Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 951:

  Which of the following are benefits from implementing the use of VXLAN's in a network? (Choose two)

  A. Increased scalability since VXLAN extends the IF field to 24 bits, providing up to 16 million unique ID values.
  B. Makes the implementation of Spanning Tree more efficient.
  C. Can be used to replace layer 3 routing protocols and increase routing efficiency at layer 2.
  D. Supports Equal Cost Multi-pathing (ECMP) so that load balancing over multiple links can be used.
  A. Increased scalability since VXLAN extends the IF field to 24 bits, providing up to 16 million unique ID values.
  D. Supports Equal Cost Multi-pathing (ECMP) so that load balancing over multiple links can be used.

  ---

  Explanation

  VXLAN is a MAC in IP/UDP(MAC-in-UDP) encapsulation technique with a 24-bit segment identifier in the form of a VXLAN ID. The larger VXLAN ID allows LAN segments to scale to 16 million in a cloud network. In addition, the IP/UDP encapsulation allows each LAN segment to be extended across existing Layer 3 networks making use of Layer 3 equal-cost multipath (ECMP).

  References:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx-os/vxlan/configuration/guide/b_NX-OS_VXLAN_Configuration_Guide/overview.pdf

• Question 952:

  What does this EEM applet event accomplish?

  "event snmp oid 1.3.6.1.3.7.1.5.1.2.4.2.9 get-type next entry-op g entry-val 75 poll-interval 5"

  A. It issues email when the value is greater than 75% for five polling cycles.
  B. It reads an SNMP variable, and when the value exceeds 75%, it triggers an action
  C. It presents a SNMP variable that can be interrogated.
  D. Upon the value reaching 75%, a SNMP event is generated and sent to the trap server.
  B. It reads an SNMP variable, and when the value exceeds 75%, it triggers an action

  ---

  Explanation

  EEM offers the ability to monitor events and take informational or corrective action when the monitored events occur or reach a threshold. An EEM policy is an entity that defines an event and the actions to be taken when that event occurs.

  There are two types of EEM policies: an applet or a script. An applet is a simple form of policy that is defined within the CLI configuration. To specify the event criteria for an Embedded Event Manager (EEM) applet that is run by sampling

  Simple Network Management Protocol (SNMP) object identifier values, use the event snmp command in applet configuration mode. event snmp oid oid-value get-type {exact | next} entry-op operator entry-val entryvalue [exit-comb {or | and}]

  [exit-op operator] [exit-val exit-value] [exit-time exit-timevalue] poll-interval poll-int-value + oid: Specifies the SNMP object identifier (object ID) + get-type: Specifies the type of SNMP get operation to be applied to the object ID specified by the oid-value argument.

  -- next ?Retrieves the object ID that is the alphanumeric successor to the object ID specified by the oid-value argument.

  + entry-op: Compares the contents of the current object ID with the entry value using the specified operator. If there is a match, an event is triggered and event monitoring is disabled until the exit criteria are met. + entry-val: Specifies the value with which the contents of the current object ID are compared to decide if an SNMP event should be raised. + exit-op: Compares the contents of the current object ID with the exit value using the specified operator. If there is a match, an event is triggered and event monitoring is reenabled. + poll-interval: Specifies the time interval between consecutive polls (in seconds)

  References:

  https://www.cisco.com/en/US/docs/ios/12_3t/12_3t4/feature/guide/gtioseem.html

• Question 953:

  Refer to the exhibit.

  

  A GRE tunnel has been created between HO and BR routers.

  What is the tunnel IP on the HQ router?

  A. 10.111.111.1
  B. 10.111.111.2
  C. 209.165.202.130
  D. 209.165.202.134
  A. 10.111.111.1

  ---

  Explanation

  In the above output, the IP address of "209.165.202.130" is the tunnel source IP while the IP 10.111.1.1 is the tunnel IP address.

• Question 954:

  Refer to the exhibit.

  

  When troubleshooting a routing issue, an engineer issues a ping from S1 to S2.

  Which two actions result from the initial value of the TTL? (Choose two.)

  A. The packet reaches R3, and the TTL expires
  B. R2 replies with a TTL exceeded message
  C. R3 replies with a TTL exceeded message.
  D. The packet reaches R2, and the TTL expires.
  E. R1 replies with a TTL exceeded message
  F. The packet reaches R1 and the TTL expires.
  B. R2 replies with a TTL exceeded message
  D. The packet reaches R2, and the TTL expires.

  ---

  Explanation

  When a labeled packet is received with a TTL of 1, the receiving LSR drops the packet and sends an ICMP message "time exceeded" (type 11, code 0) to the originator of the IP packet. This is the same behavior that a router would exhibit with an IP packet that had an expiring TTL.

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010111000.html#:~:text=The%20local%20and%20FlexConnect%20mode%20access%20points,spend%20about%2050%20milliseconds%20on%20each%20channel.

• Question 955:

  Which of the following are examples of Type 2 hypervisors? (Choose three.)

  A. VMware ESXi
  B. Oracle VirtualBox
  C. Oracle Solaris Zones
  D. Microsoft Hyper-V
  E. Microsoft Virtual PC
  B. Oracle VirtualBox
  C. Oracle Solaris Zones
  E. Microsoft Virtual PC

• Question 956:

  DRAG DROP

  An engineer is working with the Cisco DNA Center API. Drag and drop the methods from the left onto the actions that they are used for on the right.

  Select and Place:

  

  

• Question 957:

  Refer to the exhibit.

  

  Running the script causes the output in the exhibit.

  What should be the first line of the script?

  A. from ncclient import manager
  B. import manager
  C. from ncclient import *
  D. ncclient manager import
  A. from ncclient import manager

  ---

  Explanation

  https://ncclient.readthedocs.io/en/latest/

  Multiple examples shown using "from ncclient import manager" and then using manager.connect

• Question 958:

  Which solution supports end-to-end line-rate encryption between two sites?

  A. TrustSec
  B. MACsec
  C. IPsec
  D. GRE
  C. IPsec

• Question 959:

  High bandwidth utilization is occurring on interface Gig0/1 of a router. An engineer must identify the flows that are consuming the most bandwidth. Cisco DNA Center is used as a flow exporter and is configured with the IP address 192.168.23.1 and UDP port 23000.

  Which configuration must be applied to set NetFlow data export and capture on the router?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/Cisco_NetFlow_Configuration.pdf

• Question 960:

  Refer to the exhibit.

  

  A client reports being unable to log into the wireless network, which uses PEAPv2.

  Which two issues appear in the output? (Choose two.)

  A. There is a problem with the client supplicant.
  B. The AP has the incorrect RADIUS server address.
  C. The AP has lost IP connectivity to the authentication server.
  D. The EAP client timeout value should be increased.
  E. The authentication server is misconfigured on the controller.
  F. The authentication server is misconfigured in the WLAN.
  A. There is a problem with the client supplicant.
  D. The EAP client timeout value should be increased.