Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 631:

  Which architectural component enables a zero-trust security model?

  A. management plane
  B. plug-and-play
  C. data plane
  D. control plane
  D. control plane

• Question 632:

  What are two differences between the RIB and the FIB? (Choose two.)

  A. The FIB is derived from the data plane, and the RIB is derived from the FIB.
  B. The RIB is a database of routing prefixes, and the FIB is the Information used to choose the egress interface for each packet.
  C. FIB is a database of routing prefixes, and the RIB is the information used to choose the egress interface for each packet.
  D. The FIB is derived from the control plane, and the RIB is derived from the FIB.
  E. The RIB is derived from the control plane, and the FIB is derived from the RIB.
  B. The RIB is a database of routing prefixes, and the FIB is the Information used to choose the egress interface for each packet.
  E. The RIB is derived from the control plane, and the FIB is derived from the RIB.

  ---

  Explanation

  The Forwarding Information Base (FIB) contains destination reachability information as well as next hop information. This information is then used by the router to make forwarding decisions. The FIB allows for very efficient and easy lookups.

• Question 633:

  What is a characteristic of a WLC that is in master controller mode?

  A. All new APs that join the WLAN are assigned to the master controller.
  B. The master controller is responsible for load balancing all connecting clients to other controllers.
  C. All wireless LAN controllers are managed by the master controller.
  D. Configuration on the master controller is executed on all wireless LAN controllers.
  A. All new APs that join the WLAN are assigned to the master controller.

  ---

  Explanation

  When should I use the master controller mode on a WLC? ?When there is a master controller enabled, all newly added access points with no primary, secondary, or tertiary controllers assigned associate with the master controller on the same subnet.

• Question 634:

  Which deployment option of Cisco NQFW provides scalability?

  A. clustering
  B. Inline tap
  C. high availability
  D. tap
  C. high availability

• Question 635:

  What is the centralized control policy in a Cisco SD-WAN deployment?

  A. list of ordered statements that define user access policies
  B. set of statements that defines how routing is performed
  C. set of rules that governs nodes authentication within the cloud
  D. list of enabled services for all nodes within the cloud
  B. set of statements that defines how routing is performed

• Question 636:

  Refer to the exhibit.

  

  Link 1 uses a copper connection and link 2 uses a fiber connection. The fiber port must be the primary port for all forwarding. The output of the show spanning- tree command on SW2 shows that the fiber port is blocked by Spanning Tree.

  After entering the spanning-tree port-priority 32 command on G0/1 on SW2, the port remains blocked.

  Which command should be entered on the ports connected to Link 2 is resolve the issue?

  A. Enter spanning-tree port-priority 64 on SW2
  B. Enter spanning-tree port-priority 224 on SW1.
  C. Enter spanning-tree port-priority 4 on SW2.
  D. Enter spanning-tree port-priority 32 on SW1.
  D. Enter spanning-tree port-priority 32 on SW1.

• Question 637:

  Refer to the exhibit.

  

  These commands have been added to the configuration of a switch.

  Which command flags an error if it is added to this configuration?

  A. monitor session 1 source interface port-channel 6
  B. monitor session 1 source vlan 10
  C. monitor session 1 source interface FastEthernet0/1 rx
  D. monitor session 1 source interface port-channel 7, port-channel 8
  B. monitor session 1 source vlan 10

  ---

  Explanation

  RSPAN consists of at least one RSPAN source session, an RSPAN VLAN, and at least one RSPAN destination session. You separately configure RSPAN source sessions and RSPAN destination sessions on different network devices. To configure an RSPAN source session on a device, you associate a set of source ports or source VLANs with an RSPAN VLAN.

  Traffic monitoring in a SPAN session has these restrictions: + Sources can be ports or VLANs, but you cannot mix source ports and source VLANs in the same session.

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750xscg/swspan.html

  Therefore in this question, we cannot configure a source VLAN because we configured source ports for RSPAN session 1 already.

• Question 638:

  Refer to the exhibit.

  

  A network engineer checks connectivity between two routers. The engineer can ping the remote endpoint but cannot see an ARP entry. Why is there no ARP entry?

  A. The ping command must be executed in the global routing table.
  B. Interface FastEthernet0/0 Is configured in VRF CUST-A, so the ARP entry is also in that VRF.
  C. When VRFs are used. ARP protocol must be enabled In each VRF.
  D. When VRFs are used. ARP protocol is disabled in the global routing table.
  B. Interface FastEthernet0/0 Is configured in VRF CUST-A, so the ARP entry is also in that VRF.

• Question 639:

  Refer to the exhibit.

  

  An engineer must send the 172.16.2.0 /24 user traffic to a packet capture tool to troubleshoot an issue. Which action completes the configuration?

  A. Encrypt the traffic between the users and the monitoring servers.
  B. Disable the spanning tree protocol on the monitoring server VLAN.
  C. Enable the Cisco Discovery Protocol on the server interfaces.
  D. Define the remote span VLAN on SW1 and SW2.
  D. Define the remote span VLAN on SW1 and SW2.

• Question 640:

  DRAG DROP

  Drag and drop the characteristics from the left onto the deployment models on the right.

  Select and Place: