Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1111:

  A switch is attached to router R1 on its gig 0/0 interface. Fort security reasons, you want to prevent R1 from sending OSPF hellos to the switch.

  Which command should be enabled to accomplish this?

  A. R1(config-router)#ip ospf hello disable
  B. R1(config-router)#ip ospf hello-interval 0
  C. R1(config)#passive-interface Gig 0/0
  D. R1(config-router)#passive-interface Gig 0/0
  D. R1(config-router)#passive-interface Gig 0/0

• Question 1112:

  Which encoding is used to protect a username and login with RESTful API basic authentication?

  A. Base64
  B. MD5
  C. SHA-1
  D. Type-7
  A. Base64

• Question 1113:

  DRAG DROP

  Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.

  Select and Place:

  

  

• Question 1114:

  Refer to the exhibit.

  

  An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected.

  Which action will resolve this issue?

  A. enable AAA override
  B. utilize RADIUS profiling
  C. require a DHCP address assignment
  D. set a NAC state
  B. utilize RADIUS profiling

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010110111.html

• Question 1115:

  What is the difference between the enable password and the enable secret password when password encryption is enable on an IOS device?

  A. The enable password is encrypted with a stronger encryption method.
  B. There is no difference and both passwords are encrypted identically.
  C. The enable password cannot be decrypted.
  D. The enable secret password is protected via stronger cryptography mechanisms.
  D. The enable secret password is protected via stronger cryptography mechanisms.

  ---

  Explanation

  The "enable secret" password is always encrypted (independent of the "service passwordencryption" command) using MD5 hash algorithm. The "enable password" does not encrypt the password and can be view in clear text in the running-config. In order to encrypt the "enable password", use the "service password-encryption" command. This command will encrypt the passwords by using the Vigenere encryption algorithm. Unfortunately, the Vigenere encryption method is cryptographically weak and trivial to reverse. The MD5 hash is a stronger algorithm than Vigenere so answer 'The enable secret password is protected via stronger cryptography mechanisms' is correct.

• Question 1116:

  Refer to the exhibit.

  

  PC-1 must access the web server on port 8080.

  To allow this traffic, which statement must be added to an access control list that is applied on SW2 port G0/0 in the inbound direction?

  A. permit host 172.16.0.2 host 192.168.0.5 eq 8080
  B. permit host 192.168.0.5 host 172.16.0.2 eq 8080
  C. permit host 192.168.0.5 eq 8080 host 172.16.0.2
  D. permit host 192.168.0.5 it 8080 host 172.16.0.2
  C. permit host 192.168.0.5 eq 8080 host 172.16.0.2

  ---

  Explanation

  The inbound direction of G0/0 of SW2 only filter traffic from Web Server to PC-1 so the source IP address and port is of the Web Server.

• Question 1117:

  What is one benefit of adopting a data modeling language?

  A. augmenting management process using vendor centric actions around models
  B. refactoring vendor and platform specific configurations with widely compatible configurations
  C. augmenting the use of management protocols like SNMP for status subscriptions
  D. deploying machine-friendly codes to manage a high number of devices
  B. refactoring vendor and platform specific configurations with widely compatible configurations

• Question 1118:

  Refer to the exhibit.

  

  A network engineer must permit administrators to automatically authenticate if there is no response from either of the AAA servers.

  Which configuration achieves these results?

  A. aaa authentication enable default group radius local
  B. aaa authentication login default group radius
  C. aaa authentication login default group tacacs+ line
  D. aaa authentication login default group radius none
  D. aaa authentication login default group radius none

• Question 1119:

  Refer to the exhibit.

  

  An engineer must configure an eBGP neighborship to Router B on Router

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 1120:

  Refer to the exhibit.

  

  An engineer must prevent the R6 loopback from getting into Area 2 and Area 3 from Area 0.

  Which action must the engineer take?

  A. Apply a fitter list inbound on R2 and R9
  B. Apply a filter list outbound on R3 and R7
  C. Apply a filter list outbound on R7 only.
  D. Apply a filter list inbound on R3 and R7
  B. Apply a filter list outbound on R3 and R7

  ---

  Explanation

  This question asks to prevent route advertised into Area 2 and Area 3 only. It does not ask to prevent route advertised into Area 0 so applying a filter list outbound on R3 and R7 would best fit the requirement.