Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 791:

  DRAG DROP

  Drag and drop the characteristics from the left onto the infrastructure deployment models on the right.

  Select and Place:

  

  

• Question 792:

  Refer to the exhibit.

  

  What is achieved when this Python script is executed?

  A. Each device that is looped through in the devices.txt file is put into its own list that is appended to the parent dictionary.
  B. Each device that is looped through in the devices.txt file is put into its own dictionary that is appended to the parent list.
  C. All devices that are looped through in the devices.txt file are put into a list that is appended to the parent dictionary.
  D. All devices that are looped through in the devices.txt file are put into a single dictionary that is appended to the parent list.
  D. All devices that are looped through in the devices.txt file are put into a single dictionary that is appended to the parent list.

• Question 793:

  What is an emulated machine that has dedicated compute, memory, and storage resources and a fully installed operating system?

  A. host
  B. mainframe
  C. container
  D. virtual machine
  D. virtual machine

  ---

  Explanation

  Mainframe + Host are Hardware Devices and they do not EMULATE but rather EXECUTE.

  Virtual Machine is the only "EMULATION" capable thing in the list.

  A container is a software wrapper that allows programs to run inside it, but itself it still needs to be executed and not emulated.

• Question 794:

  You have configured router R1 with multiple VRF's in order to support multiple customer VPN networks.

  If you wanted to see the best path for the 10.2.1.0.24 route in VRF Green, what command would you use?

  A. show ip route vrf Green 10.2.1.0
  B. show ip route 10.2.1.0 vrf Green
  C. show route all 10.2.1.0
  D. show ip route 10.2.1.0 Green
  A. show ip route vrf Green 10.2.1.0

  ---

  Explanation

  #show ip route vrf mgmt 10.100.10.1

  % IP routing table vrf mgmt does not exist

• Question 795:

  Refer to the exhibit.

  

  TCP traffic should be reaching host 10.10.10.10/24 via R2.

  Which action resolves the issue?

  A. Allow TCP in the access list with no changes to the route map.
  B. Set IP next-hop to 10.10.12.2 under the route-map permit 10 to allow TCP traffic.
  C. Add a permit 20 statement in the route map to allow TCP traffic.
  D. TCP traffic will reach the destination via R2 without any changes.
  A. Allow TCP in the access list with no changes to the route map.

  ---

  Explanation

  If we add a "permit 20" statement in the route-map then we will allow other traffic to pass through (in fact Policy-based routing allows other traffic to pass through by default). But the bandwidth of R1-R4 is higher than that of R1-R2 so TCP traffic might go through R4 instead of R2. Therefore we should allow TCP in the ACL so that TCP traffic is forwarded via R2.

• Question 796:

  What are two benefits of YANG? (Choose two.)

  A. It enables multiple leaf statements to exist within a leaf list
  B. It collects statistical constraint analysis information.
  C. It enforces configuration constraints.
  D. It enforces configuration semantics.
  E. It enforces the use of a specific encoding format for NETCONF
  C. It enforces configuration constraints.
  E. It enforces the use of a specific encoding format for NETCONF

• Question 797:

  Which statement about when you configure FlexConnect APs and you want to set up Cisco Centralized Key Management fast roaming is true?

  A. FlexConnect groups are required for Cisco Centralized Key Management fast roaming to work with FlexConnect access points.
  B. APs that are in the same FlexConnect group but associated to different WLCs support Cisco Centralized Key Management.
  C. Cisco Centralized Key Management fast roaming among FlexConnect and non-FlexConnect access points is supported.
  D. The FlexConnect access point must be in standalone mode to support Cisco Centralized Key Management.
  A. FlexConnect groups are required for Cisco Centralized Key Management fast roaming to work with FlexConnect access points.

  ---

  Explanation

  References:

  http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/ch7_HREA.html

• Question 798:

  Which encryption hashing algorithm does NTP use for authentication?

  A. SSL
  B. MD5
  C. AES128
  D. AES256
  B. MD5

  ---

  Explanation

  An example of configuring NTP authentication is shown below: Router1(config)#ntp authentication-key 2 md5 certbus

  Router1(config)#ntp authenticate

  Router1(config)#ntp trusted-key 2

• Question 799:

  Which characteristic distinguishes Ansible from Chef?

  A. Ansible lacs redundancy support for the master server. Chef runs two masters in an active/active mode.
  B. Ansible uses Ruby to manage configurations. Chef uses YAML to manage configurations.
  C. Ansible pushes the configuration to the client. Chef client pulls the configuration from the server.
  D. The Ansible server can run on Linux, Unix or Windows. The Chef server must run on Linux or Unix.
  C. Ansible pushes the configuration to the client. Chef client pulls the configuration from the server.

  ---

  Explanation

  Ansible works by connecting to your nodes and pushing out small programs, called "Ansible modules" to them. These programs are written to be resource models of the desired state of the system. Ansible then executes these modules (over SSH by default), and removes them when finished.

  Chef is a much older, mature solution to configure management. Unlike Ansible, it does require an installation of an agent on each server, named chef-client. Also, unlike Ansible, it has a Chef server that each client pulls configuration from.

• Question 800:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  OSPF is preconfigured on all devices except R20. Configure R20 to complete these tasks.

  Task 1:

  Configure OSPF according to the topology using these requirements:

  1. Use Process ID 20.

  2. Use Loopback0 for the Router ID.

  3. Advertise all networks into OSPF.

  - Do not use network statements under the OSPF process to accomplish this task.

  Task 2:

  Configure a /18 summary route for Area 40.

  Advertise only Type 3 LSAs into Area 0.

  R20

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Task 1:

  Configure OSPF Process ID and Router ID:

  R20(config)# router ospf 20

  R20(config-router)# router-id <Loopback0_IP>

  Advertise Networks without Using Network Statements:

  R20(config)# interface e0/0

  R20(config-if)# ip ospf 20 area 0

  R20(config-if)# exit

  R20(config)# interface e0/1

  R20(config-if)# ip ospf 20 area 0

  R20(config-if)# exit

  R20(config)# interface e0/2

  R20(config-if)# ip ospf 20 area 40

  R20(config-if)# exit

  Task 2: Configure a /18 Summary Route for Area 40

  R20(config)# router ospf 20

  R20(config-router)# area 40 range 10.40.0.0 255.255.192.0

  This summarizes the 10.40.0.0/16 network to a /18 and advertises it into Area 0. By default, summary addresses are advertised as Type 3 LSAs.