Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 801:

  Refer to the exhibit.

  

  Router#show access-lists Extended IP access list 100 10 permit ip 192.168.0.0 0.0.255.255 any 20 permit ip 172.16.0.0 0.0.15.255 any

  

  Which command set must be added to permit and log all traffic that comes from 172.20.10.1 in interface GigabitEthernet0/1 without impacting the functionality of the access list?

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

  ---

  Explanation

  The syntax is wrong for B. You can't have everything on a single line.

  (config)#access-list 100 seq 5 % Unrecognized command

• Question 802:

  An engineer is describing QoS to a client. Which two facts apply to traffic policing? (Choose two.)

  A. Policing adapts to network congestion by queuing excess traffic
  B. Policing should be performed as close to the destination as possible
  C. Policing drops traffic that exceeds the defined rate
  D. Policing typically delays the traffic, rather than drops it
  E. Policing should be performed as close to the source as possible
  C. Policing drops traffic that exceeds the defined rate
  E. Policing should be performed as close to the source as possible

  ---

  Explanation

  Traffic policing propagates bursts. When the traffic rate reaches the configured maximum rate (or committed information rate), excess traffic is dropped (or remarked). The result is an output rate that appears as a saw-tooth with crests and troughs.

  Unlike traffic shaping, traffic policing does not cause delay. Classification (which includes traffic policing, traffic shaping and queuing techniques) should take place at the network edge. It is recommended that classification occur as close to the source of the traffic as possible. Also according to this Cisco link, "policing traffic as close to the source as possible".

• Question 803:

  Refer to the exhibit.

  

  

  

  Users in the Operations VLAN on Switch A are unable to communicate with users in the Operations VLAN on Switch B. Which action resolves the issue?

  A. Set the switchport mode to dynamic desirable on Switch B.
  B. Set the EtherChannel mode to LACP on Switch A.
  C. Configure the same allowed VLAN list on Switch A and Switch B.
  D. Set the EtherChannel mode to PAGP on Switch B.
  A. Set the switchport mode to dynamic desirable on Switch B.

• Question 804:

  Which technology does VXLAN use to provide segmentation for Layer 2 and Layer 3 traffic?

  A. bridge domain
  B. VLAN
  C. VRF
  D. VNI
  D. VNI

  ---

  Explanation

  VXLAN has a 24-bit VXLAN network identifier (VNI), which allows for up to 16 million (= 224) VXLAN segments to coexist within the same infrastructure. This surely solve the small number of traditional VLANs.

• Question 805:

  In a Cisco SD-Access wireless environment, which device is responsible for hosting the anycast gateway?

  A. fusion router
  B. control plane node
  C. fabric border node
  D. fabric edge node
  D. fabric edge node

  ---

  Explanation

  "...... Inter-VLAN traffic is attracted to the edge node because the AnyCast gateway for the end hosts resides there." Here is the link: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html

• Question 806:

  What is one benefit of adopting a data modeling language?

  A. augmenting management process using vendor centric actions around models
  B. refactoring vendor and platform specific configurations with widely compatible configurations
  C. augmenting the use of management protocols like SNMP for status subscriptions
  D. deploying machine-friendly codes to manage a high number of devices
  B. refactoring vendor and platform specific configurations with widely compatible configurations

• Question 807:

  Refer to the exhibit. A network administrator notices these console messages from host 10.11.110.12 originating from interface E1/0. The administrator considers this an unauthorized attempt to access SNMP on R1. Which action prevents the attempts to reach R1 E1/0?

  

  A. Configure IOS management plane protection using ACL 90 on interface E1/0.
  B. Configure IOS control plane protection using ACL 90 on interface E1/0.
  C. Add a permit statement including the host 10.11.110.12 into ACL 90.
  D. Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12.
  D. Create an inbound ACL on interface E1/0 to deny SNMP from host 10.11.110.12.

• Question 808:

  Which function is handled by vManage in the Cisco SD-WAN fabric?

  A. Establishes BFD sessions to test liveliness of links and nodes
  B. Distributes policies that govern data forwarding
  C. Performs remote software upgrades for WAN Edge. vSmart and vBond
  D. Establishes IPsec tunnels with nodes.
  C. Performs remote software upgrades for WAN Edge. vSmart and vBond

  ---

  Explanation

  We can remote upgrades WAN Edge, vSmart and vBond in vManage.

  https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.4/Maintenance/Software_Upgrade

• Question 809:

  What are two device roles in Cisco SD-Access fabric? (Choose two.)

  A. core switch
  B. vBond controller
  C. edge node
  D. access switch
  E. border node
  C. edge node
  E. border node

  ---

  Explanation

  There are five basic device roles in the fabric overlay:

  + Control plane node: This node contains the settings, protocols, and mapping tables to provide the endpoint-to-location (EID-to-RLOC) mapping system for the fabric overlay. + Fabric border node: This fabric device (for example, core layer device) connects external Layer 3 networks to the SDA fabric.

  + Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.

  + Fabric WLAN controller (WLC): This fabric device connects APs and wireless endpoints to the SDA fabric.

  + Intermediate nodes: These are intermediate routers or extended switches that do not provide any sort of SD-Access fabric role other than underlay services.

  

• Question 810:

  What Is the difference between the MAC address table and TCAM?

  A. The MAC address table supports partial matches. TCAM requires an exact match.
  B. The MAC address table is contained in TCAM ACL and QoS information is stored in CAM.
  C. Router prefix lookups happen in TCAM. MAC address table lookups happen In CAM.
  D. TCAM is used to make L2 forwarding decisions. CAM is used to build routing tables
  C. Router prefix lookups happen in TCAM. MAC address table lookups happen In CAM.

  ---

  Explanation

  "TCAM is most useful for building tables for searching on longest matches such as IP routing tables organized by IP prefixes. The TCAM table stores ACL, QoS and other information generally associated with upper-layer processing. As a result of using TCAM, applying ACLs does not affect the performance of the switch."

  https://community.cisco.com/t5/networking-documents/cam-content-addressable-memory-vs-tcam-ternary-content/ta-p/3107938