Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 301:

  Which two features are available only in next-generation firewalls? (Choose two.)

  A. virtual private network
  B. deep packet inspection
  C. stateful inspection
  D. application awareness
  E. packet filtering
  B. deep packet inspection
  D. application awareness

• Question 302:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  BGP connectivity exists between Headquarters and both remote sites, however Remote Site 1 cannot communicate with Remote Site 2. Configure BGP according to the topology to achieve these goals:

  1. Configure R2 under the BGP process to provide reachability between Remote Site 1 and Remote Site 2. No configuration changes are permitted on R1 or R3.

  2. Ensure that the /32 networks at Remote Site 1 and Remote Site 2 can ping each other.

  

  A. See the solution below in Explanation
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation

  ---

  Explanation

  R2

  Router BGP 456

  Network 10.0.0.0 255.255.255.0

  Network 192.168.1.0 255.255.255.0

  Network 2.2.2.2 255.255.255.255

  Neighbor 10.0.0.1 remote-as 123

  Neighbor 192.168.1.3 remote-as 123

  Neighbor 10.0.0.1 as-override

  Neighbor 192.168.1.3 as-override

• Question 303:

  What is difference between TCAM and the MAC address table?

  A. TCAM is used to make Lalyer 2 forwarding decisions CAM is used to build routing tables.
  B. The MAC address table supports partial matches .TCAM requires an exact match.
  C. The MAC address table is contained in CAM.ACL and QoS information is stored in TCAM.
  D. Router prefix lookups happens in CAM.MAC address table lookups happen in TCAM.
  D. Router prefix lookups happens in CAM.MAC address table lookups happen in TCAM.

• Question 304:

  What happens to the signal strength of an RF signal due to wave spreading?

  A. The signal strength of the RF signal will fall off equally near the transmitter and also farther away
  B. The signal strength of the RF signal will fall off quickly near the transmitter but more slowly farther away
  C. The signal strength of the RF signal will fall off slowly near the receiver and more quickly farther away
  D. The signal strength of the RF signal will fall off slowly near the transmitter but more quickly farther away
  B. The signal strength of the RF signal will fall off quickly near the transmitter but more slowly farther away

• Question 305:

  An engineer must protect the password for the VTY lines against over-the-shoulder attacks. Which configuration should be applied?

  A. service password-encryption
  B. username netadmin secret 9 $9$vFpMf8elb4RVV8$seZ/bDA
  C. username netadmin secret 7$1$42J36k33008Pyh4QzwXyZ4
  D. line vty 0 15 p3ssword XD822j
  A. service password-encryption

  ---

  Explanation

  cisco(config)#username test privilege 15 password test777 cisco(config)#do s running-config | include user username test privilege 15 password 0 test777

  cisco(config)#service password-encryption cisco(config)#do s running-config | include user username test privilege 15 password 7 044F0E151B761B19 cisco(config)# cisco(config)#do wr Building configuration...

  [OK] cisco(config)#

• Question 306:

  Refer to the exhibit.

  

  POSTMAN is showing an attempt to retrieve network device information from Cisco DNA Center API. What is the issue?

  A. The URI string is incorrect
  B. The token has expired.
  C. Authentication has failed.
  D. The JSON payload contains the incorrect UUID
  A. The URI string is incorrect

  ---

  Explanation

  With 's' GET https://DNAC:Port//dna/intent/api/v1/network-devices

  { "response": { "errorCode": "Bad request", "message": "Invalid input request", "detail": "s is not a valid UUID of device"

  }, "version": "1.0"

  }

  without 's' GET https://DNAC:Port//dna/intent/api/v1/network-device

  { "response": [

  { "type": "Cisco 3504 Wireless LAN Controller", "description": "Cisco Controller Wireless Version:8.5.140.0", "serialNumber": "FOL25040021",

• Question 307:

  What is the recommended MTU size for a Cisco SD-Access Fabric?

  A. 1500
  B. 9100
  C. 4464
  D. 17914
  B. 9100

  ---

  Explanation

  VXLAN adds 50 bytes to the original packet. The common denominator and recommended MTU value available on devices operating in a fabric role is 9100. Network should have a minimum starting MTU of at least 1550 bytes to support the fabric overlay. MTU values between 1550 and 9100 are supported along with MTU values larger than 9100 though there may be additional configuration and limitations based on the original packet size. MTU 9100 is provisioned as part of LAN Automation. Devices in the same routing domain and Layer 2 domain should be configured with a consistent MTU size to support routing protocol adjacencies and packet forwarding without fragmentation.

• Question 308:

  Refer to the exhibit.

  

  Hosts PC1 PC2 and PC3 must access resources on Serve 1. An engineer configures NAT on Router R1 1e enable the communication and enters the show command to verify operation.

  Which IP address is used by the hosts when they communicate globally to Server1?

  A. 155.1.1.1
  B. randorm addresses in the 155.1.1.0/24 range
  C. their own address in the 10.10.10.0/24 rance
  D. 155.1.1.5
  A. 155.1.1.1

  ---

  Explanation

  from inside host perspective the global address is 15.1.1.1

• Question 309:

  Which resource must the hypervisor make available to the virtual machines?

  A. bandwidth
  B. IP address
  C. processor
  D. secure access
  C. processor

• Question 310:

  Refer to the exhibit.

  

  A network engineer is troubleshooting an issue with the file server based on reports of slow file transmissions. Which two commands or command sets are required to switch SW1 to analyze the traffic from the file server with a packet analyzer? (Choose two.)

  A. SW1#show monitor
  B. SW1(config)#monitor session 1 source interface gigabitethernet0/3SW1(config)#monitor session 1 destination interface gigabitethernet0/1 encapsulation replicate
  C. SW1#show ip route
  D. SW1#show vlan
  E. SW1(config)#monitor session 1 source interface gigabitethernet0/1SW1(config)#monitor session 1 destination interface gigabitethernet0/3 encapsulation replicate
  A. SW1#show monitor
  B. SW1(config)#monitor session 1 source interface gigabitethernet0/3SW1(config)#monitor session 1 destination interface gigabitethernet0/1 encapsulation replicate