Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 261:

  

  Refer to the exhibit. The DevOps team noticed missing NetFlow data during peak utilization times for remote branches. Which configuration allows for this issue to be minimized or resolved?

  A. Configure NetFlow on the in and outbound directions.
  B. Change the transport type from UDP to TCP.
  C. Configure long byte counters when specifying a flow record.
  D. Change the flow monitor to IPv6 from IPv4.
  A. Configure NetFlow on the in and outbound directions.

• Question 262:

  How is CAPWAP data traffic encapsulated when running an Over the Top WLAN in a Cisco SD-Access wireless environment?

  A. LISP
  B. VXLAN
  C. GRE
  D. IPsec
  B. VXLAN

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/deploy-guide/cisco-dna-center-sd-access-wl-dg.pdf

• Question 263:

  In a Cisco SD-Access wireless architecture, which device manages endpoint ID to Edge Node bindings?

  A. fabric control plane node
  B. fabric wireless controller
  C. fabric border node
  D. fabric edge node.
  A. fabric control plane node

  ---

  Explanation

  SD-Access Wireless Architecture Control Plane Node Closer Look Fabric Control-Plane Node is based on a LISP Map Server / Resolver Runs the LISP Endpoint ID Database to provide overlay reachability information + A simple Host Database, that tracks Endpoint ID to Edge Node bindings (RLOCs) + Host Database supports multiple types of Endpoint ID (EID), such as IPv4 /32, IPv6 /128* or MAC/48 + Receives prefix registrations from Edge Nodes for wired clients, and from Fabric mode WLCs for wireless clients + Resolves lookup requests from FE to locate Endpoints + Updates Fabric Edge nodes, Border nodes with wireless client mobility and RLOC information

  https://www.ciscolive.com/c/dam/r/ciscolive/latam/docs/2018/pdf/BRKEWN-2020.pdf

• Question 264:

  Refer to the exhibit

  

  Which two commands are required on route R1 to block FTP and allow all other traffic from the Branch 2 network (Choose two)

  A. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data access-list 101 permit ip any any
  B. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data access-list 101 permit ip any any
  C. interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.252 ip access-group 101 out
  D. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp access-list 101 permit ip any any
  E. interface GigabitEthernet0/0 ip address 10.0.101.1 255.255.255.252 ip access-group 101 in
  A. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data access-list 101 permit ip any any
  C. interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.252 ip access-group 101 out

  ---

  Explanation

  A included BandD ACL C is correct, block Branch 2 ftp traffic exit the R1 to 10.0.101.0/24.

  E is setting on WAN port to block ftp traffic in R1

• Question 265:

  Refer to the exhibit. Which command set changes the neighbor state from Idle (Admin) to Active?

  

  A. R1(config)#router bgp 65002R1(config-router)#neighbor 192.168.50.2 activate
  B. R1(config)#router bgp 65001R1(config-router)#neighbor 192.168.50.2 activate
  C. R1(config)#router bgp 65001R1(config-router)#no neighbor 192.168.50.2 shutdown
  D. R1(config)#router bgp 65001R1(config-router)#neighbor 192.168.50.2 remote-as 65001
  C. R1(config)#router bgp 65001R1(config-router)#no neighbor 192.168.50.2 shutdown

  ---

  Explanation

  Idle (Admin) means that the BGP session is in shutdown state, so we have to turn it on with the "no neighbor 192.168.50.2 shutdown" command

• Question 266:

  Which protocol does Cisco SD-WAN use to protect control plane communication?

  A. STUN
  B. OMP
  C. IPsec
  D. DTLS
  D. DTLS

• Question 267:

  Which resource must a hypervisor make available to the virtual machines?

  A. bandwidth
  B. IP address
  C. storage
  D. secure access
  C. storage

• Question 268:

  Refer to the exhibit.

  

  Router BRDR-1 is configured to receive the 0.0.0.0/0 and 172.17.1.0/24 network via BGP and advertise them into OSPF are 0. An engineer has noticed that the OSPF domain is receiving only the 172.17.1.0/24 route and default route 0.0.0.0/0 is still missing. Which configurating must engineer apply to resolve the problem?

  A. router ospf 1redistribute bgp 65001 metric 100 route-policy BGP-TO-OSPFend
  B. router ospf 1default-information originateend
  C. router ospf 1default-metric 100end
  D. router ospf 1default-information originate alwaysend
  B. router ospf 1default-information originateend

• Question 269:

  DRAG DROP

  Drag and drop the description of the VSS technology from the left to the right. NOT all options are used.

  Select and Place:

  

  

• Question 270:

  Refer to the exhibit.

  

  Which EEM script generates a critical-level syslog message and saves a copy of the running configuration to the bootflash when an administrator saves the running configuration to the startup configuration?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B