Cisco CCNP 350-401 Questions & Answers

• Question 1101:

  Which method should an engineer use to deal with a long-standing contention issue between any two VMs on the same host?

  A. Adjust the resource reservation limits

  B. Live migrate the VM to another host

  C. Reset the VM

  D. Reset the host

  Correct Answer: A

• Question 1102:

  Which protocol is implemented to establish secure control plane adjacencies between Cisco SD-WAN nodes?

  A. IKE

  B. TLS

  C. IPsec

  D. ESP

  Correct Answer: B

  The Cisco SD-WAN control plane has been designed with network and device security in mind. The foundation of the control plane is one of two security protocols derived from SSL (Secure Sockets Layer)-the Datagram Transport Layer

  Security (DTLS) protocol and the Transport Layer Security (TLS) protocol.

  Reference:

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/securitybook/security-overvi

• Question 1103:

  What does the number in an NTP stratum level represent?

  A. The number of hops it takes to reach the master time server.

  B. The number of hops it takes to reach the authoritative time source.

  C. The amount of offset between the device clock and true time.

  D. The amount of drift between the device clock and true time.

  Correct Answer: B

  NTP uses the concept of a stratum to describe how many hops (routers) away a machine is from an authoritative time source, usually a reference clock. A reference clock is a stratum 0 device that is assumed to be accurate and has little or no delay associated with it. Stratum 0 servers cannot be used on the network but they are directly connected to computers which then operate as stratum-1 servers. A stratum 1 time server acts as a primary network time standard.

  

• Question 1104:

  Refer to the exhibit.

  flow monitor FLOW-MONITOR-1 record netflow ipv6 original-input exit ! sampler SAMPLER-1 mode deterministic 1 out-of 2 exit ! ip cef ipv6 cef ! interface GigabieEthernet 0/0/0 ipv6 address 2001:DB8:2ABCD::2/48 ipv6 flow monitro FLOW-MONITOR-1 sampler SAMPLER-1 input

  What is the effect of introducing the sampler feature into the Flexible NetFlow configuration on the router?

  A. NetFlow updates to the collector are sent 50% less frequently.

  B. Every second IPv4 packet is forwarded to the collector for inspection.

  C. CPU and memory utilization are reduced when compared with what is required for full NetFlow.

  D. The resolution of sampling data increases, but it requires more performance from the router.

  Correct Answer: C

  it's about what record the router is analyzing and not about what is been sent to the collector.

• Question 1105:

  Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?

  A. vBond

  B. vSmart

  C. vManage

  D. PNP server

  Correct Answer: A

  vbond-as-stun-server:

  Enable Session Traversal Utilities for NAT (STUN) to allow the tunnel interface to discover its public IP address and port number when the vEdge router is located behind a NAT (on vEdge routers only).

  When you configure this command, vEdge routers can exchange their public IP addresses and port numbers over private TLOCs.

  With this configuration, the vEdge router uses the vBond orchestrator as a STUN server, so the router can determine its public IP address and public port number. (With this configuration, the router cannot learn the type of NAT that it is

  behind.)

  No overlay network control traffic is sent and no keys are exchanged over tunnel interface configured to the the vBond orchestrator as a STUN server. However, BFD does come up on the tunnel, and data traffic can be sent on it.

• Question 1106:

  When does a stack master lose its role?

  A. When the priority value of a stack member is changed to a higher value

  B. when a switch with a higher priority is added to the stack

  C. when the stack master is reset

  D. when a stack member fails

  Correct Answer: C

  A stack master retains its role unless one of these events occurs:

  1.

  The switch stack is reset.*

  2.

  The stack master is removed from the switch stack.

  3.

  The stack master is reset or powered off.

  4.

  The stack master fails.

  5.

  The switch stack membership is increased by adding powered-on standalone switches or switch stacks.*

  In the events marked by an asterisk (*), the current stack master might be re-elected based on the listed factors. When you power on or reset an entire switch stack, some stack members might not participate in the stack master election. Stack members that are powered on within the same 20-second time frame participate in the stack master election and have a chance to become the stack master. Stack members that are powered on after the 20-second time frame do not participate in this initial election and become stack members. All stack members participate in re-elections. For all powering considerations that affect stack-master elections, see the "Switch Installation" chapter in the hardware installation guide. The new stack master becomes available after a few seconds. In the meantime, the switch stack uses the forwarding tables in memory to minimize network disruption. The physical interfaces on the other available stack members are not affected during a new stack master election and reset. After a new stack master is elected and the previous stack master becomes available, the previous stack master does not resume its role as stack master. As described in the hardware installation guide, you can use the Master LED on the switch to see if the switch is the stack master.

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750xscg/swstack.html

• Question 1107:

  What is the calculation that is used to measure the radiated power of a signal after it has gone through the radio, antenna cable, and antenna?

  A. EIRP

  B. mW

  C. dBm

  D. dBi

  Correct Answer: A

• Question 1108:

  An engineer is concerned with the deployment of a new application that is sensitive to inter-packet delay variance. Which command configures the router to be the destination of jitter measurements?

  A. Router(config)# ip sla responder udp-connect 172.29.139.134 5000

  B. Router(config)# ip sla responder tcp-connect 172.29.139.134 5000

  C. Router(config)# ip sla responder udp-echo 172.29.139.134 5000

  D. Router(config)# ip sla responder tcp-echo 172.29.139.134 5000

  Correct Answer: C

  Cisco IOS IP SLA Responder is a Cisco IOS Software component whose functionality is to respond to Cisco IOS IP SLA request packets. The IP SLA source sends control packets before the operation starts to establish a connection to the

  responder. Once the control packet is acknowledged, test packets are sent to the responder. The responder inserts a time-stamp when it receives a packet and factors out the destination processing time and adds time-stamps to the sent

  packets. This feature allows the calculation of unidirectional packet loss, latency, and jitter measurements with the kind of accuracy that is not possible with ping or other dedicated probe testing.

  Reference:

  UDP Jitter measures the delay, delay variation (jitter), corruption, misordering and packet loss by generating periodic UDP traffic. This operation always requires IP SLA responder. The command to enable UDP Jitter Operation is "ip sla

  responder udp-echo {destination-ip-address} [destination-port]

• Question 1109:

  In a Cisco DNA Center Plug and Play environment, why would a device be labeled unclaimed?

  A. The device has not been assigned a workflow.

  B. The device could not be added to the fabric.

  C. The device had an error and could not be provisioned.

  D. The device is from a third-party vendor.

  Correct Answer: A

• Question 1110:

  Which of the following statements regarding BFD are correct? (Select 2 choices.)

  A. BFD is supported by OSPF, EIGRP, BGP, and IS-IS.

  B. BFD detects link failures in less than one second.

  C. BFD can bypass a failed peer without relying on a routing protocol.

  D. BFD creates one session per routing protocol per interface.

  E. BFD is supported only on physical interfaces.

  F. BFD consumes more CPU resources than routing protocol timers do.

  Correct Answer: AB