Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 381:

  What is the purpose of an integration API in Cisco DNA Center?

  A. Obtain information about clients, sites, and topology from Cisco DNA Center.
  B. Enable external systems to take actions in response to an event.
  C. Allow the platform into approval chains in ITSM.
  D. Enable discovery and control of the network by using HTTPS verbs.
  C. Allow the platform into approval chains in ITSM.

• Question 382:

  DRAG DROP

  Drag and drop the code snippets from the bottom onto the blanks in the PHP script to convert a PHP array into JSON format. Not all options are used.

  Select and Place:

  

  

• Question 383:

  Refer to the exhibit.

  

  Clients report that they cannot connect to this SSID using the provided PSK. Which action will resolve this issue?

  A. Apply the correct interface to this WLAN.
  B. Apply the changes this SSID.
  C. Select the PSK under authentication key management.
  D. Define the correct Radio Policy.
  C. Select the PSK under authentication key management.

  ---

  Explanation

  As it stands it is configured for radius auth and must be changed to PSK.

• Question 384:

  

  Refer to the exhibit. Which Python snippet stores the data structure of the device in JSON format?

  A. A close up of a text AI-generated content may be incorrect.
  B. A close up of a logo AI-generated content may be incorrect.
  C. A close up of a text AI-generated content may be incorrect.
  D. A black text on a white background AI-generated content may be incorrect.
  C. A close up of a text AI-generated content may be incorrect.

• Question 385:

  By default, which virtual MAC address does HSRP group 32 use?

  A. 00:5e:0c:07:ac:20
  B. 04:18:20:83:2e:32
  C. 05:5e:5c:ac:0c:32
  D. 00:00:0c:07:ac:20
  D. 00:00:0c:07:ac:20

  ---

  Explanation

  The virtual IP resolves to a virtual MAC address in the format 0000.0c07.acxx, xx being the group number in hexadecimal. For example, if you use group number 3, the last part of the MAC address is ac03.

  32 is in binary 0010 0000 that's mean in HEX its 2 0

• Question 386:

  Refer to the exhibit. After the code is run on a Cisco IOS-XE router, the response code is 204. What is the result of the script?

  

  A. The configuration fails because another interface is already configured with IP address 10.10.10.1/24.
  B. The configuration fails because interface GigabitEthernet2 is missing on the target device.
  C. The configuration is successfully sent to the device in cleartext.
  D. Interface GigabitEthernet2 is configured with IP address 10.10.10.1/24
  D. Interface GigabitEthernet2 is configured with IP address 10.10.10.1/24

  ---

  Explanation

  https://ultraconfig.com.au/blog/restconf-tutorial-everything-you-need-to-know-about-restconf-in-2020/

• Question 387:

  Refer to the exhibit.

  

  An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router. However, the router can still ping hosts on the 209.165.200.0/24 subnet.

  Which explanation of this behavior is true?

  A. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.
  B. Only standard access control lists can block traffic from a source IP address.
  C. After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.
  D. The access control list must contain an explicit deny to block traffic from the router.
  A. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.

  ---

  Explanation

  Locally (control plane) generated traffic goes from control plane directly to "tx-ring". That is different from processing/forwarding of Transit traffic. Please see the platform's "packet journey" session of Cisco Live or other documentation to see the different internal path and processing for: Transit, forus, exception, locally generated.

• Question 388:

  Based on the output below, which Python code shows the value of the "upTime" key?

  

  A. json_data = response.json()print(json_data['response'][0]['upTime'])
  B. json_data = response.json()print(json_data[response][0][upTime])
  C. json_data = json.loads(response.text)print(json_data['response']['family']['upTime'])
  D. json_data = response.json()print(json_data['response'][family]['upTime'])
  A. json_data = response.json()print(json_data['response'][0]['upTime'])

  ---

  Explanation

  because the question is asked about 'UpTime', not 'family', both of them are object within array 'response' ,i.e. [ {"family:xxx", "UpTime:xxx"}...

• Question 389:

  Which controller is the single plane of management for Cisco SD-WAN?

  A. vBond
  B. vEdge
  C. vSmart
  D. vManange
  D. vManange

  ---

  Explanation

  The primary components for the Cisco SD-WAN solution consist of the vManage network management system (management plane), the vSmart controller (control plane), the vBond orchestrator (orchestration plane), and the vEdge router (data plane).

  + vManage -This centralized network management system provides a GUI interface to easily monitor, configure, and maintain all Cisco SD-WAN devices and links in the underlay and overlay network. + vSmart controller -This software-based component is responsible for the centralized control plane of the SD-WAN network. It establishes a secure connection to each vEdge router and distributes routes and policy information via the Overlay Management Protocol (OMP), acting as a route reflector. It also orchestrates the secure data plane connectivity between the vEdge routers by distributing crypto key information, allowing for a very scalable, IKE-less architecture. + vBond orchestrator -This software-based component performs the initial authentication of vEdge devices and orchestrates vSmart and vEdge connectivity. It also has an important role in enabling the communication of devices that sit behind Network Address Translation (NAT). + vEdge router -This device, available as either a hardware appliance or software-based router, sits at a physical site or in the cloud and provides secure data plane connectivity among the sites over one or more WAN transports. It is responsible for traffic forwarding, security, encryption, Quality of Service (QoS), routing protocols such as Border Gateway Protocol (BGP) and Open Shortest Path First (OSPF), and more.

  https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/CVD-SD-WANDesign-2018OCT.pdf

• Question 390:

  Refer to the exhibit.

  

  SwitchC connects HR and Sales to the Core switch. However, business needs require that no traffic from the Finance VLAN traverse this switch.

  Which command meets this requirement?

  A. SwitchC(config)#vtp pruning vlan 110
  B. SwitchC(config)#vtp pruning
  C. SwitchC(config)#interface port-channel 1SwitchC(config-if)#switchport trunk allowed vlan add 210,310
  D. SwitchC(config)#interface port-channel 1SwitchC(config-if)#switchport trunk allowed vlan remove 110
  D. SwitchC(config)#interface port-channel 1SwitchC(config-if)#switchport trunk allowed vlan remove 110

  ---

  Explanation

  From the "show vlan brief" we learn that Finance belongs to VLAN 110 and all VLANs (from 1 to 1005) are allowed to traverse the trunk (port-channel 1). Therefore we have to remove VLAN 110 from the allowed VLAN list with the "switchport trunk allowed vlan remove " command. The pruning feature cannot do this job as Finance VLAN is active.