Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 911:

  Refer to the exhibit.

  

  

  Which configuration change ensures that R1 is the active gateway whenever it is in a functional state for the 172.30.110.0724 network?

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 912:

  Refer to the exhibit.

  

  Running the script causes the output in the exhibit. What should be the first line of the script?

  A. from ncclient import manager

  B. import manager

  C. from ncclient import *

  D. ncclient manager import

  Correct Answer: A

  https://ncclient.readthedocs.io/en/latest/

  Multiple examples shown using "from ncclient import manager" and then using manager.connect

• Question 913:

  Refer to the exhibit.

  An engineer must add the SNMP interface table to the NetFlow protocol flow records. Where should the SNMP table option be added?

  

  A. under the interface

  B. under the flow record

  C. under the flow monitor

  D. under the flow exporter

  Correct Answer: D

  option interface-table

  This command causes the periodic sending of an options table, which will allow the collector to map the interface SNMP indexes provided in the flow records to interface names. The optional timeout can alter the frequency at which the reports are sent. Router(config)# flow exporter FLOW-EXPORTER-1

  Router(config-flow-exporter)# option interface-table https://www.cisco.com/c/en/us/td/docs/ios/fnetflow/command/reference/fnf_book/fnf_02.html

• Question 914:

  Refer to the exhibit.

  

  An engineer must establish eBGP peering between router R3 and router R4. Both routers should use their loopback interfaces as the BGP router ID.

  Which configuration set accomplishes this task?

  A. R3(config)#router bgp 200 R3(config-router)#neighbor 10.4.4.4 remote-as 100 R3(config-router)# neighbor 10.4.4.4 update-source Loopback0 R4(config)#router bgp 100 R4(config-router)#neighbor 10.3.3.3 remote-as 200 R4(config-router)#network 10.3.3.3 update-source Loopback0

  B. R3(config)#router bgp 200 R3(config-router)#neighbor 10.24.24.4 remote-as 100 R3(config-router)#neighbor 10.24.24.4 update-source Loopback0 R4(config)#router bgp 100 R4(config-router)#neighbor 10.24.24.3 remote-as 200 R4(config-router)#neighbor 10.24.24.3 update-source Loopback0

  C. R3(config)#router bgp 200 R3(config-router)#neighbor 10.4.4.4 remote-as 100 R3(config-router)#bgp router-id 10.3.3.3 R4(config)#router bgp 100 R4(config-router)#neighbor 10.3.3.3 remote-as 200 R4(config-router)#bgp router-id 10.4.4.4

  D. R3(config)#router bgp 200 R3(config-router)#neighbor 10.24.24.4 remote-as 100 R3(config-router)#bgp router-id 10.3.3.3 R4(config)#router bgp 100 R4(config-router)#neighbor 10.24.24.3 remote-as 200 R4(config-router)#bgp router-id 10.4.4.4

  Correct Answer: D

• Question 915:

  Which network devices secure API platform?

  A. next-generation intrusion detection systems

  B. Layer 3 transit network devices

  C. content switches

  D. web application firewalls

  Correct Answer: D

• Question 916:

  A customer requests a design that includes GLBP as the FHRP The network architect discovers that the members of the GLBP group have different throughput capabilities. Which GLBP load balancing method supports this environment?

  A. host dependent

  B. least connection

  C. round robin

  D. weighted

  Correct Answer: D

  Weighted: Defines weights to each device in the GLBP group to define the ratio of load balancing between the devices. This allows for a larger weight to be assigned to bigger routers that can handle more traffic. Host dependent: Uses the host MAC address to decide to which virtual forwarder MAC to redirect the packet. This method ensures that the host uses the same virtual MAC address as long as the number of virtual forwarders does not change within the group.

• Question 917:

  What are two considerations when using SSO as a network redundancy feature? (Choose two)

  A. both supervisors must be configured separately

  B. the multicast state is preserved during switchover

  C. must be combined with NSF to support uninterrupted Layer 2 operations

  D. must be combined with NSF to support uninterrupted Layer 3 operations

  E. requires synchronization between supervisors in order to guarantee continuous connectivity

  Correct Answer: DE

  While SSO is happening, routing protocol communication between 2 supervisor stopped because lost of adjacency.

  It and cause interuption, to avoid this we need NFS.

  in order for NFS to work properly,

  both supervisor must NFS.

  Cisco IOS Nonstop Forwarding(NSF) always runs with stateful switchover (SSO) and provides redundancy for Layer 3 traffic.

  Reference:

  https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3se/consolidated_guide/b_consolidated_3850_3se_cg_chapter_01101110.pdf

• Question 918:

  Which function does a fabric edge node perform in an SD-Access deployment?

  A. Connects the SD-Access fabric to another fabric or external Layer 3 networks.

  B. Connects endpoints to the fabric and forwards their traffic.

  C. Provides reachability border nodes in the fabric underlay.

  D. Encapsulates end-user data traffic into LISP.

  Correct Answer: B

  There are five basic device roles in the fabric overlay:

  +

  Control plane node: This node contains the settings, protocols, and mapping tables to provide the endpoint-to-location (EID-to-RLOC) mapping system for the fabric overlay. + Fabric border node: This fabric device (for example, core layer device) connects external Layer 3 networks to the SDA fabric. + Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.

  +

  Fabric WLAN controller (WLC): This fabric device connects APs and wireless endpoints to the SDA fabric.

  +

  Intermediate nodes: These are intermediate routers or extended switches that do not provide any sort of SD-Access fabric role other than underlay services.

  

• Question 919:

  A vulnerability assessment highlighted that remote access to the switches is permitted using unsecure and unencrypted protocols Which configuration must be applied to allow only secure and reliable remote access for device administration?

  A. line vty 0 15 login local transport input none

  B. line vty 0 15 login local transport input telnet ssh

  C. line vty 0 15 login local transport input ssh

  D. line vty 0 15 login local transport input all

  Correct Answer: C

• Question 920:

  Why would an engineer use YANG?

  A. to transport data between a controller and a network device

  B. to access data using SNMP

  C. to model data for NETCONF

  D. to translate JSON into an equivalent XML syntax

  Correct Answer: C