CCIE Data Center Written Exam

Here you have the best Cisco 400-151 practice exam questions

You have 489 total questions to study from
Each page has 5 questions, making a total of 98 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on December 14, 2025
This site is not affiliated with or endorsed by Cisco.

Question 1 of 489

Which two statements about VXLAN are true? (Choose two.)

VXLAN uses a UDP destination port of 4987.

A VTEP is a virtual or physical device that maps end devices to VXLAN segments.

Devices that terminate VXLAN tunnels are known as VTEPs.

VXLAN adds an additional 32 bytes worth of headers.

Correct Answer: B, C

Question 2 of 489

Which two security features are supported by NX-API (Choose two.)

NX-API support certificate-based authentication.

Users must have appropriate accounts to access the device through NX-API.

All communication to the device is encrypted when you use HTTPS.

All communication to the device is encrypted when you use VPN.

Correct Answer: B, C

Question 3 of 489

Which three guidelines and limitations of policy-based routing are true? (Choose three.)

A match command can refer to more than one ACL in a route map for policy-based routing.

Setting a tunnel interface or an IP address via a tunnel interface as a next hop in a police-based routing policy is not supported.

The same route map can be shared among different interfaces for policy-based routing as long as interfaces belong to the same VRF instance.

An ACL used in a policy-based routing route map cannot include a deny statement.

A policy-based routing route map can have multiple match or set statements per route-map statement.

Policy-based routing and WCCPv2 are not supported on the same interface if bank chaining is disabled.

Correct Answer: B, C, D

Question 4 of 489

Which statement about VTP bombing is true?

It occurs because of configuration mismatch on VTPv3 switches. This problem can be avoided using a confirmation management tool.

It occurs when switches with different VTP versions are connected together. This situation may occur when a new switch is plugged into a stable VTP domain. The MAC address table of the new switch overrides the MAC address table of stable switches causing interruption of service.

It occurs when a client connects to a switch and launches a distributed denial of service attack against the VTP domain. This attack is possible only ifthe client knows the VTP password.

It occurs when a server with a higher revision number and a wrong VTP database is inserted into the VTP domain. This situation may occur when a new switch plugged into a stable VTP domain. The incorrect database is propagated to the domain and the earlier stable database is overwritten. D

Correct Answer:

Question 5 of 489

Which three options are common PTP device types? (Choose three.)