Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 51:

  A network engineer is designing a Qos policy for voice and video applications.

  Which software queuing feature provides strict-priority servicing?

  A. Class-Based Weighted Fair Queuing
  B. Link Fragmentation
  C. Low Larency Queuing
  D. Automatic Qos
  C. Low Larency Queuing

• Question 52:

  An engineer has deployed a single Cisco 5520 WLC with a management IP address of 172.16.50.5/24. The engineer must register 50 new Cisco AIR-CAP2802I-E-K9 access points to the WLC using DHCP option 43. The access points are

  connected to a switch in VLAN 100 that uses the 172.16.100.0/24 subnet. The engineer has configured the DHCP scope on the switch as follows:

  

  The access points are failing to join the wireless LAN controller.

  Which action resolves the issue?

  A. configure option 43 Hex F104.AC10.3205
  B. configure option 43 Hex F104.CA10.3205
  C. configure dns-server 172.16.50.5
  D. configure dns-server 172.16.100.1
  A. configure option 43 Hex F104.AC10.3205

  ---

  Explanation

  172.16.50.5 in hex is We will have the answer from this paragraph: "TLV values for the Option 43 suboption: Type + Length + Value. Type is always the suboption code 0xf1. Length is the number of controller management IP addresses times 4 in hex. Value is the IP address of the controller listed sequentially in hex. For example, suppose there are two controllers with management interface IP addresses, 192.168.10.5 and 192.168.10.20. The type is 0xf1. The length is 2 * 4 = 8 =

  0x08. The IP addresses translates to c0a80a05 (192.168.10.5) and c0a80a14 (192.168.10.20). When the string is assembled, it yields f108c0a80a05c0a80a14. The Cisco IOS IT Certification Guaranteed, The Easy Way! 81command that is added to the DHCP scope is option 43 hex f108c0a80a05c0a80a14."

  References:

  Click

  Therefore in this question the option 43 in hex should be "F104.AC10.3205 (the management IP address of 172.16.50.5 in hex is AC.10.32.05).

• Question 53:

  In a Cisco VXLAN based network, which of the following best describes the main function of a VXLAN Tunnel Endpoint (VTEP)?

  A. A device that performs VXLAN encapsulation and decapsulation.
  B. It is a 24 bit segment ID that defines the broadcast domain.
  C. It is the Logical interface where the encapsulation and de-encapsulation occurs.
  D. It is a device that performs tunneling using GRE.
  A. A device that performs VXLAN encapsulation and decapsulation.

  ---

  Explanation

  VTEP (Virtual Tunnel Endpoint) - This is the device that does the encapsulation and de-encapsulation.

  References:

  https://www.cisco.com/c/en/us/support/docs/switches/nexus-9000-series-switches/118978-config-vxlan-00.html

• Question 54:

  What does the Cisco DNA Center use to enable the delivery of applications through a network and to yield analytics for innovation?

  A. process adapters
  B. Command Runner
  C. intent-based APIs
  D. domain adapters
  C. intent-based APIs

  ---

  Explanation

  The Cisco DNA Center open platform for intent-based networking provides 360- degree extensibility across multiple components, including: + Intent-based APIs leverage the controller to enable business and IT applications to deliver intent to the network and to reap network analytics and insights for IT and business innovation. These enable APIs that allow Cisco DNA Center to receive input from a variety of sources, both internal to IT and from line-of-business applications, related to application policy, provisioning, software image management, and assurance.

  ...

  References:

  https://www.cisco.com/c/en/us/products/collateral/cloud-systemsmanagement/dna-center/nb-06-dna-cent-plat-sol-over-cte-en.html

• Question 55:

  Which two threats does AMP4E have the ability to block? (Choose two.)

  A. DDoS
  B. ransomware
  C. Microsoft Word macro attack
  D. SQL injection
  E. email phishing
  B. ransomware
  C. Microsoft Word macro attack

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/products/collateral/security/amp-for-endpoints/c11-742008-00-cisco-amp-for-endpoints-wp-v2a.pdf

• Question 56:

  Refer to the exhibit.

  Which commands are required to allow SSH connection to the router?

  

  A. Router(config)#access-list 100 permit udp any any eq 22 Router(config)#access-list 101 permit top any any eq 22 Router(config)#class-map class-ssh ONU Router(config-cmap)#match access-group 101 Router(config)#policy-map COPP Router(config-pmap)#police 100000 conform-action transmit
  B. Router(config)#access-list 100 permit top any eq 22 any Router(config)#class-map class-ssh Router(config-cmap)#match access-group 10 Router(config)#policy-map COPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit
  C. Router(config)#access-list 10 permit top any eq 22 any Router(config)#class-map class-ssh Router(config-cmap)#match access-group 10 Router(config)#policy-map COPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit
  D. Router(config)#access-list 100 permit tcp any any eq 22 Router(config)#access-list 101 permit tcp any any eq 22 Router(config)#class-map class-ssh Router(config-cmap)#match access-group 101 Router(config)#policy-map COPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit
  D. Router(config)#access-list 100 permit tcp any any eq 22 Router(config)#access-list 101 permit tcp any any eq 22 Router(config)#class-map class-ssh Router(config-cmap)#match access-group 101 Router(config)#policy-map COPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit

  ---

  Explanation

  the ACL itself is wrong, the eq keyword should be placed at the end because we want to match incoming ssh requests so the destination "ssh server" will use port 22, and the source "ssh client" will use a random port number.

• Question 57:

  Refer to the exhibit.

  

  

  Why does the OSPF neighborship fail between the two interfaces?

  A. The IP subnet mask is not the same.
  B. There is a mismatch in the OSPF interface network type.
  C. The OSPF timers are different.
  D. The MTU is nor the same.
  A. The IP subnet mask is not the same.

  ---

  Explanation

  R2: /30 vs

  R3: /29

• Question 58:

  DRAG DROP

  Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.

  Select and Place:

  

  

  ---

  Chef = procedural and utilizes the knife tool SaltStack = declarative and utilizes SSH

• Question 59:

  Refer to the exhibit.

  

  An engineer configured TACACS+ to authenticate remote users, but the configuration is not working as expected.

  Which configuration must be applied to enable access?

  A. R1 (config)# ip tacacs source-interface Gig 0/0
  B. R1 (config)# tacacs server prod R1(config-server-tacacs)# port 1020
  C. R1 (config)# aaa authorization exec default group tacacs+ local
  D. R1 (config)# tacacs server prod R1(config-server-tacacs)# key cisco123
  D. R1 (config)# tacacs server prod R1(config-server-tacacs)# key cisco123

• Question 60:

  What are two common sources of interference for Wi-Fi networks? (Choose two.)

  A. LED lights
  B. radar
  C. fire alarm
  D. conventional oven
  E. rogue AP
  B. radar
  E. rogue AP