Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 1011:

  Which protocol is used to encrypt control plane traffic between SD-WAN controllers and SDWAN endpoints?

  A. DTLS

  B. IPsec

  C. PGP

  D. HTTPS

  Correct Answer: A

  DTLS protocol is used to encrypt control plane traffic between vSmart (controllers) and other SD-WAN endpoints.

• Question 1012:

  Refer to the exhibit.

  

  Which Python code snippet prints the descriptions of disabled interfaces only?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  != is the "Is not true operator" think along these lines and B is clarly correct.

• Question 1013:

  An engineer must create an EEM applet that sends a syslog message in the event a change happens in the network due to trouble with an OSPF process. Which action should the engineer use?

  

  A. action 1 syslog msg "OSPF ROUTING ERROR"

  B. action 1 syslog send "OSPF ROUTING ERROR"

  C. action 1 syslog pattern "OSPF ROUTING ERROR"

  D. action 1syslog write "OSPF ROUTING ERROR"

  Correct Answer: A

  Only these keywords are available:

  Router1(config-applet)#action 1 syslog facility Facility string filter Filter destination of syslog message msg Syslog message priority Priority of syslog message

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/command/eem-cr-book/eem-cr-a2.html

• Question 1014:

  Which protocol infers that a YANG data model is being used?

  A. SNMP

  B. NX-API

  C. REST

  D. RESTCONF

  Correct Answer: D

  YANG (Yet another Next Generation) is a data modeling language for the definition of data sent over network management protocols such as the NETCONF and RESTCONF.

• Question 1015:

  Refer to the exhibit. The trunk does not work over the back-to-back link between Switch1 interface Giq1/0/20 and Switch2 interface Gig1/0/20. Which configuration fixes the problem?

  

  A. Switch 1(config)#interface gig1/0/20 Switch 1(config-if)#switchport mode dynamic auto

  B. Switch(config)#interface gig1/0/20 Switch(config-if)#switchport mode dynamic desirable

  C. Switch 1(config)#interface gig1/0/20 Switch1(config-if)#switchport trunk native vlan 1 Switch2(config)#interface gig1/0/20 Switch2(config-if)#switchport trunk native vlan 1

  D. Switch(config)#interface gig1/0/20 Switch2(config-if)#switchport mode dynamic auto

  Correct Answer: B

• Question 1016:

  What is one primary REST security design principle?

  A. fail-safe defaults

  B. password hash

  C. adding a timestamp in requests

  D. OAuth

  Correct Answer: A

  https://yurisubach.com/2017/04/04/restful-api-security-principles/

  "Fail-safe defaultsAccess to any resource (like API endpoint) should be denied by default. Access granted only in case of specific permission.

• Question 1017:

  What is the wireless received signal strength indicator?

  A. The value given to the strength of the wireless signal received compared to the noise level

  B. The value of how strong the wireless signal Is leaving the antenna using transmit power, cable loss, and antenna gain

  C. The value of how much wireless signal is lost over a defined amount of distance

  D. The value of how strong a tireless signal is receded, measured in dBm

  Correct Answer: D

  RSSI, or "Received Signal Strength Indicator," is a measurement of how well your device can hear a signal from an access point or router. It's a value that is useful for determining if you have enough signal to get a good wireless connection. This value is measured in decibels (dBm) from 0 (zero) to -120 (minus 120). The closer to 0 (zero) the stronger the signal is which means it's better, typically voice networks require a - 65db or better signal level while a data network needs 80db or better.

• Question 1018:

  What is the structure of a JSON web token?

  A. three parts separated by dots: header payload, and signature

  B. header and payload

  C. three parts separated by dots: version header and signature

  D. payload and signature

  Correct Answer: A

  JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is

  digitally signed. JWTs can be signed using a secret (with the HMAC algorithm) or a public/private key pair using RSA or ECDSA. JSON Web Tokens are composed of three parts, separated by a dot (.): Header, Payload, Signature. Therefore,

  a JWT typically looks like the following:

  xxxxx.yyyyy.zzzzz

  The header typically consists of two parts: the type of the token, which is JWT, and the signing algorithm being used, such as HMAC SHA256 or RSA. The second part of the token is the payload, which contains the claims. Claims are

  statements about an entity (typically, the user) and additional data. To create the signature part you have to take the encoded header, the encoded payload, a secret, the algorithm specified in the header, and sign that.

  Reference: https://jwt.io/introduction/

• Question 1019:

  A network monitoring system uses SNMP polling to record the statistics of router interfaces The SNMP queries work as expected until an engineer installs a new interface and reloads the router After this action, all SNMP queries for the router fail What is the cause of this issue?

  A. The SNMP community is configured incorrectly

  B. The SNMP interface index changed after reboot.

  C. The SNMP server traps are disabled for the interface index

  D. The SNMP server traps are disabled for the link state.

  Correct Answer: B

  In order to tell IOS to keep ifindex value unchanged even after reboot, use the "snmp-server ifindex persist" command

• Question 1020:

  An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Which script must the engineer apply?

  A. event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 6, Nbr 1.1.1.1 on Serial0/0 from FULL to DOWN" action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf event" action 3.0 cli command "debug ip ospf adj" action 4.0 syslog priority informational msg "ENABLE_OSPF_DEBUG"

  B. event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 5, Nbr 1.1.1.1 on Serial0/0 from LOADING to FULL" action 1.0 cli command "debug ip ospf event" action 2.0 cli command "debug ip ospf adj" action 3.0 syslog priority informational msg "ENABLE_OSPF_DEBUG"

  C. event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-1-ADJCHG: Process 5, Nbr 1.1.1.1 on Serial0/0 from FULL to DOWN" action 1.0 cli command "debug ip ospf event" action 2.0 cli command "debug ip ospf adj" action 3.0 syslog priority informational msg "ENABLE_OSPF_DEBUG"

  D. event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 5, Nbr 1.1.1.1 on Serial0/0 from LOADING to FULL" action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf event" action 3.0 cli command "debug ip ospf adj" action 4.0 syslog priority informational msg "ENABLE_OSPF_DEBUG"

  Correct Answer: A