Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1051:

  Refer to the exhibit.

  

  After configuring the BGP network, an engineer verifies that the path between server1 and server2 is functional, why did RouterSF choose the route from RouterDAL instead of the route from RouterCHI?

  A. BGP is not running on RouterCHI
  B. The Router-ID for Router DAL is lower than Router-ID for RouterCHI
  C. There is a static route in RouterSF for 10.0.0.0/24
  D. The route from RouterDAL has a lower MED
  B. The Router-ID for Router DAL is lower than Router-ID for RouterCHI

  ---

  Explanation

  All things being the same, we see that DAL has the lower router ID. C does not make sense, as the med value is stripped when crossing AS's and is only useable for iBGP peers.

• Question 1052:

  An organization wants to use the cisco SD-WAN regionalized service-chaining feature to optimize cost and user experience with application in the network, which allows branch routers to analyze and steer traffic toward the required network function. Which feature meets this requirement?

  A. Cloud Services Platform
  B. VNF Service Chaning
  C. Cloud onRamp for Colocation
  D. Cloud onRamp for laaS
  C. Cloud onRamp for Colocation

• Question 1053:

  When does a Cisco StackWise primary switch lose its role?

  A. when a stack member fails
  B. when the stack primary is reset
  C. when a switch with a higher priority is added to the stack
  D. when the priority value of a stack member is changed to a higher value
  C. when a switch with a higher priority is added to the stack

• Question 1054:

  Refer to the exhibit.

  

  An engineer must permit traffic from these networks and block all other traffic An informational log message should be triggered when traffic enters from these prefixes

  Which access list must be used?

  A. access-list acl_subnets permit ip 10.0.32.0 0 0.0.255 log
  B. access-list acl_subn*ls permit ip 10.0.32.0 0.0.7.255 log
  C. access-list acl_subnets permit ip 10.0.32.0 0.0.7.255 access-list acl_subnets deny ip any log
  D. access-list acl_subnets permit ip 10.0.32.0 255.255.248.0 log
  B. access-list acl_subn*ls permit ip 10.0.32.0 0.0.7.255 log

• Question 1055:

  Which security option protects credentials from sniffer attacks in a basicAPI authentication?

  A. next-generation firewall
  B. TLS or SSL for communication
  C. VPN connection between client and server
  D. AAA services to authenticate the API
  B. TLS or SSL for communication

• Question 1056:

  Refer to the exhibit.

  

  The administrator configures an ERSPAN session, but no packets are received on the destination host. Which action is required to complete the configuration?

  A. Ensure that the ERSPAN destination addresses are not reachable through the Mgmt-vrf VRF.
  B. Ensure that the ERSPAN destination is reachable from the switch.
  C. Configure the ERSPAN destination VLAN as an RSPAN VLAN.
  D. Enable the ERSPAN session.
  D. Enable the ERSPAN session.

  ---

  Explanation

  "Finally, enable the session using the `no shutdown' command to guarantee it is active."

  https://study-ccnp.com/erspan-encapsulated-remote-span-explained/

• Question 1057:

  Refer to the exhibit.

  

  What is achieved by this Python script?

  A. It reads access list statements into a dictionary list.
  B. It displays access list statements on a terminal screen.
  C. It configures access list statements.
  D. It converts access list statements to a human-readable format.
  A. It reads access list statements into a dictionary list.

• Question 1058:

  Refer to the exhibit.

  

  Which action must be taken to configure a WLAN for WPA2-AES with PSK and allow only 802.11r-capable clients to connect?

  A. Enable PSK and FT + PSK.
  B. Enable Fast Transition and FT + PSK.
  C. Enable Fast Transition and PSK.
  D. Change Fast Transition to Adaptive Enabled and enable FT + PSK.
  A. Enable PSK and FT + PSK.

• Question 1059:

  Which solution should be used in a high-density wireless environment to increase bandwidth for each user?

  A. Increase antenna size
  B. Increase the mandatory minimum data rate.
  C. Increase the cell size of each AP.
  D. Increase TX power.
  B. Increase the mandatory minimum data rate.

• Question 1060:

  How is OAuth framework used in REST API?

  A. as a framework to hash the security information in the REST URL
  B. by providing the external application a token that authorizes access to the account
  C. as a framework to hide the security information in the REST URL
  D. by providing the user credentials to the external application
  B. by providing the external application a token that authorizes access to the account