Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1401:

  Which features does Cisco EDR use to provide threat detection and response protection?

  A. containment, threat intelligence, and machine learning
  B. firewalling and intrusion prevention
  C. container-based agents
  D. cloud analysis and endpoint firewall controls
  A. containment, threat intelligence, and machine learning

  ---

  Explanation

  https://www.cisco.com/c/en/us/products/security/endpoint-security/what-is-endpoint-detection-response-edr.html

• Question 1402:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary pre-configurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Configure R2 according to the topology to achieve these results:

  1. Configure eBGP using Loopback 0 for the router-id. Do not use the address-family command to accomplish this.

  2. Advertise R2’s Loopback 100 and Loopback 200 networks to AS40 and AS60.

  R2

  

  

  

  R1

  

  

  

  

  

  

  

  

  

  

  R3

  

  

  

  

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  

  

  Verification:

  

• Question 1403:

  Refer to the exhibit.

  

  A network engineer troubleshoots an issue with the port channel between SW1 and SW2. which command resolves the issue?

  A. SW2(config-if)#switchport mode trunk
  B. SW1(config-if)#channel-group 10 mode active
  C. SW1(config-if)#channel-group 10 mode desirable
  D. SW2(config-if)#channel-group 10 mode on
  B. SW1(config-if)#channel-group 10 mode active

  ---

  Explanation

  B is correct for LACP.

• Question 1404:

  In Cisco Catalyst Center (formerly DNA Center) Inventory, the Software Version of a network device displays a status of OUTDATED. What does it mean?

  A. There is a later software version available on Cisco Catalyst Center (formerly DNA Center).
  B. The current software image does not match the selected Golden Image for this type of network device.
  C. The current type of software image does not match the type of the network device.
  D. There is a later software version available on the Cisco.com website.
  B. The current software image does not match the selected Golden Image for this type of network device.

• Question 1405:

  Which of the following attacks becomes more effective because of global leakages of users' passwords?

  A. Dictionary
  B. Brute-force
  C. Phishing
  D. Deauthentication
  A. Dictionary

• Question 1406:

  DRAG DROP

  Drag and drop the descriptions from the left onto the QoS components on the right.

  Select and Place:

  

  

• Question 1407:

  Which configuration creates a CoPP policy that provides unlimited SSH access from dient 10.0.0.5 and denies access from all other SSH clients'?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 1408:

  What is one characteristic of Cisco SD-Access networks?

  A. Devices are assigned to virtual networks based on their VLAN membership.
  B. Scalable group tags are used for macrosegmentatlon.
  C. Virtual networks are used for microsegmentation.
  D. All traffic is Layer 3 within the fabric.
  B. Scalable group tags are used for macrosegmentatlon.

• Question 1409:

  Refer to the exhibit.

  

  Which troubleshooting a routing issue, an engineer issues a ping from S1 to S2. When two actions from the initial value of the TTL? (Choose two.)

  A. The packet reaches R3, and the TTL expires
  B. R2 replies with a TTL exceeded message
  C. R3 replies with a TTL exceeded message.
  D. The packet reaches R2, and the TTL expires.
  E. R1 replies with a TTL exceeded message
  F. The packet reaches R1 and the TTL expires.
  B. R2 replies with a TTL exceeded message
  D. The packet reaches R2, and the TTL expires.

  ---

  Explanation

  When a labeled packet is received with a TTL of 1, the receiving LSR drops the packet and sends an ICMP message "time exceeded" (type 11, code 0) to the originator of the IP packet. This is the same behavior that a router would exhibit with an IP packet that had an expiring TTL.

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010111000.html#:~:text=The%20local%20and%20FlexConnect%20mode% 20access%20points,spend%20about%2050%20milliseconds%20on%20each%20channel.

• Question 1410:

  Refer to the exhibit.

  

  What is the cause of the communication failure between R1 and R4?

  A. R1 is configured with the no ip unreachables command.
  B. R2 is denying ICMP
  C. R4 is denying ICMP.
  D. R3 is denying ICMP.
  A. R1 is configured with the no ip unreachables command.