Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 551:

  A customer requires their wireless data traffic to egress at the switch port of the access point.

  Which access point mode supports this?

  A. FlexConnect
  B. Sniffer
  C. Bridge
  D. Monitor
  A. FlexConnect

  ---

  Explanation

  https://study-ccnp.com/cisco-wireless-access-point-ap-modes-explained/

  "FlexConnect Mode

  FlexConnect AP mode enables switching traffic between an SSID and a VLAN locally if the CAPWAP to the WLC is down, even when the AP is at a remote site. It can also be configured to egress at the access point's LAN port."

• Question 552:

  DRAG DROP

  Drag the drop the description from the left onto the routing protocol they describe on the right.

  Select and Place:

  

  

• Question 553:

  Which access controls list allows only TCP traffic with a destination port range of 22-433, excluding port 80?

  A. deny tcp any any eq 80 permit tcp any any gt 21 lt 444
  B. permit tcp any any range 22 443 deny tcp any any eq 80
  C. permit tcp any any eq 80
  D. deny tcp any any eq 80 permit tcp any any range 22 443
  D. deny tcp any any eq 80 permit tcp any any range 22 443

• Question 554:

  Which security measure mitigates a man-in-the-middle attack of a REST API?

  A. SSL certificates
  B. biometric authentication
  C. password hash
  D. non repudiotion feature
  A. SSL certificates

• Question 555:

  When deploying Cisco SD-Access Fabric APs, where does the data plane VXLAN tunnel terminate?

  A. on the first-hop fabric edge switch
  B. on the WLC node
  C. on the fabric border node switch
  D. directly on the fabric APs
  C. on the fabric border node switch

• Question 556:

  EIRP (Effective Isotropic Radiated Power) is the actual amount of signal leaving the antenna.

  It is a measurement value in db and is based on which three components? (Choose three.)

  A. Transmit Power
  B. RSSI
  C. Cable Loss
  D. Antenna Gain
  E. SNR
  A. Transmit Power
  C. Cable Loss
  D. Antenna Gain

  ---

  Explanation

  The radiated (transmitted) power is rated in either dBm or W. Power that comes off an antenna is measured as effective isotropic radiated power (EIRP). EIRP is the value that regulatory agencies, such as the FCC or European Telecommunications Standards Institute (ETSI), use to determine and measure power limits in applications such as 2.4-GHz or 5-GHz wireless equipment. In order to calculate EIRP, add the transmitter power (in dBm) to the antenna gain (in dBi) and subtract any cable losses (in dB).

  References:

  https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/23231-powervalues-23231.html

• Question 557:

  A company plans to implement intent-based networking in its campus infrastructure.

  Which design facilitates a migration from a traditional campus design to a programmable fabric design?

  A. Layer 2 access
  B. three-tier
  C. two-tier
  D. routed access
  D. routed access

  ---

  Explanation

  Layer 3 Routed Access--The use of a Layer 3 routed access network for the fabric provides the highest level of availability without the need to use loop avoidance protocols such as Spanning-Tree (STP), interface bundling techniques using link aggregation technologies such as EtherChannel, and Layer 2 redundancy technologies like StackWise Virtual (SVL), Virtual Switching System (VSS), or Nexus Virtual Port-Channels (vPCs).

  References:

  https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.pdf#%5B%7B%22num%22%3A37%2C%22gen%22%3A0%7D%2C%7B%22name%22%3A%22XYZ%22%7D%2C272%2C708%2C0%5D

• Question 558:

  An engineer must configure and validate a CoPP policy that allows the network management server to monitor router R1 via SNMP while protecting the control plane.

  Which two commands or command sets must be used? (Choose two.)

  

  A. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp access-list 150 permit udp 10.0.1.4 0.0.0.0 eq snmp host 10.0.1.2 class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action drop control-plane Service-policy input CoPP-policy
  B. show ip interface brief
  C. show quality-of-service-profile
  D. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action transmit control-plane Service-policy input CoPP-policy
  E. show policy-map control-plane
  A. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp access-list 150 permit udp 10.0.1.4 0.0.0.0 eq snmp host 10.0.1.2 class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action drop control-plane Service-policy input CoPP-policy
  E. show policy-map control-plane

• Question 559:

  What occurs when a high bandwidth multicast stream is sent over an MVPN using Cisco hardware?

  A. The traffic uses the default MDT to transmit the data only if it isa (S,G) multicast route entry.
  B. A data MDT is created to if it is a (*, G) multicast route entries.
  C. A data and default MDT are created to flood the multicast stream out of all PIM-SM neighbors.
  D. A data MDT is created to allow for the best transmission through the core for (S, G) multicast route entries.
  D. A data MDT is created to allow for the best transmission through the core for (S, G) multicast route entries.

• Question 560:

  What the role of a fusion in an SD-Access solution?

  A. provides connectivity to external networks
  B. acts as a DNS server
  C. performs route leaking between user-defined virtual networks and shared services
  D. provides additional forwarding capacity to the fabric
  C. performs route leaking between user-defined virtual networks and shared services

  ---

  Explanation

  Today the Dynamic Network Architecture Software Defined Access (DNA-SDA) solution requires a fusion router to perform VRF route leaking between user VRFs and Shared-Services, which may be in the Global routing table (GRT) or another VRF. Shared Services may consist of DHCP, Domain Name System (DNS), Network Time Protocol (NTP), Wireless LAN Controller (WLC), Identity Services Engine (ISE), DNAC components which must be made available to other virtual networks (VN's) in the Campus.

  References:

  https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/dnacenter/213525-sda-steps-to-configure-fusion-router.html

  Reference: (https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/dna-center/213525-sda-steps-to-configure-fusion-router.html#anc1)