Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1431:

  Which LISP component is required for a LISP site to communicate with a non-LISP site?

  A. ETR
  B. ITR
  C. Proxy ETR
  D. Proxy ITR
  C. Proxy ETR

  ---

  Explanation

  ETR, (Egress) from internal to External ITR, (Internal) from External to Internal

• Question 1432:

  Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

  A. VACL blocking broadcast frames from nonauthorized hosts
  B. IPv4 ACL blocking route advertisements from nonauthorized hosts
  C. PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes
  D. PVLANs with community ports associated to route advertisements and isolated ports for nodes
  C. PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

• Question 1433:

  Refer to the exhibit.

  

  What is the cause of the communication failure between R1 and R4?

  A. R1 is configured with the no ip unreachables command.
  B. R2 is denying ICMP
  C. R4 is denying ICMP.
  D. R3 is denying ICMP.
  A. R1 is configured with the no ip unreachables command.

• Question 1434:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  SW10

  Conf t

  Default int e0/0

  Int e0/0

  No sh

  

  Conf t

  

  

  Copy run start

  Verification from PC2

  

  Show etherchannel summary

  

• Question 1435:

  What are two benefits of virtual switching when compared to hardware switching? (Choose two.)

  A. increased MTU size
  B. hardware independence
  C. VM-level isolation
  D. increased flexibility
  E. extended 802.1Q VLAN range
  B. hardware independence
  D. increased flexibility

• Question 1436:

  What is the role of the vsmart controller in a Cisco SD-WAN environment?

  A. IT performs authentication and authorization
  B. It manages the control plane.
  C. It is the centralized network management system.
  D. It manages the data plane.
  B. It manages the control plane.

  ---

  Explanation

  + Control plane (vSmart) builds and maintains the network topology and make decisions on the traffic flows. The vSmart controller disseminates control plane information between WAN Edge devices, implements control plane policies and distributes data plane policies to network devices for enforcement.

• Question 1437:

  Which controller is the single plane of management for Cisco SD-WAN?

  A. vBond
  B. vEdge
  C. vSmart
  D. vManange
  D. vManange

  ---

  Explanation

  The primary components for the Cisco SD-WAN solution consist of the vManage network management system (management plane), the vSmart controller (control plane), the vBond orchestrator (orchestration plane), and the vEdge router (data plane).

  + vManage -This centralized network management system provides a GUI interface to easily monitor, configure, and maintain all Cisco SD-WAN devices and links in the underlay and overlay network. + vSmart controller -This software-based component is responsible for the centralized control plane of the SD-WAN network. It establishes a secure connection to each vEdge router and distributes routes and policy information via the Overlay Management Protocol (OMP), acting as a route reflector. It also orchestrates the secure data plane connectivity between the vEdge routers by distributing crypto key information, allowing for a very scalable, IKE-less architecture. + vBond orchestrator -This software-based

  component performs the initial authentication of vEdge devices and orchestrates vSmart and vEdge connectivity. It also has an important role in enabling the communication of devices that sit behind Network Address Translation (NAT). + vEdge router -This device, available as either a hardware appliance or software-based router, sits at a physical site or in the cloud and provides secure data plane connectivity among the sites over one or more WAN transports. It is

  responsible for traffic forwarding, security, encryption, Quality of Service (QoS), routing protocols such as Border Gateway Protocol (BGP) and Open Shortest Path First (OSPF), and more.

  References:

  https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/CVD-SD-WANDesign-2018OCT.pdf

• Question 1438:

  Witch two actions provide controlled Layer 2 network connectivity between virtual machines running on the same hypervisor? (Choose two.)

  A. Use a single trunk link to an external Layer2 switch.
  B. Use a virtual switch provided by the hypervisor.
  C. Use a virtual switch running as a separate virtual machine.
  D. Use a single routed link to an external router on stick.
  E. Use VXLAN fabric after installing VXLAN tunneling drivers on the virtual machines.
  B. Use a virtual switch provided by the hypervisor.
  C. Use a virtual switch running as a separate virtual machine.

  ---

  Explanation

  Source 1:

  https://www.cisco.com/c/dam/en/us/products/collateral/switches/nexus-1000v-switchvmware-vsphere/at_a_glance_c45-532467.pdfSource2:

  https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/sw/vm_fex/vmware/gui/config_guide/2-1/b_GUI_VMware_VMFEX_UCSM_Configuration_Guide_2_1/b_GUI_VMware_VMFEX_UCSM_Configuration_Guide_2_1_chapter_0110.pdf

• Question 1439:

  In a Cisco SD-Access solution, what is the role of the Identity Services Engine?

  A. It is leveraged for dynamic endpoint to group mapping and policy definition.
  B. It provides GUI management and abstraction via apps that share context.
  C. it is used to analyze endpoint to app flows and monitor fabric status.
  D. It manages the LISP EID database.
  A. It is leveraged for dynamic endpoint to group mapping and policy definition.

  ---

  Explanation

  DNA Controller ?Enterprise SDN Controller (e.g. DNA Center) provides GUI management and abstraction via Apps that share context Identity Services ?External ID System(s) (e.g. ISE) are leveraged for dynamic Endpoint to Group mapping and Policy definition Analytics Engine ?External Data Collector(s) (e.g. NDP) are leveraged to analyze Endpoint to App flows and monitor fabric status

  References:

  https://www.cisco.com/c/dam/global/da_dk/assets/training/seminaria-materials/Software_Defined_Access_2017.pdf

• Question 1440:

  What is a characteristic of a Type 2 hypervisor?

  A. It is completely independent of the operating system.
  B. It is installed on an operating system and supports other operating systems.
  C. It eliminates the need for an underlying operating system.
  D. Its main task is to manage hardware resources between different operating systems.
  B. It is installed on an operating system and supports other operating systems.