Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 421:

  Refer to the exhibit. A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec profiles. Which two configuration changes accomplish this? (Choose two).

  

  A. Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode ipsec ipv4.
  B. Create an IPsec profile, associate the transform-set. and apply the profile to the tunnel interface.
  C. Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24.
  D. Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL
  E. Create an IPsec profile, associate the transform-set ACL. and apply the profile to the tunnel interface
  B. Create an IPsec profile, associate the transform-set. and apply the profile to the tunnel interface.
  D. Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL

• Question 422:

  DRAG DROP

  Drag and drop the Cisco Catalyst Center (formerly DNA Center) southbound API characteristics from the left to the right. Not all options are used.

  Select and Place:

  

  

• Question 423:

  What is the purpose of an RP in PIM?

  A. send join messages toward a multicast source SPT
  B. ensure the shortest path from the multicast source to the receiver.
  C. receive IGMP joins from multicast receivers.
  D. secure the communication channel between the multicast sender and receiver.
  A. send join messages toward a multicast source SPT

• Question 424:

  In a Cisco VXLAN based network, which of the following best describes the main function of a VXLAN Tunnel Endpoint (VTEP)?

  A. A device that performs VXLAN encapsulation and decapsulation.
  B. It is a 24 bit segment ID that defines the broadcast domain.
  C. It is the Logical interface where the encapsulation and de-encapsulation occurs.
  D. It is a device that performs tunneling using GRE.
  A. A device that performs VXLAN encapsulation and decapsulation.

  ---

  Explanation

  VTEP (Virtual Tunnel Endpoint) - This is the device that does the encapsulation and de-encapsulation.

  https://www.cisco.com/c/en/us/support/docs/switches/nexus-9000-series-switches/118978-config-vxlan-00.html

• Question 425:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  router bgp 10

  bgp router-id 10.1.1.111

  no bgp defa ipv4-unicast

  neighbor 209.165.200.226 remote-as 20

  neighbor 209.165.202.130 remote-as 30

  address-family ipv4

  neighbor 209.165.200.226 activate

  neighbor 209.165.202.130 activate

  network 10.1.1.10 mask 255.255.255.255

  network 209.165.201.10 mask 255.255.255.255

  network 209.165.201.20 mask 255.255.255.255

• Question 426:

  Refer to the exhibit.

  

  A company requires that all wireless users authenticate using dynamic key generation. Which configuration must be applied?

  A. AP(config-if-ssid)# authentication open wep wep_methods
  B. AP(config-if-ssid)# authentication dynamic wep wep_methods
  C. AP(config-if-ssid)# authentication dynamic open wep_dynamic
  D. AP(config-if-ssid)# authentication open eap eap_methods
  D. AP(config-if-ssid)# authentication open eap eap_methods

• Question 427:

  Which data format can be used for an API request?

  A. HTML
  B. PERL
  C. JSON
  D. Python
  C. JSON

• Question 428:

  Which tag defines the properties to be applied to each specific WLAN?

  A. RF tag
  B. policy tag
  C. AP tag
  D. site tag
  B. policy tag

  ---

  Explanation

  In the context of Cisco Catalyst 9800 Series Wireless Controllers, a policy tag is used to define the properties that will be applied to each specific WLAN. The policy tag maps the WLAN profile to the policy profile, which in turn defines the wireless characteristics of the WLAN and the network policies and switching policies for the client2.

  References: Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide

• Question 429:

  Refer to the exhibit.

  

  Running the script causes the output in the exhibit. What should be the first line of the script?

  A. from ncclient import manager
  B. import manager
  C. from ncclient import *
  D. ncclient manager import
  A. from ncclient import manager

  ---

  Explanation

  https://ncclient.readthedocs.io/en/latest/ Multiple examples shown using "from ncclient import manager" and then using manager.connect

• Question 430:

  What is a characteristics of Cisco SD-WAN?

  A. operates over DTLS/TLS authenticated and secured tunnels
  B. requires manual secure tunnel configuration
  C. uses unique per-device feature templates
  D. uses control connections between routers
  A. operates over DTLS/TLS authenticated and secured tunnels