Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1031:

  What does a router do when configured with the default DNS lookup settings, and a URL is entered on the CLI?

  A. initiates a ping request to the URL
  B. prompts the user to specify the desired IP address
  C. continuously attempts to resolve the URL until the command is cancelled
  D. sends a broadcast message in an attempt to resolve the URL
  D. sends a broadcast message in an attempt to resolve the URL

• Question 1032:

  Refer to the exhibit.

  

  Two indirectly connected routers fail to form an OSPF neighborship.

  What is the cause of the issue?

  A. failing hello packets between the two routers
  B. DR/BDR selection dispute
  C. MTU mismatch
  D. OSPF network type mismatch
  C. MTU mismatch

  ---

  Explanation

  neighbor 10.2.2.2 has smaller interface MTU

• Question 1033:

  Refer to the exhibit.

  

  An engineer configures the BGP adjacency between R1 and R2, however, it fails to establish.

  Which action resolves the issue?

  A. Change the network statement on R1 to 172.16 10.0
  B. Change the remote-as number for 192 168.100.11.
  C. Enable synchronization on R1 and R2
  D. Change the remote-as number on R1 to 6500.
  D. Change the remote-as number on R1 to 6500.

  ---

  Explanation

  The EBGP neighbor for R1 is in the AS 6500, and not the same AS 5500

• Question 1034:

  Refer to the exhibit.

  

  A loop occurs between R1, R2, and R3 while EIGRP is run with poison reverse enabled.

  Which action prevents the loop between R1, R2, and R3?

  A. Configure route tagging.
  B. Enable split horizon.
  C. Configure R3 as stub receive-only.
  D. Configure route filtering.
  D. Configure route filtering.

  ---

  Explanation

  In Cisco devices, split horizon is always used along with poison reverse (via the command "ip split-horizon") so in this question split horizon is already turned on. To prevent loop we can only use route filtering.

• Question 1035:

  An engineer must protect their company against ransom ware attacks.

  Which solution allows the engineer to block the execution stage and prevent file encryption?

  A. Use Cisco AMP deployment with the Malicious Activity Protection engineer enabled.
  B. Use Cisco AMP deployment with the Exploit Prevention engine enabled.
  C. Use Cisco Firepower and block traffic to TOR networks.
  D. Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation.
  A. Use Cisco AMP deployment with the Malicious Activity Protection engineer enabled.

  ---

  Explanation

  Ransomware are malicious software that locks up critical resources of the users. Ransomware uses well-established public/private key cryptography which leaves the only way of recovering the files being the payment of the ransom, or restoring files from backups.

  Cisco Advanced Malware Protection (AMP) for Endpoints Malicious Activity Protection (MAP) engine defends your endpoints by monitoring the system and identifying processes that exhibit malicious activities when they execute and stops them from running. Because the MAP engine detects threats by observing the behavior of the process at run time, it can generically determine if a system is under attack by a new variant of ransomware or malware that may have eluded other security products and detection technology, such as legacy signature-based malware detection. The first release of the MAP engine targets identification, blocking, and quarantine of ransomware attacks on the endpoint.

  https://www.cisco.com/c/dam/en/us/products/collateral/security/amp-for-endpoints/white-paper-c11-740980.pdf

• Question 1036:

  What does the LAP send when multiple WLCs respond to the CISCO-CAPWAP-CONTROLLER.localdomain hostname during the CAPWAP discovery and join process?

  A. unicast discovery request to the first WLC that resolves the domain name
  B. broadcast discovery request
  C. join request to all the WLCs
  D. unicast discovery request to each WLC
  D. unicast discovery request to each WLC

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107606-dns-wlc-config.html#anc5

• Question 1037:

  What is the result when an active route processor fails in a design that combines NSF with SSO?

  A. An NSF-aware device immediately updates the standby route processor RIB without churning the network
  B. The standby route processor temporarily forwards packets until route convergence is complete
  C. An NSF-capable device immediately updates the standby route processor RIB without churning the network
  D. The standby route processor immediately takes control and forwards packets along known routes
  D. The standby route processor immediately takes control and forwards packets along known routes

  ---

  Explanation

  Stateful Switchover

  Routers specifically designed for high availability include hardware redundancy, such as dual power supplies and route processors (RPs). An RP is responsible for learning the network topology and building the route table (RIB). An RP failure can trigger routing protocol adjacencies to reset, resulting in packet loss and network instability. During an RP failure, it may be more desirable to hide the failure and allow the router to continue forwarding packets using the previously programmed CEF table entries rather than temporarily drop packets while waiting for the secondary RP to reestablish the routing protocol adjacencies and rebuild the forwarding table.

  Stateful switchover (SSO) is a redundancy feature that allows a Cisco router with two RPs to synchronize router configuration and control plane state information. The process of mirroring information between RPs is referred to as checkpointing. SSO-enabled routers always checkpoint line card operation and Layer 2 protocol states. During a switchover, the standby RP immediately takes control and prevents basic problems such as interface link flaps. However, Layer 3 packet forwarding is disrupted without additional configuration.

  The RP switchover triggers a routing protocol adjacency flap that clears the route table. When the routing table is cleared, the CEF entries are purged, and traffic is no longer routed until the network topology is relearned and the forwarding table is reprogrammed. Enabling nonstop forwarding (NSF) or nonstop routing (NSR) high availability capabilities informs the router(s) to maintain the CEF entries for a short duration and continue forwarding packets through an RP failure until the control plane recovers.

• Question 1038:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary pre-configurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  

• Question 1039:

  By default, which virtual MAC address does HSRP group 16 use?

  A. c0:41:99:98:06:16
  B. 00:00:0c:07:ac:16
  C. 00:00:0c:07:ac:22
  D. c0:07:0c:ac:00:22
  B. 00:00:0c:07:ac:16

• Question 1040:

  Which technology reduces the implementation of STP and leverages both unicast and multicast?

  A. VSS
  B. VXLAN
  C. VPC
  D. VLAN
  B. VXLAN