Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 571:

  Which statement about an RSPAN session configuration is true?

  A. A fitter mutt be configured for RSPAN Regions.
  B. Only one session can be configured at a time.
  C. A special VLAN type must be used as the RSPAN destination.
  D. Only incoming traffic can be monitored.
  C. A special VLAN type must be used as the RSPAN destination.

  ---

  Explanation

  in all participating switches -> This VLAN can be considered a special VLAN type -> Answer 'A special VLAN type must be used as the RSPAN destination' is correct.

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/r elease/12-2_55_se/configuration/guide/3750xscg/swspan.html

  We can configure multiple RSPAN sessions on a switch at a time, then continue configuring multiple RSPAN sessions on the other switch without any problem -> Answer 'Only one session can be configured at a time' is not correct. This is how to configure Remote SPAN (RSPAN) feature on two switches. Traffic on FastEthernet0/1 of Switch 1 will be sent to Fa0/10 of Switch2 via VLAN 40.

  + Configure on both switches Switch1,2(config)#vlan 40 Switch1,2(config-vlan)#remote-span + Configure on Switch1 Switch1(config)# monitor session 1 source interface FastEthernet 0/1 Switch1(config)# monitor session 1 destination remote vlan 40 + Configure on Switch2 Switch2(config)#monitor session 5 source remote vlan 40 Switch2(config)# monitor session 5 destination interface FastEthernet 0/10

• Question 572:

  Refer to the exhibit. Which two facts does the device output confirm? (Choose two)

  

  A. The device is using the default HSRP hello timer
  B. The standby device is configured with the default HSRP priority
  C. The device's HSRP group uses the virtual IP address 10.0.3.242.
  D. The device is configured with the default HSRP priority
  E. The device sends unicast messages to its peers
  A. The device is using the default HSRP hello timer
  D. The device is configured with the default HSRP priority

  ---

  Explanation

  hsrp uses multicast: 224.0.0.2 v1, 224.0.0.102 v2, 224.0.0.18 vrrp. default hsrp hello time is 3 sec, hold timer is 10 sec

• Question 573:

  A customer requires their wireless data traffic to egress at the switch port of the access point.

  Which access point mode supports this?

  A. FlexConnect
  B. Sniffer
  C. Bridge
  D. Monitor
  A. FlexConnect

  ---

  Explanation

  https://study-ccnp.com/cisco-wireless-access-point-ap-modes-explained/

  "FlexConnect Mode FlexConnect AP mode enables switching traffic between an SSID and a VLAN locally if the CAPWAP to the WLC is down, even when the AP is at a remote site. It can also be configured to egress at the access point's LAN port."

• Question 574:

  Which two security mechanisms are used by Cisco Threat Defense to gain visibility into the most dangerous cyber threats? (Choose two.)

  A. virtual private networks
  B. file reputation
  C. VLAN segmentation
  D. Traffic Telemetry
  E. dynamic enforce policy
  B. file reputation
  D. Traffic Telemetry

• Question 575:

  DRAG DROP

  Drag and drop the snippets onto the blanks within the code to construct a script that configures a loopback interface with an IP address. Not all options are used.

  Select and Place:

  

  

• Question 576:

  Which QoS feature uses the IP Precedence bits in the ToS field of the IP packet header to partition traffic into different priority levels?

  A. marking
  B. shaping
  C. policing
  D. classification
  D. classification

  ---

  Explanation

  Using packet classification, you can partition network traffic into multiple priority levels or classes of service.

  ..packet classification features, such as IP precedence, to select packets (or traffic flows) traversing a router or interface for different types of QoS service. For example, using the three precedence bits in the type of service (ToS) field of the IP packet header...

  https://www.cisco.com/c/en/us/td/docs/routers/ncs4000/software/qos/configuration_guide/b-qos-cg/b-qos-cg_chapter_0101.pdf#_OPENTOPIC_TOC_PROCESSING_d108e235

• Question 577:

  A customer has a pair of Cisco 5520 WLCs set up in an SSO cluster to manage all APs. Guest traffic is anchored to a Cisco 3504 WLC located in a DMZ. Which action is needed to ensure that the EoIP tunnel remains in an UP state in the event of failover on the SSO cluster?

  A. Use the mobility MAC when the mobility peer is configured
  B. Use the same mobility domain on all WLCs
  C. Enable default gateway reachability check
  D. Configure back-to-back connectivity on the RP ports
  A. Use the mobility MAC when the mobility peer is configured

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/High_Availability_DG.html

• Question 578:

  A customer requested a GRE tunnel through the provider network between two customer sites using loopback to hide internal networks. Which configuration on R2 establishes the tunnel with R1?

  A. R2(config)#interface Tunnel1R2(config-if)#ip address 172.20.1.2 255.255.255.0R2(config-if)#ip mtu 1500R2(config-if}#ip tcp adjust-mss 1360R2(config-if)#tunnel source 192.168.20.1R2(config-if)#tunnel destination 10.10.1.1
  B. R2(config)#interface Tunnel1R2(config-if)#ip address 172.20.1.2 255.255.255.0R2(config-if)#ip mtu 1400R2(config-if)#ip tcp adjust-mss 1360R2(config-if)#tunnel source 192.168.20.1R2(config-if)#tunnel destination 192.168.10.1
  C. R2(config)#interface Tunnel1R2(config-if)#ip address 172.20.1.2 255.255.255.0R2(config-if)#ip mtu 1400R2(config-if)#ip tcp adjust-mss 1360R2(config-if)#tunnel source 10.10.2.2R2(config-if)#tunnel destination 10.10.1.1
  D. R2(config)#interface Tunnel1R2(config-if)#ip address 172.20.1.2 255.255.255.0R2(config-if)#ip mtu 1500R2(config-if)#ip tcp adjust-mss 1360R2(config-if)#tunnel source 10.10.2.2R2(config-if)#tunnel destination 10.10.1.1Correct
  C. R2(config)#interface Tunnel1R2(config-if)#ip address 172.20.1.2 255.255.255.0R2(config-if)#ip mtu 1400R2(config-if)#ip tcp adjust-mss 1360R2(config-if)#tunnel source 10.10.2.2R2(config-if)#tunnel destination 10.10.1.1

• Question 579:

  An engineer configures GigabitEthernet 0/1 for VRRP group 115. The router must assume the primary role when it has the highest priority in the group.

  Which command set is required to complete this task?

  interface GigabitEthernet0/1 ip address 10.10.10.2 255.255.255.0 vrrp 115 ip 10.10.10.1 vrrp 115 authentication 406630697

  A. Router(config if)# vrrp 115 track 1 decrement 100Router(config-if)# vrrp 115 preempt
  B. Router(config-if)# vrrp 115 priority 100
  C. Router(config-if)# vrrp 115 track 1 decrement 10Router(config-if)# vrrp 115 preempt
  D. Router(config-if)# standby 115 priority 100Router(config-if)# standby 115 preempt
  C. Router(config-if)# vrrp 115 track 1 decrement 10Router(config-if)# vrrp 115 preempt

• Question 580:

  Select the benefits of implementing Cisco DNA Center. (Choose all that apply.)

  A. Simplified management
  B. Automatic VPN tunnelling
  C. One click Configuration
  D. Policy Driven Provisioning
  E. Ensure Network and Appliance performance
  A. Simplified management
  D. Policy Driven Provisioning
  E. Ensure Network and Appliance performance

  ---

  Explanation

  https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna-center/nb-06-dna-center-so-cte-en.html#Benefits