Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 781:

  What is one role of an AP join profile on a Cisco wireless network?

  A. To allocate IP addresses to APs.
  B. To provide the settings and credentials that allow APs to authenticate to the network.
  C. To allocate network resources dynamically based on demand.
  D. To manage the radio frequency settings in different areas.
  B. To provide the settings and credentials that allow APs to authenticate to the network.

• Question 782:

  Which feature is supported by EIGRP but is not supported by OSPF?

  A. equal-cost load balancing
  B. route filtering
  C. unequal-cost load balancing
  D. route summarization
  C. unequal-cost load balancing

  ---

  Explanation

  EIGRP support unequal-cost load balancing via the "variance ..." while OSPF only supports equalcost load balancing.

• Question 783:

  DRAG DROP

  Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

  Select and Place:

  

  

• Question 784:

  A client on different floors in an atrium. The access points are joined to the same controller and configured in local mode. The access points are in different AP groups and have different IP addresses, but the client VLAN in the groups is the same.

  What type of roam occurs?

  A. inter-controller
  B. inter-subnet
  C. intra-VLAN
  D. intra-controller
  D. intra-controller

  ---

  Explanation

  Mobility, or roaming, is a wireless LAN client's ability to maintain its association seamlessly from one access point to another securely and with as little latency as possible. Three popular types of client roaming are:

  1. Intra-Controller Roaming: Each controller supports same-controller client roaming across access points managed by the same controller. This roaming is transparent to the client as the session is sustained, and the client continues using the same DHCP-assigned or client-assigned IP address.

  2. Inter-Controller Roaming: Multiple-controller deployments support client roaming across access points managed by controllers in the same mobility group and on the same subnet. This roaming is also transparent to the client because the session is sustained and a tunnel between controllers allows the client to continue using the same DHCP-or client-assigned IP address as long as the session remains active.

  3. Inter-Subnet Roaming: Multiple-controller deployments support client roaming across access points managed by controllers in the same mobility group on different subnets. This roaming is transparent to the client because the session is sustained and a tunnel between the controllers allows the client to continue using the same DHCP-assigned or client-assigned IP address as long as the session remains active.

• Question 785:

  What is the benefit of using TCAM for IP forwarding decisions versus using the CAM table?

  A. TCAM finds results based on binary, and CAM uses the longest match to find results
  B. TCAM processes lookups in a hardware CPU. and CAM relies on binary masks to find results.
  C. TCAM finds results based on masks, and CAM finds results basing on exact match.
  D. TCAM uses low cost hardware memory to store addresses, and CAM uses expensive hardware memory.
  B. TCAM processes lookups in a hardware CPU. and CAM relies on binary masks to find results.

  ---

  Explanation

  The problem with CAM is that it can only do exact matches on ones and zeros (binary CAMs)

  https://community.cisco.com/t5/networking-knowledge-base/cam-content-addressable-memory-vs-tcam-ternary-content/ta-p/3107938

  By implementing router prefix lookup in TCAM, we are moving process of Forwarding Information Base lookup from software to hardware.

  https://howdoesinternetwork.com/2015/tcam-memory

• Question 786:

  A network is being migrated from IPV4 to IPV6 using a dual-stack approach. Network management is already 100% IPV6 enabled.

  In a dual-stack network with two dual-stack NetFlow collections, how many flow exporters are needed per network device in the flexible NetFlow configuration?

  A. 1
  B. 2
  C. 4
  D. 8
  B. 2

  ---

  Explanation

  A dual-stack device is a device with network interfaces that can originate and understand both IPv4 and IPv6 packets.

  It is because each flow collector can only send to a single destination. In this question there are two NetFlow collectors... thus two destination. Thus the need for 2 flow exporters. Each flow exporter supports only one destination. If you want to export the data to multiple destinations, you must configure multiple flow exporters and assign them to the flow monitor.

  You can export to a destination using either an IPv4 or IPv6 address.

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-mt/fnf-15-mt-book/cfg-de-fnflow-exprts.html

  Look under the section "Configuring the Flow Exporter"

• Question 787:

  An engineer must configure AAA on a Cisco 9800 WLC for central web authentication.

  Which two commands are needed to accomplish this task? (Choose two.)

  A. (Cisco Controller) > config wlan aaa-override disable <wlan-id>
  B. (Cisco Controller) > config radius acct add 10.10.10.12 1812 SECRET
  C. (Cisco Controller) > config wlan aaa-override enable <wlan-id>
  D. Device(config-locsvr-da-radius)# client 10.10.10.12 server-key O SECRET
  E. Device(config)# aaa server radius dynamic-author
  D. Device(config-locsvr-da-radius)# client 10.10.10.12 server-key O SECRET
  E. Device(config)# aaa server radius dynamic-author

• Question 788:

  Refer to the exhibit.

  Which action resolves the EtherChannel issue between SW2 and SW3?

  

  A. Configure switchport mode trunk on SW2.
  B. Configure switchport nonegotiate on SW3
  C. Configure channel-group 1 mode desirable on both interfaces.
  D. Configure channel-group 1 mode active on both interfaces.
  C. Configure channel-group 1 mode desirable on both interfaces.

  ---

  Explanation

  SW2 is using PAgP and both members interface Gi0/0 and Gi0/1 are in state(I), it means they are not receiving any activity.

• Question 789:

  Which of the following are features typically only found in a Next Generation (NextGen) firewall? (Choose two.)

  A. Network Address Translation (NAT)
  B. Secure remote access VPN (RA VPN)
  C. Deep packet inspection
  D. reputation based malware detection
  E. IPSec site-to-site VPN
  C. Deep packet inspection
  D. reputation based malware detection

• Question 790:

  Refer to the exhibit.

  

  A port channel is configured between SW2 and SW3. SW2 is not running a Cisco operating system. When all physical connections are made, the port channel does not establish.

  Based on the configuration except of SW3, what is the cause of the problem?

  A. The port channel on SW2 is using an incompatible protocol.
  B. The port-channel trunk is not allowing the native VLAN.
  C. The port-channel should be set to auto.
  D. The port-channel interface lead balance should be set to src-mac
  A. The port channel on SW2 is using an incompatible protocol.

  ---

  Explanation

  The Cisco switch was configured with PAgP, which is a Cisco proprietary protocol so non-Cisco switch could not communicate.