Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 861:

  Which access point mode allows a supported AP to function like a WLAN client would, associating and identifying client connectivity issues?

  A. client mode
  B. SE-connect mode
  C. sensor mode
  D. sniffer mode
  C. sensor mode

  ---

  Explanation

  As these wireless networks grow especially in remote facilities where IT professionals may not always be onsite, it becomes even more important to be able to quickly identify and resolve potential connectivity issuesideally before the users complain or notice connectivity degradation. To address these issues we have created Cisco's Wireless Service Assurance and a new AP mode called "sensor"mode. Cisco's Wireless Service Assurance platform has three components, namely, Wireless PerformanceAnalytics, Real-time Client Troubleshooting, and Proactive Health Assessment. Using a supported AP ordedicated sensor the device can actually function much like a WLAN client would associating andidentifying client connectivity issues within the network in real time without requiring an IT or technician to beon site.

  References:

  https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/dam/en/us/td/docs/wireless/controller/technotes/8-5/b_Cisco_Aironet_Sensor_Deployment_Guide.html.xml

• Question 862:

  Refer to the exhibit.

  

  A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days.

  What is required to complete this task?

  A. Add the username admin privilege 15 common-criteria-policy Administrators password Cisco13579! command.
  B. Add the aaa authentication enable default Administrators command.
  C. The password expiry mechanism is on the AAA server and must be configured there.
  D. No further action is required. The configuration is complete
  A. Add the username admin privilege 15 common-criteria-policy Administrators password Cisco13579! command.

  ---

  Explanation

  SUMMARY STEPS

  Perform this task to create a password security policy and to apply the policy to a specific user profile.

  enable

  configure terminal

  aaa new-model aaa common-criteria policy policy-name

  char-changes number

  max-length number

  min-length number

  numeric-count number

  special-case number

  exit username username common-criteria-policy policy-name password password end

• Question 863:

  Which function is handled by vManage in the Cisco SD-WAN fabric?

  A. Establishes BFD sessions to test liveliness of links and nodes
  B. Distributes policies that govern data forwarding
  C. Performs remote software upgrades for WAN Edge. vSmart and vBond
  D. Establishes IPsec tunnels with nodes.
  C. Performs remote software upgrades for WAN Edge. vSmart and vBond

  ---

  Explanation

  We can remote upgrades WAN Edge, vSmart and vBond in vManage.

  https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.4/Maintenance/Software_Upgrade

• Question 864:

  Refer to the exhibit.

  

  A customer asks an engineer to create a new secure WLAN to support only WPA3. Users must connect using a passphrase.

  Which encryption and key management configuration is required?

  A. CCMP256 encryption with CCKM key management
  B. GCMP128 encryption with OWE key management
  C. CCMP128 encryption with SAE key management
  D. GCMP256 encryption with 802.1x key management
  C. CCMP128 encryption with SAE key management

• Question 865:

  DRAG DROP

  Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

  Select and Place:

  

  

• Question 866:

  Which congestion queuing method on Cisco IOS based routers uses four static queues?

  A. Priority
  B. custom
  C. weighted fair
  D. low latency
  A. Priority

• Question 867:

  A wireless administrator must create a new web authentication corporate SSID that will be using ISE as the external RADIUS server. The guest VLAN must be specified after the authentication completes.

  Which action must be performed to allow the ISE server to specify the guest VLAN?

  A. Enable AAA Override.
  B. Enable Network Access Control State.
  C. Set AAA Policy name.
  D. Set RADIUS Profiling.
  A. Enable AAA Override.

• Question 868:

  Refer to the exhibit.

  

  A network engineer applied a filter for LSA traffic on OSPFv3 interarea routes on the area 5 ABR to protect advertising the internal routes of area 5 to the business partner network. All other areas should receive the area 5 internal routes.

  After the respective route filtering configuration is applied on the ABR, area 5 routes are not visible on any of the areas.

  How must the filter list be applied on the ABR to resolve this issue?

  A. in the "out" direction for area 20 on router R2
  B. in the "in" direction for area 5 on router R1
  C. in the "out" direction for area 5 on router R1
  D. in the "in" direction for area 20 on router R2
  A. in the "out" direction for area 20 on router R2

• Question 869:

  Refer to the exhibit.

  

  What does this Python script do?

  A. enters the TACACS+ username for a specific IP address
  B. reads the username for a specific IP address from a light database
  C. writes the username for a specific IP address into a light database
  D. enters the RADIUS username for a specific IP address
  B. reads the username for a specific IP address from a light database

• Question 870:

  An engineer is configuring Local WebAuth on a Cisco Wireless LAN Controller.

  According to RFC 5737, which VIRTUAL IP address must be used in this configuration?

  A. 192.0.2.1
  B. 172.20.10.1
  C. 1.1.1.1
  D. 192.168.0.1
  A. 192.0.2.1

  ---

  Explanation

  The virtual interface IP address (IPv4 or IPv6) is used only in communications between the controller and wireless clients. It serves as the redirect address for the web authentication login page. It is recommended that you configure a nonroutable IP address for the virtual interface, ideally not overlapping with the network infrastructure addresses. Use one of the options proposed in RFC 5737, for example, 192.0.2.0/24, 198.51.100.0/24, and 203.0.113.0/24 networks.