Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 821:

  In a Cisco SD-Access wireless architecture, which device manages endpoint ID to Edge Node bindings?

  A. fabric control plane node
  B. fabric wireless controller
  C. fabric border node
  D. fabric edge node.
  A. fabric control plane node

  ---

  Explanation

  SD-Access Wireless Architecture Control Plane Node Closer Look Fabric Control-Plane Node is based on a LISP Map Server / Resolver Runs the LISP Endpoint ID Database to provide overlay reachability information + A simple Host Database, that tracks Endpoint ID to Edge Node bindings (RLOCs)

  + Host Database supports multiple types of Endpoint ID (EID), such as IPv4 /32, IPv6 /128* or MAC/48

  + Receives prefix registrations from Edge Nodes for wired clients, and from Fabric mode WLCs for wireless clients

  + Resolves lookup requests from FE to locate Endpoints

  + Updates Fabric Edge nodes, Border nodes with wireless client mobility and RLOC information

  References:

  https://www.ciscolive.com/c/dam/r/ciscolive/latam/docs/2018/pdf/BRKEWN-2020.pdf

• Question 822:

  Refer to the exhibit.

  

  Which network script automation option or tool is used in the exhibit?

  A. EEM
  B. Bash script
  C. REST correct
  D. NETCONF
  E. Python
  C. REST correct

• Question 823:

  In a three-tier hierarchical campus network design, which action is a design best-practice for the core layer?

  A. provide QoS prioritization services such as marking, queueing, and classification for critical network traffic
  B. provide redundant Layer 3 point-to-point links between the core devices for more predictable and faster convergence
  C. provide advanced network security features such as 802. IX, DHCP snooping, VACLs, and port security
  D. provide redundant aggregation for access layer devices and first-hop redundancy protocols such as VRRP
  B. provide redundant Layer 3 point-to-point links between the core devices for more predictable and faster convergence

  ---

  Explanation

  All policies are configured an the access and distribution layer, CORE must be use ony to forward packets and be highly redundant an usually be on L3

• Question 824:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary pre-configurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  

  Verification:

  

• Question 825:

  What is a benefit of MACsec in a multilayered LAN network design?

  A. Application flows between hosts on the LAN to remote destinations can be encrypted.
  B. Layer 2 trunk links between switches can be secured.
  C. There is no requirement to run IEEE 802.1X when MACsec is enabled on a switch port.
  D. Layer 3 links between switches can be secured.
  B. Layer 2 trunk links between switches can be secured.

• Question 826:

  What is a difference between OSPF and EIGRP?

  A. OSPF is an advanced distance vector protocol. EIGRP is a link-state protocol.
  B. OSPF is a hybrid routing protocol. EIGRP is a link-state routing protocol.
  C. OSPF uses the DUAL algorithm. EIGRP uses the SPF algorithm.
  D. OSPF uses an administrative distance of 110. EIGRP uses an administrative distance of 170.
  D. OSPF uses an administrative distance of 110. EIGRP uses an administrative distance of 170.

• Question 827:

  Which mechanism can be used to enforce network access authentication against an AAA server if the endpoint does not support the 802.1X supplicant functionality?

  A. private VLANs
  B. port security
  C. MAC Authentication Bypass
  D. MACsec
  C. MAC Authentication Bypass

• Question 828:

  An engineer is reviewing a PCAP file that contains a packet capture of a four-way handshake exchange between a client and AP using WPA2 Enterprise.

  Which EAPOL message validates and confirms that the client device has successfully Installed the GTK?

  A. M4-Message
  B. M3-Message
  C. M2-Message
  D. M1-Message
  A. M4-Message

• Question 829:

  Refer to the exhibit.

  To which setting is the client limitation for WLAN LAP1 configured?

  

  A. 60
  B. 1800
  C. Client exclusion is not enabled
  D. 25
  D. 25

• Question 830:

  Refer to the exhibit.

  

  An engineer attempts to establish BGP peering between router CORP and two ISP routers.

  What is the root cause for the failure between CORP and ISP#2?

  A. Router ISP#2 is configured to use SHA-1 authentication.
  B. There is a password mismatch between router CORP and router ISP#2.
  C. Router CORP is configured with an extended access control list.
  D. MD5 authorization is configured incorrectly on router ISP#2.
  B. There is a password mismatch between router CORP and router ISP#2.