Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1261:

  DRAG DROP

  Drag and drop packet switching architecture from the left onto the correct positions on the right.

  Select and Place:

  

  

• Question 1262:

  Which Cisco DNA Center Assurance feature verifies host reachability?

  A. path trace
  B. application experience
  C. detail information
  D. network time travel
  A. path trace

• Question 1263:

  Which router is elected the IGMP Querier when more than one router is in the same LAN segment?

  A. The router with the shortest uptime
  B. The router with the lowest IP address
  C. The router with the highest IP address
  D. The router with the longest uptime
  B. The router with the lowest IP address

  ---

  Explanation

  Query messages are used to elect the IGMP querier as follows: 1. When IGMPv2 devices start, they each multicast a general query message to the all-systems group address of 224.0.0.1 with their interface address in the source IP address 2. When an IGMPv2 device receives a general query message, the device compares the source IP address in the message with its own interface address. The device with the lowest IP address on the subnet is elected the IGMP querier.

  3. All devices (excluding the querier) start the query timer, which is reset whenever a general query message is received from the IGMP querier. If the query timer expires, it is assumed that the IGMP querier has gone down, and the election process is performed again to elect a new IGMP querier.

  References:

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/15-2_2_e/multicast/configuration_guide/b_mc_1522e_3750x_3560x_cg/b_ipmc_3750x_3560x_chapter_01000.html

• Question 1264:

  Refer to the exhibit.

  

  Which result Is achieved by the CoPP configuration?

  A. Traffic that matches entry 10 of ACL 100 is always allowed.
  B. Class-default traffic is dropped.
  C. Traffic that matches entry 10 of ACL 100 is always allowed with a limited CIR.
  D. Traffic that matches entry 10 of ACL 100 is always dropped.
  A. Traffic that matches entry 10 of ACL 100 is always allowed.

• Question 1265:

  What is one method for achieving REST API security?

  A. using a combination of XML encryption and XML signatures
  B. using HTTPS and TLS encryption
  C. using a MDS hash to verify the integrity
  D. using built-in protocols known as Web Services Security
  B. using HTTPS and TLS encryption

• Question 1266:

  An engineer must enable a login authentication method that allows a user to log in by using local authentication if all other defined authentication methods fail.

  Which configuration should be applied?

  A. aaa authentication login CONSOLE group radius local-case enable aaa
  B. authentication login CONSOLE group radius local enable none
  C. aaa authentication login CONSOLE group radius local enable
  D. aaa authentication login CONSOLE group tacacs+ local enable
  D. aaa authentication login CONSOLE group tacacs+ local enable

• Question 1267:

  What is the primary effect of the spanning-tree portfast command?

  A. It enables BPDU messages
  B. It minimizes spanning-tree convergence time
  C. It immediately puts the port into the forwarding state when the switch is reloaded
  D. It immediately enables the port in the listening state
  C. It immediately puts the port into the forwarding state when the switch is reloaded

  ---

  Explanation

  Portfast feature should only be used on edge ports (ports directly connected to end stations). Neither edge ports or PortFast enabled ports generate topology changes when the link toggles so we cannot say Portfast reduces the STP convergence time.

  PortFast causes a switch or trunk port to enter the spanning tree forwarding state immediately, bypassing the listening and learning states so answer 'It immediately puts the port into the forwarding state when the switch is reloaded ' is the best choice.

• Question 1268:

  Refer to the exhibit.

  

  Which IP address becomes the next active next hop for 192.168.102 0/24 when 192.168.101.2 fails?

  A. 192.168.101.18
  B. 192.168.101.6
  C. 192.168.101.10
  D. 192.168.101.14
  A. 192.168.101.18

  ---

  Explanation

  The `>' shown in the output above indicates that the path with a next hop of 192.168.101.2 is the current best path.

  Path Selection Attributes: Weight > Local Preference > Originate > AS Path > Origin > MED > External > IGP Cost > eBGP Peering > Router ID BGP prefers the path with highest weight but the weights here are all 0 (which indicate all routes that are not originated by the local router) so we need to check the Local Preference. Answer '192.168.101.18' path without LOCAL_PREF (LocPrf column) means it has the default value of 100. Therefore we can find the two next best paths

  with the next hop of 192.168.101.18 and 192.168.101.10. We have to move to the next path selection attribute: Originate. BGP prefers the path that the local router originated (which is indicated with the "next hop 0.0.0.0"). But none of the two best paths is self-originated. The AS Path of the next hop 192.168.101.18 is shorter than the AS Path of the next hop 192.168.101.10 then the next hop 192.168.101.18 will be chosen as the next best path.

• Question 1269:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Tasks

  BGP connectivity exists between Headquarters and both remote sites; however, Remote Site 1 cannot communicate with Remote Site 2. Configure BGP according to the topology to goals:

  1. Configure R1 and R3 under the BGP process to provide reachability between Remote Site 1 and Remote Site

  2. No configuration changes are permitted on R2.

  2. Ensure that the /32 networks at Remote Site 1 and Remote Site 2 can ping each other.

  Topology

  

  R1

  

  

  

  

  

  

  R3

  

  

  

  

  

  

  

  A. See the solution below in Explanation
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation

  ---

  Explanation

  Solution:

  On R1:

  R1(config)#router bgp 123

  R1(config-router)#address-family ipv4

  R1(config-router-af)#neighbor 10.0.0.2 allowas-in On R3:

  R3(config)#router bgp 123

  R3(config-router)# address-family ipv4

  R3(config-router-af)#neighbor 192.168.1.2 allowas-in VERIFICATION:

  R3#sh ip route bgp

  Gateway of last resort is not set

  1.0.0.0/32 is subnetted, 1 subnets

  B 1.1.1.1 [20/0] via 192.168.1.2, 00:01:17

  2.0.0.0/32 is subnetted, 1 subnets

  B 2.2.2.2 [20/0] via 192.168.1.2, 00:05:06

  10.0.0.0/24 is subnetted, 1 subnets

  B 10.0.0.0 [20/0] via 192.168.1.2, 00:01:17

  Test Ping from R3 to R1:

  R3#ping 1.1.1.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:

  !!!!!

  R3#ping 1.1.1.1 source lo0

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds: Packet sent with a source address of 3.3.3.3

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

• Question 1270:

  Why would a log file contain a * next to the date?

  A. The network device was receiving NTP time when the log messages were recorded
  B. The network device was unable to reach the NTP server when the log messages were recorded.
  C. The network device is not configured to use NTP
  D. The network device is not configured to use NTP time stamps for logging.
  C. The network device is not configured to use NTP

  ---

  Explanation

  "Network device is not configured to use NTP" is the only answer which may justify the fact that system clock has not been set and thus date and time are preceded by an asterisk (*),