Cisco 400-101 : CCIE Routing and Switching Written Exam

Exam Code: 400-101

Exam Name: CCIE Routing and Switching Written Exam

Updated: Aug 11, 2026

Q & A: 150 Questions and Answers

400-101 Free Demo download

PDF Version Demo PC Test Engine Online Test Engine

Cisco 400-101 Exam Topics:

Section	Weight	Objectives
Layer 2 Technologies	13%	1 LAN switching technologies a)Implement and troubleshoot switch administration a)[i] Managing MAC address table a)[ii] errdisable recovery a)[iii] L2 MTU b)Implement and troubleshoot layer 2 protocols b)[i] CDP, LLDP b)[ii] UDLD c)Implement and troubleshoot VLAN c)[i] Access ports c)[ii] VLAN database c)[iii] Normal, extended VLAN, voice VLAN d)Implement and troubleshoot trunking d)[i] VTPv1, VTPv2, VTPv3, VTP pruning d)[ii] dot1Q d)[iii] Native VLAN d)[iv] Manual pruning e)Implement and troubleshoot EtherChannel e)[i] LACP, PAgP, manual e)[ii] Layer 2, layer 3 e)[iii] Load-balancing e)[iv] Etherchannel misconfiguration guard f)Implement and troubleshoot spanning-tree f)[i] PVST+/RPVST+/MST f)[ii] Switch priority, port priority, path cost, STP timers f)[iii] port fast, BPDUguard, BPDUfilter f)[iv] loopguard, rootguard g)Implement and troubleshoot other LAN switching technologies g)[i] SPAN, RSPAN, ERSPAN h)Describe chassis virtualization and aggregation technologies h)[i] Multichassis h)[ii] VSS concepts h)[iii] Alternative to STP h)[iv] Stackwise h)[v] Excluding specific platform implementation i)Describe spanning-tree concepts i)[i] Compatibility between MST and RSTP i)[ii] STP dispute, STP bridge assurance 2 Layer 2 multicast a)Implement and troubleshoot IGMP a)[i] IGMPv1, IGMPv2, IGMPv3 a)[ii] IGMP snooping a)[iii] IGMP querier a)[iv] IGMP filter a)[v] IGMP proxy b)Explain MLD c)Explain PIM snooping 3 Layer 2 WAN circuit technologies a)Implement and troubleshoot HDLC b)Implement and troubleshoot PPP b)[i] Authentication [PAP, CHAP] b)[ii] PPPoE b)[iii] MLPPP c)Describe WAN rate-based ethernet circuits c)[i] Metro and WAN Ethernet topologies c)[ii] Use of rate-limited WAN ethernet services
VPN Technologies	13%	1 Tunneling a)Implement and troubleshoot MPLS operations a)[i] Label stack, LSR, LSP a)[ii] LDP a)[iii] MPLS ping, MPLS traceroute b)Implement and troubleshoot basic MPLS L3VPN b)[i] L3VPN, CE, PE, P b)[ii] Extranet [route leaking] c)Implement and troubleshoot encapsulation c)[i] GRE c)[ii] Dynamic GRE c)[iii] LISP encapsulation principles supporting EIGRP OTP d)Implement and troubleshoot DMVPN [single hub] d)[i] NHRP d)[ii] DMVPN with IPsec using preshared key d)[iii] QoS profile d)[iv] Pre-classify e)Describe IPv6 tunneling techniques e)[i] 6in4, 6to4 e)[ii] ISATAP e)[iii] 6RD e)[iv] 6PE/6VPE f)Describe basic layer 2 VPN —wireline f)[i] L2TPv3 general principals f)[ii] ATOM general principals g)Describe basic L2VPN — LAN services g)[i] MPLS-VPLS general principals g)[ii] OTV general principals 2 Encryption a)Implement and troubleshoot IPsec with preshared key a)[i] IPv4 site to IPv4 site a)[ii] IPv6 in IPv4 tunnels a)[iii] Virtual tunneling Interface [VTI] b)Describe GET VPN
Evolving Technologies v1.1	10%	1 Cloud a)Compare and contrast public, private, hybrid, and multicloud design considerations a)[i] Infrastructure, platform, and software as a service (XaaS) a)[ii] Performance, scalability, and high availability a)[iii] Security implications, compliance, and policy a)[iv] Workload migration b)Describe cloud infrastructure and operations b)[i] Compute virtualization (containers and virtual machines) b)[ii] Connectivity (virtual switches, SD-WAN and SD-Access) b)[iii] Virtualization functions (NFVi, VNF, and L4/L6) b)[iv] Automation and orchestration tools (CloudCenter, Cisco DNA-center, and Kubernetes) 2 Network programmability (SDN) a)Describe architectural and operational considerations for a programmable network a)[i] Data models and structures (YANG, JSON and XML) a)[i] Device programmability (gRPC, NETCONF and RESTCONF) a)[ii] Controller based network design (policy driven configuration and northbound/ southbound APIs) a)[iii] Configuration management tools (agent and agentless) and version control systems (Git and SVN) 3 Internet of things (IoT) a)Describe architectural framework and deployment considerations for IoT a)[i] IoT technology stack (IoT Network Hierarchy, data acquisition and flow) a)[ii] IoT standards and protocols (characteristics within IT and OT environment) a)[iii] IoT security (network segmentation, device profiling, and secure remote)
Network Principles	10%	1 Network theory a)Describe basic software architecture differences between IOS and IOS XE a) [i] Control plane and Forwarding plane a)[ii] Impact to troubleshooting and performances a)[iii] Excluding specific platform's architecture b)Identify Cisco express forwarding concepts b)[i] RIB, FIB, LFIB, Adjacency table b)[ii] Load balancing Hash b)[iii] Polarization concept and avoidance c)Explain general network challenges c)[i] Unicast flooding c)[ii] Out of order packets c)[iii] Asymmetric routing c)[iv] Impact of micro burst d)Explain IP operations d)[i] ICMP unreachable, redirect d)[ii] IPv4 options, IPv6 extension headers d)[iii] IPv4 and IPv6 fragmentation d)[iv] TTL d)[v] IP MTU e)Explain TCP operations e)[i] IPv4 and IPv6 PMTU e)[ii] MSS e)[iii] Latency e)[iv] Windowing e)[v] Bandwidth delay product e)[vi] Global synchronization e)[vii] Options f)Explain UDP operations f)[i] Starvation f)[ii] Latency f)[iii] RTP/RTCP concepts 2 Network implementation and operation a)Evaluate proposed changes to a network a)[i] Changes to routing protocol parameters a)[ii] Migrate parts of a network to IPv6 a)[iii] Routing protocol migration a)[iv] Adding multicast support a)[v] Migrate spanning tree protocol a)[vi] Evaluate impact of new traffic on existing QoS design 3 Network troubleshooting a)Use IOS troubleshooting tools a)[i] debug, conditional debug a)[ii] ping, traceroute with extended options a)[iii] Embedded packet capture a)[iv] Performance monitor b)Apply troubleshooting methodologies b)[i] Diagnose the root cause of networking issue [analyze symptoms, identify and describe root cause] b)[ii] Design and implement valid solutions according to constraints b)[iii] Verify and monitor resolution c)Interpret packet capture c)[i] Using Wireshark trace analyzer c)[ii] Using IOS embedded packet capture
Infrastructure Services	12%	1 System management a)Implement and troubleshoot device management a)[i] Console and VTY a)[ii] telnet, HTTP, HTTPS, SSH, SCP a)[iii] [T]FTP b)Implement and troubleshoot SNMP b)[i] v2c, v3 c)Implement and troubleshoot logging c)[i] Local logging, syslog, debug, conditional debug c)[ii] Timestamp 2 Quality of service a)Implement and troubleshoot end-to-end QoS a)[i] CoS and DSCP mapping b)Implement, optimize and troubleshoot QoS using MQC b)[i] Classification b)[ii] Network based application recognition [NBAR] b)[iii] Marking using IP precedence, DSCP, CoS, ECN b)[iv] Policing, shaping b)[v] Congestion management [queuing] b)[vi] HQoS, sub-rate ethernet link b)[vii] Congestion avoidance [WRED] c)Describe layer 2 QoS c)[i] Queuing, scheduling c)[ii] Classification, marking 3 Network services a)Implement and troubleshoot first-hop redundancy protocols a)[i] HSRP, GLBP, VRRP a)[ii] Redundancy using IPv6 RS/RA b)Implement and troubleshoot network time protocol b)[i] NTP master, client, version 3, version 4 b)[ii] NTP Authentication c)Implement and troubleshoot IPv4 and IPv6 DHCP c)[i] DHCP client, IOS DHCP server, DHCP relay c)[ii] DHCP options c)[iii] DHCP protocol operations c)[iv] SLAAC/DHCPv6 interaction c)[v] Stateful, stateless DHCPv6 c)[vi] DHCPv6 prefix delegation d)Implement and troubleshoot IPv4 network address translation d)[i] Static NAT, dynamic NAT, policy-based NAT, PAT d)[ii] NAT ALG e)Describe IPv6 network address translation e)[i] NAT64 e)[ii] NPTv6 4 Network optimization a)Implement and troubleshoot IP SLA a)[i] ICMP, UDP, Jitter, VoIP b)Implement and troubleshoot tracking object b)[i] Tracking object, tracking list b)[ii] Tracking different entities [e.g. interfaces, routes, IPSLA, and such] c) Implement and troubleshoot netflow c)[i] Netflow v5, v9 c)[ii] Local retrieval c)[iii] Export [configuration only] d)Implement and troubleshoot embedded event manager d)[i] EEM policy using applet e)Identify performance routing [PfR] e)[i] Basic load balancing e)[ii] Voice optimization
Infrastructure Security	5%	1 Device security a)Implement and troubleshoot IOS AAA using local database b)Implement and troubleshoot device access control b)[i] Lines [VTY, AUX, console] b)[ii] SNMP b)[iii] Management plane protection b)[iv] Password encryption c)Implement and troubleshoot control plane policing d)Describe device security using IOS AAA with TACACS+ and RADIUS d)[i] AAA with TACACS+ and RADIUS d)[ii] Local privilege authorization fallback 2 Network security a)Implement and troubleshoot switch security features a)[i] VACL, PACL a)[ii] Stormcontrol a)[iii] DHCP snooping a)[iv] IP source-guard a)[v] Dynamic ARP inspection a)[vi] port-security a)[vii] Private VLAN b)Implement and troubleshoot router security features b)[i] IPv4 access control lists [standard, extended, time-based] b)[ii] IPv6 traffic filter b)[iii] Unicast reverse path forwarding c)Implement and troubleshoot IPv6 first hop security c)[i] RA guard c)[ii] DHCP guard c)[iii] Binding table c)[iv] Device tracking c)[v] ND inspection/snooping c)[vii] Source guard c)[viii] PACL d)Describe 802.1x d)[i] 802.1x, EAP, RADIUS d)[ii] MAC authentication bypass
Layer 3 Technologies	37%	1 Addressing technologies a)Identify, implement and troubleshoot IPv4 addressing and subnetting a)[i] Address types, VLSM a)[ii] ARP b)Identify, implement and troubleshoot IPv6 addressing and subnetting b)[i] Unicast, multicast b)[ii] EUI-64 b)[iii] ND, RS/RA b)[iv] Autoconfig/SLAAC, temporary addresses [RFC4941] b)[v] Global prefix configuration feature b)[vi] DHCP protocol operations b)[vii] SLAAC/DHCPv6 interaction b)[viii] Stateful, stateless DHCPv6 b)[ix] DHCPv6 prefix delegation 2 Layer 3 multicast a)Troubleshoot reverse path forwarding a)[i] RPF failure a)[ii] RPF failure with tunnel interface b)Implement and troubleshoot IPv4 protocol independent multicast b)[i] PIM dense mode, sparse mode, sparse-dense mode b)[ii] Static RP, auto-RP, BSR b)[iii] BiDirectional PIM b)[iv] Source-specific multicast b)[v] Group to RP mapping b)[vi] Multicast boundary c)Implement and troubleshoot multicast source discovery protocol c)[i] Intra-domain MSDP [anycast RP] c) [ii] SA filter d)Describe IPv6 multicast d)[i] IPv6 multicast addresses d)[ii] PIMv6 3 Fundamental routing concepts a)Implement and troubleshoot static routing b)Implement and troubleshoot default routing c)Compare routing protocol types c)[i] Distance vector c)[ii] Link state c)[iii] Path vector d)Implement, optimize and troubleshoot administrative distance e)Implement and troubleshoot passive interface f)Implement and troubleshoot VRF lite g)Implement, optimize and troubleshoot filtering with any routing protocol h)Implement, optimize and troubleshoot redistribution between any routing protocol i)Implement, optimize and troubleshoot manual and auto summarization with any routing protocol j)Implement, optimize and troubleshoot policy-based routing k)Identify and troubleshoot sub-optimal routing l)Implement and troubleshoot bidirectional forwarding detection m)Implement and troubleshoot loop prevention mechanisms m)[i] Route tagging, filtering m)[ii] Split horizon m)[iii] Route poisoning n)Implement and troubleshoot routing protocol authentication n)[i] MD5 n)[ii] Key-chain n)[iii] EIGRP HMAC SHA2-256bit n)[iv] OSPFv2 SHA1-196bit n)[v] OSPFv3 IPsec authentication 4 RIP [v2 and v6] a)Implement and troubleshoot RIPv2 b)Describe RIPv6 [RIPng] 5 EIGRP [for IPv4 and IPv6] a)Describe packet types a)[i] Packet types [hello, query, update, and such] a)[ii] Route types [internal, external] b)Implement and troubleshoot neighbor relationship b)[i] Multicast, unicast EIGRP peering b)[ii] OTP point-to-point peering b)[iii] OTP route-reflector peering b)[iv] OTP multiple service providers scenario c)Implement and troubleshoot loop free path selection c)[i] RD, FD, FC, successor, feasible successor c)[ii] Classic metric c)[iii] Wide metric d)Implement and troubleshoot operations d)[i] General operations d)[ii] Topology table, update, query, active, passive d)[iii] Stuck in active d)[iv] Graceful shutdown e)Implement and troubleshoot EIGRP stub e)[i] Stub e)[ii] Leak-map f)Implement and troubleshoot load-balancing f)[i] equal-cost f)[ii] unequal-cost f)[iii] add-path g)Implement EIGRP [multi-address] named mode g)[i] Types of families g)[ii] IPv4 address-family g)[iii] IPv6 address-family h)Implement, troubleshoot and optimize EIGRP convergence and scalability h)[i] Describe fast convergence requirements h)[ii] Control query boundaries h)[iii] IP FRR/fast reroute [single hop] h)[iv] Summary leak-map h)[v] Summary metric 6 OSPF [v2 and v3] a)Describe packet types a)[i] LSA yypes [1, 2, 3, 4, 5, 7, 9] a)[ii] Route types [N1, N2, E1, E2] b)Implement and troubleshoot neighbor relationship c)Implement and troubleshoot OSPFv3 address-family support c)[i] IPv4 address-family c)[ii] IPv6 address-family d)Implement and troubleshoot network types, area types and router types d)[i] Point-to-point, multipoint, broadcast, non-broadcast d)[ii] LSA types, area type: backbone, normal, transit, stub, NSSA, totally stub d)[iii] Internal router, ABR, ASBR d)[iv] Virtual link e)Implement and troubleshoot path preference f)Implement and troubleshoot operations f)[i] General operations f)[ii] Graceful shutdown f)[iii] GTSM [Generic TTL Security Mechanism] g)Implement, troubleshoot and optimize OSPF convergence and scalability g)[i] Metrics g)[ii] LSA throttling, SPF tuning, fast hello g)[iii] LSA propagation control [area types, ISPF] g)[iv] IP FRR/fast reroute [single hop] g)[v] LFA/loop-free alternative [multi hop] g)[vi] OSPFv3 prefix suppression 7 BGP a)Describe, implement and troubleshoot peer relationships a)[i] Peer-group, template a)[ii] Active, passive a)[iii] States, timers a)[iv] Dynamic neighbors b)Implement and troubleshoot IBGP and EBGP b)[i] EBGP, IBGP b)[ii] 4 bytes AS number b)[iii] Private AS c)Explain attributes and best-path selection d)Implement, optimize and troubleshoot routing policies d)[i] Attribute manipulation d)[ii] Conditional advertisement d)[iii] Outbound route filtering d)[iv] Communities, extended communities d)[v] Multi-homing e) Implement and troubleshoot scalability e)[i] Route-reflector, cluster e)[ii] Confederations e)[iii] Aggregation, AS set f)Implement and troubleshoot multiproctocol BGP f)[i] IPv4, IPv6, VPN address-family g)Implement and troubleshoot AS path manipulations g)[i] Local AS, allow AS in, remove private AS g)[ii] Prepend g)[iii] Regexp h)Implement and troubleshoot other features h)[i] Multipath h)[ii] BGP synchronization h)[iii] Soft reconfiguration, route refresh i)Describe BGP fast convergence features i)[i] Prefix independent convergence i)[ii] Add-path i)[iii] Next-hop address tracking 8 ISIS [for IPv4 and IPv6] a)Describe basic ISIS network a)[i] Single area, single topology b)Describe neighbor relationship c)Describe network types, levels and router types c)[i] NSAP addressing c)[ii] Point-to-point, broadcast d)Describe operations e)Describe optimization features e)[i] Metrics, wide metric

Reference: https://www.cisco.com/c/en/us/training-events/training-certifications/exams/current-list/ccie-routing-switching.html

Our 400-101 exam dumps will include those topics:

Layer 3 Technologies 37%
Infrastructure Security 5%
Layer 2 Technologies 13%
Network Principles 10%
Evolving Technologies 10%
VPN Technologies 13%
Infrastructure Services 12%

For more info visit: Cisco 400-101 Exam Reference

When facing the 400-101 exam test, some choose to spend a lot of time and effort to review of knowledge to prepare for the CCIE 400-101 actual test, it is still risky for you to pass the exam. But in the fast-paced society, a rigid study method will be stumbling blocks in your way to success. So most people prefer to seek ways to relief their stress and obtain the help of external resources to easily achieve their goals. To minimize the risk, release your intense nerves, maximize the benefits from CCIE 400-101 test, it necessary for you to choose a study reference for your 400-101 exam test preparation. When choosing a reference resource for 400-101 exam test, some questions and doubts are along with that, you want to get the better exam dumps at a reasonable price. The reliability and validity for 400-101 is the most important factors you should consider. I think 400-101 valid practice cram may be a right reference tool for all of you.

Instant Download: Our system will send you the 400-101 braindumps files you purchase in mailbox in a minute after payment. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)

Reliability & validity for 100% pass

We have ever heard that someone complain that he has failed the 400-101 exam test with an invalid exam dumps and much money and time investment. Every time I heard this, I feel painful and think why they do not find Cisco 400-101 valid pass4cram earlier. The 400-101 valid exam cram has helped lots of people get their 400-101 certification successfully. When you read about this, you may doubt I exaggerate the fact, so, please visit the reviews on the site. You will find most positive reviews which may provide some help for you. You may get some detail about the 400-101 valid practice cram.

When talking about validity of the 400-101 valid pass4cram, we are proud and have lots to say. Our CCIE 400-101 exam questions & answers are accomplished by a strong and professional expert team. All members in the team have decades of rich hands on IT experience, most of them ever worked at the international IT company and participated in the research of many important programs. So the 400-101 valid pass4cram is authoritative and really deserve you to rely on. Besides, we have arrange the specialists to observe the changes in the IT industry and keep close to dynamic of the actual exam test and do adjustment and update for 400-101 valid exam cram. So the latest and update 400-101 valid pass4cram are shown for you. The validity and reliability are without a doubt.

One year free update

When you buy our 400-101 valid practice cram, a one year free update privilege is accessible for you. You will keep the latest information about 400-101 exam 400-101 exam pass4cram for one year. Thus, you can prepare the Cisco 400-101 exam test with more confident. Besides, you can share your information with your friends or exchange IT information with each other at the same time. What a wonderful thing. Now, you may wonder how to get the updated information. Do not worry, if there is any update, we will send you email as soon as possible, or you can consult us through email or customer service. Unfortunately, if you fail the 400-101 exam test, your money would not be wasted. We commit to give you full refund just need you show us your failure certification in your email.

No help, Full refund!

Pass4cram confidently stands behind all its offerings by giving Unconditional "No help, Full refund" Guarantee. Since the time our operations started we have never seen people report failure in the 400-101 exam after using our products. With this feedback we can assure you of the benefits that you will get from our products and the high probability of clearing the Cisco 400-101 exam.

We still understand the effort, time, and money you will invest in preparing for your certification exam, which makes failure in the 400-101 exam really painful and disappointing. Although we cannot reduce your pain and disappointment but we can certainly share with you the financial loss.

This means that if due to any reason you are not able to pass theactual 400-101 exam even after using our product, we will reimburse the full amount you spent on our products. you just need to mail us your score report along with your account information to address listed below within 7 days after your unqualified certificate came out.