Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 131:

  Refer to the exibit. Which configuration enables OSPF for area 0 interfaces to establish adjacency with a neighboring router with the same VRF?

  ip vrf CCNP rd 1:1

  interface Ethernet1

  ip vrf forwarding CCNP

  ip address 10.1.1.1 255.255.255.252

  !

  interface Ethernet2

  ip vrf forwarding CCNP

  ip address 10.2.2.2 255.2555.255.252

  A. router ospf 1 vrf CCNP network 10.1.1.1 0.0.0.0 area 0 network 10.2.2.2 0.0.0.0 area 0
  B. router ospf 1 interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0
  C. router ospf 1 vrf CCNP interface Ethernet1 ip ospf 1 area 0.0.0.0 interface Ethernet2 ip ospf 1 area 0.0.0.0
  D. router ospf 1 vrf CCNP network 10.0.0.0 0.0.255.255 area 0
  A. router ospf 1 vrf CCNP network 10.1.1.1 0.0.0.0 area 0 network 10.2.2.2 0.0.0.0 area 0

• Question 132:

  DRAG DROP

  Drag and drop the code snippets from the bottom onto the blanks in the script to convert a Python object into a JSON string. Not all options are used.

  Select and Place:

  

  

• Question 133:

  Which HHTP status code is the correct response for a request with an incorrect password applied to a REST API session?

  A. HTTP Status Code 200
  B. HTTP Status Code 302
  C. HTTP Status Code 401
  D. HTTP Status Code: 504
  C. HTTP Status Code 401

  ---

  Explanation

  A 401 error response indicates that the client tried to operate on a protected resource without providing the proper authorization. It may have provided the wrong credentials or none at all.

  Note: answer 'HTTP Status Code 200' 4xx code indicates a "client error" while a 5xx code indicates a "server error".

  References:

  https://restfulapi.net/http-status-codes/

• Question 134:

  Which technology is used to provide Layer 2 and Layer 3 logical networks in the Cisco SD-Access architecture?

  A. underlay network
  B. VPN routing/forwarding
  C. easy virtual network
  D. overlay network
  D. overlay network

  ---

  Explanation

  

• Question 135:

  How is traffic classified when using Cisco TrustSec technology?

  A. with the IP address
  B. with the VLAN
  C. with the security group tag
  D. with the MAC address
  C. with the security group tag

• Question 136:

  Which configuration protects the password for the VTY lines against over-the-shoulder attacks?

  A. username admin secret 7 6j809j23kpp43883500N7%e$
  B. service password-encryption
  C. line vty 04 password $25$FpM7182!
  D. line vty 0 15 password $25$FpM71f82!
  B. service password-encryption

• Question 137:

  An engineer is configuring a new SSID to present users with a splash page for authentication.

  Which WLAN Layer 3 setting must be configured to provide this functionally?

  A. CCKM
  B. WPA2 Policy
  C. Local Policy
  D. Web Policy
  D. Web Policy

• Question 138:

  Which configuration creates a CoPP policy that provides unlimited SSH access from dient 10.0.0.5 and denies access from all other SSH clients'?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 139:

  Router R1 must be configured as a UDP responder on port 6336.

  Which configuration accomplishes this task?

  A. (config)#ip sla responder udp-echo ipaddress 10.10.10.1 port 6336
  B. (config)#ip sla responder udp-echo ipv4 10.10.10.1 port 6336
  C. (config)#ip sla responder ipaddress 10.10.10.1 port 6336
  D. (config-if)#ip sla responder udp-port ipaddress 10.10.10.1 port 6336
  A. (config)#ip sla responder udp-echo ipaddress 10.10.10.1 port 6336

• Question 140:

  Which statement about TLS is true when using RESTCONF to write configurations on network devices?

  A. It is provided using NGINX acting as a proxy web server.
  B. It is no supported on Cisco devices.
  C. It required certificates for authentication.
  D. It is used for HTTP and HTTPs requests.
  A. It is provided using NGINX acting as a proxy web server.

  ---

  Explanation

  When a device boots up with the startup configuration, the nginx process will be running. NGINX is an internal webserver that acts as a proxy webserver. It provides Transport Layer Security (TLS)-based HTTPS. RESTCONF request sent via HTTPS is first received by the NGINX proxy web server, and the request is transferred to the confd web server for further syntax/semantics check.

  References:

  https://www.cisco.com/c/en/us/td/docs/iosxml/ios/prog/configuration/168/b_168_programmability_cg/RESTCONF.html

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/166/b_166_programmability_cg/b_166_programmability_cg_chapter_01011.html

  The https-based protocol-RESTCONF (RFC 8040), which is a stateless protocol, uses secure HTTP methods to provide CREATE, READ, UPDATE and DELETE (CRUD) operations on a conceptual datastore containing YANG-defined data - > RESTCONF only uses HTTPs.