Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1061:

  What is a client considered when it is in web authentication state and roams between two controllers with mobility tunnels?

  A. anchor
  B. mobile
  C. foreign
  D. new
  C. foreign

• Question 1062:

  What NTP Stratum level is a server that is connected directly to an authoritative time source?

  A. Stratum 0
  B. Stratum 1
  C. Stratum 14
  D. Stratum 15
  B. Stratum 1

  ---

  Explanation

  The stratum levels define the distance from the reference clock. A reference clock is a stratum 0 device that is assumed to be accurate and has little or no delay associated with it. Stratum 0 servers cannot be used on the network but they are directly connected to computers which then operate as stratum-1 servers. A stratum 1 time server acts as a primary network time standard.

  

  A stratum 2 server is connected to the stratum 1 server; then a stratum 3 server is connected to the stratum 2 server and so on. A stratum 2 server gets its time via NTP packet requests from a stratum 1 server. A stratum 3 server gets its time via NTP packet requests from a stratum-2 server... A stratum server may also peer with other stratum servers at the same level to provide more stable and robust time for all devices in the peer group (for example a stratum 2 server can peer with other stratum 2 servers). NTP uses the concept of a stratum to describe how many NTP hops away a machine is from an authoritative time source. A stratum 1 time server typically has an authoritative time source (such as a radio or atomic clock, or a Global Positioning System (GPS) time source) directly attached, a stratum 2 time server receives its time via NTP from a stratum 1 time server, and so on.

  https://www.cisco.com/c/en/us/td/docs/routers/asr920/configuration/guide/bsm/16-6-1/b-bsm-xe-16-6-1-asr920/bsm-time-calendar-set.html

• Question 1063:

  Which configuration allows administrators to configure the device through the console port and use a network authentication server?

  A. aaa new-modelaaa authentication login default localaaa authorization consoleaaa authorization config-commandsusername netadmin secret 9 $9$vFpMf8elb4RVV8$seZ/bDAx1uV
  B. aaa new-modelaaa authentication login default localaaa authorization consoleaaa authorization config-commands
  C. aaa new-modelaaa authentication login default line
  D. aaa new-modelaaa authentication login default group radiusaaa authorization consoleaaa authorization config-commands
  D. aaa new-modelaaa authentication login default group radiusaaa authorization consoleaaa authorization config-commands

  ---

  
  

• Question 1064:

  Refer to the exhibit.

  

  What is printed to the console when this script is run?

  A. a key-value pair in tuple type
  B. a key-value pair in list type
  C. a key-value pair in string type
  D. an error
  C. a key-value pair in string type

• Question 1065:

  In a Cisco SD-Access network where VXLAN is used for encapsulating data packets, what is the minimum MTU setting that devices should be configured with?

  A. 1492
  B. 1500
  C. 1518
  D. 1550
  D. 1550

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/103x/configuration/vxlan/cisco-nexus-9000-series-nx-os-vxlan-configuration-guide-release-103x/m_configuring_vxlan_93x.html

• Question 1066:

  In a wireless network environment, what is calculated using the numerical values of the transmitter power level, cable loss, and antenna gain?

  A. EIRP
  B. dBi
  C. RSSI
  D. SNR
  A. EIRP

  ---

  Explanation

  Once you know the complete combination of transmitter power level, the length of cable, and the antenna gain, you can figure out the actual power level that will be radiated from the antenna. This is known as the effective isotropic radiated power (EIRP), measured in dBm. EIRP is a very important parameter because it is regulated by governmental agencies in most countries. In those cases, a system cannot radiate signals higher than a maximum allowable EIRP. To find the EIRP of a system, simply add the transmitter power level to the antenna gain and subtract the cable loss.

• Question 1067:

  Which statement about Cisco Express Forwarding is true?

  A. It uses a fast cache that is maintained in a router data plane.
  B. It maintains two tables in the data plane: the FIB and adjacency table.
  C. It makes forwarding decisions by a process that is scheduled through the IOS scheduler.
  D. The CPU of a router becomes directly involved with packet-switching decisions.
  B. It maintains two tables in the data plane: the FIB and adjacency table.

  ---

  Explanation

  Cisco Express Forwarding (CEF) provides the ability to switch packets through a device in a very quick and efficient way while also keeping the load on the router's processor low. CEF is made up of two different main components: the Forwarding Information Base (FIB) and the Adjacency Table. These are automatically updated at the same time as the routing table. The Forwarding Information Base (FIB) contains destination reachability information as well as next hop information. This information is then used by the router to make forwarding decisions. The FIB allows for very efficient and easy lookups. Below is an example of the FIB table:

  

  The adjacency table is tasked with maintaining the layer 2 next-hop information for the FIB. An example of the adjacency table is shown below:

  

  It uses a fast cache that is maintained in a router data plane' fast cache is only used when fast switching is enabled while CEF is disabled.

• Question 1068:

  Which security actions must be implemented to prevent an API injection attack?

  A. Log and monitor failed attempts.
  B. Use password hash with biometric authentication.
  C. Validate, filter, and sanitize all incoming data.
  D. Use short-lived access tokens and authenticate the apps.
  C. Validate, filter, and sanitize all incoming data.

• Question 1069:

  Refer to the exhibit.

  

  Two switches are interconnected using interface GigabitEthernet0/0 on both sides. While configuring one of the switches, a network engineer receives the logging message. Which action resolves this issue?

  A. Block VLAN1 on the trunk interface GigabitEthernet0/0.
  B. Configure interface GigabitEthernet0/0 as an access port.
  C. Configure interface GigabitEthernet0/0 as a trunk port.
  D. Shutdown interface GigabitEthemet0/0 and bring it back up.
  C. Configure interface GigabitEthernet0/0 as a trunk port.

• Question 1070:

  DRAG DROP

  Drag and drop the characteristics from the left onto the switching architectures on the right.

  Select and Place: