Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 601:

  Refer to the exhibit.

  

  An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts.

  Which command set accomplishes this task?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  Explanation

  In this case we need to configure a VLAN access-map to deny HTTP traffic and apply it to VLAN 10. To do it, first create an access-list, by which interesting traffic will be matched. The principle of VLAN access-map config is similar to the

  route-map principle.

  After this we'll create a vlan access-map, which has two main parameters: action and match. Match: by this parameter the interesting traffic is matched and here RACL or MAC ACL can be applied as well. Action: what to do with matched traffic. Two main parameters exist: Drop and Forward. In case of Drop, matched traffic will be dropped, and in case of forward, matched traffic will be allowed. A good reference and example can be found at

  https://www.networkstraining.com/vlan-access-mapexample-configuration/

• Question 602:

  DRAG DROP

  Drag and drop the command snippets from the right onto the boxes to create an EEM applet that will enable interface LoopbackO when the logging message 'Interface LoopbackO. changed state to administratively down" is received. Not all commands are used and some commands are used more than once.

  Select and Place:

  

  

• Question 603:

  Refer to the exhibit.

  

  You are configuring a controller that runs Cisco IOS XE by using the CLI.

  Which three configuration options are used for 802.11w Protected Management Frames? (Choose three.)

  A. mandatory
  B. association-comeback
  C. SA teardown protection
  D. saquery-retry-time
  E. enable
  F. comeback-time
  A. mandatory
  B. association-comeback
  D. saquery-retry-time

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/5700/software/release/ios_xe_33/11rkw_DeploymentGuide/b_802point11rkw_deployment_guide_cisco_ios_xe_release33/b_802point11rkw_deployment_guide_cisco_ios_xe_release33_chapter_0100.pdf

• Question 604:

  Refer to the exhibit.

  

  An administrator must collect basic statistics about the approximate amount of IPv4 and IPv6 flows entering Gi0/0 using NetFlow. However, the administrator is concerned that NetFlow processing during periods of high utilization on Gi0/0 will overwhelm the router CPU.

  Which configuration minimizes CPU impact and keeps the data flows across Gi0/0 intact?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 605:

  How is Layer 3 roaming accomplished in a unified wireless deployment?

  A. An EoIP tunnel is created between the client and the anchor controller to provide seamless connectivity as the client is associated with the new AP.
  B. The client entry on the original controller is passed to the database on the new controller.
  C. The new controller assigns an IP address from the new subnet to the client
  D. The client database on the original controller is updated the anchor entry, and the new controller database is updated with the foreign entry.
  D. The client database on the original controller is updated the anchor entry, and the new controller database is updated with the foreign entry.

• Question 606:

  Which of the following attacks becomes more effective because of global leakages of users' passwords?

  A. Dictionary
  B. Brute-force
  C. Phishing
  D. Deauthentication
  A. Dictionary

• Question 607:

  Which IPv4 packet field carries the QoS IP classification marking?

  A. ID
  B. TTL
  C. FCS
  D. ToS
  D. ToS

  ---

  Explanation

  The classification is carried in the IP packet header, using 6 bits from the deprecated IP type of service (ToS) field to carry the classification (class) information. Classification can also be carried in the Layer 2 frame.

• Question 608:

  A client device roams between wireless LAN controllers that are mobility peers. Both controllers have dynamic interface on the same client VLAN.

  Which type of roam is described?

  A. intra-VLAN
  B. inter-controller
  C. intra-controller
  D. inter-subnet
  B. inter-controller

• Question 609:

  Refer to the exhibit.

  

  An engineer must permit traffic from these networks and block all other traffic An informational log message should be triggered when traffic enters from these prefixes

  Which access list must be used?

  A. access-list acl_subnets permit ip 10.0.32.0 0 0.0.255 log
  B. access-list acl_subn*ls permit ip 10.0.32.0 0.0.7.255 log
  C. access-list acl_subnets permit ip 10.0.32.0 0.0.7.255 access-list acl_subnets deny ip any log
  D. access-list acl_subnets permit ip 10.0.32.0 255.255.248.0 log
  B. access-list acl_subn*ls permit ip 10.0.32.0 0.0.7.255 log

• Question 610:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Configure an EEM applet on LAB-RTR-01 that will automatically re-enable interface Loopback0 if it is administratively shut down.

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  event manager applet LOOP0

  event syslog pattern "Interface Loopback0.* down" period 1 action 1.0 syslog msg "Interface Loopback0 DOWN"

  action 2.0 cli command "enable"

  action 2.1 cli command "config t" action 2.2 cli command "interface loopback 0"

  action 2.3 cli command "no shutdown" action 3.0 syslog msg "Interface Loopback0 UP"