Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 381:

  How does Protocol Independent Multicast function?

  A. In sparse mode it establishes neighbor adjacencies and sends hello messages at 5-second intervals.
  B. It uses the multicast routing table to perform the multicast forwarding function.
  C. It uses unicast routing information to perform the multicast forwarding function.
  D. It uses broadcast routing information to perform the multicast forwarding function.
  C. It uses unicast routing information to perform the multicast forwarding function.

  ---

  Explanation

  Although PIM is called a multicast routing protocol, it actually uses the unicast routing table to perform the reverse path forwarding (RPF) check function instead of building up a completely independent multicast routing table. Unlike other routing protocols, PIM does not send and receive routing updates between routers.

  References:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/xe-16/imc-pim-xe-16-book/imc-tech-oview.html

• Question 382:

  In a fabric-enabled wireless network, which device is responsible for maintaining the endpoint ID database?

  A. fabric border node
  B. fabric edge node
  C. fabric wireless controller
  D. control plane node
  D. control plane node

• Question 383:

  A network engineer is enabling HTTPS access to the core switch, which requires a certificate to be installed on the switch signed by the corporate certificate authority.

  Which configuration commands are required to issue a certificate signing request from the core switch?

  A. Core-Switch(config)#crypto pki enroll Core-Switch Core-Switch(config)#ip http secure-trustpoint Core-Switch
  B. Core-Switch(config)#crypto pki trustpoint Core-Switch Core-Switch(ca-trustpoint)#enrollment terminal Core-Switch(config)#crypto pki enroll Core-Switch
  C. Core-Switch(config)#crypto pki trustpoint Core-Switch Core-Switch(ca-trustpoint)#enrollment terminal Core-Switch(config)#ip http secure-trustpoint Core-Switch
  D. Core-Switch(config)#ip http secure-trustpoint Core-Switch Core-Switch(config)#crypto pki enroll Core-Switch
  B. Core-Switch(config)#crypto pki trustpoint Core-Switch Core-Switch(ca-trustpoint)#enrollment terminal Core-Switch(config)#crypto pki enroll Core-Switch

  ---

  Explanation

  1. generate an RSA key

  2. Create a trust point.

  3. Enter the command "Crypto PKI enroll"

  https://community.cisco.com/t5/vpn/certificate-signing-request-csr-guideline/td-p/2778928

• Question 384:

  Which behavior can be expected when the HSRP versions is changed from 1 to 2?

  A. Each HSRP group reinitializes because the virtual MAC address has changed.
  B. No changes occur because version 1 and 2 use the same virtual MAC OUI.
  C. Each HSRP group reinitializes because the multicast address has changed.
  D. No changes occur because the standby router is upgraded before the active router.
  A. Each HSRP group reinitializes because the virtual MAC address has changed.

  ---

  Explanation

  Even though HSRP version 2 uses the new IP multicast address 224.0.0.102 to send hello packets instead of the multicast address of 224.0.0.2, used by HSRP version 1; when the HSRP version is changed, each group will reinitialize because it now has a new virtual MAC address.

• Question 385:

  Refer to the exhibit.

  

  An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected.

  Which action will resolve this issue?

  A. require a DHCP address assignment
  B. utilize RADIUS profiling
  C. set a NAC state
  D. enable AAA override
  D. enable AAA override

  ---

  Explanation

  The AAA Override option of a WLAN enables you to configure the WLAN for identity networking. It enables you to apply VLAN tagging, Quality of Service (QoS), and Access Control Lists (ACLs) to individual clients based on the returned RADIUS attributes from the AAA server.

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010110111.html

• Question 386:

  Refer to the exhibit.

  

  Which result does the python code achieve?

  A. The code encrypts a base64 decrypted password.
  B. The code converts time to the "year/month/day" time format.
  C. The code converts time to the yyyymmdd representation.
  D. The code converts time to the Epoch LINUX time format.
  C. The code converts time to the yyyymmdd representation.

  ---

  Explanation

  print(str(10000*d.year + 100*d.month + d.day))

• Question 387:

  Refer to the exhibit.

  

  

  Which configuration change ensures that R1 is the active gateway whenever it is in a functional state for the 172.30.110.0724 network?

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 388:

  DRAG DROP

  Drag and drop the snippets onto the blanks within the code construct a script that configure a loopback interface with an IP address (not all options are used)?

  Select and Place:

  

  

• Question 389:

  Refer to the exhibit.

  

  SwitchC connects HR and Sales to the Core switch. However, business needs require that no traffic from the Finance VLAN traverse this switch.

  Which command meets this requirement?

  A. SwitchC(config)#vtp pruning vlan 110
  B. SwitchC(config)#vtp pruning
  C. SwitchC(config)#interface port-channel 1 SwitchC(config-if)#switchport trunk allowed vlan add 210,310
  D. SwitchC(config)#interface port-channel 1 SwitchC(config-if)#switchport trunk allowed vlan remove 110
  D. SwitchC(config)#interface port-channel 1 SwitchC(config-if)#switchport trunk allowed vlan remove 110

  ---

  Explanation

  From the "show vlan brief" we learn that Finance belongs to VLAN 110 and all VLANs (from 1 to 1005) are allowed to traverse the trunk (port-channel 1). Therefore we have to remove VLAN 110 from the allowed VLAN list with the "switchport trunk allowed vlan remove " command. The pruning feature cannot do this job as Finance VLAN is active.

• Question 390:

  Refer to the exhibit.

  

  An administrator must enaWe RESTCONP access to a router.

  Which two commands or command sets must be added to the existing configuraton? (Choose two.)

  A. aaa authentication login default local aaa authorization exec default local
  B. restconf
  C. line vty 0 15
  D. netconf-yang
  E. username restconf privilege 0
  A. aaa authentication login default local aaa authorization exec default local
  B. restconf