Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 621:

  "HTTP/1.1 204 content" is returned when cur -I -x DELETE command is issued.

  Which situation has occurred?

  A. The object could not be located at the URI path
  B. The command succeeded in deleting the object
  C. The object was located at the URI, but it could not be deleted.
  D. The URI was invalid
  B. The command succeeded in deleting the object

• Question 622:

  A system must validate access rights to all its resources and must not rely on a cached permission matrix. If the access level to a given resource is revoked but is not reflected in the permission matrix, the security is violates.

  Which term refers to this REST security design principle?

  A. economy of mechanism
  B. complete mediation
  C. separation of privilege
  D. least common mechanism
  B. complete mediation

  ---

  Explanation

  A system should validate access rights to all its resources to ensure that they are allowed and should not rely on the cached permission matrix. If the access level to a given resource is being revoked, but that is not being reflected in the permission matrix, it would be violating security.

  https://medium.com/strike-sh/rest-security-design-principles-434bd6ee57ea

• Question 623:

  Refer to the exhibit.

  

  Which device is considered the supplicant when using network device admission control?

  A. Client
  B. SW1
  C. RADIUS server
  D. R1
  A. Client

  ---

  Explanation

  The correct answer is Option A. Client.

  In 802.1X and network admission control, the supplicant is the endpoint device that requests access to the network.

  The main 802.1X roles are:

  

  In the exhibit, the client is the device trying to gain network access, so it is the supplicant.

  Option B is incorrect because SW1 acts as the authenticator. It controls access to the port and relays authentication messages.

  Option C is incorrect because the RADIUS server is the authentication server.

  Option D is incorrect because R1 is part of the network infrastructure and is not the endpoint requesting admission.

• Question 624:

  An engineer must provide wireless converge in a square office. The engineer has only one AP and believes that it should be placed it in the middle of the room.

  Which antenna type should the engineer use?

  A. directional
  B. polarized
  C. Yagi
  D. omnidirectional
  D. omnidirectional

• Question 625:

  What is the intent API in Cisco Catalyst Center (formerly DNA Center)?

  A. northbound consumer-facing RESTful API, which enables network discovery and configuration management
  B. southbound consumer-facing RESTful API. which enables network discovery and configuration management
  C. interface between the controller and the network devices, which enables network discovery and configuration management
  D. westbound interface, which allows the exchange of data such as ITSM. IPAM, and reporting information
  A. northbound consumer-facing RESTful API, which enables network discovery and configuration management

• Question 626:

  Refer to the exhibit.

  

  Which command is required to validate that an IP SLA configuration matches the traffic between the branch office and the central site?

  A. R1# show ip sla group schedule
  B. R1# show ip route
  C. R1# show ip sla configuration
  D. R1# show ip sla statistics
  D. R1# show ip sla statistics

• Question 627:

  DRAG DROP

  Drag and drop the characteristics from the left onto the appropriate infrastructure deployment types on the right.

  Select and Place:

  

  

• Question 628:

  Which location tracking method is used when locating client devices using Cisco hyperlocation?

  A. angle of arrival
  B. location patterning
  C. TTL
  D. line of sight
  A. angle of arrival

• Question 629:

  An engineer must configure HSRP for VLAN 1200 on SW1. The second switch is configured by using the last usable IP address in the network as the virtual IP.

  Which command set accomplishes litis task?

  A. SW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.254 255.255.255.0 SW1(config-if)# standby version 2 SW1(config-if)# standby 1200 ip 172.12.0.2 SW1(conflg-it)# standby 1200 preempt
  B. SW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.2 255.255.255.0 SW1(config-if)# standby version 2 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(conflg-it)# standby 1200 preempt
  C. SW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.2 255.255.255.0 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(config-if)# standby 1200 timers 5 15 SW1(conflg-it)# standby 1200 preempt
  D. SW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.1 255.255.255.0 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(config-if)# standby 1200 timers 5 15 SW1(conflg-it)# standby 1200 preempt
  B. SW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.2 255.255.255.0 SW1(config-if)# standby version 2 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(conflg-it)# standby 1200 preempt

• Question 630:

  Which technology does VXLAN use to provide segmentation for Layer 2 and Layer 3 traffic?

  A. bridge domain
  B. VLAN
  C. VRF
  D. VNI
  D. VNI

  ---

  Explanation

  VXLAN has a 24-bit VXLAN network identifier (VNI), which allows for up to 16 million (= 224) VXLAN segments to coexist within the same infrastructure. This surely solve the small number of traditional VLANs.