Cisco CCNP 350-401 Questions & Answers

• Question 1111:

  Refer to the exhibit.

  

  The connecting between SW1 and SW2 is not operational. Which two actions resolve the issue? (Choose two)

  A. configure switchport mode access on SW2

  B. configure switchport nonegotiate on SW2

  C. configure switchport mode trunk on SW2

  D. configure switchport nonegotiate on SW1

  E. configure switchport mode dynamic desirable on SW2

  Correct Answer: CE

• Question 1112:

  Refer to the exhibit.

  

  Which action completes the configuration to achieve a dynamic continuous mapped NAT for all users?

  A. Configure a match-host type NAT pool

  B. Reconfigure the pool to use the 192.168 1 0 address range

  C. Increase the NAT pool size to support 254 usable addresses

  D. Configure a one-to-one type NAT pool

  Correct Answer: C

  Why would you want to chose match-host option? This is just to ensure that you're matching the host portion of the IP range given of the Inside local to the inside global, which is not very applicable here. Go for C, this is much more applicable, if we assume we need to use the whole IP range of /24 and not just 1-100.

• Question 1113:

  Refer to the exhibit.

  

  An engineer is configuring an EtherChannel between Switch1 and Switch2 and notices the console message on Switch2. Based on the output, which action resolves this issue?

  A. Configure less member ports on Switch2.

  B. Configure the same port channel interface number on both switches

  C. Configure the same EtherChannel protocol on both switches

  D. Configure more member ports on Switch1.

  Correct Answer: C

  In this case, we are using your EtherChannel without a negotiation protocol on Switch2. As a result, if the opposite switch is not also configured for EtherChannel operation on the respective ports, there is a danger of a switching loop. The EtherChannel Misconfiguration Guard tries to prevent that loop from occuring by disabling all the ports bundled in the EtherChannel.

• Question 1114:

  Refer to the exhibit.

  

  Extended access-list 100 is configured on interface GigabitEthernet 0/0 in an inbound direction, but it does not have the expected behavior of allowing only packets to or from 192 168 0.0/16

  Which command set properly configures the access list?

  A. R1(config)#no access-list 100 deny ip any any

  B. R1(config)#no access-list 100 seq 10 R1(config)#access-list 100 seq 40 deny ip any any

  C. R1(config)#ip access-list extended 100 R1(config-ext-nacl)#5 permit ip any any

  D. R1(config)#ip access-list extended 100 R1(config-ext-nacl)#no 10

  Correct Answer: D

  The first ACL statement of "10 deny ip any any" will match and drop all traffic so we have to remove this statement.

• Question 1115:

  An engineer runs the sample code, and the terminal returns this output. Which change to the sample code corrects this issue?

  

  A. Change the JSON method from load() to loads().

  B. Enclose null in the test_json string in double quotes

  C. Use a single set of double quotes and condense test_json to a single line

  D. Call the read() method explicitly on the test_json string

  Correct Answer: A

  

• Question 1116:

  An engineer must create an EEM applet that sends a syslog message in the event a change happens in the network due to trouble with an OSPF process. Which action should the engineer use?

  

  A. action 1 syslog msg "OSPF ROUTING ERROR"

  B. action 1 syslog send "OSPF ROUTING ERROR"

  C. action 1 syslog pattern "OSPF ROUTING ERROR"

  D. action 1syslog write "OSPF ROUTING ERROR"

  Correct Answer: A

  Only these keywords are available:

  Router1(config-applet)#action 1 syslog facility Facility string filter Filter destination of syslog message msg Syslog message priority Priority of syslog message

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/command/eem-cr-book/eem-cr-a2.html

• Question 1117:

  Refer to the exhibit.

  

  A network administrator configured RSPAN to troubleshoot an issue between switchl and switch2. The switches are connected using interface GigabitEthernet 1/1 An external packet capture device is connected to swich2 interface GigabitEthernet1/2 Which two commands must be added to complete this configuration? (Choose two)

  A. switch2(config-if)# switchport trunk allowed vlan 10,20,30,40,50,60,70-80

  B. switch2(config)# monitor session 1 source remote vlan 70 switch2(config)# monitor session 1 destination interface GigabitEthernet1/2

  C. switch1(config)# interface GigabitEthernet 1/1 switch1(config-if)# switchport mode access switch1(config-if)# switchport access vlan 10 switch2(config)# interface GigabitEthernet 1/1 switch2(config-if)# switchport mode access switch2(config-if)# switchport access vlan 10

  D. switch2(config)# monitor session 2 destination vlan 10

  E. switch2(config)# monitor session 1 source remote vlan 70 switch2(config)# monitor session 1 destination interface GigabitEthernet1/1

  Correct Answer: AB

• Question 1118:

  Refer to the exhibit.

  

  An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts. Which command set accomplishes this task?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  In this case we need to configure a VLAN access-map to deny HTTP traffic and apply it to VLAN 10. To do it, first create an access-list, by which interesting traffic will be matched. The principle of VLAN access-map config is similar to the

  route-map principle.

  After this we'll create a vlan access-map, which has two main parameters: action and match. Match: by this parameter the interesting traffic is matched and here RACL or MAC ACL can be applied as well. Action: what to do with matched

  traffic. Two main parameters exist: Drop and Forward. In case of Drop, matched traffic will be dropped, and in case of forward, matched traffic will be allowed. A good reference and example can be found at https://www.networkstraining.com/

  vlan-access-mapexample-configuration/

• Question 1119:

  Refer to the exhibit.

  

  Which Python code snippet prints the descriptions of disabled interfaces only?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  != is the "Is not true operator" think along these lines and B is clarly correct.

• Question 1120:

  How do cloud deployments differ from on-prem deployments?

  A. Cloud deployments require longer implementation times than on-premises deployments

  B. Cloud deployments are more customizable than on-premises deployments.

  C. Cloud deployments require less frequent upgrades than on-premises deployments.

  D. Cloud deployments have lower upfront costs than on-premises deployments.

  Correct Answer: D