Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1091:

  Which Cisco Catalyst SD-WAN component is responsible for distributing data plane traffic policies?

  A. vBond
  B. vManage
  C. vSmart
  D. WAN edge
  C. vSmart

• Question 1092:

  Which NGFW mode block flows crossing the firewall?

  A. Passive
  B. Tap
  C. Inline tap
  D. Inline
  D. Inline

  ---

  Explanation

  Firepower Threat Defense (FTD) provides six interface modes which are: Routed, Switched, Inline Pair, Inline Pair with Tap, Passive, Passive (ERSPAN). When Inline Pair Mode is in use, packets can be blocked since they are processed inline.

  When you use Inline Pair mode, the packet goes mainly through the FTD Snort engine.

  When Tap Mode is enabled, a copy of the packet is inspected and dropped internally while the actual traffic goes through FTD unmodified

  https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200924-configuringfirepower-threat-defense-int.html

• Question 1093:

  Refer to the exhibit.

  

  The network administrator must be able to perform configuration changes when all the RADIUS servers are unreachable.

  Which configuration allows all commands to be authorized if the user has successfully authenticated?

  A. aaa authorization exec default group radius none
  B. aaa authentication login default group radius local none
  C. aaa authorization exec default group radius if-authenticated
  D. aaa authorization exec default group radius
  C. aaa authorization exec default group radius if-authenticated

  ---

  Explanation

  The keyword"if-authenticated" sayings that if we are authenticated we will immediately be dropped into exec (enable) mode.

• Question 1094:

  In a campus network design, what are two benefits of using BFD for failure detection? (Choose two.)

  A. BFD speeds up routing convergence time.
  B. BFD is an efficient way to reduce memory and CPU usage.
  C. BFD provides fault tolerance by enabling multiple routers to appear as a single virtual router.
  D. BFD provides path failure detection in less than a second.
  E. BFD enables network peers to continue forwarding packets in the event of a restart.
  A. BFD speeds up routing convergence time.
  D. BFD provides path failure detection in less than a second.

• Question 1095:

  Which two operational models enable an AP to scan one or more wireless channels for rouge access points and at the same time provide wireless services to clients? (Choose two.)

  A. Rouge detector
  B. Sniffer
  C. FlexConnect
  D. Local
  E. Monitor
  C. FlexConnect
  D. Local

  ---

  Explanation

  Rogue Detection is performed by Local and Flex-Connect (in connected mode) mode APs and utilizes a time-slicing technique which allows client service and channel scanning with the usage of the same radio. With the move to off channel for a period of 50ms every 16 seconds, the AP, by default, only spends a small percentage of its time to not serve clients.

  Monitor mode serves only to scan, not to serve clients.

  Monitor mode APs are also far superior at the detection of rogue clients as they have a more comprehensive view of the activity that occurs in each channel.

  Just as @YTAKE, @Adrenalina73, @xziomal9, @wifishark and others say.

  https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html#anc8

• Question 1096:

  DRAG DROP

  Drag and drop the characteristics from the left onto the routing protocol types on the right.

  Select and Place:

  

  

• Question 1097:

  What do Cisco DNA southbound APIs provide?

  A. Interface between the controller and the network devices
  B. NETCONF API interface for orchestration communication
  C. RESful API interface for orchestrator communication
  D. Interface between the controller and the consumer
  A. Interface between the controller and the network devices

  ---

  Explanation

  The Southbound API is used to communicate with network devices.

  

• Question 1098:

  In Cisco DNA Center, what is the integration API?

  A. southbound consumer-facing RESTful API. which enables network discovery and configuration management
  B. westbound interface, which allows the exchange of data to be used by ITSM. IPAM and reporting
  C. an interface between the controller and the network devices, which enables network discovery and configuration management
  D. northbound consumer-facing RESTful API, which enables network discovery and configuration management
  B. westbound interface, which allows the exchange of data to be used by ITSM. IPAM and reporting

  ---

  Explanation

  https://developer.cisco.com/docs/dna-center/#!cisco-dna-center-platform-overview/integration-api-westbound

• Question 1099:

  What are two valid modes that Cisco Express Forwarding can operate in? (Choose two.)

  A. Central CEF mode
  B. Dense CEF mode
  C. Sparse CEF mode
  D. Distributed CEF mode
  E. Routed CEF mode
  A. Central CEF mode
  D. Distributed CEF mode

  ---

  Explanation

  CEF can be enabled in one of two modes:

  Central CEF mode - When CEF mode is enabled, the CEF FIB and adjacency tables reside on the route processor, and the route processor performs the express forwarding. You can use CEF mode when line cards are not available for CEF switching, or when you need to use features not compatible with distributed CEF switching.

  Distributed CEF (dCEF) mode - When dCEF is enabled, line cards maintain identical copies of the FIB and adjacency tables. The line cards can perform the express forwarding by themselves, and this relieves the main processor - Gigabit Route Processor (GRP) - of involvement in the switching operation. This is the only switching method available on the Cisco 12000 Series Router.

  https://www.cisco.com/c/en/us/support/docs/routers/12000-series-routers/47321-ciscoef.html

• Question 1100:

  Refer to the exhibit.

  

  What does the response "204 No Content" mean for the REST API request?

  A. Interface loopback 100 is removed from the configuration.
  B. Interface loopback 100 is not removed from the configuration.
  C. Interface loopback 100 is not found in the configuration.
  D. The DELETE method is not supported.
  C. Interface loopback 100 is not found in the configuration.