Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 641:

  Refer to the exhibit.

  flow monitor FLOW-MONITOR-1

  record netflow ipv6 original-input

  exit

  !

  sampler SAMPLER-1

  mode deterministic 1 out-of 2 exit

  !

  ip cef

  ipv6 cef

  !

  interface GigabieEthernet 0/0/0

  ipv6 address 2001:DB8:2ABCD::2/48

  ipv6 flow monitro FLOW-MONITOR-1 sampler SAMPLER-1 input

  What is the effect of introducing the sampler feature into the Flexible NetFlow configuration on the router?

  A. NetFlow updates to the collector are sent 50% less frequently.
  B. Every second IPv4 packet is forwarded to the collector for inspection.
  C. CPU and memory utilization are reduced when compared with what is required for full NetFlow.
  D. The resolution of sampling data increases, but it requires more performance from the router.
  C. CPU and memory utilization are reduced when compared with what is required for full NetFlow.

  ---

  Explanation

  it's about what record the router is analyzing and not about what is been sent to the collector.

• Question 642:

  In which two ways does TCAM differ from CAM? (Choose two.)

  A. CAM is used to make Layer 2 forwarding decisions, and TCAM is used for Layer 3 address lookups.
  B. The MAC address table is contained in CAM, and ACL and QoS Information Is stored in TCAM.
  C. CAM Is used by routers for IP address lookups, and TCAM is used to make Layer 2 forwarding decisions.
  D. CAM is used for software switching mechanisms, and TCAM Is used for hardware switching mechanisms.
  E. The MAC address table Is contained in TCAM, and ACL and QoS information is stored in CAM.
  A. CAM is used to make Layer 2 forwarding decisions, and TCAM is used for Layer 3 address lookups.
  B. The MAC address table is contained in CAM, and ACL and QoS Information Is stored in TCAM.

• Question 643:

  DRAG DROP

  Drag and drop the characteristics from the left onto the orchestration tool classifications on the right.

  Select and Place:

  

  

• Question 644:

  Which of the following fiber connector types is the most likely to be used on a network interface card?

  A. LC
  B. SC
  C. ST
  D. MPO
  A. LC

• Question 645:

  Which hypervisor requires a host OS to run and is not allowed to directly access the hosts hardware and resources?

  A. native
  B. bare metal
  C. type 1
  D. type 2
  D. type 2

• Question 646:

  Which Cisco FlexConnect state allows wireless users that are connected to the network to continue working after the connection to the WLC has been lost?

  A. Authentication Down/Switching Down
  B. Authentication-Central/Switch-Local
  C. Authentication-Down/Switch-Local
  D. Authentication-Central/Switch-Central
  C. Authentication-Down/Switch-Local

  ---

  Explanation

  Operation Modes

  There are two modes of operation for the FlexConnect AP.

  * Connected mode: The WLC is reachable. In this mode the FlexConnect AP has CAPWAP connectivity with its WLC.

  * Standalone mode: The WLC is unreachable. The FlexConnect has lost or failed to establish CAPWAP connectivity with its WLC. A WAN-link outage between a branch and its central site is a example of such a mode of operation.

  FlexConnect States

  A FlexConnect WLAN, depending on its configuration and network connectivity, is classified as being in one of the following defined states.

  *

  Authentication-Central/Switch-Central: This state represents a WLAN that uses a centralized authentication method such as 802.1X, VPN, or web. User traffic is sent to the WLC via CAPWAP (Central switching). This state is supported only when FlexConnect is in connected mode.

  *

  Authentication Down/Switching Down: Central switched WLANs no longer beacon or respond to probe requests when the FlexConnect AP is in standalone mode. Existing clients are disassociated.

  *

  Authentication-Central/Switch-Local: This state represents a WLAN that uses centralized authentication, but user traffic is switched locally. This state is supported only when the FlexConnect AP is in connected mode.

  *

  Authentication-Down/Switch-Local: A WLAN that requires central authentication rejects new users.

  Existing authenticated users continue to be switched locally until session time-out if configured. The WLAN continues to beacon and respond to probes until there are no more existing users associated to the WLAN. This state occurs as a result of the AP going into standalone mode.

  *

  Authentication-local/switch-local: This state represents a WLAN that uses open, static WEP, shared, or WPA2 PSK security methods. User traffic is switched locally. These are the only security methods supported locally if a FlexConnect goes into standalone mode. The WLAN continues to beacon and respond to probes. Existing users remain connected and new user associations are accepted. If the AP is in connected mode, authentication information for these security types is forwarded to the WLC.

• Question 647:

  What is a characteristic of a Type 2 hypervisor?

  A. It is installed on an operating system and supports other operating systems above it.
  B. It is referred to as a hosted hypervisor.
  C. Problems in the base operating system can affect the entire system.
  D. It is completely independent of the operating system.
  C. Problems in the base operating system can affect the entire system.

  ---

  Explanation

  Type 2 It is completely dependent on Host Operating System for its operations. While having a base operating system allows better specification of policies, any problem in the base operating system affects the entire system even if the hypervisor running above the base OS is secure.

• Question 648:

  Which entity is responsible for maintaining Layer 2 isolation between segments In a VXLAN environment?

  A. switch fabric
  B. VTEP
  C. VNID
  D. host switch
  C. VNID

  ---

  Explanation

  VXLAN uses an 8-byte VXLAN header that consists of a 24-bit VNID and a few reserved bits. The VXLAN header together with the original Ethernet frame goes in the UDP payload. The 24-bit VNID is used to identify Layer 2 segments and to maintain Layer 2 isolation between the segments.

  References:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/vxlan/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_VXLAN_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_VXLAN_Configuration_Guide_7x_chapter_010.html

• Question 649:

  What is a characteristic of MACsec?

  A. 802.1AE is built between the host and switch using the MKA protocol, which negotiates encryption keys based on the primary session key from a successful 802.1X session.
  B. 802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol.
  C. 802.1AE is built between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode).
  D. 802.1AE provides encryption and authentication services.
  A. 802.1AE is built between the host and switch using the MKA protocol, which negotiates encryption keys based on the primary session key from a successful 802.1X session.

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/deploy_guide_c17-663760.html

• Question 650:

  Refer to the exhibit.

  

  An engineer must advertise routes into IPv6 MP-BGP and failed.

  Which configuration resolves the issue on R1?

  A. router bgp 65000 no bgp default ipv4-unicast address-family ipv6 multicast network 2001:DB8::/64
  B. router bgp 65000 no bgp default ipv4-unicast address-family ipv6 unicast network 2001:DB8::/64
  C. router bgp 64900 no bgp default ipv4-unicast address-family ipv6 multicast neighbor 2001:DB8:7000::2 translate-update ipv6 multicast
  D. router bgp 64900 no bgp default ipv4-unicast address-family ipv6 unicast redistribute ospf network 2001:DB9::/64
  A. router bgp 65000 no bgp default ipv4-unicast address-family ipv6 multicast network 2001:DB8::/64