Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1001:

  Which of the following are true statements regarding the Virtual Router Redundancy Protocol (VRRP) feature? (Choose two.)

  A. Pre-emption is enabled by default
  B. The router priority is a configurable value from 0-4095
  C. MD5 authentication is supported with VRRP
  D. Secondary IP addresses are supported with VRRP
  E. VRRP can only be used with Cisco devices
  C. MD5 authentication is supported with VRRP
  D. Secondary IP addresses are supported with VRRP

  ---

  Explanation

  in every cisco documents is referenced "Preemption" or "preempt" NOT pre-emption.

  so i go with C and D Multiple IP Addresses The virtual router can manage multiple IP addresses, including secondary IP addresses.

  Authentication VRRP message digest 5 (MD5) algorithm authentication protects against VRRP-spoofing software and uses the industry-standard MD5 algorithm for improved reliability and security.

• Question 1002:

  Which antenna type should be used for a site-to-site wireless connection?

  A. Omnidirectional
  B. dipole
  C. patch
  D. Yagi
  D. Yagi

  ---

  Explanation

  

  A Yagi antenna contains a dipole but also has reflectors and directors.

• Question 1003:

  What is a difference between OSPF and EIGRP?

  A. OSPF is an advanced distance vector protocol. EIGRP is a link-state protocol.
  B. OSPF is a hybrid routing protocol. EIGRP is a link-state routing protocol.
  C. OSPF uses the DUAL algorithm. EIGRP uses the SPF algorithm.
  D. OSPF uses an administrative distance of 110. EIGRP uses an administrative distance of 170.
  D. OSPF uses an administrative distance of 110. EIGRP uses an administrative distance of 170.

• Question 1004:

  Refer to the exhibit.

  

  Assuming all links are functional, which path does PC1 take to reach DSW1?

  A. PC1 goes from ALSW1 to DSW2 to CORE to DSW1.
  B. PC1 goes from ALSW1 to DSW2 to ALSW2 to DSW1.
  C. PC1 goes from ALSW1 to DSW2 to DSW1.
  D. PC1 goes from ALSW1 to DSW1.
  C. PC1 goes from ALSW1 to DSW2 to DSW1.

  ---

  Explanation

  Path cost from ALSW1 to root bridge(DSW2) via DSW1 is 2 + 2 = cost of 4. ( 10gbps+10Gbps) Path cost from ALSW1 to root bridge(DSW2) is 4 = cost of 4. ( 1Gbps) Therefore the patch cost equal and DSW2 is root bridge Therefore it will via Gi0/2.

  Answer is C.

  IF let say the question change the ALSW1 to DSW2 Gi0/2 interface to 100Mbps (cost=19) , the answer will be different.

  ALSW1 to DSW2 will be blocked.

  Answer will be D.

• Question 1005:

  How does Protocol Independent Multicast function?

  A. In sparse mode it establishes neighbor adjacencies and sends hello messages at 5-second intervals.
  B. It uses the multicast routing table to perform the multicast forwarding function.
  C. It uses unicast routing information to perform the multicast forwarding function.
  D. It uses broadcast routing information to perform the multicast forwarding function.
  C. It uses unicast routing information to perform the multicast forwarding function.

  ---

  Explanation

  Although PIM is called a multicast routing protocol, it actually uses the unicast routing table to perform the reverse path forwarding (RPF) check function instead of building up a completely independent multicast routing table. Unlike other routing protocols, PIM does not send and receive routing updates between routers.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/xe-16/imc-pim-xe-16-book/imc-tech-oview.html

• Question 1006:

  How does Cisco TrustSec enable more flexible access controls for dynamic networking environments and data centers?

  A. uses flexible NetFlow
  B. assigns a VLAN to the endpoint
  C. classifies traffic based on advanced application recognition
  D. classifies traffic based on the contextual identity of the endpoint rather than its IP address
  D. classifies traffic based on the contextual identity of the endpoint rather than its IP address

  ---

  Explanation

  The Cisco TrustSec solution simplifies the provisioning and management of network access control through the use of software-defined segmentation to classify network traffic and enforce policies for more flexible access controls. Traffic classification is based on endpoint identity, not IP address, enabling policy change without net-work redesign.

  https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/at_a_glance_c45-726831.pdf

• Question 1007:

  What is the result of applying this access control list?

  ip access-list extended STATEFUL 10 permit tcp any any established 20 deny ip any any

  A. TCP traffic with the URG bit set is allowed
  B. TCP traffic with the SYN bit set is allowed
  C. TCP traffic with the ACK bit set is allowed
  D. TCP traffic with the DF bit set is allowed
  C. TCP traffic with the ACK bit set is allowed

  ---

  Explanation

  The established keyword is only applicable to TCP access list entries to match TCP segments that have the ACK and/or RST control bit set (regardless of the source and destination ports), which assumes that a TCP connection has already been established in one direction only. Let's see an example below:

  

  Suppose you only want to allow the hosts inside your company to telnet to an outside server but not vice versa, you can simply use an "established" access-list like this: access-list 100 permit tcp any any established access-list 101 permit tcp any any eq telnet ! interface S0/0 ip access-group 100 in ip access-group 101 out

• Question 1008:

  What is one advantage of using a data modeling language to develop an API client application?

  A. Increase in compatibility
  B. easier feature extensibility
  C. stronger security properties
  D. lower resource requirements
  B. easier feature extensibility

• Question 1009:

  Which configuration enables a Cisco router lo send information to a TACACS+ server for individual EXEC commands associated with privilege level 15?

  A. Router(config)# aaa accounting commands 15 default start-stop group tacacs+
  B. Router(config)# aaa authorization exec default group tacacs+
  C. Router(config)# aaa authorization commands 15 default group tacacs+
  D. Router(config)# aaa accounting exec default start-stop group tacacs+
  B. Router(config)# aaa authorization exec default group tacacs+

• Question 1010:

  Refer to the exhibit. An engineer attempts to bundle interface GiO/0 into the port channel, but it does not function as expected. Which action resolves the issue?

  

  A. Configure channel-group 1 mode active on interface Gi0/0.
  B. Configure no shutdown on interface Gi0/0.
  C. Enable fast LACP PDUs on interface Gi0/0.
  D. Set LACP max-bundle to 2 on interface Port-channel1.
  D. Set LACP max-bundle to 2 on interface Port-channel1.

  ---

  Explanation

  If we only have 2 interfaces in Port-channel, then in the display you will see "hot-sby" only if the command (config-if)#lacp max-bundle is 1 is executed on Po1. If we then configure the respective port as "Active", it remains unbundled.