Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 301:

  Which Python library is used to work with YANG data models via NETCONF?

  A. Postman
  B. requests
  C. nccllent
  D. cURL
  C. nccllent

  ---

  Explanation

  Python files usually start with "from ncclient import manager"

• Question 302:

  Refer to the exhibit

  

  Which single security feature is recommended to provide Network Access Control m the enterprise?

  A. MAB
  B. 802.1X
  C. WebAuth
  D. port security sticky MAC
  B. 802.1X

• Question 303:

  Refer to the exhibit.

  

  Which command when applied to the Atlanta router reduces type 3 LSA flooding into the backbone area and summarizes the inter-area routes on the Dallas router?

  A. Atlanta(config-route)#area 0 range 192.168.0.0 255.255.248.0
  B. Atlanta(config-route)#area 0 range 192.168.0.0 255.255.252.0
  C. Atlanta(config-route)#area 1 range 192.168.0.0 255.255.252.0
  D. Atlanta(config-route)#area 1 range 192.168.0.0 255.255.248.0
  C. Atlanta(config-route)#area 1 range 192.168.0.0 255.255.252.0

• Question 304:

  Refer to the exhibit.

  Which JSON syntax is derived from this data?

  

  A. {[{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': ['Running', 'Video games']}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': ['Napping', 'Reading']}]}
  B. {'Person': [{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': 'Running', 'Video games'}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': 'Napping', 'Reading'}]}
  C. {[{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': 'Running', 'Hobbies': 'Video games'}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': 'Napping', 'Reading'}]}
  D. {'Person': [{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': ['Running', 'Video games']}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': ['Napping', 'Reading']}]}
  D. {'Person': [{'First Name': 'Johnny', 'Last Name': 'Table', 'Hobbies': ['Running', 'Video games']}, {'First Name': 'Billy', 'Last Name': 'Smith', 'Hobbies': ['Napping', 'Reading']}]}

  ---

  Explanation

  {

  `Person':

  [

  {

  `First Name': `Johnny', `Last Name': `Table', `Hobbies': [`Running', `Video games']

  },

  {

  `First Name': `Billy',

  `Last Name': `Smith',

  `Hobbies': [`Napping', `Reading']

  }

  ]

  }

• Question 305:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  R22

  int tun0

  vrf forwarding FINANCE

  ip add 10.10.10.2 255.255.255.0

  tunn source e0/0

  tunnel dest 209.165.200.230

  no shut ip route vrf FINANCE 10.10.111.0 255.255.255.0 tunn0

  int et0/1

  vrf forwarding FINANCE

  ip address 10.22.22.1 255.255.255.252

  Verification:

  

  

• Question 306:

  Which Python code snippet must be added to the script to save the returned configuration as a JSON-formatted file?

  

  A. with open("ifaces.json", "w") as OutFile: OutFile.write(Response.text)
  B. with open("ifaces.json", "w") as OutFile: OutFile.write(Response.json())
  C. with open("ifaces.json", "w") as OutFile: JSONResponse = json.loads(Response.text) OutFile.write(JSONResponse)
  D. with open("ifaces.json", "w") as OutFile: OutFile.write(Response)
  B. with open("ifaces.json", "w") as OutFile: OutFile.write(Response.json())

  ---

  Explanation

  The json() method of the Response interface takes a Response stream and reads it to completion. It returns a promise which resolves with the result of parsing the body text as JSON.

• Question 307:

  How can an engineer prevent basic replay attacks from people who try to brute force a system via REST API?

  A. Add a timestamp to the request In the API header.
  B. Use a password hash
  C. Add OAuth to the request in the API header.
  D. UseHTTPS
  A. Add a timestamp to the request In the API header.

  ---

  Explanation

  References:

  https://security.stackexchange.com/questions/221708/golang-rest-api-security-checks

• Question 308:

  Topology:

  RouterA<>>RouterB<<>>RouterC

  | |

  |____________________________|

  (GRE Tunnel: R-A to R-C)

  Router A send packet to Router C with MTU 1500 using GRE Tunnel.

  What happens to the packet ?

  A. Router-C will drop the packet
  B. Router-C will de-fragment the packet
  C. Router-C will receive the packet
  D. Router-B will forward the packet
  C. Router-C will receive the packet

• Question 309:

  Refer to the exhibit.

  

  An engineer is trying to add an encrypted user password that should not be visible in the router configuration.

  Which two configuration commands resolve the issue? (Choose two)

  A. service password-encryption
  B. username Admin password 5 Cisco@123
  C. no service password-encryption
  D. username Admin password Cisco@123
  E. password encryption aes
  F. username Admin secret Cisco@123
  A. service password-encryption
  F. username Admin secret Cisco@123

  ---

  Explanation

  We can use the "service password-encryption" to encrypt all current and future passwords. Or we can use the "secret" keyword to encrypt the password with MD5 (although MD5 is not secured nowadays).

  Note: The command "service password-encryption" enables the AES password encryption feature (type 6) but we have to converts existing plain or weakly encrypted passwords to type-6 encrypted passwords with the "encryption re-encrypt obfuscated" command.

  You can enable the AES password encryption feature without a primary key, but encryption starts only when a primary key is present in the system with the command key config-key password-encrypt super-secret-password.

  References:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3400s/sw/93x/security/configuration/guide/Cisco-n3400-nx-ossecurity-configuration-guide-93x/m-configuring-password-encryption-922.pdf

• Question 310:

  Refer to the exhibit.

  

  Clients report that they cannot connect to this SSID using the provided PSK.

  Which action will resolve this issue?

  A. Apply the correct interface to this WLAN.
  B. Apply the changes this SSID.
  C. Select the PSK under authentication key management.
  D. Define the correct Radio Policy.
  C. Select the PSK under authentication key management.

  ---

  Explanation

  As it stands it is configured for radius auth and must be changed to PSK.