Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1121:

  DRAG DROP

  Drag and drop the automation characteristics from the left onto the appropriate tools on the right.

  Select and Place:

  

  

• Question 1122:

  A customer has a wireless network deployed within a multi-tenant building. The network provides client access, location-based services, and is monitored using Cisco DNA Center. The security department wants to locate and track malicious devices based on threat signatures.

  Which feature is required for this solution?

  A. Cisco aWIPS policies on the WLC
  B. Cisco aWIPS policies on Cisco DNA Center
  C. malicious rogue rules on the WLC
  D. malicious rogue rules on Cisco DNA Center
  B. Cisco aWIPS policies on Cisco DNA Center

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-rogue-management-application/2-1-2/quick-start-guide/b_rogue_management_qsg_2_1_2/b_rogue_management_qsg_1_4_chapter_00.html

• Question 1123:

  Refer to the exhibit.

  

  An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as an entry point.

  Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 1124:

  What is a characteristic of omnidirectional antennas?

  A. It includes dish antennas.
  B. It has high gain.
  C. It provides the most focused and narrow beamwidth.
  D. It includes dipole antennas.
  D. It includes dipole antennas.

• Question 1125:

  Which DHCP option provides the CAPWAP APs with the address of the wireless controller(s)?

  A. 43
  B. 66
  C. 69
  D. 150
  A. 43

  ---

  Explanation

  DHCP option 43 is an option used for providing Wireless LAN Controller IP addresses to the AP. The DHCP option 43 is used to notify the AP to convert into CAPWAP AP.

• Question 1126:

  Refer to the exhibit.

  

  The port channel between the switches does not work as expected.

  Which action resolves the issue?

  A. Interface Gi0/0 on Switch2 must be configured as passive.
  B. Interface Gi0/1 on Switch1 must be configured as desirable.
  C. interface Gi0/1 on Switch2 must be configured as active.
  D. Trucking must be enabled on both Interfaces on Switch2.
  C. interface Gi0/1 on Switch2 must be configured as active.

• Question 1127:

  Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller?

  A. Option 43
  B. Option 60
  C. Option 67
  D. Option 150
  A. Option 43

• Question 1128:

  Which deployment option of Cisco NQFW provides scalability?

  A. clustering
  B. Inline tap
  C. high availability
  D. tap
  C. high availability

• Question 1129:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  R3

  Config#int et0/1 config-if#ip ospf priority 255

  R20

  clear ip ospf process

  yes

  R10

  int et0/0

  ip ospf priority 0

  R2

  clear ip ospf process

  yes

• Question 1130:

  Which technology provides a secure communication channel for all traffic at Layer 2 of the OSI model?

  A. MACsec
  B. IPsec
  C. SSL
  D. Cisco Trustsec
  A. MACsec

  ---

  Explanation

  MACsec, defined in 802.1AE, provides MAC-layer encryption over wired networks by using out-ofband methods for encryption keying. The MACsec Key Agreement (MKA) Protocol provides the required session keys and manages the required encryption keys. MKA and MACsec are implemented after successful authentication using the 802.1x Extensible Authentication Protocol (EAP-TLS) or Pre Shared Key (PSK) framework.

  A switch using MACsec accepts either MACsec or non-MACsec frames, depending on the policy associated with the MKA peer. MACsec frames are encrypted and protected with an integrity check value (ICV). When the switch receives frames from the MKA peer, it decrypts them and calculates the correct ICV by using session keys provided by MKA. The switch compares that ICV to the ICV within the frame. If they are not identical, the frame is dropped. The switch also encrypts and adds an ICV to any frames sent over the secured port (the access point used to provide the secure MAC service to a MKA peer) using the current session key.

  References:

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-9/configuration_guide/sec/b_169_sec_9300_cg/macsec_encryption.htmlNote:CiscoTrustsecisthesolutionwhichincludesMACsec.