Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 911:

  Which CISCO SD-WAN component authenticates the routers and the vSmart controllers?

  A. vAnalytics
  B. vBond orchestrator
  C. vEdge
  D. vManage NMS
  B. vBond orchestrator

• Question 912:

  Which lag/profile on a Cisco Catalyst 9800 Series WLC must be modified to allow Cisco ISE to dynamically assign VLANs to users on an 802.1X-based SSID?

  A. interface lag
  B. site tag
  C. WLAN profile
  D. policy profile
  D. policy profile

• Question 913:

  

  Refer to me exhibit. The NETCONF object is sent to a Cisco IOS XE switch.

  What is me purpose of the object?

  A. View the configuration of all GigabitEthernet interfaces
  B. Discover the IP address of interface GigabitEthernet1
  C. Set the description of interface GigabitEthernet1 to "1"
  D. Remove the IP address from interface GigabitEthernet1
  A. View the configuration of all GigabitEthernet interfaces

• Question 914:

  A script contains the statement "while loop != 999:".

  Which value terminates the loop?

  A. A value less then or equal to 999
  B. A value greater then or equal to 999
  C. A value not equal to 999
  D. A value equal to 999
  D. A value equal to 999

• Question 915:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  Implement VRRP between DISTRO-SW1 and DISTRO-SW2 on VLAN100 for hosts connected to ACCESS-SW1 to achieve these goals:

  1. Configure group number 200 using the virtual IP address of 192.168.1.200/24.

  2. Configure DISTRO-SW1 as the active router using a priority value of 200 and DISTRO-SW2 as the standby router.

  3. DISTRO-SW1 and DISTRO-SW2 should exchange VRRP hello packets every 20 seconds.

  

  

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  DISTRO-SW1

  Config t

  Interface vlan 100

  Ip address 192.168.1.2

  255.255.255.0

  Vrrp 200 ip 192.168.1.200

  Vrrp 200 priority 200

  Vrrp 200 advertise 20

  Wr mem

  DISTRO-SW2

  Config t

  Interface vlan 100

  Ip address 192.168.1.3 255.255.255.0

  Vrrp 200 ip 192.168.1.200

  Vrrp 200 advertise 20

  Wr mem

• Question 916:

  If a VRRP master router fails, which router is selected as the new master router?

  A. router with the highest priority
  B. router with the highest loopback address
  C. router with the lowest loopback address
  D. router with the lowest priority
  A. router with the highest priority

  ---

  Explanation

  https://www.cisco.com/assets/sol/sb/Switches_Emulators_v2_3_5_xx/help/350_550/index.html#page/tesla_350_550_olh/ts_vrrp_18_09.html

  In the "Basic VRRP Topology" figure, if Router A, the virtual router master, fails, a selection process takes place to determine if virtual router backups B or C must take over. If Routers B and C are configured with the priorities of 101 and 100, respectively, Router B is elected to become virtual router master because it has the higher priority. If both have the same priority, the one with the higher IP address value is selected to become the virtual router master.

• Question 917:

  Refer to the exhibit.

  

  A network administrator configured RSPAN to troubleshoot an issue between switchl and switch2. The switches are connected using interface GigabitEthernet 1/1 An external packet capture device is connected to swich2 interface GigabitEthernet1/2.

  Which two commands must be added to complete this configuration? (Choose two)

  A. switch2(config-if)# switchport trunk allowed vlan 10,20,30,40,50,60,70-80
  B. switch2(config)# monitor session 1 source remote vlan 70 switch2(config)# monitor session 1 destination interface GigabitEthernet1/2
  C. switch1(config)# interface GigabitEthernet 1/1 switch1(config-if)# switchport mode access switch1(config-if)# switchport access vlan 10 switch2(config)# interface GigabitEthernet 1/1 switch2(config-if)# switchport mode access switch2(config-if)# switchport access vlan 10
  D. switch2(config)# monitor session 2 destination vlan 10
  E. switch2(config)# monitor session 1 source remote vlan 70 switch2(config)# monitor session 1 destination interface GigabitEthernet1/1
  A. switch2(config-if)# switchport trunk allowed vlan 10,20,30,40,50,60,70-80
  B. switch2(config)# monitor session 1 source remote vlan 70 switch2(config)# monitor session 1 destination interface GigabitEthernet1/2

• Question 918:

  An engineer is configuring RADIUS-Based Authentication with EAP MS-CHAPv2 is configured on a client device.

  Which outer method protocol must be configured on the ISE to support this anthentication type?

  A. EAP-TLS
  B. LDAP
  C. EAP-FAST
  D. PEAP
  D. PEAP

  ---

  Explanation

  If you use EAP-MSCHAPv2, it means that your clients doesn't need to have a certificate, but your authentication server (NPS) has a certificate. Passwords from the clients are send using hashes to the authentication server. To protect these password hashes being send over the network, you can use PEAP which act as a TLS/SSL tunnel to protect the authentication traffic.

  References:

  https://social.technet.microsoft.com/Forums/Lync/en-US/7962d24d-7aa2-4413-97da-4f03793f2405/very-confused-on-authenciation-concepts-eap-peap-eapmschapv2-?forum=winserversecurity

• Question 919:

  Refer to me exhibit.

  

  What is the cause of the log messages?

  A. hello packet mismatch
  B. OSPF area change
  C. MTU mismatch
  D. IP address mismatch
  B. OSPF area change

• Question 920:

  Which two solutions are used for backing up a Cisco DNA Center Assurance database? (Choose two)

  A. NFS share
  B. local server
  C. non-linux server
  D. remote server
  E. bare metal server
  A. NFS share
  D. remote server

  ---

  Explanation

  Cisco DNA Center creates the backup files and posts them to a remote server. Each backup is uniquely stored using the UUID as the directory name.To support Assurance data backups, the server must be a Linux-based NFS server that meets the following requirements: ?Support NFS v4 and NFS v3.

  ?Cisco DNA Center stores backup copies of Assurance data on an external NFS device and automation data on an external remote sync (rsync) target location.

  ?The remote share for backing up an Assurance database (NDP) must be an NFS share.

  References:

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-1-2/admin_guide/b_cisco_dna_center_admin_guide_2_1_2/b_cisco_dna_center_admin_guide_2_1_1_chapter_0110.html