Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1341:

  By default, which virtual MAC address does HSRP group 25 use?

  A. 05:5c:5e:ac:0c:25
  B. 04:16:6S:96:1C:19
  C. 00:00:0c:07:ac:19
  D. 00:00:0c:07:ac:25
  D. 00:00:0c:07:ac:25

• Question 1342:

  Which two components are supported by LISP? (choose two )

  A. proxy ETR
  B. egress tunnel router
  C. route reflector
  D. HMAC algorithm
  E. spoke
  A. proxy ETR
  B. egress tunnel router

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/xe-3s/irl-xe-3s-book/irl-overview.html

• Question 1343:

  Refer to the exhibit.

  

  Only administrators from the subnet 10.10.10.0/24 are permitted to have access to the router. A secure protocol must be used for the remote access and management of the router instead of clear- text protocols. Which configuration achieves this goal?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 1344:

  Refer to the exhibit.

  

  enable secret CISCO aaa new-model

  tacacs server ise-1 address 10.1.1.1 key cisco1231

  tacacs server ISE-2 address 10.2.2.1 key cisco1231

  aaa group server tacacs+ ISE-Servers server name ise-1 server name ise-2

  A network engineer must configure the router to use the ISE-Servers group for authentication. If both ISE servers are unavailable, the local username database must be used. If no usernames are defined in the configuration, then the enable password must be the last resort to log in.

  Which configuration must be applied to achieve this result?

  A. aaa authentication login default group ISE-Servers local enable
  B. aaa authentication login default group enable local ISE-Servers
  C. aaa authorization exec default group ISE-Servers local enable
  D. aaa authentication login error-enable
  E. aaa authentication login default group enable local ISE-Servers
  A. aaa authentication login default group ISE-Servers local enable

• Question 1345:

  What are two common sources of interface for WI-FI networks? (Choose two.)

  A. radar
  B. LED lights
  C. rogue AP
  D. conventional oven
  E. fire alarm
  A. radar
  C. rogue AP

  ---

  Explanation

  It includes many different types of radio communication, such as low-frequency radio, AM radio, shortwave radio, television, FM radio, microwave, and radar. The microwave category also contains the two main frequency ranges that are used for wireless LAN communication: 2.4 and 5 GHz.

• Question 1346:

  What is the structure of a JSON web token?

  A. three parts separated by dots header payload, and signature
  B. header and payload
  C. three parts separated by dots version header and signature
  D. payload and signature
  A. three parts separated by dots header payload, and signature

  ---

  Explanation

  JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed. JWTs can be signed using a secret (with the HMAC algorithm) or a public/private key pair using RSA or ECDSA. JSON Web Tokens are composed of three parts, separated by a dot (.): Header, Payload, Signature. Therefore, a JWT typically looks like the following:

  xxxxx.yyyyy.zzzzz The header typically consists of two parts: the type of the token, which is JWT, and the signing algorithm being used, such as HMAC SHA256 or RSA. The second part of the token is the payload, which contains the claims. Claims are statements about an entity (typically, the user) and additional data. To create the signature part you have to take the encoded header, the encoded payload, a secret, the algorithm specified in the header, and sign that.

  https://jwt.io/introduction/ https://auth0.com/docs/tokens/references/jwt-structure

• Question 1347:

  Refer to the exhibit.

  

  A network engineer is enabling logging to a local buffer, to the terminal and to a syslog server for all debugging level logs filtered by facility code 7.

  Which command is needed to complete this configuration snippet?

  A. logging buffered debugging
  B. logging discriminator Disc1 severity includes 7
  C. logging buffered discriminator Dlsd debugging
  D. logging discriminator Disc1 severity includes 7 facility includes fac7
  D. logging discriminator Disc1 severity includes 7 facility includes fac7

  ---

  Explanation

  The "logging discriminator Disc1 severity includes 7 facility includes fac7" command enables the logging discriminator named Disc1 to filter messages with a severity level of 7 (debugging level) and facility code 7.

• Question 1348:

  DRAG DROP

  Drag and drop the automation characteristics from the left onto the appropriate tools on the right.

  Select and Place:

  

  

• Question 1349:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  Default int range et0/0-1

  Int range e0/0 ?1

  Sw trunk encap dot1

  Switch mode trunk

  Channel-group 2 mode passive

  No shut

  Spanning-tree vlan 10 priority 0

  Spanning-tree vlan 30 priority 0

• Question 1350:

  In a campus network design, what are two benefits of using BFD for failure detection? (Choose two.)

  A. BFD speeds up routing convergence time.
  B. BFD is an efficient way to reduce memory and CPU usage.
  C. BFD provides fault tolerance by enabling multiple routers to appear as a single virtual router.
  D. BFD provides path failure detection in less than a second.
  E. BFD enables network peers to continue forwarding packets in the event of a restart.
  A. BFD speeds up routing convergence time.
  D. BFD provides path failure detection in less than a second.