Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 1081:

  What is the centralized control policy in a Cisco SD-WAN deployment?

  A. list of ordered statements that define user access policies

  B. set of statements that defines how routing is performed

  C. set of rules that governs nodes authentication within the cloud

  D. list of enabled services for all nodes within the cloud

  Correct Answer: B

• Question 1082:

  Which congestion queuing method on Cisco IOS based routers uses four static queues?

  A. Priority

  B. custom

  C. weighted fair

  D. low latency

  Correct Answer: A

• Question 1083:

  When a wireless client roams between two different wireless controllers, a network connectivity outage is experienced for a period of time.

  Which configuration issue would cause this problem?

  A. Not all of the controllers in the mobility group are using the same mobility group name.

  B. Not all of the controllers within he mobility group are using the same virtual interface IP address.

  C. All of the controllers within the mobility group are using the same virtual interface IP address.

  D. All of the controllers in the mobility group are using the same mobility group name.

  Correct Answer: B

  A prerequisite for configuring Mobility Groups is "All controllers must be configured with the same virtual interface IP address". If all the controllers within a mobility group are not using the same virtual interface, inter-controller roaming may appear to work, but the handoff does not complete, and the client loses connectivity for a period of time. -> Answer B is correct.

  Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/mobility_groups.html https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107188-mobility-groups-faq.html

• Question 1084:

  How does Cisco TrustSec enable more flexible access controls for dynamic networking environments and data centers?

  A. uses flexible NetFlow

  B. assigns a VLAN to the endpoint

  C. classifies traffic based on advanced application recognition

  D. classifies traffic based on the contextual identity of the endpoint rather than its IP address

  Correct Answer: D

  The Cisco TrustSec solution simplifies the provisioning and management of network access control through the use of software-defined segmentation to classify network traffic and enforce policies for more flexible access controls. Traffic classification is based on endpoint identity, not IP address, enabling policy change without net-work redesign.

  Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/at_a_glance_c45-726831.pdf

• Question 1085:

  Refer to the exhibit.

  

  Router#sh run | b vty

  line vty 0 4 session-timeout 30 exec-timeout 20 0 session-limit 30 login local line vty 5 15 session-timeout 30 exec-timeout 20 0 session-limit 30 login local

  Security policy requires all idle-exec sessions to be terminated in 600 seconds. Which configuration achieves this goal?

  A. line vty 0 15 absolute-timeout 600

  B. line vty 0 15 exec-timeout

  C. line vty 01 5 exec-timeout 10 0

  D. line vty 0 4 exec-timeout 600

  Correct Answer: C

  The "exec-timeout" command is used to configure the inactive session timeout on the console port or the virtual terminal. The syntax of this command is:

  exec-timeout minutes [seconds]

  Therefore we need to use the "exec-timeout 10 0" command to set the user inactivity timer to 600 seconds (10 minutes).

• Question 1086:

  How are the different versions of IGMP compatible?

  A. IGMPv2 is compatible only with IGMPv1.

  B. IGMPv2 is compatible only with IGMPv2.

  C. IGMPv3 is compatible only with IGMPv3.

  D. IGMPv3 is compatible only with IGMPv1

  Correct Answer: A

• Question 1087:

  An engineer configures HSRP group 37. The configuration does not modify the default virtual MAC address. Which virtual MAC address does the group use?

  A. C0.00:00:25:00:00

  B. 00:00:0c:07:ac:37

  C. C0:39:83:25:258:5

  D. 00:00:0c:07:ac:25

  Correct Answer: D

• Question 1088:

  Refer to the exhibit.

  

  What is the JSON syntax that is formed from the data?

  A. Name: Bob, Johson, Age: 75, Alive: true, Favourite Foods. [Cereal, ''Mustard'', ''Onions}}

  B. Name'', ''Bob'' Johson'', ''Age'', 75, ''Alive'', true, ''favourite Foods'', [''Cereal, ''Mustard'', Onions''}}

  C. {"Name": "Bob Johnson", "Age": 75, "Alive": true, "Favorite Foods": ["Cereal", "Mustard", "Onions"]}

  D. Name''. ''Bob Johson'', ''Age'': Seventyfive, ''Alive'' true, ''favourite Foods'' ,[Cereal'' ''Mustard'' ''Onions''}}

  Correct Answer: C

  JSON data is written as name/value pairs.

  A name/value pair consists of a field name (in double quotes), followed by a colon, followed by a value:

  "name":"Mark"

  JSON can use arrays. Array values must be of type string, number, object, array, boolean or null.

  For example:

  {

  "name":"John",

  "age":30,

  "alive":true,

  "cars":[ "Ford", "BMW", "Fiat" ]

  }

• Question 1089:

  Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address 10.10.10.1?

  A. ip access-list extended 100 deny tcp host 10.10.10.1 any eq 80 permit ip any any

  B. ip access-list extended 200 deny tcp host 10. 10.10.1 eq 80 any permit ip any any

  C. ip access-list extended NO_HTTP deny tcp host 10.10.10.1 any eq 80

  D. ip access-list extended 10 deny tcp host 10.10.10.1 any eg 80 permit ip any any

  Correct Answer: A

• Question 1090:

  Refer to the exhibit.

  

  What are two effects of this configuration? (Choose two.)

  A. R1 becomes the active router.

  B. If R1 goes down, R2 becomes active but reverts to standby when R1 comes back online.

  C. R1 becomes the standby router

  D. If R2 goes down, R1 becomes active but reverts to standby when R2 comes back online.

  E. If R1 goes down, R2 becomes active and remains the active device when R1 comes back online.

  Correct Answer: AE

  router with higher priority will become active, without preempt r1 will not become active after come online. preempt is not a default command with hsrp