Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 591:

  What is one characteristic of the Cisco SD-Access control plane?

  A. It is based on VXLAN technology.
  B. Each router processes every possible destination and route
  C. It allows host mobility only in the wireless network.
  D. It stores remote routes in a centralized database server
  D. It stores remote routes in a centralized database server

  ---

  Explanation

  A control plane node maintains a host tracking database (HTDB), and also uses Locator/ID Separation Protocol (LISP) to provide a map server, populating the HTDB from fabric edge registration messages; and a map resolver to respond to queries from edge devices requesting location information about destination nodes.

• Question 592:

  Which two statements about Cisco Express Forwarding load balancing are true? (Choose two)

  A. Each hash maps directly to a single entry in the RIB
  B. It combines the source IP address subnet mask to create a hash for each destination
  C. Cisco Express Forwarding can load-balance over a maximum of two destinations
  D. It combines the source and destination IP addresses to create a hash for each destination
  E. Each hash maps directly to a single entry in the adjacency table
  D. It combines the source and destination IP addresses to create a hash for each destination
  E. Each hash maps directly to a single entry in the adjacency table

  ---

  Explanation

  Cisco IOS software basically supports two modes of CEF load balancing: On per-destination or perpacket basis.

  For per destination load balancing a hash is computed out of the source and destination IP address (-> Answer 'It combines the source and destination IP addresses to create a hash for each destination' is correct). This hash points to exactly one of the adjacency entries in the adjacency table (-> Answer 'Each hash maps directly to a single entry in the adjacency table' is correct), providing that the same path is used for all packets with this source/destination address pair. If per packet load balancing is used the packets are distributed round robin over the available paths. In either case the information in the FIB and adjacency tables provide all the necessary forwarding information, just like for non-load balancing operation. The number of paths used is limited by the number of entries the routing protocol puts in the routing table, the default in IOS is 4 entries for most IP routing protocols with the exception of BGP, where it is one entry. The maximum number that can be configured is 6 different paths -> Answer 'Cisco Express Forwarding can load-balance over a maximum of two destinations' is not correct. Reference: https://www.cisco.com/en/US/products/hw/modules/ps2033/ prod_technical_reference 09186a00800afeb7.html

• Question 593:

  DRAG DROP

  Drag and drop the characteristics from the left onto the corresponding infrastructure deployment models on the right.

  Select and Place:

  

  

• Question 594:

  Which mechanism is used to protect the confidentiality of sensitive information exchanged over REST APIs?

  A. TLS
  B. 802.1X
  C. SSH
  D. IPsec
  A. TLS

• Question 595:

  Which First Hop Redundancy Protocol should be used to meet a design requirements for more efficient default bandwidth usage across multiple devices?

  A. GLBP
  B. LCAP
  C. HSRP
  D. VRRP
  A. GLBP

  ---

  Explanation

  The main disadvantage of HSRP and VRRP is that only one gateway is elected to be the active gateway and used to forward traffic whilst the rest are unused until the active one fails. Gateway Load Balancing Protocol (GLBP) is a Cisco proprietary protocol and performs the similar function to HSRP and VRRP but it supports load balancing among members in a GLBP group.

• Question 596:

  Which template is used when multiple templates are grouped together to run in succession in Cisco DNA Center?

  A. composite
  B. regular
  C. project
  D. configuration
  A. composite

• Question 597:

  Which configuration restricts the amount of SSH that a router accepts 100 kbps?

  A. class-map match-all CoPP_SSHmatch access-group name CoPP_SSH!Policy-map CoPP_SSHclass CoPP_SSHpolice cir 100000exceed-action drop! ! !Interface GigabitEthernet0/1ip address 209.165.200.225 255.255.255.0ip access-group CoPP_SSH outduplex autospeed automedia-type rj45service-policy input CoPP_SSH!ip access-list extended CoPP_SSHpermit tcp any any eq 22!
  B. class-map match-all CoPP_SSHmatch access-group name CoPP_SSH!Policy-map CoPP_SSHclass CoPP_SSHpolice cir CoPP_SSHexceed-action drop!Interface GigabitEthernet0/1ip address 209.165.200.225 255.255.255.0ip access-group ... outduplex autospeed automedia-type rj45service-policy input CoPP_SSH!Ip access-list extended CoPP_SSHdeny tcp any any eq 22!
  C. class-map match-all CoPP_SSHmatch access-group name CoPP_SSH!Policy-map CoPP_SSHclass CoPP_SSHpolice cir 100000exceed-action drop!Control-planeservice-policy input CoPP_SSH!Ip access-list extended CoPP_SSHdeny tcp any any eq 22!
  D. class-map match-all CoPP_SSHmatch access-group name CoPP_SSH!Policy-map CoPP_SSHclass CoPP_SSHpolice cir 100000 exceed-action drop!Control-plane transitservice-policy input CoPP_SSH!Ip access-list extended CoPP_SSHpermit tcp any any eq 22!
  C. class-map match-all CoPP_SSHmatch access-group name CoPP_SSH!Policy-map CoPP_SSHclass CoPP_SSHpolice cir 100000exceed-action drop!Control-planeservice-policy input CoPP_SSH!Ip access-list extended CoPP_SSHdeny tcp any any eq 22!

  ---

  Explanation

  CoPP protects the route processor on network devices by treating route processor resources as a separate entity with its own ingress interface (and in some implementations, egress also). CoPP is used to police traffic that is destined to the route processor of the router such as:

  + routing protocols like OSPF, EIGRP, or BGP.

  + Gateway redundancy protocols like HSRP, VRRP, or GLBP. + Network management protocols like telnet, SSH, SNMP, or RADIUS.

  

  Therefore we must apply the CoPP to deal with SSH because it is in the management plane. CoPP must be put under "control-plane" command.

• Question 598:

  A wireless network engineer must configure a WPA2+WPA3 policy with the Personal security type.

  Which action meets this requirement?

  A. Configure the GCMP256 encryption cipher.
  B. Configure the CCMP256 encryption cipher.
  C. Configure the CCMP128 encryption cipher.
  D. Configure the GCMP128 encryption cipher.
  C. Configure the CCMP128 encryption cipher.

• Question 599:

  DRAG DROP

  Drag and drop the characteristics from the left onto the protocols they apply to on the right?

  Select and Place:

  

  

• Question 600:

  Which technology reduces the implementation of STP and leverages both unicast and multicast?

  A. VSS
  B. VXLAN
  C. VPC
  D. VLAN
  B. VXLAN