Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 971:

  Which characteristic applies to a traditional WAN solution but not to a Cisco SD-WAN solution?

  A. lengthy installation times
  B. centralized reachability, security, and application policies
  C. low complexity and increased overall solution scale
  D. operates over DTLS/TLS authenticated and secured tunnels
  A. lengthy installation times

• Question 972:

  Refer to the exhibit.

  

  What does the error message relay to the administrator who is trying to configure a Cisco IOS device?

  A. A NETCONF request was made for a data model that does not exist.
  B. The device received a valid NETCONF request and serviced it without error.
  C. A NETCONF message with valid content based on the YANG data models was made, but the request failed.
  D. The NETCONF running datastore is currently locked.
  A. A NETCONF request was made for a data model that does not exist.

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/support/docs/storage-networking/management/200933-YANG-NETCONF-Configuration-Validation.html

• Question 973:

  DRAG DROP

  A network engineer is adding an additional 10Gps link to an exiting 2x10Gps LACP-based LAG to augment its capacity. Network standards require a bundle interface to be taken out of service if one of its member links goes down, and the new link must be added with minimal impact to the production network. Drag and drop the tasks that the engineer must perform from the left into the sequence on the right. Not all options are used.

  Select and Place:

  

  

• Question 974:

  Which statement about VXLAN is true?

  A. VXLAN uses TCP 35 the transport protocol over the physical data cento network.
  B. VXLAN extends the Layer 2 Segment ID field to 24-bits. which allows up to 4094 unique Layer 2 segments over the same network.
  C. VXLAN encapsulates a Layer 2 frame in an IP-UDP header, which allows Layer 2 adjacency across router boundaries.
  D. VXLAN uses the Spanning Tree Protocol for loop prevention.
  C. VXLAN encapsulates a Layer 2 frame in an IP-UDP header, which allows Layer 2 adjacency across router boundaries.

  ---

  Explanation

  802.1Q VLAN identifier space is only 12 bits. The VXLAN identifier space is 24 bits. This doubling in size allows the VXLAN ID space to support 16 million Layer 2 segments -> Answer 'VXLAN extends the Layer 2 Segment ID field to 24-bits, which allows up to 4094 unique Layer 2 segments over the same network' is not correct.

  VXLAN is a MAC-in-UDP encapsulation method that is used in order to extend a Layer 2 or Layer 3 overlay network over a Layer 3 infrastructure that already exists.

  References:

  https://www.cisco.com/c/en/us/support/docs/lan-switching/vlan/212682-virtualextensible-lan-and-ethernet-virt.html

• Question 975:

  Which language can be used to model configuration and state data?

  A. JSON
  B. XML
  C. XDR
  D. YANG
  D. YANG

• Question 976:

  Refer to the exhibit.

  

  An engineer must configure router R1 to allow only NETCONF connections from the management VLAN.

  Which command completes this configuration?

  A. R1(config-if)# ip access-group netconfacl in
  B. R1(config)# netconf-yang ipv4 access-list name netconfacl
  C. R1(config)#ip http secure-server R1(config)# ip http accounting commands 12 default
  D. R1(config-if)#ip access-group netconfacl out
  A. R1(config-if)# ip access-group netconfacl in

• Question 977:

  What is YANG used for?

  A. scraping data via CLI
  B. processing SNMP read-only polls
  C. describing data models
  D. providing a transport for network configuration data between client and server
  C. describing data models

  ---

  Explanation

  YANG is used to model each protocol based on RFC 6020.

  References:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/datamodels/configuration/xe-16/data-models-xe-16-book/yang-netconf.html

• Question 978:

  Which command set configures RSPAN to capture outgoing traffic from VLAN3 on interface GigabitEthernet 0/3 while ignoring other VLAN trafic on the same interface?

  A. monitor session 2 source interface gigabitethernet 0/3 tx monitor session 2 filter vlan 1 - 2 , 4 - 4094
  B. monitor session 2 source interface gigabitethernet 0/3 tx monitor session 2 filter vlan 3
  C. monitor session 2 source interface gigabitethernet 0/3 rx monitor session 2 filter vlan 1 - 2 , 4 - 4094
  D. monitor session 2 source interface gigabitethernet 0/3 rx monitor session 2 filter vlan 3
  B. monitor session 2 source interface gigabitethernet 0/3 tx monitor session 2 filter vlan 3

• Question 979:

  What is the structure of a JSON web token?

  A. three parts separated by dots: header payload, and signature
  B. header and payload
  C. three parts separated by dots: version header and signature
  D. payload and signature
  A. three parts separated by dots: header payload, and signature

  ---

  Explanation

  JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties as a JSON object. This information can be verified and trusted because it is digitally signed. JWTs can be signed using a secret (with the HMAC algorithm) or a public/private key pair using RSA or ECDSA. JSON Web Tokens are composed of three parts, separated by a dot (.): Header, Payload, Signature. Therefore, a JWT typically looks like the following: xxxxx.yyyyy.zzzzz

  The header typically consists of two parts: the type of the token, which is JWT, and the signing algorithm being used, such as HMAC SHA256 or RSA. The second part of the token is the payload, which contains the claims. Claims are statements about an entity (typically, the user) and additional data. To create the signature part you have to take the encoded header, the encoded payload, a secret, the algorithm specified in the header, and sign that.

  References:

  https://jwt.io/introduction/

• Question 980:

  What ate two characteristics of Cisco SD-Access elements? (Choose two )

  A. The border node is required for communication between fabric and nonfabric devices.
  B. Fabric endpoints are connected directly to the border node
  C. Traffic within the fabric always goes through the control plane node
  D. The control plane node has the full RLOC-to-EID mapping database
  E. The border node has the full RLOC-to-EID mapping database
  A. The border node is required for communication between fabric and nonfabric devices.
  D. The control plane node has the full RLOC-to-EID mapping database