Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 901:

  Which two security features are available when implementing NTP? (Choose two )

  A. symmetric server passwords
  B. dock offset authentication
  C. broadcast association mode
  D. encrypted authentication mechanism
  E. access list-based restriction scheme
  D. encrypted authentication mechanism
  E. access list-based restriction scheme

  ---

  Explanation

  The time kept on a machine is a critical resource and it is strongly recommend that you use the security features of NTP to avoid the accidental or malicious setting of incorrect time. The two security features available are an access list-based restriction scheme and an encrypted authentication mechanism.

  References:

  https://www.cisco.com/c/en/us/support/docs/availability/high-availability/19643-ntpm.html

• Question 902:

  Refer to the exhibit.

  

  What is the result when a technician adds the monitor session 1 destination remote vlan 223 command?

  A. The RSPAN VLAN is replaced by VLAN 223.
  B. RSPAN traffic is sent to VLANs 222 and 223.
  C. An error is flagged for configuring two destinations.
  D. RSPAN traffic is split between VLANs 222 and 223.
  A. The RSPAN VLAN is replaced by VLAN 223.

  ---

  Explanation

  This is the result in a lab.

  switch-1(config)#do sh run | s monitor monitor session 1 source interface Gi1/0/2 rx

  monitor session 1 source interface Gi1/0/1 tx monitor session 1 source interface Po14

  monitor session 1 destination remote vlan 222 switch-1(config)#do sh monitor session 1

  Session 1

  --------- Type : Remote Source Session

  Source Ports :

  RX Only : Gi1/0/2

  TX Only : Gi1/0/1

  Both : Po14

  Dest RSPAN VLAN : 222

  switch-1(config)#monitor session 1 destination remote vlan 223 switch-1(config)#do sh run | s monitor

  monitor session 1 source interface Gi1/0/2 rx monitor session 1 source interface Gi1/0/1 tx

  monitor session 1 source interface Po14 monitor session 1 destination remote vlan 223

  switch-1(config)#do sh monitor session 1

  Session 1

  --------- Type : Remote Source Session

  Source Ports :

  RX Only : Gi1/0/2

  TX Only : Gi1/0/1

  Both : Po14

  Dest RSPAN VLAN : 223

• Question 903:

  Refer to the exhibit

  

  Which command must be applied to complete the configuration and enable RESTCONF?

  A. ip http secure-server
  B. ip http server
  C. ip http secure-port 443
  D. ip http client username restconf
  A. ip http secure-server

• Question 904:

  An engineer must design a wireless network for a school system based on these requirements:

  1. The network must be able to triangulate client location based on RSSI.

  2. Each client must be able to sustain 5 Mbps of throughput at all times.

  3. Each classroom has up to 30 clients.

  4. Primary coverage is 5 GHz.

  Which design should be used?

  A. Place APs in a grid orientation throughout the building, located as close as possible to the center of each classroom.
  B. Mount one AP in the center of each classroom.
  C. Space APs evenly on both sides of the hallways.
  D. Place APs near exterior walls and corners of the building, and fill in the center area with a staggered pattern.
  D. Place APs near exterior walls and corners of the building, and fill in the center area with a staggered pattern.

  ---

  Explanation

  I have seen this at many conferences and webinars - If triangulation is an important factor: line the perimeter with APs (with flat panel antennas). In fact next time you are at Cisco Live, you will see this design all around the perimeter of the venue...

• Question 905:

  An engineer must configure router R1 to validate user logins via RADIUS and fall back to the local user database if the RADIUS server is not available.

  Which configuration must be applied?

  A. aaa authorization exec default radius local
  B. aaa authorization exec default radius
  C. aaa authentication exec default radius local
  D. aaa authentication exec default radius
  A. aaa authorization exec default radius local

• Question 906:

  Which method creates an EEM applet policy that is registered with EEM and runs on demand or manually?

  A. event manager applet ondemand event register action 1.0 syslog priority critical msg 'This is a message from ondemand'
  B. event manager applet ondemand event manual action 1.0 syslog priority critical msg 'This is a message from ondemand'
  C. event manager applet ondemand event none action 1.0 syslog priority critical msg 'This is a message from ondemand'
  D. event manager applet ondemand action 1.0 syslog priority critical msg 'This is a message from ondemand'
  C. event manager applet ondemand event none action 1.0 syslog priority critical msg 'This is a message from ondemand'

  ---

  Explanation

  An EEM policy is an entity that defines an event and the actions to be taken when that event occurs. There are two types of EEM policies: an applet or a script. An applet is a simple form of policy that is defined within the CLI configuration.

  answer 'event manager applet ondemand event register action 1.0 syslog priority critical msg `This is a message from ondemand' <="" p="" style="box-sizing: border-box;">

  There are two ways to manually run an EEM policy. EEM usually schedules and runs policies on the basis of an event specification that is contained within the policy itself. The event none command allows EEM to identify an EEM policy that can be manually triggered. To run the policy, use either the action policy command in applet configuration mode or the event manager run command in privileged EXEC mode.

  References:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/configuration/xe-3s/eem-xe-3s-book/eem-policy-cli.html

• Question 907:

  DRAG DROP

  Drag and drop the characteristics from the left onto the architectures on the right.

  Select and Place:

  

  

• Question 908:

  Which control plane protocol is used between Cisco SD-WAN routers and vSmart controllers?

  A. TCP
  B. OMP
  C. UDP
  D. BGP
  B. OMP

  ---

  Explanation

  Cisco SD-WAN uses Overlay Management Protocol (OMP) which manages the overlay network. OMP runs between the vSmart controllers and WAN Edge routers (and among vSmarts themselves) where control plane information, such as the routing, policy, and management information, is exchanged over a secure connection.

• Question 909:

  Which data is properly formatted with JSON?

  

  A. Opiton A
  B. Opiton B
  C. Opiton C
  D. Opiton D
  B. Opiton B

  ---

  Explanation

  B is correct, checked in JSONLint validator numbers 18 and 25 can be in "" or not still valid.

• Question 910:

  Which two results occur if Cisco DNA Center loses connectivity to devices in the SD-Access fabric? (Choose two )

  A. All devices reload after detecting loss of connection to Cisco DNA Center
  B. Already connected users are unaffected, but new users cannot connect
  C. User connectivity is unaffected.
  D. Cisco DNA Center is unable to collect monitoring data in Assurance.
  E. Users lose connectivity
  C. User connectivity is unaffected.
  D. Cisco DNA Center is unable to collect monitoring data in Assurance.

  ---

  Explanation

  If you have Cisco SD-Access implemented and DNA Centre becomes unreachable then the wired and wireless network will continue to forward packets as usual. There will be no impact to network performance or behavior. Yes you will be able to SSH / telnet / console into switches and wireless network infra as usual. For the period DNA Centre is unreachable, Assurance data will be lost, and you will not be able to make configuration changes to the Cisco SD-Access network.

  https://community.cisco.com/t5/cisco-digital-network-architecture-dna/dna-failure-mode/td-p/3841715