Cisco 400-201 Exam Question Answers

Question: 21

A Corporate_ABC located in the US acquired Company_XYZ, which is located in Europe.
Both companies are connected to the internet using their local ISP. A management VLAN must be built using subnet 192.168.1.0/24 across the ABC and XYZ.Which solution meets this requirement?

A. VPLS
B. AToM
C. Layer 3 VPN
D. L2TPv3

Answer: D

Cisco Updates Router Firmware To Prevent Remote Code Execution And Denial Of Service Attacks

On Wednesday, Cisco Systems released 20 security updates, specifically by fixing a critical vulnerability in two router products that could result in remote code execution or a denial of service condition.

Referred to as CVE-2018-0125, the critical error is found in the Cisco RVS2 VPN2 + Wireless-N VPN Router Web Interface and the VDSL2 RV134W VPN-AC Wireless Routers. Firmware version 1.0.1.11 fixes this vulnerability.

The error comes from "incomplete validation of entries at the user-controlled entry in an HTTP request to the target device", warns Cisco in a warning, and "could allow an unauthenticated remote attacker to execute arbitrary code and take full control of an affected system. ", including issuing commands with root privileges. In addition, attackers can also trigger the aforementioned (DoS) condition by causing an affected system to reboot.

Cisco has also released patches for three high-severity and 15 medium-severity failures, while updating a warning for a critical vulnerability detected in its adaptive security appliance.

Cisco 400-201 Study Material

Question: 19

What is the PPMP label used for?

A. for the ingress replication model with BIDIR-PIM in an overlay model
B. only for the inter-AS mVPN models that use mLDP
C. for the partitioned mVPN model with PIM signaling in an overlay model
D. only for unicast over MPLS VPN
E. for all the default MDT and mVPN models

Answer: D

Question: 20

Based on the following configuration:
vrf definition ABC
 rd 10.0.0.1:1000
 !
 address-family ipv4
 route-target export 1:1
 route-target import 1:1
 mdt default 232.0.0.1
Which two statements about multicast VPN configuration are true? (Choose two.)

A. The multicast tree is created based only on the existence of active sources or receivers behind PEs in the ABC VRF.
B. The service provider core network is required to support SSM.
C. Multicast needs to be enabled only on ABC VRF and is tunneled to participating PE routers in the ABC VRF.
D. The SP core network is required in order to enable the BGP Multicast Address Family on all peering.
E. Multicast is required for the core network in addition to the ABC VRF.
F. The multicast tree exists regardless of whether there are any active sources or receivers in the ABC VRF.


Answer: EF