Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 61:

  Refer to the exhibit.

  

  An engineer deploys a script to retrieve the running configuration from a NETCONF-capable Cisco IOS XE device that is configured with default settings. The script fails.

  Which configuration must be applied to retrieve the configuration using NETCONF?

  A. Print (netconf_host.get_config('show running'!)
  B. hostkey_verify=True,
  C. device_params={name':'ios-xe'})
  D. port=830
  D. port=830

• Question 62:

  What is a Type 1 hypervisor?

  A. runs directly on a physical server and depends on a previously installed operating system
  B. runs directly on a physical server and includes its own operating system
  C. runs on a virtual server and depends on an already installed operating system
  D. run on a virtual server and includes its own operating system
  B. runs directly on a physical server and includes its own operating system

  ---

  Explanation

  A type 1 hypervisor, also known as a bare-metal or native hypervisor, runs directly on the physical server and its underlying hardware. It does not depend on a previously installed operating system, but rather includes its own operating system that is designed to run virtual machines. A type 1 hypervisor provides excellent performance and stability, as it has direct access to the hardware resources and can allocate them to the virtual machines. A type 1 hypervisor is typically used in enterprise environments, where multiple virtual machines run on a single server.

• Question 63:

  Refer to the exhibit.

  

  Which two commands ensure that DSW1 becomes root bridge for VLAN 10? (Choose two.)

  A. DSW1(config)#spanning-tree vlan 10 priority 4096
  B. DSW1(config)#spanning-tree vlan 10 priority root
  C. DSW2(config)#spanning-tree vlan 10 priority 61440
  D. DSW1(config)#spanning-tree vlan 10 port-priority 0
  E. DSW2(config)#spanning-tree vlan 20 priority 0
  A. DSW1(config)#spanning-tree vlan 10 priority 4096
  B. DSW1(config)#spanning-tree vlan 10 priority root

• Question 64:

  An engineer must configure a router to leak routes between two VRFs.

  Which configuration must the engineer apply?

  A. ip access-list extended acl-to-red permit ip any 10.1.1.0 0.0.0.255 route-map rm-to-red permit 10 match ip address 50 ip vrf RED rd 1:1 import ipv4 unicast map rm-to-red
  B. ip access-list extended acl-to-red permit ip 10.1.1.0 0.0.0.255 any route-map rm-to-red permit 10 match ip address acl-to-red ip vrf RED rd 1:1 import ipv4 unicast route-map acl-to-red
  C. ip access-list extended acl-to-red permit ip 10.1.1.0 0.0.0.255 any route-map rm-to-red permit 10 match ip address acl-to-red ip vrf RED rd 1:1 import ipv4 unicast map rm-to-red
  D. ip access-list extended acl-to-red permit ip 10.1.1.0 0.0.0.255 any route-map rm-to-red permit 10 match ip address acl-to-red ip vrf RED rd 1:1 import ipv4 unicast acl-to-red
  B. ip access-list extended acl-to-red permit ip 10.1.1.0 0.0.0.255 any route-map rm-to-red permit 10 match ip address acl-to-red ip vrf RED rd 1:1 import ipv4 unicast route-map acl-to-red

  ---

  Explanation

  The key word is using unicast map instead of route-map

  https://www.cisco.com/c/en/us/td/docs/ios/12_2s/feature/guide/fs_bgivt.html

• Question 65:

  Which of the following statements regarding the use of Bidirectional Forwarding Detection (BFD) in a Cisco SD-WAN environment are true?

  A. BFD cannot be disabled on SD-WAN routers.
  B. OSPFv3 is not supported with BFD.
  C. In addition to link failure detection, it is also used to measure loss and latency used by application aware routing.
  D. Is not typically enabled for OMP.
  E. Does not support BGP.
  A. BFD cannot be disabled on SD-WAN routers.
  C. In addition to link failure detection, it is also used to measure loss and latency used by application aware routing.

  ---

  Explanation

  Runs on SD-WAN tunnel to detect failures in the overlay tunnel

  Is enabled by default and cannot be disabled

  Is typically enabled for OMP

  Besides link failures, it also measures latency, loss, and other link statistics used by application-aware routing

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/ios-xe-17/routing-book-xe/m-bfd-for-routing-protocols.html#Cisco_Concept.dita_26cf6354-cce5-4799-b140-f518adc78a40

• Question 66:

  DRAG DROP

  Refer to the exhibit. An engineer must deny HTTP traffic from host A to host V while allowing all other communication between the hosts, drag and drop the commands into the configuration to achieve these results.

  

  Some commands may be used more than once. Not all commands are used.

  Select and Place:

  

  

  ---

  When talking about access-lists or prefix-lists associated with *-maps, Permit and Deny take on new meanings.

  As we all know, a *-list processes each entry until a match is found.

  Once a match is found, processing of the *-list stops.

  *-maps operate the same way.

  - If the matched statement is 'permit,' the *-list reports back to the *-map with a match success, which allows the *-map to process the associated action. No further *-map sequences are processed.

  - If the matched statement is 'deny,' the *-list reports back to the *-map with NO MATCH; wherein the *-map will proceed to the next *-map sequence until a *-map match IS found.

  - If NO statement is matched in the *-list, the implicit 'deny any any' is ALWAYS matched. In This case, the *-list will report to the *-map with NO MATCH, and the *-map will proceed to the next sequence until a match IS found.

• Question 67:

  What is a characteristic of VXLAN?

  A. It extends Layer 2 and Layer 3 overlay networks over a Layer 2 underlay.
  B. It has a 12-byte packet header.
  C. It uses TCP for transport.
  D. It is a multi-tenant solution.
  D. It is a multi-tenant solution.

• Question 68:

  Refer to the exhibit.

  

  What can be determined from the output?

  A. Flow record CC is configured with two separate exporters.
  B. Flow record CC is configured with a single exporter.
  C. Flow monitor FLOW-CC is configured with two separate flow records to a single exporter.
  D. Flow monitor FLOW-CC is configured to two separate exporters.
  D. Flow monitor FLOW-CC is configured to two separate exporters.

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/xe-3se/fnf-xe-3e-book/fnf-export-ipv4.html

• Question 69:

  How is MSDP used to interconnect multiple PIM-SM domains?

  A. MSDP depends on BGP or multiprotocol BGP for interdomain operation.
  B. MSDP SA request messages are used to request a list of active sources for a specific group.
  C. MSDP allows a rendezvous point to dynamically discover active sources outside of its domain.
  D. MSDP messages are used to advertise active sources in a domain.
  C. MSDP allows a rendezvous point to dynamically discover active sources outside of its domain.

  ---

  Explanation

  Allows a rendezvous point (RP) to dynamically discover active sources outside of its domain.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/xe-16/imc-pim-xe-16-book/imc-msdp-im-pim-sim.html

• Question 70:

  Refer to the exhibit.

  

  Which configuration causes the traffic from PC-1 to the internet to use the link between CoreSW-1 and CoreSW-2 when both switches are up?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B