Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1451:

  Refer to the exhibit.

  

  After configuring HSRP, an engineer enters the show standby command.

  Which two facts are derived from the output? (Choose two.)

  A. The router with IP 10.10 1.3 is active because it has a higher IP address
  B. If Fa0/0 is shut down, the HSRP pnonty on R2 becomes 80
  C. R2 Fa1/0 regains the primary role when the link comes back up
  D. R2 becomes the active router after the hold time expires.
  E. R2 is using the default HSRP hello and hold timers.
  B. If Fa0/0 is shut down, the HSRP pnonty on R2 becomes 80
  E. R2 is using the default HSRP hello and hold timers.

  ---

  Explanation

  Very tricky question, but i will try to explain.

  That is position of darude or the A&E guys: R2 is in standby with prio 90.

  R1 is active with prio 85.

  Fa0/0 is down, because otherwise R2 would have prio 80.

  Assuming Fa0/0 is the keep-alive between R2 and R1, R1 is down.

  R2 will detect, that R1 is down in 8.672sec and will take over the active role.

  But from my point of view we can not assume, that Fa0/0 is the keep-alive, because the hold time is 10sec and hello time 3sec. The hold time is expired by only 1.328sec, so we can't know, if the hello message could have reached R1, because the hello time is 3sec.

• Question 1452:

  What are two device roles in Cisco SD-Access fabric? (Choose two.)

  A. core switch
  B. vBond controller
  C. edge node
  D. access switch
  E. border node
  C. edge node
  E. border node

  ---

  Explanation

  There are five basic device roles in the fabric overlay:

  + Control plane node: This node contains the settings, protocols, and mapping tables to provide the endpoint-to-location (EID-to-RLOC) mapping system for the fabric overlay. + Fabric border node: This fabric device (for example, core layer device) connects external Layer 3 networks to the SDA fabric.

  + Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.

  + Fabric WLAN controller (WLC): This fabric device connects APs and wireless endpoints to the SDA fabric.

  + Intermediate nodes: These are intermediate routers or extended switches that do not provide any sort of SD-Access fabric role other than underlay services.

  

• Question 1453:

  An engineer must configure a new 6 Ghz only SSID on a cisco catalyst 9800 series WLC, with these requirements:

  1. Provide 802.11ax data rates for supported devices

  2. All users authenticate using a certificate

  Which wireless layer 2 security mode meets the requirements?

  A. WPA2 Enterprise
  B. WPA3 Personal
  C. WPA2 Personal
  D. WPA3 Enterprise
  D. WPA3 Enterprise

• Question 1454:

  Reter to the exhibit.

  

  An administrator troubleshoots intermittent connectivity from internal hosts to an external public server. Some internal hosts can connect to the server while others receive an ICMP Host Unreachable message and these hosts change over time.

  What is the cause of this issue?

  A. The translator does not use address overloading
  B. The NAT ACL does not match alt internal hosts
  C. The NAT ACL and NAT pool share the same name
  D. The NAT pool netmask rs excessively wide
  A. The translator does not use address overloading

• Question 1455:

  Refer to the exhibit.

  

  An engineer is investigating why guest users are able to access other guest user devices when the users are connected to the customer guest WLAN.

  What action resolves this issue?

  A. implement MFP client protection
  B. implement split tunneling
  C. implement P2P blocking
  D. implement Wi-Fi direct policy
  C. implement P2P blocking

  ---

  Explanation

  References:

  2.3 Ensure `Peer-to-Peer Blocking Action` is set to `Drop' for All `Wireless LAN Identifiers' (Scored)

  Description:

  This control determines whether the Wireless LAN Controller is configured to prevent clients connected to the same Wireless Local Area Controller from communicating with each other. Wireless Client Isolation prevents wireless clients from communicating with each other over the RF. Packets that arrive on the wireless interface are forwarded only out the wired interface of an Access Point. One wireless client could potentially compromise another client sharing the same wireless network.

• Question 1456:

  Refer to the exhibit.

  

  The EtherChannel between SW2 and SW3 is not operational, which action resolves this issue?

  A. Configure the channel-group mode on SW2 Gi0/0 and Gi0/1 to on.
  B. Configure the channel-group mode on SW3 Gi0/0 and Gi0/1 to active.
  C. Configure the mode on SW2 Gi0/0 to trunk.
  D. Configure the mode on SW2 Gi0/1 to access.
  C. Configure the mode on SW2 Gi0/0 to trunk.

  ---

  Explanation

  TCKOON is right the immage is missing the channel-group 1 mode active statement but if you google it you will find the right picture.

• Question 1457:

  A large campus network has deployed two wireless LAN controllers to manage the wireless network. WLC1 and WLC2 have been configured as mobility peers. A client device roams from AP1 on WLC1 to AP2 on WLC2, but the controller's client interfaces are on different VLANs.

  How do the wireless LAN controllers handle the inter-subnet roaming?

  A. WLC1 marks the client with an anchor entry in its own database. The database entry is copied to the new controller and marked with a foreign entry on WLC2.
  B. WLC2 marks the client with an anchor entry in its own database. The database entry is copied to the new controller and marked with a foreign entry on WLC1.
  C. WLC1 marks the client with a foreign entry in its own database. The database entry is copied to the new controller and marked with an anchor entry on WLC2.
  D. WLC2 marks the client with a foreign entry in its own database. The database entry is copied to the new controller and marked with an anchor entry on WLC1.
  A. WLC1 marks the client with an anchor entry in its own database. The database entry is copied to the new controller and marked with a foreign entry on WLC2.

  ---

  Explanation

  Inter-subnet roaming is similar to inter-controller roaming in that the controllers exchange mobility messages on the client roam. However, instead of moving the client database entry to the new controller, the original controller marks the client with an "Anchor" entry in its own client database. The database entry is copied to the new controller client database and marked with a "Foreign" entry in the new controller. The roam remains transparent to the wireless client, and the client maintains its original IP address.

  References:

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-3/configuration/guide/b_cg73/b_wlc-cg_chapter_01111.html

• Question 1458:

  Refer to the exhibit.

  

  An engineer is using XML in an application to send information to a RESTCONF-enabled device. After sending the request, the engineer gets this response message and an HTTP response code of 400.

  What do these responses tell the engineer?

  A. The Accept header sent was application/xml
  B. POST was used instead of PUT to update
  C. The Content-Type header sent was application/xml.
  D. JSON body was used
  A. The Accept header sent was application/xml

• Question 1459:

  Refer to the exhibit.

  

  OSPF is preconfigured on all devices except R30. Configure R30 to complete these tasks:

  Task 1

  Configure OSPF according to the topology using these requirements:

  Use Process ID 100.

  Use Loopback0 for the router ID.

  Advertise all networks into OSPF.

  Use network statements under the OSPF process.

  Task 2

  Configure a /18 summary route for Area 50.

  A. See the explanation below
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the explanation below

  ---

  Explanation

  R30

  enable

  configure terminal

  router ospf 100

  router-id 10.0.1.30 network 10.0.1.30 0.0.0.0 area 0 network 10.10.30.0 0.0.0.255 area 0 network 10.20.30.0 0.0.0.255 area 0 network 10.50.40.0 0.0.0.255 area 50 area 50 range 10.50.0.0 255.255.192.0 end write memory

  Why:

  R30 must run OSPF process 100. The PDF's original solution incorrectly changes to router ospf 30, which does not match the task requirement. The task also specifically requires network statements, so interface-level ip ospf commands should not be used here.

  The /18 summary for Area 50 is:

  10.50.0.0 255.255.192.0

  The PDF's extra summary for 10.10.0.0 255.255.192.0 is incorrect because that prefix belongs to Area 0, not Area 50.

• Question 1460:

  Which feature provides data-plane security for Cisco Catalyst SD-WAN networks?

  A. IPsec
  B. SSH
  C. IPS
  D. TLS/DTLS
  A. IPsec