Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 991:

  Refer to the exhibit. How does the router handle traffic after the CoPP policy is configured on the router?

  

  A. Traffic coming to R1 that does not match access list SNMP is dropped.

  B. Traffic coming to R1 that matches access list SNMP is policed.

  C. Traffic passing through R1 that matches access list SNMP is policed.

  D. Traffic generated by R1 that matches access list SNMP is policed.

  Correct Answer: D

  Service Policy is in the output direction. So traffic generated by router will be policed.

• Question 992:

  Which element enables communication between guest VMs within a virtualized environment?

  A. hypervisor

  B. vSwitch

  C. virtual router

  D. pNIC

  Correct Answer: B

  Each VM is provided with a virtual NIC (vNIC) that is connected to the virtual switch. Multiple vNICs can connect to a single vSwitch, allowing VMs on a physical host to communicate with one another at layer 2 without having to go out to a physical switch.

• Question 993:

  Which method is used by an AP to join HA controllers and is configured in NVRAM?

  A. stored WLC information

  B. DNS

  C. IP Helper Addresses

  D. Primary/Secondary/Tertiary/Backup

  Correct Answer: D

  (Locally Stored IPv4 or IPv6 address: If the AP was previously associated to a controller, which can be done through a manual configuration, the IP addresses of the primary, secondary, and tertiary controllers are stored in the nonvolatile memory of the AP. Also, several controllers can be grouped to form a mobility group. Upon associating to a Cisco WLC, the AP learns the IP addresses of the other members of the mobility group. This information is stored in the AP and cached even after a reboot.)

• Question 994:

  Refer to the exhibit.

  

  Which command must be applied to Routed to bring the GRE tunnel to an up/up state?

  A. Router1(config)#interface tunnel0

  B. Router1(config-if)#tunnel source GigabitEthernet0/1

  C. Router1(config-if)#tunnel mode gre multipoint

  D. Router1(config-if)#tunnel source Loopback0

  Correct Answer: D

• Question 995:

  Why would a log file contain a * next to the date?

  A. The network device was receiving NTP time when the log messages were recorded

  B. The network device was unable to reach the NTP server when the log messages were recorded.

  C. The network device is not configured to use NTP

  D. The network device is not configured to use NTP time stamps for logging.

  Correct Answer: C

  "Network device is not configured to use NTP" is the only answer which may justify the fact that system clock has not been set and thus date and time are preceded by an asterisk (*),

• Question 996:

  An engineer configures GigabitEthernet 0/1 for VRRP group 115. The router must assume the primary role when it has the highest priority in the group.

  Which command set is required to complete this task?

  interface GigabitEthernet0/1 ip address 10.10.10.2 255.255.255.0 vrrp 115 ip 10.10.10.1 vrrp 115 authentication 406630697

  A. Router(config if)# vrrp 115 track 1 decrement 100 Router(config-if)# vrrp 115 preempt

  B. Router(config-if)# vrrp 115 priority 100

  C. Router(config-if)# vrrp 115 track 1 decrement 10 Router(config-if)# vrrp 115 preempt

  D. Router(config-if)# standby 115 priority 100 Router(config-if)# standby 115 preempt

  Correct Answer: C

• Question 997:

  Refer to the exhibit.

  

  An engineer configures VRRP and issues to show commands to verify operation. What does the engineer confirm about VRRP group 1 from the output?

  A. Communication between VRRP members is encrypted using MD5

  B. If R1 reboot, R2 becomes the master virtual router until R2 reboots

  C. There is no route to 10.10.1.1/32 in R2's routing table

  D. R1 is master if 10.10.1.1/32 is in its routing table

  Correct Answer: D

  R1 is primary if 10.10.1.1/32 is in its routing table. -> because of track 20 command

• Question 998:

  Refer to the exhibit.

  

  After running the code in the exhibit. Which step reduces the amount of data that NETCONF server returns to the NETCONF client, to only the interface's configuration?

  A. Use the txml library to parse the data returned by the NETCONF server for the interface's configuration.

  B. Create an XML filter as a string and pass it to get_config() method as an argument.

  C. Create a JSON filter as a string and pass it to the get_config() method as an argument.

  D. Use the JSON library to parse the data returned by the NFTCONF server for the interface's configuration.

  Correct Answer: B

  "using the Pythonic approach with ncclient and its get_config() method, has a filter argument where you simply specify the filter type, in this case subtree, along with the XML RPC that you want to get a configuration rpc-reply." https://yang-prog-lab.ciscolive.com/pod/0/ncclient/get_config

• Question 999:

  Refer to the exhibit.

  

  Refer to the exhibit. PC-1 must access the web server on port 8080. To allow this traffic, which statement must be added to an access control list that is applied on SW2 port G0/0 in the inbound direction?

  A. permit host 172.16.0.2 host 192.168.0.5 eq 8080

  B. permit host 192.168.0.5 host 172.16.0.2 eq 8080

  C. permit host 192.168.0.5 eq 8080 host 172.16.0.2

  D. permit host 192.168.0.5 it 8080 host 172.16.0.2

  Correct Answer: C

  The inbound direction of G0/0 of SW2 only filter traffic from Web Server to PC-1 so the source IP address and port is of the Web Server.

• Question 1000:

  Refer to the exhibit. An engineer attempts to establish BGP peering between router CORP and two ISP routers. What is the root cause for the failure between CORP and ISP#2?

  

  A. Router ISP#2 is configured to use SHA-1 authentication.

  B. There is a password mismatch between router CORP and router ISP#2.

  C. Router CORP is configured with an extended access control list.

  D. MD5 authorization is configured incorrectly on router ISP#2.

  Correct Answer: B