Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 581:

  What are two considerations when using SSO as a network redundancy feature? (Choose two)

  A. both supervisors must be configured separately
  B. the multicast state is preserved during switchover
  C. must be combined with NSF to support uninterrupted Layer 2 operations
  D. must be combined with NSF to support uninterrupted Layer 3 operations
  E. requires synchronization between supervisors in order to guarantee continuous connectivity
  D. must be combined with NSF to support uninterrupted Layer 3 operations
  E. requires synchronization between supervisors in order to guarantee continuous connectivity

  ---

  Explanation

  While SSO is happening, routing protocol communication between 2 supervisor stopped because lost of adjacency.

  It and cause interuption, to avoid this we need NFS.

  in order for NFS to work properly, both supervisor must NFS.

  Cisco IOS Nonstop Forwarding(NSF) always runs with stateful switchover (SSO) and provides redundancy for Layer 3 traffic.

  https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3se/consolidated_guide/b_consolidated_3850_3se_cg_chapter_01101110.pdf

• Question 582:

  Refer to the exhibit.

  

  What are two effect of this configuration? (Choose two.)

  A. Inside source addresses are translated to the 209.165.201.0/27 subnet.
  B. It establishes a one-to-one NAT translation.
  C. The 10.1.1.0/27 subnet is assigned as the inside global address range.
  D. The 209.165.201.0/27 subnet is assigned as the outside local address range.
  E. The 10.1.1.0/27 subnet is assigned as the inside local addresses.
  A. Inside source addresses are translated to the 209.165.201.0/27 subnet.
  E. The 10.1.1.0/27 subnet is assigned as the inside local addresses.

• Question 583:

  Which feature provides data-plane security for Cisco Catalyst SD-WAN networks?

  A. IPsec
  B. SSH
  C. IPS
  D. TLS/DTLS
  A. IPsec

• Question 584:

  DRAG DROP

  Drag and drop packet switching architecture from the left onto the correct positions on the right.

  Select and Place:

  

  

• Question 585:

  DRAG DROP

  Drag and drop the REST API authentication method from the left to the description on the right.

  Select and Place:

  

  

• Question 586:

  A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic.

  Which of the following should the administrator use?

  A. SNMPtrap
  B. Port mirroring
  C. Syslog collection
  D. API integration
  B. Port mirroring

• Question 587:

  Which action is a LISP ITR responsible for?

  A. responding to map-request messages
  B. forwarding user data traffic
  C. finding EID-to-RLOC mappings
  D. accepting registration requests from ETRs
  C. finding EID-to-RLOC mappings

  ---

  Explanation

  LISP Ingress Tunnel Router (ITR) An ITR is responsible for finding EID-to-RLOC mappings for all traffic destined for LISP-capable sites. When the ITR receives a packet destined for an EID, it first looks for the EID in its mapping cache. If the ITR finds a match, it encapsulates the packet inside a LISP header with one of its RLOCs as the IP source address

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/15-mt/irl-15-mt-book/irl-overview.pdf

• Question 588:

  Which function does a fabric edge node perform in an SD-Access deployment?

  A. Connects the SD-Access fabric to another fabric or external Layer 3 networks.
  B. Connects endpoints to the fabric and forwards their traffic.
  C. Provides reachability border nodes in the fabric underlay.
  D. Encapsulates end-user data traffic into LISP.
  B. Connects endpoints to the fabric and forwards their traffic.

  ---

  Explanation

  There are five basic device roles in the fabric overlay:

  + Control plane node: This node contains the settings, protocols, and mapping tables to provide the endpoint-to-location (EID-to-RLOC) mapping system for the fabric overlay. + Fabric border node: This fabric device (for example, core layer device) connects external Layer 3 networks to the SDA fabric. + Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.

  + Fabric WLAN controller (WLC): This fabric device connects APs and wireless endpoints to the SDA fabric.

  + Intermediate nodes: These are intermediate routers or extended switches that do not provide any sort of SD-Access fabric role other than underlay services.

  

• Question 589:

  What is the data policy in a Cisco SD-WAN deployment?

  A. list of ordered statements that define node configurations and authentication used within the SD-WAN overlay
  B. Set of statements that defines how data is forwarded based on IP packet information and specific VPNs
  C. detailed database mapping several kinds of addresses with their corresponding location
  D. group of services tested to guarantee devices and links liveliness within the SD-WAN overlay
  B. Set of statements that defines how data is forwarded based on IP packet information and specific VPNs

  ---

  Explanation

  The Cisco SD-WAN architecture implements two types of data policy:

  Centralized data policy controls the flow of data traffic based on the source and destination addresses and ports and DSCP fields in the packet's IP header (referred to as a 5-tuple), and based on network segmentation and VPN membership. These types of data policy are provisioned centrally, on the Cisco vSmart controller, and they affect traffic flow across the entire network.

  Localized data policy controls the flow of data traffic into and out of interfaces and interface queues on a Cisco vEdge device. This type of data policy is provisioned locally using access lists. It allows you to classify traffic and map different classes to different queues. It also allows you to mirror traffic and to police the rate at which data traffic is transmitted and received.

• Question 590:

  What is a characteristic of omnidirectional antennas?

  A. It includes dish antennas.
  B. It has high gain.
  C. It provides the most focused and narrow beamwidth.
  D. It includes dipole antennas.
  D. It includes dipole antennas.