Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1321:

  What is an advantage of using BFD?

  A. It local link failure at layer 1 and updates routing table
  B. It detects local link failure at layer 3 and updates routing protocols
  C. It has sub-second failure detection for layer 1 and layer 3 problems.
  D. It has sub-second failure detection for layer 1 and layer 2 problems.
  B. It detects local link failure at layer 3 and updates routing protocols

  ---

  Explanation

  BFD provides a low-overhead, short-duration method of detecting failures in the forwarding path between two adjacent routers, including the interfaces, data links, and forwarding planes. BFD is a detection protocol that you enable at the interface and routing protocol levels

• Question 1322:

  Which tool is used in Cisco DNA Center to build generic configurations that are able to be applied on device with similar network settings?

  A. Command Runner
  B. Template Editor
  C. Application Policies
  D. Authentication Template
  B. Template Editor

  ---

  Explanation

  Cisco DNA Center provides an interactive editor called Template Editor to author CLI templates. Template Editor is a centralized CLI management tool to help design a set of device configurations that you need to build devices in a branch.

  When you have a site, office, or branch that uses a similar set of devices and configurations, you can use Template Editor to build generic configurations and apply the configurations to one or more devices in the branch.

  References:

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-3/user_guide/b_cisco_dna_center_ug_1_3/b_cisco_dna_center_ug_1_3_chapter_0111.html

• Question 1323:

  A customer deployed an ISE solution that allows for web authentication and URL redirect enforced from the access layer. Due to control plane security concerns, only host IP 10.0.1.25 should have HTTP access to these switches.

  Which configuration must be applied to the switches?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 1324:

  Where is the wireless LAN controller located in a mobility express deployment?

  A. There is no wireless LAN controller in the network.
  B. The wireless LAN controller is embedded into the access point.
  C. The wireless LAN controller exists in the cloud.
  D. The wireless LAN controller exists in a server that is dedicated for this purpose.
  B. The wireless LAN controller is embedded into the access point.

• Question 1325:

  Refer to the exhibit.

  

  Which type of antenna does the radiation pattern represent?

  A. Yagi
  B. multidirectional
  C. directional patch
  D. omnidirectional
  A. Yagi

  ---

  Explanation

  A Yagi antenna is formed by driving a simple antenna, typically a dipole or dipolelike antenna, and shaping the beam using a well-chosen series of non-driven elements whose length and spacing are tightly controlled.

  

  References:

  https://www.cisco.com/c/en/us/products/collateral/wireless/aironetantennas-accessories/prod_white_paper0900aecd806a1a3e.htm

• Question 1326:

  An engineer modifies the existing ISE guest portal URL to use a static FQDN. Users immediately report that they receive certificate errors when they are redirected to the new page.

  Which two additional configuration steps are needed to implement the change? (Choose two.)

  A. Add a new DNS record to resolve the FQDN to the PSN IP address
  B. Create and sign a new CSR that contains the static FQDN entry
  C. Manually configure the hosts file on each user device.
  D. Disable HTTPS on the WLC under the Management menu
  E. Add the FQDN entry under the WLC virtual interface
  A. Add a new DNS record to resolve the FQDN to the PSN IP address
  B. Create and sign a new CSR that contains the static FQDN entry

• Question 1327:

  DRAG DROP

  Drag and drop the characteristics from the left onto the orchestration tools they describe on the right.

  Select and Place:

  

  

  ---

  Ansible runs with a single active node, called the Primary instance. If the primary goes down, there is a Secondary instance to take its place.

  Puppet has multi-master architecture. If the active master goes down, then the other master takes the active master place.

  https://www.javatpoint.com/ansible-vs-puppet

• Question 1328:

  If the maximum power level assignment for global TPC 802.11a/n/ac is configured to 10 dBm, which power level effectively doubles the transmit power?

  A. 13dBm
  B. 14 dBm
  C. 17dBm
  D. 20 dBm
  A. 13dBm

  ---

  Explanation

  Suppose a transmitter is configured for a power level of 10 dBm. A cable with 5-dB loss connects the transmitter to an antenna with an 8-dBi gain. The resulting EIRP of the system is EIRP = 10 dBm ?5 dB + 8 dBi = 13 dBm.

• Question 1329:

  What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?

  A. real-time threat management to stop DDoS attacks to the core and access networks
  B. real-time awareness of users, devices and traffic on the network
  C. malware control
  D. dynamic threat control for web traffic
  B. real-time awareness of users, devices and traffic on the network

  ---

  Explanation

  Cisco Stealthwatch is a comprehensive, network telemetry-based, security monitoring and analytics solution that streamlines incident response through behavioral analysis; detecting denial of service attacks, anomalous behaviour, malicious activity and insider threats. Based on a scalable enterprise architecture, Stealthwatch provides near real-time situational awareness of all users and devices on the network.

  References:

  https://www.endace.com/cisco-stealthwatch-solution-brief.pdfNote:

  Although answer A seems to be correct but in fact, Stealthwatch does not provide real-time protection for DDoS attack. It just helps detect DDoS attack only. Stealthwatch aggregates observed network activity and performs behavioral and policy driven analytics against what it sees in order to surface problematic activities. While we don't position our self as a DDOS solution, we're going to leverage our analytical capabilities to identify a DDoS attack against an internal host using the WebUI. Reference: (https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2016/pdf/LTRSEC-8421-LG.pdf)

• Question 1330:

  Why would an architect use an OSPF virtual link?

  A. to allow a stub area to transit another stub area
  B. to connect two networks that have overlapping private IP address space
  C. to merge two existing Area Os through a nonbackbone
  D. to connect a nonbackbone area to Area 0 through another nonbackbone area
  D. to connect a nonbackbone area to Area 0 through another nonbackbone area