Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 631:

  Refer to the exhibit.

  

  An engineer entered the no spanning-tree bpduguard enable on interface fa1/0/7 command.

  Which statement describes the effect of this command?

  A. Fa1/0/7 remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode
  B. Interface Fa1/0/7 remains in err-disabled state until the errdisable recovery cause bpduguard command is entered in the interface configuration mode
  C. Fa1/0/7 remains in err-disabled state until the errdisable recovery bpduguard command is entered in the interface configuration mode
  D. Interface Fa1/0/7 remains in err-disabled state until the spanning-tree portfast bpduguard disable command is entered in the interface configuration mode
  E. Interface Fa1/0/7 returns to an up and operational state
  A. Fa1/0/7 remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode

• Question 632:

  Refer to the exhibit.

  

  After unsuccessfully configuring an EtherChannel link, an engineer enables debugging.

  Which action will resolve the issue?

  A. Configure the EtherChannel members in desirable mode.
  B. Set the EtherChannel to mode on.
  C. Set the EtherChannel to mode active.
  D. Configure the EtherChannel members in passive mode.
  C. Set the EtherChannel to mode active.

• Question 633:

  When is the Design workflow used In Cisco DNA Center?

  A. in a greenfleld deployment, with no existing infrastructure
  B. in a greenfield or brownfield deployment, to wipe out existing data
  C. in a brownfield deployment, to modify configuration of existing devices in the network
  D. in a brownfield deployment, to provision and onboard new network devices
  A. in a greenfleld deployment, with no existing infrastructure

  ---

  Explanation

  "The Design area is where you create the structure and framework of your network, including the physical topology, network settings, and device type profiles that you can apply to devices throughout your network. Use the Design workflow if you do not already have an existing infrastructure. If you have an existing infrastructure, use the Discovery feature."

• Question 634:

  An engineer must configure an EXEC authorization list that first checks a AAA server then a local username. If both methods fail, the user is denied.

  Which configuration should be applied?

  A. aaa authorization exec default local group tacacs+
  B. aaa authorization exec default local group radius none
  C. aaa authorization exec default group radius local none
  D. aaa authorization exec default group radius local
  D. aaa authorization exec default group radius local

• Question 635:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary pre-configurations have been applied.

  5. Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed tasks.

  6. Do not change the enable password or hostname for any device.

  7. Save your configurations to NVRAM before moving to the next item.

  8. Click Next at the bottom of the screen to submit this lab and move to the next question.

  9. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  1

  Tasks

  Configure R1 according to the topology to achieve these results:

  1. Configure eBGP using Loopback 0 for the router-id. Do not use the address-family command to accomplish this.

  2. Advertise R1's Loopback 100 and Loopback 200 networks to AS200 and AS300.

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  First we need to know the IP addresses of loopback100 and 200 by using the "show ip int brief" command. If we assume that the IP address for loopback 100 is 100.100.100.1 and for loopback 200 it is 200.200.200.1, then the answer is

  below:

  router bgp 100

  router-id Loopback0 neighbor 209.165.200.229 remote-as 200 neighbor 209.165.200.230 remote-as 300 network 100.100.100.1 mask 255.255.255.255 network 200.200.200.1 mask 255.255.255.255

• Question 636:

  Which requirement for an Ansible-managed node is true?

  A. It must be a Linux server or a Cisco device.
  B. It must have an SSH server running.
  C. It must support ad hoc commands.
  D. It must have an Ansible Tower installed.
  B. It must have an SSH server running.

• Question 637:

  Which two operations are valid for RESTCONF? (Choose two)

  A. PULL
  B. ADD
  C. HEAD
  D. REMOVE
  E. GET
  F. PUSH
  C. HEAD
  E. GET

• Question 638:

  What is a characteristic of a traditional WAN?

  A. low complexity and high overall solution scale
  B. centralized reachability, security, and application policies
  C. operates over DTLS and TLS authenticated and secured tunnels
  D. united data plane and control plane
  D. united data plane and control plane

• Question 639:

  

  Refer to the exhibit. R6 should reach R1 via R5>R2>R1.

  Which action resolves the issue?

  A. Decrease the cost to 2 between R6-R5-R2.
  B. Decrease the cost to 41 between R2 and R1.
  C. Increase the cost to 61 between R2 and R3.
  D. Increase the cost to 61 between R2-R3-R1.
  C. Increase the cost to 61 between R2 and R3.

  ---

  Explanation

  The correct answer should be C.

  Answer B cannot be correct because in this case, traffic will be forwarded via R2-R3-R1 ( which has a total cost of 40 and is not the desired path) . R2-R1 has a total cost of 41 which is not lower than 40. Increasing the cost between R2 and R3 to 61 will be our best choice because the total cost via R2-R3-R1 will be 81 so this will not be the best path, making our desired path R2-R1 the best one ( with a cost of 80).

• Question 640:

  Which configuration filters out DOT1X messages in the format shown below from being sent toward Syslog server 10.15.20.33?

  Nov 20 13:47:32/553 %DOT1X-5-FAIL:Authentication failed for client (e04f.438e.de4f) on interface Gi1/0/1 AudtiSessionID 0A0B50A5000004543910739E

  A. logging discriminator DOT1X facility drops DOT1X logging host 10.15.20.33 discriminator DOT1X
  B. logging discriminator DOT1X msg-body drops DOTX logging host 10.15.20.33 discriminator DOTX
  C. logging discriminator DOT1X mnemonics includes DOTX logging host 10.15.20.33 discriminator DOT1X
  D. logging discriminator DOT1X mnemonics includes DOT1X logging host 10.15.20.33 discriminator DOTX
  A. logging discriminator DOT1X facility drops DOT1X logging host 10.15.20.33 discriminator DOT1X