Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 401:

  A network administrator has designed a network with two multilayer switches on the distribution layer, which act as default gateways for the end hosts.

  Which two technologies allow every end host in a VLAN to use both gateways? (Choose two)

  A. GLBP
  B. HSRP
  C. MHSRP
  D. VSS
  E. VRRP
  A. GLBP
  D. VSS

  ---

  Explanation

  VSS combine two switches into one logical switch. both of them have their own control and data plane, both of their data plane will keep alive, once the master control plane is down, the other take charge.

  MHSRP mhsrp can't let all host use both gateway, 50% host use gateway1, another 50% host use gateway 2 (fromWINDSON)

• Question 402:

  Refer to the exhibit.

  Which configuration must be applied to R1 to enable R1 to reach the server at 172.16.0.1?

  

  

  A. interface Ethernet0/0 ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf hotel network 172.16.0.0 255.255.0.0
  B. interface Ethernet0/0 vrf forwarding hotel ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf Hotel network 172.16.0.0 0.0.255.255 area 0
  C. interface Ethernet0/0 vrf forwarding bank ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 0.0.255.255 area 0
  D. interface Ethernet0/0 ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 0.0.255.255
  C. interface Ethernet0/0 vrf forwarding bank ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 0.0.255.255 area 0

• Question 403:

  How do cloud deployments compare to on-premises deployments?

  A. Cloud deployments provide a better user experience across world regions, whereas on-premises deployments depend upon region-specific conditions
  B. Cloud deployments are inherently unsecure. whereas a secure architecture is mandatory for on-premises deployments.
  C. Cloud deployments mandate a secure architecture, whereas on-premises deployments are inherently unsecure.
  D. Cloud deployments must include automation infrastructure, whereas on-premises deployments often lack the ability for automation.
  A. Cloud deployments provide a better user experience across world regions, whereas on-premises deployments depend upon region-specific conditions

  ---

  Explanation

  Easily deploy your application in multiple regions around the world with just a few clicks. This means you can provide lower latency and a better experience for your customers at minimal cost.

  https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html

• Question 404:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Configure OSPF on all three routers according to the topology diagram to achieve these goals:

  1. Enable OSPF on all interfaces using the network statement and match the network mask of each interface.

  2. Ensure that all networks are advertised between the routers.

  3. Ensure that all routers use OSPF process ID 1 and that the Lo0 interface is used for the router ID.

  4. Configure OSPF MD5 authentication on every physical interface running OSPF using key 1 and the password ccnp321.

  

  

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  R1

  Router ospf 1

  Network 10.0.0.0 0.0.0.255 area 1 Network 1.1.1.1 0.0.0.0 area 1 Router-id 1.1.1.1 area 1 authentication message-digest

  Interface E0/0 ip ospf message-digest-key 1 md5 ccnp321

  R2

  Router ospf 1

  Network 10.0.0.0 0.0.0.255 area 1 Network 192.168.0.0 0.0.0.255 area 2 Network 2.2.2.2 0.0.0.0 area 0 Router-id 2.2.2.2 area 1 authentication message-digest area 2 authentication message-digest

  Interface E0/0 ip ospf message-digest-key 1 ccnp321

  Interface E0/1 ip ospf message-digest-key 1 ccnp321

  R3

  Router ospf 1

  Network 192.168.0.0 0.0.0.255 area 2 Network 3.3.3.3 0.0.0.0 area 2 Router-id 3.3.3.3 area 2 authentication message-digest

  Interface E0/1 ip ospf message-digest-key 1 ccnp321

• Question 405:

  Refer to the exhibit.

  

  An engineer must prevent VLAN 20 routes from appearing in the routing table of Switch-1.

  Which command set must be applied?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 406:

  What is a TLOC in a Cisco SD-WAN deployment?

  A. value that identifies a specific tunnel within the Cisco SD-WAN overlay
  B. identifier that represents a specific service offered by nodes within the Cisco SD-WAN overlay
  C. attribute that acts as a next hop for network prefixes
  D. component set by the administrator to differentiate similar nodes that offer a common service
  C. attribute that acts as a next hop for network prefixes

  ---

  Explanation

  OMP Routes, also referred to as vRoutes, are prefixes learned at the local site via connected interfaces, static routes, and dynamic routing protocols (such as OSPF, EIGRP, and BGP) running on the service side of the vEdge. These prefixes are redistributed into OMP and advertised to the vSmart controller so that they can be carried across the overlay fabric to all other WAN edge nodes. OMP routes resolve their next-hop to a TLOC. An OMP route is installed in the forwarding table only if the next-hop TLOC is known and there is a BFD session in UP state associated with that TLOC;

• Question 407:

  A network administrator is preparing a Python script to configure a Cisco IOS XE-based device on the network. The administrator is worried that colleagues will make changes to the device while the script is running.

  Which operation of the ncclient manager prevents colleagues from making changes to the devices while the script is running?

  A. m.lock(config='running')
  B. m.lock(target='running')
  C. m.freeze(target='running')
  D. m.freeze(config='running')
  B. m.lock(target='running')

• Question 408:

  In which two ways does the routing protocol OSPF differ from EIGRP? (Choose two.)

  A. OSPF supports an unlimited number of hops. EIGRP supports a maximum of 255 hops.
  B. OSPF provides shorter convergence time than EIGRP.
  C. OSPF is distance vector protocol. EIGRP is a link-state protocol.
  D. OSPF supports only equal-cost load balancing. EIGRP supports unequal-cost load balancing.
  E. OSPF supports unequal-cost load balancing. EIGRP supports only equal-cost load balancing.
  A. OSPF supports an unlimited number of hops. EIGRP supports a maximum of 255 hops.
  D. OSPF supports only equal-cost load balancing. EIGRP supports unequal-cost load balancing.

• Question 409:

  Which type of roaming event occurs when a client roams across multiple mobility groups?

  A. Layer1
  B. Layer7
  C. Layer3
  D. Layer2
  D. Layer2

• Question 410:

  What is one primary REST security design principle?

  A. fail-safe defaults
  B. password hash
  C. adding a timestamp in requests
  D. OAuth
  A. fail-safe defaults

  ---

  Explanation

  https://yurisubach.com/2017/04/04/restful-api-security-principles/

  "Fail-safe defaultsAccess to any resource (like API endpoint) should be denied by default. Access granted only in case of specific permission.