Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1081:

  What are two reasons why broadcast radiation is caused in the virtual machine environment? (Choose two.)

  A. vSwitch must interrupt the server CPU to process the broadcast packet.
  B. The Layer 2 domain can be large in virtual machine environments.
  C. Virtual machines communicate primarily through broadcast mode.
  D. Communication between vSwitch and network switch is broadcast based.
  E. Communication between vSwitch and network switch is multicast based.
  A. vSwitch must interrupt the server CPU to process the broadcast packet.
  B. The Layer 2 domain can be large in virtual machine environments.

  ---

  Explanation

  Broadcast radiation is the accumulation of broadcast and multicast traffic on a computer network. Extreme amounts of broadcast traffic constitute a broadcast storm. The amount of broadcast traffic you should see within a broadcast domain is directly proportional to the size of the broadcast domain. Therefore if the layer 2 domain in virtual machine environment is too large, broadcast radiation may occur - > VLANs should be used to reduce broadcast radiation.

  Also if virtual machines communicate via broadcast too much, broadcast radiation may occur.

  Another reason for broadcast radiation is using a trunk (to extend VLANs) from the network switch to the physical server.

  Note about the structure of virtualization in a hypervisor: Hypervisors provide virtual switch (vSwitch) that Virtual Machines (VMs) use to communicate with other VMs on the same host. The vSwitch may also be connected to the host's physical NIC to allow VMs to get layer 2 access to the outside world.

  Each VM is provided with a virtual NIC (vNIC) that is connected to the virtual switch. Multiple vNICs can connect to a single vSwitch, allowing VMs on a physical host to communicate with one another at layer 2 without having to go out to a physical switch.

  

  Although vSwitch does not run Spanning-tree protocol but vSwitch implements other loop prevention mechanisms. For example, a frame that enters from one VMNIC is not going to go out of the physical host from a different VMNIC card.

  References:

  https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/net_implementation_white_paper0900aecd806a9c05.html

• Question 1082:

  Which two advanced security features are available in next-generation firewalls but were not provided by standard firewalls? (Choose two.)

  A. stateful traffic inspection
  B. remote access VPN
  C. network telemetry
  D. intrusion prevention
  E. application control
  D. intrusion prevention
  E. application control

• Question 1083:

  An engineer configures HSRP group 37. The configuration does not modify the default virtual MAC address.

  Which virtual MAC address does the group use?

  A. C0.00:00:25:00:00
  B. 00:00:0c:07:ac:37
  C. C0:39:83:25:258:5
  D. 00:00:0c:07:ac:25
  D. 00:00:0c:07:ac:25

• Question 1084:

  An engineer runs the sample code, and the terminal returns this output.

  Which change to the sample code corrects this issue?

  

  A. Change the JSON method from load() to loads().
  B. Enclose null in the test_json string in double quotes
  C. Use a single set of double quotes and condense test_json to a single line
  D. Call the read() method explicitly on the test_json string
  A. Change the JSON method from load() to loads().

  ---

  Explanation

  

• Question 1085:

  Which action limits the total amount of memory and CPU that is used by a collection of VMs?

  A. Place the collection of VMs in a resource pool.
  B. Place the collection of VMs in a vApp.
  C. Limit the amount of memory and CPU that is available to the cluster.
  D. Limit the amount of memory and CPU that is available to the individual VMs.
  A. Place the collection of VMs in a resource pool.

• Question 1086:

  Refer to the exhibit.

  

  An administrator writes a script to fetch the list of devices that are registered with Cisco DNA Center.

  Why does the execution abort?

  A. The TLS certificate of DNA Center is invalid
  B. The username or the password is incorrect
  C. The "dna-center" hostname cannot be resolved to an IP address
  D. The authentication URL is incorrect
  B. The username or the password is incorrect

• Question 1087:

  What is a common trait between Ansible and Chef?

  A. Both are used for mutable infrastructure
  B. Both rely on a declarative approach.
  C. Both rely on NETCONF.
  D. Both require a client to be installed on hosts
  B. Both rely on a declarative approach.

• Question 1088:

  DRAG DROP

  Drag and drop the characteristics from the left onto the tools on the right. Not all options are used.

  Select and Place:

  

  

  ---

  Configuration management tools are used to install, configure, and manage software or applications on existing systems. They commonly work with mutable infrastructure, where systems can be updated or modified after deployment.

  Orchestration tools are used to provision and coordinate infrastructure resources, such as server instances. They commonly align with immutable infrastructure, where infrastructure is replaced rather than modified in place. Cisco describes configuration-management tools as managing deployments on existing server instances and orchestration tools as provisioning server instances; Cisco also distinguishes mutable infrastructure from immutable infrastructure.

• Question 1089:

  What is a characteristics of a type 1 hypervisor?

  A. It runs on top of the host operating system.
  B. It is preferred for supporting nonproduction workloads.
  C. It has greater latency than a Type 2 hypervisor.
  D. It runs on top of bare metal servers.
  D. It runs on top of bare metal servers.

• Question 1090:

  Refer to the exhibit.

  

  A network engineer configures a GRE tunnel and enters the show interface tunnel command.

  What does the output confirm about the configuration?

  A. The keepalive value is modified from the default value.
  B. Interface tracking is configured.
  C. The tunnel mode is set to the default.
  D. The physical interface MTU is 1476 bytes.
  C. The tunnel mode is set to the default.

  ---

  Explanation

  Not A : configure keepalive without define value, it default is 10.

  Not B : Its refer to PHYSICAL interface MTU, what output shown is the MTU of the Tunnel transport MTU Not D : It seem to be tracking , but not. The output "source tracking" may lead us to believe it is.

  Actually when define the tunnel source use phyiscal interface, this tunnel source output shown.

  C is correct answer : No tunnel mode define it default is GRE/IP.