Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 681:

  Refer to the exhibit.

  

  A customer reports occasional brief audio dropouts on its Cisco Wi-Fi phones. The environment consists of a Cisco Catalyst 9800 Series WLC with Catalyst 9120 APs running RRM. The phones connect on the 5- GHz band.

  Which action resolves this issue?

  A. Enable Media Stream Multicast-direct.
  B. Disable Coverage Hole Detection.
  C. Set WMM Policy to Required.
  D. Enable Defer Priority 6.
  C. Set WMM Policy to Required.

• Question 682:

  Which technology is the Cisco SD-Access control plane based on?

  A. IS-IS
  B. LISP
  C. Cisco TrustSec
  D. VXLAN
  B. LISP

• Question 683:

  Refer to the exhibit.

  

  An engineer attempts to configure a trunk between switch sw1 and switch SW2 using DTP, but the trunk does not form.

  Which command should the engineer apply to switch SW2 to resolve this issue?

  A. switchport mode dynamic desirable
  B. switchport nonegotiate
  C. no switchport
  D. switchport mode access
  A. switchport mode dynamic desirable

• Question 684:

  Refer to the exhibit.

  

  OSPF is partially configured on all devices. Complete the configurations to achieve these goals:

  1. Configure R2 to always be the DR in Area

  10. Do not change the router ID.

  2. Configure a single command on R2 to summarize Area 10 routes into a single route.

  A. See the explanation below
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the explanation below

  ---

  Explanation

  R2

  enable

  configure terminal

  interface Ethernet0/1

  ip ospf priority 255

  exit

  router ospf 10

  area 10 range 10.1.0.0 255.255.0.0

  end

  write memory

  Why:

  R2 connects to Area 10 through Ethernet0/1. Setting the OSPF interface priority to 255 makes R2 the preferred DR on that broadcast segment:

  ip ospf priority 255

  The task says not to change the router ID, so the router ID must remain unchanged.

  The Area 10 summary route is configured under the OSPF process:

  area 10 range 10.1.0.0 255.255.0.0

  This summarizes the Area 10 routes into a single inter-area summary route.

• Question 685:

  What are two best practices when designing a campus Layer 3 infrastructure? (Choose two.)

  A. Configure passive-interface on nontransit links.
  B. Implement security features at the core.
  C. Summarize routes from the aggregation layer toward the core layer.
  D. Tune Cisco Express Forwarding load balancing hash for ECMP routing.
  E. Summarize from the access layer toward the aggregation layer.
  C. Summarize routes from the aggregation layer toward the core layer.
  D. Tune Cisco Express Forwarding load balancing hash for ECMP routing.

• Question 686:

  A network administrator applies the following configuration to an IOS device:

  aaa new-model

  aaa authentication login default local group tacacs+

  What is the process of password checks when a login attempt is made to the device?

  A. A TACACS+server is checked first. If that check fail, a database is checked?
  B. A TACACS+server is checked first. If that check fail, a RADIUS server is checked. If that check fail. a local database is checked.
  C. A local database is checked first. If that fails, a TACACS+server is checked, if that check fails, a RADUIS server is checked.
  D. A local database is checked first. If that check fails, a TACACS+server is checked.
  D. A local database is checked first. If that check fails, a TACACS+server is checked.

  ---

  Explanation

  The "aaa authentication login default local group tacacs+" command is broken down as follows:

  + The `aaa authentication' part is simply saying we want to configure authentication settings.

  + The `login' is stating that we want to prompt for a username/ password when a connection is made to the device.

  + The `default' means we want to apply for all login connections (such as tty, vty, console and aux). If we use this keyword, we don't need to configure anything else under tty, vty and aux lines. If we don't use this keyword then we have to specify which line(s) we want to apply the authentication feature.

  + The `local group tacacs+" means all users are authenticated using router's local database (the first method). If the credentials are not found on the local database, then the TACACS+ server is used (the second method).

  References:

  https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/200606-aaa-authentication-login-default-local.html

• Question 687:

  Refer to the exhibit.

  

  On which interfaces should VRRP commands be applied to provide first hop redundancy to PC-01 and PC-02?

  A. G0/0 and G0/1 on Core
  B. G0/0 on Edge-01 and G0/0 on Edge-02
  C. G0/1 on Edge-01 and G0/1 on Edge-02
  D. G0/0 and G0/1 on ASW-01
  C. G0/1 on Edge-01 and G0/1 on Edge-02

  ---

  Explanation

  Correct as the FRRP protocol should be configured on interfaces that have the end nodes network.

• Question 688:

  Why would an engineer use policy-based routing?

  A. To route video traffic using the shortest path to the destination
  B. To route video traffic through a dedicated link
  C. To use multicast for video traffic transmission
  D. To perform traffic shaping to avoid video traffic delay
  B. To route video traffic through a dedicated link

  ---

  Explanation

  The correct answer is Option B. To route video traffic through a dedicated link.

  Policy-based routing allows traffic to be routed according to a configured policy instead of relying only on the normal routing table. An engineer can match specific traffic, such as video traffic, and force it to use a preferred next hop or dedicated link.

  This is useful when certain traffic must follow a specific path for performance, bandwidth, or operational reasons.

  Option A is incorrect because the shortest path is normally selected by the routing table and routing protocol metrics.

  Option C is incorrect because multicast is a separate traffic-forwarding method.

  Option D is incorrect because traffic shaping is a QoS function, not a routing path-selection function.

• Question 689:

  Refer to the exhibit.

  

  R1 and R2 are configured for EIGRP peering using authentication and the neighbors failed to come up.

  Which action resolves the issue?

  A. Configure a matching key-id number on both routers.
  B. Configure a matching lowest key-id on both routers.
  C. Configure a matching key-chain name on both routers.
  D. Configure a matching authentication type on both routers.
  B. Configure a matching lowest key-id on both routers.

• Question 690:

  What is a characteristic of Wi-Fi channels?

  A. The 2.4-GHz band has 24 non-overlapping channels.
  B. Devices that connect to the same Wi-Fi channel reside in the same collision domain.
  C. Wi-Fi channels are spaced 30 MHz apart.
  D. The 5-GHz band offers 11 different channels for Wi-Fi clients.
  B. Devices that connect to the same Wi-Fi channel reside in the same collision domain.