Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 851:

  An engineer must construct an access list tot a Cisco Catalyst 9800 Series WLC that will - edirect wireless guest users to a splash page that is hosted on a Cisco ISE server. The Cisco ISE servers are hosted at 10.9.11.141 and 10.1.11.141.

  Which access list meets the requirements?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 852:

  Which security feature does stateless authentication and authorization use for REST API calls?

  A. OAuth 2 token
  B. API keys
  C. SSL/TLS certificate encryption
  D. Cookie-based session authentication
  A. OAuth 2 token

• Question 853:

  What is YANG used for?

  A. scraping data via CLI
  B. processing SNMP read-only polls
  C. describing data models
  D. prowling a transport for network configuration data between client and server
  C. describing data models

• Question 854:

  Which two new security capabilities are introduced by using a next-generation firewall at the Internet edge? (Choose two.)

  A. DVPN
  B. NAT
  C. stateful packet inspection
  D. application-level inspection
  E. integrated intrusion prevention
  D. application-level inspection
  E. integrated intrusion prevention

• Question 855:

  When firewall capabilities are considered, which feature is found only in Cisco nextgeneration firewalls?

  A. malware protection
  B. stateful inspection
  C. traffic filtering
  D. active/standby high availability
  A. malware protection

  ---

  Explanation

  Malware protection

  IPS/IDS

  URL Filtering

• Question 856:

  An engineer is reviewing a PCAP file that contains a packet capture of a four-way handshake exchange between a client and AP using WPA2 Enterprise.

  Which EAPOL message validates and confirms that the client device has successfully Installed the GTK?

  A. M2-Message
  B. M1-Message
  C. M3-Message
  D. M4-Message
  D. M4-Message

• Question 857:

  DRAG DROP

  Drag and drop the REST API authentication methods from the left onto their descriptions on the right.

  Select and Place:

  

  

• Question 858:

  Refer to the exhibit. An engineer has configured an IP SLA for UDP echo's.

  

  Which command is needed to start the IP SLA to test every 30 seconds and continue until stopped?

  A. ip sla schedule 100 life forever
  B. ip sla schedule 30 start-time now life forever
  C. ip sla schedule 100 start-time now life 30
  D. ip sla schedule 100 start-time now life forever
  D. ip sla schedule 100 start-time now life forever

  ---

  Explanation

  Frequency 30 already sends it every 30 seconds

• Question 859:

  Refer to the exhibit.

  

  Based on the configuration in this WLAN security setting, which method can a client use to authenticate to the network?

  A. text string
  B. username and password
  C. certificate
  D. RADIUS token
  A. text string

• Question 860:

  What is one difference between saltstack and ansible?

  A. SaltStack uses an API proxy agent to program Cisco boxes in agent mode, whereas Ansible uses a Telnet connection.
  B. SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box
  C. SaltStack is agent based, whereas Ansible is agentless.
  D. SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus
  C. SaltStack is agent based, whereas Ansible is agentless.