Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 841:

  DRAG DROP

  Refer to the exhibit Drag and drop the snippets into the RESTCONF request to form the request that returns this response. Not all options are used

  

  Select and Place:

  

  

• Question 842:

  Which device is responsible for finding EID-to-RLOC mappings when traffic is sent to a LISP-capable site?

  A. map server
  B. map resolver
  C. ingress tunnel router
  D. egress tunnel router
  C. ingress tunnel router

• Question 843:

  What are two considerations when using SSO as a network redundancy feature? (Choose two)

  A. both supervisors must be configured separately
  B. the multicast state is preserved during switchover
  C. must be combined with NSF to support uninterrupted Layer 2 operations
  D. must be combined with NSF to support uninterrupted Layer 3 operations
  E. requires synchronization between supervisors in order to guarantee continuous connectivity
  D. must be combined with NSF to support uninterrupted Layer 3 operations
  E. requires synchronization between supervisors in order to guarantee continuous connectivity

  ---

  Explanation

  While SSO is happening, routing protocol communication between 2 supervisor stopped because lost of adjacency.

  It and cause interuption, to avoid this we need NFS.

  in order for NFS to work properly, both supervisor must NFS.

  Cisco IOS Nonstop Forwarding(NSF) always runs with stateful switchover (SSO) and provides redundancy for Layer 3 traffic.

  References:

  https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3se/consolidated_guide/b_consolidated_3850_3se_cg_chapter_01101110.pdf

• Question 844:

  Which time protocol offers security features and utilizes site-local IPv6 multicast addresses?

  A. NTPv3
  B. PTP IEEE 1588v1
  C. NTPv4
  D. PTP IEEE 1588v2
  C. NTPv4

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/bsm/configuration/15-0sy/ip6-ntpv4.html

• Question 845:

  An engineer must configure a ACL that permits packets which include an ACK In the TCP header.

  Which entry must be Included In the ACL?

  A. access-list 110 permit tcp any any eq 21 tcp-ack
  B. access-list 10 permit ip any any eq 21 tcp-ack
  C. access-list 10 permit tcp any any eq 21 established
  D. access-list 110 permit tcp any any eq 21 established
  D. access-list 110 permit tcp any any eq 21 established

  ---

  Explanation

  The established keyword is only applicable to TCP access list entries to match TCP segments that have the ACK and/or RST control bit set (regardless of the source and destination ports), which assumes that a TCP connection has already been established in one direction only. Let's see an example below:

  

  Suppose you only want to allow the hosts inside your company to telnet to an outside server but not vice versa, you can simply use an "established" access-list like this:

  access-list 100 permit tcp any any established access-list 101 permit tcp any any eq telnet

  !

  interface S0/0

  ip access-group 100 in

  ip access-group 101 out

  Note: Suppose host A wants to start communicating with host B using TCP. Before they can send real data, a three-way handshake must be established first. Let`s see how this process takes place:

  

  1. First host A will send a SYN message (a TCP segment with SYN flag set to 1, SYN is short for SYNchronize) to indicate it wants to setup a connection with host B. This message includes a sequence (SEQ) number for tracking purpose.

  This sequence number can be any 32-bit number (range from 0 to 232) so we use "x" to represent it.

  2. After receiving SYN message from host A, host B replies with SYN-ACK message (some books may call it SYN/ACK or SYN, ACK message. ACK is short for ACKnowledge). This message includes a SYN sequence number and an ACK number:

  + SYN sequence number (let`s called it "y") is a random number and does not have any relationship with Host A`s SYN SEQ number. + ACK number is the next number of Host A`s SYN sequence number it received, so we represent it with "x

  +1. It means I received your part. Now send me the next part (x + 1)".

  The SYN-ACK message indicates host B accepts to talk to host A (via ACK part). And ask if host A still wants to talk to it as well (via SYN part).

  3. After Host A received the SYN-ACK message from host B, it sends an ACK message with ACK number "y+1" to host B. This confirms host A still wants to talk to host B.

• Question 846:

  An engineer is implementing a route map to support redistribution within BGP. The route map must configured to permit all unmatched routes.

  Which action must the engineer perform to complete this task?

  A. Include a permit statement as the first entry
  B. Include at least one explicit deny statement
  C. Remove the implicit deny entry
  D. Include a permit statement as the last entry
  D. Include a permit statement as the last entry

• Question 847:

  Which two characteristics apply to the endpoint security aspect of the Cisco Threat Defense architecture? (Choose two.)

  A. detect and black ransomware in email attachments
  B. outbound URL analysis and data transfer controls
  C. user context analysis
  D. blocking of fileless malware in real time
  E. cloud-based analysis of threats
  B. outbound URL analysis and data transfer controls
  D. blocking of fileless malware in real time

• Question 848:

  JSON web tokens (JWT) are used to secure JSON based communications.

  Which of the following fields make up a JWT? (Choose three.)

  A. Header
  B. Trailer
  C. Payload
  D. Sequence number
  E. Signature
  A. Header
  C. Payload
  E. Signature

  ---

  Explanation

  References:

  https://jwt.io/introduction

• Question 849:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  EIGRP is preconfigured on all routers. Configure R10 and R20 to complete these tasks.

  Task 1:

  Modify the existing ACL on R10 so that EIGRP routes are received from R20 and R30.

  1. The modification should only allow EIGRP routes to pass.

  2. Do not remove any configuration from R10 to achieve this task.

  Task 2:

  Configure CoPP on R20 to achieve these results:

  1. Permit ICMP traffic from 192.168.24.0/24.

  2. Limit traffic to 8,000 bps.

  3. Discard additional packets.

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  

  

  

  

  

  

  

  

  

  

  

  

  

• Question 850:

  Which two network problems indicate a need to implement QoS in a campus network? (Choose two)

  A. port flapping
  B. excess jitter
  C. misrouted network packets
  D. duplicate IP addresses
  E. bandwidth-related packet loss
  B. excess jitter
  E. bandwidth-related packet loss