The fast and direct way towards the Cisco Cisco 400-101 certification is to find help coming from Pass4sure. The absolutely free examine guide, practice demos, Pdf files and test serp will help you get good results easily and smoothly. Log on Pass4sure.com and select the most suitable Cisco Cisco prep package for yourself. You will have the pack after all of us receive your payment. Download your test questions and answers and produce them, in order to prepare for the Cisco 400-101 real exam along with your own type and for your own rate. After reviewing your theoretical materials, you can look at yourself with the test serp. Take a simulated analyze paper every day, and you may make wonderful progress after a little period of time.

2021 Apr 400-101 free practice questions

Q371. Refer to the exhibit. 

Why is the router not accessible via Telnet on the GigabitEthernet0 management interface? 

A. The wrong port is being used in the telnet-acl access list. 

B. The subnet mask is incorrect in the telnet-acl access list. 

C. The log keyword needs to be removed from the telnet-acl access list. 

D. The access class needs to have the vrf-also keyword added. 

Answer: D 

Explanation: 

The correct command should be “access-class telnet-acl in vrf-also”. If you do not specify the vrf-also keyword, incoming Telnet connections from interfaces that are part of a VRF are rejected. 


Q372. Refer to the exhibit. 

A Cisco Catalyst 6500 Series Switch experiences high CPU utilization. What can be the cause of this issue, and how can it be prevented? 

A. The hardware routing table is full. Redistribute from BGP into IGP. 

B. The software routing table is full. Redistribute from BGP into IGP. 

C. The hardware routing table is full. Reduce the number of routes in the routing table. 

D. The software routing table is full. Reduce the number of routes in the routing table. 

Answer: C 

Explanation: 

FIB TCAM Exception - If you try to install more routes than are possible into the FIB TCAM you will see the following error message in the logs: 

CFIB-SP-STBY-7-CFIB_EXCEPTION : FIB TCAM exception, Some entries will be software switched 

%CFIB-SP-7-CFIB_EXCEPTION : FIB TCAM exception, Some entries will be software switched. 

%CFIB-SP-STBY-7-CFIB_EXCEPTION : FIB TCAM exception, Some entries will be software switched. 

This error message is received when the amount of available space in the TCAM is exceeded. This results in high CPU. This is a FIB TCAM limitation. Once TCAM is full, a flag will be set and FIB TCAM exception is received. This stops from adding new routes to the TCAM. Therefore, everything will be software switched. The removal of routes does not help resume hardware switching. Once the TCAM enters the exception state, the system must be reloaded to get out of that state. You can view if you have hit a FIB TCAM exception with the following command: 

6500-2#sh mls cef exception status 

Current IPv4 FIB exception state = TRUE 

Current IPv6 FIB exception state = FALSE 

Current MPLS FIB exception state = FALSE 

When the exception state is TRUE, the FIB TCAM has hit an exception. 

The maximum routes that can be installed in TCAM is increased by the mls cef maximum-routes command. 

Reference: https://supportforums.cisco.com/document/59926/troubleshooting-high-cpu-6500-sup720 


Q373. Refer to the exhibit. 

Which two possible network conditions can you infer from this configuration? (Choose two.) 

A. The authentication parameters on R1 and R2 are mismatched. 

B. R1 is using the default NTP source configuration. 

C. R1 and R2 have established an NTP session. 

D. R2 is configured as the NTP master with a stratum of 7. 

Answer: A,B 

Explanation: 

Answer A. The NTP associations are not synced, it is only listed as a candidate because it was configured. Routing is not the issue, so it must be mismatched authentication parameters. 

Answer B. NTP sets the source IP address for all NTP packets based on the address of the interface through which the NTP packets are sent. You can configure NTP to use a specific source IP address. 


Q374. Which two statements about OSPF are true? (Choose two.) 

A. External type 2 routes are preferred over interarea routes. 

B. Intra-area routes are preferred over interarea routes. 

C. External type 1 routes are preferred over external type 2 routes. 

D. External type 1 routes are preferred over intra-area routes. 

E. External type 2 routes are preferred over external type 1 routes. 

Answer: B,C 


Q375. Refer to the exhibit. 

This is the configuration of the ASBR of area 110.Which option explains why the remote ABR should not translate the type 7 LSA for the prefix 192.168.0.0/16 into a type 5 LSA? 

A. The remote ABR translates all type 7 LSA into type 5 LSA, regardless of any option configured in the ASBR. 

B. The ASBR sets the forwarding address to 0.0.0.0 which instructs the ABR not to translate the LSA into a type 5 LSA. 

C. The ASBR originates a type 7 LSA with age equal to MAXAGE 3600. 

D. The ABR clears the P bit in the header of the type 7 LSA for 192.168.0.0/16. 

Answer: D 

Explanation: 

When external routing information is imported into an NSSA, LSA Type 7 is generated by the ASBR and it is flooded within that area only. To further distribute the external information, type 7 LSA is translated into type 5 LSA at the NSSA border. The P-bit in LSA Type 7 field indicates whether the type 7 LSA should be translated. This P-bit is automatically set by the NSSA ABR (also the Forwarding Address (FA) is copied from Type 7 LSA). The P-bit is not set only when the NSSA ASBR and NSSA ABR are the same router for the area. If bit P = 0, then the NSSA ABR must not translate this LSA into Type 5. 

The nssa-only keyword instructs the device to instigate Type-7 LSA with cleared P-bit, thereby, preventing LSA translation to Type 5 on NSSA ABR device. 

Note. If a router is attached to another AS and is also an NSSA ABR, it may originate a both a type-5 and a type-7 LSA for the same network. The type-5 LSA will be flooded to the backbone and the type-7 will be flooded into the NSSA. If this is the case, the P-bit must be reset (P=0) in the type-7 LSA so the type-7 LSA isn’t again translated into a type-5 LSA by another NSSA ABR. 

Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/15-e/iro-15-e-book/iro-ospfv3-nssa-cfg.html 


Most up-to-date 400-101 brain dumps:

Q376. Refer to the exhibit. 

Which statement is true? 

A. The Cisco PfR state is UP; however, the external interface Et0/1 of border router 10.1.1.1 has exceeded the maximum available bandwidth threshold. 

B. The Cisco PfR state is UP; however, an issue is preventing the border router from establishing a TCP session to the master controller. 

C. The Cisco PfR state is UP and is able to monitor traffic flows; however, MD5 authentication has not been successful between the master controller and the border routers. 

D. The Cisco PfR State is UP; however, the receive capacity was not configured for inbound traffic. 

E. The Cisco PfR state is UP, and the link utilization out-of-policy threshold is set to 90 percent for traffic exiting the external links. 

Answer: E 

Explanation: 

All three interfaces show as UP, and the capacity is set to 500 kbps, with the max threshold set to 450 kbps (90% of 500kbps). 


Q377. Which feature of Cisco IOS XE Software allows for platform-independent code abstraction? 

A. its security 

B. Common Management Enabling Technology 

C. the Linux-based environment 

D. its modularity 

Answer: D 


Q378. Which EIGRP packet types are sent as unicast packets? 

A. hello, update, query 

B. query, SIA query, reply 

C. SIA query, reply, ACK 

D. query, SIA query, SIA reply 

Answer: C 


Q379. Which two options are interface requirements for turbo flooding? (Choose two.) 

A. The interface is Ethernet. 

B. The interface is configured for ARPA encapsulation. 

C. The interface is PPP. 

D. The interface is configured for GRE encapsulation. 

E. The interface is configured for 802.1Q encapsulation. 

Answer: A,B 

Explanation: 

In the switch, the majority of packets are forwarded in hardware; most packets do not go through the switch CPU. For those packets that do go to the CPU, you can speed up spanning tree-based UDP flooding by a factor of about four to five times by using turbo-flooding. This feature is supported over Ethernet interfaces configured for ARPA encapsulation. 

Reference: http://www.cisco.com/c/en/us/td/docs/switches/metro/me3400/software/release/12-2_50_se/configuration/guide/scg/swiprout.html 


Q380. Which two conditions must be met by default to implement the BGP multipath feature? (Choose two.) 

A. The next-hop routers must be the same. 

B. Route reflectors must be enabled. 

C. All attributes must have the same values. 

D. MPLS must be enabled. 

E. The next-hop routers must be different. 

Answer: C,E