Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 541:

  Refer to the exhibit.

  

  Which Python code snippet prints the descriptions of disabled interfaces only?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

  != is the "Is not true operator" think along these lines and B is clarly correct.

• Question 542:

  What is the correct EBGP path attribute list, ordered from most preferred to the least preferred, that the BGP best-path algorithm uses?

  A. weight. AS path, local preference. MED
  B. weight, local preference AS path, MED
  C. local preference weight AS path, MED
  D. local preference, weight MED, AS path
  B. weight, local preference AS path, MED

  ---

  Explanation

  Path Selection Attributes: Weight > Local Preference > Originate > AS Path > Origin > MED > External > IGP Cost > eBGP Peering > Router ID

• Question 543:

  Which variable in an EEM applet is set when you use the sync yes option?

  A. $_cli_result
  B. $_exit_status
  C. $_string_result
  D. $_result
  B. $_exit_status

  ---

  Explanation

  With Synchronous ( sync yes), the CLI command in question is not executed until the policy exits. Whether or not the command runs depends on the value for the variable_exit_status. If_exit_status is 1, the command runs, if it is 0, the command is skipped.

• Question 544:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  The operations team started configuring network devices for a new site. R10 and R20 are preconfigured with the CORP VRF. R10 has network connectivity to R20. Complete the configurations to achieve these goals:

  1. Extend the CORP VRF between R10 and R20 using Tunnel0.

  2. Protect Tunnel0 using the preconfigured profile.

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Configuration on R10:

  interface Tunnel0

  ip tunnel source e0/1

  ip tunnel destination 10.10.2.1

  ip tunnel mode gre

  tunnel protection ipsec profile myprofile

  ip address 10.100.100.1 255.255.255.252

  ip vrf forwarding CORP

  Configuration on R20:

  interface Tunnel0

  ip tunnel source e0/1

  ip tunnel destination 10.10.1.1

  ip tunnel mode gre

  tunnel protection ipsec profile myprofile

  ip address 10.100.100.2 255.255.255.252

  ip vrf forwarding CORP

• Question 545:

  To support new clients in the environment, an engineer must enable Fast Transition on the corporate WLAN.

  Which command must be applied on a Cisco Catalyst 9800 Series WLC?

  A. security ft adaptive
  B. security wpa akm dotlx
  C. security wpa akm psk
  D. security wpa akm ft psk
  D. security wpa akm ft psk

• Question 546:

  Refer to the exhibit.

  What is displayed when the code is run?

  

  A. The answer is 25
  B. The answer is 70
  C. The answer is 5
  D. The answer is 100
  A. The answer is 25

  ---

  Explanation

  The "magic" function receives a number, which is 5 from main() in this question. This function returns a result of 5 + 2*10 = 25 and the str() function converts it into a string ("25") before printing to the terminal.

  

• Question 547:

  Which new enhancement was implemented in Wi-Fi 6?

  A. Wi-Fi Protected Access 3
  B. 4096 Quadrature Amplitude Modulation Mode
  C. Channel bonding
  D. Uplink and Downlink Orthogonal Frequency Division Multiple Access
  D. Uplink and Downlink Orthogonal Frequency Division Multiple Access

  ---

  Explanation

  References:

  https://ibwave.com/wi-fi-6-networks/#:~:text=1024%2DQAM%20(Quadrature%20Amplitude%20Modulation,speeds%20by%20up%20to%2025%25

• Question 548:

  Refer to the exhibit.

  

  Which action must be taken to configure a WLAN for WPA2-AES with PSK and allow only 802.

  l1r-capable clients to connect?

  A. Change Fast Transition to Adaptive Enabled and enable FT * PSK
  B. Enable Fast Transition and FT + PSK.
  C. Enable Fast Transition and PSK
  D. Enable PSK and FT + PSK.
  B. Enable Fast Transition and FT + PSK.

• Question 549:

  Which component of the Cisco Cyber Threat Defense solution provides user and flow context analysis?

  A. Cisco Firepower and FireSIGHT
  B. Cisco Stealthwatch system
  C. Advanced Malware Protection
  D. Cisco Web Security Appliance
  B. Cisco Stealthwatch system

  ---

  Explanation

  The goal of the Cyber Threat Defense solution is to introduce a design and architecture that can help facilitate the discovery, containment, and remediation of threats once they have penetrated into the network interior. Cisco Cyber Threat Defense version 2.0 makes use of several solutions to accomplish its objectives:

  * NetFlow and the Lancope StealthWatch System

  1. Broad visibility 2. User and flow context analysis

  3. Network behavior and anomaly detection 4. Incident response and network forensics

  * Cisco FirePOWER and FireSIGHT

  1. Real-time threat management

  2. Deeper contextual visibility for threats bypassing the perimeters ?URL control

  * Advanced Malware Protection (AMP)

  1. Endpoint control with AMP for Endpoints 2. Malware control with AMP for networks and content

  * Content Security Appliances and Services 1. Cisco Web Security Appliance (WSA) and Cloud Web Security (CWS)

  2. Dynamic threat control for web traffic 3. Outbound URL analysis and data transfer controls

  4. Detection of suspicious web activity 5. Cisco Email Security Appliance (ESA)

  6. Dynamic threat control for email traffic 7. Detection of suspicious email activity

  * Cisco Identity Services Engine (ISE) 1. User and device identity integration with Lancope StealthWatch

  2. Remediation policy actions using pxGrid

  References:

  https://www.cisco.com/c/dam/en/us/td/docs/security/network_security/ctd/ctd2-0/design_guides/ctd_2-0_cvd_guide_jul15.pdf

• Question 550:

  Which three methods does Cisco DNA Center use to discover devices? (Choose three.)

  A. CDP
  B. SNMP
  C. LLDP
  D. Ping
  E. NETCONF
  F. specified range of IP addresses
  A. CDP
  C. LLDP
  F. specified range of IP addresses

  ---

  Explanation

  There are three ways for you to discover devices:

  1. Use Cisco Discovery Protocol (CDP) and provide a seed IP address.

  2. Specify a range of IP addresses. (A maximum range of 4096 devices is supported.) 3. Use Link Layer Discovery Protocol (LLDP) and provide a seed IP address.