Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 1141:

  Where is radio resource management performed in a Cisco SD-Access wireless solution?

  A. DNA Center

  B. control plane node

  C. wireless controller

  D. Cisco CMX

  Correct Answer: C

  Fabric wireless controllers manage and control the fabric-mode APs using the same general model as the traditional local-mode controllers which offers the same operational advantages such as mobility control and radio resource management. A significant difference is that client traffic from wireless endpoints is not tunnelled from the APs to the wireless controller. Instead, communication from wireless clients is encapsulated in VXLAN by the fabric APs which build a tunnel to their first-hop fabric edge node. Wireless traffic it tunneled to the edge nodes as the edge nodes provide fabric services such as the Layer 3 Anycast Gateway, policy, and traffic enforcement. https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html

• Question 1142:

  Refer to the exhibit.

  

  Cloud deployments require less frequent upgrades than

  External users require HTTP connectivity to an internal company web server that is listening on TCP port 8080. Which command set accomplishes this requirement?

  

  External users require HTTP connectivity to an internal company web server that is listening on TCP port 8080. Which command set accomplishes this requirement?

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  E. Option E

  Correct Answer: B

• Question 1143:

  Refer to the exhibit.

  

  An engineer attempts to create a configuration to allow the Blue VRF to leak Into the global fouling table, but the configuration does not function as expected. Which action resolves this Issue?

  A. Change the access-list destination mask to a wildcard.

  B. Change the source network that Is specified in access-list 101.

  C. Change the route-map configuration to VRF_BLUE.

  D. Change the access-list number in the route map

  Correct Answer: A

• Question 1144:

  An engineer must configure HSRP group 300 on a Cisco IOS router. When the router is functional, it must be the active HSRP router

  The peer router has been configured using the default priority value.

  Which three commands are required? (Choose three.)

  A. standby version 2 standby 300 priority 110 standby 300 preempt

  B. standby 300 priority 110 standby 300 timers 1 110

  C. standby version 2 standby 300 priority 90 standby 300 preempt

  D. standby 300 priority 90 standby 300 preempt

  Correct Answer: A

  In HSRP version 1, group numbers are supported the range from 0 to 255 and HSRP version 2 expands the group number range from 0 to 4095.

  *

  So it should HSRP v2 to assign the group no. 300

  *

  Default priority of the HSRP is 100 and the Router with higher priority no. will become Active Router. So the priority set over 100 for active router.

• Question 1145:

  Refer to the exhibit.

  

  An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router. However, the router can still ping hosts on the 209.165.200.0/24 subnet.

  Which explanation of this behavior is true?

  A. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.

  B. Only standard access control lists can block traffic from a source IP address.

  C. After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.

  D. The access control list must contain an explicit deny to block traffic from the router.

  Correct Answer: A

  Locally (control plane) generated traffic goes from control plane directly to "tx-ring". That is different from processing/forwarding of Transit traffic. Please see the platform's "packet journey" session of Cisco Live or other documentation to see the different internal path and processing for: Transit, forus, exception, locally generated.

• Question 1146:

  How does an on-premises infrastructure compare to a cloud infrastructure?

  A. On-premises can increase compute power faster than cloud

  B. On-premises requires less power and cooling resources than cloud

  C. On-premises offers faster deployment than cloud

  D. On-premises offers lower latency for physically adjacent systems than cloud.

  Correct Answer: D

• Question 1147:

  Refer to the exhibit.

  

  Which router is the designated router on the segment 192.168.0.0/24?

  A. This segment has no designated router because it is a nonbroadcast network type.

  B. This segment has no designated router because it is a p2p network type.

  C. Router Chicago because it has a lower router ID

  D. Router NewYork because it has a higher router ID

  Correct Answer: B

• Question 1148:

  A network administrator has designed a network with two multilayer switches on the distribution layer, which act as default gateways for the end hosts. Which two technologies allow every end host in a VLAN to use both gateways? (Choose two)

  A. GLBP

  B. HSRP

  C. MHSRP

  D. VSS

  E. VRRP

  Correct Answer: AD

  VSS combine two switches into one logical switch.

  both of them have their own control and data plane,

  both of their data plane will keep alive,

  once the master control plane is down,

  the other take charge.

  MHSRP

  mhsrp can't let all host use both gateway, 50% host use gateway1, another 50% host use gateway 2 (fromWINDSON)

• Question 1149:

  Refer to the exhibit.

  

  An engineer is configuring an EtherChannel between Switch1 and Switch2 and notices the console message on Switch2. Based on the output, which action resolves this issue?

  A. Configure less member ports on Switch2.

  B. Configure the same port channel interface number on both switches

  C. Configure the same EtherChannel protocol on both switches

  D. Configure more member ports on Switch1.

  Correct Answer: C

  In this case, we are using your EtherChannel without a negotiation protocol on Switch2. As a result, if the opposite switch is not also configured for EtherChannel operation on the respective ports, there is a danger of a switching loop. The EtherChannel Misconfiguration Guard tries to prevent that loop from occuring by disabling all the ports bundled in the EtherChannel.

• Question 1150:

  Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?

  A. MTU

  B. Window size

  C. MRU

  D. MSS

  Correct Answer: D

  The TCP Maximum Segment Size (TCP MSS) defines the maximum amount of data that a host is willing to accept in a single TCP/IP datagram. This TCP/IP datagram might be fragmented at the IP layer. The MSS value is sent as a TCP header option only in TCP SYN segments. Each side of a TCP connection reports its MSS value to the other side. Contrary to popular belief, the MSS value is not negotiated between hosts. The sending host is required to limit the size of data in a single TCP segment to a value less than or equal to the MSS reported by the receiving host. TCP MSS takes care of fragmentation at the two endpoints of a TCP connection, but it does not handle the case where there is a smaller MTU link in the middle between these two endpoints. PMTUD was developed in order to avoid fragmentation in the path between the endpoints. It is used to dynamically determine the lowest MTU along the path from a packet's source to its destination. Reference: http://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulationgre/ 25885-pmtud-ipfrag.html (there is some examples of how TCP MSS avoids IP Fragmentation in this link but it is too long so if you want to read please visit this link) Note: IP fragmentation involves breaking a datagram into a number of pieces that can be reassembled later.