Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1431:

  What is the architectural difference between the MAC address table and TCAM?

  A. TCAM entries are stored for 600 seconds, and MAC address table entries are kept for 200 seconds.
  B. TCAM entries are populated using the ARP table, and the MAC address table is populated dynamically from outgoing frames.
  C. TCAM entries consist of VLAN, port ID and source MAC Address, and MAC address table entries consist of source MAC address end port ID.
  D. TCAM entries are composed of value, mask, and result, and MAC address table entries are composed of value and results.
  D. TCAM entries are composed of value, mask, and result, and MAC address table entries are composed of value and results.

• Question 1432:

  What is a benefit of YANG modules?

  A. tightly coupled models with encoding to improve performance
  B. easier multivendor interoperability provided by common or industry models
  C. avoidance of ecosystem fragmentation by having fixed that cannot be changed
  D. single protocol and model couple to simplify maintenance and supported
  B. easier multivendor interoperability provided by common or industry models

• Question 1433:

  A network engineer is designing a Qos policy for voice and video applications. Which software queuing feature provides strict-priority servicing?

  A. Class-Based Weighted Fair Queuing
  B. Link Fragmentation
  C. Low Larency Queuing
  D. Automatic Qos
  C. Low Larency Queuing

• Question 1434:

  

  Refer to the exhibit. Which HTTP request produced the REST API response that was returned by the Cisco Catalyst Center (formerly DNA Center) platform?

  A. POST /auth/token
  B. GET /network-device
  C. GET /template-programmer/template/version/42a3df73-3ef4-49e2-b4f0-6927bbd4bf52
  D. POST /discovery
  B. GET /network-device

• Question 1435:

  An engineer must enable a login authentication method that allows a user to log in by using local authentication if all other defined authentication methods fail Which configuration should be applied?

  A. aaa authentication login CONSOLE group radius local-case enable aaa
  B. authentication login CONSOLE group radius local enable none
  C. aaa authentication login CONSOLE group radius local enable
  D. aaa authentication login CONSOLE group tacacs+ local enable
  D. aaa authentication login CONSOLE group tacacs+ local enable

• Question 1436:

  Refer to the exhibit.

  1. When a device is connected, the port transitions immediately to a forwarding state.

  2. The interface should not send or receive BPDUs.

  3. If a BPDU is received, it continues operating normally.

  

  Rapid PVST+ is enabled on all switches. Which command set must be configured on switch1 to achieve the following results on port fa0/1?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

  BPDU filtering allows you to avoid transmitting BPDUs on PortFast-enabled ports that are connected to an end system. When you enable PortFast on the switch, spanning tree places ports in the forwarding state immediately, instead of going through the listening, learning, and forwarding states.

  By default, spanning tree sends BPDUs from all ports regardless of whether PortFast is enabled. BDPU filtering is on a per-switch basis; after you enable BPDU filtering, it applies to all PortFast-enabled ports on the switch.

• Question 1437:

  Which Cisco EIGRP K-values are set to zero by default? (Choose three.)

  A. Bandwidth
  B. Load
  C. Total Delay
  D. Reliability
  E. MTU
  B. Load
  D. Reliability
  E. MTU

  ---

  Explanation

  https://ipwithease.com/eigrp-k-values/ https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/15-s/ire-15-s-book/ire-wid-met.html

• Question 1438:

  A network administrator applies the following configuration to an IOS device:

  aaa new-model aaa authentication login default local group tacacs+

  What is the process of password checks when a login attempt is made to the device?

  A. A TACACS+server is checked first. If that check fail, a database is checked?
  B. A TACACS+server is checked first. If that check fail, a RADIUS server is checked. If that check fail. a local database is checked.
  C. A local database is checked first. If that fails, a TACACS+server is checked, if that check fails, a RADUIS server is checked.
  D. A local database is checked first. If that check fails, a TACACS+server is checked.
  D. A local database is checked first. If that check fails, a TACACS+server is checked.

  ---

  Explanation

  The "aaa authentication login default local group tacacs+" command is broken down as follows:

  + The `aaa authentication' part is simply saying we want to configure authentication settings.

  + The `login' is stating that we want to prompt for a username/ password when a connection is made to the device.

  + The `default' means we want to apply for all login connections (such as tty, vty, console and aux). If we use this keyword, we don't need to configure anything else under tty, vty and aux lines. If we don't use this keyword then we have to specify which line(s) we want to apply the authentication feature.

  + The `local group tacacs+" means all users are authenticated using router's local database (the first method). If the credentials are not found on the local database, then the TACACS+ server is used (the second method).

  https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/200606-aaa-authentication-login-default-local.html

• Question 1439:

  What is the API keys option for REST API authentication?

  A. a predetermined string that is passed from client to server
  B. a one-time encrypted token
  C. a username that is stored in the local router database
  D. a credential that is transmitted unencrypted
  A. a predetermined string that is passed from client to server

  ---

  Explanation

  In REST API Security ?API keys are widely used in the industry and became some sort of standard, however, this method should not be considered a good security measure.

  API Keys were created as somewhat of a fix to the early authentication issues of HTTP Basic Authentication and other such systems. In this method, a unique generated value is assigned to each first time user, signifying that the user is known. When the user attempts to re-enter the system, their unique key (sometimes generated from their hardware combination and IP data, and other times randomly generated by the server which knows them) is used to prove that they're the same user as before.

  https://blog.restcase.com/4-most-used-rest-api-authentication-methods/

• Question 1440:

  What are two of benefits of using VXLAN? (Choose two.)

  A. It allows for an unlimited number of segments.
  B. It has fewer devices to manage.
  C. It uses all available Layer 3 paths in the underlying network.
  D. It allows multi-tenanted segmentation.
  E. It uses a MAC in IP/TCP encapsulation technique.
  A. It allows for an unlimited number of segments.
  D. It allows multi-tenanted segmentation.