Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 361:

  What is required for intercontroller Layer 3 roaming?

  A. Mobility groups are established between wireless controllers.
  B. The management VLAN is present as a dynamic VLAN on the second WLC.
  C. WLCs use separate DHCP servers.
  D. WLCs have the same IP addresses configured on their interfaces.
  D. WLCs have the same IP addresses configured on their interfaces.

• Question 362:

  Refer to the exhibit.

  

  Which action must be taken to configure a WLAN for WPA2-AES with PSK and allow only 802.11r-capable clients to connect?

  A. Enable PSK and FT + PSK.
  B. Enable Fast Transition and FT + PSK.
  C. Enable Fast Transition and PSK.
  D. Change Fast Transition to Adaptive Enabled and enable FT + PSK.
  A. Enable PSK and FT + PSK.

• Question 363:

  DRAG DROP

  Drag and drop the command snippets from the right onto the blanks in the configuration to create an EEM applet that will enable interface Loopback0 and log a message when the logging message -Interface Loopback0. changed state to

  administratively down" is received. Not all commands are used.

  Select and Place:

  

  

• Question 364:

  In a Cisco SD-Access environment, which function is performed by the border node?

  A. Connect uteri and devices to the fabric domain.
  B. Group endpoints into IP pools.
  C. Provide reachability information to fabric endpoints.
  D. Provide connectivity to traditional layer 3 networks.
  D. Provide connectivity to traditional layer 3 networks.

• Question 365:

  Refer to the exhibit.

  

  An engineer must configure an ERSPAN session with the remote end of the session 10.10.0.1.

  Which commands must be added to complete the configuration?

  A. Device(config)# monitor session 1 type erspan-source Device(config-mon-erspan-src)# destination Device(config-mon-erspan-src-dst)#no origin ip address 10.10.0.1 Device(config-mon-erspan-src-dst)#ip address 10.10.0.1
  B. Device(config)# monitor session 1 type erspan-destination Device(config-mon-erspan-src)# source Device(config-mon-erspan-src-dst)#origin ip address 10.1.0.1
  C. Device(config)# monitor session 1 type erspan-source Device(config-mon-erspan-src)# destination Device(config-mon-erspan-src-dst)#no origin ip address 10.10.0.1 Device(config-mon-erspan-src-dst)#ip destination address 10.10.0.1
  D. Device(config)# monitor session 1 type erspan-source Device(config-mon-erspan-src)# destination Device(config-mon-erspan-src-dst)#no vrf 1
  A. Device(config)# monitor session 1 type erspan-source Device(config-mon-erspan-src)# destination Device(config-mon-erspan-src-dst)#no origin ip address 10.10.0.1 Device(config-mon-erspan-src-dst)#ip address 10.10.0.1

  ---

  Explanation

  For the source session, we have to configure:

  + Unique session ID.

  + List of source interfaces or source VLANs that you want to monitor. Not all platforms support every possible source.

  + What traffic we want to capture: tx, rx or both.

  + Destination IP address for the GRE tunnel.

  + Origin IP address which is used as the source for the GRE tunnel.

  + Unique ERSPAN flow ID.

  + Optional: you can specify attributes like the ToS (Type of Service), TTL, etc.

  References:

  https://networklessons.com/cisco/ccie-routing-switching-written/erspanThe

  configuration in the exhibit is missing destination IP adress for the GRE tunnel so we have to add it with the "ip address 10.10.0.1".

• Question 366:

  Which component transports data plane traffic across a Cisco SD-WAN network?

  A. vSmart
  B. vManage
  C. cEdge
  D. vBond
  D. vBond

• Question 367:

  A server running Linux is providing support for virtual machines along with DNS and DHCP services for a small business.

  Which technology does this represent?

  A. container
  B. Type 1 hypervisor
  C. hardware pass-thru
  D. Type 2 hypervisor
  D. Type 2 hypervisor

  ---

  Explanation

  In contrast to type 1 hypervisor, a type 2 hypervisor (or hosted hypervisor) runs on top of an operating system and not the physical hardware directly. A big advantage of Type 2 hypervisors is that management console software is not required.

  Examples of type 2 hypervisor are VMware Workstation (which can run on Windows, Mac and Linux) or Microsoft Virtual PC (only runs on Windows).

• Question 368:

  When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?

  A. logging host 10.2.3.4 vrf mgmt transport tcp port 6514
  B. logging host 10.2.3.4 vrf mgmt transport udp port 6514
  C. logging host 10.2.3.4 vrf mgmt transport tcp port 514
  D. logging host 10.2.3.4 vrf mgmt transport udp port 514
  A. logging host 10.2.3.4 vrf mgmt transport tcp port 6514

  ---

  Explanation

  The TCP port 6514 has been allocated as the default port for syslog over Transport Layer Security (TLS).

  TCP/514 - shell cmd

  UDP/514 - syslog

  TCP/6514 - syslog over TLS

  UDP/6514 - syslog over DTLS

  References:

  https://tools.ietf.org/html/rfc5425

• Question 369:

  Which two methods are used to assign security group tags to the user in a Cisco Trust Sec architecture? (Choose two )

  A. modular QoS
  B. policy routing
  C. web authentication
  D. DHCP
  E. IEEE 802.1x
  C. web authentication
  E. IEEE 802.1x

  ---

  Explanation

  Web authentication

  Used when a user logs in using a web browser. When a user accesses the network using this method, web authentication authenticates the user and assigns a security group tag.

  This is an effective authentication method when the client terminal does not have an 802.1X supplicant function.

  IEEE 802.1x

  A network access control protocol that provides authentication and authorization. It consists of three elements: an authentication server, an authenticator, and a supplicant. When a user connects to a network, they are authenticated using 802.1x and are granted permission to access the network. Through this authentication process, users are assigned the appropriate security group tag.

• Question 370:

  What is a consideration when designing a Cisco SD-Access underlay network?

  A. End user subnets and endpoints are part of the underlay network.
  B. The underlay switches provide endpoint physical connectivity for users.
  C. Static routing is a requirement,
  D. It must support IPv4 and IPv6 underlay networks.
  B. The underlay switches provide endpoint physical connectivity for users.

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#Underlay