Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 531:

  Refer the exhibit. Which configuration elects SW4 as the root bridge for VLAN 1 and puts G0/2 on SW2 into a blocking state?

  

  A. SW4(config)#spanning-tree vlan 1 priority 32768!SW2(config)#interface G0/2SW2(config-if)#spanning-tree vlan 1 port-priority 0
  B. SW4(config)#spanning-tree vlan 1 priority 32768!SW2(config)#int G0/2SW2(config-if)#spanning-tree cost 128
  C. SW4(config)#spanning-tree vlan 1 priority 0!SW2(config)#int G0/2SW2(config-if)#spanning-tree cost 128
  D. SW4(config)#spanning-tree vlan 1 priority 0!SW2(config)#interface G0/2SW2(config-if)#spanning-tree vlan 1 port-priority 64
  C. SW4(config)#spanning-tree vlan 1 priority 0!SW2(config)#int G0/2SW2(config-if)#spanning-tree cost 128

• Question 532:

  Where are operations related to software images located in the Cisco DNA Center GUI?

  A. Services
  B. Provisioning
  C. Assurance
  D. Design
  D. Design

  ---

  Explanation

  The following are some of the Cisco DNA [design] tools:

  1. Network Hierarchy:

  2. Network Settings:

  3. Image Repository:

  4. Network Profiles:

• Question 533:

  How can an engineer prevent basic replay attacks from people who try to brute force a system via REST API?

  A. Add a timestamp to the request In the API header.
  B. Use a password hash
  C. Add OAuth to the request in the API header.
  D. UseHTTPS
  A. Add a timestamp to the request In the API header.

  ---

  Explanation

  https://security.stackexchange.com/questions/221708/golang-rest-api-security-checks

• Question 534:

  A wireless client roams from one Access Point to another Access Point using a different switch in a Cisco SD-Access network. If only a single Wireless Lan Controller in involved, what roaming methods is being used?

  A. L3 roaming
  B. inter-xTR
  C. auto anchor
  D. bridged roaming
  B. inter-xTR

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/mobility.html

• Question 535:

  Refer to the exhibit.

  

  Object tracking has been configured for VRRP-enabled routers Edge-01 and Edge-02 Which commands cause Edge-02 to preempt Edge-01 in the event that interface G0/0 goes down on Edge-01?

  A. Edge-01(config)#interface G0/1Edge-01(config-if)#vrrp 10 track 10 decrement 30
  B. Edge-02(config)#interface G0/1Edge-02(config-if)#vrrp 10 track 10 decrement 30
  C. Edge-02(config)#interface G0/1Edge-02(config-if)#vrrp 10 track 10 decrement 10
  D. Edge-01(config)#interface G0/1Edge-01(config-if)#vrrp 10 track 10 decrement 10
  A. Edge-01(config)#interface G0/1Edge-01(config-if)#vrrp 10 track 10 decrement 30

• Question 536:

  In lhe Cisco DNA Center Image Repository, what is a golden image?

  A. The latest software image that is available for a specific device type
  B. The Cisco recommended software image for a specific device type.
  C. A software image that is compatible with multiple device types.
  D. A software image that meets the compliance requirements of the organization.
  B. The Cisco recommended software image for a specific device type.

  ---

  Explanation

  Cisco DNA Center allows you to designate software images and SMUs as golden. A golden software image or SMU is a validated image that meets the compliance requirements for the particular device type.

• Question 537:

  How is traffic classified when using Cisco TrustSec technology?

  A. with the IP address
  B. with the VLAN
  C. with the security group tag
  D. with the MAC address
  C. with the security group tag

• Question 538:

  Which LISP device is responsible for publishing EID-to-RLOC mappings for a site?

  A. ETR
  B. MS
  C. ITR
  D. MR
  A. ETR

  ---

  Explanation

  An Egress Tunnel Router (ETR) connects a site to the LISP-capable part of a core network (such as the Internet), publishes EID-to-RLOC mappings for the site, responds to Map-Request messages, and decapsulates and delivers LISP- encapsulated user data to end systems at the site.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/xe- 3s/irl-xe-3s-book/irl-overview.html https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/locator-id-separation-protocol-lisp/white_paper_c11-652502.html

• Question 539:

  Refer to the exhibit.

  

  R1 has a BGP neighborship with a directly connected router on interface Gi0/0.

  Which command set is applied between the iterations of show ip bgp 2.2.2.2?

  A. R1(config)#router bgp 65001R1(config-router)#neighbor 192.168.50.2 shutdown
  B. R1(config)#router bgp 65002R1(config-router)#neighbor 192.168.50.2 shutdown
  C. R1(config)#no ip route 192.168.50.2 255.255.255.255 Gi0/0
  D. R1(config)#ip route 2.2.2.2 255.255.255.255 192.168.50.2
  D. R1(config)#ip route 2.2.2.2 255.255.255.255 192.168.50.2

• Question 540:

  Which statement about LISP encapsulation in an EIGRP OTP implementation is true?

  A. LISP learns the next hop
  B. OTP uses LISP encapsulation to obtain routes from neighbors
  C. OTP uses LISP encapsulation for dynamic multipoint tunneling
  D. OTP maintains the LISP control plane
  C. OTP uses LISP encapsulation for dynamic multipoint tunneling

  ---

  Explanation

  The EIGRP Over the Top solution can be used to ensure connectivity between disparate EIGRP sites. This feature uses EIGRP on the control plane and Locator ID Separation Protocol (LISP) encapsulation on the data plane to route traffic across the underlying WAN architecture. EIGRP is used to distribute routes between customer edge (CE) devices within the network, and the traffic forwarded across the WAN architecture is LISP encapsulated. EIGRP OTP only uses LISP for the data plane, EIGRP is still used for the control plane. Therefore we cannot say OTP uses LISP encapsulation for dynamic multipoint tunneling as this requires encapsulating both data and control plane traffic -> Answer 'OTP uses LISP encapsulation for dynamic multipoint tunneling' is not correct.

  In OTP, EIGRP serves as the replacement for LISP control plane protocols (therefore EIGRP will learn the next hop, not LISP -> Answer 'LISP learns the next hop' is not correct). Instead of doing dynamic EID-to- RLOC mappings in native LISP-mapping services, EIGRP routers running OTP over a service provider cloud create targeted sessions, use the IP addresses provided by the service provider as RLOCs, and exchange routes as EIDs. Let's take an example:

  

  If R1 and R2 ran OTP to each other, R1 would learn about the network 10.0.2.0/24 from R2 through EIGRP, treat the prefix 10.0.2.0/24 as an EID prefix, and take the advertising next hop 198.51.100.62 as the RLOC for this EID prefix. Similarly, R2 would learn from R1 about the network 10.0.1.0/24 through EIGRP, treat the prefix 10.0.1.0/24 as an EID prefix, and take the advertising next hop 192.0.2.31 as the RLOC for this EID prefix. On both routers, this information would be used to populate the LISP mapping tables. Whenever a packet from 10.0.1.0/24 to 10.0.2.0/24 would arrive at R1, it would use its LISP mapping tables just like in ordinary LISP to discover that the packet has to be LISP encapsulated and tunneled toward 198.51.100.62, and vice versa. The LISP data plane is reused in OTP and does not change; however, the native LISP mapping and resolving mechanisms are replaced by EIGRP. Reference:

  CCIE Routing and Switching V5.0 Official Cert Guide, Volume 1, Fifth Edition