Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 671:

  A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic.

  Which of the following should the administrator use?

  A. SNMPtrap
  B. Port mirroring
  C. Syslog collection
  D. API integration
  B. Port mirroring

• Question 672:

  Refer to the exhibit.

  Which command set must be applied on R1 to establish a BGP neighborship with R2 and to allow communication from R1 to reach the networks?

  

  A. router bgp 1200 network 209.165.200.224 mask 255.255.255.224 neighbor 209.165.202.130 remote-as 1201
  B. router bgp 1200 network 209.165.201.0 mask 255.255.255.224 neighbor 209.165.202.130 remote-as 1201
  C. router bgp 1200 network 209.165.200.224 mask 255.255.255.224 neighbor 209.165.202.130 remote-as 1200
  D. router bgp 1200 network 209.165.200.224 mask 255.255.255.224 neighbor 209.165.201.2 remote-as 1200
  A. router bgp 1200 network 209.165.200.224 mask 255.255.255.224 neighbor 209.165.202.130 remote-as 1201

• Question 673:

  Which tool functions in a push model, supports languages like Python or Ruby, and does not require an agent to be installed per host?

  A. Puppet
  B. Ansible
  C. Saltstack
  D. Chef
  B. Ansible

• Question 674:

  Which two methods are used to interconnect two Cisco SD-Access Fabric sites? (Choose two.)

  A. SD-Access transit
  B. fabric interconnect
  C. wireless transit
  D. IP-based transit
  E. SAN transit
  A. SD-Access transit
  D. IP-based transit

• Question 675:

  What is a characteristic of Layer 3 roaming?

  A. It provides seamles roaming between APs that are connected to different Layer 3 networks and different mobility groups.
  B. It is only supported on controllers that run SSO.
  C. It provides seamless client roaming between APs in different Layer 3 networks but within the same mobility group
  D. Clients must obtain a new IP address when they roam between APs
  C. It provides seamless client roaming between APs in different Layer 3 networks but within the same mobility group

• Question 676:

  DRAG DROP

  Drag and drop the Qos mechanisms from the left to the correct descriptions on the right

  Select and Place:

  

  

• Question 677:

  What is the recommended MTU size for a Cisco SD-Access Fabric?

  A. 1500
  B. 9100
  C. 4464
  D. 17914
  B. 9100

  ---

  Explanation

  VXLAN adds 50 bytes to the original packet. The common denominator and recommended MTU value available on devices operating in a fabric role is 9100. Network should have a minimum starting MTU of at least 1550 bytes to support the fabric overlay. MTU values between 1550 and 9100 are supported along with MTU values larger than 9100 though there may be additional configuration and limitations based on the original packet size. MTU 9100 is provisioned as part of LAN Automation. Devices in the same routing domain and Layer 2 domain should be configured with a consistent MTU size to support routing protocol adjacencies and packet forwarding without fragmentation.

• Question 678:

  What are two characteristics of VXLAN? (Choose two)

  A. It uses VTEPs to encapsulate and decapsulate frames.
  B. It has a 12-bit network identifier
  C. It allows for up to 16 million VXLAN segments
  D. It lacks support for host mobility
  E. It extends Layer 2 and Layer 3 overlay networks over a Layer 2 underlay.
  A. It uses VTEPs to encapsulate and decapsulate frames.
  C. It allows for up to 16 million VXLAN segments

• Question 679:

  Refer to the exhibit.

  

  Remote users cannot access the Internet but can upload files to the storage server.

  Which configuration must be applied to allow Internet access?

  A. ciscoasa(config)# access-list MAIL_AUTH extended permit udp any any eq http ciscoasa(config)# aaa authentication listener http outside redirect
  B. ciscoasa(config)# access-list MAIL_AUTH extended permit tcp any any eq www ciscoasa(config)# aaa authentication listener http inside redirect
  C. ciscoasa(config)# access-list MAIL_AUTH extended permit tcp any any eq http ciscoasa(config)# aaa authentication listener http inside port 43
  D. ciscoasa(config)# access-list HTTP_AUTH extended permit udp any any eq http ciscoasa(config)# aaa authentication listener http outside port 43
  B. ciscoasa(config)# access-list MAIL_AUTH extended permit tcp any any eq www ciscoasa(config)# aaa authentication listener http inside redirect

• Question 680:

  With IGMPv2, which multicast group address does the IGMP querier use to send query messages to all hosts on the LAN?

  A. 239.0.0.2
  B. 224.0.0.1
  C. 239.0.0.1
  D. 224.0.0.2
  B. 224.0.0.1