Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 411:

  Which NTP mode must be activated when using a Cisco router as an NTP authoritative server?

  A. primary
  B. server
  C. broadcast client
  D. peer
  B. server

• Question 412:

  Refer to the exhibit.

  

  An engineer configures routing between all routers and must build a configuration to connect R1 to R3 via a GRE tunnel Which configuration must be applied?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 413:

  Refer to the exhibit.

  

  Which configuration must be applied for the TACACS+ server to grant access-level rights to remote users?

  A. R1(config)# aaa authentication login enable
  B. R1(config)# aaa authorization exec default local if-authenticated
  C. R1(config)# aaa authorization exec default group tacacs+
  D. R1(config)# aaa accounting commands 15 default start-stop group tacacs+
  C. R1(config)# aaa authorization exec default group tacacs+

• Question 414:

  An engineer uses the Design workflow to create a new network infrastructure in Cisco DNA Center. How is the physical network device hierarchy structured?

  A. by location
  B. by role
  C. by organization
  D. by hostname naming convention
  A. by location

  ---

  Explanation

  This is because the Design workflow in Cisco DNA Center allows the engineer to create a new network infrastructure by defining the physical network device hierarchy based on the location of the devices. The location hierarchy consists of four levels: global, area, building, and floor. The engineer can add, edit, or delete locations and assign devices to them. The location hierarchy helps to organize the network devices and apply policies and settings based on the location. The source of this answer is the Cisco ENCOR v1.1 course, module 8, lesson 8.6: Implementing Network Design Processes.

• Question 415:

  What does the Cisco DNA Center Authentication API provide?

  A. list of global issues that are logged in Cisco DNA Center
  B. access token to make calls to Cisco DNA Center
  C. list of VLAN names
  D. dent health status
  B. access token to make calls to Cisco DNA Center

• Question 416:

  You want to create a policy that allows all TCP traffic in the port range of 20 to 110, except for telnet traffic, which should be dropped. Which of the following access control lists will accomplish this?

  A. deny tcp any any eq 22permit tcp any any gt 20 lt 110
  B. permit tcp any any range 22 443deny tcp any any eq 23
  C. deny tcp any any eq 23permit tcp any any
  D. deny tcp any any eq 23permit tcp any any range 20 110
  D. deny tcp any any eq 23permit tcp any any range 20 110

  ---

  Explanation

  for the policy map to MATCH an entry we should use 'permit' otherwise use 'deny'.

• Question 417:

  Which two protocols are used with YANG data models? (Choose two.)

  A. HTTPS
  B. SSH
  C. RESTCONF
  D. TLS
  E. NFTCONF
  C. RESTCONF
  E. NFTCONF

  ---

  Explanation

  YANG (Yet Another Next Generation) is a data modeling language for the definition of data sent over network management protocols such as the NETCONF and RESTCONF.

• Question 418:

  What is a benefit of deploying an on-premises infrastructure versus a cloud infrastructure deployment?

  A. faster deployment times because additional infrastructure does not need to be purchased
  B. lower latency between systems that are physically located near each other
  C. less power and cooling resources needed to run infrastructure on-premises
  D. ability to quickly increase compute power without the need to install additional hardware
  B. lower latency between systems that are physically located near each other

  ---

  Explanation

  The difference between on-premise and cloud is essentially where this hardware and software resides. On-premise means that a company keeps all of this IT environment onsite either managed by themselves or a third-party. Cloud means that it is housed offsite with someone else responsible for monitoring and maintaining it.

• Question 419:

  Refer to the exhibit. An engineer configures CoPP and enters the show command to verify the implementation. What is the result of the configuration?

  

  A. All traffic will be policed based on access-list 120.
  B. If traffic exceeds the specified rate, it will be transmitted and remarked.
  C. Class-default traffic will be dropped.
  D. ICMP will be denied based on this configuration.
  A. All traffic will be policed based on access-list 120.

• Question 420:

  Refer to the exhibit.

  

  What is the result of running this code?

  A. A list of lists is created.
  B. A list of new VLANs is created.
  C. An error is displayed.
  D. A dictionary is created.
  B. A list of new VLANs is created.

  ---

  Explanation

  tried it online. the thing is that the vars are referenced and not sent by value.

  def main():

  vlans_list = [10, 20, 30] add_vlans(vlans_list) print(vlans_list) def add_vlans(vlans):

  for i in range(len(vlans)):

  vlans[i]+=100

  if _name_ == '_main_':

  main()