Actualtests	Others
Price	$45.99	$124.99	$125.99	$189	$69.99-99.99
Up-to-Date Dumps
Free 365 Days Update
Real Questions
Printable PDF
Test Engine
One Time Purchase
Instant Download
Unlimited Install
100% Pass Guarantee
100% Money Back
Secure Payment
Privacy Protection