Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 751:

  An engineer must create an EEM applet that sends a syslog message in the event a change happens in the network due to trouble with an OSPF process.

  Which action should the engineer use?

  

  A. action 1 syslog msg "OSPF ROUTING ERROR"
  B. action 1 syslog send "OSPF ROUTING ERROR"
  C. action 1 syslog pattern "OSPF ROUTING ERROR"
  D. action 1syslog write "OSPF ROUTING ERROR"
  A. action 1 syslog msg "OSPF ROUTING ERROR"

  ---

  Explanation

  Only these keywords are available:

  Router1(config-applet)#action 1 syslog

  facility Facility string filter Filter destination of syslog message msg Syslog message priority Priority of syslog message

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/command/eem-cr-book/eem-cr-a2.html

• Question 752:

  Which configuration allows administrators to configure the device through the console port and use a network authentication server?

  A. aaa new-model aaa authentication login default local aaa authorization console aaa authorization config-commands username netadmin secret 9 $9$vFpMf8elb4RVV8$seZ/bDAx1uV
  B. aaa new-model aaa authentication login default local aaa authorization console aaa authorization config-commands
  C. aaa new-model aaa authentication login default line
  D. aaa new-model aaa authentication login default group radius aaa authorization console aaa authorization config-commands
  D. aaa new-model aaa authentication login default group radius aaa authorization console aaa authorization config-commands

• Question 753:

  Which First Hop Redundancy Protocol should be used to meet a design requirements for more efficient default bandwidth usage across multiple devices?

  A. GLBP
  B. LCAP
  C. HSRP
  D. VRRP
  A. GLBP

  ---

  Explanation

  The main disadvantage of HSRP and VRRP is that only one gateway is elected to be the active gateway and used to forward traffic whilst the rest are unused until the active one fails. Gateway Load Balancing Protocol (GLBP) is a Cisco proprietary protocol and performs the similar function to HSRP and VRRP but it supports load balancing among members in a GLBP group.

• Question 754:

  Based on this interface configuration, what is the expected state of OSPF adjacency?

  

  A. Full on both routers
  B. not established
  C. 2WAY/DROTHER on both routers
  D. FULL/BDR on R1 and FULL/BDR on R2
  B. not established

  ---

  Explanation

  On Ethernet interfaces the OSPF hello intervl is 10 second by default so in this case there would be a Hello interval mismatch -> the OSPF adjacency would not be established.

• Question 755:

  Which features does Cisco EDR use to provide threat detection and response protection?

  A. containment, threat intelligence, and machine learning
  B. firewalling and intrusion prevention
  C. container-based agents
  D. cloud analysis and endpoint firewall controls
  A. containment, threat intelligence, and machine learning

  ---

  Explanation

  https://www.cisco.com/c/en/us/products/security/endpoint-security/what-is-endpoint-detection-response-edr.html

• Question 756:

  Refer to the exhibit.

  

  Assuming the WLC's interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?

  A. the interface specified on the WLAN configuration
  B. any interface configured on the WLC
  C. the controller management interface
  D. the controller virtual interface
  A. the interface specified on the WLAN configuration

  ---

  Explanation

  From the guide, the the tick box wasn't checked it would be A. - Check the RADIUS Server Overwrite interface check box to enable the per-WLAN RADIUS source support. When enabled, the controller uses the interface specified on the WLAN configuration as identity and source for all RADIUS related traffic on that WLAN

• Question 757:

  Refer to the exhibit.

  

  Assuming all links are functional, which path does PC1 take to reach DSW1?

  A. PC1 goes from ALSW1 to DSW2 to CORE to DSW1.
  B. PC1 goes from ALSW1 to DSW2 to ALSW2 to DSW1.
  C. PC1 goes from ALSW1 to DSW2 to DSW1.
  D. PC1 goes from ALSW1 to DSW1.
  C. PC1 goes from ALSW1 to DSW2 to DSW1.

  ---

  Explanation

  4. ( 10gbps+10Gbps) Path cost from ALSW1 to root bridge(DSW2) is 4 = cost of 4. ( 1Gbps) Therefore the patch cost equal and DSW2 is root bridge.

  Therefore it will via Gi0/2.

  Answer is C.

  IF let say the question change the ALSW1 to DSW2 Gi0/2 interface to 100Mbps (cost=19) , the answer will be different.

  ALSW1 to DSW2 will be blocked.

  Answer will be D.

• Question 758:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  The operations team started configuring network devices for a new site.

  Complete the configurations to achieve these goals:

  1. Ensure that port channel Po1 between DISTRO-SW01 and DISTRO-SW02 is operational using the LACP protocol. Configuration changes for this task must be made on DISTRO-SW01.

  2. Ensure that traffic on VLAN 10 is carried as untagged traffic between DISTRO-SW01 and DISTRO-SW02.

  3. Complete the Rapid-PVST+ configuration on DISTRO-SW2 by ensuring it it the secondary root switch for all VLANs in the range of 1 to 1005.

  DISTRO-SW01

  

  

  

  

  DISTRO-SW02

  

  

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Task 1. Ensure that port channel Po1 between DISTRO-SW01 and DISTRO-SW02 is operational using the LACP protocol. Configuration changes for this task must be made on DISTRO-SW01.

  The port towards to ACCESS-SW1 was part of port channel 1 which was used towards to DISTRO-SW02, so remove the port channel config pointing to the ACCESS-SW1 first.

  DISTRO-SW01(config)#int e0/0 DISTRO-SW01(config-if)#no channel-group 1

  Set the LACP mode active on this switch: DISTRO-SW01(config-if)#int range e0/2 - 3 DISTRO-SW01(config-if)#channel-group 1 mode active

  Verification:

  We can verify if the Port-channel was formed with the "show etherchannel summary" command DISTRO-SW01# show etherchannel summary

  -- output omitted --

  Number of channel-groups in use: 1

  Number of aggregators: 1

  Group Port-channel Protocol Ports

  ------+------------- +-----------+----------------------------------------------- 1 Po1(SU) LACP Et0/2(P) Et0/3(P)

  If we see the "Po1(SU)" means our configuration worked correctly.

  Task 2. Ensure that traffic on VLAN 10 is carried as untagged traffic between DISTRO-SW01 and DISTRO-SW02.

  DISTRO-SW01,DISTRO-SW02(config)#interface port-channel 1 DISTRO-SW01,DISTRO-SW02(config-if)#switchport trunk native vlan 10

  Task 3. Complete the Rapid-PVST+ configuration on DISTRO-SW2 by ensuring it is the secondary root switch for all VLANs in the range of 1 to 1005.

  DISTRO-SW02(config)#spanning-tree vlan 1-1005 root secondary

  Save the configuration DSW1,DSW2(config)#copy running-config startup-config

• Question 759:

  Refer to the exhibit.

  

  An engineer must configure an ERSPAN tunnel that mirrors traffic from Linux1 on Switch1 to Linux2 on Switch2.

  Which command must be added to the source configuration to enable the ERSPAN tunnel?

  A. (config-mon-erspan-src-dst)#no shut
  B. (config-mon-erspan-src-dst)#monitor session 1 activate
  C. (config-mon-erspan-src-dst)#traffic bidirectional
  D. (config-mon-erspan-src-dst)#ip address 10.10.10.10
  D. (config-mon-erspan-src-dst)#ip address 10.10.10.10

  ---

  Explanation

  IP address in destination session and IP address in source session should match. If they don't- that is causing the drops.

  References:

  https://community.cisco.com/t5/networking-documents/understanding-span-rspan-and-erspan/ta-p/3144951

• Question 760:

  What is used to measure the total output energy of a Wi-Fi device?

  A. dBi
  B. EIRP
  C. mW
  D. dBm
  C. mW

  ---

  Explanation

  Output power is measured in mW (milliwatts). answer 'dBi' milliwatt is equal to one thousandth (10-3) of a watt.