Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1231:

  Company policy restricts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three switches. An administrator has noticed that VLAN 10 has propagated to SW3.

  Which configuration corrects the issue?

  

  A. SW1(config)#int gi1/1 SW1(config)#switchport trunk allowed vlan 1-9,11-4094
  B. SW2(config)#int gi1/2 SW2(config)#switchport trunk allowed vlan 10
  C. SW2(config)#int gi1/2 SW2(config)#switchport trunk allowed vlan 1-9,11-4094
  D. SW1(config)#int gi1/1 SW1(config)#switchport trunk allowed vlan 10
  C. SW2(config)#int gi1/2 SW2(config)#switchport trunk allowed vlan 1-9,11-4094

• Question 1232:

  An engineer must use flexible NetFlow on a group of switches. To prevent overloading of the flow collector, if the flow is idle for 20 seconds, the flow sample should be exported.

  Which command set should be applied?

  A. flow record recordflow exporter flowexport record recordflow cache timeout active 120 cache timeout inactive 20 cache type immediate
  B. flow monitor monitorflow exporter flowexport record recordflow cache timeout active 120 cache timeout inactive 20 cache type immediate
  C. flow monitor monitorflow exporter recordflow cache timeout active 120 cache timeout inactive 20 cache type permanent
  D. flow record recordflow match ipv6 destination ip-address match ipv6 source ip-address match ipv6 protocol-type view match interface input match interface output match transport destination-port collect counter bytes long
  B. flow monitor monitorflow exporter flowexport record recordflow cache timeout active 120 cache timeout inactive 20 cache type immediate

• Question 1233:

  Refer to the exhibit.

  

  An attacker can advertise OSPF fake routes from 172.16.20.0 network to the OSPF domain and black hole traffic.

  Which action must be taken to avoid this attack and still be able to advertise this subnet into OSPF?

  A. Configure 172.16.20.0 as a stub network.
  B. Apply a policy to filter OSPF packets on R2.
  C. Configure a passive Interface on R2 toward 172.16.20.0.
  D. Configure graceful restart on the 172.16.20.0 interface.
  C. Configure a passive Interface on R2 toward 172.16.20.0.

  ---

  Explanation

  References:

  https://networklessons.com/ospf/ospf-passive-interface

• Question 1234:

  An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down.

  Which script must the engineer apply?

  A. event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 6, Nbr 1.1.1.1 on Serial0/0 from FULL to DOWN" action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf event" action 3.0 cli command "debug ip ospf adj" action 4.0 syslog priority informational msg "ENABLE_OSPF_DEBUG"
  B. event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 5, Nbr 1.1.1.1 on Serial0/0 from LOADING to FULL" action 1.0 cli command "debug ip ospf event" action 2.0 cli command "debug ip ospf adj" action 3.0 syslog priority informational msg "ENABLE_OSPF_DEBUG"
  C. event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-1-ADJCHG: Process 5, Nbr 1.1.1.1 on Serial0/0 from FULL to DOWN" action 1.0 cli command "debug ip ospf event" action 2.0 cli command "debug ip ospf adj" action 3.0 syslog priority informational msg "ENABLE_OSPF_DEBUG"
  D. event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 5, Nbr 1.1.1.1 on Serial0/0 from LOADING to FULL" action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf event" action 3.0 cli command "debug ip ospf adj" action 4.0 syslog priority informational msg "ENABLE_OSPF_DEBUG"
  A. event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 6, Nbr 1.1.1.1 on Serial0/0 from FULL to DOWN" action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf event" action 3.0 cli command "debug ip ospf adj" action 4.0 syslog priority informational msg "ENABLE_OSPF_DEBUG"

• Question 1235:

  Which configuration restricts the amount of SSH traffic that a router accepts to 100 kbps?

  

  

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 1236:

  DRAG DROP

  Drag and drop the characteristics from the left onto the infrastructure deployment models on the right.

  Select and Place:

  

  

• Question 1237:

  When configuration WPA2 Enterprise on a WLAN, which additional security component configuration is required?

  A. NTP server
  B. PKI server
  C. RADIUS server
  D. TACACS server
  C. RADIUS server

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/100708-wpa-uwn-config.html#conf

• Question 1238:

  What is the function of the LISP map resolver?

  A. to send traffic to non-LISP sites when connected to a service provider that does not accept nonroutable EIDs as packet sources
  B. to connect a site to the LISP-capable part of a core network, publish the EID-to-RLOC mappings for the site and respond to map-request messages
  C. to decapsulate map-request messages from ITRs and forward the messages to the MS
  D. to advertise routable non-USP traffic from one address family to LISP sites in a different address family
  C. to decapsulate map-request messages from ITRs and forward the messages to the MS

  ---

  Explanation

  Like an MS, a LISP MR connects to the ALT. The function of the LISP MR is to accept encapsulated Map-Request messages from ingress tunnel routers (ITRs), decapsulate those messages, and then forward the messages to the MS responsible for the egress tunnel routers (ETRs) that are authoritative for the requested EIDs.

  When an MR is implemented concurrently with an MS in a private mapping system deployment, the concurrent MS forwards the encapsulated Map-Request messages to the authoritative ETRs. When a LISP ALT is present in the deployment, the MR forwards the Map-Request messages directly over the ALT to the MS responsible for the ETRs that are authoritative for the requested EIDs. An MR also sends Negative Map-Replies to ITRs in response to queries for non-LISP addresses.

  source:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/xe-3s/irl-xe-3s-book/irl-overview.html#GUID-89BB8D34-63BF-43DE-8743-5572D357CDB3

• Question 1239:

  Refer to the exhibit. Both controllers are in the same mobility group.

  

  Which result occurs when client 1 roams between APs that are registered to different controllers in the same WLAN?

  A. Client 1 contact controller B by using an EoIP tunnel.
  B. CAPWAP tunnel is created between controller A and controller B.
  C. Client 1 users an EoIP tunnel to contact controller A.
  D. The client database entry moves from controller A to controller B.
  D. The client database entry moves from controller A to controller B.

  ---

  Explanation

  This is called Inter Controller-L2 Roaming. Inter-Controller (normally layer 2) roaming occurs when a client roam between two APs registered to two different controllers, where each controller has an interface in the client subnet. In this instance, controllers exchange mobility control messages (over UDP port 16666) and the client database entry is moved from the original controller to the new controller

• Question 1240:

  Which of the following statements regarding BFD are correct? (Choose two.)

  A. BFD is supported by OSPF, EIGRP, BGP, and IS-IS.
  B. BFD detects link failures in less than one second.
  C. BFD can bypass a failed peer without relying on a routing protocol.
  D. BFD creates one session per routing protocol per interface.
  E. BFD is supported only on physical interfaces.
  F. BFD consumes more CPU resources than routing protocol timers do.
  A. BFD is supported by OSPF, EIGRP, BGP, and IS-IS.
  B. BFD detects link failures in less than one second.