Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 481:

  Which EIGRP feature allows the use of leak maps?

  A. neighbor
  B. stub
  C. offset-list
  D. address-family
  B. stub

  ---

  Explanation

  If we configured an EIGRP stub router so that it only advertises connected and summary routes. But we also want to have an exception to this rule then we can configure a leak-map. For example:

  R4(config-if)#router eigrp 1

  R4(config-router)#eigrp stub

  R4(config)#ip access-list standard R4_L0opback0

  R4(config-std-nacl)#permit host 4.4.4.4

  R4(config)#route-map R4_L0opback0_LEAKMAP

  R4(config-route-map)#match ip address R4_L0opback0

  R4(config)#router eigrp 1

  R4(config-router)#eigrp stub leak-map R4_L0opback0_LEAKMAP As we can see the leak-map feature goes long with `eigrp stub' command.

• Question 482:

  What are two characteristics of Cisco Catalyst SD-WAN? (Choose two.)

  A. control plane operates over DTLS/TLS authenticated and secured tunnels
  B. time-consuming configuration and maintenance
  C. distributed control plane
  D. unified data plane and control plane
  E. centralized reachability, security, and application policies
  A. control plane operates over DTLS/TLS authenticated and secured tunnels
  E. centralized reachability, security, and application policies

• Question 483:

  Refer to the exhibit.

  How does the router handle traffic after the CoPP policy is configured on the router?

  

  A. Traffic coming to R1 that does not match access list SNMP is dropped.
  B. Traffic coming to R1 that matches access list SNMP is policed.
  C. Traffic passing through R1 that matches access list SNMP is policed.
  D. Traffic generated by R1 that matches access list SNMP is policed.
  D. Traffic generated by R1 that matches access list SNMP is policed.

  ---

  Explanation

  Service Policy is in the output direction. So traffic generated by router will be policed.

• Question 484:

  What are the four stages of obtaining an IP address lease from a DHCP server?

  A. Discover, Offer, Release, Renew
  B. Discover, Obtain, Request, Renew
  C. Determine, Obtain, Release, Acknowledge
  D. Discover, Offer, Request, Acknowledge
  D. Discover, Offer, Request, Acknowledge

  ---

  Explanation

  DORA is the correct answer

• Question 485:

  In a Cisco SD-Access solution, which component offers the Anycast Gateway service?

  A. Fabric border node
  B. Control plane node
  C. Intermediate node
  D. Fabric edge node
  D. Fabric edge node

  ---

  Explanation

  The correct answer is Option D. Fabric edge node.

  In Cisco SD-Access, the Anycast Gateway provides a consistent default gateway for endpoints across the fabric. This allows endpoints to keep the same gateway behavior regardless of where they attach within the fabric.

  The fabric edge node provides the Anycast Gateway service for connected endpoints. It is the node where endpoints attach to the fabric, and it performs the first-hop gateway function using the distributed Anycast Gateway model.

  This design provides:

  Consistent default gateway addressing Simplified endpoint mobility Optimal forwarding within the fabric Distributed first-hop gateway services

  Option A. The fabric border node connects the SD-Access fabric to external networks. It does not provide the endpoint Anycast Gateway service.

  Option B. The control plane node maintains host tracking and endpoint-to-location mappings using LISP. It is not the default gateway for endpoints.

  Option C. The intermediate node forwards traffic inside the fabric path and does not provide gateway services to endpoints.

• Question 486:

  Which JSON script is properly formatted?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 487:

  DRAG DROP

  Drag and drop the Cisco DNA Center northbound API characteristics from the left to the right. Not all options are used.

  Select and Place:

  

  

• Question 488:

  Refer to the exhibit.

  

  Which statement about the OPSF debug output is true?

  A. The output displays all OSPF messages which router R1 has sent to received on interface Fa0/1.
  B. The output displays all OSPF messages which router R1 has sent or received on all interfaces.
  C. The output displays OSPF hello messages which router R1 has sent received on interface Fa0/1.
  D. The output displays OSPF hello and LSACK messages which router R1 has sent or received.
  C. The output displays OSPF hello messages which router R1 has sent received on interface Fa0/1.

  ---

  Explanation

  This combination of commands is known as "Conditional debug" and will filter the debug output based on your conditions. Each condition added, will behave like an `And' operator in Boolean logic. Some examples of the "debug ip ospf hello" are shown below:

  

• Question 489:

  A company has an existing Cisco 5520 HA cluster using SSO. An engineer deploys a new single Cisco Catalyst 9800 WLC to test new features. The engineer successfully configures a mobility tunnel between the 5520 cluster and 9800

  WLC.

  Clients connected to the corporate WLAN roam seamlessly between access points on the 5520 and 9800 WLC. After a failure on the primary 5520 WLC, all WLAN services remain functional; however clients cannot roam between the 5520 and 9800 controllers without dropping their connection.

  Which feature must be configured to remedy the issue?

  A. mobility MAC on the 5520 cluster
  B. mobility MAC on the 9800 WLC
  C. new mobility on the 5520 cluster
  D. new mobility on the 9800 WLC
  B. mobility MAC on the 9800 WLC

  ---

  Explanation

  You have 2 5k devices with SSO, and a 1 9k device.

  If cluster and primary works fine, then everything is fine.

  However when Primary 5k device fails, secondary should take over. Now Secondary with 9k doesnt talk to each other as it should.

  Ensure that you configure the mobility MAC address using the wireless mobility mac-address command for HighAvailability to work.

  Therefore you should enable this on the 9k device so it knows about the other devices.

  Doing it on the cluster with already established SSO wont do anything. Given answer (B) should be the correct one.

• Question 490:

  Refer to the exhibit

  

  Which command set is required on router R1 to allow the network administrator to authenticate via RADIUS'?

  A. aaa new-model aaa authentication login default group radius
  B. aaa new-model aaa authentication login console
  C. aaa new-model aaa authentication login default
  D. aaa new-model aaa authentization exec default group radius
  A. aaa new-model aaa authentication login default group radius