Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1141:

  Refer to the exhibit.

  

  What is the result of the NTP configuration?

  A. The router will use the address of loppback 0 to communicate with the NTP server.
  B. The router will advertise but not listen to NTP broadcast packets.
  C. The router will be used as an NTP authoritative server only if it synchronized with an outside source.
  D. The router will be used as an NTP authoritative server, even if it is not synchronized with an outside source.
  D. The router will be used as an NTP authoritative server, even if it is not synchronized with an outside source.

• Question 1142:

  Which data format can be used for an API request?

  A. HTML
  B. PERL
  C. JSON
  D. Python
  C. JSON

• Question 1143:

  Which component does Cisco Threat Defense use to measure bandwidth, application performance, and utilization?

  A. NetFlow
  B. Cisco Umbrella
  C. TrustSec
  D. Advanced Malware Protection for Endpoints
  A. NetFlow

  ---

  Explanation

  NetFlow was initially created to measure network traffic characteristics such as bandwidth, application performance, and utilization.

  References:

  https://www.cisco.com/c/dam/en/us/td/docs/security/network_security/ctd/ctd2-0/design_guides/ctd_2-0_cvd_guide_jul15.pdf

• Question 1144:

  A customer has two Cisco WLCs that manage separate APs throughout a building. Each WLC advertises the same SSID but terminates on different interfaces. Users report that they drop their connections and change IP addresses when roaming.

  Which action resolves this issue?

  A. Configure high availability
  B. Enable test roaming
  C. Enable client load balancing.
  D. Configure mobility groups
  D. Configure mobility groups

• Question 1145:

  Refer to the exhibit.

  

  Which router is elected as the VRRP primary virtual router?

  A. Router B
  B. Router D
  C. Router C
  D. Router A
  C. Router C

• Question 1146:

  DRAG DROP

  Drag and drop the snippets onto the blanks within the code to construct a script that advertises the network prefox 192.168.5.0 session. Not all options are used.

  Select and Place:

  

  

• Question 1147:

  Which capability does a distributed virtual switch have?

  A. use floating static routes
  B. provide centralized management for virtual switches
  C. run dynamic routing protocols
  D. use advanced IPsec encryption algorithms
  B. provide centralized management for virtual switches

• Question 1148:

  Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?

  A. vBond
  B. vSmart
  C. vManage
  D. PNP server
  A. vBond

  ---

  Explanation

  vbond-as-stun-server: Enable Session Traversal Utilities for NAT (STUN) to allow the tunnel interface to discover its public IP address and port number when the vEdge router is located behind a NAT (on vEdge routers only).

  When you configure this command, vEdge routers can exchange their public IP addresses and port numbers over private TLOCs.

  With this configuration, the vEdge router uses the vBond orchestrator as a STUN server, so the router can determine its public IP address and public port number. (With this configuration, the router cannot learn the type of NAT that it is behind.) No overlay network control traffic is sent and no keys are exchanged over tunnel interface configured to the the vBond orchestrator as a STUN server. However, BFD does come up on the tunnel, and data traffic can be sent on it.

• Question 1149:

  Refer to the exhibit. An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic.

  

  Which two configurations must be applied to drop these types of traffic when it continuously exceeds 320 kbps? (Choose two)

  A. R1(config-pmap)#class CLASS-CoPP-Management R1(config-pmap-c)#police 32 conform-action transmit exceed-action drop violate-action transmit
  B. R1(config)#policy-map POLICY-CoPP R1(config-pmap)#class CLASS-CoPP-Management R1(config-pmap-c)#police 320000 conform-action transmit exceed-action drop violate-action drop
  C. R1(config)#policy-map POLICY-CoPP R1(config-pmap)#class CLASS-CoPP-Management R1(config-pmap-c)#police 320000 conform-action transmit exceed-action transmit violate-action drop
  D. R1(config)#control-plane R1(config-cp)# service-policy output POLICY-CoPP
  E. R1(config)#control-plane R1(config-cp)# service-policy input POLICY-CoPP
  C. R1(config)#policy-map POLICY-CoPP R1(config-pmap)#class CLASS-CoPP-Management R1(config-pmap-c)#police 320000 conform-action transmit exceed-action transmit violate-action drop
  E. R1(config)#control-plane R1(config-cp)# service-policy input POLICY-CoPP

  ---

  Explanation

  "continuously" would imply that occasionally exceeding 320kbps is ok. "exceed drop" will not allow it to ever go above it.

• Question 1150:

  An engineer must construct an access list for a Cisco Catalyst 9800 Series WLC that will redirect wireless guest users to a splash page that is hosted on a Cisco ISE server. The Cisco ISE servers are hosted at 10.9.11.141 and 10.1.11.141.

  Which access list meets the requirements?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D