Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1:

  DRAG DROP

  Drag and drop the Cisco SD-Access solution areas from the left onto the protocols they use on the right.

  Select and Place:

  

  

• Question 2:

  Which method should an engineer use to deal with a long-standing contention issue between any two VMs on the same host?

  A. Adjust the resource reservation limits
  B. Live migrate the VM to another host
  C. Reset the VM
  D. Reset the host
  A. Adjust the resource reservation limits

• Question 3:

  An engineer is configuring local web authentication on a WLAN. The engineer chooses the Authentication radio button under the Layer 3 Security options for Web Policy.

  Which device presents the web authentication for the WLAN?

  A. ISE server
  B. local WLC
  C. RADIUS server
  D. anchor WLC
  B. local WLC

  ---

  Explanation

  "The next step is to configure the WLC for the Internal web authentication. Internal web authentication is the defaultweb authentication type on WLCs." In step 4 of the link above, we will configure Security as described in this question.

  Therefore we can deduce thisconfiguration is for Internal web authentication.

  This paragraph was taken from the link

  https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/69340-web-auth-config.html#c5:

• Question 4:

  Which configuration enables a Cisco router lo send information to a TACACS+ server for individual EXEC commands associated with privilege level 15?

  A. Router(config)# aaa accounting commands 15 default start-stop group tacacs+
  B. Router(config)# aaa authorization exec default group tacacs+
  C. Router(config)# aaa authorization commands 15 default group tacacs+
  D. Router(config)# aaa accounting exec default start-stop group tacacs+
  B. Router(config)# aaa authorization exec default group tacacs+

• Question 5:

  Refer to the exhibit.

  

  Which command allows hosts that are connected to FastEthernet0/2 to access the Internet?

  A. ip nat inside source list 10 interface FastEthernet0/1 overload
  B. ip nat inside source list 10 interface FastEthernet0/2 overload
  C. ip nat outside source list 10 interface FastEthernet0/2 overload
  D. ip nat outside source static 209.165.200.225 10.10.10.0 overload
  A. ip nat inside source list 10 interface FastEthernet0/1 overload

• Question 6:

  Refer to exhibit.

  

  VLANs 50 and 60 exist on the trunk links between all switches All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server.

  Which command ensures that SW3 receives frames only from VLAN 50?

  A. SW1 (config)#vtp pruning
  B. SW3(config)#vtp mode transparent
  C. SW2(config)=vtp pruning
  D. SW1 (config >tp mode transparent
  A. SW1 (config)#vtp pruning

  ---

  Explanation

  SW3 does not have VLAN 60 so it should not receive traffic for this VLAN (sent from SW2). Therefore we should configure VTP Pruning on SW3 so that SW2 does not forward VLAN 60 traffic to SW3. Also notice that we need to configure pruning on SW1 (the VTP Server), not SW2.

  References:

  https://www.orbit-computer-solutions.com/vtp-pruning/

• Question 7:

  To which category does a REST API that has been developed for IP address management integration belong?

  A. southbound
  B. eastbound
  C. northbound
  D. westbound
  C. northbound

• Question 8:

  An administrator is configuring NETCONF using the following XML string.

  What must the administrator end the request with?

  

  A. </rpc>]]>]]>
  B. </rpc-reply>
  C. </rpc>
  D. <rpc message.id="9.0"><notificationoff/>
  A. </rpc>]]>]]>

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cns/configuration/xe-16/cns-xe-16-book/cns-netconf.html

• Question 9:

  Refer to the exhibit.

  

  Configure R3 according to the topology to achieve these results:

  1. Configure eBGP using Loopback0 for the router ID. Do not use the address-family command.

  2. Advertise R3's Loopback100 and Loopback200 networks to AS110 and AS120.

  A. See the explanation below
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the explanation below

  ---

  Explanation

  R3

  enable

  configure terminal

  router bgp 130

  bgp router-id 3.3.3.3

  bgp log-neighbor-changes

  neighbor 209.165.202.130 remote-as 110 neighbor 209.165.200.230 remote-as 120 network 209.165.203.1 mask 255.255.255.255 network 200.200.203.2 mask 255.255.255.255 end write memory

  Why:

  R3 belongs to AS130. Its eBGP neighbors are:

  R1 in AS110 at 209.165.202.130

  R2 in AS120 at 209.165.200.230

  R3 uses its Loopback0 address, 3.3.3.3, as the BGP router ID. R3's Loopback100 and Loopback200 addresses are advertised with /32 masks. A matching copy of the lab's initial configuration lists R3's Loopback0, Loopback100, and

  Loopback200 as 3.3.3.3/32, 209.165.203.1/32, and 200.200.203.2/32.

• Question 10:

  Which element enables communication between guest VMs within a virtualized environment?

  A. hypervisor
  B. vSwitch
  C. virtual router
  D. pNIC
  B. vSwitch

  ---

  Explanation

  Each VM is provided with a virtual NIC (vNIC) that is connected to the virtual switch. Multiple vNICs can connect to a single vSwitch, allowing VMs on a physical host to communicate with one another at layer 2 without having to go out to a physical switch.