Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 1001:

  When firewall capabilities are considered, which feature is found only in Cisco nextgeneration firewalls?

  A. malware protection

  B. stateful inspection

  C. traffic filtering

  D. active/standby high availability

  Correct Answer: A

  Malware protection IPS/IDS URL Filtering

• Question 1002:

  Refer to the exhibit. Which configuration must be applied to R1 to enable R1 to reach the server at 172.16.0.1?

  

  A. interface Ethernet0/0 ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf hotel network 172.16.0.0 255.255.0.0

  B. interface Ethernet0/0 vrf forwarding hotel ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf Hotel network 172.16.0.0 0.0.255.255 area 0

  C. interface Ethernet0/0 vrf forwarding bank ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 0.0.255.255 area 0

  D. interface Ethernet0/0 ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 0.0.255.255

  Correct Answer: C

• Question 1003:

  Refer to the exhibit.

  

  An engineer is troubleshooting an application running on Apple phones. The application Is receiving incorrect QoS markings. The systems administrator confirmed that ail configuration profiles are correct on the Apple devices. Which change on the WLC optimizes QoS for these devices?

  A. Enable Fastlane

  B. Set WMM to required

  C. Change the QoS level to Platinum

  D. Configure AVC Profiles

  Correct Answer: C

• Question 1004:

  Which action is performed by Link Management Protocol In a Cisco StackWise Virtual domain?

  A. it determines if the hardware Is compatible to form the StackWise Virtual domain.

  B. It determines which switch becomes active or standby.

  C. It discovers the StackWise domain and brings up SVL interfaces.

  D. It rejects any unidirectional link traffic forwarding.

  Correct Answer: D

  https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9000/nb-06-cat-9k-stack-wp-cte-en.pdf Page 7 Figure 6

  A: WRONG (SDP) It determines which switch becomes active or standby.

  B: WRONG (SDP) It determines if the hardware is compatible to form the StackWise Virtual domain.

  C: OK It rejects any unidirectional link traffic forwarding.

  D: WONRG ("Pre-parse configuration file") It discovers the StackWise domain and brings up SVL interfaces.

  The Link Management Protocol (LMP) is activated on each link of the StackWise Virtual link as soon as it is brought up online. The LMP performs the following functions: Verifies link integrity by establishing bidirectional traffic forwarding, and rejects any unidirectional links

• Question 1005:

  Which feature does Cisco TrustSec use to provide scalable, secure communication throughout a network?

  A. security group tag ACL assigned to each port on a switch

  B. security group tag number assigned to each port on a network

  C. security group tag number assigned to each user on a switch

  D. security group tag ACL assigned to each router on a network

  Correct Answer: C

  Cisco TrustSec uses tags to represent logical group privilege. This tag, called a Security Group Tag (SGT), is used in access policies. The SGT is understood and is used to enforce traffic by Cisco switches, routers and firewalls . Cisco TrustSec is defined in three phases: classification, propagation and enforcement. When users and devices connect to a network, the network assigns a specific security group. This process is called classification. Classification can be based on the results of the authentication or by associating the SGT with an IP, VLAN, or port-profile (-> Answer 'security group tag ACL assigned to each port on a switch' and answer 'security group tag number assigned to each user on a switch' are not correct as they say "assigned ... on a switch" only. Answer 'security group tag ACL assigned to each router on a network' is not correct either as it says "assigned to each router").

  Reference: https://www.cisco.com/c/dam/en/us/solutions/collateral/borderless-networks/trustsec/C07-730151-00_overview_of_trustSec_og.pdf

• Question 1006:

  How is a data modelling language used?

  A. To enable data to be easily structured, grouped, validated, and replicated.

  B. To represent finite and well-defined network elements that cannot be changed.

  C. To model the flows of unstructured data within the infrastructure

  D. To provide human readability to scripting languages

  Correct Answer: A

  As per the practice exam in: CCNP: ENCOR: 350-401: CCNP ENTERPRISE: Cisco Certified Network Professional: Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR)

  https://developer.cisco.com/docs/nx-os/#!the-nature-of-data-models

• Question 1007:

  Refer to the exhibit. Which command set changes the neighbor state from Idle (Admin) to Active?

  

  A. R1(config)#router bgp 65002 R1(config-router)#neighbor 192.168.50.2 activate

  B. R1(config)#router bgp 65001 R1(config-router)#neighbor 192.168.50.2 activate

  C. R1(config)#router bgp 65001 R1(config-router)#no neighbor 192.168.50.2 shutdown

  D. R1(config)#router bgp 65001 R1(config-router)#neighbor 192.168.50.2 remote-as 65001

  Correct Answer: C

  Idle (Admin) means that the BGP session is in shutdown state, so we have to turn it on with the "no neighbor 192.168.50.2 shutdown" command

• Question 1008:

  How does a Type 2 hypervisor function?

  A. It runs on a virtual server and includes its own operating system.

  B. It runs directly on a physical server and includes its own operating system.

  C. It is installed as an application on an already installed operating system.

  D. It enables other operating systems to run on it.

  Correct Answer: C

• Question 1009:

  Which encoding is used to protect a username and login with RESTful API basic authentication?

  A. Base64

  B. MD5

  C. SHA-1

  D. Type-7

  Correct Answer: A

• Question 1010:

  What is the result of this Python code? >>> (3 * 5) % 2

  A. 1

  B. 0

  C. 7

  D. 7.5

  Correct Answer: A