Cisco CCIE 400-101 Routing Switching Written Practice Exam

Sample Questions:

What is the most secure way to store ISAKMP/IPSec preshared keys in Cisco IOS?

Use the service password-encryption command.

Encrypt the ISAKMP preshared key in secure type 5 format.

Encrypt the ISAKMP preshared key in secure type 7 format.

Encrypt the ISAKMP preshared key in secure type 6 format.

In GETVPN, which key is used to secure the control plane?

Traffic Encryption Key (TEK)

content encryption key (CEK)

message encryption key (MEK) Key

Encryption Key (KEK).

Which statement is true about VPLS?

MPLS is not required for VPLS to work.

VPLS carries packets as Layer 3 multicast.

VPLS has been introduced to address some shortcomings of OTV.

VPLS requires an MPLS network.

Which three roles does a key server perform when used with GETVPN? (Choose three.)

It authenticates group members.

It manages security policies.

It creates group keys.

It distributes multicast replication policies.

It distributes multicast replication keys.

It configures and routes the GDOI protocol.

The session status for an IPsec tunnel with IPv6-in-IPv4 is down with the error message IKE message from 10.10.1.1 failed its sanity check or is malformed. Which statement describes a possible cause of this error?

There is a verification failure on the IPsec packet.

The SA has expired or has been cleared.

The pre-shared keys on the peers are mismatched.

There is a failure due to a transform set mismatch.

An incorrect packet was sent by an IPsec peer.

In which two modes do IPv6-in-IPv4 tunnels operate? (Choose two.)

tunnel mode

transport mode

6to4 mode

4to6 mode

ISATAP mode

What is the new designation for the MPLS EXP (experimental) bits?

QoS bits

traffic class bits

flow bits

precedence bits