Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 841:

  Refer to the exhibit.

  

  A network architect has partially configured static NAT. which commands should be asked to complete the configuration?

  A. R1(config)#interface GigabitEthernet0/0 R1(config)#ip pat outside R1(config)#interface GigabitEthernet0/1 R1(config)#ip pat inside

  B. R1(config)#interface GigabitEthernet0/0 R1(config)#ip nat outside R1(config)#interface GigabitEthernet0/1 R1(config)#ip nat inside

  C. R1(config)#interface GigabitEthernet0/0 R1(config)#ip nat inside R1(config)#interface GigabitEthernet0/1 R1(config)#ip nat outside

  D. R1(config)#interface GigabitEthernet0/0 R1(config)#ip pat inside R1(config)#interface GigabitEthernet0/1 R1(config)#ip pat outside

  Correct Answer: B

• Question 842:

  Refer to the exhibit. An engineer attempts to bundle interface GiO/0 into the port channel, but it does not function as expected. Which action resolves the issue?

  

  A. Configure channel-group 1 mode active on interface Gi0/0.

  B. Configure no shutdown on interface Gi0/0.

  C. Enable fast LACP PDUs on interface Gi0/0.

  D. Set LACP max-bundle to 2 on interface Port-channel1.

  Correct Answer: D

  If we only have 2 interfaces in Port-channel, then in the display you will see "hot-sby" only if the command (config-if)#lacp max-bundle is 1 is executed on Po1. If we then configure the respective port as "Active", it remains unbundled.

• Question 843:

  Refer to the exhibit.

  

  An engineer has configured an IP SLA for UDP echo's. Which command is needed to start the IP SLA to test every 30 seconds and continue until stopped?

  A. ip sla schedule 100 life forever

  B. ip sla schedule 30 start-time now life forever

  C. ip sla schedule 100 start-time now life 30

  D. ip sla schedule 100 start-time now life forever

  Correct Answer: D

  Frequency 30 already sends it every 30 seconds

• Question 844:

  What is the purpose of an RP in PIM?

  A. send join messages toward a multicast source SPT

  B. ensure the shortest path from the multicast source to the receiver.

  C. receive IGMP joins from multicast receivers.

  D. secure the communication channel between the multicast sender and receiver.

  Correct Answer: A

• Question 845:

  An engineer must configure a ACL that permits packets which include an ACK In the TCP header. Which entry must be Included In the ACL?

  A. access-list 110 permit tcp any any eq 21 tcp-ack

  B. access-list 10 permit ip any any eq 21 tcp-ack

  C. access-list 10 permit tcp any any eq 21 established

  D. access-list 110 permit tcp any any eq 21 established

  Correct Answer: D

  The established keyword is only applicable to TCP access list entries to match TCP segments that have the ACK and/or RST control bit set (regardless of the source and destination ports), which assumes that a TCP connection has already been established in one direction only. Let's see an example below:

  

  Suppose you only want to allow the hosts inside your company to telnet to an outside server but not vice versa, you can simply use an "established" access-list like this: access-list 100 permit tcp any any established access-list 101 permit tcp any any eq telnet ! interface S0/0 ip access-group 100 in ip access-group 101 out

  Note: Suppose host A wants to start communicating with host B using TCP. Before they can send real data, a three-way handshake must be established first. Let`s see how this process takes place:

  

  1.

  First host A will send a SYN message (a TCP segment with SYN flag set to 1, SYN is short for SYNchronize) to indicate it wants to setup a connection with host B. This message includes a sequence (SEQ) number for tracking purpose. This sequence number can be any 32-bit number (range from 0 to 232) so we use "x" to represent it.

  2.

  After receiving SYN message from host A, host B replies with SYN-ACK message (some books may call it SYN/ACK or SYN, ACK message. ACK is short for ACKnowledge). This message includes a SYN sequence number and an ACK number:

  + SYN sequence number (let`s called it "y") is a random number and does not have any relationship with Host A`s SYN SEQ number. + ACK number is the next number of Host A`s SYN sequence number it received, so we represent it with "x +1. It means I received your part. Now send me the next part (x + 1)".

  The SYN-ACK message indicates host B accepts to talk to host A (via ACK part). And ask if host A still wants to talk to it as well (via SYN part).

  3. After Host A received the SYN-ACK message from host B, it sends an ACK message with ACK number "y+1" to host B. This confirms host A still wants to talk to host B.

• Question 846:

  What is the recommended minimum SNR for data applications on wireless networks?

  A. 15

  B. 20

  C. 25

  D. 10

  Correct Answer: B

  https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Signal-to-Noise_Ratio_(SNR)_and_Wireless_Signal_Strength#:~:text=Generally%2C%20a%20signal%20with%20an,networks%20that%20use%20voice% 20applications.

• Question 847:

  Which two Cisco SD-WAN components exchange OMP information?

  A. vAnaiytlcs

  B. vSmart

  C. WAN Edge

  D. vBond

  E. vManage

  Correct Answer: BC

  OMP is the control protocol that is used to exchange routing, policy, and management information between the vSmart controllers and vEdge routers in the overlay network.

• Question 848:

  Refer to the exhibit. What is generated by the script?

  

  A. the cdp neighbors

  B. the routing table

  C. the router processes

  D. the running configuration

  Correct Answer: D

• Question 849:

  Refer to the exhibit.

  

  enable secret CISCO aaa new-model

  tacacs server ise-1 address 10.1.1.1 key cisco1231

  tacacs server ISE-2 address 10.2.2.1 key cisco1231

  aaa group server tacacs+ ISE-Servers server name ise-1 server name ise-2

  A network engineer must configure the router to use the ISE-Servers group for authentication. If both ISE servers are unavailable, the local username database must be used. If no usernames are defined in the configuration, then the enable password must be the last resort to log in.

  Which configuration must be applied to achieve this result?

  A. aaa authentication login default group ISE-Servers local enable

  B. aaa authentication login default group enable local ISE-Servers

  C. aaa authorization exec default group ISE-Servers local enable

  D. aaa authentication login error-enable

  E. aaa authentication login default group enable local ISE-Servers

  Correct Answer: A

• Question 850:

  Refer to the exhibit.

  flow monitor FLOW-MONITOR-1 record netflow ipv6 original-input exit ! sampler SAMPLER-1 mode deterministic 1 out-of 2 exit ! ip cef ipv6 cef ! interface GigabieEthernet 0/0/0 ipv6 address 2001:DB8:2ABCD::2/48 ipv6 flow monitro FLOW-MONITOR-1 sampler SAMPLER-1 input

  What is the effect of introducing the sampler feature into the Flexible NetFlow configuration on the router?

  A. NetFlow updates to the collector are sent 50% less frequently.

  B. Every second IPv4 packet is forwarded to the collector for inspection.

  C. CPU and memory utilization are reduced when compared with what is required for full NetFlow.

  D. The resolution of sampling data increases, but it requires more performance from the router.

  Correct Answer: C

  it's about what record the router is analyzing and not about what is been sent to the collector.