Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1081:

  Which two statements about VRRP are true? (Choose two)

  A. It supports both MD5 and SHA1 authentication.
  B. It is assigned multicast address 224.0.0.9.
  C. Three versions of the VRRP protocol have been defined.
  D. It is assigned multicast address 224.0.0.8.
  E. The TTL for VRRP packets must be 255.
  F. Its IP address number is 115.
  C. Three versions of the VRRP protocol have been defined.
  E. The TTL for VRRP packets must be 255.

• Question 1082:

  Which characteristic applies to Cisco SD-Access?

  A. It uses dynamic routing the discover and provision access switches.
  B. It uses VXLAN for the control plane
  C. It uses VXLAN for the data plane
  D. It uses dynamic routing to discover and provision border switches
  B. It uses VXLAN for the control plane

• Question 1083:

  Which component handles the orchestration plane of the Cisco SD-WAN?

  A. vBond
  B. vSmart
  C. vManage
  D. vEdge
  A. vBond

  ---

  Explanation

  + Orchestration plane (vBond) assists in securely onboarding the SD-WAN WAN Edge routers into the SD-WAN overlay. The vBond controller, or orchestrator, authenticates and authorizes the SD-WAN components onto the network. The vBond orchestrator takes an added responsibility to distribute the list of vSmart and vManage controller information to the WAN Edge routers. vBond is the only device in SD-WAN that requires a public IP address as it is the first point of contact and authentication for all SD- WAN components to join the SD-WAN fabric. All other components need to know the vBond IP or DNS information.

  https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2018/pdf/BRKCRS-2112.pdf page 8.

• Question 1084:

  Refer to the exhibit.

  

  

  Cisco IOS routers R1 and R2 are interconnected using interface Gi0/0. Which configuration allows R1 and R2 to form an OSPF neighborship on interface Gi0/0?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  Explanation

  Gi0/0 on R1 is not sending hellos on that interface.

• Question 1085:

  Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?

  A. vBond
  B. vSmart
  C. vManage
  D. PNP server
  A. vBond

  ---

  Explanation

  vbond-as-stun-server:

  Enable Session Traversal Utilities for NAT (STUN) to allow the tunnel interface to discover its public IP address and port number when the vEdge router is located behind a NAT (on vEdge routers only).

  When you configure this command, vEdge routers can exchange their public IP addresses and port numbers over private TLOCs.

  With this configuration, the vEdge router uses the vBond orchestrator as a STUN server, so the router can determine its public IP address and public port number. (With this configuration, the router cannot learn the type of NAT that it is behind.) No overlay network control traffic is sent and no keys are exchanged over tunnel interface configured to the the vBond orchestrator as a STUN server. However, BFD does come up on the tunnel, and data traffic can be sent on it.

• Question 1086:

  DRAG DROP

  Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.

  Select and Place:

  

  

• Question 1087:

  What is a characteristic of Cisco DNA Northbound APIs?

  A. They simplify the management of network infrastructure devices.
  B. They enable automation of network infrastructure based on intent.
  C. They utilize RESTCONF.
  D. They utilize multivendor support APIs.
  C. They utilize RESTCONF.

• Question 1088:

  Refer to the exhibit.

  

  Which IP address becomes the next active next hop for 192.168.102 0/24 when 192.168.101.2 fails?

  A. 192.168.101.18
  B. 192.168.101.6
  C. 192.168.101.10
  D. 192.168.101.14
  A. 192.168.101.18

  ---

  Explanation

  The `>' shown in the output above indicates that the path with a next hop of 192.168.101.2 is the current best path.

  Path Selection Attributes: Weight > Local Preference > Originate > AS Path > Origin > MED > External > IGP Cost > eBGP Peering > Router ID BGP prefers the path with highest weight but the weights here are all 0 (which indicate all routes that are not originated by the local router) so we need to check the Local Preference. Answer '192.168.101.18' path without LOCAL_PREF (LocPrf column) means it has the default value of 100. Therefore we can find the two next best paths with the next hop of 192.168.101.18 and 192.168.101.10. We have to move to the next path selection attribute: Originate. BGP prefers the path that the local router originated (which is indicated with the "next hop 0.0.0.0"). But none of the two best paths is self-originated. The AS Path of the next hop 192.168.101.18 is shorter than the AS Path of the next hop 192.168.101.10 then the next hop 192.168.101.18 will be chosen as the next best path.

• Question 1089:

  Refer to the exhibit.

  

  What is the effect of this configuration?

  A. The device will allow users at 192.168.0.202 to connect to vty lines 0 through 4 using the password ciscotestkey
  B. The device will allow only users at 192 168.0.202 to connect to vty lines 0 through 4
  C. When users attempt to connect to vty lines 0 through 4. the device will authenticate them against TACACS* if local authentication fails
  D. The device will authenticate all users connecting to vty lines 0 through 4 against TACACS+
  D. The device will authenticate all users connecting to vty lines 0 through 4 against TACACS+

• Question 1090:

  Which protocol does REST API rely on to secure the communication channel?

  A. TCP
  B. HTTPS
  C. SSH
  D. HTTP
  B. HTTPS

  ---

  Explanation

  The REST API accepts and returns HTTP (not enabled by default) or HTTPS messages that contain JavaScript Object Notation (JSON) or Extensible Markup Language (XML) documents. You can use any programming language to generate the messages and the JSON or XML documents that contain the API methods or Managed Object (MO) descriptions. Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2- x/rest_cfg/2_1_x/ b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Config uration_Guide_chapter_01.html