Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1241:

  Refer to the exhibit.

  

  Communication between London and New York is down.

  Which command set must be applied to the NewYork switch to resolve the issue?

  A. NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode negotiate NewYork(config-if)#end NewYork#
  B. NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode on NewYork(config-if)#end NewYork#
  C. NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode passive NewYork(config-if)#end NewYork#
  D. NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode auto NewYork(config-if)#end NewYork#
  C. NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode passive NewYork(config-if)#end NewYork#

• Question 1242:

  What is the structure of a JSON web token?

  A. three parts separated by dots header payload, and signature
  B. header and payload
  C. three parts separated by dots version header and signature
  D. payload and signature
  A. three parts separated by dots header payload, and signature

  ---

  Explanation

  JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed. JWTs can be signed using a secret (with the HMAC algorithm) or a public/private key pair using RSA or ECDSA. JSON Web Tokens are composed of three parts, separated by a dot (.): Header, Payload, Signature. Therefore, a JWT typically looks like the following: xxxxx.yyyyy.zzzzz

  The header typically consists of two parts: the type of the token, which is JWT, and the signing algorithm being used, such as HMAC SHA256 or RSA. The second part of the token is the payload, which contains the claims. Claims are statements about an entity (typically, the user) and additional data. To create the signature part you have to take the encoded header, the encoded payload, a secret, the algorithm specified in the header, and sign that.

  References:

  https://jwt.io/introduction/

  https://auth0.com/docs/tokens/references/jwt-structure

• Question 1243:

  Which Cisco SD-WAN component acts as a single pane of glass for management and offers centralized fault, performance, accounting, and configuration management?

  A. vBond
  B. vEdge
  C. vSmart
  D. vManage
  D. vManage

• Question 1244:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Tasks

  The operations team started configuring network devices for a new site. Complete the configurations to achieve these goals:

  1. The trunk between SW10 and SW30 is not operational. Troubleshoot the issue and ensure PC2 can ping PC1 (10.10.100.10) across the link.

  2. Configure SW10 interface E0/0 for aggressive unidirectional link detection.

  3. The LACP port-channel between SW10 and SW20 is not operational. Troubleshoot the issue and ensure that PC2 can ping PC3 (10.10.100.30) across the port-channel.

  Note: No access is provided to SW20 or SW30. Resolve these issues by making changes only to SW10. Traffic on all trunks should be restricted to only active VLANs.

  Topology

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  SW10

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  PC2

  

• Question 1245:

  Which QoS component alters a packet to change the way that traffic is treated in the network?

  A. Marking
  B. Classification
  C. Shaping
  D. Policing
  A. Marking

  ---

  Explanation

  QoS Packet Marking refers to changing a field within a packet either at Layer 2 (802.1Q/p CoS, MPLS EXP) or Layer 3 (IP Precedence, DSCP and/or IP ECN).

  References:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_mqc/configuration/xe-16/qosmqc-xe-16-book/qos-mrkg.html

• Question 1246:

  Which method ensures the confidentiality of data exchanged over a REST API?

  A. Use the POST method instead of URL-encoded GET to pass parameters.
  B. Encode sensitive data using Base64 encoding.
  C. Deploy digest-based authentication to protect the access to the API.
  D. Use TLS to secure the underlying HTTP session.
  D. Use TLS to secure the underlying HTTP session.

• Question 1247:

  What is a difference between Chef and other automation tools?

  A. Chef is an agentless tool that uses playbooks, and Ansible is an agent-based tool that uses cookbooks.
  B. Chef is an agentless tool that uses a primary/minion architecture, and SaltStack is an agent-based tool that uses a primary/secondary architecture
  C. Chef is an agent-based tool that uses cookbooks, and Ansible is an agentless tool that uses playbooks.
  D. Chef uses Domain Specific Language, and Puppet uses Ruby.
  C. Chef is an agent-based tool that uses cookbooks, and Ansible is an agentless tool that uses playbooks.

• Question 1248:

  What are some of the key differences between HSRPv1 and HSRPv2? (Choose two.)

  A. HSRPv1 uses the multicast address of 224.0.0.102 while HSRPv2 uses 225.0.0.2.
  B. HSRP uses a group range of 0-255, while HSRP uses a group range of 0-4095.
  C. HSRPv1 uses seconds based timers, while HSRPv2 uses milliseconds based timers.
  D. HSRPv1 provides support for IPv6, while HSRPv2 supports IPv4 only.
  B. HSRP uses a group range of 0-255, while HSRP uses a group range of 0-4095.
  C. HSRPv1 uses seconds based timers, while HSRPv2 uses milliseconds based timers.

  ---

  Explanation

  should be HSRPv1, HSRPv2

• Question 1249:

  Which method does the enable secret password option use to encrypt device passwords?

  A. AES
  B. CHAP
  C. PAP
  D. MD5
  D. MD5

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/107614-64.html

• Question 1250:

  A network engineer configures a WLAN controller with increased security for web access. There is IP connectivity with the WLAN controller, but the engineer cannot start a management session from a web browser.

  Which action resolves the issued?

  A. Disable JavaScript on the web browser
  B. Disable Adobe Flash Player
  C. Use a browser that supports 128-bit or larger ciphers.
  D. Use a private or incognito session.
  C. Use a browser that supports 128-bit or larger ciphers.