Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 411:

  Refer to the exhibit.

  

  What is the effect of this configuration?

  A. The device will allow users at 192.168.0.202 to connect to vty lines 0 through 4 using the password ciscotestkey
  B. The device will allow only users at 192 168.0.202 to connect to vty lines 0 through 4
  C. When users attempt to connect to vty lines 0 through 4. the device will authenticate them against TACACS* if local authentication fails
  D. The device will authenticate all users connecting to vty lines 0 through 4 against TACACS+
  D. The device will authenticate all users connecting to vty lines 0 through 4 against TACACS+

• Question 412:

  DRAG DROP

  Drag and drop the characteristics from the left onto the deployment models on the right.

  Select and Place:

  

  

• Question 413:

  Refer to the exhibit.

  

  An engineer must allow all users In the 10.2.2.0/24 subnet to access the Internet. To conserve address space, the public interface address of 209.165.201.1 must be used for all external communication.

  Which command set accomplishes these requirements?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

  ---

  Explanation

  The command ip nat inside source list 10 interface G0/3 overload configures NAT to overload (PAT) on the address that is assigned to the G0/3 interface.

• Question 414:

  Which statement about agent-based versus agentless configuration management tools is true?

  A. Agentless tools require no messaging systems between master and slaves.
  B. Agentless tools use proxy nodes to interface with slave nodes.
  C. Agent-based tools do not require a high-level language interpreter such as Python or Ruby on slave nodes.
  D. Agent-based tools do not require installation of additional software packages on the slave nodes.
  A. Agentless tools require no messaging systems between master and slaves.

• Question 415:

  Refer to the exhibit.

  

  A network administrator must configure router B to allow traffic only from network 10.100.2.0 to networks outside of router B.

  Which configuration must be applied?

  A. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 any RouterB(config)# access-list 101 deny any RouterB(config)# int g0/0/0 RouterB(config-if)# ip access-group 101 out
  B. RouterB(config)# access-list 101 permit ip 10.100.3.0 0.0.0.255 any RouterB(config)# access-list 101 deny any RouterB(config)# int g0/0/0 RouterB(config-if)# ip access-group 101 out RouterB(config)# int g0/0/1 RouterB(config-if)# ip access-group 101 out
  C. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 any RouterB(config)# access-list 101 deny any RouterB(config)# int g0/0/2 RouterB(config-if)# ip access-group 101 in
  D. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 any RouterB(config)# int g0/0/0 RouterB(config-if)# ip access-group 101 out RouterB(config)# int g0/0/1 RouterB(config-if)# ip access-group 101 out
  D. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 any RouterB(config)# int g0/0/0 RouterB(config-if)# ip access-group 101 out RouterB(config)# int g0/0/1 RouterB(config-if)# ip access-group 101 out

• Question 416:

  Refer to the exhibit.

  

  An engineer configures CoPP and enters the show command to verify the implementation.

  What is the result of the configuration?

  A. All traffic will be policed based on access-list 120.
  B. If traffic exceeds the specified rate, it will be transmitted and remarked.
  C. Class-default traffic will be dropped.
  D. ICMP will be denied based on this configuration.
  A. All traffic will be policed based on access-list 120.

• Question 417:

  Which of the following are the two components of the two-tier modern data center design? (Choose two.)

  A. Distribution
  B. Core
  C. Access
  D. Leaf
  E. Spine
  D. Leaf
  E. Spine

  ---

  Explanation

  the question is in modern data center not a classical networkd design

• Question 418:

  What would be the preferred way to implement a loopless switch network where there are 1500 defined VLANs and it is necessary to load the shared traffic through two main aggregation points based on the VLAN identifier?

  A. 802.1D
  B. 802.1s
  C. 802.1W
  D. 802.1AE
  B. 802.1s

• Question 419:

  By default, which virtual MAC address does HSRP group 30 use?

  A. 00:05:0c:07:ac:30
  B. 00:00:0c:07:ac:1e
  C. 05:0c:5e:ac:07:30
  D. 00:42:18:14:05:1e
  B. 00:00:0c:07:ac:1e

• Question 420:

  Refer to the exhibit.

  

  Which IP address becomes the active next hop for 192.168.102 0/24 when 192.168.101.2 fails?

  A. 192.168.101.18
  B. 192.168.101.6
  C. 192.168.101.10
  D. 192.168.101.14
  A. 192.168.101.18

  ---

  Explanation

  The `>' shown in the output above indicates that the path with a next hop of 192.168.101.2 is the current best path.

  Path Selection Attributes: Weight > Local Preference > Originate > AS Path > Origin > MED > External > IGP Cost > eBGP Peering > Router ID BGP prefers the path with highest weight but the weights here are all 0 (which indicate all routes that are not originated by the local router) so we need to check the Local Preference. Answer '192.168.101.18' path without LOCAL_PREF (LocPrf column) means it has the default value of 100. Therefore we can find the two next best paths

  with the next hop of 192.168.101.18 and 192.168.101.10. We have to move to the next path selection attribute: Originate. BGP prefers the path that the local router originated (which is indicated with the "next hop 0.0.0.0"). But none of the two best paths is self-originated. The AS Path of the next hop 192.168.101.18 is shorter than the AS Path of the next hop 192.168.101.10 then the next hop 192.168.101.18 will be chosen as the next best path.