Cisco CCNP 350-401 Questions & Answers

• Question 1:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1.

  Refer to the Tasks tab to view the tasks for this lab item.

  2.

  Refer to the Topology tab to access the device console(s) and perform the tasks.

  3.

  Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4.

  All necessary preconfigurations have been applied.

  5.

  Do not change the enable password or hostname for any device.

  6.

  Save your configurations to NVRAM before moving to the next item.

  7.

  Click Next at the bottom of the screen to submit this lab and move to the next question.

  8.

  When Next is clicked, the lab closes and cannot be reopened.

  Topology Tasks

  

  Implement GLBP between DISTRO-SW1 and DISTRO-SW2 on VLAN100 for hosts connected to ACCESS-SW1 to achieve these goals:

  1.

  Configure group 30 using the virtual IP address of 192.168.1.254.

  2.

  Configure DISTRO-SW1 as the AVG using a priority value of 130.

  3.

  If DISTRO-SW1 suffers a failure and recovers, ensure that it automatically resumes the AVG role after waiting for a minimum of 35 seconds.

  

  A. See the solution below in Explanation.

  B. Place Holder

  C. Place Holder

  D. Place Holder

  Correct Answer: A

  DISTRO-SW1

  int vlan 100 glbp 30 ip 192.168.1.254 glbp 30 priority 130 glbp 30 timers 5 35 glbp 30 preempt copy run start

  DISTRO-SW2

  int vlan 100 glbp 30 ip 192.168.1.254 glbp 30 timers 5 35 glbp 30 preempt copy rum start

• Question 2:

  How does Protocol Independent Multicast function?

  A. In sparse mode it establishes neighbor adjacencies and sends hello messages at 5-second intervals.

  B. It uses the multicast routing table to perform the multicast forwarding function.

  C. It uses unicast routing information to perform the multicast forwarding function.

  D. It uses broadcast routing information to perform the multicast forwarding function.

  Correct Answer: C

  Although PIM is called a multicast routing protocol, it actually uses the unicast routing table to perform the reverse path forwarding (RPF) check function instead of building up a completely independent multicast routing table. Unlike other routing protocols, PIM does not send and receive routing updates between routers.

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/xe-16/imc-pim-xe-16-book/imc-tech-oview.html

• Question 3:

  Refer to the exhibit.

  

  Object tracking has been configured for VRRP-enabled routers Edge-01 and Edge-02 Which commands cause Edge-02 to preempt Edge-01 in the event that interface G0/0 goes down on Edge-01?

  A. Edge-01(config)#interface G0/1 Edge-01(config-if)#vrrp 10 track 10 decrement 30

  B. Edge-02(config)#interface G0/1 Edge-02(config-if)#vrrp 10 track 10 decrement 30

  C. Edge-02(config)#interface G0/1 Edge-02(config-if)#vrrp 10 track 10 decrement 10

  D. Edge-01(config)#interface G0/1 Edge-01(config-if)#vrrp 10 track 10 decrement 10

  Correct Answer: A

• Question 4:

  What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?

  A. real-time threat management to stop DDoS attacks to the core and access networks

  B. real-time awareness of users, devices and traffic on the network

  C. malware control

  D. dynamic threat control for web traffic

  Correct Answer: B

  Cisco Stealthwatch is a comprehensive, network telemetry-based, security monitoring and analytics solution that streamlines incident response through behavioral analysis; detecting denial of service attacks, anomalous behaviour, malicious

  activity and insider threats. Based on a scalable enterprise architecture, Stealthwatch provides near real-time situational awareness of all users and devices on the network.

  Reference: https://www.endace.com/cisco-stealthwatch-solution-brief.pdf

  Note: Although answer A seems to be correct but in fact, Stealthwatch does not provide real-time protection for DDoS attack. It just helps detect DDoS attack only.

  Stealthwatch aggregates observed network activity and performs behavioral and policy driven analytics against what it sees in order to surface problematic activities. While we don't position our self as a DDOS solution, we're going to

  leverage our analytical capabilities to identify a DDoS attack against an internal host using the WebUI.

  Reference: https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2016/pdf/LTRSEC-8421-LG.pdf

• Question 5:

  Refer to the exhibit.

  

  After implementing the configuration 172.20.20.2 stops replaying to ICMP echoes, but the default route fails to be removed. What is the reason for this behavior?

  A. The source-interface is configured incorrectly.

  B. The destination must be 172.30.30.2 for icmp-echo

  C. The default route is missing the track feature

  D. The threshold value is wrong.

  Correct Answer: C

  The last command should be "R1(config)#ip route 0.0.0.0 0.0.0.0 172.20.20.2 track 10".

• Question 6:

  Refer to the exhibit.

  

  Which type of antenna is shown on the radiation patterns?

  A. Dipole

  B. Yagi

  C. Patch

  D. Omnidirectional

  Correct Answer: A

• Question 7:

  Refer to the exhibit.

  

  

  Which configuration change ensures that R1 is the active gateway whenever it is in a functional state for the 172.30.110.0724 network?

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 8:

  Refer to the exhibit.

  

  How to make DSW1 the primary root for VLAN 10? (Choose two)

  A. DWS1(config-if)#spanning-tree port-priority 0

  B. DSW2(config-if)#spanning-tree port-priority 16

  C. DSW1(config-if)#interface gi1/3

  D. DSW2(config-if)#interface gi1/3

  E. DSW2(config-if)#spanning-tree port-priority 128

  Correct Answer: AC

  Maybe something was wrong with this question but we still have to choose the best answers.

• Question 9:

  Which two actions, when applied in the LAN network segment, will facilitate Layer 3 CAPWAP discovery for lightweight AP? (Choose two.)

  A. Utilize DHCP option 17.

  B. Configure WLC IP address on LAN switch.

  C. Utilize DHCP option 43.

  D. Configure an ip helper-address on the router interface

  E. Enable port security on the switch port

  Correct Answer: CD

  In a Cisco Unified Wireless network, the LAPs must first discover and join a WLC before they can service wireless clients.

  However, this presents a question: how did the LAPs find the management IP address of the controller when it is on a different subnet? If you do not tell the LAP where the controller is via DHCP option 43, DNS resolution of "Cisco-capwapcontroller.local_domain", or statically configure it, the LAP does not know where in the network to find the management interface of the controller.

  Reference: https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/119286-lap-notjoin-wlc-tshoot.html

• Question 10:

  What is YANG used for?

  A. scraping data via CLI

  B. processing SNMP read-only polls

  C. describing data models

  D. providing a transport for network configuration data between client and server

  Correct Answer: C

  YANG is used to model each protocol based on RFC 6020.

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/datamodels/configuration/xe-16/data-models-xe-16-book/yang-netconf.html