Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 471:

  Refer to the exhibit.

  

  A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec profiles.

  Which two configuration changes accomplish this? (Choose two).

  A. Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode ipsec ipv4.
  B. Create an IPsec profile, associate the transform-set. and apply the profile to the tunnel interface.
  C. Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24.
  D. Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL
  E. Create an IPsec profile, associate the transform-set ACL. and apply the profile to the tunnel interface
  B. Create an IPsec profile, associate the transform-set. and apply the profile to the tunnel interface.
  D. Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL

• Question 472:

  Which IPv6 migration method relies on dynamic tunnels that use the 2002::/16 reserved address space?

  A. GRE
  B. 6RD
  C. 6to4
  D. ISATAP
  C. 6to4

  ---

  Explanation

  6to4 tunnel is a technique which relies on reserved address space 2002::/16 (you must remember this range). These tunnels determine the appropriate destination address by combining the IPv6 prefix with the globally unique destination 6to4 border router's IPv4 address, beginning with the 2002::/16 prefix, in this format:

  2002:border-router-IPv4-address::/48

  For example, if the border-router-IPv4-address is 64.101.64.1, the tunnel interface will have an IPv6 prefix of 2002:4065:4001:1::/64, where 4065:4001 is the hexadecimal equivalent of 64.101.64.1. This technique allows IPv6 sites to communicate with each other over the IPv4 network without explicit tunnel setup but we have to implement it on all routers on the path.

• Question 473:

  By default, which virtual MAC address does HSRP group 15 use?

  A. 05:5e:ac:07:0c:0f
  B. c0:42:34:03:73:0f
  C. 00:00:0c:07:ac:0f
  D. 05:af:1c:0f:ac:15
  C. 00:00:0c:07:ac:0f

  ---

  Explanation

  interface Ethernet0/0.100

  encapsulation dot1Q 100

  ip address 10.0.111.1 255.255.255.0

  standby 15 ip 10.0.111.254

  !

  cisco(config-subif)#do s stand

  Ethernet0/0.100 - Group 15

  State is Speak

  Virtual IP address is 10.0.111.254

  Active virtual MAC address is unknown Local virtual MAC address is 0000.0c07.ac0f (v1 default) Hello time 3 sec, hold time 10 sec Next hello sent in 1.200 secs Preemption disabled Active router is unknown Standby router is unknown

• Question 474:

  Which two statements about Cisco Express Forwarding load balancing are true? (Choose two)

  A. Each hash maps directly to a single entry in the RIB
  B. It combines the source IP address subnet mask to create a hash for each destination
  C. Cisco Express Forwarding can load-balance over a maximum of two destinations
  D. It combines the source and destination IP addresses to create a hash for each destination
  E. Each hash maps directly to a single entry in the adjacency table
  D. It combines the source and destination IP addresses to create a hash for each destination
  E. Each hash maps directly to a single entry in the adjacency table

  ---

  Explanation

  Cisco IOS software basically supports two modes of CEF load balancing: On per-destination or perpacket basis.

  For per destination load balancing a hash is computed out of the source and destination IP address (-> Answer 'It combines the source and destination IP addresses to create a hash for each destination' is correct). This hash points to exactly one of the adjacency entries in the adjacency table (-> Answer 'Each hash maps directly to a single entry in the adjacency table' is correct), providing that the same path is used for all packets with this source/destination address pair. If per

  packet load balancing is used the packets are distributed round robin over the available paths. In either case the information in the FIB and adjacency tables provide all the necessary forwarding information, just like for non-load balancing operation. The number of paths used is limited by the number of entries the routing protocol puts in the routing table, the default in IOS is 4 entries for most IP routing protocols with the exception of BGP, where it is one entry. The maximum number that can be configured is 6 different paths -> Answer 'Cisco Express Forwarding can load-balance over a maximum of two destinations' is not correct.

  References:

  https://www.cisco.com/en/US/products/hw/modules/ps2033/prod_technical_reference09186a00800afeb7.html

• Question 475:

  A network administrator prepares to deploy a new software-defined fabric across campuses.

  What is needed to ensure success for the overall design?

  A. A fully meshed Layer 2 topology
  B. A fully meshed Layer 3 topology
  C. A point-to-point Layer 3 underlay network with jumbo frames enabled
  D. A point-to-point Layer 2 network with LACP between devices for redundancy
  C. A point-to-point Layer 3 underlay network with jumbo frames enabled

  ---

  Explanation

  The correct answer is Option C. A point-to-point Layer 3 underlay network with jumbo frames enabled.

  A software-defined fabric such as Cisco SD-Access requires a stable routed underlay. The underlay provides IP reachability between the fabric nodes, and the overlay uses encapsulation to carry user traffic across that underlay.

  The preferred underlay design uses:

  Point-to-point Layer 3 links Routed access Reliable IP reachability between fabric nodes Jumbo frame support to handle encapsulation overhead

  Option A is incorrect because SD-Access is not based on a fully meshed Layer 2 topology.

  Option B is incorrect because the underlay is Layer 3, but it does not need to be fully meshed.

  Option D is incorrect because the fabric underlay should be Layer 3, not Layer 2 with LACP.

• Question 476:

  Which JSON script is properly formatted?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 477:

  Refer to the exhibit.

  

  What does the snippet of code achieve?

  A. It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls.
  B. It opens a tunnel and encapsulates the login information, if the host key is correct.
  C. It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context.
  D. It creates an SSH connection using the SSH key that is stored, and the password is ignored.
  C. It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context.

  ---

  Explanation

  ncclient is a Python library that facilitates client-side scripting and application development around the NETCONF protocol. The above Python snippet uses the ncclient to connect and establish a NETCONF session to a Nexus device (which is also a NETCONF server).

• Question 478:

  DRAG DROP

  Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

  Select and Place:

  

  

  ---

  EIGRP maintains alternative loop-free backup via the feasible successors. To qualify as a feasible successor, a router must have an Advertised Distance (AD) less than the Feasible distance (FD) of the current successor route.

  Advertised distance (AD): the cost from the neighbor to the destination. Feasible distance (FD): The sum of the AD plus the cost between the local router and the next-hop router

• Question 479:

  A Cisco DNA Center REST API sends a PUT to the /dna/intent/api/v1/network-device endpoint. A response code of 504 is received.

  What does the code indicate?

  A. The response timed out based on a configured interval
  B. The user does not have authorization to access this endpoint.
  C. The username and password are not correct
  D. The web server is not available
  A. The response timed out based on a configured interval

• Question 480:

  Refer to the exhibit.

  

  An engineer must allow R1 to advertise the 192 168.1 0/24 network to R2 R1 must perform this action without sending OSPF packets to SW1.

  Which command set should be applied?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B