Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 201:

  The login method is configured on the VTY lines of a router with these parameters.

  1. The first method for authentication is TACACS

  2. If TACACS is unavailable, login is allowed without any provided credentials

  Which configuration accomplishes this task?

  A. R1#sh run | include aaa aaa new-model aaa authentication login VTY group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748 R1#sh run | include username R1#
  B. R1#sh run | include aaa aaa new-model aaa authentication login telnet group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 R1#sh run | include username R1#
  C. R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748 R1#sh run | include username R1#
  D. R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ aaa session-id common R1#sh run | section vty line vty 0 4 transport input none R1#
  C. R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748 R1#sh run | include username R1#

  ---

  Explanation

  According to the requirements (first use TACACS+, then allow login with no authentication), we have to use "aaa authentication login ... group tacacs+ none" for AAA command. The next thing to check is the if the "aaa authentication login default" or "aaa authentication login list-name" is used. The `default' keyword means we want to apply for all login connections (such as tty, vty, console and aux). If we use this keyword, we don't need to configure anything else under tty, vty

  and aux lines. If we don't use this keyword then we have to specify which line(s) we want to apply the authentication feature.

  From above information, we can find out answer 'R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ none

  aaa session-id common

  R1#sh run | section vty

  line vty 0 4

  password 7 0202039485748

  If you want to learn more about AAA configuration, please read our AAA TACACS+ and RADIUS Tutorial ?Part 2.

  For your information, answer 'R1#sh run | include aaa

  aaa new-model aaa authentication login telnet group tacacs+ none

  aaa session-id common

  R1#sh run | section vty

  line vty 0 4

  R1#sh run | include username

  R1#' would be correct if we add the following command under vty line ("line vty 0 4"): "login authentication telnet" ("telnet" is the name of the AAA list above)

• Question 202:

  Refer to the exhibit.

  

  An engineer is troubleshooting a connectivity issue and executes a traceoute.

  What does the result confirm?

  A. The destination server reported it is too busy
  B. The protocol is unreachable
  C. The destination port is unreachable
  D. The probe timed out
  D. The probe timed out

  ---

  Explanation

  In Cisco routers, the codes for a traceroute command reply are:

  ! -- success

  * -- time out

  N -- network unreachable

  H -- host unreachable

  P -- protocol unreachable

  A -- admin denied

  Q -- source quench received (congestion)

  ? -- unknown (any other ICMP message)

• Question 203:

  

  Refer to the exhibit.

  Which Python snippet stores the data structure of the device in JSON format?

  A. A close up of a text AI-generated content may be incorrect.
  B. A close up of a logo AI-generated content may be incorrect.
  C. A close up of a text AI-generated content may be incorrect.
  D. A black text on a white background AI-generated content may be incorrect.
  C. A close up of a text AI-generated content may be incorrect.

• Question 204:

  When a branch location loses connectivity, which Cisco FlexConnect state rejects new users but allows existing users to function normally?

  A. Authentication-Down / Switch-Local
  B. Authentication-Down / Switching-Down
  C. Authentication-Local / Switch-Local
  D. Authentication-Central f Switch-Local
  A. Authentication-Down / Switch-Local

• Question 205:

  Refer to the exhibit.

  

  What is printed to the console when this script is run?

  A. a key-value pair in tuple type
  B. a key-value pair in list type
  C. a key-value pair in string type
  D. an error
  C. a key-value pair in string type

• Question 206:

  DRAG DROP

  Drag and drop the snippets onto the blanks within the code to construct a script that shows all logging that occurred on the appliance from Sunday until 9:00 p.m Thursday Not all options are used.

  Select and Place:

  

  

  ---

  event timer cron name Logging cron-entry "0 21 * * 0-4"

  action 2.0 cli command "enable"

  action 3.0 cli command "show logging | redirect ftp://cisco:[email protected]

  If you need to learn cron, check this site:

  https://crontab.guru

  0 21 * * 0-4 translates to: 'At 21:00 on every day-of-week from Sunday through Thursday.'

• Question 207:

  Which version of NetFlow does Cisco Threat Defense utilize to obtain visibility into the network?

  A. NBAR2
  B. IPFIX
  C. 8
  D. flexible
  D. flexible

  ---

  Explanation

  https://community.cisco.com/t5/security-knowledge-base/configuring-nsel-netflow-on-cisco-firepower-threat-defense-ftd/ta-p/3646300

• Question 208:

  What is a characteristic of para-virtualization?

  A. Para-virtualization guest servers are unaware of one another
  B. Para-virtualization allows direct access between the guest OS and the hypervisor
  C. Para-virtualization allows the host hardware to be directly accessed
  D. Para-virtualization lacks support for containers
  B. Para-virtualization allows direct access between the guest OS and the hypervisor

  ---

  Explanation

  Paravirtualization is virtualization in which the guest operating system (the one being virtualized) is aware that it is a guest and accordingly has drivers that, instead of issuing hardware commands, simply issues commands directly to the host operating system. This will include things such as memory management as well.

• Question 209:

  A network administrator is Implementing a routing configuration change and enables routing debugs to track routing behavior during the change. The logging output on the terminal is interrupting the command typing process.

  Which two actions can the network administrator take to minimize the possibility of typing commands incorrectly? (Choose two.)

  A. Configure the logging synchronous global configuration command
  B. Configure the logging delimiter feature
  C. Configure the logging synchronous command under the vty
  D. Press the TAB key to reprint the command in a new line
  E. increase the number of lines on the screen using the terminal length command
  C. Configure the logging synchronous command under the vty
  D. Press the TAB key to reprint the command in a new line

• Question 210:

  How do stratum levels relate to the distance from a time source?

  A. Stratum 0 devices are connected directly to an authoritative time source
  B. Stratum 1 devices are connected directly to an authoritative time source
  C. Stratum 15 devices are connected directly to an authoritative time source
  D. Stratum 15 devices are an authoritative time source
  B. Stratum 1 devices are connected directly to an authoritative time source