Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 491:

  Refer to the exhibit.

  

  The WLC administrator sees that the controller to which a roaming client associates has Mobility Role Anchor configured under Clients > Detail.

  Which type of roaming is supported?

  A. Indirect
  B. Layer 3 intercontroller
  C. Layer 2 intercontroller
  D. Intercontroller
  B. Layer 3 intercontroller

  ---

  Explanation

  What is a Mobility Anchor?

  Mobility Anchor, also referred to as Guest tunneling or Auto Anchor Mobility, is a feature where all the client traffic that belongs to a WLAN (Specially Guest WLAN) is tunneled to a predefined WLC or set of controllers that are configured as Anchor for that specific WLAN. This feature helps to restrict clients to a specific subnet and have more control over the user traffic. Refer to theConfiguring Auto-Anchor Mobilitysection of Cisco Wireless LAN Controller Configuration Guide, Release 8.8for more information on this feature.

  This would be a L3 Roam as the client is Anchored to the AP with a CAPWAP tunnel formed between the Anchor WLC and the associated WLC

  https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107188-mobility-groups-faq.html#anc15

• Question 492:

  Which JSON script is properly formatted?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 493:

  Which configuration enables a device to be configured via NETCONF over SSHv2?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 494:

  Which standard access control entry permits from odd-numbered hosts in the 10.0.0.0/24 subnet?

  A. Permit 10.0.0.0.0.0.0.1
  B. Permit 10.0.0.1.0.0.0.0
  C. Permit 10.0.0.1.0.0.0.254
  D. Permit 10.0.0.0.255.255.255.254
  C. Permit 10.0.0.1.0.0.0.254

  ---

  Explanation

  Remember, for the wildcard mask, 1s are I DON'T CARE, and 0s are I CARE. So now let's analyze a simple ACL:

  access-list 1 permit 172.23.16.0 0.0.15.255 Two first octets are all 0's meaning that we care about the network 172.23.x.x. The third octet of the wildcard mask, 15 (0000 1111 in binary), means that we care about first 4 bits but don't care about last 4 bits so we allow the third octet in the form of 0001xxxx (minimum:00010000 = 16; maximum: 0001111 = 31).

  

  The fourth octet is 255 (all 1 bits) that means I don't care. Therefore network 172.23.16.0 0.0.15.255 ranges from 172.23.16.0 to 172.23.31.255. Now let's consider the wildcard mask of 0.0.0.254 (four octet: 254 = 1111 1110) which means we only care the last bit. Therefore if the last bit of the IP address is a "1" (0000 0001) then only odd numbers are allowed. If the last bit of the IP address is a "0" (0000 0000) then only even numbers are allowed.

  Note: In binary, odd numbers are always end with a "1" while even numbers are always end with a "0".

  Therefore in this question, only the statement "permit 10.0.0.1 0.0.0.254" will allow all oddnumbered hosts in the 10.0.0.0/24 subnet.

• Question 495:

  Which IEEE standard provides the capability to permit or deny network connectivity based on the user or device identity?

  A. 802.1d
  B. 802.1w
  C. 802.1q
  D. 802.1x
  D. 802.1x

• Question 496:

  How does EIGRP differ from OSPF?

  A. EIGRP is more prone to routing loops than OSPF
  B. EIGRP has a full map of the topology, and OSPF only knows directly connected neighbors
  C. EIGRP supports equal or unequal path cost, and OSPF supports only equal path cost.
  D. EIGRP uses more CPU and memory than OSPF
  C. EIGRP supports equal or unequal path cost, and OSPF supports only equal path cost.

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway-routing-protocol-eigrp/13677-19.html

• Question 497:

  In an SD-Access solution what is the role of a fabric edge node?

  A. to connect external Layer 3- network to the SD-Access fabric
  B. to connect wired endpoint to the SD-Access fabric
  C. to advertise fabric IP address space to external network
  D. to connect the fusion router to the SD-Access fabric
  B. to connect wired endpoint to the SD-Access fabric

  ---

  Explanation

  + Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.

  

• Question 498:

  Which method of account authentication does OAuth 2.0 within REST APIs?

  A. username/role combination
  B. access tokens
  C. cookie authentication
  D. basic signature workflow
  B. access tokens

  ---

  Explanation

  The most common implementations of OAuth (OAuth 2.0) use one or both of these tokens:

  + access token: sent like an API key, it allows the application to access a user's data; optionally, access tokens can expire. + refresh token: optionally part of an OAuth flow, refresh tokens retrieve a new access token if they have expired.

  OAuth2 combines Authentication and Authorization to allow more sophisticated scope and validity control.

  https://www.cisco.com/c/en/us/td/docs/security/firepower/ftd-api/guide/ftd-rest-api/auth-ftd-rest-api.pdf

• Question 499:

  Which DNS lookup does an AP perform when attempting CAPWAP discovery?

  A. CAPWAP-CONTROLLER.Iocal
  B. CISCO-CAPWAP-CONTROLLER.Iocal
  C. CISCO-DNA-CONTROLLER.Iocal
  D. CISCO-CONTROLLER.Iocal
  B. CISCO-CAPWAP-CONTROLLER.Iocal

• Question 500:

  What are two valid modes that Cisco Express Forwarding can operate in? (Choose two.)

  A. Central CEF mode
  B. Dense CEF mode
  C. Sparse CEF mode
  D. Distributed CEF mode
  E. Routed CEF mode
  A. Central CEF mode
  D. Distributed CEF mode

  ---

  Explanation

  CEF can be enabled in one of two modes:

  Central CEF mode - When CEF mode is enabled, the CEF FIB and adjacency tables reside on the route processor, and the route processor performs the express forwarding. You can use CEF mode when line cards are not available for CEF switching, or when you need to use features not compatible with distributed CEF switching.

  Distributed CEF (dCEF) mode - When dCEF is enabled, line cards maintain identical copies of the FIB and adjacency tables. The line cards can perform the express forwarding by themselves, and this relieves the main processor - Gigabit Route Processor (GRP) - of involvement in the switching operation. This is the only switching method available on the Cisco 12000 Series Router.

  https://www.cisco.com/c/en/us/support/docs/routers/12000-series-routers/47321-ciscoef.html