Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 791:

  Which Python snippet should be used to store the devices data structure in a JSON file?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  the same configuration can be found in multiple examples here:

  reference:

  https://www.section.io/engineering-education/storing-data-in-python-using-json-module/

• Question 792:

  What is used to validate the authenticity of the client and is sent in HTTP requests as a JSON object?

  A. SSH

  B. HTTPS

  C. JWT

  D. TLS

  Correct Answer: C

  JWT or JSON Web Token is a string that is sent in the HTTP request (from client to server) to validate the authenticity of the client https://developer.atlassian.com/server/crowd/json-requests-and-responses/

• Question 793:

  What is one characteristic of the Cisco SD-Access control plane?

  A. It is based on VXLAN technology.

  B. Each router processes every possible destination and route

  C. It allows host mobility only in the wireless network.

  D. It stores remote routes in a centralized database server

  Correct Answer: D

  A control plane node maintains a host tracking database (HTDB), and also uses Locator/ID Separation Protocol (LISP) to provide a map server, populating the HTDB from fabric edge registration messages; and a map resolver to respond to queries from edge devices requesting location information about destination nodes.

• Question 794:

  Refer to the exhibit.

  import json

  from requests import get

  Headers = { "Content-Type" : "application/yang-data+json", "Accept" : "application/yang-data+json" }

  Devices = open("devices.txt", "r")

  for Device in Devices.readlines():

  Hostname, IP, Login, Pass = Device.strip().split(",")

  URL = f"https://{IP}/restconf/data/Cisco-IOS-XE-native:native"

  Creds = (Login, Pass)

  Response = get(URL, auth = Creds, headers = Headers, verify = False)

  How should the script be completed so that each device configuration is saved into a JSON-formatted file under the device name?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 795:

  Refer to the exhibit.

  

  An engineer entered the command no spanning-tree bpduguard enable on interface Fa 1/0/7. What is the effect of this command on Fa 1/0/7?

  A. It remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode.

  B. It remains in err-disabled state until the errdisable recovery cause failed-port-state command is entered in the global configuration mode.

  C. It remains in err-disabled state until the no shutdown command is entered in the interface configuration mode.

  D. It remains in err-disabled state until the spanning-tree portfast bpduguard disable command is entered in the interface configuration mode.

  Correct Answer: A

  Seems someone maybe trying to insert a switch into that port which sends bpdu packets. The port is configured to not allow this so it goes into an error disable mode and shuts the port down. You have to do a shut and no shut on the port to bring it back up. However, it may go down again if the device sending bpdu's is still active on the port.

• Question 796:

  What is one main REST security design principle?

  A. separation of privilege

  B. password hashing

  C. confidential algorithms

  D. OAuth

  Correct Answer: A

  Separation of Privilege: Granting permissions to an entity should not be purely based on a single condition, a combination of conditions based on the type of resource is a better idea.

  https://restfulapi.net/security-essentials/#:~:text=REST%20Security%20Design%20Principlesandtext=Least%20Privilege%3A%20An%20entity%20should,when%20no%20longer%20in%20use.

• Question 797:

  What is a TLOC in a Cisco SD-WAN deployment?

  A. value that identifies a specific tunnel within the Cisco SD-WAN overlay

  B. identifier that represents a specific service offered by nodes within the Cisco SD-WAN overlay

  C. attribute that acts as a next hop for network prefixes

  D. component set by the administrator to differentiate similar nodes that offer a common service

  Correct Answer: C

  OMP Routes, also referred to as vRoutes, are prefixes learned at the local site via connected interfaces, static routes, and dynamic routing protocols (such as OSPF, EIGRP, and BGP) running on the service side of the vEdge. These prefixes are redistributed into OMP and advertised to the vSmart controller so that they can be carried across the overlay fabric to all other WAN edge nodes. OMP routes resolve their next-hop to a TLOC. An OMP route is installed in the forwarding table only if the next-hop TLOC is known and there is a BFD session in UP state associated with that TLOC;

• Question 798:

  The Gig0/0 interface of two routers is directly connected with a 1G Ethernet link. Which configuration must be applied to the interface of both routers to establish an OSPF adjacency without maintaining a DR/BDR relationship?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  cisco_R3#show run int e0/0.50 Building configuration...

  Current configuration : 189 bytes ! interface Ethernet0/0.50 encapsulation dot1Q 50 ip address 10.111.10.1 255.255.255.252 ip ospf network point-to-point <<<<<<<<<<<<<<<<<<< ip ospf 1 area 22 bfd interval 999 min_rx 999 multiplier 3 end

  cisco_R3#show ip ospf neighbor

  Neighbor ID Pri State Dead Time Address Interface 192.168.255.2 1 FULL/DROTHER 00:00:33 192.168.255.2 Ethernet0/0.10 200.200.200.200 1 FULL/DR 00:00:34 192.168.255.22 Ethernet0/0.10 5.5.5.5 0 FULL/ - 00:00:34 10.111.10.2 Ethernet0/0.50 <<<<<<<<<<<<<<<<< cisco_R3#

• Question 799:

  Refer to the exhibit.

  

  Router#show access-lists Extended IP access list 100 10 permit ip 192.168.0.0 0.0.255.255 any 20 permit ip 172.16.0.0 0.0.15.255 any

  

  Which command set must be added to permit and log all traffic that comes from 172.20.10.1 in interface GigabitEthernet0/1 without impacting the functionality of the access list?

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

  The syntax is wrong for B. You can't have everything on a single line. (config)#access-list 100 seq 5 % Unrecognized command

• Question 800:

  Which function does a fabric wireless LAN controller perform In a Cisco SD-Access deployment?

  A. manages fabric-enabled APs and forwards client registration and roaming information to the Control Plane Node

  B. coordinates configuration of autonomous nonfabric access points within the fabric

  C. performs the assurance engine role for both wired and wireless clients

  D. is dedicated to onboard clients in fabric-enabled and nonfabric-enabled APs within the fabric

  Correct Answer: A

  Fabric Enabled WLC:

  Fabric enabled WLC is integrated with LISP control plane. This WLC is responsible for AP image /Config, Radio Resource Management, Client Session management and roaming and all other wireless control plane functions.

  For WLC Fabric Integration:

  *

  Wireless Client MAC address is used as EID

  *

  It inform about Wireless MAC address with its other information like SGT and Virtual Network Information

  *

  VN information is mapped to VLAN on FEs

  *

  WLC is responsible for updating Host Database tracking DB with roaming information