Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 131:

  Refer to the exhibit.

  

  An engineer tries to log in to router R1. Which configuration enables a successful login?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 132:

  What is a benefit of using a Type 2 hypervisor instead of a Type 1 hypervisor?

  A. better application performance
  B. Improved security because the underlying OS is eliminated
  C. Improved density and scalability
  D. ability to operate on hardware that is running other OSs
  D. ability to operate on hardware that is running other OSs

  ---

  Explanation

  There are two types of hypervisors: type 1 and type 2 hypervisor.

  In type 1 hypervisor (or native hypervisor), the hypervisor is installed directly on the physical server.

  Then instances of an operating system (OS) are installed on the hypervisor. Type 1 hypervisor has direct access to the hardware resources. Therefore they are more efficient than hosted architectures.

  Some examples of type 1 hypervisor are VMware vSphere/ESXi, Oracle VM Server, KVM and Microsoft Hyper-V.

  In contrast to type 1 hypervisor, a type 2 hypervisor (or hosted hypervisor) runs on top of an operating system and not the physical hardware directly. A big advantage of Type 2 hypervisors is that management console software is not required. Examples of type 2 hypervisor are VMware Workstation (which can run on Windows, Mac and Linux) or Microsoft Virtual PC (only runs on Windows). Type 1 is more efficient and well performing, it is also more secure than type 2 because the flaws and vulnerabilities that are endemic to Operating Systems are often absent from Type 1, bare metal hypervisors.

  Type 1 has better performance, scalability and stability but supported by limited hardware.

• Question 133:

  A client with IP address 209.165.201.25 must access a web server on port 80 at 209.165.200.225. To allow this traffic, an engineer must add a statement to an access control list that is applied in the inbound direction on the port connecting to the web server.

  Which statement allows this traffic?

  A. permit tcp host 209 165 200 225 eq 80 host 209.165.201.25
  B. permit tcp host 209 165.201 25 host 209.165.200.225 eq 80
  C. permit tcp host 209.165.200 225 It 80 host 209.165.201.25
  D. permit tcp host 209.165.200.225 host 209.165.201.25 eq 80
  A. permit tcp host 209 165 200 225 eq 80 host 209.165.201.25

• Question 134:

  DRAG DROP

  Drag and drop the characteristics from the left onto the deployment types on the right.

  Select and Place:

  

  

• Question 135:

  Which benefit is realized by implementing SSO?

  A. IP first-hop redundancy
  B. communication between different nodes for cluster setup
  C. physical link redundancy
  D. minimal network downtime following an RP switchover
  D. minimal network downtime following an RP switchover

• Question 136:

  Reter to the exhibit.

  

  A client requests a new SSID that will use web-based authentication and external RADIUS servers.

  Which Layer 2 security mode must be selected?

  A. WPA + WPA2
  B. WPA2 + WPA3
  C. Static WEP
  D. None
  D. None

• Question 137:

  Where is radio resource management performed in a Cisco SD-Access wireless solution?

  A. DNA Center
  B. control plane node
  C. wireless controller
  D. Cisco CMX
  C. wireless controller

  ---

  Explanation

  Fabric wireless controllers manage and control the fabric-mode APs using the same general model as the traditional local-mode controllers which offers the same operational advantages such as mobility control and radio resource management. A significant difference is that client traffic from wireless endpoints is not tunnelled from the APs to the wireless controller. Instead, communication from wireless clients is encapsulated in VXLAN by the fabric APs which build a tunnel to their first-hop fabric edge node.

  Wireless traffic it tunneled to the edge nodes as the edge nodes provide fabric services such as the Layer 3 Anycast Gateway, policy, and traffic enforcement.

  https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html

• Question 138:

  What is one difference between saltstack and ansible?

  A. SaltStack uses an API proxy agent to program Cisco boxes in agent mode, whereas Ansible uses a Telnet connection.
  B. SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box
  C. SaltStack is agent based, whereas Ansible is agentless.
  D. SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus
  C. SaltStack is agent based, whereas Ansible is agentless.

• Question 139:

  DRAG DROP

  Drag and drop the REST API authentication methods from the left onto their descriptions on the right.

  Select and Place:

  

  

• Question 140:

  What is the primary responsibility of the vBond orchestrator?

  A. to provide centralized management and provisioning of all elements into the network
  B. to configure NAT communication on WAN Edge routers
  C. to provide configuration synchronization of an WAN Edge devices
  D. to facilitate start-up by performing authentication and authorization of all elements into the network
  D. to facilitate start-up by performing authentication and authorization of all elements into the network