Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1131:

  Which method should an engineer use to deal with a long-standing contention issue between any two VMs on the same host?

  A. Adjust the resource reservation limits
  B. Live migrate the VM to another host
  C. Reset the VM
  D. Reset the host
  A. Adjust the resource reservation limits

• Question 1132:

  Which statement about agent-based versus agentless configuration management tools is true?

  A. Agentless tools require no messaging systems between master and slaves.
  B. Agentless tools use proxy nodes to interface with slave nodes.
  C. Agent-based tools do not require a high-level language interpreter such as Python or Ruby on slave nodes.
  D. Agent-based tools do not require installation of additional software packages on the slave nodes.
  A. Agentless tools require no messaging systems between master and slaves.

• Question 1133:

  DRAG DROP

  Drag and drop the snippets onto the blanks within the code to construct a script that adds a prefix list to a route map and sets the local preference. Not all options are used

  Select and Place:

  

  

• Question 1134:

  In a Cisco SD-WAN network, which VPN Identifier is reserved as the transport VPN, carrying control traffic?

  A. VPN 0
  B. VPN 1
  C. VPN 512
  D. VPN 514
  A. VPN 0

  ---

  Explanation

  VPN 0--Transport VPN, which carries control traffic via the configured WAN transport interfaces. Initially, VPN 0 contains all of a device's interfaces except for the management interface, and all interfaces are disabled. VPN 512--Management VPN, which carries out-of-band network management traffic among the Viptela devices in the overlay network. The interface used for management traffic resides in VPN 512. By default, VPN 512 is configured and enabled on all vEdge routers except for vEdge 100. For controller devices, by default, VPN 512 is not configured.

  VPNs 1 through 511, and 513 through 65530--VPNs on vEdge routers for service-side data traffic.

  https://www.cisco.com/c/en/us/support/docs/routers/12000-series-routers/47321-ciscoef.html

• Question 1135:

  What is the purpose of the LISP routing and addressing architecture?

  A. It creates two entries for each network node, one for Its identity and another for its location on the network.
  B. It allows LISP to be applied as a network visualization overlay though encapsulation.
  C. It allows multiple Instances of a routing table to co-exist within the same router.
  D. It creates head-end replication used to deliver broadcast and multicast frames to the entire network.
  A. It creates two entries for each network node, one for Its identity and another for its location on the network.

  ---

  Explanation

  Locator ID Separation Protocol (LISP) solves this issue by separating the location and identity of a device through the Routing locator (RLOC) and Endpoint identifier (EID):

  + Endpoint identifiers (EIDs) -assigned to end hosts.

  + Routing locators (RLOCs) -assigned to devices (primarily routers) that make up the global routing system.

• Question 1136:

  Refer to the exhibit.

  

  Which command is required on router R1 to start receiving RESTCONF requests?

  A. R1(config)# ip http accounting commands 12 default
  B. R1(config)# ip http server
  C. R1(config)# restconf
  D. R1(config)# ip http access-class 12
  C. R1(config)# restconf

  ---

  Explanation

  The example is taken exactly from this document:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/167/b_167_programmability_cg/restconf_programmable_interface.pdf

  Section "Verifying RESTCONF Configuration"

  "The nginx process gets restrated and DMI process are started, when the restconf command is configured ...

  After AAA and the RESTCONF interface is configured, and nginx process and relevant DMI processes are running; the device is ready to receive RESTCONF requests."

• Question 1137:

  An engineer must configure the strongest password authentication to locally authenticate on a router. Which configuration must be used?

  A. username netadminsecret 5 $1$b1JUSkZbBS1Pyh4OzwXyZ1kSZ2
  B. username netadminsecret $15b1JuSk404850110QzwXyZ1k SZ2
  C. line Console 0password $15b1Ju$
  D. username netadminsecret 9 $9$vFpMfBelbRVV8SseX/bDAxtuV
  D. username netadminsecret 9 $9$vFpMfBelbRVV8SseX/bDAxtuV

  ---

  Explanation

  Scrypt is safer than MD5, so answer A is wrong and answer D is correct

  R1(config)#username user secret 0 Specifies an UNENCRYPTED secret will follow5 Specifies a MD5 HASHED secret will follow8 Specifies a PBKDF2 HASHED secret will follow9 Specifies a SCRYPT HASHED secret will follow<0-9> Encryption types not explicitly specifiedLINE The UNENCRYPTED (cleartext) user secretLINE The UNENCRYPTED (cleartext) user secret

• Question 1138:

  Refer to the exhibit.

  

  During deployment, a network engineer notices that voice traffic is not being tagged correctly as it traverses the network. Which COS to DSCP map must be modified to ensure that voice traffic is treated properly?

  A. COS of 5 to DSCP 46
  B. COS of 7 to DSCP 48
  C. COS of 6 to DSCP 46
  D. COS of 3 to DSCP of 26
  A. COS of 5 to DSCP 46

• Question 1139:

  Refer to the exhibit.

  

  An engineer entered the no spanning-tree bpduguard enable on interface fa1/0/7 command. Which statement describes the effect of this command?

  A. Fa1/0/7 remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode
  B. Interface Fa1/0/7 remains in err-disabled state until the errdisable recovery cause bpduguard command is entered in the interface configuration mode
  C. Fa1/0/7 remains in err-disabled state until the errdisable recovery bpduguard command is entered in the interface configuration mode
  D. Interface Fa1/0/7 remains in err-disabled state until the spanning-tree portfast bpduguard disable command is entered in the interface configuration mode
  E. Interface Fa1/0/7 returns to an up and operational state
  A. Fa1/0/7 remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode

• Question 1140:

  In which two ways does PIM dense mode function in the network? (Choose two.)

  A. It waits to forward multicast traffic until a downstream router requests the traffic.
  B. It utilizes the designated forwarder election to avoid multicast packet loops.
  C. It receives traffic from only one Reverse Path Forwarding interface.
  D. It forwards multicast traffic on all interfaces until a downstream router requests that forwarding stop.
  E. It uses a push method, and fallback occurs when RP information is lost.
  A. It waits to forward multicast traffic until a downstream router requests the traffic.
  D. It forwards multicast traffic on all interfaces until a downstream router requests that forwarding stop.