Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 881:

  Which access control feature does MAB provide?

  A. user access based on IP address
  B. allows devices to bypass authenticate
  C. network access based on the physical address of a device
  D. simultaneous user and device authentication
  C. network access based on the physical address of a device

• Question 882:

  Which behavior can be expected when the HSRP versions is changed from 1 to 2?

  A. Each HSRP group reinitializes because the virtual MAC address has changed.
  B. No changes occur because version 1 and 2 use the same virtual MAC OUI.
  C. Each HSRP group reinitializes because the multicast address has changed.
  D. No changes occur because the standby router is upgraded before the active router.
  A. Each HSRP group reinitializes because the virtual MAC address has changed.

  ---

  Explanation

  Even though HSRP version 2 uses the new IP multicast address 224.0.0.102 to send hello packets instead of the multicast address of 224.0.0.2, used by HSRP version 1; when the HSRP version is changed, each group will reinitialize because it now has a new virtual MAC address.

• Question 883:

  Which technology uses network traffic telemetry, contextual information, and file reputation to provide insight into cyber threats?

  A. threat defense
  B. security services
  C. security intelligence
  D. segmentation
  A. threat defense

  ---

  Explanation

  The initial version of the Cisco Cyber Threat Defense solution was introduced in 2013, with a Cisco Validated Design (CVD) to bring together NetFlow telemetry from the Cisco network infrastructure, the Cisco Identity Services Engine (ISE) for user and device identity, and the StealthWatch System through a partnership with Lancope, Inc. to provide network behavior analysis and threat detection in the interior of the network.

• Question 884:

  In a Cisco SD-Access network architecture, which access layer cabling design is optimal for the underlay network?

  A. Switches are cross-linked at the same layer and have a single connection to each upstream distribution device.
  B. Switches are connected to each upstream distribution and core device.
  C. Switches are connected to each upstream distribution device.
  D. Switches are cross-linked to devices at the same layer and at the upstream and downstream devices.
  C. Switches are connected to each upstream distribution device.

• Question 885:

  Refer to the exhibit.

  

  The connecting between SW1 and SW2 is not operational. Which two actions resolve the issue? (Choose two)

  A. configure switchport mode access on SW2
  B. configure switchport nonegotiate on SW2
  C. configure switchport mode trunk on SW2
  D. configure switchport nonegotiate on SW1
  E. configure switchport mode dynamic desirable on SW2
  C. configure switchport mode trunk on SW2
  E. configure switchport mode dynamic desirable on SW2

• Question 886:

  Which JSON script is properly formatted?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 887:

  Refer to the exhibit.

  

  A customer asks an engineer to create a new secure WLAN to support only WPA3. Users must connect using a passphrase. Which encryption and key management configuration is required?

  A. CCMP256 encryption with CCKM key management
  B. GCMP128 encryption with OWE key management
  C. CCMP128 encryption with SAE key management
  D. GCMP256 encryption with 802.1x key management
  C. CCMP128 encryption with SAE key management

• Question 888:

  A switch is attached to router R1 on its gig 0/0 interface. Fort security reasons, you want to prevent R1 from sending OSPF hellos to the switch. Which command should be enabled to accomplish this?

  A. R1(config-router)#ip ospf hello disable
  B. R1(config-router)#ip ospf hello-interval 0
  C. R1(config)#passive-interface Gig 0/0
  D. R1(config-router)#passive-interface Gig 0/0
  D. R1(config-router)#passive-interface Gig 0/0

• Question 889:

  What ate two characteristics of Cisco SD-Access elements? (Choose two )

  A. The border node is required for communication between fabric and nonfabric devices.
  B. Fabric endpoints are connected directly to the border node
  C. Traffic within the fabric always goes through the control plane node
  D. The control plane node has the full RLOC-to-EID mapping database
  E. The border node has the full RLOC-to-EID mapping database
  A. The border node is required for communication between fabric and nonfabric devices.
  D. The control plane node has the full RLOC-to-EID mapping database

• Question 890:

  Refer to the exhibit.

  

  An engineer is troubleshooting an issue with non-Wi-Fi interference on the 5-GHz band. The engineer has enabled Cisco CleanAir and set the appropriate traps, but the AP does not change the channel when it detects significant interference.

  Which action will resolve the issue?

  A. Enable the Avoid Persistent Non-WiFi interference option
  B. Change the DCA Sensitivity option to High
  C. Enable the Event Driven Radio Resource Management option
  D. Disable the Avoid Foreign AP Interference option
  C. Enable the Event Driven Radio Resource Management option