Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 671:

  Refer to the exhibit.

  

  Which set of commands is required to configure and verify the VRF for Site 1 Network A on router R1?

  A. R1#ip routing R1#(config)#ip vrf 100 R1#(config-vrf)#rd 100:1 R1#(config-vrf)# address family ipv4 ! R1(config)#interface Gi0/2 R1(config-if)#ip address 10.0.1.1 255.255.255.0 R1#show ip route

  B. R1#ip routing R1#(config)#ip vrf 100 ! R1(config)#interface Gi0/2 R1(config-if)#ip address 10.0.1.1 255.255.255.0 R1#showip route

  C. R1#ip routing

  R1#(config)#ip vrf 100

  !

  R1(config)#interface Gi0/2

  R1(config-if)#ip vrf forwarding 100

  R1(config-if)#ip address 10.0.1.1 255.255.255.0

  R1#show ip vrf

  D. R1#ip routing R1#(config)#ip vrf 100 ! R1(config)#interface Gi0/2 R1(config-if)#ip address 10.0.1.1 255.255.255.0 R1#showip route

  Correct Answer: C

• Question 672:

  By default, which virtual MAC address does HSRP group 22 use?

  A. c0:42:01:67:05:16

  B. c0:07:0c:ac:00:22

  C. 00:00:0c:07:ac:16

  D. 00:00:0c:07:ac:22

  Correct Answer: C

  hex 16 == (16x1) + 6 == 22

• Question 673:

  Which two methods are used to assign security group tags to the user in a Cisco Trust Sec architecture? (Choose two )

  A. modular QoS

  B. policy routing

  C. web authentication

  D. DHCP

  E. IEEE 802.1x

  Correct Answer: CE

  Web authentication

  Used when a user logs in using a web browser. When a user accesses the network using this method, web authentication authenticates the user and assigns a security group tag.

  This is an effective authentication method when the client terminal does not have an 802.1X supplicant function.

  IEEE 802.1x

  A network access control protocol that provides authentication and authorization. It consists of three elements: an authentication server, an authenticator, and a supplicant. When a user connects to a network, they are authenticated using

  802.1x and are granted permission to access the network. Through this authentication process, users are assigned the appropriate security group tag.

• Question 674:

  What is one characteristic of VXLAN?

  A. It supports a maximum of 4096 VLANs.

  B. It supports multitenant segments.

  C. It uses STP to prevent loops in the underlay network.

  D. It uses the Layer 2 header to transfer packets through the network underlay.

  Correct Answer: B

• Question 675:

  When is GLBP preferred over HSRP?

  A. When encrypted helm are required between gateways h a single group.

  B. When the traffic load needs to be shared between multiple gateways using a single virtual IP.

  C. When the gateway routers are a mix of Cisco and non-Cisco routers

  D. When clients need the gateway MAC address lo Be the same between multiple gateways

  Correct Answer: B

• Question 676:

  Refer to the exhibit.

  

  An engineer attempts to configure standby group 512 on interface GigabitEthernet0/1, but the configuration is not accepted. Which command resolves this problem?

  A. standby version 2

  B. standby 512 preempt

  C. standby redirects

  D. standby 512 priority 100

  Correct Answer: A

• Question 677:

  Which device is responsible for finding EID-to-RLOC mappings when traffic is sent to a LISP-capable site?

  A. map server

  B. map resolver

  C. ingress tunnel router

  D. egress tunnel router

  Correct Answer: C

• Question 678:

  Refer to the exhibit. What happens to access interfaces where VLAN 222 is assigned?

  

  A. STP BPDU guard is enabled

  B. A description "RSPAN" is added

  C. They are placed into an inactive state

  D. They cannot provide PoE

  Correct Answer: C

  This is because the exhibit shows the configuration of a remote SPAN (RSPAN) VLAN, which is a special VLAN that is used to transport mirrored traffic from one switch to another switch over a trunk link. The RSPAN VLAN is configured with the remote- span option, which indicates that the VLAN is dedicated for RSPAN use only. The access interfaces where the RSPAN VLAN is assigned are placed into an inactive state, which means that they cannot forward any traffic other than the mirrored traffic. The source of this answer is the Cisco ENCOR v1.1 course, module 6, lesson 6.2: Implementing SPAN, RSPAN, and ERSPAN.

• Question 679:

  Refer to the exhibit.

  

  An engineer must update the existing configuration to achieve these results:

  1.

  Only administrators from the 192.168.1.0/24 subnet can access the vty lines.

  2.

  Access to the vty lines using clear-text protocols is prohibited. Which command set should be applied?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  clear-text protocols is prohibited. Transport input SSH

• Question 680:

  Refer to the exhibit.

  

  Which action results from executing the Python script?

  A. display the output of a command that is entered on that device in a single line

  B. SSH to the IP address that is manually entered on that device

  C. display the output of a command that is entered on that device

  D. display the unformatted output of a command that is entered on that device

  Correct Answer: C