Cisco CCNP 350-401 Questions & Answers

• Question 21:

  What ate two characteristics of Cisco SD-Access elements? (Choose two )

  A. The border node is required for communication between fabric and nonfabric devices.

  B. Fabric endpoints are connected directly to the border node

  C. Traffic within the fabric always goes through the control plane node

  D. The control plane node has the full RLOC-to-EID mapping database

  E. The border node has the full RLOC-to-EID mapping database

  Correct Answer: AD

• Question 22:

  What is the data policy in a Cisco SD-WAN deployment?

  A. list of ordered statements that define node configurations and authentication used within the SDWAN overlay

  B. Set of statements that defines how data is forwarded based on IP packet information and specific VPNs

  C. detailed database mapping several kinds of addresses with their corresponding location

  D. group of services tested to guarantee devices and links liveliness within the SD-WAN overlay

  Correct Answer: B

  The Cisco SD-WAN architecture implements two types of data policy:

  Centralized data policy controls the flow of data traffic based on the source and destination addresses and ports and DSCP fields in the packet's IP header (referred to as a 5-tuple), and based on network segmentation and VPN membership. These types of data policy are provisioned centrally, on the Cisco vSmart controller, and they affect traffic flow across the entire network.

  Localized data policy controls the flow of data traffic into and out of interfaces and interface queues on a Cisco vEdge device. This type of data policy is provisioned locally using access lists. It allows you to classify traffic and map different classes to different queues. It also allows you to mirror traffic and to police the rate at which data traffic is transmitted and received.

• Question 23:

  Based on the output below, which Python code shows the value of the "upTime" key?

  

  A. json_data = response.json() print(json_data['response'][0]['upTime'])

  B. json_data = response.json()

  print(json_data[response][0][upTime])

  C. json_data = json.loads(response.text) print(json_data['response']['family']['upTime'])

  D. json_data = response.json() print(json_data['response'][family]['upTime'])

  Correct Answer: A

  because the question is asked about 'UpTime', not 'family', both of them are object within array 'response' ,i.e. [ {"family:xxx", "UpTime:xxx"}...

• Question 24:

  Refer to the exhibit. An engineer must assign an IP address of 192.168.1.1/24 to the GigabitEthemet1 interface. Which two commands must be added to the existing configuration to accomplish this task? (Choose two)

  

  A. Router(config-vrf)#address-family ipv6

  B. Router(config-if)#ip address 192.168.1.1 255.255.255.0

  C. Router(config-vrf)Sip address 192.168.1.1 255.255.255.0

  D. Router(config-if)=address-family ipv4

  E. Router(config-vrf)#address-family ipv4

  Correct Answer: BE

  Router#show run vrf STAFF Building configuration...

  Current configuration : 237 bytes vrf definition STAFF ! address-family ipv4 exit-address-family ! ! interface GigabitEthernet0/1 vrf forwarding STAFF ip address 192.168.1.1 255.255.255.0 standby version 2 shutdown duplex auto speed auto media-type rj45 ! end

• Question 25:

  Refer to the exhibit. Which JSON syntax is derived from this data?

  

  A. {[{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': ['Running', 'Video games']}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': ['Napping', 'Reading']}]}

  B. {'Person': [{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': 'Running', 'Video games'}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': 'Napping', 'Reading'}]}

  C. {[{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': 'Running', 'Hobbies': 'Video games'}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': 'Napping', 'Reading'}]}

  D. {'Person': [{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': ['Running', 'Video games']}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': ['Napping', 'Reading']}]}

  Correct Answer: D

  {

  `Person':

  [

  {

  `First Name': `Johnny',

  `Last Name': `Table',

  `Hobbies': [`Running', `Video games']

  },

  {

  `First Name': `Billy',

  `Last Name': `Smith',

  `Hobbies': [`Napping', `Reading']

  }

  ]

  }

• Question 26:

  Refer to the exhibit. Which two facts does the device output confirm? (Choose two)

  

  A. The device is using the default HSRP hello timer

  B. The standby device is configured with the default HSRP priority

  C. The device's HSRP group uses the virtual IP address 10.0.3.242.

  D. The device is configured with the default HSRP priority

  E. The device sends unicast messages to its peers

  Correct Answer: AD

  hsrp uses multicast: 224.0.0.2 v1, 224.0.0.102 v2, 224.0.0.18 vrrp. default hsrp hello time is 3 sec, hold timer is 10 sec

• Question 27:

  Refer to the exhibit.

  

  Cisco DNA Center has obtained the username of the client and the multiple devices that the client is using on the network. How is Cisco DNA Center getting these context details?

  A. The administrator had to assign the username to the IP address manually in the user database tool on Cisco DNA Center.

  B. Those details are provided to Cisco DNA Center by the Identity Services Engine

  C. Cisco DNA Center pulled those details directly from the edge node where the user connected.

  D. User entered those details in the Assurance app available on iOS and Android devices

  Correct Answer: B

• Question 28:

  Refer to the exhibit. A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec profiles. Which two configuration changes accomplish this? (Choose two).

  

  A. Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode ipsec ipv4.

  B. Create an IPsec profile, associate the transform-set. and apply the profile to the tunnel interface.

  C. Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24.

  D. Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL

  E. Create an IPsec profile, associate the transform-set ACL. and apply the profile to the tunnel interface

  Correct Answer: BD

• Question 29:

  Refer to the exhibit. Communication between London and New York is down Which command set must be applied to resolve this issue?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  https://learningnetwork.cisco.com/s/question/0D53i00000Ksyty/tostastns-tottattnt

• Question 30:

  Refer to the exhibit.

  

  All switches are configured with the default port priority value. Which two commands ensure that traffic from PC1 is forwarded over Gi1/3 trunk port between DWS1 and DSW2? (Choose two)

  A. DSW2(config-if)#spanning-tree port-priority 128

  B. DSW2(config-if)#spanning-tree port-priority 16

  C. DSW2(config-if)#interface gi1/3

  D. DSW1(config-if)#interface gi1/3

  E. DWS1(config-if)#spanning-tree port-priority 0

  Correct Answer: BC