Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1221:

  Which capability does a distributed virtual switch have?

  A. use floating static routes
  B. provide configuration consistency across the hosts
  C. run dynamic routing protocols
  D. use advanced IPsec encryption algorithms
  B. provide configuration consistency across the hosts

• Question 1222:

  Refer to the exhibit.

  

  An engineer implemented several configuration changes and receives the logging message on switch1.

  Which action should the engineer take to resolve this issue?

  A. Change the VTP domain to match on both switches
  B. Change Switch2 to switch port mode dynamic auto
  C. Change Switch1 to switch port mode dynamic auto
  D. Change Switch1 to switch port mode dynamic desirable
  A. Change the VTP domain to match on both switches

  ---

  Explanation

  DTP requires that the VTP domain match between the two switches.

• Question 1223:

  What is the function of a control-plane node in a Cisco SD-Access solution?

  A. to run a mapping system that manages endpoint to network device relationships
  B. to implement policies and communicate with networks outside the fabric
  C. to connect external Layer 3 networks to the SD Access fabric.
  D. to connect APs and wireless endpoints to the SD-Access fabric
  A. to run a mapping system that manages endpoint to network device relationships

• Question 1224:

  Refer to the exhibit.

  

  Which two commands are needed to allow for full reachability between AS 1000 and AS 2000? (Choose two.)

  A. R2#no network 10.0.0.0 255.255.255.0
  B. R2#network 209.165.201.0 mask 255.255.192.0
  C. R2#network 192.168.0.0 mask 255.255.0.0
  D. R1#no network 10.0.0.0 255.255.255.0
  E. R1#network 192.168.0.0 mask 255.255.0.0
  A. R2#no network 10.0.0.0 255.255.255.0
  C. R2#network 192.168.0.0 mask 255.255.0.0

  ---

  Explanation

  A & C are correct. Need to negate the 10.0.0.0 /24 network on R2 and then add the 192.168.0.0 /16 network on R2. Hence, A & C, although I think to be exact the answer on A should be "no network 10.0.0.0 mask 255.255.255.0" vs. the "no

  network 10.0.0.0 255.255.255.0".

• Question 1225:

  How is CAPWAP data traffic encapsulated when running an Over the Top WLAN in a Cisco SD-Access wireless environment?

  A. LISP
  B. VXLAN
  C. GRE
  D. IPsec
  B. VXLAN

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/deploy-guide/cisco-dna-center-sd-access-wl-dg.pdf

• Question 1226:

  Refer to the exhibit.

  

  MTU has been configured on the underlying physical topology, and no MTU command has been configured on the tunnel interfaces.

  What happens when a 1500-byte IPv4 packet traverses the GRE tunnel from host X to host Y, assuming the DF bit is cleared?

  A. The packet arrives on router C without fragmentation.
  B. The packet is discarded on router A
  C. The packet is discarded on router B
  D. The packet arrives on router C fragmented.
  D. The packet arrives on router C fragmented.

  ---

  Explanation

  

• Question 1227:

  Refer to the exhibit.

  

  Which IPv6 OSPF network type is applied to interface Fa0/0 of R2 by default?

  A. multipoint
  B. broadcast
  C. Ethernet
  D. point-to-point
  B. broadcast

  ---

  Explanation

  The Broadcast network type is the default for an OSPF enabled ethernet interface (while Point-to- Point is the default OSPF network type for Serial interface with HDLC and PPP encapsulation).

  References:

  https://www.oreilly.com/library/view/cisco-ios-cookbook/0596527225/ch08s15.html

• Question 1228:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  The Operations team started configuring several monitoring activities. Complete the configurations for the tasks below.

  1. Complete the Flexible NetFlow Flow Exporter configuration on R1 to send data to the collector using UDP port 2055.

  2. Configure the Switch Port Analyzer (SPAN) on SW1 and mirror all communication to and from PC1 to interface E1/1 using session number 11.

  3. Schedule the pre-configured IP SLA operation on R1 to start running immediately and to run indefinitely.

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Task 1:

  Configure Flexible NetFlow Flow Exporter on R1

  Enter global configuration mode on R1:

  R1# configure terminal

  Define the flow exporter to send data to the collector at UDP port 2055:

  R1(config)# flow exporter EXPORTER-1

  R1(config-flow-exporter)# destination <Collector_IP> # Replace <Collector_IP> with the actual IP of the collector.

  R1(config-flow-exporter)# transport udp 2055

  R1(config-flow-exporter)# exit

  Define the flow monitor and attach the exporter:

  R1(config)# flow monitor MONITOR-1

  R1(config-flow-monitor)# exporter EXPORTER-1

  R1(config-flow-monitor)# record netflow-original

  R1(config-flow-monitor)# exit

  Apply the flow monitor to the interface:

  R1(config)# interface e0/0

  R1(config-if)# ip flow monitor MONITOR-1 input

  R1(config-if)# exit

  Task 2:

  Configure SPAN (Switch Port Analyzer) on SW1 to Monitor PC1 Traffic

  Enter global configuration mode on SW1:

  SW1# configure terminal

  Create SPAN session 11 to mirror traffic from PC1 to interface

  E1/1:

  SW1(config)# monitor session 11 source interface e0/0 SW1(config)# monitor session 11 destination interface e1/1

  Task 3:

  Schedule IP SLA Operation on R1

  Configure the IP SLA operation on R1:

  R1(config)# ip sla 1

  R1(config-ip-sla)# icmp-echo <Target_IP> # Replace <Target_IP> with the IP address of the destination (e.g., PC2's IP).

  R1(config-ip-sla)# frequency 60 # Set frequency if required.

  R1(config-ip-sla)# exit

  Schedule the IP SLA operation to start immediately and run indefinitely:

  R1(config)# ip sla schedule 1 start-time now life forever

  To verify the IP SLA configuration:

  R1# show ip sla configuration

• Question 1229:

  A customer requires their wireless network to be fully functional, even if the wireless controller fails.

  Which wireless design supports these requirements?

  A. FlexConnect
  B. mesh
  C. centralized
  D. embedded
  A. FlexConnect

• Question 1230:

  Which feature is provided by Cisco Mobility Services Engine in a Cisco Wireless Unified Network architecture?

  A. It adds client packet capturing.
  B. It enables NetFlow data collection.
  C. It adds client tracking and location API.
  D. It identifies authentication problems.
  C. It adds client tracking and location API.

  ---

  Explanation

  This solution allows a customer to track any Wi-Fi device, including clients, active RFID tags, and rogue clients and access points (APs).

  https://mrncciew.com/2013/04/05/mobility-service-engine-mse/