Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1191:

  What is the wireless received signal strength indicator?

  A. The value given to the strength of the wireless signal received compared to the noise level
  B. The value of how strong the wireless signal Is leaving the antenna using transmit power, cable loss, and antenna gain
  C. The value of how much wireless signal is lost over a defined amount of distance
  D. The value of how strong a tireless signal is receded, measured in dBm
  D. The value of how strong a tireless signal is receded, measured in dBm

  ---

  Explanation

  RSSI, or "Received Signal Strength Indicator," is a measurement of how well your device can hear a signal from an access point or router. It's a value that is useful for determining if you have enough signal to get a good wireless connection. This value is measured in decibels (dBm) from 0 (zero) to -120 (minus 120). The closer to 0 (zero) the stronger the signal is which means it's better, typically voice networks require a - 65db or better signal level while a data network needs - 80db or better.

• Question 1192:

  Drag and drop

  Refer to the exhibit.

  

  An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts.

  Drag and drop the commands into the configuration to achieve these results. Some commands may be used more than once. Not all commands are used.

  Select and Place:

  

  

• Question 1193:

  Refer to the exhibit. CR2 and CR3 ate configured with OSPF. Which configuration, when applied to CR1. allows CR1 to exchange OSPF Information with CR2 and CR3 but not with other network devices or on new Interfaces that are added to CR1?

  

  A. router ospf 1network 0.0.0.0 255.255.255.255 area 0passive-interface GigabitEthernet0/2
  B. router ospf 1network 10.165.231.0 0.0.0.255 area 0network 172.27.206.0 0.0.0.255 area 0network 172.24.206.0 0.0.0.255 area 0
  C. interface Gi0/2ip ospf 1 area 0router ospf 1passive-interface GigabitEthernet0/2
  D. router ospf 1network 10.0.0.0 0.255.255.255 area 0network 172.16.0.0 0.15.255.255 area 0passive-interface GigabitEthernet0/2
  D. router ospf 1network 10.0.0.0 0.255.255.255 area 0network 172.16.0.0 0.15.255.255 area 0passive-interface GigabitEthernet0/2

• Question 1194:

  Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address 10.10.10.1?

  A. ip access-list extended 100deny tcp host 10.10.10.1 any eq 80permit ip any any
  B. ip access-list extended 200deny tcp host 10. 10.10.1 eq 80 anypermit ip any any
  C. ip access-list extended NO_HTTPdeny tcp host 10.10.10.1 any eq 80
  D. ip access-list extended 10deny tcp host 10.10.10.1 any eg 80permit ip any any
  A. ip access-list extended 100deny tcp host 10.10.10.1 any eq 80permit ip any any

• Question 1195:

  Refer to the exhibit.

  

  An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthernet 0/1.

  Which configuration command set will allow this traffic without disrupting existing traffic flows?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 1196:

  Which protocol is implemented to establish secure control plane adjacencies between Cisco SD-WAN nodes?

  A. IKE
  B. TLS
  C. IPsec
  D. ESP
  B. TLS

  ---

  Explanation

  The Cisco SD-WAN control plane has been designed with network and device security in mind. The foundation of the control plane is one of two security protocols derived from SSL (Secure Sockets Layer)-the Datagram Transport Layer Security (DTLS) protocol and the Transport Layer Security (TLS) protocol.

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/securitybook/security-overvi

• Question 1197:

  Which two steps are required for a complete Cisco DNA Center upgrade? (Choose two.)

  A. golden image selection
  B. automation backup
  C. proxy configuration
  D. application updates
  E. system update
  D. application updates
  E. system update

  ---

  Explanation

  A complete Cisco DNA Center upgrade includes "System Update" and "Appplication Updates" Reference:

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/upgrade/ b_cisco_dna_center_upgrade_guide/m_upgrade_to_cisco_dna_center_2_2_2_x.html

• Question 1198:

  Refer to the exhibit.

  

  Traffic is not passing between SW1 and SW2. Which action fixes the issue?

  A. Configure LACP mode on S1 to passive.
  B. Configure switch port mode to ISL on S2.
  C. Configure PAgP mode on S1 to desirable.
  D. Configure LACP mode on S1 to active.
  C. Configure PAgP mode on S1 to desirable.

• Question 1199:

  What is one characteristic of an AP that is operating in Mobility Express mode?

  A. It is recommended for large scale deployments.
  B. It requires a centralized WLC.
  C. At least three APs are needed for WLC redundancy.
  D. It requires an AP to act as a WLC.
  D. It requires an AP to act as a WLC.

• Question 1200:

  Refer to the exhibit.

  

  What is the effect of these commands on the BR and HQ tunnel interfaces?

  

  A. The tunnel line protocol goes down when the keepalive counter reaches 6
  B. The keepalives are sent every 5 seconds and 3 retries
  C. The keepalives are sent every 3 seconds and 5 retries.
  D. The tunnel line protocol goes down when the keepalive counter reaches 5
  B. The keepalives are sent every 5 seconds and 3 retries