Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 151:

  What is a characteristic of vManage?

  A. It leverages the overlay management protocol to interface with WAN Edge devices.
  B. It supports protocols such as OSPF to integrate with legacy network devices.
  C. It requires a public IP address to allow WAN Edge devices to discover fabric components.
  D. It uses NETCONF to configure vSmart devices to build the overlay network data plane.
  D. It uses NETCONF to configure vSmart devices to build the overlay network data plane.

• Question 152:

  Which LISP infrastructure device provides connectivity between non-sites and LISP sites by receiving non-LISP traffic with a LISP site destination?

  A. PETR
  B. PITR
  C. map resolver
  D. map server
  B. PITR

  ---

  Explanation

  Proxy ingress tunnel router (PITR): answer 'PETR' PITR is an infrastructure LISP network entity that receives packets from non-LISP sites and encapsulates the packets to LISP sites or natively forwards them to non-LISP sites.

  https://www.ciscopress.com/articles/article.asp?p=2992605 https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/DCI/5-0/LISPmobility/DCI_LISP_Host_Mobility/LISPmobile_2.html

• Question 153:

  Refer to the exhibit.

  

  An engineer attempts to configure a trunk between switch sw1 and switch SW2 using DTP, but the trunk does not form. Which command should the engineer apply to switch SW2 to resolve this issue?

  A. switchport mode dynamic desirable
  B. switchport nonegotiate
  C. no switchport
  D. switchport mode access
  A. switchport mode dynamic desirable

• Question 154:

  Refer to the exhibit.

  

  How should the programmer access the list of VLANs that were received via the API call?

  A. VlanNames[`response']
  B. VlanNames[0]
  C. VlanNames[`Vlan1']
  D. list(VlanNames)
  A. VlanNames[`response']

  ---

  Explanation

  >>> VlanNames = {'response':['vlan1','vlan2','vlan3'],'version':'1.0'} >>> VlanNames['response'] ['vlan1', 'vlan2', 'vlan3']

• Question 155:

  Which two methods are used to assign security group tags to the user in a Cisco Trust Sec architecture? (Choose two )

  A. modular QoS
  B. policy routing
  C. web authentication
  D. DHCP
  E. IEEE 802.1x
  C. web authentication
  E. IEEE 802.1x

  ---

  Explanation

  Web authentication Used when a user logs in using a web browser. When a user accesses the network using this method, web authentication authenticates the user and assigns a security group tag.

  This is an effective authentication method when the client terminal does not have an 802.1X supplicant function.

  IEEE 802.1x A network access control protocol that provides authentication and authorization. It consists of three elements: an authentication server, an authenticator, and a supplicant. When a user connects to a network, they are authenticated using 802.1x and are granted permission to access the network. Through this authentication process, users are assigned the appropriate security group tag.

• Question 156:

  Refer to the exhibit.

  

  An engineer is creating a Pytnon script to fetch the BGP configuration from a device using RESTCONF.

  What does the output Indicate?

  A. The BGP data resource identifier in the URL Incorrect.
  B. There is no BGP process running on the device
  C. RESTCONF is not enabled on the device.
  A. The BGP data resource identifier in the URL Incorrect.

• Question 157:

  An engineer applies this configuration to router R1. How does R1 respond when the user `cisco' logs in?

  

  A. It displays the startup conftg and then permits the user to execute commands
  B. It places the user into EXEC mode and permits the user to execute any command
  C. It displays the startup conflg and then terminates the session.
  D. It places the user into EXEC mode but permits the user to execute only the show startup-config command
  A. It displays the startup conftg and then permits the user to execute commands

• Question 158:

  What is a characteristic of MACsec?

  A. 802.1AE provides encryption and authentication services
  B. 802.1AE is bult between the host and switch using the MKA protocol, which negotiates encryption keys based on the master session key from a successful 802 1X session
  C. 802.1AE is bult between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode)
  D. 802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol
  B. 802.1AE is bult between the host and switch using the MKA protocol, which negotiates encryption keys based on the master session key from a successful 802 1X session

  ---

  Explanation

  MACsec, defined in 802.1AE, provides MAC-layer encryption over wired networks by using out-of-band methods for encryption keying. The MACsec Key Agreement (MKA) Protocol provides the required session keys and manages the required encryption keys. MKA and MACsec are implemented after successful authentication using the 802.1x Extensible Authentication Protocol (EAP-TLS) or Pre Shared Key (PSK) framework.

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-9/configuration_guide/sec/b_169_sec_9300_cg/macsec_encryption.html

• Question 159:

  Which tag defines the roaming domain and properties of an AP deployment?

  A. RF tag
  B. policy tag
  C. site tag
  D. AP tag
  D. AP tag

• Question 160:

  A customer has two Cisco WLCs that manage separate APs throughout a building. Each WLC advertises the same SSID but terminates on different interfaces. Users report that they drop their connections and change IP addresses when roaming. Which action resolves this issue?

  A. Configure high availability
  B. Enable test roaming
  C. Enable client load balancing.
  D. Configure mobility groups
  D. Configure mobility groups