Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 991:

  Refer to the exhibit.

  

  An engineer must implement HSRP between two WAN routers. In the event R1 tails and then regains operational status, it must allow 100 seconds for the routing protocol to converge before preemption takes effect.

  Which configuration is required?

  A. R2interface Gi0/0standby 300 preemptstandby 300 delay sync 100
  B. R1interface Gi0/0standby 300 preemptstandby 300 delay minimum 100
  C. R1interface Gi0/0standby 300 preemptR2interface Gi0/0standby 300 delay sync 100
  D. R1interface Gi0/0standby 300 preemptR2interface Gi0/0standby 300 delay minimum 100
  B. R1interface Gi0/0standby 300 preemptstandby 300 delay minimum 100

• Question 992:

  A corporate policy mandates that a certificate-based authentication system must be implemented on the wireless infrastructure. All corporate clients will contain a certificate that will be used in conjunction with ISE and user credentials to perform authentication before the clients are allowed to connect to the corporate Wi-Fi.

  Which authentication key option must be selected to ensure that this authentication can take place?

  A. none
  B. PSK
  C. 802.1x
  D. CCKM
  C. 802.1x

• Question 993:

  How are map-register messages sent in a LISP deployment?

  A. egress tunnel routers to map resolvers to determine the appropriate egress tunnel router
  B. ingress tunnel routers to map servers to determine the appropriate egress tunnel router
  C. egress tunnel routers to map servers to determine the appropriate egress tunnel router
  D. ingress tunnel routers to map resolvers to determine the appropnate egress tunnel router
  C. egress tunnel routers to map servers to determine the appropriate egress tunnel router

  ---

  Explanation

  During operation, an Egress Tunnel Router (ETR) sends periodic Map-Register messages to all its configured map servers.

• Question 994:

  In a Cisco SD-Access solution, what is the role of a fabric edge node?

  A. to connect external Layer 3 networks to the SD-Access fabric
  B. to connect wired endpoints to the SD-Access fabric
  C. to advertise fabric IP address space to external networks
  D. to connect the fusion router to the SD-Access fabric
  B. to connect wired endpoints to the SD-Access fabric

  ---

  Explanation

  Refer to https://www.google.com/url?sa=tandrct=jandq=andesrc=sandsource=webandcd=andcad=rjaanduact=8andved=2ahUKEwjF37T9udPtAhXwo4sKHfwzDKoQFjAAegQIAxACandurl=https%3A%2F%2Fwww.cisco.com%2Fc%2Fdam%2Fm%2Fhr_hr% 2Ftraining-events%2F2019%2Fcisco-connect%2Fpdf%2FVH-Cisco-SD-Access-Connecting.pdfandusg=AOvVaw26SeDD9KzfyOqR-hk_vF3q

• Question 995:

  Which method does Cisco DNA Center use to allow management of non-Cisco devices through southbound protocols?

  A. It creates device packs through the use of an SDK
  B. It uses an API call to interrogate the devices and register the returned data.
  C. It obtains MIBs from each vendor that details the APIs available.
  D. It imports available APIs for the non-Cisco device in a CSV format.
  A. It creates device packs through the use of an SDK

  ---

  Explanation

  Cisco DNA Center allows customers to manage their non-Cisco devices through the use of a Software Development Kit (SDK) that can be used to create Device Packages for third-party devices.

  https://developer.cisco.com/docs/dna-center/#!cisco-dna-center-platform-overview/multivendor-support-southbound

• Question 996:

  DRAG DROP

  Drag and drop the command snippets from the right onto the blanks in the configuration to create an EEM applet that will enable interface Loopback0 and log a message when the logging message -Interface Loopback0. changed state to administratively down" is received. Not all commands are used.

  Select and Place:

  

  

• Question 997:

  DRAG DROP

  Refer to the exhibit Drag and drop the snippets into the RESTCONF request to form the request that returns this response. Not all options are used

  

  Select and Place:

  

  

• Question 998:

  Refer to the exhibit. Reachability between servers in a network deployed with DHCPv6 is unstable. Which command must be removed from the configuration to make DHCPv6 function?

  

  A. ipv6 address 2001:0:1:4::1/64
  B. ipv6 dhcp server DHCPPOOL
  C. ipv6 nd ra suppress
  D. address prefix 2001:0:1:4::/64 lifetime infinite infinite
  C. ipv6 nd ra suppress

• Question 999:

  An engineer must configure a router to allow users to run spathic configuration commands by validating the user against the router database. Which configuration must be applied?

  A. aaa authentication network default local
  B. aaa authentication exec default local
  C. aaa authorization exec default local
  D. aaa authorization network default local
  C. aaa authorization exec default local

• Question 1000:

  Which two security features are available when implementing NTP? (Choose two )

  A. symmetric server passwords
  B. dock offset authentication
  C. broadcast association mode
  D. encrypted authentication mechanism
  E. access list-based restriction scheme
  D. encrypted authentication mechanism
  E. access list-based restriction scheme

  ---

  Explanation

  The time kept on a machine is a critical resource and it is strongly recommend that you use the security features of NTP to avoid the accidental or malicious setting of incorrect time. The two security features available are an access list-based restriction scheme and an encrypted authentication mechanism.

  https://www.cisco.com/c/en/us/support/docs/availability/high-availability/19643-ntpm.html