Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 961:

  Which method is used by an AP to join HA controllers and is configured in NVRAM?

  A. stored WLC information
  B. DNS
  C. IP Helper Addresses
  D. Primary/Secondary/Tertiary/Backup
  D. Primary/Secondary/Tertiary/Backup

• Question 962:

  Which network design reduces convergence time between an aggregation layer and a Layer 2 access layer in an enterprise network?

  A. Traditional looped design with common VLANs extended between separate access switches
  B. Cisco SD-Access configuration between aggregation intermediate nodes and access layers
  C. Cisco SD-Access configuration between aggregation and access-layer edge nodes
  D. Traditional nonlooped design with unique VLANs per access switch
  D. Traditional nonlooped design with unique VLANs per access switch

  ---

  Explanation

  The correct answer is Option D. Traditional nonlooped design with unique VLANs per access switch.

  A nonlooped Layer 2 access design reduces convergence time because it avoids Layer 2 loops and minimizes dependence on Spanning Tree Protocol reconvergence.

  In this design:

  VLANs are localized to individual access switches.

  VLANs are not stretched across multiple access switches.

  Layer 2 fault domains are smaller.

  There are no blocked Layer 2 links caused by STP.

  Failures have a more limited impact.

  This improves convergence and stability compared with a looped Layer 2 design that extends the same VLANs across multiple access switches.

  Option A is incorrect because common VLANs extended between access switches increase the Layer 2 fault domain and STP dependency.

  Option B is incorrect because the question is about traditional aggregation-to-Layer 2 access convergence, not SD-Access intermediate nodes.

  Option C is incorrect because SD-Access is a fabric architecture and does not directly answer the traditional Layer 2 access design issue described in the question.

  The key design rule is:

  Looped Layer 2 + stretched VLANs = slower convergence and larger fault domains Nonlooped Layer 2 + unique local VLANs = faster convergence and better stability

• Question 963:

  An engineer applies this configuration to router R1.

  How does R1 respond when the user `cisco' logs in?

  

  A. It displays the startup conftg and then permits the user to execute commands
  B. It places the user into EXEC mode and permits the user to execute any command
  C. It displays the startup conflg and then terminates the session.
  D. It places the user into EXEC mode but permits the user to execute only the show startup-config command
  A. It displays the startup conftg and then permits the user to execute commands

• Question 964:

  SIMULATION

  Guidelines

  This is a lab item in which tasks will be performed on virtual devices.

  1. Refer to the Tasks tab to view the tasks for this lab item.

  2. Refer to the Topology tab to access the device console(s) and perform the tasks.

  3. Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.

  4. All necessary preconfigurations have been applied.

  5. Do not change the enable password or hostname for any device.

  6. Save your configurations to NVRAM before moving to the next item.

  7. Click Next at the bottom of the screen to submit this lab and move to the next question.

  8. When Next is clicked, the lab closes and cannot be reopened.

  Topology

  

  Tasks

  

  A. See the solution below in Explanation.
  B. Place Holder
  C. Place Holder
  D. Place Holder
  A. See the solution below in Explanation.

  ---

  Explanation

  Solution:

  Default int range et0/0-1

  Int range e0/0 ?1

  Sw trunk encap dot1

  Switch mode trunk

  Channel-group 2 mode passive

  No shut

  Spanning-tree vlan 10 priority 0 Spanning-tree vlan 30 priority 0

• Question 965:

  Refer to the exhibit.

  

  Which type of antenna is shown on the radiation patterns?

  A. Yagi
  B. dipole
  C. patch
  D. omnidirectional
  A. Yagi

• Question 966:

  Which two security mechanisms are used by Cisco Threat Defense to gain visibility into the most dangerous cyber threats? (Choose two.)

  A. virtual private networks
  B. file reputation
  C. VLAN segmentation
  D. Traffic Telemetry
  E. dynamic enforce policy
  B. file reputation
  D. Traffic Telemetry

• Question 967:

  Refer to the exhibit.

  

  An engineer must update the existing configuration to achieve these results:

  1. Only administrators from the 192.168.1.0/24 subnet can access the vty lines.

  2. Access to the vty lines using clear-text protocols is prohibited.

  Which command set should be applied?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  Explanation

  clear-text protocols is prohibited.

  Transport input SSH

• Question 968:

  Refer to the exhibit.

  What step resolves the authentication issue?

  

  A. use basic authentication
  B. change the port to 12446
  C. target 192 168 100 82 in the URI
  D. restart the vsmart host
  C. target 192 168 100 82 in the URI

  ---

  Explanation

  He first figure is the output of the "show control connections" command. From this figure we learned that the 192.168.100.82 so we need to connect to this IP address (not 192.168.100.80).

• Question 969:

  Which technology is the Cisco SD-Access control plane based on?

  A. LISP
  B. CTS
  C. SGT
  D. VRF
  A. LISP

• Question 970:

  Refer to the exhibit.

  

  A company has an internal wireless network with a hidden SSID and RADIUS-based client authentication for increased security. An employee attempts to manually add the company network to a laptop, but the laptop does not attempt to connect to the network. The regulatory domains of the access points and the laptop are identical.

  Which action resolves this issue?

  A. Ensure that the "Connect even if this network is not broadcasting" option is selected.
  B. Limit the enabled wireless channels on the laptop to the maximum channel range that is supported by the access points.
  C. Change the security type to WPA2-Personal AES.
  D. Use the empty string as the hidden SSID network name.
  A. Ensure that the "Connect even if this network is not broadcasting" option is selected.