Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 811:

  An engineer is configuring GigabitEthernet1/0/0 for VRRP. When the router has the highest priority in group 5, it must assume the master role.

  Which command set should the engineer add to the configuration to accomplish this task?

  interface GigabitEthernet1/0/0 description To IDF A 38-70-774-10 ip address 172.16.13.2 255.255.255.0

  A. standby 5 ip 172.16.13.254standby 5 priority 100standby 5 track 1 decrement 10
  B. standby 5 ip 172.16.13.254standby 5 priority 100standby 5 preempt
  C. vrrp 5 ip 172.16.13.254vrrp 5 priority 100
  D. vrrp 5 ip 172.16.13.254 255.255.255.0vrrp 5 track 1 decrement 10vrrp 5 preempt
  C. vrrp 5 ip 172.16.13.254vrrp 5 priority 100

  ---

  Explanation

  Preempt is by default enabled on VRRP.

• Question 812:

  What is the function of an RP in a PIM-SM network?

  A. to provide routing to the PIM leaf routers
  B. to track sources and recovers on the shared distribution tree
  C. to automate the distribution of group-to rendezvous point mappings
  D. to connect multicast sources with receivers
  B. to track sources and recovers on the shared distribution tree

• Question 813:

  Which Cisco FlexConnect state allows wireless users that are connected to the network to continue working after the connection to the WLC has been lost?

  A. Authentication Down/Switching Down
  B. Authentication-Central/Switch-Local
  C. Authentication- Down/Switch-Local
  D. Authentication-Central/Switch-Central
  C. Authentication- Down/Switch-Local

  ---

  Explanation

  Operation Modes There are two modes of operation for the FlexConnect AP.

  * Connected mode: The WLC is reachable. In this mode the FlexConnect AP has CAPWAP connectivity with its WLC.

  * Standalone mode: The WLC is unreachable. The FlexConnect has lost or failed to establish CAPWAP connectivity with its WLC. A WAN-link outage between a branch and its central site is a example of such a mode of operation.

  FlexConnect States A FlexConnect WLAN, depending on its configuration and network connectivity, is classified as being in one of the following defined states.

  * Authentication-Central/Switch-Central: This state represents a WLAN that uses a centralized authentication method such as 802.1X, VPN, or web. User traffic is sent to the WLC via CAPWAP (Central switching). This state is supported only when FlexConnect is in connected mode.

  * Authentication Down/Switching Down: Central switched WLANs no longer beacon or respond to probe requests when the FlexConnect AP is in standalone mode. Existing clients are disassociated.

  * Authentication-Central/Switch-Local: This state represents a WLAN that uses centralized authentication, but user traffic is switched locally. This state is supported only when the FlexConnect AP is in connected mode.

  * Authentication-Down/Switch-Local: A WLAN that requires central authentication rejects new users.

  Existing authenticated users continue to be switched locally until session time-out if configured. The WLAN continues to beacon and respond to probes until there are no more existing users associated to the WLAN. This state occurs as a result of the AP going into standalone mode.

  * Authentication-local/switch-local: This state represents a WLAN that uses open, static WEP, shared, or WPA2 PSK security methods. User traffic is switched locally. These are the only security methods supported locally if a FlexConnect goes into standalone mode. The WLAN continues to beacon and respond to probes. Existing users remain connected and new user associations are accepted. If the AP is in connected mode, authentication information for these security types is forwarded to the WLC.

• Question 814:

  Refer to the exhibit.

  

  A network engineer configures NAT on R1 and enters the show command to verify the configuration.

  What does the output confirm?

  A. The first pocket triggered NAT to add on entry to NAT table
  B. R1 is configured with NAT overload parameters
  C. A Telnet from 160.1.1 1 to 10.1.1.10 has been initiated.
  D. R1 to configured with PAT overload parameters
  A. The first pocket triggered NAT to add on entry to NAT table

• Question 815:

  Which tunnel type allows clients to perform a seamless Layer 3 roam between a Cisco AireOS WLC and a Cisco IOS XE WLC?

  A. Ethernet over IP
  B. IPsec
  C. Mobility
  D. VPN
  C. Mobility

• Question 816:

  What is a common trait between Ansible and Chef?

  A. Both are used for mutable infrastructure
  B. Both rely on a declarative approach.
  C. Both rely on NETCONF.
  D. Both require a client to be installed on hosts
  B. Both rely on a declarative approach.

• Question 817:

  Which function does a Cisco SD-Access extended node perform?

  A. provides fabric extension to nonfabric devices through remote registration and configuration
  B. performs tunneling between fabric and nonfabric devices to route traffic over unknown networks
  C. used to extend the fabric connecting to downstream nonfabric enabled Layer 2 switches
  D. in charge of establishing Layer 3 adjacencies with nonfabric unmanaged node
  C. used to extend the fabric connecting to downstream nonfabric enabled Layer 2 switches

• Question 818:

  Which access controls list allows only TCP traffic with a destination port range of 22-433, excluding port 80?

  A. deny tcp any any eq 80 permit tcp any any gt 21 lt 444
  B. permit tcp any any range 22 443 deny tcp any any eq 80
  C. permit tcp any any eq 80
  D. deny tcp any any eq 80 permit tcp any any range 22 443
  D. deny tcp any any eq 80 permit tcp any any range 22 443

• Question 819:

  SIMULATION

  

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  R2

  config t

  username NetworkAdmin privilege 15 password CiscoENCOR

  line vty 0 4

  login local

  transport input telnet rlogin

  exec-timeout 1200 0

  

  

  R1

  router bgp 10

  no bgp default ipv4-unicast

  bgp router-id 10.1.1.111

  neigh 209.165.200.226 remote-as 20

  neigh 209.165.202.130 remote-as 30

  address-family ipv4

  network 10.1.1.10 mask 255.255.255.255

  network 209.165.201.20 mask 255.255.255.255

  network 209.165.201.10 mask 255.255.255.255

  neigh 209.165.200.226 activate

  neigh 209.165.202.130 activate

• Question 820:

  Which DNS lookup does an access point perform when attempting CAPWAP discovery?

  A. CISCO-DNA-CONTROlLLER.local
  B. CAPWAP-CONTROLLER.local
  C. CISCO-CONTROLLER.local
  D. CISCO-CAPWAP-CONTROLLER.local
  D. CISCO-CAPWAP-CONTROLLER.local

  ---

  Explanation

  http://www.revolutionwifi.net/revolutionwifi/2010/11/capwap-controller-discovery-process_23.html