Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 501:

  Refer to the exhibit.

  

  An engineer configures VRRP and issues to show commands to verify operation.

  What does the engineer confirm about VRRP group 1 from the output?

  A. Communication between VRRP members is encrypted using MD5
  B. If R1 reboot, R2 becomes the master virtual router until R2 reboots
  C. There is no route to 10.10.1.1/32 in R2's routing table
  D. R1 is master if 10.10.1.1/32 is in its routing table
  D. R1 is master if 10.10.1.1/32 is in its routing table

  ---

  Explanation

  R1 is primary if 10.10.1.1/32 is in its routing table. -> because of track 20 command

• Question 502:

  Which of the following are true statements regarding the Virtual Router Redundancy Protocol (VRRP) feature? (Choose two.)

  A. Pre-emption is enabled by default
  B. The router priority is a configurable value from 0-4095
  C. MD5 authentication is supported with VRRP
  D. Secondary IP addresses are supported with VRRP
  E. VRRP can only be used with Cisco devices
  C. MD5 authentication is supported with VRRP
  D. Secondary IP addresses are supported with VRRP

  ---

  Explanation

  in every cisco documents is referenced "Preemption" or "preempt" NOT pre-emption. so i go with C and D

  Multiple IP Addresses

  The virtual router can manage multiple IP addresses, including secondary IP addresses.

  Authentication VRRP message digest 5 (MD5) algorithm authentication protects against VRRP-spoofing software and uses the industry-standard MD5 algorithm for improved reliability and security.

• Question 503:

  DRAG DROP

  Drag and drop characteristics of PIM dense mode from the left to the right

  Select and Place:

  

  

  ---

  PIM-DM supports only source trees ?that is, (S,G) entriesnd cannot be used to build a shared distribution tree.

• Question 504:

  An engineer must configure the strongest password authentication to locally authenticate on a router.

  Which configuration must be used?

  A. username netadmin secret 5 $1$b1JUSkZbBS1Pyh4OzwXyZ1kSZ2
  B. username netadmin secret $15b1JuSk404850110QzwXyZ1k SZ2
  C. line Console 0 password $15b1Ju$
  D. username netadmin secret 9 $9$vFpMfBelbRVV8SseX/bDAxtuV
  D. username netadmin secret 9 $9$vFpMfBelbRVV8SseX/bDAxtuV

  ---

  Explanation

  Scrypt is safer than MD5, so answer A is wrong and answer D is correct

  R1(config)#username user secret 0 Specifies an UNENCRYPTED secret will follow5 Specifies a MD5 HASHED secret will follow8 Specifies a PBKDF2 HASHED secret will follow9 Specifies a SCRYPT HASHED secret will follow<0-9>

  Encryption types not explicitly specifiedLINE.

  The UNENCRYPTED (cleartext) user secretLINE.

  The UNENCRYPTED (cleartext) user secret

• Question 505:

  In OSPF, which LAS type is responsible for pointing to the ASBR router?

  A. type 1
  B. type 2
  C. type 3
  D. type 4
  D. type 4

• Question 506:

  What is used to validate the authenticity of the client and is sent in HTTP requests as a JSON object?

  A. SSH
  B. HTTPS
  C. JWT
  D. TLS
  C. JWT

  ---

  Explanation

  JWT or JSON Web Token is a string that is sent in the HTTP request (from client to server) to validate the authenticity of the client

  https://developer.atlassian.com/server/crowd/json-requests-and-responses/

• Question 507:

  Refer to the exhibit.

  

  Which command set is needed to configure and verify router R3 to measure the response time from router R3 to the file server located in the data center?

  A. ip sla 6 icmp-echo 10.0.1.3 source-ip 10.0.0.3 frequency 300 ip sla schedule 6 life forever start-time now show ip sla statistics 6
  B. ip sla 6 icmp-echo 172.29.139.134 source-ip 172.29.139.132 frequency 300 ip sla schedule 6 start-time now
  C. ip sla 6 icmp-echo 172.29.139.134 source-ip 172.29.139.132 frequency 300 ip sla schedule 6 Start-time now show ip protocol
  D. ip sla 6 icmp-echo 10.0.1.3 source-ip 10.0.0.3 frequency 300 ip sla schedule 6 life forever start-time now show ip protocol
  A. ip sla 6 icmp-echo 10.0.1.3 source-ip 10.0.0.3 frequency 300 ip sla schedule 6 life forever start-time now show ip sla statistics 6

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-550x-series-stackable-managedswitches/smb57

• Question 508:

  Refer to the exhibit.

  

  Object tracking has been configured for VRRP-enabled routers Edge-01 and Edge-02.

  Which commands cause Edge-02 to preempt Edge-01 in the event that interface G0/0 goes down on Edge-01?

  A. Edge-01(config)#interface G0/1 Edge-01(config-if)#vrrp 10 track 10 decrement 30
  B. Edge-02(config)#interface G0/1 Edge-02(config-if)#vrrp 10 track 10 decrement 30
  C. Edge-02(config)#interface G0/1 Edge-02(config-if)#vrrp 10 track 10 decrement 10
  D. Edge-01(config)#interface G0/1 Edge-01(config-if)#vrrp 10 track 10 decrement 10
  A. Edge-01(config)#interface G0/1 Edge-01(config-if)#vrrp 10 track 10 decrement 30

• Question 509:

  How does policy-based routing function?

  A. It schedules traffic using classification
  B. It is applied to all ingress unicast traffic received on an interlace
  C. It is applied to all egress unicast traffic on an interface
  D. It controls traffic using embedded event detectors
  B. It is applied to all ingress unicast traffic received on an interlace

• Question 510:

  Which option must be used to support a WLC with an IPv6 management address and 100 Cisco Aironet 2800 Series access points that will use DHCP to register?

  A. 43
  B. 52
  C. 60
  D. 82
  B. 52

  ---

  Explanation

  Reference

  https://insinuator.net/2016/02/dhcpv6-option-52-on-cisco-dhcpv6-server/