Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 221:

  An engineer is configuring RADIUS-Based Authentication with EAP. MS-CHAPv2 is configured on a client device. Which outer method protocol must be configured on the ISE to support this authentication type?

  A. EAP-TLS
  B. EAP-FAST
  C. LDAP
  D. PEAP
  D. PEAP

• Question 222:

  Which version of NetFlow does Cisco Threat Defense utilize to obtain visibility into the network?

  A. NBAR2
  B. IPFIX
  C. 8
  D. flexible
  D. flexible

  ---

  Explanation

  https://community.cisco.com/t5/security-knowledge-base/configuring-nsel-netflow-on-cisco-firepower-threat-defense-ftd/ta-p/3646300

• Question 223:

  Refer to the exhibit. An engineer must configure an ERSPAN session with the remote end of the session 10.10.0.1. Which commands must be added to complete the configuration?

  

  A. Device(config)# monitor session 1 type erspan-sourceDevice(config-mon-erspan-src)# destinationDevice(config-mon-erspan-src-dst)#no origin ip address 10.10.0.1Device(config-mon-erspan-src-dst)#ip address 10.10.0.1
  B. Device(config)# monitor session 1 type erspan-destinationDevice(config-mon-erspan-src)# sourceDevice(config-mon-erspan-src-dst)#origin ip address 10.1.0.1
  C. Device(config)# monitor session 1 type erspan-sourceDevice(config-mon-erspan-src)# destinationDevice(config-mon-erspan-src-dst)#no origin ip address 10.10.0.1Device(config-mon-erspan-src-dst)#ip destination address 10.10.0.1
  D. Device(config)# monitor session 1 type erspan-sourceDevice(config-mon-erspan-src)# destinationDevice(config-mon-erspan-src-dst)#no vrf 1
  A. Device(config)# monitor session 1 type erspan-sourceDevice(config-mon-erspan-src)# destinationDevice(config-mon-erspan-src-dst)#no origin ip address 10.10.0.1Device(config-mon-erspan-src-dst)#ip address 10.10.0.1

  ---

  Explanation

  For the source session, we have to configure:

  + Unique session ID.

  + List of source interfaces or source VLANs that you want to monitor. Not all platforms support every possible source.

  + What traffic we want to capture: tx, rx or both.

  + Destination IP address for the GRE tunnel.

  + Origin IP address which is used as the source for the GRE tunnel.

  + Unique ERSPAN flow ID.

  + Optional: you can specify attributes like the ToS (Type of Service), TTL, etc.

  https://networklessons.com/cisco/ccie-routing-switching-written/erspanThe configuration in the exhibit is missing destination IP adress for the GRE tunnel so we have to add it with the "ip address 10.10.0.1".

• Question 224:

  Refer to the exhibit. R1 is able to ping the R3 fa0/1 interface. Why do the extended pings fail?

  

  A. The maximum packet size accepted by the command is 1476 bytes.
  B. R3 is missing a return route to 10.99.69.0/30
  C. R2 and R3 do not have an OSPF adjacency
  D. The DF bit has been set
  D. The DF bit has been set

  ---

  Explanation

  If the DF bit is set, routers cannot fragment packets. From the output below, we learn that the maximum MTU of R2 is 1492 bytes while we sent ping with 1500 bytes.

  Therefore these ICMP packets were dropped.

  Note: Record option displays the address(es) of the hops (up to nine) the packet goes through.

• Question 225:

  An engineer must use flexible NetFlow on a group of switches. To prevent overloading of the flow collector, if the flow is idle for 20 seconds, the flow sample should be exported.

  Which command set should be applied?

  A. flow record recordflowexporter flowexportrecord recordflowcache timeout active 120cache timeout inactive 20cache type immediate
  B. flow monitor monitorflowexporter flowexportrecord recordflowcache timeout active 120cache timeout inactive 20cache type immediate
  C. flow monitor monitorflowexporter recordflowcache timeout active 120cache timeout inactive 20cache type permanent
  D. flow record recordflowmatch ipv6 destination ip-addressmatch ipv6 source ip-addressmatch ipv6 protocol-type viewmatch interface inputmatch interface outputmatch transport destination-portcollect counter bytes long
  B. flow monitor monitorflowexporter flowexportrecord recordflowcache timeout active 120cache timeout inactive 20cache type immediate

• Question 226:

  How are control traffic, client authentication and data traffic handled in a mobility express environment?

  A. Control traffic and client authentication is handled centrally by the controller. Data traffic is switched centrally by the controller.
  B. Control traffic and client authentication is handled centrally by the controller. Data traffic is switched locally by the access points.
  C. Control traffic and client authentication is handled locally by each access point. Data traffic is switched locally by the access points.
  D. Control traffic and client authentication is handled locally by each access point. Data traffic is switched centrally by the controller.
  B. Control traffic and client authentication is handled centrally by the controller. Data traffic is switched locally by the access points.

• Question 227:

  Refer to the exhibit.

  

  An engineer configures HSRP and enters the show standby command. Which two facts about the network environment are derived from the output? (Choose two.)

  A. The local device has a higher priority selling than the active router
  B. The virtual IP address of the HSRP group is 10.1.1.1.
  C. If the local device fails to receive a hello from the active router for more than 5 seconds, it becomes the active router.
  D. The hello and hold timers are set to custom values.
  E. If a router with a higher IP address and same HSRP priority as the active router becomes available, that router becomes the new active router 5 seconds later.
  B. The virtual IP address of the HSRP group is 10.1.1.1.
  E. If a router with a higher IP address and same HSRP priority as the active router becomes available, that router becomes the new active router 5 seconds later.

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/ip/hot-standby-router-protocol-hsrp/9281-3.html#:~:text=The%20priority%20field,default%20of%20100.

• Question 228:

  What is a characteristics of a type 1 hypervisor?

  A. It runs on top of the host operating system.
  B. It is preferred for supporting nonproduction workloads.
  C. It has greater latency than a Type 2 hypervisor.
  D. It runs on top of bare metal servers.
  D. It runs on top of bare metal servers.

• Question 229:

  Refer to the exhibit. An engineer must assign an IP address of 192.168.1.1/24 to the GigabitEthemet1 interface. Which two commands must be added to the existing configuration to accomplish this task? (Choose two)

  

  

  A. Router(config-vrf)#address-family ipv6
  B. Router(config-if)#ip address 192.168.1.1 255.255.255.0
  C. Router(config-vrf)Sip address 192.168.1.1 255.255.255.0
  D. Router(config-if)=address-family ipv4
  E. Router(config-vrf)#address-family ipv4
  B. Router(config-if)#ip address 192.168.1.1 255.255.255.0
  E. Router(config-vrf)#address-family ipv4

  ---

  Explanation

  Router#show run vrf STAFF Building configuration...

  Current configuration : 237 bytes vrf definition STAFF !

  address-family ipv4 exit-address-family !

  !

  interface GigabitEthernet0/1 vrf forwarding STAFF ip address 192.168.1.1 255.255.255.0 standby version 2 shutdown duplex auto speed auto media-type rj45 !

  end

• Question 230:

  Refer to the exhibit.

  

  An engineer constructs an EEM applet to prevent anyone from entering configuration mode on a switch. Which snippet is required to complete the EEM applet?

  A. sync yes skip yes
  B. sync no skip yes
  C. sync no skip no
  D. sync yes skip no
  B. sync no skip yes