Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 691:

  Refer to the exhibit.

  

  MTU has been configured on the underlying physical topology, and no MTU command has been configured on the tunnel interfaces.

  What happens when a 1500-byte IPv4 packet traverses the GRE tunnel from host X to host Y, assuming the DF bit is cleared?

  A. The packet arrives on router C without fragmentation.
  B. The packet is discarded on router A
  C. The packet is discarded on router B
  D. The packet arrives on router C fragmented.
  D. The packet arrives on router C fragmented.

  ---

  Explanation

  

• Question 692:

  Which two conditions occur when the primary route processor fails on a switch that is using dual route processors with stateful switchover? (Choose two.)

  A. Data forwarding is stopped until the routing protocols reconverge after the switchover.
  B. The standby route processor initialization is started when the primary router processor fails.
  C. The standby route processor is fully initialed and state information is maintained.
  D. User sessions are immediately recreated on the new active route processor.
  E. Data forwarding can continue along known paths until routing protocol information is restored.
  C. The standby route processor is fully initialed and state information is maintained.
  E. Data forwarding can continue along known paths until routing protocol information is restored.

• Question 693:

  Running the script causes the output in the exhibit. Which change to the first line of the script resolves the error?

  

  A. from ncclient import manager
  B. import manager
  C. from ncclient import *
  D. ncclient manager import
  C. from ncclient import *

  ---

  Explanation

  "from module_name import * " All the functions and constants can be imported using *.

• Question 694:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  

  

  

  VERIFICATION:

  

• Question 695:

  An engineer is implementing a route map to support redistribution within BGP. The route map must configured to permit all unmatched routes. Which action must the engineer perform to complete this task?

  A. Include a permit statement as the first entry
  B. Include at least one explicit deny statement
  C. Remove the implicit deny entry
  D. Include a permit statement as the last entry
  D. Include a permit statement as the last entry

• Question 696:

  Which measurement is used from a post wireless survey to depict the cell edge of the access points?

  A. SNR
  B. Noise
  C. RSSI
  D. CCI
  C. RSSI

  ---

  Explanation

  Coverage defines the ability of wireless clients to connect to a wireless AP with a signal strength and quality high enough to overcome the effects of RF interference. The edge of the coverage for an AP is based on the signal strength and SNR measured as the client device moves away from the AP.

  The signal strength required for good coverage varies dependent on the specific type of client devices and applications on the network.

  To accommodate the requirement to support wireless Voice over IP (VoIP), refer to the RF guidelines specified in the Cisco 7925G Wireless IP Phone Deployment Guide. The minimum recommended wireless signal strength for voice applications is -67 dBm and the minimum SNR is 25 dB.

  The first step in the analysis of a post site survey is to verify the `Signal Coverage'. The signal coverage is measured in dBm. You can adjust the color-coded signal gauge to your minimum-allowed signal level to view areas where there are sufficient and insufficient coverage. The example in Figure 8 shows blue, green, and yellow areas in the map have signal coverage at -67 dBm or better. The areas in grey on the coverage maps have deficient coverage. Source from Cisco

  https://www.cisco.com/c/en/us/td/docs/wireless/technology/vowlan/troubleshooting/vowlan_troubleshoot/8_Site_Survey_RF_Design_Valid.html

• Question 697:

  Which technology provides a secure communication channel for all traffic at Layer 2 of the OSI model?

  A. MACsec
  B. IPsec
  C. SSL
  D. Cisco Trustsec
  A. MACsec

  ---

  Explanation

  MACsec, defined in 802.1AE, provides MAC-layer encryption over wired networks by using out- ofband methods for encryption keying. The MACsec Key Agreement (MKA) Protocol provides the required session keys and manages the required encryption keys. MKA and MACsec are implemented after successful authentication using the 802.1x Extensible Authentication Protocol (EAP-TLS) or Pre Shared Key (PSK) framework.

  A switch using MACsec accepts either MACsec or non-MACsec frames, depending on the policy associated with the MKA peer. MACsec frames are encrypted and protected with an integrity check value (ICV). When the switch receives frames from the MKA peer, it decrypts them and calculates the correct ICV by using session keys provided by MKA. The switch compares that ICV to the ICV within the frame. If they are not identical, the frame is dropped. The switch also encrypts and adds an ICV to any frames sent over the secured port (the access point used to provide the secure MAC service to a MKA peer) using the current session key.

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/1 6-9/configuration_guide/sec/b_169_sec_9300_cg/macsec_encryption.html

  Note: Cisco Trustsec is the solution which includes MACsec.

• Question 698:

  Which Cisco WLC feature allows a wireless device to perform a Layer 3 roam between two separate controllers without changing the client IP address?

  A. mobile IP
  B. mobility tunnel
  C. LWAPP tunnel
  D. GRE tunnel
  B. mobility tunnel

• Question 699:

  Which statement about when you configure FlexConnect APs and you want to set up Cisco Centralized Key Management fast roaming is true?

  A. FlexConnect groups are required for Cisco Centralized Key Management fast roaming to work with FlexConnect access points.
  B. APs that are in the same FlexConnect group but associated to different WLCs support Cisco Centralized Key Management.
  C. Cisco Centralized Key Management fast roaming among FlexConnect and non-FlexConnect access points is supported.
  D. The FlexConnect access point must be in standalone mode to support Cisco Centralized Key Management.
  A. FlexConnect groups are required for Cisco Centralized Key Management fast roaming to work with FlexConnect access points.

  ---

  Explanation

  References: http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design- Guide/Enterprise_Mobility_8-1_Deployment_Guide/ch7_HREA.html

• Question 700:

  An engineer must configure GigabitEthernet 0/0 for VRRP group 65. The rouler must assume the primary rote when it has the highest priority in the group. Which command set must be applied?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D