Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 81:

  Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?

  A. MTU
  B. Window size
  C. MRU
  D. MSS
  D. MSS

  ---

  Explanation

  The TCP Maximum Segment Size (TCP MSS) defines the maximum amount of data that a host is willing to accept in a single TCP/IP datagram. This TCP/IP datagram might be fragmented at the IP layer. The MSS value is sent as a TCP header option only in TCP SYN segments. Each side of a TCP connection reports its MSS value to the other side. Contrary to popular belief, the MSS value is not negotiated between hosts. The sending host is required to limit the size of data in a single TCP segment to a value less than or equal to the MSS reported by the receiving host. TCP MSS takes care of fragmentation at the two endpoints of a TCP connection, but it does not handle the case where there is a smaller MTU link in the middle between these two endpoints. PMTUD was developed in order to avoid fragmentation in the path between the endpoints. It is used to dynamically determine the lowest MTU along the path from a packet's source to its destination.

  References:

  http://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulationgre/25885-pmtud-ipfrag.html(thereissomeexamplesofhowTCPMSSavoidsIPFragmentationinthislinkbutitistoolongsoifyouwanttoreadpleasevisitthislink)Note:IPfragmentationinvolvesbreakingadatagramintoanumberofpiecesthatcanbereassembledlater.

• Question 82:

  A wireless client roams from one Access Point to another Access Point using a different switch in a Cisco SD-Access network.

  If only a single Wireless Lan Controller in involved, what roaming methods is being used?

  A. L3 roaming
  B. inter-xTR
  C. auto anchor
  D. bridged roaming
  B. inter-xTR

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/mobility.html

• Question 83:

  DRAG DROP

  Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.

  Select and Place:

  

  

  ---

  There are four messages sent between the DHCP Client and DHCP Server: DHCPDISCOVER, DHCPOFFER, DHCPREQUEST and DHCPACKNOWLEDGEMENT.

  This process is often abbreviated as DORA (for Discover, Offer, Request, Acknowledgement).

• Question 84:

  Which two features are available only in next-generation firewalls? (Choose two.)

  A. virtual private network
  B. deep packet inspection
  C. stateful inspection
  D. application awareness
  E. packet filtering
  B. deep packet inspection
  D. application awareness

• Question 85:

  Which action is the vSmart controller responsible for in an SD-WAN deployment?

  A. onboard vEdge nodes into the SD-WAN fabric
  B. distribute security information for tunnel establishment between vEdge routers
  C. manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric
  D. gather telemetry data from vEdge routers
  B. distribute security information for tunnel establishment between vEdge routers

  ---

  Explanation

  + Orchestration plane (vBond) assists in securely onboarding the SD-WAN WAN Edge routers into the SD-WAN overlay (-> Therefore answer "onboard vEdge nodes into the SD-WAN fabric" mentioned about vBond). The vBond controller, or orchestrator, authenticates and authorizes the SD-WAN components onto the network. The vBond orchestrator takes an added responsibility to distribute the list of vSmart and vManage controller information to the WAN Edge routers. vBond is the only device in SD-WAN that requires a public IP address as it is the first point of contact and authentication for all SD-WAN components to join the SD-WAN fabric. All other components need to know the vBond IP or DNS information. + Management plane (vManage) is responsible for central configuration and monitoring. The vManage controller is the centralized network management system that provides a single pane of glass GUI interface to easily deploy, configure, monitor and troubleshoot all Cisco SD-WAN components in the network. (-> Answer "manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric" and answer "gather telemetry data from vEdge routers" are

  about vManage)

  + Control plane (vSmart) builds and maintains the network topology and make decisions on the traffic flows. The vSmart controller disseminates control plane information between WAN Edge devices, implements control plane policies and distributes data plane policies to network devices for enforcement (-> Answer "distribute security information for tunnel establishment between vEdge routers" is about vSmart)

• Question 86:

  Refer to the exhibit.

  

  An engineer must verify the operational status of ISP 1 by testing the IP reachability of the ISP1 DNS server every 10 seconds. If the DNS server is not reachable from the CPE through the Gi0/0 interface, then the test should fail.

  Which two configuration sets must be used to accomplish this task? (Choose two.)

  A. ip route 0.0.0.0 0.0.0.0 198.51.100.1 ip route 0.0.0.0 0.0.0.0 203.0.113.1
  B. ip route 0.0.0.0 255.255.255.255 198.51.100.1 ip route 0.0.0.0 255.255.255.255 203.0.113.1
  C. ip route 198.51.100.252 255.255.255.255 198.51.100.1
  D. ip sla 1 icmp-echo 198.51.100.252 frequency 10 ip sla schedule 1 life forever start-time now
  E. ip sla 1 dns www.cisco.com name-server 198.51.100.252 frequency 10 ip sla schedule 1 life forever start-time now
  C. ip route 198.51.100.252 255.255.255.255 198.51.100.1
  D. ip sla 1 icmp-echo 198.51.100.252 frequency 10 ip sla schedule 1 life forever start-time now

• Question 87:

  Which plane transports traffic between sites across the SD-WAN fabric?

  A. IPsec
  B. Management
  C. Data
  D. Control
  C. Data

  ---

  Explanation

  The correct answer is Option C. Data.

  Cisco SD-WAN architecture is divided into three main planes:

  Management Plane - handled by vManage; used for configuration and monitoring.

  Control Plane - handled by vSmart using OMP; responsible for routing information exchange and policy distribution.

  Data Plane - built using IPsec tunnels between WAN Edge devices; responsible for forwarding user and application traffic between sites.

  The data plane carries user traffic and transports data between SD-WAN sites.

  Option A. IPsec is a technology used within the data plane, not a plane itself.

  Option B. Management is used for configuration and orchestration, not traffic forwarding.

  Option D. Control is used for routing and policy decisions, not actual traffic transport.

• Question 88:

  Which OSPF networks types are compatible and allow communication through the two peering devices?

  A. broadcast to nonbroadcast
  B. point-to-multipoint to nonbroadcast
  C. broadcast to point-to-point
  D. point-to-multipoint to broadcast
  A. broadcast to nonbroadcast

  ---

  Explanation

  The following different OSPF types are compatible with each other: + Broadcast and Non-Broadcast (adjust hello/dead timers) + Point-to-Point and Point-to-Multipoint (adjust hello/dead timers) Broadcast and Non-Broadcast networks elect DR/BDR so they are compatible. Point-topoint/ multipoint do not elect DR/BDR so they are compatible.

  References:

  https://www.freeccnaworkbook.com/workbooks/ccna/configuring-ospf-network-types

• Question 89:

  Which two statements about HSRP are true? (Choose two)

  A. It supports unique virtual MAC addresses
  B. Its virtual MAC is 0000.0C07.ACxx
  C. Its default configuration allows for pre-emption
  D. It supports tracking
  E. Its multicast virtual MAC is 0000.5E00.01xx
  B. Its virtual MAC is 0000.0C07.ACxx
  D. It supports tracking

• Question 90:

  What is one fact about Cisco SD-Access wireless network deployments?

  A. The access point is part of the fabric underlay
  B. The WLC is part of the fabric underlay
  C. The access point is part the fabric overlay
  D. The wireless client is part of the fabric overlay
  C. The access point is part the fabric overlay

  ---

  Explanation

  Access Points

  + AP is directly connected to FE (or to an extended node switch)

  + AP is part of Fabric overlay

  References:

  https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2018/pdf/BRKEWN-2020.pdf