Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1201:

  What does the LAP send when multiple WLCs respond to the CISCO_CAPWAPCONTROLLER.localdomain hostname during the CAPWAP discovery and join process?

  A. broadcast discover request
  B. join request to all the WLCs
  C. unicast discovery request to each WLC
  D. Unicast discovery request to the first WLS that resolves the domain name
  C. unicast discovery request to each WLC

  ---

  Explanation

  The AP will attempt to resolve the DNS name CISCO-CAPWAP-CONTROLLER.localdomain. When the AP is able to resolve this name to one or more IP addresses, the AP sends a unicast CAPWAP Discovery Message to the resolved IP address(es). Each WLC that receives the CAPWAP Discovery Request Message replies with a unicast CAPWAP Discovery Response to the AP.

  References:

  https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107606-dns-wlc-config.html

• Question 1202:

  Which Cisco WLC feature allows a wireless device to perform a Layer 3 roam between two separate controllers without changing the client IP address?

  A. mobile IP
  B. mobility tunnel
  C. LWAPP tunnel
  D. GRE tunnel
  B. mobility tunnel

• Question 1203:

  SIMULATION

  

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  R2

  config t username NetworkAdmin privilege 15 password CiscoENCOR

  line vty 0 4

  login local

  transport input telnet rlogin

  exec-timeout 1200 0

  

  

  R1

  router bgp 10 no bgp default ipv4-unicast

  bgp router-id 10.1.1.111 neigh 209.165.200.226 remote-as 20 neigh 209.165.202.130 remote-as 30 address-family ipv4 network 10.1.1.10 mask 255.255.255.255 network 209.165.201.20 mask 255.255.255.255 network 209.165.201.10 mask 255.255.255.255 neigh 209.165.200.226 activate neigh 209.165.202.130 activate

• Question 1204:

  When deploying a Cisco Unified Wireless solution what is a design justification for using a distributed WLC deployment model?

  A. It reduces the number of WLCs that network administrators must support by locating them in a common location
  B. It more evenly distributes MAC ARP and ND processing over multiple switches which helps with scalability
  C. The number of wireless clients is low and the size of the physical campus is small
  D. There are no latency concerns about LWAPP and CAPWAP tunnels traversing the campus core network
  D. There are no latency concerns about LWAPP and CAPWAP tunnels traversing the campus core network

• Question 1205:

  In a Cisco SD-WAN network, which VPN Identifier is reserved as the transport VPN, carrying control traffic?

  A. VPN 0
  B. VPN 1
  C. VPN 512
  D. VPN 514
  A. VPN 0

  ---

  Explanation

  VPN 0--Transport VPN, which carries control traffic via the configured WAN transport interfaces. Initially, VPN 0 contains all of a device's interfaces except for the management interface, and all interfaces are disabled. VPN 512--Management 512. By default, VPN 512 is configured and enabled on all vEdge routers except for vEdge

  100. For controller devices, by default, VPN 512 is not configured.

  VPNs 1 through 511, and 513 through 65530--VPNs on vEdge routers for service-side data traffic.

  https://www.cisco.com/c/en/us/support/docs/routers/12000-series-routers/47321-ciscoef.html

• Question 1206:

  Refer to the exhibit. An engineer must configure a SPAN session.

  

  What is the effect of the configuration?

  A. Traffic sent on VLANs 10 and 12 only is copied and sent to interface g0/1
  B. Traffic received on VLANs 10, 11, and 12 is copied and sent to interface g0/1
  C. Traffic received on VLANs 10 and 12 only is copied and sent to interface g0/1.
  D. Traffic sent on VLANs 10, 11 , and 12 is copied and sent to interface g0/1
  B. Traffic received on VLANs 10, 11, and 12 is copied and sent to interface g0/1

• Question 1207:

  Refer to the exhibit.

  

  An engineer implemented several configuration changes and receives the logging message on switch1.

  Which action should the engineer take to resolve this issue?

  A. Change the VTP domain to match on both switches
  B. Change Switch2 to switch port mode dynamic auto
  C. Change Switch1 to switch port mode dynamic auto
  D. Change Switch1 to switch port mode dynamic desirable
  A. Change the VTP domain to match on both switches

• Question 1208:

  Which exhibit displays a valid JSON file?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 1209:

  Which action is performed by Link Management Protocol In a Cisco StackWise Virtual domain?

  A. it determines if the hardware Is compatible to form the StackWise Virtual domain.
  B. It determines which switch becomes active or standby.
  C. It discovers the StackWise domain and brings up SVL interfaces.
  D. It rejects any unidirectional link traffic forwarding.
  D. It rejects any unidirectional link traffic forwarding.

  ---

  Explanation

  https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9000/nb-06-cat-9k-stack-wp-cte-en.pdf

  Page 7 Figure 6

  A: WRONG (SDP) It determines which switch becomes active or standby.

  B: WRONG (SDP) It determines if the hardware is compatible to form the StackWise Virtual domain.

  C: OK It rejects any unidirectional link traffic forwarding.

  D: WONRG ("Pre-parse configuration file") It discovers the StackWise domain and brings up SVL interfaces.

  The Link Management Protocol (LMP) is activated on each link of the StackWise Virtual link as soon as it is brought up online. The LMP performs the following functions: Verifies link integrity by establishing bidirectional traffic forwarding, and rejects any unidirectional links

• Question 1210:

  What are two benefits of using Cisco TrustSec? (Choose two.)

  A. consistent network segmentation
  B. advanced endpoint protection against malware
  C. simplified management of network access
  D. unknown file analysis using sandboxing
  E. end-to-end traffic encryption
  A. consistent network segmentation
  C. simplified management of network access