Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 841:

  What is a client who is running 802.1x for authentication reffered to as?

  A. supplicant
  B. NAC device
  C. authenticator
  D. policy enforcement point
  A. supplicant

• Question 842:

  Which of the following are valid statements when configuring Nonstop Forwarding (NSF) with Stateful Switchover (SSO) on a Cisco device? (Choose two.)

  A. supports multicast routing protocols
  B. Supports IPv4 and IPv6
  C. Nonstop Forwarding requires SSO to also be configured
  D. HSRP is not supported with NSF/SSO
  E. Improper implementation of NSF/SSO can result in routing loops
  C. Nonstop Forwarding requires SSO to also be configured
  D. HSRP is not supported with NSF/SSO

  ---

  Explanation

  NSF capability is supported for IPv4 routing protocols only. NSF capability is not supported for IPv6 routing protocols.

  NSF does not support IP Multicast Routing, as it is not SSO-aware.

  You must configure SSO in order to use NSF with any supported protocol.

  The Hot Standby Routing Protocol (HSRP) is not supported with NSF SSO. Do not use HSRP with NSF SSO.

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9400/software/release/16-6/configuration_guide/stck_mgr_ha/b_166_nsf_sso_9400_cg.html

• Question 843:

  A server running Linux is providing support for virtual machines along with DNS and DHCP services for a small business. Which technology does this represent?

  A. container
  B. Type 1 hypervisor
  C. hardware pass-thru
  D. Type 2 hypervisor
  D. Type 2 hypervisor

  ---

  Explanation

  In contrast to type 1 hypervisor, a type 2 hypervisor (or hosted hypervisor) runs on top of an operating system and not the physical hardware directly. A big advantage of Type 2 hypervisors is that management console software is not required. Examples of type 2 hypervisor are VMware Workstation (which can run on Windows, Mac and Linux) or Microsoft Virtual PC (only runs on Windows).

• Question 844:

  When reason could cause an OSPF neighborship to be in the EXSTART/EXCHANGE state?

  A. Mismatched OSPF network type
  B. Mismatched areas
  C. Mismatched MTU size
  D. Mismatched OSPF link costs
  C. Mismatched MTU size

  ---

  Explanation

  When OSPF adjacency is formed, a router goes through several state changes before it becomes fully adjacent with its neighbor. The states are Down -> Attempt (optional) -> Init -> 2-Way -> Exstart -> Exchange -> Loading -> Full. Short descriptions about these states are listed below:

  Down: no information (hellos) has been received from this neighbor. Attempt: only valid for manually configured neighbors in an NBMA environment. In Attempt state, the router sends unicast hello packets every poll interval to the neighbor, from which hellos have not been received within the dead interval.

  Init: specifies that the router has received a hello packet from its neighbor, but the receiving router's ID was not included in the hello packet 2-Way: indicates bi-directional communication has been established between two routers. Exstart:

  Once the DR and BDR are elected, the actual process of exchanging link state information can start between the routers and their DR and BDR. Exchange: OSPF routers exchange database descriptor (DBD) packets Loading: In this state, the actual exchange of link state information occurs Full: routers are fully adjacent with each other (Reference: http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080093f0e.shtml) Neighbors Stuck in Exstart/Exchange State the problem occurs most frequently when attempting to run OSPF between a Cisco router and another vendor's router. The problem occurs when the maximum transmission unit (MTU) settings for neighboring router interfaces don't match. If the router with the higher MTU sends a packet larger that the MTU set on the neighboring router, the neighboring router ignores the packet.

  https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13684-12.html#neighbors

• Question 845:

  What occurs during a Layer 2 inter-controller roam?

  A. A new security context is applied for each controller to which the client is associated, but the IP address remains the same.
  B. The client must be associated to a new controller where a new IP address and security context are applied.
  C. The client retains the same IP address and security context.
  D. The client is marked as foreign in the database of each new controller to which it is connected.
  C. The client retains the same IP address and security context.

• Question 846:

  Refer to the exhibit.

  

  A customer reports occasional brief audio dropouts on its Cisco Wi-Fi phones. The environment consists of a Cisco Catalyst 9800 Series WLC with Catalyst 9120 APs running RRM. The phones connect on the 5- GHz band.

  Which action resolves this issue?

  A. Enable Media Stream Multicast-direct.
  B. Disable Coverage Hole Detection.
  C. Set WMM Policy to Required.
  D. Enable Defer Priority 6.
  C. Set WMM Policy to Required.

• Question 847:

  Which technology enables a redundant supervisor engine to take over when the primary supervisor engine fails?

  A. NSF
  B. graceful restart
  C. SSO
  D. FHRP
  C. SSO

  ---

  Explanation

  SSO is the base technology that has this capability at L-2. NSF sits on top of SSO to extend the same capability to L-3.

• Question 848:

  When a wireless client roams between two different wireless controllers, a network connectivity outage is experience for a period of time. Which configuration issue would cause this problem?

  A. Not all of the controllers in the mobility group are using the same mobility group name.
  B. Not all of the controllers within the mobility group are using the same virtual interface IP address.
  C. All of the controllers within the mobility group are using the same virtual interface IP address.
  D. All of the controllers in the mobility group are using the same mobility group name.
  B. Not all of the controllers within the mobility group are using the same virtual interface IP address.

  ---

  Explanation

  A prerequisite for configuring Mobility Groups is "All controllers must be configured with the same virtual interface IP address". If all the controllers within a mobility group are not using the same virtual interface, inter-controller roaming may appear to work, but the handoff does not complete, and the client loses connectivity for a period of time. -> Answer B is correct.

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/configguide/b_cg85/mobility_groups.html

• Question 849:

  Which encryption hashing algorithm does NTP use for authentication?

  A. SSL
  B. MD5
  C. AES128
  D. AES256
  B. MD5

  ---

  Explanation

  An example of configuring NTP authentication is shown below:

  Router1(config)#ntp authentication-key 2 md5 certbus Router1(config)#ntp authenticate Router1(config)#ntp trusted-key 2

• Question 850:

  Refer to the exhibit.

  

  An engineer is troubleshooting an issue with client devices triggering excessive power changes on APs in the 2.4 GHz band. Which action resolves this issue?

  A. Disable Aironet IE.
  B. Set the 802.11b/g/n DTIM interval to 0.
  C. Enable MFP Client Protection.
  D. Disable Coverage Hole Detection.
  D. Disable Coverage Hole Detection.

  ---

  Explanation

  "The device discriminates between coverage holes that can and cannot be corrected. For coverage holes that can be corrected, the device mitigates the coverage hole by increasing the transmit power level for that specific access point"

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/ewc/16-12/config-guide/ewc_cg_16_12/coverage_hole_detection.pdf