Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1061:

  Refer to the exhibit.

  

  An engineer configures monitoring on SW1 and enters the show command to verify operation.

  What does the output confirm?

  A. SPAN session 1 monitors activity on VLAN 50 of a remote switch
  B. SPAN session 2 only monitors egress traffic exiting port FastEthernet 0/14.
  C. SPAN session 2 monitors all traffic entering and exiting port FastEthernet 0/15.
  D. RSPAN session 1 is incompletely configured for monitoring
  D. RSPAN session 1 is incompletely configured for monitoring

  ---

  Explanation

  SW1 has been configured with the following commands:

  SW1(config)#monitor session 1 source remote vlan 50 SW1(config)#monitor session 2 source interface fa0/14

  SW1(config)#monitor session 2 destination interface fa0/15

  The session 1 on SW1 was configured for Remote SPAN (RSPAN) while session 2 was configured for local SPAN.

  For RSPAN we need to configure the destination port to complete the configuration.

  Note: In fact we cannot create such a session like session 1 because if we only configure Source RSPAN VLAN 50 (with the command monitor session 1 source remote vlan 50) then we will receive a Type: Remote Source Session (not

  Remote Destination Session).

• Question 1062:

  What is the function of cisco DNA center in a cisco SD-access deployment?

  A. It is responsible for routing decisions inside the fabric
  B. It is responsible for the design, management, deployment, provisioning, and assurance of the fabric network devices.
  C. It possesses information about all endpoints, nodes and external networks to the fabric
  D. IT provides integration and automation for all nonfabric nodes and their fabric counterparts.
  B. It is responsible for the design, management, deployment, provisioning, and assurance of the fabric network devices.

• Question 1063:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  R30

  show ip access-list

  config t

  ip access-list extended 120

  5 permit eigrp any any

  R20

  config t

  ip access-list extended 100

  permit tcp 192.168.25.0 0.0.0.255 any eq 23

  class-map match-any TELNET

  match access-group 100

  policy-map CoPP

  class TELNET police 10000 conform-action transmit exceed-action drop control-plane service-policy input CoPP

• Question 1064:

  Which method is used by an AP to join HA controllers and is configured in NVRAM?

  A. stored WLC information
  B. DNS
  C. IP Helper Addresses
  D. Primary/Secondary/Tertiary/Backup
  D. Primary/Secondary/Tertiary/Backup

  ---

  Explanation

  (Locally Stored IPv4 or IPv6 address: If the AP was previously associated to a controller, which can be done through a manual configuration, the IP addresses of the primary, secondary, and tertiary controllers are stored in the nonvolatile memory of the AP. Also, several controllers can be grouped to form a mobility group. Upon associating to a Cisco WLC, the AP learns the IP addresses of the other members of the mobility group. This information is stored in the AP and cached even after a reboot.)

• Question 1065:

  In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?

  A. management and data
  B. control and management
  C. control, and forwarding
  D. control and data
  B. control and management

  ---

  Explanation

  Read the "StackWise Virtual architecture" from the link below:

  https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9000/nb-06-cat-9k-stack-wp-cte-en.html

• Question 1066:

  Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

  A. All devices integrating with ISE
  B. selected individual devices
  C. all devices in selected sites
  D. all wired devices
  C. all devices in selected sites

  ---

  Explanation

  When you click Deploy, Cisco DNA Center requests the Cisco Identity Services Engine (Cisco ISE) to send notifications about the policy changes to the network devices.

  References:

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-2/user_guide/b_dnac_ug_1_2/b_dnac_ug_1_2_chapter_01000.html#id_53453

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-3-1-0/user_guide/b_cisco_dna_center_ug_1_3_1_0/b_cisco_dna_center_ug_1_3_1_0_chapter_01011.html

• Question 1067:

  What is one benefit of implementing a data modeling language?

  A. use XML style of data formatting
  B. interoperability to allow unlimited implementations
  C. machine-oriented logic and language-facilitated processing
  D. conceptual representation makes interpretation simple
  D. conceptual representation makes interpretation simple

• Question 1068:

  What is one characteristic of the Cisco SD-Access control plane?

  A. It is based on VXLAN technology.
  B. Each router processes every possible destination and route
  C. It allows host mobility only in the wireless network.
  D. It stores remote routes in a centralized database server
  D. It stores remote routes in a centralized database server

  ---

  Explanation

  A control plane node maintains a host tracking database (HTDB), and also uses Locator/ID Separation Protocol (LISP) to provide a map server, populating the HTDB from fabric edge registration messages; and a map resolver to respond to queries from edge devices requesting location information about destination nodes.

• Question 1069:

  Refer lo the exhibit.

  

  Which address type is 10.10.10.10 configured for?

  A. inside global
  B. outside local
  C. outside global
  D. inside local
  D. inside local

• Question 1070:

  Which statement about an RSPAN session configuration is true?

  A. A fitter mutt be configured for RSPAN Regions.
  B. Only one session can be configured at a time.
  C. A special VLAN type must be used as the RSPAN destination.
  D. Only incoming traffic can be monitored.
  C. A special VLAN type must be used as the RSPAN destination.

  ---

  Explanation

  in all participating switches -> This VLAN can be considered a special VLAN type -> Answer 'A special VLAN type must be used as the RSPAN destination' is correct.

  References:

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750xscg/swspan.html

  We can configure multiple RSPAN sessions on a switch at a time, then continue configuring multiple RSPAN sessions on the other switch without any problem -> Answer 'Only one session can be configured at a time' is not correct. This is how to configure Remote SPAN (RSPAN) feature on two switches. Traffic on FastEthernet0/1 of Switch 1 will be sent to Fa0/10 of Switch2 via VLAN 40. + Configure on both switches Switch1,2(config)#vlan 40 Switch1,2(config-vlan)#remote-span + Configure on Switch1 Switch1(config)# monitor session 1 source interface FastEthernet 0/1 Switch1(config)# monitor session 1 destination remote vlan 40 + Configure on Switch2 Switch2(config)#monitor session 5 source remote vlan 40 Switch2(config)# monitor session 5 destination interface FastEthernet 0/10