Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1101:

  A network engineer is configuring Flexible Netflow and enters these commands:

  1. Sampler Netflow1 2. Mode random one-out-of 100 3. Interface fastethernet 1/0 4. Flow-sampler netflow1

  Which are two results of implementing this feature instead of traditional Netflow? (Choose two.)

  A. CPU and memory utilization are reduced.
  B. Only the flows of top 100 talkers are exported
  C. The data export flow is more secure.
  D. The number of packets to be analyzed are reduced
  E. The accuracy of the data to be analyzed is improved
  A. CPU and memory utilization are reduced.
  D. The number of packets to be analyzed are reduced

  ---

  Explanation

  Flow sampling reduces the CPU overhead of analyzing traffic with Flexible NetFlow by reducing the number of packets that are analyzed. Flow samplers are used to reduce the load on the device that is running by limiting the number of packets that are selected for analysis.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-mt/fnf-15-mt-book/use-fnflow-redce-cpu.pdf

• Question 1102:

  What is a benefit of using segmentation with TrustSec?

  A. Integrity checks prevent data from being modified in transit.
  B. Packets sent between endpoints on a LAN are encrypted using symmetric key cryptography.
  C. Security group tags enable network segmentation.
  D. Firewall rules are streamlined by using business-level profiles.
  D. Firewall rules are streamlined by using business-level profiles.

• Question 1103:

  Which access point mode allows a supported AP to function like a WLAN client would, associating and identifying client connectivity issues?

  A. client mode
  B. SE-connect mode
  C. sensor mode
  D. sniffer mode
  C. sensor mode

  ---

  Explanation

  As these wireless networks grow especially in remote facilities where IT professionals may not always be onsite, it becomes even more important to be able to quickly identify and resolve potential connectivity issuesideally before the users complain or notice connectivity degradation. To address these issues we have created Cisco's Wireless Service Assurance and a new AP mode called "sensor"mode. Cisco's Wireless Service Assurance platform has three components, namely, Wireless PerformanceAnalytics, Real-time Client Troubleshooting, and Proactive Health Assessment. Using a supported AP ordedicated sensor the device can actually function much like a WLAN client would associating andidentifying client connectivity issues within the network in real time without requiring an IT or technician to beon site.

  https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/dam/en/us/td/docs/wireless/controller/technotes/8-5/b_Cisco_Aironet_Sensor_Deployment_Guide.html.xml

• Question 1104:

  DRAG DROP

  Drag and drop the characteristics from the left onto the infrastructure types on the right.

  Select and Place:

  

  

• Question 1105:

  Which two solutions are used for backing up a Cisco DNA Center Assurance database? (Choose two)

  A. NFS share
  B. local server
  C. non-linux server
  D. remote server
  E. bare metal server
  A. NFS share
  D. remote server

  ---

  Explanation

  Cisco DNA Center creates the backup files and posts them to a remote server. Each backup is uniquely stored using the UUID as the directory name.To support Assurance data backups, the server must be a Linux-based NFS server that meets the following requirements:

  ?Support NFS v4 and NFS v3.

  ?Cisco DNA Center stores backup copies of Assurance data on an external NFS device and automation data on an external remote sync (rsync) target location.

  ?The remote share for backing up an Assurance database (NDP) must be an NFS share.

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-1-2/admin_guide/b_cisco_dna_center_admin_guide_2_1_2/ b_cisco_dna_center_admin_guide_2_1_1_chapter_0110.html

• Question 1106:

  Which Cisco Locator/ID Separation Protocol (LISP) device receives packets from remote site facing devices and either decapsulates the LISP packets or routes them natively?

  A. ITR
  B. ETR
  C. MS
  D. MR
  B. ETR

• Question 1107:

  Which protocol is responsible for data plane forwarding in a Cisco SD-Access deployment?

  A. VXLAN
  B. IS-IS
  C. OSPF
  D. LISP
  A. VXLAN

  ---

  Explanation

  In SD-Access the control plane is based on LISP (Locator/ID Separation Protocol), the data plane is based on VXLAN (Virtual Extensible LAN), the policy plane is based on Cisco TrustSec, and the management plane is enabled and powered by Cisco DNA Center.

  https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#:~:text=In%20SD%

• Question 1108:

  What are the main components of Cisco TrustSec?

  A. Cisco ISE and Enterprise Directory Services
  B. Cisco ISE. network switches, firewalls, and routers
  C. Cisco ISE and TACACS+
  D. Cisco ASA and Cisco Firepower Threat Defense
  B. Cisco ISE. network switches, firewalls, and routers

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/at_a_glance_c45-726831.pdf

• Question 1109:

  Which First Hop Redundancy Protocol maximizes uplink utilization and minimizes the amount of configuration that is necessary?

  A. GLBP
  B. HSRP v2
  C. VRRP
  D. HSRP v1
  A. GLBP

  ---

  Explanation

  only GLBP can maximize utilzation of links by being ACTIVE/ACTIVE while all others are ACTIVE/STANDBY/LISTENING

  NOTE!!!! there is NO MHSRP only HSRP v1 and 2.

• Question 1110:

  Refer to the exhibit. What is generated by the script?

  

  A. the cdp neighbors
  B. the routing table
  C. the router processes
  D. the running configuration
  D. the running configuration