The latest Cisco CCIE Service Provider 400-201 exam dumps and exercises test questions and answers,These free exercises will help you improve 400-201 CCIE Service Provider test skills, We share 400-201 pdf for free to download and learn, We share 40 real effective exam questions and answers for free if you want to get the full 400-201 exam dumps: https://www.leads4pass.com/400-201.html (Total questions:711 Q&A)->> updated throughout the year!Make sure you pass the exam easily!

[PDF] Free Cisco 400-201 pdf dumps download from Google Drive: https://drive.google.com/open?id=10gSuea6zGj_2GCx8Ewnkbi8CxRUcURPR

[PDF] Free Full Cisco pdf dumps download from Google Drive: https://drive.google.com/open?id=1CMo2G21nPLf7ZmI-3_hBpr4GDKRQWrGx

400-201 CCIE Service Provider – Cisco: https://www.cisco.com/c/en/us/training-events/training-certifications/exams/current-list/ccie-sp.html

Latest effective Cisco 400-201 Exam Practice Tests

QUESTION 1
Which protocol provides fast link failure detection for all type of encapsulation?
A. Prefix Independent Convergence
B. Carrier delay
C. Non stop forwarding
D. Bidirectional forwarding detection
Correct Answer: D

QUESTION 2
Which three counters from a show interface output indicate that data packets were dropped on that interface? (Choose
three.)
A. pause input
B. collisions
C. lost carrier
D. frame
E. runts
F. input error
Correct Answer: BDE

QUESTION 3Refer to the exhibit Which PW type is negotiated?
A. Type 1
B. Type 2
C. Type 3
D. Type 4
E. Type 5
F. Type 6
Correct Answer: E

QUESTION 4
A network engineer observes increasing output drops on the serial interface. Which two solutions can be implemented
to minimize these drops? (Choose two.)
A. Increase the MTU size on the link.
B. Replace the serial cable between the connecting devices.
C. Turn on fast switching.
D. Increase the output hold queue size.
E. Implement priority queuing on slower serial links by configuring priority lists.
Correct Answer: DE

QUESTION 5
Which two statements best describe the functionality of the BGP graceful restart capability? (Choose two.)
A. The peer router sends an end-of RIB message to the restarting router.
B. The peer router immediately removes the BGP routes that it learned from the restarting router from its BGP routing
table.
C. The restarting router does not remove any stale prefixes after the timer for stale entries expires.
D. The router establishes BGP sessions with other routers and relearns the BGP routes from other routers that are also
capable of graceful restart. The restarting router waits to receive updates from the neighboring routers. When the
neighboring routers send end-of- RIB messages to indicate that they are done sending updates, the restarting router
starts sending its own updates.
E. The restarting router removes any stale prefixes after the timer for stale entries expires.
Correct Answer: DE

QUESTION 6
The SP core supports PIM-SM for multicast traffic, but one of these routers is not able to see one of its PIM neighbors.
What is the most likely cause of this issue?
A. The router is an RP with high priority.
B. IGMP snooping is not enabled.
C. PIM sparse mode is not enabled on a participating multicast interface.
D. PIM protocols are not enabled in global configuration mode.
E. Auto-RP is not enabled on this network.
Correct Answer: C

QUESTION 7
Which two statements about spanning tree path cost are true? (Choose two.)
A. The path cost can be changed for an interface using the spanning-tree cost command.
B. The path cost can be changed for an interface using the stp path-cost command.
C. The STP default path cost depends on the interface speed.
D. The STP default path cost is similar for all interface.
Correct Answer: AC

QUESTION 8
Which BGP feature protects the external BGP peering session from CPU utilization-based attacks that use forged IP
packets?
A. BGP multihop
B. TTL security check
C. BGP FlowSpec
D. Secure BGP
Correct Answer: B

QUESTION 9
On Cisco IOS devices, which IS-IS feature reduces the convergence time for prefixes designated as high priority?
A. iSPF
B. advertise passive only
C. prefix prioritization
D. Fast-Forwarding
E. Route tagging
Correct Answer: E

QUESTION 10Refer to the exhibit. A network engineer has a requirement to enable MPLS TE tunnels on the network to be L3VPN
customers. Which MPLS TE feature allow the network engineer to configure MPLS TE LSPs by using a few CLI
commands?
A. AutoTunnel Mesh Groups on all P and PE routers
B. AutoTunnel Primary and Backup on all PE routers
C. AutoTunnel Primary and Backup on all P and PE routers
D. AutoTunnel Mesh Groups on all PE routers
Correct Answer: D

QUESTION 11
Which type of IPv6 address does OSPFv3 use to communicate with OSPFv3 neighbors?
A. link-local
B. site-local
C. global
D. unique local
E. anycast
Correct Answer: A

QUESTION 12Refer to the exhibit. Which statement is correct?
A. If the labeled packet arrives with the bottom label of 27, the label is replaced with label 38 and the packet is sent out
on the Gigabitethernet 0/0
B. If the labeled packet arrives with the bottom label of 27, all of the labels are replaced with label 38 and the packet is
sent out on the Gigabitethernet 0/0 interface
C. If the labeled packet arrives with the topmost label of 27,the label is replaced with the label 38 and the packet is sent
out on the Gigabitethernet 0/0 interface
D. If the labeled packet arrives with the topmost label of 27, all of the labels are replaced with label 38 and the packet is
sent out on the Gigabitethernet 0/0 interface.
E. If the labeled packet arrives with the topmost label of 38,the label is replaced with label 27 and the packet is sent out
on the GigabitEthernet 0/0 interface
F. If the labeled packet arrives with the topmost label of 38, all labels are replaced with the label 27 and the packet is
sent out on the GogabitEthernet 0/0/ interface.
Correct Answer: E

QUESTION 13
Which three are optional extensions of the Frame Relay Local Management Interface specification? (Choose three) A.
Switched virtual circuit
B. Virtual circuit status
C. Simple flow control
D. Multicasting
E. Permanent virtual circuit
Correct Answer: BCD
Explanation: Optional LMI Extensions:
The LMI specification also defines several optional extensions:
*
Global addressing convention
*
Multicast capability
*
A simple flow control mechanism
*
Ability for the network to communicate a PVC\\’s CIR to the subscriber in a Status message
*
A new message type that allows the network to announce PVC status changes without prompting from the subscriber
Implementors may build any, all, or none of these features into their networks.

QUESTION 14
During the modem boot process, how does the modem acquire the downstream channel?
A. The modem is commanded by the CMTS to set to the specific channel.
B. The modem uses the default value in the broadcom chipset.
C. The modem tuner sets a level as defined by the DOCSIS specification.
D. The modem tuner scans the downstream spectrum until digital QAM modulated signal is encountered
Correct Answer: D

QUESTION 15
Which two features prevent routing loops between the OSPF sites of a customer when the sites are multihomed or a
backdoor link is used between the sites? (Choose two.)
A. sham link
B. down bit
C. virtual link
D. Site of Origin
E. domain tag
Correct Answer: BE
If a route sent from a PE router to a CE router could then be received by another PE router from one of its own CE
router, there are chances of routing loops. This situation is possible when a “backdoor link” connects two CE routers
connected to two different PE routers. To prevent this, the PE sets the DN bit in any LSA that it sends to the CE router.
If the PE router receives any LSA with DN bit set, it ignores the LSA.
1) DN bit:
When a PE router sends a Type-3 LSA to a CE router, the DN bit in LSA Options field must be set. Now if the CE router
sends the Type-3 LSA to other PE router(s), the PE router will not redistribute it further.
When a PE router needs to distribute a route to a CE router which comes from the outside of CE router\\’s OSPF
domain, the PE router presents itself as an ASBR and distributes the route in Type-5 LSA. The DN bit must be set in the
LSA.
The Options field is present in all LSAs. The Options field is 1-byte long as follows- DN O DC EA N/P MC E MT
2) Route Tags (Domain Tags):
In some implementations (where DN bit is not set), Domain Tags (named by Cisco) are used to ensure Type-5
LSAs generated by a PE router will be ignored by other PE routers that may receive it. The value of Domain tag is
configurable and arbitrary if not set. Hence must be distinct from other OSPF tags

QUESTION 16
In the context of GMPLS, LMP stands for:
A. Load Management Protocol
B. Label Management Protocol
C. Loop Management Protocol
D. Link Management Protocol
Correct Answer: D
The Generalized Multi-Protocol Label Switching (GMPLS)[1] is a protocol suite extending MPLS to manage further
classes of interfaces and switching technologies other than packet interfaces and switching, such as time division
multiplex,
layer-2 switch, wavelength switch and fiber-switch.
GMPLS is composed of three main protocols:
Resource Reservation Protocol with Traffic Engineering extensions (RSVP-TE) signaling protocol.[5][6]Open Shortest
Path First with Traffic Engineering extensions (OSPF-TE) routing protocol.[7][8] Link Management Protocol (LMP).[9]

QUESTION 17
IPv6 multicast is enabled in a VPLS domain. An operations engineer must reduce the multicast flooding in this VPLS
domain. Which feature constrains IPv6 traffic at Layer 2 by configuring Layer 2 ports dynamically to forward IPv6
multicast traffic only to those ports that want to receive it?
A. IGMP snooping
B. MLD snooping
C. MLD querier
D. IGMP version 3 E. MLD version 2
Correct Answer: B

QUESTION 18
Which SONET protocol layer is in charge of clock synchronization and timing issues?
A. Photonic
B. Section
C. Path
D. Line
Correct Answer: B

QUESTION 19
Which option propagates SRLG membership information to the network?
A. BGP attribute
B. IGP extension
C. RSVP extension
D. LDP extension
E. PIM extension
Correct Answer: B

QUESTION 20
A service provider is using point-to-multipoint TE to forward MPLS traffic from one source to multiple destinations, what
is a restriction of using this method?
A. Destinations must be manually added and removed on the TE tail-end router
B. Multicast traffic must be implemented using PIM sparse mode
C. Point-to-multipoint TE does not support policy-based routing
D. Only node protection is supported on point-to-multipoint TE LSPs
Correct Answer: C

QUESTION 21
Refer to the exhibit.Inbound Infrastructure ACLs are configured to protect the SP network. Which three types of traffic should be filtered in
the infrastructure ACLs? (Choose three.)
A. traffic from a source with an IP address that is within 239.255.0.0/16
B. FTP traffic destined for internal routers
C. IPsec traffic that at an internal router
D. traffic from a source with an IP address that is within 162.238.0.0/16
E. EBGP traffic that peers with edge routers
Correct Answer: ABD
With the use of the protocols and addresses identified, the infrastructure ACL can be built to permit the protocols and
protect the addresses. In addition to direct protection, the ACL also provides a first line of defense against certain types
of invalid traffic on the Internet:
-RFC 1918 space must be denied. (RFC1918 describes a set of network ranges set aside for so-called “private” use.)
-Packets with a source address that fall under special-use address space, as defined in RFC 3330, must be denied.
-Anti-spoof filters must be applied. (Your address space must never be the source of packets from outside your AS.)

QUESTION 22
The layer 2 protocol used by POS technology offers a standardized way for mapping IP packets into SONET/ SDH
payloads. Select the correct sequence of POS operation:
1) Data is scrambled and synchronous mapping takes place by octet into the SONET/SDH frame.
2) Encapsulated via Point-to-Point Protocol (PPP) takes place framing information is added with High-level
Data Link Control (HDLC).
3) Gaps between frames are filled with flags, set to value 7E.
4) Octet stuffing occurs if any flags or resultant escape characters (of value 7D) are found in the data.
5) Data is segmented into an IP datagram with its 20-byte IP header.
A. 1, 3, 4, 5, 2
B. 5, 2, 3, 1, 4
C. 2, 3, 5, 4, 1
D. 5, 2, 3, 4, 1
E. 1, 2, 3, 4, 5
Correct Answer: D
The proper order of operation of PoS is:
When transmitting:
IP -> PPP -> FCS generation -> Byte stuffing -> Scrambling -> SONET/SDH framing When receiving:
SONET/SDH framing -> Descrambling -> Byte destuffing -> FCS detection -> PPP -> IP Remote

QUESTION 23
Which descriptions of Netflow is correct? (Choose three.)
A. By default,Netflow records bidirectional IP traffic flow.
B. Netflow answers questions regarding IP traffiC. who, what, where, when, and how
C. Netflow accounts for both transit traffic and traffic destined for the router.
D. Netflow returns the subinterface information in the flow records.
Correct Answer: BCD

QUESTION 24
Which option describes a benefits of IPv6 VPN Provider Edge?
A. Provider support for intra-AS and CSC scenarios
B. Uses separate signaling plane, which provides more security than IPv4
C. BGP is the preferred routing protocol for connecting two SPs.
D. No requirement for a separate signaling plane
Correct Answer: D

QUESTION 25
Which of the following descriptions about IP spoofing is correct?
A. IP destination address is forged
B. IP source address is forged
C. IP TCP destination port is forged
D. None of above
E. IP TCP source port is forged
Correct Answer: B
1.13. Security in core

QUESTION 26
Which option is the SONET frame format of the STM-4 SDH circuit?
A. STS-1
B. STS-192
C. STS-12
D. STS-3
Correct Answer: C

QUESTION 27
Refer to the exhibit.Inbound infrastructure ACLs are configured to protect the SP network. Which two types of traffic should be permitted in
the infrastructure ACL? (Choose two.)
A. traffic destined for network of 172.30.0.0/16
B. traffic source from network of 172.30.0.0/16
C. traffic destined for network of 162.238.0.0/16
D. traffic source from network of 162.238.0.0/16
E. traffic destined for network of 232.16.0.0/16
Correct Answer: CE

QUESTION 28
In an infrastructure As a service cloud deployment model, which two components are managed by the customer?
(Choose two)
A. hardware (server)
B. Network storage
C. Virtualization
D. Operating System
E. Runtime application
Correct Answer: DE

QUESTION 29Refer to the exhibit Customer ABC is peering with two service providers for internet access. In order to prevent the AS
100 from becoming a transit AS between ISP_1 and ISP_2. Which BGP configuration must be applied to achieve this
goal?
A. CE1# CE2# ip as-path access-list 1 permit^100$ ip as-path access-list 1 permit^100$ route-map LOCAL_ONLY
permit 10 route-map LOCAL_ONLY permit 10 match as-path 1 match as-path 1 router bgp 100 router bgp 100 neighbor
1.1.2.2 route-map LOCAL_ONLY in neighbor 1.1.1.2 route-map LOCAL_ONLY in
B. CE1# CE2# ip as-path access-list 1 permit^$ ip as-path access-list 1 permit^$ route-map LOCAL_ONLY permit 10
route-map LOCAL_ONLY permit 10 match as-path 1 match as-path 1 router bgp 100 router bgp 100 neighbor 1.1.2.2
route-map LOCAL_ONLY out neighbor 1.1.2.2 route-map LOCAL_ONLY out
C. CE1# CE2# ip as-path access-list 1 permit^$ ip as-path access-list 1 permit^$ route-map LOCAL_ONLY permit 10
route-map LOCAL_ONLY permit 10 match as-path 1 match as-path 1 router bgp 100 router bgp 100 neighbor 1.1.2.2
route-map LOCAL_ONLY out neighbor 1.1.2.2 route-map LOCAL_ONLY out
D. CE1# CE2# ip as-path access-list 1 permit^11$ ip as-path access-list 1 permit^11$ route-map LOCAL_ONLY permit
400-201 PDF Dumps | 400-201 Study Guide | 400-201 Braindumps 15 / 21https://www.leads4pass.com/400-201.html
2019 Latest lead4pass 400-201 PDF and VCE dumps Download
10 route-map LOCAL_ONLY permit 10 match as-path 1 match as-path 1 router bgp 100 router bgp 100 neighbor
1.1.2.2 route-map LOCAL_ONLY out neighbor 1.1.2.2 route-map LOCAL_ONLY out
E. CE1# CE2# ip as-path access-list 1 permit^$ ip as-path access-list 1 permit^$ route-map LOCAL_ONLY permit 10
route-map LOCAL_ONLY permit 10 match as-path 1 match as-path 1 router bgp 100 router bgp 100 neighbor 1.1.2.2
route-map LOCAL_ONLY in neighbor 1.1.1.2 route-map LOCAL_ONLY in
Correct Answer: C

QUESTION 30
In the Inter-AS VPN deployment shown in the diagram, what is the Next Hop address of MP-IBGP Update for CE4
network received at PE-R2?A. ASBR-2 50.0.0.3
B. PE-R2 50.0.0.2
C. PE-R4 50.0.0.4
D. ASBR-1 50.0.0.1
Correct Answer: A

QUESTION 31
In which way does the DS-Lite IPv6 transitioning mechanism differ from IPv6 Dual-Stack?
A. DS-Lite is a combination of tunnel and translation technologies.
B. DS-Lite is a transition technology that gives full IPv6 connectivity for IPv6 capable hosts that are on the IPv4 Internet
but have no native connection to an IPv6 network.
C. DS-Lite is an automatic tunnel where the tunnel destination is determined by the IPv4 address extracted from the
IPv6 address that starts with the prefix 2002::/16.
D. DS-Lite is a stateless tunneling mechanism with a lightweight and secure manner without requiring upgrades to
existing IPv4 access network infrastructure.
Correct Answer: A

QUESTION 32
A service provider is offering VoIP services level agreement to customers. Which configuration provides validation that
the service level agreement has been honored?
A. ipsla 999 udp-jitter 209.165.200.225 1000 codec g729a tag VoIP-SLA ipsla schedule 999 life forever start-time now
B. ipsla 999 icmp-jitter 209.165.200.225 tag VoIP-SLA ipsla schedule 999 life forerver start-time now
C. ipsla 99 icmp-jitter 209.165.200.225 tos 160 ipsla schedule 999 life forever start-time now
D. ipsla 999 udp-jitter 209.165.200.225 tos 160 ipsla schedule 99 life forever start-time now
E. ipsla 999 udp-jitter 209.165.200.225 tos 160 ipsla schedule 999 life forever start-time now
F. ipsla 999 udp-jitter 209.165.200.225 1000 codec g729a tos 160 ipsla schedule 99 life forever stat-time now
Correct Answer: F

QUESTION 33
Which two Any Transport over MPLS (AToM) traffic encapsulations require the use of a control word? (Choose two)
A. HDLC
B. ATM AAL5
C. PPP
D. Ethernet VLAN
E. Frame Relay
Correct Answer: BE
AToM Header
The AToM header is 4 bytes (control word). The control word is optional for Ethernet, PPP, HDLC, and cell relay
transport types. However, the control word is required for Frame Relay, and ATM AAL5 transport types.

QUESTION 34
Which statement about IPv6 security is true?
A. Reconnaissance attacks are easier to do in IPv6 compared to IPv4.
B. IPv6 amplification attacks can happen using IPv6 broadcast address.
C. RA-guard feature is used to block rogue RAs.
D. ICMP policies on firewalls do not need to be changed for IPv6 because ICMP is Layer 3 agnostic.
Correct Answer: C

QUESTION 35
Which command will display the MPLS label binding for IP prefix 1.1.1.0 on the router?
A. All of the above.
B. show tag-switching tdp binding 1.1.1.0/24
C. show tag-switching tdp bindings neighbor 1.1.1.0
D. A and B both will show the binding.
E. show tag-switching interface e0/0
Correct Answer: B

QUESTION 36
What Cisco IOS feature examines packets received to make sure that the source address and interface are in the
routing table and match the interface that the packet was received on?
A. MPLS Traffic Engineering
B. Receive ACL
C. Unicast RPF
D. Authentication
E. Dynamic access-lists
Correct Answer: C

QUESTION 37
Refer to the exhibit.An MPLS VPN service has been provisioned for an ABC customer. Based on the output from the VRF BGP
configuration of PE1 and PE2, which statement describes the route exchange between ABC site 1 and site 2?
A. Only CE1 will be able to install CE2 BGP updates in its BGP table.
B. Only CE2 will be able to install CE1 BGP updates in its BGP table.
C. CE1 can install the CE2 subnets in its BGP table and CE2 can install the CE1 subnets its BGP table.
D. CE1 cannot install the CE2 subnets in its BGP table and CE2 cannot install the CE1 subnets its BGP table.
E. “as-override” feature cannot be used in this scenario.
Correct Answer: A

QUESTION 38
A network engineer is responsible for provisioning LDP and IGP over the IP core network to maintain the MPLS
functionality as a day-to-day task. The IP engineer is looking for automation opportunities. Which feature allows the LDP
protocol to be automatically enabled on interfaces that run IGP on the routers?
A. MPLS LDP autoconfiguration
B. MPLS LDP discovery
C. MPLS LDP-IGP synchronization
D. MPLS LDP session protection
Correct Answer: A

QUESTION 39
Refer to the exhibit. Why is router 1 unable to ping 10.10.100.2 from vrf cust1?
A. Because Multi-VRF support is not enabled
B. Because address-family ipv4 is missing from the VRF statement
C. Because of an incorrect interface configuration
D. Because of a missing BGP configuration
Correct Answer: B

QUESTION 40
What is a limitation of implementing uRPF?
A. Domain name must be defined.
B. MPLS LDP must be enabled.
C. BGP routing protocol must be running.
D. Symmetrical routing is required.
E. Named access-lists must be configured.
Correct Answer: D

Share 40 Authentic Cisco CCIE Service Provider 400-201 Exam questions and answers for free to help you improve your skills and master some of the knowledge you cover! If you want to pass the exam easily, please select the full 400-201 exam dumps: https://www.leads4pass.com/400-201.html (Total questions:711 Q&A) ->> updated throughout the year! Make sure you pass the exam easily!

[PDF] Free Cisco 400-201 pdf dumps download from Google Drive: https://drive.google.com/open?id=10gSuea6zGj_2GCx8Ewnkbi8CxRUcURPR

[PDF] Free Full Cisco pdf dumps download from Google Drive: https://drive.google.com/open?id=1CMo2G21nPLf7ZmI-3_hBpr4GDKRQWrGx

Lead4pass Promo Code 12% Off

We share more practical and effective exam dumps (Cisco,Microsoft,Oracle,Citrix,Comptia…) The latest comptia network n10-006 exam dumps help you improve your skills