Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 211:

  Select the devices from the below options that can be fart of Cisco SDWAN Solution. (Choose two.)

  A. ISR 2900
  B. ASR 1000
  C. IR8300
  D. FTD 1120
  E. ASR 9000
  B. ASR 1000
  C. IR8300

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/release/compatibility/sdwan-device-compatibility.html#device-compat-ir8300rugged

• Question 212:

  What is difference between TCAM and the MAC address table?

  A. TCAM is used to make Lalyer 2 forwarding decisions CAM is used to build routing tables.
  B. The MAC address table supports partial matches .TCAM requires an exact match.
  C. The MAC address table is contained in CAM.ACL and QoS information is stored in TCAM.
  D. Router prefix lookups happens in CAM.MAC address table lookups happen in TCAM.
  D. Router prefix lookups happens in CAM.MAC address table lookups happen in TCAM.

• Question 213:

  What is stateful switchover?

  A. mechanism used to prevent routing protocol loops during an RP switchover
  B. mechanism to take control from a failed RP while maintaining connectivity
  C. First Hop Redundancy Protocol for host gateway connectivity
  D. cluster protocol used to facilitate switch faitover
  B. mechanism to take control from a failed RP while maintaining connectivity

• Question 214:

  Refer to the exhibit.

  

  What is the purpose of the configuration?

  A. The router will function in NTP in client mode.
  B. The router will use 172.16.1.1 as the source for NTP packets.
  C. The router is allowed to receive NTP broadcast packets.
  D. The router will function as an authoritative NTP server.
  D. The router will function as an authoritative NTP server.

• Question 215:

  SIMULATION

  An engineer is deploying a new access-layer switch in an enterprise campus network.

  The engineer connects the new switch to an existing distribution switch using interface GigabitEthernet1/0/1. Shortly after the connection is established, the interface transitions to an err-disabled state and traffic forwarding stops.

  The engineer verifies that Spanning Tree Protocol (STP) is operating correctly and then checks the interface configuration. Further investigation reveals that BPDU Guard is enabled on the interface. Because the port is now connected to another switch and receiving BPDUs, the interface has been placed into the err-disabled state to prevent a potential Layer 2 loop.

  How would the engineer restore connectivity and correctly configure the interface for switch-to-switch communication?

  A. See the explanation below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the explanation below.

  ---

  Explanation

  Switch(config)# interface x/x

  Switch(config-if)# no spanning-tree bpduguard enable

  Switch(config-if)# shut

  Switch(config-if)# no shut

• Question 216:

  What is the recommended minimum SNR for data applications on wireless networks?

  A. 15
  B. 20
  C. 25
  D. 10
  B. 20

  ---

  Explanation

  https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Signal-to-Noise_Ratio_(SNR)_and_Wireless_Signal_Strength#:~:text=Generally%2C%20a%20signal%20with%20an,networks%20that%20use%20voice%20applications.

• Question 217:

  What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?

  A. real-time threat management to stop DDoS attacks to the core and access networks
  B. real-time awareness of users, devices, and traffic on the network
  C. malware control
  D. dynamic threat control for web traffic
  B. real-time awareness of users, devices, and traffic on the network

  ---

  Explanation

  "Cisco Stealthwatch collects and analyzes massive amounts of data to give even the largest, most dynamic networks comprehensive internal visibility and protection. It helps security operations teams gain real-time situational awareness of all users, devices, and traffic on the extended network so they can quickly and effectively respond to threats" Page 1

  https://media.zones.com/images/pdf/cisco-stealthwatch-solution-overview.pdf

• Question 218:

  Which two statements about IP SLA are true? (Choose two)

  A. It uses NetFlow for passive traffic monitoring
  B. It can measure MOS
  C. The IP SLA responder is a component in the source Cisco device
  D. It is Layer 2 transport-independent correct
  E. It uses active traffic monitoring correct
  F. SNMP access is not supported
  D. It is Layer 2 transport-independent correct
  E. It uses active traffic monitoring correct

  ---

  Explanation

  IP SLAs allows Cisco customers to analyze IP service levels for IP applications and services, to increase productivity, to lower operational costs, and to reduce the frequency of network outages. IP SLAs uses active traffic monitoringhe generation of traffic in a continuous, reliable, and predictable manneror measuring network performance. Being Layer-2 transport independent, IP SLAs can be configured end-to-end over disparate networks to best reflect the metrics that an end-user is likely to experience.

  References:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsla/configuration/15-mt/sla-15-mt-book/sla_overview.html

• Question 219:

  Refer to the exhibit.

  

  A network administrator notices these console messages from host 10.11.110.12 originating from interface E1/0. The administrator considers this an unauthorized attempt to access SNMP on R1.

  Which action prevents the attempts to reach R1 E1/0?

  A. Configure IOS management plane protection using ACL 90 on interface E1/0.
  B. Configure IOS control plane protection using ACL 90 on interface E1/0.
  C. Add a permit statement including the host 10.11.110.12 into ACL 90.
  D. Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12.
  D. Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12.

• Question 220:

  

  Refer to the exhibit.

  Which command set completes the ERSPAN session configuration?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  Explanation

  the source IP of erspan-destination is local IP(or erspan-source destination IP) reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/system_mgmt/503_u2_2/Cisco_Nexus_3000_system_mgmt_config_gd_503_U2_2_chapter14.pdf