Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 711:

  Refer to the exhibit.

  

  Why does the OSPF neighborship fail between the two interfaces?

  A. The IP subnet mask is not the same.

  B. There is a mismatch in the OSPF interface network type.

  C. The OSPF timers are different.

  D. The MTU is nor the same.

  Correct Answer: A

  R2: /30 vs R3: /29

• Question 712:

  Refer to the exhibit.

  

  Which GRE tunnel configuration command is missing on R2?

  A. tunnel source 192.181.2

  B. tunnel source 172.16.1.0

  C. tunnel source 200.1.1.1

  D. tunnel destination 200.1.1.1

  Correct Answer: C

• Question 713:

  Refer to the exhibit.

  

  The server in DC2 is expecting traffic from the database in DC1 to use the source network of 10.50.250.0/24. The server sends the initial request. The inside global IP is configured for 10.50.250.1. What is the result of this configuration?

  A. Only the server can initiate communication.

  B. The server and the database cannot communicate.

  C. The server and the database can initiate communication.

  D. Only the database can initiate communication

  Correct Answer: C

• Question 714:

  Which free application has the ability to make REST calls against Cisco DNA Center?

  A. API Explorer

  B. REST Explorer

  C. Postman

  D. Mozilla

  Correct Answer: C

  Reference: https://developer.cisco.com/docs/dna-center/#!getting-started

• Question 715:

  Refer to the exhibit.

  

  A network administrator must configure router B to allow traffic only from network 10.100.2.0 to networks outside of router B. Which configuration must be applied?

  A. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 any RouterB(config)# access-list 101 deny any RouterB(config)# int g0/0/0 RouterB(config-if)# ip access-group 101 out

  B. RouterB(config)# access-list 101 permit ip 10.100.3.0 0.0.0.255 any RouterB(config)# access-list 101 deny any RouterB(config)# int g0/0/0 RouterB(config-if)# ip access-group 101 out RouterB(config)# int g0/0/1 RouterB(config-if)# ip access-group 101 out

  C. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 any RouterB(config)# access-list 101 deny any RouterB(config)# int g0/0/2 RouterB(config-if)# ip access-group 101 in

  D. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 any RouterB(config)# int g0/0/0 RouterB(config-if)# ip access-group 101 out RouterB(config)# int g0/0/1 RouterB(config-if)# ip access-group 101 out

  Correct Answer: D

• Question 716:

  Refer to the exhibit.

  

  The WLC administrator sees that the controller to which a roaming client associates has Mobility Role Anchor configured under Clients > Detail. Which type of roaming is supported?

  A. Indirect

  B. Layer 3 intercontroller

  C. Layer 2 intercontroller

  D. Intercontroller

  Correct Answer: B

  What is a Mobility Anchor?

  Mobility Anchor, also referred to as Guest tunneling or Auto Anchor Mobility, is a feature where all the client traffic that belongs to a WLAN (Specially Guest WLAN) is tunneled to a predefined WLC or set of controllers that are configured as

  Anchor for that specific WLAN. This feature helps to restrict clients to a specific subnet and have more control over the user traffic. Refer to theConfiguring Auto-Anchor Mobilitysection of Cisco Wireless LAN Controller Configuration Guide,

  Release 8.8for more information on this feature.

  This would be a L3 Roam as the client is Anchored to the AP with a CAPWAP tunnel formed between the Anchor WLC and the associated WLC

  https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107188-mobility-groups-faq.html#anc15

• Question 717:

  A company recently decided to use RESTCONF instead of NETCONF and many of their NETCONF scripts contain the operation

  (operation="create").

  Which RESTCONF operation must be used to replace these statements?

  A. POST

  B. GET

  C. PUT

  D. CREATE

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/101x/programmability/cisco-nexus-9000-series-nx-os-programmability-guide-release-101x/m-n9k-agent-restconf-101x.pdf

• Question 718:

  Which component handles the orchestration plane of the Cisco SD-WAN?

  A. vBond

  B. vSmart

  C. vManage

  D. vEdge

  Correct Answer: A

  + Orchestration plane (vBond) assists in securely onboarding the SD-WAN WAN Edge routers into the SD-WAN overlay. The vBond controller, or orchestrator, authenticates and authorizes the SD-WAN components onto the network. The vBond orchestrator takes an added responsibility to distribute the list of vSmart and vManage controller information to the WAN Edge routers. vBond is the only device in SD-WAN that requires a public IP address as it is the first point of contact and authentication for all SD-WAN components to join the SD-WAN fabric. All other components need to know the vBond IP or DNS information.

  Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2018/pdf/BRKCRS-2112.pdf page 8.

• Question 719:

  How do cloud deployments compare to on-premises deployments?

  A. Cloud deployments provide a better user experience across world regions, whereas on- premises deployments depend upon region-specific conditions

  B. Cloud deployments are inherently unsecure. whereas a secure architecture is mandatory for on-premises deployments.

  C. Cloud deployments mandate a secure architecture, whereas on-premises deployments are inherently unsecure.

  D. Cloud deployments must include automation infrastructure, whereas on-premises deployments often lack the ability for automation.

  Correct Answer: A

  Easily deploy your application in multiple regions around the world with just a few clicks. This means you can provide lower latency and a better experience for your customers at minimal cost. https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html

• Question 720:

  What is a Type 1 hypervisor?

  A. runs directly on a physical server and depends on a previously installed operating system

  B. runs directly on a physical server and includes its own operating system

  C. runs on a virtual server and depends on an already installed operating system

  D. run on a virtual server and includes its own operating system

  Correct Answer: B

  A type 1 hypervisor, also known as a bare-metal or native hypervisor, runs directly on the physical server and its underlying hardware. It does not depend on a previously installed operating system, but rather includes its own operating system that is designed to run virtual machines. A type 1 hypervisor provides excellent performance and stability, as it has direct access to the hardware resources and can allocate them to the virtual machines. A type 1 hypervisor is typically used in enterprise environments, where multiple virtual machines run on a single server.