Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 1481:

  What is the purpose of the weight attribute in an EID-to-RLOC mapping?

  A. It determines the administrative distance of LISP generated routes in the RIB.
  B. It indicates the load-balancing ratio between ETRs of the same priority.
  C. It indicates the preference for using LISP over native IP connectivity.
  D. It identifies the preferred RLOC address family.
  B. It indicates the load-balancing ratio between ETRs of the same priority.

• Question 1482:

  Which RF value represents the decline of the RF signal amplitude over a given distance?

  A. signal-to-noise ratio
  B. effective isotropic racketed power
  C. free space path loss
  D. received signal strength indicator
  C. free space path loss

• Question 1483:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary pre-configurations have been applied.

  5. Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed tasks.

  6. Do not change the enable password or hostname for any device.

  7. Save your configurations to NVRAM before moving to the next item.

  8. Click Next at the bottom of the screen to submit this lab and move to the next question.

  9. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  

• Question 1484:

  Refer to the exhibit.

  

  An engineer must establish eBGP peering between router R3 and router R4. Both routers should use their loopback interfaces as the BGP router ID.

  Which configuration set accomplishes this task?

  A. R3(config)#router bgp 200 R3(config-router)#neighbor 10.4.4.4 remote-as 100 R3(config-router)# neighbor 10.4.4.4 update-source Loopback0 R4(config)#router bgp 100 R4(config-router)#neighbor 10.3.3.3 remote-as 200 R4(config-router)#network 10.3.3.3 update-source Loopback0
  B. R3(config)#router bgp 200 R3(config-router)#neighbor 10.24.24.4 remote-as 100 R3(config-router)#neighbor 10.24.24.4 update-source Loopback0 R4(config)#router bgp 100 R4(config-router)#neighbor 10.24.24.3 remote-as 200 R4(config-router)#neighbor 10.24.24.3 update-source Loopback0
  C. R3(config)#router bgp 200 R3(config-router)#neighbor 10.4.4.4 remote-as 100 R3(config-router)#bgp router-id 10.3.3.3 R4(config)#router bgp 100 R4(config-router)#neighbor 10.3.3.3 remote-as 200 R4(config-router)#bgp router-id 10.4.4.4
  D. R3(config)#router bgp 200 R3(config-router)#neighbor 10.24.24.4 remote-as 100 R3(config-router)#bgp router-id 10.3.3.3 R4(config)#router bgp 100 R4(config-router)#neighbor 10.24.24.3 remote-as 200 R4(config-router)#bgp router-id 10.4.4.4
  D. R3(config)#router bgp 200 R3(config-router)#neighbor 10.24.24.4 remote-as 100 R3(config-router)#bgp router-id 10.3.3.3 R4(config)#router bgp 100 R4(config-router)#neighbor 10.24.24.3 remote-as 200 R4(config-router)#bgp router-id 10.4.4.4

• Question 1485:

  Which two statements about AAA authentication are true? (Choose two)

  A. RADIUS authentication queries the router`s local username database
  B. TACACS+ authentication uses an RSA server to authenticate users
  C. Local user names are case-insensitive
  D. Local authentication is maintained on the router
  E. KRB5 authentication disables user access when an incorrect password is entered
  D. Local authentication is maintained on the router
  E. KRB5 authentication disables user access when an incorrect password is entered

• Question 1486:

  Which two components are needed when a Cisco SD-Access fabric is designed? (Choose two.)

  A. Cisco Catalyst Center (formerly DNA Center) application
  B. Firepower Threat Defense
  C. Identity Service Engine
  D. Cisco Data Center Network Manager
  E. Cisco Prime Infrastructure
  A. Cisco Catalyst Center (formerly DNA Center) application
  C. Identity Service Engine

• Question 1487:

  Why is an AP joining a different WLC than the one specified through option 43?

  A. The WLC is running a different software version.
  B. The AP is joining a primed WLC.
  C. The AP multicast traffic unable to reach the WLC through Layer 3.
  D. The APs broadcast traffic is unable to reach the WLC through Layer 2.
  B. The AP is joining a primed WLC.

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/119286-lap-notjoin-wlc-tshoot.html#:~:text=on%20document%20conventions.-,Overview%20of%20the%20Wireless%20LAN%20Controller%20(WLC)%20Discovery%20and%20Join%20Process,-In%20a%20Cisco

• Question 1488:

  What is a benefit of using segmentation with TrustSec?

  A. Integrity checks prevent data from being modified in transit.
  B. Packets sent between endpoints on a LAN are encrypted using symmetric key cryptography.
  C. Security group tags enable network segmentation.
  D. Firewall rules are streamlined by using business-level profiles.
  D. Firewall rules are streamlined by using business-level profiles.

• Question 1489:

  Which statement about Cisco Express Forwarding is true?

  A. It uses a fast cache that is maintained in a router data plane.
  B. It maintains two tables in the data plane: the FIB and adjacency table.
  C. It makes forwarding decisions by a process that is scheduled through the IOS scheduler.
  D. The CPU of a router becomes directly involved with packet-switching decisions.
  B. It maintains two tables in the data plane: the FIB and adjacency table.

  ---

  Explanation

  Cisco Express Forwarding (CEF) provides the ability to switch packets through a device in a very quick and efficient way while also keeping the load on the router's processor low. CEF is made up of two different main components: the Forwarding Information Base (FIB) and the Adjacency Table. These are automatically updated at the same time as the routing table. The Forwarding Information Base (FIB) contains destination reachability information as well as next hop information. This information is then used by the router to make forwarding decisions. The FIB allows for very efficient and easy lookups. Below is an example of the FIB table:

  

  The adjacency table is tasked with maintaining the layer 2 next-hop information for the FIB. An example of the adjacency table is shown below:

  

  It uses a fast cache that is maintained in a router data plane' fast cache is only used when fast switching is enabled while CEF is disabled.

• Question 1490:

  Which security actions must be implemented to prevent an API injection attack?

  A. Log and monitor failed attempts.
  B. Use password hash with biometric authentication.
  C. Validate, filter, and sanitize all incoming data.
  D. Use short-lived access tokens and authenticate the apps.
  C. Validate, filter, and sanitize all incoming data.