Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 341:

  An engineer applies this EEM applet to a router:

  

  What does the applet accomplish?

  A. It generates a syslog message every 600 seconds on the status of the specified MAC address.
  B. It checks the MAC address table every 600 seconds to see if the specified address has been learned.
  C. It compares syslog output to the MAC address table every 600 seconds and generates an event when there is a match.
  D. It compares syslog output to the MAC address table every 600 seconds and generates an event when no match is found.
  A. It generates a syslog message every 600 seconds on the status of the specified MAC address.

• Question 342:

  A company's office has publicly accessible meeting rooms equipped with network ports. A recent audit revealed that visitors were able to access the corporate network by plugging personal laptops into open network ports.

  Which of the following should the company implement to prevent this in the future?

  A. URL filters
  B. VPN
  C. ACLs
  D. NAC
  D. NAC

• Question 343:

  A network engineer must configure a router to send logging messages to a syslog server based on these requirements:

  1. uses syslog IP address: 10.10.10.1

  2. uses a reliable protocol

  3. must not use any well-known TCP/UDP ports

  Which configuration must be used?

  A. logging host 10.10.10.1 transport tcp port 1024
  B. logging origin-id 10.10.10.1
  C. logging host 10.10.10.1 transport udp port 1023
  D. logging host 10.10.10.1 transport udp port 1024
  A. logging host 10.10.10.1 transport tcp port 1024

• Question 344:

  Refer to the following two images regarding QoS Traffic Shaping and Traffic Policing: Image A:

  

  Image B:

  

  Based on the images, which of the following are true? (Choose two.)

  A. Image A depicts the result of Traffic Shaping
  B. Image A depicts the result of Traffic Policing
  C. Image B depicts the result of Traffic Shaping
  D. Image B depicts the result of Traffic Policing
  B. Image A depicts the result of Traffic Policing
  C. Image B depicts the result of Traffic Shaping

  ---

  Explanation

  References:

  https://www.cisco.com/c/it_it/support/docs/quality-of-service-qos/qos-policing/19645-policevsshape.html

• Question 345:

  Refer to the exhibit.

  

  The trunk between Gig1/0/1 of switch SW2 and Gig1/0/1 of switch SW1 is not operational.

  Which action resolves this issue?

  A. Configure both interfaces in dynamic auto DTP mode and ensure that the switches are in the same VTP domain
  B. Configure both interfaces in dynamic desirable DTP mode and ensure that the switches are in the same VTP domain
  C. Configure both interfaces in nonegotiate and ensure that the switches are in the different VTP domain
  D. Configure both interfaces in dynamic auto DTP mode and ensure that the switches are in the different VTP domain
  B. Configure both interfaces in dynamic desirable DTP mode and ensure that the switches are in the same VTP domain

• Question 346:

  DRAG DROP

  Drag and drop the QoS mechanisms from the left onto the deployment models on the right.

  Select and Place:

  

  

• Question 347:

  Which security mechanism is offered on a next-generation firewall but not on a traditional firewall?

  A. Integrated IPS
  B. Stateful firewall policies
  C. SSL VPN
  D. NAT
  A. Integrated IPS

  ---

  Explanation

  The correct answer is Option A. Integrated IPS.

  A traditional firewall commonly provides:

  Stateful inspection

  Basic access control

  NAT

  VPN services

  A next-generation firewall adds advanced security functions, including:

  Integrated Intrusion Prevention System Application awareness and control Advanced malware protection Deeper traffic inspection

  An integrated IPS is a defining feature of a next-generation firewall. It allows the firewall to inspect traffic for threats and block attacks in real time.

  Option B is incorrect because stateful firewall policies are a standard traditional firewall feature.

  Option C is incorrect because SSL VPN can exist on both traditional and next-generation firewalls.

  Option D is incorrect because NAT is a basic firewall and network feature, not a next-generation firewall feature.

• Question 348:

  A client device roams between access points located on defferent floors in an atrium. The access points joined to the same controller and configuration in local mode. The access points are in different IP addresses, but the client VLAN in the group same.

  What type of roam occurs?

  A. inter-controller
  B. inter-subnet
  C. intra-VLAN
  D. intra-controller
  D. intra-controller

  ---

  Explanation

  Mobility, or roaming, is a wireless LAN client's ability to maintain its association seamlessly from one access point to another securely and with as little latency as possible. Three popular types of client roaming are:

  Intra-Controller Roaming: Each controller supports same-controller client roaming across access points managed by the same controller. This roaming is transparent to the client as the session is sustained, and the client continues using the same DHCP-assigned or client-assigned IP address.

  Inter-Controller Roaming: Multiple-controller deployments support client roaming across access points managed by controllers in the same mobility group and on the same subnet. This roaming is also transparent to the client because the session is sustained and a tunnel between controllers allows the client to continue using the same DHCP-or client-assigned IP address as long as the session remains active.

  Inter-Subnet Roaming: Multiple-controller deployments support client roaming across access points managed by controllers in the same mobility group on different subnets. This roaming is transparent to the client because the session is sustained and a tunnel between the controllers allows the client to continue using the same DHCP-assigned or client-assigned IP address as long as the session remains active.

  References:

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01100.htmlInthreetypesofclientroamingabove,onlywithInter-SubnetRoamingthecontrollersareindifferentsubnets.

• Question 349:

  When designing a medium-sized network using the traditional hierarchical design model, which action results in an optimal solution with regard to modularity and hardware cost optimization?

  A. Implement a high-capacity collapsed core, distribution, and access layer.
  B. Implement one core switch, one distribution switch, and multiple access switches.
  C. Implement a collapsed core/distribution layer and a separate access layer.
  D. Implement separate core, distribution, and access layers.
  C. Implement a collapsed core/distribution layer and a separate access layer.

  ---

  Explanation

  The correct answer is Option C. Implement a collapsed core/distribution layer and a separate access layer.

  In the traditional hierarchical campus design model, the three layers are:

  Access layer

  Distribution layer

  Core layer

  For a medium-sized network, a collapsed core design is commonly used. In this design, the core and distribution functions are combined into a single layer, while the access layer remains separate.

  This provides:

  Good modularity

  Lower hardware cost

  Simpler operations

  Sufficient scalability for medium-sized environments

  A fully separate core, distribution, and access design is more appropriate for large enterprise networks. For a medium-sized network, it often increases hardware cost without providing enough additional benefit.

  Option A is incorrect because the wording does not describe a standard hierarchical design model.

  Option B is incorrect because using only one core switch and one distribution switch introduces single points of failure.

  Option D is incorrect because a fully separate three-layer design is typically more expensive and more suitable for larger networks.

• Question 350:

  Refer to the exhibit.

  

  An engineer is installing a new pair of routers in a redundant configuration.

  Which protocol ensures that traffic is not disrupted in the event of a hardware failure?

  A. HSRPv1
  B. GLBP
  C. VRRP
  D. HSRPv2
  A. HSRPv1

  ---

  Explanation

  The virtual MAC address is 0000.0c07.acXX (XX is the hexadecimal group number) so it is using HSRPv1.

  Note: HSRP Version 2 uses a new MAC address which ranges from 0000.0C9F.F000 to 0000.0C9F.FFFF.