Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 561:

  DRAG DROP

  Drag and drop the characteristics from the left onto the technology types on the right.

  Select and Place:

  

  

  ---

  https://www.ansible.com/

  Ansible Automation Platform has grown over the past years to provide powerful automation solutions that work for operators, administrators and IT decision makers across a variety of technology domains. It's a leading enterprise automation solution from Red Hat, a thriving open source community, and the de facto standard technology of IT automation.

  BOOK: ccnp-and-ccie-enterprise-core-encor-350-401-official-cert-guide

  Chapter 29. Introduction to Automation Tools

  Puppet Bolt connects to devices by using SSH or WinRM connections. Puppet Bolt is an open source tool that is based on the Ruby language and can be installed as a single package.

  "Orchestrator-driven tasks: Orchestrator-driven" tasks can leverage the Puppet architecture to use services to connect to devices. This design is meant for large-scale environments.

• Question 562:

  Refer to the exhibit.

  

  Which type of antenna is show on the radiation patterns?

  A. Dipole
  B. Yagi
  C. Patch
  D. Omnidirectional
  A. Dipole

• Question 563:

  Which two statements about VRF-lite are true? (Choose two)

  A. It can support multiple customers on a single switch
  B. It supports most routing protocols, including EIGRP, ISIS, and OSPF
  C. It should be used when a customer's router is connected to an ISP over OSPF
  D. It can increase the packet switching rate
  E. It supports MPLS-VRF label exchange and labeled packets
  A. It can support multiple customers on a single switch
  C. It should be used when a customer's router is connected to an ISP over OSPF

  ---

  Explanation

  VRF-lite does not support IGRP and ISIS.

  1. VRF-lite does not support all MPLS-VRF functionality: label exchange, LDP adjacency, or labeled packets.

  2. VRF-lite does not affect the packet switching rate.

  3. The capability vrf-lite subcommand under router ospf should be used when configuring OSPF as the routing protocol between the PE and the CE.

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/25ew/configuration/guide/conf/vrf.html#wp1045190

• Question 564:

  Which protocol is used to encrypt control plane traffic between SD-WAN controllers and SDWAN endpoints?

  A. DTLS
  B. IPsec
  C. PGP
  D. HTTPS
  A. DTLS

  ---

  Explanation

  DTLS protocol is used to encrypt control plane traffic between vSmart (controllers) and other SD-WAN endpoints.

• Question 565:

  A network engineer configures a new GRE tunnel and enters the show run command.

  What does the output verify?

  

  A. The tunnel will be established and work as expected
  B. The tunnel destination will be known via the tunnel interface
  C. The tunnel keepalive is configured incorrectly because they must match on both sites
  D. The default MTU of the tunnel interface is 1500 byte.
  B. The tunnel destination will be known via the tunnel interface

  ---

  Explanation

  Some have brought up the fact that the default route will have the preferred AD of 1.

  While this is true, it is forgetting the path selection order: 1: Prefer the most specific route - Longest Match 2: Prefer the lowest Administrative Distance - Most Trusted Routing Protocol 3: Prefer the lowest Metric - Shortest Calculated Distance/Cost

  In other words, while the default route is going to have an AD of 1, the more specific destination address is going to be learned from OSPF through the Tunnel. The Source Router is going to learn the more specific route and prefer it over the default route, causing the recursive routing error.

• Question 566:

  Which PAgP mode combination prevents an Etherchannel from forming?

  A. auto/auto
  B. desirable/desirable
  C. auto/desirable
  D. desirable
  A. auto/auto

  ---

  Explanation

  There are two PAgP modes:

  

  The table below lists if an EtherChannel will be formed or not for PAgP:

  

  References:

  https://www.omnisecu.com/cisco-certified-network-associate-ccna/etherchannel-pagp-and-lacp-modes.php

• Question 567:

  Refer to the exhibit.

  

  How was spanning-tree configured on this interface?

  A. By entering the command spanning-tree portfast trunk in the interface configuration mode.
  B. By entering the command spanning-tree portfast in the interface configuration mode.
  C. By entering the command spanning-tree mst1 vlan 10,20,30,40 in the global configuration mode.
  D. By entering the command spanning-tree vlan 10,20,30,40 root primary in the interface configuration mode.
  A. By entering the command spanning-tree portfast trunk in the interface configuration mode.

• Question 568:

  

  Refer to the exhibit. An administrator wants to manage router R2 by using NETCONF. The network contains a RADIUS server at 10.0.1.100 and hosts in the 10.0.1.0/24 subnet. Router R2 provides connectivity to the Internet.

  Which command set enables NETCONF on router R2?

  A. R2(config)#username Netconf privilege 15 password example_password R2(config)#netconf-yang R2(config)# netconf-yang feature candidate-datastore
  B. R2(config)#snmp-server manager R2(config)#snmp-server community ENCOR ro
  C. R2(config)#snmp-server manager R2(config)#snmp-server community ENCOR rw
  D. R2(config)#netconf R2(config)#ip http secure server
  A. R2(config)#username Netconf privilege 15 password example_password R2(config)#netconf-yang R2(config)# netconf-yang feature candidate-datastore

  ---

  Explanation

  https://developer.cisco.com/docs/ios-xe/#!enabling-netconf-on-ios-xe/authentication

• Question 569:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary pre-configurations have been applied.

  5. Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed tasks.

  6. Do not change the enable password or hostname for any device.

  7. Save your configurations to NVRAM before moving to the next item.

  8. Click Next at the bottom of the screen to submit this lab and move to the next question.

  9. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Configure R1 according to the topology to achieve these results:

  1. Configure eBGP using Loopback 0 for the router-id. Do not use the address-family command to accomplish this.

  2. Advertise R1's Loopback 100 and Loopback 200 networks to AS20 and AS30.

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  

  

  

• Question 570:

  In a Cisco SD-Access fabric architecture, which of the following are valid device roles (Choose three.)

  A. Control Plane Node
  B. Access routing device
  C. Edge Node
  D. Border Node
  E. Distributed Node
  A. Control Plane Node
  C. Edge Node
  D. Border Node