Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 341:

  In which two ways does TCAM differ from CAM? (Choose two.)

  A. CAM is used to make Layer 2 forwarding decisions, and TCAM is used for Layer 3 address lookups.
  B. The MAC address table is contained in CAM, and ACL and QoS Information Is stored in TCAM.
  C. CAM Is used by routers for IP address lookups, and TCAM is used to make Layer 2 forwarding decisions.
  D. CAM is used for software switching mechanisms, and TCAM Is used for hardware switching mechanisms.
  E. The MAC address table Is contained in TCAM, and ACL and QoS information is stored in CAM.
  A. CAM is used to make Layer 2 forwarding decisions, and TCAM is used for Layer 3 address lookups.
  B. The MAC address table is contained in CAM, and ACL and QoS Information Is stored in TCAM.

• Question 342:

  A network administrator is designing a new network for a company that has frequent power spikes. The company wants to ensure that employees can the best solution for the administrator to recommend?

  A. Generator
  B. Cold site
  C. Redundant power supplies
  D. Uninterruptible power supply
  D. Uninterruptible power supply

• Question 343:

  Refer to the exhibit. A loop occurs between R1, R2, and R3 while EIGRP is run with poison reverse enabled. Which action prevents the loop between R1, R2, and R3?

  

  A. Configure route tagging.
  B. Enable split horizon.
  C. Configure R3 as stub receive-only.
  D. Configure route filtering.
  D. Configure route filtering.

  ---

  Explanation

  In Cisco devices, split horizon is always used along with poison reverse (via the command "ip split-horizon") so in this question split horizon is already turned on. To prevent loop we can only use route filtering.

• Question 344:

  An engineer is configuring RADIUS-Based Authentication with EAP MS-CHAPv2 is configured on a client device. Which outer method protocol must be configured on the ISE to support this anthentication type?

  A. EAP-TLS
  B. LDAP
  C. EAP-FAST
  D. PEAP
  D. PEAP

  ---

  Explanation

  If you use EAP-MSCHAPv2, it means that your clients doesn't need to have a certificate, but your authentication server (NPS) has a certificate. Passwords from the clients are send using hashes to the authentication server. To protect these password hashes being send over the network, you can use PEAP which act as a TLS/SSL tunnel to protect the authentication traffic.

  https://social.technet.microsoft.com/Forums/Lync/en-US/7962d24d-7aa2-4413-97da-4f03793f2405/very-confused-on-authenciation-concepts-eap-peap-eapmschapv2-?forum=winserversecurity

• Question 345:

  Which characteristic distinguishes Ansible from Chef?

  A. Ansible lacs redundancy support for the master server. Chef runs two masters in an active/active mode.
  B. Ansible uses Ruby to manage configurations. Chef uses YAML to manage configurations.
  C. Ansible pushes the configuration to the client. Chef client pulls the configuration from the server.
  D. The Ansible server can run on Linux, Unix or Windows. The Chef server must run on Linux or Unix.
  C. Ansible pushes the configuration to the client. Chef client pulls the configuration from the server.

  ---

  Explanation

  Ansible works by connecting to your nodes and pushing out small programs, called "Ansible modules" to them. These programs are written to be resource models of the desired state of the system. Ansible then executes these modules (over SSH by default), and removes them when finished.

  Chef is a much older, mature solution to configure management. Unlike Ansible, it does require an installation of an agent on each server, named chef-client. Also, unlike Ansible, it has a Chef server that each client pulls configuration from.

• Question 346:

  When a DNS host record is configured for a new Cisco AireOS WLC, which hostname must be added to allow APs to successfully discover the WLC?

  A. CONTROLLER-CAPWAP-CISCO
  B. CISCO-CONTROLLER-CAPWAP
  C. CAPWAP-CISCO-CONTROLLER
  D. CISCO-CAPWAP-CONTROLLER
  D. CISCO-CAPWAP-CONTROLLER

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/5700/software/release/3e/consolidated/configuration-guide/b_multi_3e_5700_cg/b_multi_3e_5700_cg_chapter_01001011.html#:~:text=CAPWAP%2C%20which%20is%20based% 20on,Cisco%20products%20that%20use%20CAPWAP

• Question 347:

  DRAG DROP

  Drag and drop the characteristics from the left to the table types on the right.

  Select and Place:

  

  

• Question 348:

  What is one benefit of implementing a data modeling language?

  A. use XML style of data formatting
  B. interoperability to allow unlimited implementations
  C. machine-oriented logic and language-facilitated processing
  D. conceptual representation makes interpretation simple
  D. conceptual representation makes interpretation simple

• Question 349:

  A network administrator is preparing a Python scrip to configure a Cisco IOS XE-based device on the network. The administrator is worried that colleagues will make changes to the device while the script is running. Which operation of he in client manager prevent colleague making changes to the device while the scrip is running?

  A. m.lock(config='running')
  B. m.lock(target='running')
  C. m.freeze(target='running')
  D. m.freeze(config='running')
  B. m.lock(target='running')

  ---

  Explanation

  The example below shows the usage of lock command:

  def demo(host, user, names):

  With manager. Connect(host=host, port=22, username=user) as m:

  With m.locked(target='running'):

  for n in names:

  m.edit_config (target='running', config=template % n) The command "m.locked (target='running')" causes a lock to be acquired on the running datastore.

• Question 350:

  High bandwidth utilization is occurring on interface Gig0/1 of a router. An engineer must identify the flows that are consuming the most bandwidth. Cisco DNA Center is used as a flow exporter and is configured with the IP address 192.168.23.1 and UDP port 23000. Which configuration must be applied to set NetFlow data export and capture on the router?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/Cisco_NetFlow_Configuration.pdf