Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1001:

  What is a characteristic of Cisco DNA Northbound APIs?

  A. They simplify the management of network infrastructure devices.
  B. They enable automation of network infrastructure based on intent.
  C. They utilize RESTCONF.
  D. They utilize multivendor support APIs.
  C. They utilize RESTCONF.

• Question 1002:

  Which technique is used to protect end user devices and data from unknown file behavior?

  A. crypto file ransomware protection using a file hash calculation
  B. file retrospection using continuous scan and analyses
  C. file sandboxing using a protected environment to analyze and simulate the behavior of unknown files
  D. phishing file quarantine using an internal environment to store attached files
  C. file sandboxing using a protected environment to analyze and simulate the behavior of unknown files

• Question 1003:

  How do OSPF and EIGRP compare?

  A. Both OSPF and EIGRP use the concept of areas.
  B. OSPF and EIGRP use the same administrative distance.
  C. EIGRP shows successor and feasible successor routes, and OSPF shows all known routes.
  D. EIGRP shows all known routes, and OSPF shows successor and feasible successor routes.
  C. EIGRP shows successor and feasible successor routes, and OSPF shows all known routes.

• Question 1004:

  Refer to the exhibit.

  

  Which configuration enables fallback to local authentication and authorization when no TACACS+ server is available?

  A. Router(config)# aaa authentication login default local Router(config)# aaa authorization exec default local
  B. Router(config)# aaa authentication login default group tacacs+ local Router(config)# aaa authorization exec default group tacacs+ local
  C. Router(config)# aaa fallback local
  D. Router(config)# aaa authentication login FALLBACK local Router(config)# aaa authorization exec FALLBACK local
  B. Router(config)# aaa authentication login default group tacacs+ local Router(config)# aaa authorization exec default group tacacs+ local

• Question 1005:

  Refer to the exhibit.

  

  An engineer is creating a Pytnon script to fetch the BGP configuration from a device using RESTCONF.

  What does the output Indicate?

  A. The BGP data resource identifier in the URL Incorrect.
  B. There is no BGP process running on the device
  C. RESTCONF is not enabled on the device.
  A. The BGP data resource identifier in the URL Incorrect.

• Question 1006:

  DRAG DROP

  Drag and drop the REST API authentication method from the left to the description on the right.

  Select and Place:

  

  

  ---

  HTTP basic authentication : username and password in an encoded string token-based authentication : API-dependent secret secure vault : public API resource OAuth : authorization through identity provider

  When Secure Vault is not in use, all information stored in its container is encrypted.

  When a user wants to use the files and notes stored within the app, they have to first decrypt the database. This happens by filling in a previously determined Security Lock - which could be a PIN or a password of the user's choosing.When a user leaves the app, it automatically encrypts everything again. This way all data stored in Secure Vault is decrypted only while a user is actively using the app. In all other instances, it remains locked to any attacker, malware or spyware trying to access the data.

  How token-based authentication works: Users log in to a system and - once authenticated - are provided with a token to access other services without having to enter their username and password multiple times. In short, token-based authentication adds a second layer of security to application, network, or service access.

  OAuth is an open standard for authorization used by many APIs and modern applications. The simplest example of OAuth is when you go to log onto a website and it offers one or more opportunities to log on using another website's/service's logon. You then click on the button linked to the other website, the other website authenticates you, and the website you were originally connecting to logs you on itself afterward using permission gained from the second website.

• Question 1007:

  Refer to the exhibit.

  

  Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  Explanation

  With BGP, we must advertise the correct network and subnet mask in the "network" command (in this case network 10.1.1.0/24 on R1 and network 10.2.2.0/24 on R2). BGP is very strict in the routing advertisements. In other words, BGP only advertises the network which exists exactly in the routing table. In this case, if you put the command "network x.x.0.0 mask 255.255.0.0" or "network x.0.0.0 mask 255.0.0.0" or "network x.x.x.x mask 255.255.255.255" then BGP will not advertise anything.

  It is easy to establish eBGP neighborship via the direct link. But let's see what are required when we want to establish eBGP neighborship via their loopback interfaces. We will need two commands: + the command "neighbor 10.1.1.1 ebgp-multihop 2" on R1 and "neighbor 10.2.2.2 ebgpmultihop 2" on R1. This command increases the TTL value to 2 so that BGP updates can reach the BGP neighbor which is two hops away.

  + Answer `R1 (config) #router bgp 1

  R1 (config-router) #neighbor 192.168.10.2 remote-as 2

  R1 (config-router) #network 10.1.1.0 mask 255.255.255.0 R2 (config) #router bgp 2

  R2 (config-router) #neighbor 192.168.10.1 remote-as 1

  R2 (config-router) #network 10.2.2.0 mask 255.255.255.0 Quick Wireless Summary

  Cisco Access Points (APs) can operate in one of two modes: autonomous or lightweight +

  Autonomous: self-sufficient and standalone. Used for small wireless networks. +

  Lightweight: A Cisco lightweight AP (LAP) has to join a Wireless LAN Controller (WLC) to function.

  LAP and WLC communicate with each other via a logical pair of CAPWAP tunnels. ?Control and Provisioning for Wireless Access Point (CAPWAP) is an IETF standard for control messaging for setup, authentication and operations between APs and WLCs. CAPWAP is similar to LWAPP except the following differences: +CAPWAP uses Datagram Transport Layer Security (DTLS) for authentication and encryption to protect traffic between APs and controllers. LWAPP uses AES. + CAPWAP has a dynamic maximum transmission unit (MTU) discovery mechanism. + CAPWAP runs on UDP ports 5246 (control messages) and 5247 (data messages) An LAP operates in one of six different modes: + Local mode (default mode): measures noise floor and interference, and scans for intrusion detection (IDS) events every 180 seconds on unused channels + FlexConnect, formerly known as Hybrid Remote Edge AP (H-REAP), mode: allows data traffic to be switched locally and not go back to the controller. The FlexConnect AP can perform standalone client authentication and switch VLAN traffic locally even when it's disconnected to the WLC (Local Switched). FlexConnect AP can also tunnel (via CAPWAP) both user wireless data and control traffic to a centralized WLC (Central Switched).

  + Monitor mode: does not handle data traffic between clients and the infrastructure. It acts like a sensor for location-based services (LBS), rogue AP detection, and IDS + Rogue detector mode: monitor for rogue APs. It does not handle data at all. + Sniffer mode: run as a sniffer and captures and forwards all the packets on a particular channel to a remote machine where you can use protocol analysis tool (Wireshark, Airopeek, etc) to review the packets and diagnose issues. Strictly used for troubleshooting purposes. + Bridge mode: bridge together the WLAN and the wired infrastructure together. Mobility Express is the ability to use an access point (AP) as a controller instead of a real WLAN controller. But this solution is only suitable for small to midsize, or multi-site branch locations where you might not want to invest in a dedicated WLC. A Mobility Express WLC can support up to 100 Aps

• Question 1008:

  An engineer reviews a router's logs and discovers the following entry. What is the event's logging severity level?

  Router# *Jan 01 38:24:04.401: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up

  A. notification
  B. error
  C. informational
  D. warning
  B. error

  ---

  Explanation

  Syslog levels are listed below:

  

  Number 3 in %LINK-3-UPDOWN is the severity level of this message so in this case it is errors.

• Question 1009:

  How does the RIB differ from the FIB?

  A. The RIB is used to create network topologies and routing tables. The FIB is a list of routes to particular network destinations.
  B. The FIB includes many routes a single destination. The RIB is the best route to a single destination.
  C. The RIB includes many routes to the same destination prefix. The FIB contains only the best route
  D. The FIB maintains network topologies and routing tables. The RIB is a Iist of routes to particular network destinations.
  C. The RIB includes many routes to the same destination prefix. The FIB contains only the best route

  ---

  Explanation

  RIBs maintain the network topologies and routing tables for each protocol. This would include many routes going to the same destination prefix. FIBs are the best route from the possibly many protocols in the RIBs pushed down to fast forwarding lookup memory for the best path(s).

• Question 1010:

  How do the RIB and the FIB differ?

  A. FIB contains routes learned through a dynamic routing protocol, and the RIB contains routes that are static or directly connected.
  B. RIB contains the interface for a destination, and the FIB contains the next hop information.
  C. FIB is derived from the control plane, and the RIB is derived from the data plane.
  D. RIB is derived from the control plane, and the FIB is derived from the RIB.
  D. RIB is derived from the control plane, and the FIB is derived from the RIB.