Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 1101:

  Refer to the exhibit.

  

  An engineer configures monitoring on SW1 and enters the show command to verify operation. What does the output confirm?

  A. SPAN session 1 monitors activity on VLAN 50 of a remote switch

  B. SPAN session 2 only monitors egress traffic exiting port FastEthernet 0/14.

  C. SPAN session 2 monitors all traffic entering and exiting port FastEthernet 0/15.

  D. RSPAN session 1 is incompletely configured for monitoring

  Correct Answer: D

  SW1 has been configured with the following commands: SW1(config)#monitor session 1 source remote vlan 50 SW1(config)#monitor session 2 source interface fa0/14 SW1(config)#monitor session 2 destination interface fa0/15 The session 1 on SW1 was configured for Remote SPAN (RSPAN) while session 2 was configured for local SPAN. For RSPAN we need to configure the destination port to complete the configuration. Note: In fact we cannot create such a session like session 1 because if we only configure Source RSPAN VLAN 50 (with the command monitor session 1 source remote vlan 50) then we will receive a Type: Remote Source Session (not Remote Destination Session).

• Question 1102:

  When is an external antenna used inside a building?

  A. only when using Mobility Express

  B. when it provides the required coverage

  C. only when using 2 4 GHz

  D. only when using 5 GHz

  Correct Answer: B

• Question 1103:

  Which HTTP code must be returned to prevent the script form exiting?

  

  A. 200

  B. 201

  C. 300

  D. 301

  Correct Answer: D

• Question 1104:

  Which protocol does REST API rely on to secure the communication channel?

  A. TCP

  B. HTTPS

  C. SSH

  D. HTTP

  Correct Answer: B

  The REST API accepts and returns HTTP (not enabled by default) or HTTPS messages that contain JavaScript Object Notation (JSON) or Extensible Markup Language (XML) documents. You can use any programming language to generate the messages and the JSON or XML documents that contain the API methods or Managed Object (MO) descriptions. Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2- x/rest_cfg/2_1_x/ b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Config uration_Guide_chapter_01.html

• Question 1105:

  Which data is properly formatted with JSON?

  

  A. Opiton A

  B. Opiton B

  C. Opiton C

  D. Opiton D

  Correct Answer: B

  B is correct, checked in JSONLint validator numbers 18 and 25 can be in "" or not still valid.

• Question 1106:

  A network administrator applies the following configuration to an IOS device:

  aaa new-model

  aaa authentication login default local group tacacs+

  What is the process of password checks when a login attempt is made to the device?

  A. A TACACS+server is checked first. If that check fail, a database is checked?

  B. A TACACS+server is checked first. If that check fail, a RADIUS server is checked. If that check fail. a local database is checked.

  C. A local database is checked first. If that fails, a TACACS+server is checked, if that check fails, a RADUIS server is checked.

  D. A local database is checked first. If that check fails, a TACACS+server is checked.

  Correct Answer: D

  The "aaa authentication login default local group tacacs+" command is broken down as follows:

  +

  The `aaa authentication' part is simply saying we want to configure authentication settings.

  +

  The `login' is stating that we want to prompt for a username/ password when a connection is made to the device.

  +

  The `default' means we want to apply for all login connections (such as tty, vty, console and aux). If we use this keyword, we don't need to configure anything else under tty, vty and aux lines. If we don't use this keyword then we have to specify which line(s) we want to apply the authentication feature.

  +

  The `local group tacacs+" means all users are authenticated using router's local database (the first method). If the credentials are not found on the local database, then the TACACS+ server is used (the second method).

  Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/200606-aaa-authentication-login-default-local.html

• Question 1107:

  Refer to the exhibit.

  

  The IP SLA is configured in a router. An engineer must configure an EEM applet to shut down the interface and bring it back up when there is a problem with the IP SLA. Which configuration should the engineer use?

  A. event manager applet EEM_IP_SLA event track 10 state down

  B. event manager applet EEM_IP_SLA event track 10 state unreachable

  C. event manager applet EEM_IP_SLA event sla 10 state unreachable

  D. event manager applet EEM_IP_SLA event sla 10 state down

  Correct Answer: A

  The ip sla 10 will ping the IP 192.168.10.20 every 3 seconds to make sure the connection is still up. We can configure an EEM applet if there is any problem with this IP SLA via the command event track 10 state down. Reference: https://www.theroutingtable.com/ip-sla-and-cisco-eem/

• Question 1108:

  How is 802.11 traffic handled in a fabric-enabled SSID?

  A. centrally switched back to WLC where the user traffic is mapped to a VXLAN on the WLC

  B. converted by the AP into 802.3 and encapsulated into VXLAN

  C. centrally switched back to WLC where the user traffic is mapped to a VLAN on the WLC

  D. converted by the AP into 802.3 and encapsulated into a VLAN

  Correct Answer: B

  Fabric AP communicates with fabric WLC using capwap for control plnae comms ony. To communicate with the SD-Access fabric, the AP will use vxlan encapsulation.

  https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/deploy-guide/cisco-dna-center-sd-access-wl-dg.pdf

• Question 1109:

  What are two differences between the RIB and the FIB? (Choose two.)

  A. The FIB is derived from the data plane, and the RIB is derived from the FIB.

  B. The RIB is a database of routing prefixes, and the FIB is the Information used to choose the egress interface for each packet.

  C. FIB is a database of routing prefixes, and the RIB is the information used to choose the egress interface for each packet.

  D. The FIB is derived from the control plane, and the RIB is derived from the FIB.

  E. The RIB is derived from the control plane, and the FIB is derived from the RIB.

  Correct Answer: BE

  The Forwarding Information Base (FIB) contains destination reachability information as well as next hop information. This information is then used by the router to make forwarding decisions. The FIB allows for very efficient and easy lookups.

• Question 1110:

  What are two characteristics of VXLAN? (Choose two)

  A. It uses VTEPs to encapsulate and decapsulate frames.

  B. It has a 12-bit network identifier

  C. It allows for up to 16 million VXLAN segments

  D. It lacks support for host mobility

  E. It extends Layer 2 and Layer 3 overlay networks over a Layer 2 underlay.

  Correct Answer: AC