Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 461:

  Refer to the exhibit.

  

  What is achieved by the XML code?

  A. It reads the access list sequence numbers from the output of the show ip access-list extended flp command into a dictionary list.
  B. It displays the output of the show ip access-list extended flp command on the terminal screen
  C. It displays the access list sequence numbers from the output of the show Ip access-list extended flp command on the terminal screen
  D. It reads the output of the show ip access-list extended flp command into a dictionary list.
  A. It reads the access list sequence numbers from the output of the show ip access-list extended flp command into a dictionary list.

• Question 462:

  DRAG DROP

  Drag and drop the characteristics from the left onto the configuration models on the right.

  Select and Place:

  

  

• Question 463:

  Refer to the exhibit.

  

  A network engineer must log in to the router via the console, but the RADIUS servers are not reachable.

  Which credentials allow console access?

  A. the username "cisco" and the password "cisco123"
  B. no username and only the password "test123"
  C. no username and only the password "cisco123"
  D. the username "cisco" and the password "cisco"
  C. no username and only the password "cisco123"

  ---

  Explanation

  We tested with GNS3 and the router only requires password "cisco123" configured under line console to authenticate. So we can deduce the "password" command under line interface is preferred over "login authentication" command.

• Question 464:

  What is one characteristic of Cisco SD-Access networks?

  A. Devices are assigned to virtual networks based on their VLAN membership.
  B. Scalable group tags are used for macrosegmentatlon.
  C. Virtual networks are used for microsegmentation.
  D. All traffic is Layer 3 within the fabric.
  B. Scalable group tags are used for macrosegmentatlon.

• Question 465:

  In which two ways does PIM dense mode function in the network? (Choose two.)

  A. It waits to forward multicast traffic until a downstream router requests the traffic.
  B. It utilizes the designated forwarder election to avoid multicast packet loops.
  C. It receives traffic from only one Reverse Path Forwarding interface.
  D. It forwards multicast traffic on all interfaces until a downstream router requests that forwarding stop.
  E. It uses a push method, and fallback occurs when RP information is lost.
  A. It waits to forward multicast traffic until a downstream router requests the traffic.
  D. It forwards multicast traffic on all interfaces until a downstream router requests that forwarding stop.

• Question 466:

  What is the base unit of definition in YANG?

  A. module
  B. include statement
  C. stanza
  D. node
  D. node

• Question 467:

  Which solution simplifies management of secure access to network resources?

  A. RFC 3580-based solution to enable authenticated access leveraging RADIUS and AV pairs
  B. 802.1AE to secure communication in the network domain
  C. ISE to automate network access control leveraging RADIUS AV pairs
  D. TrustSec to logically group internal user environments and assign policies
  D. TrustSec to logically group internal user environments and assign policies

  ---

  Explanation

  Cisco TrustSec simplifies the provisioning and management of secure access to network services and applications.

• Question 468:

  What is one characteristic of an AP that is operating in Mobility Express mode?

  A. It is recommended for large scale deployments.
  B. It requires a centralized WLC.
  C. At least three APs are needed for WLC redundancy.
  D. It requires an AP to act as a WLC.
  D. It requires an AP to act as a WLC.

• Question 469:

  Which characteristic applies to the endpoint security aspect of the Cisco Threat Defense architecture?

  A. detect and block ransomware in email attachments
  B. outbound URL analysis and data transfer controls
  C. user context analysis
  D. blocking of fileless malware in real time
  D. blocking of fileless malware in real time

• Question 470:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do no remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed tasks.

  6. Do not change the enable password or hostname for any device.

  7. Save your configurations to NVRAM before moving to the next item.

  8. Click Next at the bottom of the screen to submit this lab and move to the next question

  9. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  R1

  Config t

  Flow exporter Export-NetFlowENCOR

  destination 10.10.1.110

  transport udp 2055

  exit

  flow moni Monitor-NetFlowENCOR

  exit

  ip sla 1

  http get

  http://10.10.1.100

  frequ 300

  exit ip sla schedule 1 life forever start-time now

  SW1

  Config t

  Monitor session 7 source interface e0/0

  Monitor session 7 destination interface e1/1

  End