Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1151:

  Refer to the exhibit.

  

  Assuming that R1 is a CE router, which VRF is assigned to Gi0/0 on R1?

  A. VRF VPN_B
  B. Default VRF
  C. Management VRF
  D. VRF VPN_A
  B. Default VRF

  ---

  Explanation

  There is nothing special with the configuration of Gi0/0 on R1. Only Gi0/0 interface on R2 is assigned to VRF VPN_A. The default VRF here is similar to the global routing table concept in Cisco IOS

• Question 1152:

  Refer to exhibit.

  

  What are two reasons for IP SLA tracking failure? (Choose two )

  A. The destination must be 172.30 30 2 for icmp-echo
  B. The threshold value is wrong
  C. A route back to the R1 LAN network is missing in R2
  D. The source-interface is configured incorrectly.
  E. The default route has the wrong next hop IP address
  C. A route back to the R1 LAN network is missing in R2
  D. The source-interface is configured incorrectly.

  ---

  Explanation

  Timeout (in milliseconds) sets the amount of time an IP SLAs operation waits for a response from its request packet. In other words, the timeout specifies how long the router should wait for a response to its ping before it is considered failed.Threshold (in milliseconds too) sets the upper threshold value for calculating network monitoring statistics created by an IP SLAs operation. Threshold is used to activate a response to IP SLA violation, e.g. send SNMP trap or start secondary SLA operation. In other words, the threshold value is only used to indicate over threshold events, which do not affect reachability but may be used to evaluate the proper settings for the timeout command.

  For reachability tracking, if the return code is OK or OverThreshold, reachability is up; if not OK, reachability is down.

  This tutorial can help you revise IP SLA tracking topic:

  http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/813-cisco-router-ipslabasic.html

  Note: Maybe some of us will wonder why there are these two commands:

  R1(config)#ip route 0.0.0.0 0.0.0.0 172.20.20.2 track 10

  R1(config)#no ip route 0.0.0.0 0.0.0.0 172.20.20.2

  In fact the two commands:

  ip route 0.0.0.0 0.0.0.0 172.20.20.2 track 10

  ip route 0.0.0.0 0.0.0.0 172.20.20.2 are different. These two static routes can co-exist in the routing table. Therefore if the tracking goes down, the first command will be removed but the second one still exists and the backup path is not preferred. So we have to remove the second one.

• Question 1153:

  Which policy feature is used with TrustSec to provide endpoint entitlement in an enterprise network?

  A. security group tags
  B. access control lists
  C. virtual local area network
  D. virtual routing and forwarding
  A. security group tags

• Question 1154:

  SIMULATION

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  R1

  config t

  flow record NetFlow-Record

  match ipv4 source address

  match ipv4 destination address

  collect country bytes

  flow exporter NetFlow-Exporter

  destination 10.10.1.10

  transport udp 9996

  flow monitor NetFlow-Monitor

  record NetFlow-Record

  exporter NetFlow-Exporter

  exit

  int et0/0 ip flow monitor NetFlow-Monitor input

  ip sla 1

  http get

  http://10.10.1.100

  frequency 600

  exit

  ip sla schedule 1 start-time now

  Sw1

  config t monitor session 2 source int e0/0 monitor session 2 source int et0/2

  monitor session 2 destination interface e1/0

• Question 1155:

  Which method requires a client to authenticate and has the capability to function without encryption?

  A. open
  B. WEP
  C. WebAuth
  D. PSK
  C. WebAuth

• Question 1156:

  

  Refer to the exhibit. The existing configuration must be updated to terminate all EXEC sessions after 120 minutes.

  Which command set should be applied?

  A. line vty 0 15 session-limit 120
  B. line vty 0 15 exec-timeout 120
  C. line vty 0 15 absolute-timeout 120
  D. line vty 0 15 session-timeout 120
  B. line vty 0 15 exec-timeout 120

• Question 1157:

  Which two entities are Type 1 hypervisors? (Choose two.)

  A. Oracle VM VirtualBox
  B. Microsoft Hyper-V
  C. VMware server
  D. VMware ESX
  E. Microsoft Virtual PC
  B. Microsoft Hyper-V
  D. VMware ESX

  ---

  Explanation

  A bare-metal hypervisor (Type 1) is a layer of software we install directly on top of a physical server and its underlying hardware. There is no software or any operating system in between, hence the name bare-metal hypervisor. A Type 1 hypervisor is proven in providing excellent performance and stability since it does not run inside Windows or any other operating system. These are the most common type 1 hypervisors: + VMware vSphere with ESX/ESXi

  + KVM (Kernel-Based Virtual Machine)

  + Microsoft Hyper-V

  + Oracle VM

  + Citrix Hypervisor (formerly known as Xen Server)

  References:

  https://phoenixnap.com/kb/what-is-hypervisor-type-1-2

• Question 1158:

  Which two southbound interfaces originate from Cisco Catalyst Center (formerly DNA Center) and terminate at fabric underlay switches'? (Choose two )

  A. ICMP Discovery
  B. UDP67 DHCP
  C. TCP 23 Telnet
  D. UDP6007 NetFlow
  E. UDP 162 SNMP
  B. UDP67 DHCP
  E. UDP 162 SNMP

• Question 1159:

  Refer to the exhibit.

  

  An engineer is troubleshooting an mDNS issue in an environment where Cisco ISE is used to dynamically assign mDNS roles to users. The engineer has confirmed that ISE is sending the correct values, but name resolution is not functioning as expected.

  Which WLC configuration change resolves the issue?

  A. Enable AAA Override.
  B. Enable Aironet IE.
  C. Set MFP client protection to Required.
  D. Change NAC state to ISE NAC.
  A. Enable AAA Override.

• Question 1160:

  Which message type is valid for IGMPv3?

  A. leave group
  B. hello
  C. graft
  D. source-specific membership report
  D. source-specific membership report