Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 991:

  Which component of TCP defines the maximum packet size that a host interface is able to accept on ingress?

  A. MTU
  B. PATH MTU
  C. Window size
  D. MRU
  D. MRU

  ---

  Explanation

  A maximum transmission unit (MTU) is the largest length of a packet that can be transmitted out of an interface toward a destination. maximum receive unit (MRU) is the largest packet size that an interface can receive, so it's an ingress interface parameter.

  https://www.networkers-online.com/p/understand-mtu-and-mru-the-full-story

• Question 992:

  In a Cisco SD-Access wireless network, which device is used as an entry and exit point in and out of the fabric?

  A. fabric edge node
  B. control plane node
  C. fabric border node
  D. fabric access points
  D. fabric access points

• Question 993:

  Refer to the exhibit.

  

  An engineer must configure and validate a CoPP policy that allows the network management server to monitor router R1 via SNMP while protecting the control plane.

  Which two commands or command sets must be used? (Choose two.)

  A. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp access-list 150 permit udp 10.0.1.4 0.0.0.0 eq snmp host 10.0.1.2 class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action drop control-plane Service-policy input CoPP-policy
  B. show ip interface brief
  C. show quality-of-service-profile
  D. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action transmit control-plane Service-policy input CoPP-policy
  E. show policy-map control-plane
  D. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action transmit control-plane Service-policy input CoPP-policy
  E. show policy-map control-plane

  ---

  Explanation

  A option has this ACL 150:

  access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp access-list 150 permit udp 10.0.1.4 0.0.0.0 eq snmp host 10.0.1.2

  But D option only:

  access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp

  A option has a violation-action drop, but D option has a violation-action transmit the SNMP traffic will be never dropped

• Question 994:

  Which function does a fabric AP perform in a Cisco SD-Access deployment?

  A. It updates wireless clients' locations in the fabric
  B. It connects wireless clients to the fabric.
  C. It manages wireless clients' membership information in the fabric
  D. It configures security policies down to wireless clients in the fabric
  B. It connects wireless clients to the fabric.

• Question 995:

  Which mechanism is used to protect the confidentiality of sensitive information exchanged over REST APIs?

  A. TLS
  B. 802.1X
  C. SSH
  D. IPsec
  A. TLS

• Question 996:

  Which method does FastLocate use to collect location-based information?

  A. RFID
  B. client probing
  C. beacons
  D. data packets
  B. client probing

• Question 997:

  DRAG DROP

  Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

  Select and Place:

  

  

• Question 998:

  What are two characteristics of vManage APIs? (Choose two.)

  A. Southbound API is based on OMP and DTLS.
  B. Northbound API is RESTful, using JSON.
  C. Northbound API is based on RESTCONF and JSON.
  D. Southbound API is based on NETCONF and XML.
  E. Southbound API is based on RESTCONF and JSON.
  B. Northbound API is RESTful, using JSON.
  D. Southbound API is based on NETCONF and XML.

• Question 999:

  An engineer must configure a new WLAN that allows a user to enter a passphrase and provides forward secrecy as a security measure.

  Which Layer 2 WLAN configuration is required on the Cisco WLC?

  A. WPA2 Personal
  B. WPA3 Enterprise
  C. WPA3 Personal
  D. WPA2 Enterprise
  C. WPA3 Personal

  ---

  Explanation

  WPA3-Personal provides the following key advantages: ?Creates a shared secret that is different for each SAE authentication.

  ?Protects against brute force "dictionary" attacks and passive attacks.

  ?Provides forward secrecy.<;--- Reference:

  https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9100ax-access-points/wpa3-dep-guide-og.pdf

  WPA3 Personal provides forward secrecy.

  References:

  https://blogs.cisco.com/networking/wpa3-bringing-robust-security-for-wi-fi-networks

• Question 1000:

  Refer to the exhibit.

  

  During deployment, a network engineer notices that voice traffic is not being tagged correctly as it traverses the network.

  Which COS to DSCP map must be modified to ensure that voice traffic is treated properly?

  A. COS of 5 to DSCP 46
  B. COS of 7 to DSCP 48
  C. COS of 6 to DSCP 46
  D. COS of 3 to DSCP of 26
  A. COS of 5 to DSCP 46