Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 741:

  Refer to the exhibit.

  

  Router 1 is currently operating as the HSRP primary with a priority of 110 router1 fails and router2 take over the forwarding role.

  Which command on router1 causes it to take over the forwarding role when it return to service?

  A. standby 2 priority
  B. standby 2 timers
  C. standby 2 track
  D. standby 2 preempt
  D. standby 2 preempt

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/support/docs/ip/hot-standby-router-protocol-hsrp/13780-6.html

• Question 742:

  DRAG DROP

  Drag and drop the tools from the left onto the agent types on the right.

  Select and Place:

  

  

• Question 743:

  An engineer must update the local web authentication details on a Cisco 5520 WLC. The engineer has one active SSID configured for web authentication and plans to update the virtual interface with a nonroutable IP address.

  Which command must the engineer apply?

  A. config wlan create wlan_idname
  B. config interface address virtual 1.1.1.1
  C. config interface address dynamic-interface virtual 192.0.2.1
  D. config interface address virtual 192.0.2.1
  D. config interface address virtual 192.0.2.1

• Question 744:

  Which NTP concept is used to measure the distance from a device to its authoritative time source?

  A. stratum
  B. NTP peer
  C. GPS
  D. atomic clock
  A. stratum

  ---

  Explanation

  References:

  https://www.cisco.com/c/dam/en/us/td/docs/ios-xml/ios/bsm/configuration/xe-3se/3650/bsm-xe-3se-3650-book.html#:~:text=NTP%20uses%20the%20concept%20of,from%20an%20authoritative%20time%20source

• Question 745:

  Refer to the exhibit

  

  Which two commands are required on route R1 to block FTP and allow all other traffic from the Branch 2 network (Choose two)

  A. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data access-list 101 permit ip any any
  B. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data access-list 101 permit ip any any
  C. interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.252 ip access-group 101 out
  D. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp access-list 101 permit ip any any
  E. interface GigabitEthernet0/0 ip address 10.0.101.1 255.255.255.252 ip access-group 101 in
  A. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data access-list 101 permit ip any any
  C. interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.252 ip access-group 101 out

  ---

  Explanation

  A included B&D ACL

  C is correct, block Branch 2 ftp traffic exit the R1 to 10.0.101.0/24.

  E is setting on WAN port to block ftp traffic in R1

• Question 746:

  Refer to the exhibit.

  

  A network engineer must load balance traffic that comes from the NAT Router and is destined to 10.10.110.10, to several FTP servers.

  Which two commands sets should be applied? (Choose two).

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  E. Option E
  A. Option A
  C. Option C

• Question 747:

  Which unit measures the power of a radio signal with reference to 1 milliwatt?

  A. dBw
  B. dBm
  C. mW
  D. dBi
  C. mW

• Question 748:

  Refer to the exhibit.

  

  Which command must be applied to Routed to bring the GRE tunnel to an up/up state?

  A. Router1(config)#interface tunnel0
  B. Router1(config-if)#tunnel source GigabitEthernet0/1
  C. Router1(config-if)#tunnel mode gre multipoint
  D. Router1(config-if)#tunnel source Loopback0
  D. Router1(config-if)#tunnel source Loopback0

• Question 749:

  Which algorithms are used to secure REST API from brute attacks and minimize the impact?

  A. SHA-512 and SHA-384
  B. MD5 algorithm-128 and SHA-384
  C. SHA-1, SHA-256, and SHA-512
  D. PBKDF2, BCrypt, and SCrypt
  D. PBKDF2, BCrypt, and SCrypt

  ---

  Explanation

  One of the best practices to secure REST APIs is using password hash. Passwords must always be hashed to protect the system (or minimize the damage) even if it is compromised in some hacking attempts. There are many such hashing algorithms which can prove really effective for password security e.g. PBKDF2, bcrypt and scrypt algorithms.

  Other ways to secure REST APIs are: Always use HTTPS, Never expose information on URLs (Usernames, passwords, session tokens, and API keys should not appear in the URL), Adding Timestamp in Request, Using OAuth, Input Parameter Validation.

  References:

  https://restfulapi.net/security-essentials/WeshouldnotuseMD5oranySHA(SHA-1,SHA-256,SHA-512...)algorithmtohashpasswordastheyarenottotallysecure.Note:Abrute-forceattackisanattempttodiscoverapasswordbysystematicallytryingeverypossiblecombinationofletters,numbers,andsymbolsuntilyoudiscovertheonecorrectcombinationthatworks.

• Question 750:

  DRAG DROP

  Drag and drop the descriptions from the left onto the routing protocol they describe on the right.

  Select and Place: