Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1281:

  Refer to the exhibit. An engineer troubleshoots connectivity issues with an application. Testing is performed from the server gateway, and traffic with the DF bit set is dropped along the path after increasing packet size. Removing the DF bit setting at the gateway prevents the packets from being dropped. What is the cause of this issue?

  

  A. PMTUD does not work due to ICMP Packet Too Big messages being dropped by an ACL
  B. The remote router drops the traffic due to high CPU load.
  C. The server should not set the DF bit in any type of traffic that is sent toward the network
  D. There is a CoPP policy in place protecting the WAN router CPU from this type of traffic
  C. The server should not set the DF bit in any type of traffic that is sent toward the network

• Question 1282:

  What is a characteristic of Layer 3 roaming?

  A. It provides seamles roaming between APs that are connected to different Layer 3 networks and different mobility groups.
  B. It is only supported on controllers that run SSO.
  C. It provides seamless client roaming between APs in different Layer 3 networks but within the same mobility group
  D. Clients must obtain a new IP address when they roam between APs
  C. It provides seamless client roaming between APs in different Layer 3 networks but within the same mobility group

• Question 1283:

  An engineer is concerned with the deployment of a new application that is sensitive to inter-packet delay variance. Which command configures the router to be the destination of jitter measurements?

  A. Router(config)# ip sla responder udp-connect 172.29.139.134 5000
  B. Router(config)# ip sla responder tcp-connect 172.29.139.134 5000
  C. Router(config)# ip sla responder udp-echo 172.29.139.134 5000
  D. Router(config)# ip sla responder tcp-echo 172.29.139.134 5000
  C. Router(config)# ip sla responder udp-echo 172.29.139.134 5000

  ---

  Explanation

  Cisco IOS IP SLA Responder is a Cisco IOS Software component whose functionality is to respond to Cisco IOS IP SLA request packets. The IP SLA source sends control packets before the operation starts to establish a connection to the responder. Once the control packet is acknowledged, test packets are sent to the responder. The responder inserts a time-stamp when it receives a packet and factors out the destination processing time and adds time-stamps to the sent packets. This feature allows the calculation of unidirectional packet loss, latency, and jitter measurements with the kind of accuracy that is not possible with ping or other dedicated probe testing.

  UDP Jitter measures the delay, delay variation (jitter), corruption, misordering and packet loss by generating periodic UDP traffic. This operation always requires IP SLA responder. The command to enable UDP Jitter Operation is "ip sla responder udp-echo {destination-ip-address} [destination-port]

• Question 1284:

  What do Chef and Ansible have in common?

  A. They rely on a declarative approach.
  B. They rely on a procedural approach.
  C. They use YAML as their primary configuration syntax.
  D. They are clientless architectures.
  B. They rely on a procedural approach.

• Question 1285:

  What is the preferred QoS marking for delay-sensitive real-time protocols such as RTP?

  A. CS1
  B. ATM-CLP
  C. EF
  D. AF
  C. EF

• Question 1286:

  DRAG DROP

  Drag and drop the descriptions from the left onto the routing protocol they describe on the right.

  Select and Place:

  

  

• Question 1287:

  A system must validate access rights to all its resources and must not rely on a cached permission matrix. If the access level to a given resource is revoked but is not reflected in the permission matrix, the security is violates Which term refers to this REST security design principle?

  A. economy of mechanism
  B. complete mediation
  C. separation of privilege
  D. least common mechanism
  B. complete mediation

  ---

  Explanation

  A system should validate access rights to all its resources to ensure that they are allowed and should not rely on the cached permission matrix. If the access level to a given resource is being revoked, but that is not being reflected in the permission matrix, it would be violating security.

  https://medium.com/strike-sh/rest-security-design-principles-434bd6ee57ea

• Question 1288:

  Refer to the exhibit. The administrator troubleshoots an EtherChannel that keeps moving to err-disabled. Which two actions must be taken to resolve the issue? (Choose two.)

  

  A. Reload the switch to force EtherChannel renegotiation
  B. Ensure that interfaces Gi1/0/2 and Gi1/0/3 connect to the same neighboring switch.
  C. Ensure that the switchport parameters of Port channel1 match the parameters of the port channel on the neighbor switch
  D. Ensure that the corresponding port channel interface on the neighbor switch is named Portchannel1.
  E. Ensure that the neighbor interfaces of Gi1/0/2 and Gi/0/3 are configured as members of the same EtherChannel
  B. Ensure that interfaces Gi1/0/2 and Gi1/0/3 connect to the same neighboring switch.
  E. Ensure that the neighbor interfaces of Gi1/0/2 and Gi/0/3 are configured as members of the same EtherChannel

  ---

  Explanation

  This feature was first implemented in order to handle special collision situations in which the switch detected excessive or late collisions on a port. Excessive collisions occur when a frame is dropped because the switch encounters 16 collisions in a row. Late collisions occur after every device on the wire should have recognized that the wire was in use. Possible causes of these types of errors include:

  A cable that is out of specification (either too long, the wrong type, or defective) A bad network interface card (NIC) card (with physical problems or driver problems) A port duplex misconfiguration is a common cause of the errors because of failures to negotiate the speed and duplex properly between two directly connected devices (for example, a NIC that connects to a switch). Only half-duplex connections should ever have collisions in a LAN. Because of the carrier sense multiple access (CSMA) nature of Ethernet, collisions are normal for half duplex, as long as the collisions do not exceed a small percentage of traffic.

• Question 1289:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do no remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed tasks.

  6. Do not change the enable password or hostname for any device.

  7. Save your configurations to NVRAM before moving to the next item.

  8. Click Next at the bottom of the screen to submit this lab and move to the next question 9. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  The Operations team started configuring several monitoring activities. Complete the configurations for the tasks below.

  1. Enable Flexible NetFlow on R1 E0/0 in both directions using the pre-configured flow monitor.

  2. Configure the switch port analyzer on Sw1 and mirror all VLAN 12 traffic to interface E1/3 using session number 12.

  3. Configure a basic IP SLA ICMP echo operation on R1 to ping PC1 every 300 seconds.

  R1

  

  

  

  

  

  

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  R1:

  To advertise all connected networks without using the network statement, we will configure OSPF on each

  interface:

  Router#configure terminal

  Enter configuration commands, one per line. End with END or Ctrl-Z.

  R1(config)#interface Ethernet0/0

  R1(config-if)#ip ospf 1 area 0

  R1(config-if)#end

  R1(config)#interface Ethernet0/1

  R1(config-if)#ip ospf 1 area 0

  R1(config-if)#end

  R1(config)#interface Ethernet0/2

  R1(config-if)#ip ospf 1 area 10

  R1(config-if)#end

  R1(config)#end

  To ensure only one summary route is advertised to Area 0, we can use the summary-address command

  on the ABRs. In this case, we'll summarize the entire Area 10:

  R2:

  R2#configure terminal

  Enter configuration commands, one per line. End with END or Ctrl-Z.

  R2(config)#router ospf 1

  R2(config-router)#summary-address 10.1.0.0 255.255.0.0

  R2(config-router)#exit

  R2(config)#end

  R3:

  R3#configure terminal

  Enter configuration commands, one per line. End with END or Ctrl-Z.

  R3(config)#router ospf 1

  R3(config-router)#summary-address 10.2.0.0 255.255.0.0

  R3(config-router)#exit

  R3(config)#end

• Question 1290:

  Refer to the exhibit.

  

  An engineer attempts to create a configuration to allow the Blue VRF to leak Into the global fouling table, but the configuration does not function as expected. Which action resolves this Issue?

  A. Change the access-list destination mask to a wildcard.
  B. Change the source network that Is specified in access-list 101.
  C. Change the route-map configuration to VRF_BLUE.
  D. Change the access-list number in the route map
  A. Change the access-list destination mask to a wildcard.