Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 1131:

  Refer to the exhibit. An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected. Which action will resolve this issue?

  

  A. enable AAA override

  B. utilize RADIUS profiling

  C. require a DHCP address assignment

  D. set a NAC state

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010110111.html

• Question 1132:

  What is one fact about Cisco SD-Access wireless network deployments?

  A. The access point is part of the fabric underlay

  B. The WLC is part of the fabric underlay

  C. The access point is part the fabric overlay

  D. The wireless client is part of the fabric overlay

  Correct Answer: C

  Access Points

  +

  AP is directly connected to FE (or to an extended node switch)

  +

  AP is part of Fabric overlay Reference: https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2018/pdf/BRKEWN-2020.pdf

• Question 1133:

  Refer to the exhibit.

  

  An engineer must create a configuration that executes the show run command and then terminates the session when user CCNP logs in. Which configuration change is required?

  A. Add the access-class keyword to the username command

  B. Add the access-class keyword to the aaa authentication command

  C. Add the autocommand keyword to the username command

  D. Add the autocommand keyword to the aaa authentication command

  Correct Answer: C

  The autocommand causes the specified command to be issued automatically after the user logs in. When the command is complete, the session is terminated. Because the command can be any length and can contain embedded spaces, commands using the autocommand keyword must be the last option on the line. In this specific question, we have to enter this line username CCNP autocommand show running-config.

• Question 1134:

  Which two threats does AMP4E have the ability to block? (Choose two.)

  A. DDoS

  B. ransomware

  C. Microsoft Word macro attack

  D. SQL injection

  E. email phishing

  Correct Answer: BC

  https://www.cisco.com/c/dam/en/us/products/collateral/security/amp-for-endpoints/c11-742008-00-cisco-amp-for-endpoints-wp-v2a.pdf

• Question 1135:

  If the noise floor is -90 dBm and the wireless client is receiving a signal of -75 dBm, what is the SNR?

  A. 15

  B. 1.2

  C. -165

  D. 83

  Correct Answer: A

  There is obviously a typo here, you cant go to the + range.. Maximum achievable strength is -30dbm. The question should say -75, not 75.

• Question 1136:

  Which command set configures RSPAN to capture outgoing traffic from VLAN3 on interface GigabitEthernet 0/3 while ignoring other VLAN trafic on the same interface?

  A. monitor session 2 source interface gigabitethernet 0/3 tx monitor session 2 filter vlan 1 - 2 , 4 - 4094

  B. monitor session 2 source interface gigabitethernet 0/3 tx monitor session 2 filter vlan 3

  C. monitor session 2 source interface gigabitethernet 0/3 rx monitor session 2 filter vlan 1 - 2 , 4 - 4094

  D. monitor session 2 source interface gigabitethernet 0/3 rx monitor session 2 filter vlan 3

  Correct Answer: B

• Question 1137:

  Refer to the exhibit.

  

  An engineer configures a new HSRP group. While reviewing the HSRP status, the engineer sees the logging message generated on R2. Which is the cause of the message?

  A. The same virtual IP address has been configured for two HSRP groups

  B. The HSRP configuration has caused a spanning-tree loop

  C. The HSRP configuration has caused a routing loop

  D. A PC is on the network using the IP address 10.10.1.1

  Correct Answer: A

• Question 1138:

  What is a benefit of a virtual machine when compared with a physical server?

  A. Multiple virtual servers can be deployed on the same physical server without having to buy additional hardware.

  B. Virtual machines increase server processing performance.

  C. The CPU and RAM resources on a virtual machine cannot be affected by other virtual machines.

  D. Deploying a virtual machine is technically less complex than deploying a physical server.

  Correct Answer: A

  Definitely not C, because CPU resources are shared in all well known hypervisors, RAM may be shared or not (depends on hypervisor)

• Question 1139:

  Refer to the exhibit.

  

  An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthernet 0/1. Which configuration command set will allow this traffic without disrupting existing traffic flows?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 1140:

  Refer to the exhibit

  

  Which single security feature is recommended to provide Network Access Control m the enterprise?

  A. MAB

  B. 802.1X

  C. WebAuth

  D. port security sticky MAC

  Correct Answer: B