Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1331:

  Which nodes require VXLAN encapsulation support In a Cisco SD-Access deployment?

  A. core nodes
  B. distribution nodes
  C. border nodes
  D. aggregation nodes
  C. border nodes

• Question 1332:

  SIMULATION

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  R1

  config t

  flow record NetFlow-Record

  match ipv4 source address

  match ipv4 destination address

  collect country bytes

  flow exporter NetFlow-Exporter

  destination 10.10.1.10

  transport udp 9996

  flow monitor NetFlow-Monitor

  record NetFlow-Record

  exporter NetFlow-Exporter

  exit

  int et0/0

  ip flow monitor NetFlow-Monitor input

  ip sla 1

  http get http://10.10.1.100

  frequency 600

  exit

  ip sla schedule 1 start-time now

  Sw1

  config t

  monitor session 2 source int e0/0

  monitor session 2 source int et0/2

  monitor session 2 destination interface e1/0

• Question 1333:

  Refer to the exhibit.

  

  Which Python code snippet prints the descriptions of disabled interfaces only?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

  != is the "Is not true operator" think along these lines and B is clarly correct.

• Question 1334:

  Refer to the exhibit.

  

  An engineer must verify the operational status of ISP 1 by testing the IP reachability of the ISP1 DNS server every 10 seconds. If the DNS server is not reachable from the CPE through the Gi0/0 interface, then the test should fail. Which two configuration sets must be used to accomplish this task? (Choose two.)

  A. ip route 0.0.0.0 0.0.0.0 198.51.100.1ip route 0.0.0.0 0.0.0.0 203.0.113.1
  B. ip route 0.0.0.0 255.255.255.255 198.51.100.1ip route 0.0.0.0 255.255.255.255 203.0.113.1
  C. ip route 198.51.100.252 255.255.255.255 198.51.100.1
  D. ip sla 1icmp-echo 198.51.100.252frequency 10ip sla schedule 1 life forever start-time now
  E. ip sla 1dns www.cisco.com name-server 198.51.100.252frequency 10ip sla schedule 1 life forever start-time now
  C. ip route 198.51.100.252 255.255.255.255 198.51.100.1
  D. ip sla 1icmp-echo 198.51.100.252frequency 10ip sla schedule 1 life forever start-time now

• Question 1335:

  What is a characteristic of VRRP?

  A. It inherently balances load amongst the available gateways.
  B. It ensures symmetric traffic flow upstream and downstream.
  C. It Is a Cisco proprietary protocol.
  D. It uses a virtual IP address and a virtual MAC address to achieve redundancy
  D. It uses a virtual IP address and a virtual MAC address to achieve redundancy

• Question 1336:

  Which element enables communication between guest VMs within a virtualized environment?

  A. hypervisor
  B. vSwitch
  C. virtual router
  D. pNIC
  B. vSwitch

  ---

  Explanation

  Each VM is provided with a virtual NIC (vNIC) that is connected to the virtual switch. Multiple vNICs can connect to a single vSwitch, allowing VMs on a physical host to communicate with one another at layer 2 without having to go out to a physical switch.

• Question 1337:

  Which two mechanisms are available to secure NTP? (Choose two.)

  A. IP prefix list-based
  B. IPsec
  C. TACACS-based authentication
  D. IP access list-based
  E. Encrypted authentication
  D. IP access list-based
  E. Encrypted authentication

  ---

  Explanation

  The time kept on a machine is a critical resource and it is strongly recommend that you use the security features of NTP to avoid the accidental or malicious setting of incorrect time. The two security features available are an access list-based restriction scheme and an encrypted authentication mechanism.

  https://www.cisco.com/c/dam/en/us/td/docs/ios-xml/ios/bsm/configuration/xe-3se/3650/bsm-xe-3se-3650-book.html

• Question 1338:

  Which exhibit displays a valid JSON file?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 1339:

  In a Cisco SD-Access fabric, which control plane protocol is used for mapping and resolving endpoints?

  A. DHCP
  B. VXLAN
  C. SXP
  D. LISP
  D. LISP

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html

• Question 1340:

  How must network management traffic be treated when defining QoS policies?

  A. as delay-sensitive traffic in a low latency queue
  B. using minimal bandwidth guarantee
  C. using the same marking as IP routing
  D. as best effort
  A. as delay-sensitive traffic in a low latency queue

  ---

  Explanation

  Low latency queuing (LLQ) adds a priority queue to CBWFQ from which delay-sensitive traffic, such as voice traffic, can be transmitted ahead of packets in other queues. By configuring the quality of service (QoS), you can provide preferential treatment to specific types of traffic at the expense of other traffic types. Without QoS, the device offers best-effort service for each packet, regardless of the packet contents or size. The device sends the packets without any assurance of reliability, delay bounds, or throughput.

  The following are specific features provided by QoS:

  * Low latency

  * Bandwidth guarantee

  * Buffering capabilities and dropping disciplines

  * Traffic policing

  * Enables the changing of the attribute of the frame or packet header

  * Relative services

  * Modular QoS Command-Line Interface

  * Supported QoS Features for Wired Access

  * Hierarchical QoS