Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1421:

  Refer to the exhibit.

  

  Which privilege level is assigned to VTY users?

  A. 1
  B. 7
  C. 13
  D. 15
  A. 1

  ---

  Explanation

  Lines (CON, AUX, VTY) default to level 1 privileges.

• Question 1422:

  A firewall address of 192 166.1.101 can be pinged from a router but, when running a traceroute to It, this output is received:

  

  What is the cause of this issue?

  A. The firewall blocks ICMP traceroute traffic.
  B. The firewall rule that allows ICMP traffic does not function correctly
  C. The firewall blocks ICMP traffic.
  D. The firewall blocks UDP traffic
  D. The firewall blocks UDP traffic

• Question 1423:

  Refer to the exhibit.

  

  After configurating an IPsec VPN, an engineer enters the show command to verify the ISAKMP SA status.

  What does the status show?

  A. ISAKMP SA is authenticated and can be used for Quick Mode.
  B. Peers have exchanged keys, but ISAKMP SA remains unauthenticated.
  C. VPN peers agreed on parameters for the ISAKMP SA
  D. ISAKMP SA has been created, but it has not continued to form.
  A. ISAKMP SA is authenticated and can be used for Quick Mode.

  ---

  Explanation

  The ISAKMP SA has been authenticated. If the router initiated this exchange, this state transitions immediately to QM_IDLE, and a Quick Mode exchange begins.

  https://www.ciscopress.com/articles/article.asp?p=606584

• Question 1424:

  Which component handles the orchestration plane of the Cisco SD-WAN?

  A. vBond
  B. vSmart
  C. vManage
  D. vEdge
  A. vBond

  ---

  Explanation

  + Orchestration plane (vBond) assists in securely onboarding the SD-WAN WAN Edge routers into the SD-WAN overlay. The vBond controller, or orchestrator, authenticates and authorizes the SD-WAN components onto the network. The vBond orchestrator takes an added responsibility to distribute the list of vSmart and vManage controller information to the WAN Edge routers. vBond is the only device in SD-WAN that requires a public IP address as it is the first point of contact and authentication for all SD-WAN components to join the SD-WAN fabric. All other components need to know the vBond IP or DNS information.

  References:

  https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2018/pdf/BRKCRS-2112.pdfpage8.

• Question 1425:

  A network engineer attempts to connect to the Router1 console port.

  Router1#telnet 192.168.1.1

  % telenet connections not permitted from this terminal

  Which configuration is needed to allow Telnet connections?

  A. Router1(config)# line vty 0 15 Router1(config-line)# transport output telnet
  B. Router1(config)# telnet client
  C. Router1(config)# line console 0 Router1(config-line)# transport output telnet
  D. Router1(config)# access-list 100 permit tcp any any eq telnet Router1(config)# line console 0 Router1(config-line)# access-class 100 out
  C. Router1(config)# line console 0 Router1(config-line)# transport output telnet

  ---

  Explanation

  Router#

  Router#conf t

  Enter configuration commands, one per line. End with CNTL/Z.

  Router(config)#line con 0

  Router(config-line)#transport output none

  Router(config-line)#end

  *Apr 19 17:33:16.198: %SYS-5-CONFIG_I: Configured from console by console Router#disable

  Router>telnet 10.0.0.2

  % telnet connections not permitted from this terminal Router>en

  Router#conf t

  Enter configuration commands, one per line. End with CNTL/Z.

  Router(config)#line console 0

  Router(config-line)#transport output telnet

  Router(config-line)#exit

  Router(config)#end

  Router#

  *Apr 19 17:34:06.111: %SYS-5-CONFIG_I: Configured from console by console Router#disable

  Router>telnet 10.0.0.2

  Trying 10.0.0.2 ...

  % Connection refused by remote host Router>

  References:

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/iosxe/qualified-cli-command-reference-guide/m-line-commands.pdf

• Question 1426:

  DRAG DROP

  Drag and drop the characteristics from the left onto the corresponding infrastructure deployment models on the right.

  Select and Place:

  

  

• Question 1427:

  Which DNS record type is needed to allow a Cisco AP to discover a WLC when using IPv4?

  A. CNAME record
  B. A record
  C. NS record
  D. SOA record
  A. CNAME record

• Question 1428:

  Which statement about a fabric access point is true?

  A. It is in local mode and must be connected directly to the fabric edge switch.
  B. It is in local mode and must be connected directly to the fabric border node.
  C. It is in FlexConnect mode and must be connected directly to the fabric border node.
  D. It is in FlexConnect mode and must be connected directly to the fabric edge switch.
  A. It is in local mode and must be connected directly to the fabric edge switch.

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/sda-sdg-2019oct.html

• Question 1429:

  You want to securely implement the Network Time Protocol (NTP) on your network.

  What two mechanisms are available to secure NTP? (Choose two.)

  A. IPSec communication
  B. MD5 authentication keys
  C. Role based access control (RBAC)
  D. access-group configuration
  B. MD5 authentication keys
  D. access-group configuration

• Question 1430:

  Which type of antenna is designed to provide a 360-degree radiation pattern?

  A. Yagi
  B. patch
  C. directional
  D. omnidirectional
  D. omnidirectional