Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 461:

  An engineer must protect their company against ransom ware attacks. Which solution allows the engineer to block the execution stage and prevent file encryption?

  A. Use Cisco AMP deployment with the Malicious Activity Protection engineer enabled.
  B. Use Cisco AMP deployment with the Exploit Prevention engine enabled.
  C. Use Cisco Firepower and block traffic to TOR networks.
  D. Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation.
  A. Use Cisco AMP deployment with the Malicious Activity Protection engineer enabled.

  ---

  Explanation

  Ransomware are malicious software that locks up critical resources of the users. Ransomware uses well-established public/private key cryptography which leaves the only way of recovering the files being the payment of the ransom, or restoring files from backups.

  Cisco Advanced Malware Protection (AMP) for Endpoints Malicious Activity Protection (MAP) engine defends your endpoints by monitoring the system and identifying processes that exhibit malicious activities when they execute and stops them from running. Because the MAP engine detects threats by observing the behavior of the process at run time, it can generically determine if a system is under attack by a new variant of ransomware or malware that may have eluded other security products and detection technology, such as legacy signature-based malware detection. The first release of the MAP engine targets identification, blocking, and quarantine of ransomware attacks on the endpoint.

  https://www.cisco.com/c/dam/en/us/products/collateral/security/amp-for-endpoints/white-paper-c11-740980.pdf

• Question 462:

  Refer to the exhibit.The control plane is heavily impacted after the CoPP configuration is applied to the router. Which command removal lessens the impact on the control plane?

  

  A. access-list 120 permit eigrp any host 224.0.0.10
  B. access-list 120 permit ospf any
  C. access-list 120 permit udp any any eq pim-auto-rp
  D. access-list 120 permit tcp any gt 1024 eq bgp log
  D. access-list 120 permit tcp any gt 1024 eq bgp log

• Question 463:

  Refer to the exhibit.

  

  An engineer attempts to use RESTCONF to configure GigabitEthernet2 on a remote router with IP address 192.168.159.10. but the configuration fails. Which configuration is required to complete the action?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 464:

  A customer wants to connect a device to an autonomous Cisco AP configured as a WGB. The WGB is configured properly: however, it fails to associate to a CAPWAP- enabled AP. Which change must be applied in the advanced WLAN settings to resolve this issue?

  A. Enable Aironet IE.
  B. Enable passive client.
  C. Disable AAA override.
  D. Disable FlexConnect local switching.
  A. Enable Aironet IE.

  ---

  Explanation

  To enable the WGB to communicate with the lightweight access point, create a WLAN and make sure that Aironet IE is enabled.

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/workgroup_bridges.pdf

• Question 465:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  OSPF is preconfigured on all devices except R20. Configure R20 to complete these tasks.

  Task 1:

  Configure OSPF according to the topology using these requirements:

  1. Use Process ID 20.

  2. Use Loopback0 for the Router ID.

  3. Advertise all networks into OSPF.

  - Do not use network statements under the OSPF process to accomplish this task.

  Task 2:

  Configure a /18 summary route for Area 40.

  Advertise only Type 3 LSAs into Area 0.

  R20

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Task 1:

  Configure OSPF Process ID and Router ID:

  R20(config)# router ospf 20 R20(config-router)# router-id

  Advertise Networks without Using Network Statements:

  R20(config)# interface e0/0 R20(config-if)# ip ospf 20 area 0 R20(config-if)# exit R20(config)# interface e0/1 R20(config-if)# ip ospf 20 area 0 R20(config-if)# exit R20(config)# interface e0/2 R20(config-if)# ip ospf 20 area 40 R20(config-if)# exit

  Task 2: Configure a /18 Summary Route for Area 40

  R20(config)# router ospf 20 R20(config-router)# area 40 range 10.40.0.0 255.255.192.0

  This summarizes the 10.40.0.0/16 network to a /18 and advertises it into Area 0. By default, summary addresses are advertised as Type 3 LSAs.

• Question 466:

  Refer to the exhibit

  

  A network engineer must use a Python script lo convert data received from a network device.

  Which type of data is printed to the console when the script runs?

  A. dictionary with a key-value pair
  B. list of lists
  C. list of strings
  D. tuple list
  A. dictionary with a key-value pair

• Question 467:

  DRAG DROP

  Drag and drop the characteristics from the left onto the routing protocols they describes on the right.

  Select and Place:

  

  

• Question 468:

  What is a benefit of MACsec in a multilayered LAN network design?

  A. Application flows between hosts on the LAN to remote destinations can be encrypted.
  B. Layer 2 trunk links between switches can be secured.
  C. There is no requirement to run IEEE 802.1X when MACsec is enabled on a switch port.
  D. Layer 3 links between switches can be secured.
  B. Layer 2 trunk links between switches can be secured.

• Question 469:

  What is a characteristic of para-virtualization?

  A. Para-virtualization guest servers are unaware of one another
  B. Para-virtualization allows direct access between the guest OS and the hypervisor
  C. Para-virtualization allows the host hardware to be directly accessed
  D. Para-virtualization lacks support for containers
  B. Para-virtualization allows direct access between the guest OS and the hypervisor

  ---

  Explanation

  Paravirtualization is virtualization in which the guest operating system (the one being virtualized) is aware that it is a guest and accordingly has drivers that, instead of issuing hardware commands, simply issues commands directly to the host operating system. This will include things such as memory management as well.

• Question 470:

  DRAG DROP

  Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

  Select and Place: