Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 281:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  OSPF is partially configured. Complete the OSPF configurations on the ABR routers to achieve the following goals:

  1. The route for R1's Loopback0 should not be advertised into Area 10. Use the partially configured prefix list to accomplish this task. Do not use the area 0 command under the router OSPF configuration section to achieve this task.

  2. The route for R2's Loopback0 should not be advertised out of Area 20. Use the partially configured prefix list to accomplish this task. Do not use the area 0 command under the router OSPF configuration section to achieve this task.

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  R2

  

  R3

  

• Question 282:

  When using a Cisco Catalyst 9800 Series WLC, which tag/profile can be applied to APs to change the mode to FlexConnect in a specific location?

  A. policy tag
  B. site tag
  C. AP join profile
  D. flex profile
  B. site tag

• Question 283:

  Which signal strength and noise values meet the minimum SNR for voice networks?

  A. signal strength -69 dBm, noise 94 dBm
  B. signal strength -67 dBm, noise 91 dBm
  C. signal strength -68 dBm, noise 89 dBm
  D. signal strength -66 dBm, noise 90 dBm
  A. signal strength -69 dBm, noise 94 dBm

• Question 284:

  How does Cisco Express Forwarding switching differ from process switching on Cisco devices?

  A. Cisco Express Forwarding switching uses adjacency tables built by the CDP protocol, and process switching uses the routing table.
  B. Cisco Express Forwarding switching uses dedicated hardware processors, and process switching uses the main processor.
  C. Cisco Express Forwarding swithing saves memory by storing adjacency tables in dedicated memory on the line cards, and process switching stores all tables in the main memory.
  D. Cisco Express Forwarding switching uses a proprietary protocol based on IS-IS for MAC address lookup, and process switching uses the MAC address table.
  C. Cisco Express Forwarding swithing saves memory by storing adjacency tables in dedicated memory on the line cards, and process switching stores all tables in the main memory.

• Question 285:

  Refer to the exhibit.

  Which set of commands on router r R1 Allow deterministic translation of private hosts PC1, PC2, and PC3 to addresses in the public space?

  

  A. RouterR1(config)#int f0/0RouterR1(config)#ip nat insideRouterR1(config)#exitRouterR1(config)#int f0/1RouterR1(config)#ip nat outsideRouterR1(config)#exitRouterR1(config)#access-list 1 10.10.10.0 0.0.0.255RouterR1(config)#ip nat inside source list 1 interface f0/1 overload
  B. RouterR1(config)#int f0/0RouterR1(config)#ip nat insideRouterR1(config)#exitRouterR1(config)#int f0/1RouterR1(config)#ip nat outsideRouterR1(config)#exitRouterR1(config)#access-list 1 10.10.10.0 0.0.0.255RouterR1(config)#ip nat pool POOL 155.1.1.101 155.1.1.103 netmask 255.255.255.0RouterR1(config)#ip nat inside source list 1 pool POOL
  C. RouterR1(config)#int f0/0RouterR1(config)#ip nat insideRouterR1(config)#exitRouterR1(config)#int f0/1RouterR1(config)#ip nat outsideRouterR1(config)#exitRouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103
  D. RouterR1(config)#int f0/0RouterR1(config)#ip nat outsideRouterR1(config)#exitRouterR1(config)#int f0/1RouterR1(config)#ip nat insideRouterR1(config)#exitRouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103
  C. RouterR1(config)#int f0/0RouterR1(config)#ip nat insideRouterR1(config)#exitRouterR1(config)#int f0/1RouterR1(config)#ip nat outsideRouterR1(config)#exitRouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103

• Question 286:

  Refer to the exhibit.

  

  Which type of antenna is shown on the radiation patterns?

  A. Dipole
  B. Yagi
  C. Patch
  D. Omnidirectional
  A. Dipole

• Question 287:

  Which algorithms are used to secure REST API from brute attacks and minimize the impact?

  A. SHA-512 and SHA-384
  B. MD5 algorithm-128 and SHA-384
  C. SHA-1, SHA-256, and SHA-512
  D. PBKDF2, BCrypt, and SCrypt
  D. PBKDF2, BCrypt, and SCrypt

  ---

  Explanation

  One of the best practices to secure REST APIs is using password hash. Passwords must always be hashed to protect the system (or minimize the damage) even if it is compromised in some hacking attempts. There are many such hashing algorithms which can prove really effective for password security e.g. PBKDF2, bcrypt and scrypt algorithms.

  Other ways to secure REST APIs are: Always use HTTPS, Never expose information on URLs (Usernames, passwords, session tokens, and API keys should not appear in the URL), Adding Timestamp in Request, Using OAuth, Input Parameter Validation.

  https://restfulapi.net/security-essentials/

  We should not use MD5 or any SHA (SHA-1, SHA-256, SHA-512...) algorithm to hash password as they are not totally secure. Note: A brute-force attack is an attempt to discover a password by systematically trying every possible combination of letters, numbers, and symbols until you discover the one correct combination that works.

• Question 288:

  An engineer must implement a configuration to allow a network administrator to connect to the console port of a router and authenticate over the network. Which command set should the engineer use?

  A. aaa new-modelaaa authentication login default enable
  B. aaa new-modelaaa authentication login console local
  C. aaa new-modelaaa authentication login console group radius
  D. aaa new-modelaaa authentication enable default
  C. aaa new-modelaaa authentication login console group radius

  ---

  Explanation

  network means Radius, TACACS+ So correct answer should be:

  aaa new-model aaa authentication login default group radius

  or

  aaa new-model aaa authentication login console group radius line con 0 aaa authentication login console

• Question 289:

  In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?

  A. management and data
  B. control and management
  C. control, and forwarding
  D. control and data
  B. control and management

  ---

  Explanation

  Read the "StackWise Virtual architecture" from the link below:

  https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9000/nb-06-cat-9k-stack-wp-cte-en.html

• Question 290:

  DRAG DROP

  Drag and drop the characteristics from the left onto the routing protocol types on the right.

  Select and Place: