Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 541:

  In a Cisco SD-Access solution, which protocol is used by an extended node to connect to a single edge node?

  A. VXLAN
  B. IS-IS
  C. 802 1Q
  D. CTS
  C. 802 1Q

  ---

  Explanation

  SD-Access Extended Nodes provide the ability to extend the enterprise network by providing connectivity to non-carpeted spaces of an enterprise ?commonly called the Extended Enterprise. This allows network connectivity and management of IoT devices and the deployment of traditional enterprise end devices in outdoor and non-carpeted environments such as distribution centers, warehouses, or Campus parking lots. This feature extends consistent, policy-based automation to Cisco Industrial Ethernet, Catalyst 3560-CX Compact, and Digital Building Series switches and enables segmentation for user endpoints and IoT devices connected to these nodes. Using Cisco DNA Center automation, switches in the extended node role are onboarded to their connected edge node using an 802.1Q trunk over an EtherChannel with one or multiple physical link members. Extended nodes are discovered using zero-touch Plug-and-Play.

  https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#Network_Components

• Question 542:

  Refer to the exhibit.

  

  

  A wireless client is connecting to FlexAP1 which is currently working standalone mode. The AAA authentication process is returning the following AVPs:

  Tunnel-Private-Group-Id(81): 15 Tunnel-Medium-Type(65): IEEE-802(6) Tunnel-Type(64): VLAN(13)

  Which three behaviors will the client experience? (Choose three.)

  A. While the AP is in standalone mode, the client will be placed in VLAN 15.
  B. While the AP is in standalone mode, the client will be placed in VLAN 10.
  C. When the AP transitions to connected mode, the client will be de-authenticated.
  D. While the AP is in standalone mode, the client will be placed in VLAN 13.
  E. When the AP is in connected mode, the client will be placed in VLAN 13.
  F. When the AP transitions to connected mode, the client will remain associated.
  G. When the AP is in connected mode, the client will be placed in VLAN 15.
  H. When the AP is in connected mode, the client will be placed in VLAN 10.
  B. While the AP is in standalone mode, the client will be placed in VLAN 10.
  C. When the AP transitions to connected mode, the client will be de-authenticated.
  G. When the AP is in connected mode, the client will be placed in VLAN 15.

  ---

  Explanation

  Traffic flow on WLANs configured for Local Switching when Flex APs are in Connected Mode:

  1. If the VLAN is returned as one of the AAA attributes and that VLAN is not present in the Flex AP database, traffic will switch centrally and the client will be assigned this VLAN/Interface returned from the AAA server provided that the VLAN exists on the WLC.

  2. If the VLAN is returned as one of the AAA attributes and that VLAN is not present in the Flex AP database, traffic will switch centrally. If that VLAN is also not present on the WLC, the client will be assigned a VLAN/Interface mapped to a WLAN on the WLC.

  3. If the VLAN is returned as one of the AAA attributes and that VLAN is present in the FlexConnect AP database, traffic will switch locally.

  4. If the VLAN is not returned from the AAA server, the client will be assigned a WLAN mapped VLAN on that FlexConnect AP and traffic will switch locally.

  Traffic flow on WLANs configured for Local Switching when Flex APs are in Standalone Mode:

  1. If the VLAN returned by an AAA server is not present in the Flex AP database, the client will be put to default VLAN (that is, a WLAN mapped VLAN on Flex AP). When the AP connects back, this client will be de-authenticated and will switch traffic centrally.

  2. If the VLAN returned by an AAA server is present in the Flex AP database, the client will be put into a returned VLAN and traffic will switch locally.

  3. If the VLAN is not returned from an AAA server, the client will be assigned a WLAN mapped VLAN on that FlexConnect AP and traffic will switch locally.

• Question 543:

  Which two statements about EIGRP load balancing are true? (Choose two)

  A. Cisco Express Forwarding is required to load-balance across interfaces
  B. A path can be used for load balancing only if it is a feasible successor
  C. EIGRP supports unequal-cost paths by default
  D. Any path in the EIGRP topology table can be used for unequal-cost load balancing
  E. EIGRP supports 6 unequal-cost paths
  B. A path can be used for load balancing only if it is a feasible successor
  E. EIGRP supports 6 unequal-cost paths

  ---

  Explanation

  EIGRP provides a mechanism to load balance over unequal cost paths (or called unequal cost load balancing) through the "variance" command. In other words, EIGRP will install all paths with metric < variance * best metric into the local routing table, provided that it meets the feasibility condition to prevent routing loop. The path that meets this requirement is called a feasible successor. If a path is not a feasible successor, it is not used in load balancing. Note: The feasibility condition states that, the Advertised Distance (AD) of a route must be lower than the feasible distance of the current successor route.

• Question 544:

  Which type of tunnel Is required between two WLCs to enable Intercontroller roaming?

  A. mobility
  B. LWAPP
  C. CAPWAP
  D. iPsec
  A. mobility

• Question 545:

  Why would an architect use an OSPF virtual link?

  A. to allow a stub area to transit another stub area
  B. to connect two networks that have overlapping private IP address space
  C. to merge two existing Area Os through a nonbackbone
  D. to connect a nonbackbone area to Area 0 through another nonbackbone area
  D. to connect a nonbackbone area to Area 0 through another nonbackbone area

• Question 546:

  Refer to the exhibit.

  

  The existing configuration must be updated to terminate EXEC sessions after 20 minutes of idle time. Which command set should be applied?

  A. line vty 015 session-timeout 20
  B. line vty 015 session-limit 20
  C. line vty 015 exec-timeout 20
  D. line vty 015 absolute-timeout 20
  C. line vty 015 exec-timeout 20

• Question 547:

  Which Python snippet should be used to store the devices data structure in a JSON file?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  Explanation

  the same configuration can be found in multiple examples here:

  https://www.section.io/engineering-education/storing-data-in-python-using-json-module/

• Question 548:

  Which two actions are recommended as security best practices to protect REST API? (Choose two.)

  A. Use SSL for encryption.
  B. Enable out-of-band authentication.
  C. Enable dual authentication of the session.
  D. Use TACACS+ authentication.
  E. Use a password hash.
  A. Use SSL for encryption.
  C. Enable dual authentication of the session.

• Question 549:

  What is a characteristic of a traditional WAN?

  A. low complexity and high overall solution scale
  B. centralized reachability, security, and application policies
  C. operates over DTLS and TLS authenticated and secured tunnels
  D. united data plane and control plane
  D. united data plane and control plane

• Question 550:

  An engineer must configure HSRP group 300 on a Cisco IOS router. When the router is functional, it must be the active HSRP router

  The peer router has been configured using the default priority value.

  Which three commands are required? (Choose three.)

  A. standby version 2standby 300 priority 110standby 300 preempt
  B. standby 300 priority 110standby 300 timers 1 110
  C. standby version 2standby 300 priority 90standby 300 preempt
  D. standby 300 priority 90standby 300 preempt
  A. standby version 2standby 300 priority 110standby 300 preempt

  ---

  Explanation

  In HSRP version 1, group numbers are supported the range from 0 to 255 and HSRP version 2 expands the group number range from 0 to 4095.

  * So it should HSRP v2 to assign the group no. 300

  * Default priority of the HSRP is 100 and the Router with higher priority no. will become Active Router. So the priority set over 100 for active router.