Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1111:

  Which location tracking method is used when locating client devices using Cisco hyperlocation?

  A. angle of arrival
  B. location patterning
  C. TTL
  D. line of sight
  A. angle of arrival

• Question 1112:

  At which Layer does Cisco DNA Center support REST controls?

  A. EEM applets or scripts
  B. Session layer
  C. YMAL output from responses to API calls
  D. Northbound APIs
  D. Northbound APIs

• Question 1113:

  Refer to the exhibit.

  

  After unsuccessfully configuring an EtherChannel link, an engineer enables debugging. Which action will resolve the issue?

  A. Configure the EtherChannel members in desirable mode.
  B. Set the EtherChannel to mode on.
  C. Set the EtherChannel to mode active.
  D. Configure the EtherChannel members in passive mode.
  C. Set the EtherChannel to mode active.

• Question 1114:

  Refer to the exhibit.

  

  

  A client has two directly connected eBGP peering links with diverse ISPs. Both providers advertise the same public prefix 209.165.200.224/27 to R1 without any route manipulation. Traffic leaves R1 outbound via ISP1 but returns inbound via ISP2. Which configuration prevents asymmetrical routing and makes ISP1 the preferred path inbound and outbound?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 1115:

  DRAG DROP

  Drag and drop the descriptions from the left onto the correct QoS components on the right.

  Select and Place:

  

  

  ---

  
  

• Question 1116:

  An engineer must provide wireless converge in a square office. The engineer has only one AP and believes that it should be placed it in the middle of the room. Which antenna type should the engineer use?

  A. directional
  B. polarized
  C. Yagi
  D. omnidirectional
  D. omnidirectional

• Question 1117:

  A customer wants to provide wireless access to contractors using a guest portal on Cisco ISE. The portal is also used by employees. A solution is implemented, but contractors receive a certificate error when they attempt to access the portal. Employees can access the portal without any errors. Which change must be implemented to allow the contractors and employees to access the portal?

  A. Install a trusted third-party certificate on the Cisco ISE
  B. Install an internal CA signed certificate on the Cisco ISE.
  C. Install a trusted third-party certificate on the contractor devices.
  D. Install an internal CA signed certificate on the contractor devices.
  A. Install a trusted third-party certificate on the Cisco ISE

  ---

  Explanation

  "It is recommended to use the Company Internal CA for Admin and EAP certificates, and a publicly-signed certificate for Guest/Sponsor/Hotspot/etc portals. The reason is that if a user or guest comes onto the network and ISE portal uses a privately-signed certificate for the Guest Portal, they get certificate errors or potentially have their browser block them from the portal page. To avoid all that, use a publicly-signed certificate for Portal use to ensure better user experience".

  https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215621-tls-ssl-certificates-in-ise.html

• Question 1118:

  Which JSON script is properly formatted?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 1119:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  R22

  int tun0

  vrf forwarding FINANCE

  ip add 10.10.10.2 255.255.255.0

  tunn source e0/0

  tunnel dest 209.165.200.230

  no shut

  ip route vrf FINANCE 10.10.111.0 255.255.255.0 tunn0

  int et0/1

  vrf forwarding FINANCE

  ip address 10.22.22.1 255.255.255.252

  Verification:

  

  

• Question 1120:

  Refer to the exhibit.

  

  An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic. Which two configurations must be applied to drop these types of traffic when it continuously exceeds 320 kbps? (Choose two)

  A. R1(config-pmap)#class CLASS-CoPP-ManagementR1(config-pmap-c)#police 32 conform-action transmit exceed-action drop violate-action transmit
  B. R1(config)#policy-map POLICY-CoPPR1(config-pmap)#class CLASS-CoPP-ManagementR1(config-pmap-c)#police 320000 conform-action transmit exceed-action drop violate-action drop
  C. R1(config)#policy-map POLICY-CoPPR1(config-pmap)#class CLASS-CoPP-ManagementR1(config-pmap-c)#police 320000 conform-action transmit exceed-action transmit violate-action drop
  D. R1(config)#control-planeR1(config-cp)# service-policy output POLICY-CoPP
  E. R1(config)#control-planeR1(config-cp)# service-policy input POLICY-CoPP
  C. R1(config)#policy-map POLICY-CoPPR1(config-pmap)#class CLASS-CoPP-ManagementR1(config-pmap-c)#police 320000 conform-action transmit exceed-action transmit violate-action drop
  E. R1(config)#control-planeR1(config-cp)# service-policy input POLICY-CoPP

  ---

  Explanation

  "continuously" would imply that occasionally exceeding 320kbps is ok. "exceed drop" will not allow it to ever go above it.