Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 761:

  An engineer is describing QoS to a client. Which two facts apply to traffic policing? (Choose two.)

  A. Policing adapts to network congestion by queuing excess traffic

  B. Policing should be performed as close to the destination as possible

  C. Policing drops traffic that exceeds the defined rate

  D. Policing typically delays the traffic, rather than drops it

  E. Policing should be performed as close to the source as possible

  Correct Answer: CE

  Traffic policing propagates bursts. When the traffic rate reaches the configured maximum rate (or committed information rate), excess traffic is dropped (or remarked). The result is an output rate that appears as a saw-tooth with crests and

  troughs.

  Unlike traffic shaping, traffic policing does not cause delay. Classification (which includes traffic policing, traffic shaping and queuing techniques) should take place at the network edge. It is recommended that classification occur as close to

  the source of the traffic as possible. Also according to this Cisco link, "policing traffic as close to the source as possible".

• Question 762:

  Which type of tunnel Is required between two WLCs to enable Intercontroller roaming?

  A. mobility

  B. LWAPP

  C. CAPWAP

  D. iPsec

  Correct Answer: A

• Question 763:

  An administrator is configuring NETCONF using the following XML string. What must the administrator end the request with?

  

  A. ]]>]]>

  B.

  C.

  D.

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cns/configuration/xe-16/cns-xe-16-book/cns-netconf.html

• Question 764:

  What is a characteristics of a vSwitch?

  A. supports advanced Layer 3 routing protocols that are not offered by a hardware switch

  B. enables VMs to communicate with each other within a virtualized server

  C. has higher performance than a hardware switch

  D. operates as a hub and broadcasts the traffic toward all the vPorts

  Correct Answer: B

• Question 765:

  Refer to the exhibit.

  

  Which configuration must be applied to the HQ router to set up a GRE tunnel between the HQ and BR routers?

  A. interface Tunnel1 ip address 10.111.111.1 255.255.255.0 tunnel source GigabitEthernet0/0 tunnel destination 209.165.202.134

  B. interface Tunnel1 ip address 10.111.111.1 255.255.255.0 tunnel source GigabitEthernet0/0 tunnel destination 209.165.202.129

  C. interface Tunnel1 ip address 10.111.111.1 255.255.255.0 tunnel source GigabitEthernet0/0 tunnel destination 209.165.202.133

  D. interface Tunnel1 ip address 10.111.111.1 255.255.255.252 tunnel source GigabitEthernet0/0 tunnel destination 209.165.202.129

  Correct Answer: A

• Question 766:

  What are the main components of Cisco TrustSec?

  A. Cisco ISE and Enterprise Directory Services

  B. Cisco ISE. network switches, firewalls, and routers

  C. Cisco ISE and TACACS+

  D. Cisco ASA and Cisco Firepower Threat Defense

  Correct Answer: B

  https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/at_a_glance_c45-726831.pdf

• Question 767:

  An engineer must configure a new loopback Interface on a router and advertise the interface as a fa4 in OSPF. Which command set accomplishes this task?

  A. R2(config)# interface Loopbacko R2(config-if)# ip address 172.22.2.1 255.255.255.0 R2(config-if)# ip ospf 100 area 0

  B. R2(config)# interface Loopbacko R2(config-if)# ip address 172.22.2.1 255.255.255.0 R2(config-if)# ip ospf network point-to-point R2(config-if)#ip ospf 100 area 0

  C. R2(config)# interface Loopbacko R2(config-if)# ip address 172.22.2.1 255.255.255.0 R2(config-if)# ip ospf network point-to-multipoint R2(config-if)# router ospf 100 R2(config-router)# network 172.22.2.0 0.0.0.265 area 0

  D. R2(config)# interface Loopbacko R2(config-if)# ip address 172.22.2.1 255.255.255.0 R2(config-if)# ip ospf network broadcast R2(config-if)# ip ospf 100 area 0

  Correct Answer: B

  When OSPF is running on a given loopback interface, it sees the network type of "LOOPBACK" and it knows that it can not establish an adjacency through that loopback interface with another router so it advertises that loopback as a host route or the only IP address on that logical interface. As Martin explained so nicely you can tell OSPF that it is not a loopback and it is a point-to-point network type, and OSPF says "OK I am going to advertise the interface with its correct mask". In MPLS environment where OSPF is the IGP in the core, and you have configured the loopback interface of the PE router with a /24 mask, you can have some problems, because there is a discrepancy, the loopback's mask is 24 but OSPF is advertising a mask of /32. There are few solutions to fix this problem, one solution is to reconfigure the mask to be /32, another solution is to configure the loopback interface with "ip ospf network point-to-point".

• Question 768:

  What is the API keys option for REST API authentication?

  A. a predetermined string that is passed from client to server

  B. a one-time encrypted token

  C. a username that is stored in the local router database

  D. a credential that is transmitted unencrypted

  Correct Answer: A

  In REST API Security ?API keys are widely used in the industry and became some sort of standard, however, this method should not be considered a good security measure.

  API Keys were created as somewhat of a fix to the early authentication issues of HTTP Basic Authentication and other such systems. In this method, a unique generated value is assigned to each first time user, signifying that the user is known. When the user attempts to re-enter the system, their unique key (sometimes generated from their hardware combination and IP data, and other times randomly generated by the server which knows them) is used to prove that they're the same user as before.

  Reference: https://blog.restcase.com/4-most-used-rest-api-authentication-methods/

• Question 769:

  What is a characteristics of traffic policing?

  A. lacks support for marking or remarking

  B. must be applied only to outgoing traffic

  C. can be applied in both traffic directions

  D. queues out-of-profile packets until the buffer is full

  Correct Answer: D

• Question 770:

  What is a characteristic of a Type 2 hypervisor?

  A. It is completely independent of the operating system.

  B. It is installed on an operating system and supports other operating systems.

  C. It eliminates the need for an underlying operating system.

  D. Its main task is to manage hardware resources between different operating systems.

  Correct Answer: B