Cisco 350-401 Exam Questions Simulate Actual 350-401 Exam

Category:

Comments:

0 Comments

Post Date:

June 8, 2023

350-401 exam dumps questions are designed to simulate the actual exam. This means that you will get a feel for the types of questions you can expect to see on the exam, as well as the format and difficulty level. In addition, CCNP Enterprise 350-401 dumps are often accompanied by detailed explanations and answers. This means that if you get a question wrong, you can learn from your mistake and understand why the correct answer is the right one. Test free online 350-401 exam dumps below.

Page 1 of 27

1. Refer to the Exhibit.

A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days.

What is required to complete this task?

The password expiry mechanism is on the AAA server and must be configured there.

Add the aaa authentication enable default Administrators command.

Add the username admin privilege 15 common-criteria*policy Administrators password 0 Cisco13579! command.

No further action Is required. The configuration is complete.

2. How does Protocol Independent Multicast function?

In sparse mode, it establishes neighbor adjacencies and sends hello messages at 5-second intervals.

It uses the multicast routing table to perform the multicast forwarding function.

It uses unicast routing information to perform the multicast forwarding function.

It uses broadcast routing information to perform the multicast forwarding function.

3. A network administrator applies the following configuration to an IOS device.

What is the process of password checks when a login attempt is made to the device?

A TACACS+server is checked first. If that check fail, a database is checked?

A TACACS+server is checked first. If that check fail, a RADIUS server is checked. If that check fail. a local database is checked.

A local database is checked first. If that fails, a TACACS+server is checked, if that check fails, a RADUIS server is checked.

A local database is checked first. If that check fails, a TACACS+server is checked.

4. What is the wireless received signal strength indicator?

The value given to the strength of the wireless signal received compared to the noise level

The value of how strong the wireless signal Is leaving the antenna using transmit power, cable loss, and antenna gain

The value of how much wireless signal is lost over a defined amount of distance

The value of how strong a tireless signal is receded, measured in dBm

5. DRAG DROP

Drag and drop the characteristics from the left onto the switching architectures on the right.

6. When configuration WPA2 Enterprise on a WLAN, which additional security component configuration is required?

NTP server

PKI server

RADIUS server

TACACS server

7. Refer to the Exhibit.

A network engineer configures NAT on R1 and enters me show command to verity me configuration.

What toes the output confirm?

The first pocket triggered NAT to add an entry to the NAT table

R1 is configured with NAT overload parameters.

A Telnet session from 160.1.1.1 to 10.1.1.10 has been initiated.

R1 a configured win PAT overload parameters

8. What is a characteristic of a Type I hypervisor?

It is installed on an operating system and supports other operating systems above it.

It is referred to as a hosted hypervisor.

Problems in the base operating system can affect the entire system.

It is completely independent of the operating system.

9. Refer to the Exhibit.

An engineer configures a new HSRP group. While reviewing the HSRP status, the engineer sees the logging message generated on R2.

Which is the cause of the message?

The same virtual IP address has been configured for two HSRP groups

The HSRP configuration has caused a spanning-tree loop

The HSRP configuration has caused a routing loop

A PC is on the network using the IP address 10.10.1.1

10. CORRECT TEXT

Simulation 05

Page 2 of 27

11. Refer to the exhibit.

A company has an internal wireless network with a hidden SSID and RADIUS-based client authentication for increased security. An employee attempts to manually add the company network to a laptop, but the laptop does not attempt to connect to the network. The regulatory domains of the access points and the laptop are identical.

Which action resolves this issue?

Ensure that the "Connect even if this network is not broadcasting" option is selected.

Limit the enabled wireless channels on the laptop to the maximum channel range that is supported by the access points.

Change the security type to WPA2-Personal AE

Use the empty string as the hidden SSID network name.

12. Refer to the Exhibit.

Which result does the python code achieve?

The code encrypts a base64 decrypted password.

The code converts time to the "year/month/day" time format.

The code converts time to the yyyymmdd representation.

The code converts time to the Epoch LINUX time format.

13. Refer to the Exhibit.

Which configuration must be added to enable GigabitEthemet 0/1 to participate in OSPF?

SF_router (config-router)# network 10.10.1.0 0.0.0.255 area 0

SF_rouier (conng)# network 10.10.1.0 0.0.0.255 area 1

SF_router (conflg-routerp) network 10.10.1.0 0.0.0.255 area 1

SF_rouler (contlg-rouler)# network 10.10.1.0 255.255.255.0 area 0

14. Which Python code snippet must be added to the script to save the returned configuration as a JSON-formatted file?

Option A

Option B

Option C

Option D

15. Which solution do laaS service providers use to extend a Layer 2 segment across a Layer 3 network?

VLAN

VTEP

VXLAN

VRF

16. Refer to the exhibit.

R2 is the neighboring router of R1. R2 receives an advertisement for network 192 168.10.50/32.

Which configuration should be applied for the subnet to be advertised with the original /24 netmask?

A)

Option A

Option B

Option C

Option D

17. A wireless network engineer must configure a WPA2+WPA3 policy with the Personal security type.

Which action meets this requirement?

Configure the GCMP256 encryption cipher.

Configure the CCMP256 encryption cipher.

Configure the CCMP128 encryption cipher.

Configure the GCMP128 encryption cipher.

18. DRAG DROP

Drag and drop the characteristics from the left onto the technology types on the right.

19. When is GLBP preferred over HSRP?

When encrypted helm are required between gateways h a single group.

When the traffic load needs to be shared between multiple gateways using a single virtual I

When the gateway routers are a mix of Cisco and non-Cisco routers

When clients need the gateway MAC address lo Be the same between multiple gateways

20. What is the function of an RP in a PIM-SM network?

to provide routing to the PIM leaf routers

to track sources and recovers on the shared distribution tree

to automate the distribution of group-to rendezvous point mappings

to connect multicast sources with receivers

Page 3 of 27

21. How do OSPF and EIGKP compare?

OSPF and EIGRP us© the same administrative distance.

Both OSPF and EIGRP use the concept of areas.

EIGRP shows an known routes, and OSPF shows successor and feasible successor routes.

EIGRP shows successor and feasible successor routes, and OSPF shows all known routes.

22. Refer to the Exhibit.

Which configuration must be applied to ensure that the preferred path for traffic from AS 65010 toward AS 65020 uses the R2 to R4 path?

A)

Option A

Option B

Option C

Option D

23. Why would an engineer use YANG?

to transport data between a controller and a network device

to access data using SNMP

to model data for NETCONF

to translate JSON into an equivalent XML syntax

24. Which measurement is used from a post wireless survey to depict the cell edge of the access points?

SNR

Noise

RSSI

CCI

25. Which two features are available only in next-generation firewalls? (Choose two.)

virtual private network

deep packet inspection

stateful inspection

application awareness

packet filtering

26. Ensure that DISTRO-SW2 will take over the active role when DISTRO-SW1 goes down, and when DISTRO-SW1 recovers, it automatically resumes the active role.

DISTRO-SW2

27. Which entity is responsible for maintaining Layer 2 isolation between segments In a VXLAN environment?

switch fabric

VTEP

VNID

host switch

28. Refer to the exhibit.

The WLC administrator sees that the controller to which a roaming client associates has Mobility Role Anchor configured under Clients > Detail.

Which type of roaming is supported?

Indirect

Layer 3 intercontroller

Layer 2 intercontroller

Intracontroller

29. In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?

control, and forwarding

management and data

control and management

control and data

30. Which two actions, when applied in the LAN network segment, will facilitate Layer 3 CAPWAP discovery for lightweight AP? (Choose two.)

Utilize DHCP option 17.

Configure WLC IP address on LAN switch.

Utilize DHCP option 43.

Configure an ip helper-address on the router interface

Enable port security on the switch port

Page 4 of 27

31. Which IPv4 packet field carries the QoS IP classification marking?

TTL

FCS

ToS

32. Which characteristic distinguishes Ansible from Chef?

Ansible lacs redundancy support for the master server. Chef runs two masters in an active/active mode.

Ansible uses Ruby to manage configurations. Chef uses YAML to manage configurations.

Ansible pushes the configuration to the client. Chef client pulls the configuration from the server.

The Ansible server can run on Linux, Unix or Windows. The Chef server must run on Linux or Unix.

33. DRAG DROP

Drag and drop the characteristics from the left onto the appropriate infrastructure deployment types on the right.

34. Refer to the exhibit.

A network engineer configures a GRE tunnel and enters the show Interface tunnel command.

What does the output confirm about the configuration?

The keepalive value is modified from the default value.

Interface tracking is configured.

The tunnel mode is set to the default.

The physical interface MTU is 1476 bytes.

35. Refer to the Exhibit.

Remote users cannot access the Internet but can upload files to the storage server.

Which configuration must be applied to allow Internet access?

A)

Option A

Option B

Option C

Option D

36. Refer to the exhibit.

An engineer must configure and validate a CoPP policy that allows the network management server to monitor router R1 via SNMP while protecting the control plane.

Which two commands or command sets must be used? (Choose two.)

Option A

Option B

Option C

Option D

Option E

Option F

37. DRAG DROP

Drag and drop the description of the VSS technology from the left to the right. NOT all options are used.

38. A technician is assisting a user who cannot connect to a website. The technician attempts to ping the default gateway and DNS server of the workstation.

According to troubleshooting methodology, this is an example of:

a divide-and-conquer approach.

a bottom-up approach.

a top-to-bottom approach.

implementing a solution.

39. Which method of account authentication does OAuth 2.0 within REST APIs?

username/role combination

access tokens

cookie authentication

basic signature workflow

40. Which router is elected the IGMP Querier when more than one router is in the same LAN segment?

The router with the shortest uptime

The router with the lowest IP address

The router with the highest IP address

The router with the longest uptime

Page 5 of 27

41. What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?

real-time threat management to stop DDoS attacks to the core and access networks

real-time awareness of users, devices and traffic on the network

malware control

dynamic threat control for web traffic

42. Refer to the exhibit.

Which type of antenna is show on the radiation patterns?

Dipole

Yagi

Patch

Omnidirectional

43. In the Cisco DNA Center Image Repository, what is a golden image?

The latest software image that is available for a specific device type

The Cisco recommended software image for a specific device type.

A software image that is compatible with multiple device types.

A software image that meets the compliance requirements of the organization.

44. Refer to the Exhibit.

An ertgineer must modify the existing configuration so that R2 can take over as the primary router when serial interface 0/0.1 on R1 goes down.

Which command must the engineer apply''

R2W standby 100 track 26 decrement 10

R2# standby 100 preempt

R2# track 26 interface SerialW

1 line-protocol

R2# standby 100 priority 100

45. What is a characteristics of traffic shaping?

can be applied in both traffic direction

queues out-of-profile packets until the buffer is full

drops out-of-profile packets

causes TCP retransmits when packet are dropped

46. Which free application has the ability to make REST calls against Cisco DNA Center?

API Explorer

REST Explorer

Postman

Mozilla

47. What is one characteristic of the Cisco SD-Access control plane?

It is based on VXLAN technology.

Each router processes every possible destination and route

It allows host mobility only in the wireless network.

It stores remote routes in a centralized database server

48. Refer to the Exhibit.

Which two configurations enable R1 and R2 to advertise routes into OSPF? (Choose two)

A)

Option A

Option B

Option C

Option D E) Option E

49. Refer to the exhibit.

What is the Json syntax that is formed from the data?

{Name: Bob Johnson, Age: 75, Alive: true, Favorite Foods: [Cereal, Mustard, Onions]}

{"Name": "Bob Johnson", "Age": 75, "Alive": true, "Favorite Foods": ["Cereal", "Mustard", "Onions"]}

{"˜Name': "˜Bob Johnson', "˜Age': 75, "˜Alive': True, "˜Favorite Foods': "˜Cereal', "˜Mustard', "˜Onions'}

{"Name": "Bob Johnson", "Age": Seventyfive, "Alive": true, "Favorite Foods": ["Cereal", "Mustard", "Onions"]}

50. Refer to the exhibit.

An engineer must configure HSRP for VLAN 1000 on SW2. The secondary switch must immediately take over the role of active router If the interlink with the primary switch fails.

Which command set completes this task?

A)

Option A

Option B

Option C

Option D

Page 6 of 27

51. Drag and drop the automation characteristics from the left onto the corresponding tools on the right.

52. Which cisco DNA center application is responsible for group-based accesss control permissions?

Design

Provision

Assurance

Policy

53. What is the difference between a RIB and a FIB?

The RIB is used to make IP source prefix-based switching decisions

The FIB is where all IP routing information is stored

The RIB maintains a mirror image of the FIB

The FIB is populated based on RIB content

54. If AP power level is increased from 25 mW to 100 mW. what is the power difference in dBm?

6 dBm

14 dBm

17 dBm

20 dBm

55. What is a fact about Cisco EAP-FAST?

It does not require a RADIUS server certificate.

It requires a client certificate.

It is an IETF standard.

It operates in transparent mode.

56. Refer to the exhibit.

The trunk does not work over the back-to-back link between Switch1 interface Giq1/0/20 and Switch2 interface Gig1/0/20.

Which configuration fixes the problem?

A)

Option A

Option B

Option C

Option D

57. Refer to the Exhibit.

Which set of commands on router r R1 Allow deterministic translation of private hosts PC1, PC2, and PC3 to addresses in the public space?

RouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#access-list 1 10.10.10.0 0.0.0.255 RouterR1(config)#ip nat inside source list 1 interface f0/1 overload

RouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101 RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102 RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103

RouterR1(config)#int f0/0 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101 RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102 RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103

58. An engineer must provide wireless converge in a square office. The engineer has only one AP and believes that it should be placed it in the middle of the room.

Which antenna type should the engineer use?

directional

polarized

Yagi

omnidirectional

59. Refer to the exhibit.

What does the response "204 No Content mean for the REST API request?

Interface toopback 100 is not removed from the configuration.

Interface toopback 100 is not found in the configuration.

Interface toopback 100 is removed from the configuration.

The DELETE method is not supported.

60. In a campus network design, what ate two benefits of using BFD tor failure detection? (Choose two.)

BFD provides path failure detection in less than a second.

BFD is an efficient way to reduce memory and CPU usage.

BFD provides fault tolerance by enabling multiple routers to appear as a single virtual router.

BFD speeds up routing convergence time.

BFD enables network peers to continue forwarding packets in the event of a restart.

Page 7 of 27

61. Refer to the exhibit.

Which action automatically enables privilege exec mode when logging in via SSH?

Configure user "Cisco" with privilege level 15.

Configure a password under the line configuration.

Configure privilege level 15 under the line configuration.

Configure the enable secret to be the same as the secret for user 'Cisco*.

62. An engineer must protect their company against ransom ware attacks.

Which solution allows the engineer to block the execution stage and prevent file encryption?

Use Cisco AMP deployment with the Malicious Activity Protection engineer enabled.

Use Cisco AMP deployment with the Exploit Prevention engine enabled.

Use Cisco Firepower and block traffic to TOR networks.

Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation.

63. Refer to the Exhibit.

Running the script causes the output in the exhibit.

What should be the first line of the script?

from ncclient import manager

import manager

from ncclient import *

ncclient manager import

64. Which configuration filters out DOT1X messages in the format shown below from being sent toward Syslog server 10.15.20.33?

A)

Option A

Option B

Option C

Option D

65. Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

All devices integrating with ISE

selected individual devices

all devices in selected sites

all wired devices

66. DRAG DROP

Drag and drop the characteristics from the left onto the corresponding infrastructure deployment models on the right.

67. Refer to the Exhibit.

Which two commands are needed to allow for full reachability between AS 1000 and AS 2000? (Choose two)

R1#network 192.168.0.0 mask 255.255.0.0

R2#no network 10.0.0.0 255.255.255.0

R2#network 192.168.0.0 mask 255.255.0.0

R2#network 209.165.201.0 mask 255.255.192.0

R1#no network 10.0.0.0 255.255.255.0

68. Refer to the exhibit.

What is achieved when this Python script is executed?

Each device that is looped through in the devices.txt file is put into its own list that is appended to the parent dictionary.

Each device that is looped through in the devices.txt file is put into its own dictionary that is appended to the parent list.

All devices that are looped through in the devices.txt file are put into a list that is appended to the parent dictionary.

All devices that are looped through in the devices.txt file are put into a single dictionary that is appended to the parent list.

69. Refer to the exhibit.

An engineer reconfigures the pot-channel between SW1 and SW2 from an access port to a trunk and immediately notices this error in SW1's log.

Which command set resolves this error?

SW1(config-if)#interface Gi0/0 SW1(config-if)#no spanning-tree bpdufilter SW1(config-if)#shut SW1(config-if)#no shut

SW1(config-if)#interface Gi0/0 SW1(config-if)#no spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut

SW1(config-if)#interface Gi0/0 SW1(config-if)#spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut

SW1(config-if)#interface Gi0/1 SW1(config-if)#spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut

70. Refer to the exhibit.

Which two commands ensure that DSW1 becomes root bridge for VLAN 10 and 20?

spanning-tree mst 1 priority 1

spanning-tree mst 1 root primary

spanning-tree mstp vlan 10,20 root primary

spanning-tree mst vlan 10,20 priority root

spanning-tree mst 1 priority 4096

Page 8 of 27

71. What does the LAP send when multiple WLCs respond to the CISCO_CAPWAP-CONTROLLER.localdomain hostname during the CAPWAP discovery and join process?

broadcast discover request

join request to all the WLCs

unicast discovery request to each WLC

Unicast discovery request to the first WLS that resolves the domain name

72. Refer to the exhibit.

Which command set must be applied on R1 to establish a BGP neighborship with R2 and to allow communication from R1 to reach the networks?

A)

Option A

Option B

Option C

Option D

73. A network engineer wants to configure console access to a router without using AAA so that the privileged exec mode is entered directly after a user provides the correct login credentials.

Which action achieves this goal?

Configure login authentication privileged on line con 0.

Configure a local username with privilege level 15.

Configure privilege level 15 on line con 0.

Configure a RADIUS or TACACS+ server and use it to send the privilege level.

74. What is difference between TCAM and the MAC address table?

TCAM is used to make Lalyer 2 forwarding decisions CAM is used to build routing tables.

The MAC address table supports partial matches. TCAM requires an exact match.

The MAC address table is contained in CA

ACL and QoS information is stored in TCA

Router prefix lookups happens in CA

MAC address table lookups happen in TCA

75. How does the EIGRP metric differ from the OSPF metric?

The EIGRP metric is calculated based on bandwidth only. The OSPF metric is calculated on delay only.

The EIGRP metric is calculated based on delay only. The OSPF metric is calculated on bandwidth and delay.

The EIGRP metric Is calculated based on bandwidth and delay. The OSPF metric is calculated on bandwidth only.

The EIGRP metric Is calculated based on hop count and bandwidth. The OSPF metric is calculated on bandwidth and delay.

76. Which algorithms are used to secure REST API from brute attacks and minimize the impact?

SHA-512 and SHA-384

MD5 algorithm-128 and SHA-384

SHA-1, SHA-256, and SHA-512

PBKDF2, BCrypt, and SCrypt

77. Refer to the Exhibit.

A network engineer must load balance traffic that comes from the NAT Router and is destined to 10.10.110.10, to several FTP servers.

Which two commands sets should be applied? (Choose two).

A)

Option A

Option B

Option C

Option D

Option E

78. By default, which virtual MAC address does HSRP group 12 use?

00 5e0c:07:ac:12

05:44:33:83:68:6c

00:00:0c:07:ac:0c

00:05:5e:00:0c:12

79. Which configuration protects the password for the VTY lines against over-the-shoulder attacks?

username admin secret 7 6j809j23kpp43883500N7%e$

service password-encryption

line vty 04 password $25$FpM7182!

line vty 0 15 password $25$FpM71f82!

80. In an SD-Access solution what is the role of a fabric edge node?

to connect external Layer 3- network to the SD-Access fabric

to connect wired endpoint to the SD-Access fabric

to advertise fabric IP address space to external network

to connect the fusion router to the SD-Access fabric

Page 9 of 27

81. Refer to the Exhibit.

A network engineer must configure NETCONF. After creating the configuration, the engineer gets output from the command show line, but not from show running-config.

Which command completes the configuration?

Option A

Option B

Option C

Option D

82. Refer to the exhibit.

Which configuration allows Customer2 hosts to access the FTP server of Customer1 that has the IP address of 192.168.1.200?

ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 global ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 global ip route 192.168.1.0 255.255.255.0 Vlan10 ip route 172.16.1.0 255.255.255.0 Vlan20

ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer2 ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer1

ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer1 ip route vrf Customer2 192.168.1.200 255.255.255.255 192.168.1.1 Customer2

ip route vrf Customer1 172.16.1.1 255.255.255.255 172.16.1.1 global ip route vrf Customer2 192.168.1.200 255.255.255.0 192.168.1.1 global ip route 192.168.1.0 255.255.255.0 Vlan10 ip route 172.16.1.0 255.255.255.0 Vlan20

83. Refer to the exhibit.

What does the snippet of code achieve?

It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls.

It opens a tunnel and encapsulates the login information, if the host key is correct.

It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context.

It creates an SSH connection using the SSH key that is stored, and the password is ignored.

84. A firewall address of 192 166.1.101 can be pinged from a router but, when running a traceroute to It, this output is received

What is the cause of this issue?

The firewall blocks ICMP traceroute traffic.

The firewall rule that allows ICMP traffic does not function correctly

The firewall blocks ICMP traffic.

The firewall blocks UDP traffic

85. Which AP mode allows an engineer to scan configured channels for rogue access points?

sniffer

monitor

bridge

local

86. Which measure is used by an NTP server to indicate its closeness to the authoritative time source?

latency

hop count

time zone

stratum

87. Refer to the exhibit.

The DevOps team noticed missing NetFlow data during peak utilization times for remote branches.

Which configuration allows for this issue to be minimized or resolved?

Configure NetFlow on the in and outbound directions.

Change the transport type from UDP to TC

Configure long byte counters when specifying a flow record.

Change the flow monitor to IPv6 from IPv4.

88. Refer to the exhibit.

What are two effects of this configuration? (Choose two.)

R1 becomes the active router.

R1 becomes the standby router.

If R2 goes down, R1 becomes active but reverts to standby when R2 comes back online.

If R1 goes down. R2 becomes active and remains the active device when R1 comes back online.

If R1 goes down, R2 becomes active but reverts to standby when R1 comes back online.

89. What is the recommended minimum SNR for data applications on wireless networks?

90. Refer to the exhibit.

Which command must be applied to Router 1 to bring the GRE tunnel to an up/up state?

Routed (config if funnel mode gre multipoint

Router1(config-if)&tunnel source Loopback0

Router1(config-if)#tunnel source GigabitEthernet0/1

Router1 (config)#interface tunnel0

Page 10 of 27

91. DRAG DROP

Drag and drop the characteristics from the left onto the orchestration tool classifications on the right.

92. An engineer is implementing a Cisco MPLS TE tunnel to improve the streaming experience for the clients of a video-on-demand server.

Which action must the engineer perform to configure extended discovery to support the MPLS LDP session between the headend and tailend routers?

Configure the interface bandwidth to handle TCP and UDP traffic between the LDP peers

Configure a Cisco MPLS TE tunnel on both ends of the session

Configure an access list on the interface to permit TCP and UDP traffic

Configure a targeted neighbor session.

93. Refer to the Exhibit.

An engineer must configure an eBGP neighborship to Router B on Router A. The network that is connected to GO/1 on Router A must be advertised to Router B.

Which configuration should be applied?

A)

Option A

Option B

Option C

Option D

94. Refer to the exhibit.

What is the result when a technician adds the monitor session 1 destination remote vlan 223 command1?

The RSPAN VLAN is replaced by VLAN 223.

RSPAN traffic is sent to VLANs 222 and 223

An error is flagged for configuring two destinations.

RSPAN traffic is split between VLANs 222 and 223.

95. Refer to the exhibit.

After configuring the BGP network, an engineer verifies that the path between Servers and Server2 Is functional.

Why did RouterSF choose the route from RouterDAL instead of the route from RouterCHI?

The Router-ID Tor Router DAL is lower than the Roter-ID for RouterCH

The route from RouterOAL has a lower ME

BGP is not running on RouterCH

There is a static route in RouterSF for 10.0.0.0/24.

96. Which technology reduces the implementation of STP and leverages both unicast and multicast?

VSS

VXLAN

VPC

VLAN

97. Which HHTP status code is the correct response for a request with an incorrect password applied to a REST API session?

HTTP Status Code 200

HTTP Status Code 302

HTTP Status Code 401

HTTP Status Code: 504

98. Refer to the exhibit.

Which command set must be added to the configuration to analyze 50 packets out of every 100?

A)

Option A

Option B

Option C

Option D

99. What is one characteristic of VXLAN?

It supports a maximum of 4096 VLANs.

It supports multitenant segments.

It uses STP to prevent loops in the underlay network.

It uses the Layer 2 header to transfer packets through the network underlay.

100. Refer to the Exhibit.

Which single security feature is recommended to provide Network Access Control in the enterprise?

MAB

802.1X

WebAuth

port security sticky MAC

Page 11 of 27

101. Refer to the exhibit.

Which privilege level is assigned to VTY users?

102. What is the purpose of the LISP routing and addressing architecture?

It creates two entries for each network node, one for Its identity and another for its location on the network.

It allows LISP to be applied as a network visualization overlay though encapsulation.

It allows multiple Instances of a routing table to co-exist within the same router.

It creates head-end replication used to deliver broadcast and multicast frames to the entire network.

103. What is a consideration when designing a Cisco SD-Access underlay network?

End user subnets and endpoints are part of the underlay network.

The underlay switches provide endpoint physical connectivity for users.

Static routing is a requirement,

It must support IPv4 and IPv6 underlay networks

104. Which line must be added in the Python function to return the JSON object {"cat_9k": “FXS193202SE")?

Option A

Option B

Option C

Option D

105. Refer to the exhibit.

PC-1 must access the web server on port 8080.

To allow this traffic, which statement must be added to an access control list that is applied on SW2 port G0/0 in the inbound direction?

permit host 172.16.0.2 host 192.168.0.5 eq 8080

permit host 192.168.0.5 host 172.16.0.2 eq 8080

permit host 192.168.0.5 eq 8080 host 172.16.0.2

permit host 192.168.0.5 it 8080 host 172.16.0.2

106. Refer to the exhibit.

The EtherChannel between SW2 and SW3 is not operational which action resolves this issue?

Configure the channel-group mode on SW2 Gi0/1 and Gi0/1 to on.

Configure the channel-group mode on SW3 Gi0/1 to active

Configure the mode on SW2 Gi0/0 to trunk

Configure the mode on SW2 Gi0/1 to access.

107. What occurs when a high bandwidth multicast stream is sent over an MVPN using Cisco hardware?

The traffic uses the default MDT to transmit the data only if it isa (S, G) multicast route entry

A data MDT is created to if it is a (*, G) multicast route entries

A data and default MDT are created to flood the multicast stream out of all PIM-SM neighbors.

A data MDT is created to allow for the best transmission through the core for (S, G) multicast route entries.

108. If a client's radio device receives a signal strength of -67 dBm and the noise floor is -85 dBm, what is the SNR value?

15 dB

16 dB

18 dB

20 dB

109. Which option must be used to support a WLC with an IPv6 management address and 100 Cisco Aironet 2800 Series access points that will use DHCP to register?

110. A network administrator received reports that a 40Gb connection is saturated. The only server the administrator can use for data collection in that location has a 10Gb connection to the network.

Which of the following is the best method to use on the server to determine the source of the saturation?

Port mirroring

Log aggregation

Flow data

Packet capture

Page 12 of 27

111. Refer to the exhibit.

An engineer must deny Telnet traffic from the loopback interface of router R3 to the Loopback interface of router R2 during, the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times.

Which command set accomplishes this task?

R3(config)#time-range WEEKEND R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59 R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out

R1(config)#time-range WEEKEND R1(config-time-range)#periodic weekend 00:00 to 23:59 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in

R3(config)#time-range WEEKEND R3(config-time-range)#periodic weekend 00:00 to 23:59 R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out

R1(config)#time-range WEEKEND R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in

112. What is a TLOC in a Cisco SD-WAN deployment?

value that identifies a specific tunnel within the Cisco SD-WAN overlay

identifier that represents a specific service offered by nodes within the Cisco SD-WAN overlay

attribute that acts as a next hop for network prefixes

component set by the administrator to differentiate similar nodes that offer a common service

113. Refer to the exhibit.

The administrator troubleshoots an EtherChannel that keeps moving to err-disabled.

Which two actions must be taken to resolve the issue? (Choose two.)

Reload the switch to force EtherChannel renegotiation

Ensure that interfaces Gi1/0/2 and Gi1/0/3 connect to the same neighboring switch.

Ensure that the switchport parameters of Port channel1 match the parameters of the port channel on the neighbor switch

Ensure that the corresponding port channel interface on the neighbor switch is named Port-channel1.

Ensure that the neighbor interfaces of Gi1/0/2 and Gi/0/3 are configured as members of the same EtherChannel

114. By default, which virtual MAC address does HSRP group 32 use?

00:5e:0c:07:ac:20

04:18:20:83:2e:32

05:5e:5c:ac:0c:32

00:00:0c:07:ac:20

115. DRAG DROP

Drag and drop the characteristics from the left onto the switching architectures on the right.

116. Refer to the Exhibit.

An engineer tries to log in to router R1.

Which configuration enables a successful login?

A)

Option A

Option B

Option C

Option D

117. What function does VXLAN perform in a Cisco SD-Access deployment?

data plane forwarding

control plane forwarding

systems management and orchestration

policy plane forwarding

118. Which component handles the orchestration plane of the Cisco SD-WAN?

vBond

cSmart

vManage

WAN Edge

119. Refer to the exhibit.

Which Python code snippet prints the descriptions of disabled interfaces only?

A)

Option A

Option B

Option C

Option D

120. A Cisco DNA Center REST API sends a PUT to the /dna/intent/api/v1/network-device endpoint A response code of 504 is received.

What does the code indicate?

The response timed out based on a configured interval

The user does not have authorization to access this endpoint.

The username and password are not correct

The web server is not available

Page 13 of 27

121. What is used to validate the authenticity of the client and is sent in HTTP requests as a JSON object?

SSH

HTTPS

JWT

TLS

122. What is a characteristic of a type 2 hypervisor?

ideal for data center

complicated deployment

ideal for client/end-user system

referred to as bare-metal

123. Which signal strength and noise values meet the minimum SNR for voice networks?

signal strength -67 dBm, noise 91 dBm

signal strength -69 dBm, noise 94 dBm

signal strength -68 dBm, noise 89 dBm

signal strength -66 dBm, noise 90 dBm

124. Refer to the exhibit.

An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit point.

Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?

R4(config-router)bgp default local-preference 200

R3(config-router)neighbor 10.1.1.1 weight 200

R3(config-router)bgp default local-preference 200

R4(config-router)nighbor 10.2.2.2 weight 200

125. DRAG DROP

Drag and drop the characteristics from the left onto the deployment models on the right Not all options are used.

126. Which access control feature does MAB provide?

user access based on IP address

allows devices to bypass authenticate*

network access based on the physical address of a device

simultaneous user and device authentication

127. Which two methods are used to interconnect two Cisco SD-Access Fabric sites? (Choose two.)

SD-Access transit

fabric interconnect

wireless transit

IP-based transit

SAN transit

128. Refer to the exhibit.

Only administrators from the subnet 10.10.10.0/24 are permitted to have access to the router. A secure protocol must be used for the remote access and management of the router instead of clear-text protocols.

Which configuration achieves this goal?

Option A

Option B

Option C

Option D

129. Refer to the exhibit.

The OSPF neighborship fails between two routers.

What is the cause of this issue?

The OSPF router ID is missing on this router.

The OSPF process is stopped on the neighbor router.

There is an MTU mismatch between the two routers.

The OSPF router ID is missing on the neighbor router.

130. In a Cisco SD-Access network architecture, which access layer cabling design is optimal for the underlay network?

Switches are cross-linked at the same layer and have a single connection to each upstream distribution device.

Switches are connected to each upstream distribution and core device.

Switches are connected to each upstream distribution device.

Switches are cross-linked to devices at the same layer and at the upstream and downstream devices.

Page 14 of 27

131. What is the difference between CEF and process switching?

CEF processes packets that are too complex for process switching to manage.

CEF is more CPU-intensive than process switching.

CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet.

Process switching is faster than CE

132. Refer to the Exhibit.

Refer to the exhibit. A network operator is attempting to configure an IS-IS adjacency between two routers, but the adjacency cannot be established. To troubleshoot the problem, the operator collects this debugging output.

Which interfaces are misconfigured on these routers?

The peer router interface is configured as Level 1 only, and the R2 interface is configured as Level 2 only

The R2 interface is configured as Level 1 only, and the Peer router interface is configured as Level 2 only

The R2 interface is configured as point-to-point, and the peer router interface is configured as multipoint.

The peer router interface is configured as point-as-point, and the R2 interface is configured as multipoint.

133. Refer to the Exhibit.

Which configuration enables password checking on the console line, using only a password?

A)

Option A

Option B

Option C

Option D

134. DRAG DROP

Drag and drop the descriptions from the left onto the routing protocols they describe on the right.

135. In a Cisco SD-Access environment, which function is performed by the border node?

Connect uteri and devices to the fabric domain.

Group endpoints into IP pools.

Provide reachability information to fabric endpoints.

Provide connectivity to traditional layer 3 networks.

136. DRAG DROP

Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

137. Which configuration enables a device to be configured via NETCONF over SSHv2?

A)

Option A

Option B

Option C

Option D

138. Refer to the Exhibit.

Which command is required to verify NETCONF capability reply messages?

show netconf | section rpc-reply

show netconf rpc-reply

show netconf xml rpc-reply

show netconf schema | section rpc-reply

139. Refer to the Exhibit.

Refer to the exhibit. A network engineer troubleshoots an issue with the port channel between SW1

and SW2. which command resolves the issue?

SW1(config-if)#channel-group 10 mode desirable

SW1(config-if)#channel-group 10 mode active

SW2(config-if)#switchport mode trunk

SW2(config-if)#channel-group 10 mode on

140. How are the different versions of IGMP compatible?

IGMPv2 is compatible only with IGMPv1.

IGMPv2 is compatible only with IGMPv2.

IGMPv3 is compatible only with IGMPv3.

IGMPv3 is compatible only with IGMPv1

Page 15 of 27

141. A company hires a network architect to design a new OTT wireless solution within a Cisco SD-Access Fabric wired network. The architect wants to register access points to the WLC to centrally switch the traffic.

Which AP mode must the design include?

Bridge

Fabric

FlexConnect

local

142. Which two components are supported by LISP? (Choose two.)

Proxy ETR

egress tunnel router

route reflector

HMAC algorithm

spoke

143. what is a benefit of using a Type 2 hypervisor instead of a Type 1 hypervisor?

better application performance

Improved security because the underlying OS is eliminated

Improved density and scalability

ability to operate on hardware that is running other OSs

144. Refer to the Exhibit.

What is the cause of the communication failure between R1 and R4?

R1 is configured with the no ip unreachables command.

R2 is denying ICMP

R4 is denying ICM

R3 is denying ICM

145. Which two pieces of information are necessary to compute SNR? (Choose two.)

transmit power

noise floor

EIRP

antenna gain

RSSI

146. A network engineer is designing a QoS policy tor voice and video applications.

Which software queuing feature provides strict-priority servicing?

Automatic QoS

Low Latency Queuing

Class-Based Weighted Fair Queuing

Link Fragmentation

147. Refer to Exhibit.

MTU has been configured on the underlying physical topology, and no MTU command has been configured on the tunnel interfaces.

What happens when a 1500-byte IPv4 packet traverses the GRE tunnel from host X to host Y, assuming the DF bit is cleared?

The packet arrives on router C without fragmentation.

The packet is discarded on router A

The packet is discarded on router B

The packet arrives on router C fragmented.

148. DRAG DROP

Drag and drop the snippets onto the blanks within the code to construct a script that brings up the failover Ethernet port if the primary port goes down and also shuts down the failover port when the primary returns to service. Not all options are used.

149. Refer to the Exhibit.

After configurating an IPsec VPN, an engineer enters the show command to verify the ISAKMP SA status.

What does the status show?

ISAKMP SA is authenticated and can be used for Quick Mode.

Peers have exchanged keys, but ISAKMP SA remains unauthenticated.

VPN peers agreed on parameters for the ISAKMP SA

ISAKMP SA has been created, but it has not continued to form.

150. Which activity requires access to Cisco DNA Center CLI?

provisioning a wireless LAN controller

creating a configuration template

upgrading the Cisco DNA Center software

graceful shutdown of Cisco DNA Center

Page 16 of 27

151. Refer to the exhibit.

What are two effect of this configuration? (Choose two.)

Inside source addresses are translated to the 209.165.201.0/27 subnet.

It establishes a one-to-one NAT translation.

The 10.1.1.0/27 subnet is assigned as the inside global address range.

The 209.165.201.0/27 subnet is assigned as the outside local address range.

The 10.1.1.0/27 subnet is assigned as the inside local addresses.

152. Which template is used when multiple templates are grouped together to run in succession in Cisco DNA Center?

composite

regular

project

configuration

153. An engineer is configuring RADIUS-Based Authentication with EAP. MS-CHAPv2 is configured on a client device.

Which outer method protocol must be configured on the ISE to support this authentication type?

EAP-TLS

EAP-FAST

LDAP

PEAP

154. How does Cisco Trustsec enable more flexible access controls for dynamic networking environments and data centers?

uses flexible NetFlow

assigns a VLAN to the endpoint

classifies traffic based an the contextual identity of the endpoint rather than its IP address

classifies traffic based on advanced application recognition

155. How do EIGRP metrics compare to OSPF metrics?

EIGRP metrics are based on a combination of bandwidth and packet loss, and OSPF metrics are based on interface bandwidth.

EIGRP uses the Dijkstra algorithm, and OSPF uses The DUAL algorithm

The EIGRP administrative distance for external routes is 170. and the OSPF administrative distance for external routes is undefined

The EIGRP administrative distance for external routes is 170. and the OSPF administrative distance for external routes is 110

156. DRAG DROP

Drag and drop the automation characteristics from the left to the corresponding tools on the right.

157. What is a command-line tool for consuming REST APIs?

Postman

CURL

Firefox

Python requests

158. What is the responsibility of a secondary WLC?

It shares the traffic load of the LAPs with the primary controller.

It avoids congestion on the primary controller by sharing the registration load on the LAPs.

It registers the LAPs if the primary controller fails.

It enables Layer 2 and Layer 3 roaming between Itself and the primary controller.

159. What is one characteristic of Cisco DNA Center and vManage northbound APIs?

They push configuration changes down to devices.

They implement the RESTCONF protocol.

They exchange XML-formatted content.

They implement the NETCONF protocol.

160. Refer to the exhibit.

How should the programmer access the list of VLANs that are recevied via the API call?

Option A

Option B

Option C

Option D

Page 17 of 27

161. Which QoS feature uses the IP Precedence bits in the ToS field of the IP packet header to partition traffic into different priority levels?

marking

shaping

policing

classification

162. Why are stateless calls executed by REST API useful in cloud applications?

They control URL decoding.

They rely on data stored on the server for calls

They use HTTPS to implement all calls.

They are easy to redeploy and to scale

163. What is a characteristic of Cisco DNA Northbound APIs?

They simplify the management of network infrastructure devices.

They enable automation of network infrastructure based on intent.

They utilize RESTCON

They utilize multivendor support APIs.

164. Which function in handled by vManage in the cisco SD-WAN fabric?

Establishes BFD sessions to test liveliness of links and nodes.

Distributes polices that govern data forwarding.

Performs remote software upgrades for WAN Edge vSmart and vBond.

Establishes iPsec tunnels with nodes

165. Refer to the exhibit.

The port channel between the switches does not work as expected.

Which action resolves the issue?

Interface Gi0/0 on Switch2 must be configured as passive.

Interface Gi0/1 on Switch1 must be configured as desirable.

interface Gi0/1 on Switch2 must be configured as active.

Trucking must be enabled on both Interfaces on Switch2.

166. DRAG DROP

Drag and drop the LIPS components on the left to the correct description on the right.

167. DRAG DROP

Drag and drop the characteristics from the left to the table types on the right.

168. What is the purpose of a data modeling language?

to establish a framework to process data by using an object-oriented programming approach

to specify the rules for transcoding between text and binary data encodings

to standardize the procedures that are executed when parsing sent and received data

to describe the structure and meaning of exchanged data

169. Refer to the exhibit.

An engineer must set up connectivity between a campus aggregation layer and a branch office access layer. The engineer uses dynamic trunking protocol to establish this connection, however, management traffic on VLAN1 is not passing.

Which action resolves the issue and allow communication for all configured VLANs?

Allow all VLANs on the trunk links

Disable Spanning Tree for the native VLA

Configure the correct native VLAN on the remote interface

Change both interfaces to access ports.

170. Which control plane protocol is used between Cisco SD-WAN routers and vSmart controllers?

TCP

OMP

UDP

BGP

Page 18 of 27

171. Which device makes the decision for a wireless client to roam?

wireless client

wireless LAN controller

access point

WCS location server

172. What does the number in an NTP stratum level represent?

The number of hops it takes to reach the master time server.

The number of hops it takes to reach the authoritative time source.

The amount of offset between the device clock and true time.

The amount of drift between the device clock and true time.

173. A customer transitions a wired environment to a Cisco SD-Access solution. The customer does not

want to integrate the wireless network with the fabric.

Which wireless deployment approach enables the two systems to coexist and meets the customer requirement?

Deploy the APs in autonomous mode

Deploy the wireless network over the top of the fabric

Deploy a separate network for the wireless environment

Implement a Cisco DNA Center to manage the two networks

174. Refer to the exhibit.

Which two facts does the device output confirm? (Choose two.)

The device sends unicast messages to its peers

The device's HSRP group uses the virtual IP address 10.0.3.242

The standby device is configured with the default HSRP priority.

The device is using the default HSRP hello timer

The device is configured with the default HSRP priority

175. Refer to the exhibit.

After configuring HSRP an engineer enters the show standby command.

Which two facts are derived from the output? (Choose two.)

The router with IP 10.10 1.3 is active because it has a higher IP address

If Fa0/0 is shut down, the HSRP priority on R2 becomes 80

R2 Fa1/0 regains the primary role when the link comes back up

R2 becomes the active router after the hold time expires.

R2 is using the default HSRP hello and hold timers.

176. Refer to the exhibit.

Which command set is needed to configure and verify router R3 to measure the response time from router R3 to the file server located in the data center?

A)

Option A

Option B

Option C

Option D

177. Which solution supports end to end line-rate encryption between two sites?

IPsec

TrustSec

MACseC

GRE

178. Refer to the exhibit.

What is the result of this Python code?

7.5

179. When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?

logging host 10.2.3.4 vrf mgmt transport tcp port 6514

logging host 10.2.3.4 vrf mgmt transport udp port 6514

logging host 10.2.3.4 vrf mgmt transport tcp port 514

logging host 10.2.3.4 vrf mgmt transport udp port 514

180. An engineer is configuring local web authentication on a WLAN. The engineer chooses the Authentication radio button under the Layer 3 Security options for Web Policy.

Which device presents the web authentication for the WLAN?

ISE server

local WLC

RADIUS server

anchor WLC

Page 19 of 27

181. Refer to the Exhibit.

Clients report that they cannot connect to this SSID using the provided PSK.

Which action will resolve this issue?

Apply the correct interface to this WLA

Apply the changes this SSI

Select the PSK under authentication key management.

Define the correct Radio Policy.

182. An engineer must create an EEM applet that sends a syslog message in the event a change happens in the network due to trouble with an OSPF process.

Which action should the engineer use?

event manager applet LogMessage

event routing network 172.30.197.0/24 type all

action 1 syslog msg "OSPF ROUTING ERROR"

action 1 syslog send "OSPF ROUTING ERROR"

action 1 syslog pattern "OSPF ROUTING ERROR"

action 1syslog write "OSPF ROUTING ERROR"

183. Refer to the exhibit.

An engineer must create a configuration that executes the show run command and then terminates the session when user CCNP legs in.

Which configuration change is required?

Add the access-class keyword to the username command

Add the access-class keyword to the aaa authentication command

Add the autocommand keyword to the username command

Add the autocommand keyword to the aaa authentication command

184. Refer to the Exhibit.

Traffic is not passing between SW1 and SW2.

Which action fixes the issue?

Configure LACP mode on S1 to passive.

Configure switch port mode to ISL on S2.

Configure PAgP mode on S1 to desirable.

Configure LACP mode on S1 to active.

185. Refer to the exhibit.

Which type of antenna does the radiation pattern represent?

Yagi

multidirectional

directional patch

omnidirectional

186. Refer to the exhibit.

CR2 and CR3 ate configured with OSPF.

Which configuration, when applied to CR1. allows CR1 to exchange OSPF Information with CR2 and CR3 but not with other network devices or on new Interfaces that are added to CR1?

A)

Option A

Option B

Option C

Option D

187. DRAG DROP

Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

188. Refer to the Exhibit.

An engineer must save the configuration of router R2 using the NETCONF protocol.

Which script must be used?

Option A

Option B

Option C

Option D

189. Refer lo the exhibit.

Which address type is 10.10.10.10 configured for?

inside global

outside local

outside global

inside local

190. A network monitoring system uses SNMP polling to record the statistics of router interfaces The SNMP queries work as expected until an engineer installs a new interface and reloads the router After this action, all SNMP queries for the router fail.

What is the cause of this issue?

The SNMP community is configured incorrectly

The SNMP interface index changed after reboot.

The SNMP server traps are disabled for the interface index

The SNMP server traps are disabled for the link state.

Page 20 of 27

191. Refer to the Exhibit.

An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic.

Which two configurations must be applied to drop these types of traffic when it continuously exceeds 320 kbps? (Choose two)

Option A

Option B

Option C

Option D

Option E

192. Refer to the exhibit.

Which type of antenna is shown on the radiation patterns?

Yagi

dipole

patch

omnidirectional

193. Refer to the exhibit.

Based on the configuration in this WLAN security setting.

Which method can a client use to authenticate to the network?

text string

username and password

certificate

RADIUS token

194. DRAG DROP

Drag and drop the tools from the left onto the agent types on the right.

195. An engineer must configure a multicast UDP jitter operation.

Which configuration should be applied?

A)

Option

196. An engineer must use IP SLA to measure the network performance and record statistics hop-by-hop.

Which configuration must be used?

Option A

Option B

Option C

Option D

197. Which solution should be used in a high-density wireless environment to increase bandwidth for each user?

Increase antenna size

Increase the mandatory minimum data rate.

Increase the cell size of each A

Increase TX power.

198. Which device, in a LISP routing architecture, receives and de-encapsulates LISP traffic for endpoints within a LISP-capable site?

ETR

OMS

ITR

199. DRAG DROP

Drag and drop the descriptions from the left onto the routing protocol they describe on the right.

200. Which A record type should be configured for access points to resolve the IP address of a wireless LAN controller using DNS?

CISC

CONTROLLE

localdomain

CISC

CAPWA

CONTROLLE

localdomain

CISCO-CONTROLLE

localdomain

CISCO-CAPWAP-CONTROLLE

localdomain

Page 21 of 27

201. Refer to the exhibit.

A network engineer must block Telnet traffic from hosts in the range of 10.100 2.248 to 10.100.2 255 to the network 10.100.3.0 and permit everything else.

Which configuration must the engineer apply'?

A)

Option A

Option B

Option C

Option D

202. In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?

management and data

control and management

control, and forwarding

control and data

203. Refer to the exhibit.

A An engineer configures OSPF and wants to verify the configuration.

Which configuration is applied to this device?

A)

Option A

Option B

Option C

Option D

204. Refer to the Exhibit.

Which configuration must be applied to R to enable R to reach the server at 172.16.0.1?

interface Ethernet0/0 ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 255.255.0.0

interface Ethernet0/0 vrf forwarding hotel ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf Hotel network 172.16.0.0 0.0.255.255 area 0

interface Ethernet0/0 vrf forwarding bank ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 0.0.255.255 area 0

interface Ethernet0/0 ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf hotel network 172.16.0.0 255.255.0.0

205. An engineer must implement a configuration to allow a network administrator to connect to the console port of a router and authenticate over the network.

Which command set should the engineer use?

aaa new-model aaa authentication login default enable

aaa new-model aaa authentication login console local

aaa new-model aaa authentication login console group radius

aaa new-model aaa authentication enable default

206. DRAG DROP

Drag and drop the REST API authentication methods from the left onto their descriptions on the right.

207. Refer to the Exhibit.

Which action completes the configuration to achieve a dynamic continuous mapped NAT for all users?

Configure a match-host type NAT pool

Reconfigure the pool to use the 192.168 1 0 address range

Increase the NAT pool size to support 254 usable addresses

Configure a one-to-one type NAT pool

208. DRAG DROP

Drag and drop the characteristics from the left onto the protocols they apply to on the right?

209. Which security measure mitigates a man-in-the-middle attack of a REST API?

SSL certificates

biometric authentication

password hash

non repudiotion feature

210. What is a characteristics of a vSwitch?

supports advanced Layer 3 routing protocols that are not offered by a hardware switch

enables VMs to communicate with each other within a virtualized server

has higher performance than a hardware switch

operates as a hub and broadcasts the traffic toward all the vPorts

Page 22 of 27

211. Refer to the Exhibit.

An engineer must configure an ERSPAN tunnel that mirrors traffic from linux1 on Switch1 to Linux2 on Switch2.

Which command must be added to the destination configuration to enable the ERSPAN tunnel?

(config-mon-erspan-dst-src)# origin ip address 172.16.10.10

(config-mon-erspan-dst-src)# erspan-id 172.16.10.10

(config-mon-erspan-dst-src)# no shut

(config-mon-erspan-dst-src)# erspan-id 110

212. Refer to the exhibit.

An LACP port channel is configured between Switch-1 and Switch-2, but It falls to come up.

Which action will resolve the issue?

Configure Switch-1 with channel-group mode active

Configure Switch-2 with channel-group mode desirable.

Configure Switch-1 with channel-group mode on.

Configure SwKch-2 with channel-group mode auto

213. An engineer is configuring a new SSID to present users with a splash page for authentication.

Which WLAN Layer 3 setting must be configured to provide this functionally?

CCKM

WPA2 Policy

Local Policy

Web Policy

214. Refer to the exhibit.

Which command must be configured for RESTCONF to operate on port 8888?

ip http port 8888

restconf port 8888

ip http restconf port 8888

restconf http port 8888

215. Refer to the Exhibit.

Which two commands ensure that DSW1 becomes root bridge for VLAN 10? (Choose two)

DSW1(config)#spanning-tree vlan 10 priority 4096 Most Voted

DSW1(config)#spanning-tree vlan 10 priority root

DSW2(config)#spanning-tree vlan 10 priority 61440 Most Voted

DSW1(config)#spanning-tree vlan 10 port-priority 0

DSW2(config)#spanning-tree vlan 20 priority 0

216. In a Cisco SD-Access solution, what is the role of the Identity Services Engine?

It is leveraged for dynamic endpoint to group mapping and policy definition.

It provides GUI management and abstraction via apps that share context.

it is used to analyze endpoint to app flows and monitor fabric status.

It manages the LISP EID database.

217. What happens when a FlexConnect AP changes to standalone mode?

All controller-dependent activities stop working except the DF

All client roaming continues to work

Only clients on central switching WLANs stay connected.

All clients on an WLANs are disconnected

218. Which two solutions are used for backing up a Cisco DNA Center Assurance database? (Choose two)

NFS share

non-linux server

local server

remote server

bare metal server

219. Refer to the exhibit.

What is required to configure a second export destination for IP address 192.168.10.1?

Specify a VR

Specify a different UDP port.

Specify a different flow ID

Configure a version 5 flow-export to the same destination.

Specify a different TCP port.

220. Reter to the exhibit.

An administrator troubleshoots intermittent connectivity from internal hosts to an external public server. Some internal hosts can connect to the server while others receive an ICMP Host Unreachable message and these hosts change over time.

What is the cause of this issue?

The translator does not use aOdress overloading

The NAT ACL does not match alt internal hosts

The NAT ACL and NAT pool share the same name

The NAT pool netmask rs excessively wide

Page 23 of 27

221. What does a northbound API accomplish?

programmatic control of abstracted network resources through a centralized controller

access to controlled network resources from a centralized node

communication between SDN controllers and physical switches

controlled access to switches from automated security applications

222. What is the function of the fabric control plane node in a Cisco SD-Access deployment?

It is responsible for policy application and network segmentation in the fabric

It performs traffic encapsulation and security profiles enforcement in the fabric

It holds a comprehensive database that tracks endpoints and networks in the fabric

It provides integration with legacy nonfabric-enabled environments

223. Refer to the Exhibit.

Which command set must be added to permit and log all traffic that comes from 172.20.10.1 in interface GigabitEthernet0/1 without impacting the functionality of the access list?

Option A

Option B

Option C

Option D

224. Refer to the Exhibit.

The EtherChannel between SW1 and SW2 is not operational.

Which a coon will resolve the issue?

Configure channel-group 1 mode active on GVO and G1 1 of SW2.

Configure twitchport trunk encapsulation dot1q on SW1 and SW2.

Configure channel-group 1 mode active on Gl'O and GM of SW1 .

Configure switchport mode dynamic desirable on SW1 and SW2

225. Which of the following fiber connector types is the most likely to be used on a network interface card?

MPO

226. A customer has two Cisco WLCs that manage separate APs throughout a building. Each WLC advertises the same SSID but terminates on different interfaces. Users report that they drop their connections and change IP addresses when roaming.

Which action resolves this issue?

Enable client toad balancing.

Enable fast roaming.

Configure high availability.

Configure mobility groups.

227. A network engineer is configuring Flexible Netflow and enters these commands Sampler Netflow1

Mode random one-out-of 100

Interface fastethernet 1/0

Flow-sampler netflow1

Which are two results of implementing this feature instead of traditional Netflow? (Choose two.)

CPU and memory utilization are reduced.

Only the flows of top 100 talkers are exported

The data export flow is more secure.

The number of packets to be analyzed are reduced

The accuracy of the data to be analyzed is improved

228. What is provided to the client to identify the authenticated session in subsequent API calls after authenticating to the Cisco DNA Center API?

username and password

client

500 certificate

authentication token

session cookie

229. DRAG DROP

A network engineer is adding an additional 10Gps link to an exiting 2x10Gps LACP-based LAG to augment its capacity. Network standards require a bundle interface to be taken out of service if one of its member links goes down, and the new link must be added with minimal impact to the production network.

Drag and drop the tasks that the engineer must perform from the left into the sequence on the right. Not all options are used.

230. Which deployment option of Cisco NGFW provides scalability?

tap

clustering

inline tap

high availability

Page 24 of 27

231. Refer to the exhibit.

Assuming all links are functional, which path does PC1 take to reach DSW1?

PC1 goes from ALSW1 to DSW2 to CORE to DSW1.

PC1 goes from ALSW1 to DSW2 to DSW1.

PC1 goes from ALSW1 to DSW1.

PC1 goes from ALSW1 to DSW2 to ALSW2 to DSW1.

232. Refer to the exhibit.

An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router However, the router can still ping hosts on the 209.165.200.0/24 subnet.

Which explanation of this behavior is true?

Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.

Only standard access control lists can block traffic from a source IP address.

After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.

The access control list must contain an explicit deny to block traffic from the router.

233. DRAG DROP

Drag and drop the snippets onto the blanks within the code to construct a script that adds a prefix list to a route map and sets the local preference. Not all options are used

234. DRAG DROP

Drag and drop the virtual components from the left onto their deceptions on the right.

235. Which two methods are used by an AP that is typing to discover a wireless LAN controller? (Choose two.)

Cisco Discovery Protocol neighbour

broadcasting on the local subnet

DNS lookup cisco-DNA-PRIMAR

localdomain

DHCP Option 43

querying other APs

236. Which exhibit displays a valid JSON file?

A)

Option A

Option B

Option C

Option D

237. When a DNS host record is configured for a new Cisco AireOS WLC, which hostname must be added to allow APs to successfully discover the WLC?

CONTROLLER-CAPWAP-CISCO

CISCO-CONTROLLER-CAPWAP

CAPWAP-CISCO-CONTROLLER

CISCO-CAPWAP-CONTROLLER

238. What is a characteristic of the overlay network in the Cisco SD-Access architecture?

It uses a traditional routed access design to provide performance and high availability to the network.

It consists of a group of physical routers and switches that are used to maintain the network.

It provides isolation among the virtual networks and independence from the physical network.

It provides multicast support to enable Layer 2 Hooding capability in the underlay network.

239. What Is the difference between the MAC address table and TCAM?

The MAC address table supports partial matches. TCAM requires an exact match.

The MAC address table is contained in TCAM ACL and QoS information is stored in CA

Router prefix lookups happen in TCA

MAC address table lookups happen In CA

TCAM is used to make L2 forwarding decisions. CAM is used to build routing tables

240. Refer to the Exhibit.

Why does the OSPF neighborship fail between the two interfaces?

The IP subnet mask is not the same.

There is a mismatch in the OSPF interface network type.

The OSPF timers are different.

The MTU is nor the same.

Page 25 of 27

241. Which LISP device is responsible for publishing EID-to-RLOC mappings for a site?

ETR

ITR

242. Which function does a virtual switch provide?

CPU context switching (or multitasking between virtual machines

RAID storage for virtual machines

emulation of power for virtual machines.

connectivity between virtual machines

243. What does a YANG model provide?

standardized data structure independent of the transport protocols

creation of transport protocols and their interaction with the OS

user access to interact directly with the CLI of the device to receive or modify network configurations

standardized data structure that can be used only with NETCONF or RESTCONF transport protocols

244. Which feature Is used to propagate ARP broadcast, and link-local frames across a Cisco SD-Access fabric to address connectivity needs for silent hosts that require reception of traffic to start communicating?

Native Fabric Multicast

Layer 2 Flooding

SOA Transit

Multisite Fabric

245. How does the RIB differ from the FIB?

The RIB is used to create network topologies and routing tables. The FIB is a list of routes to particular network destinations.

The FIB includes many routes a single destination. The RIB is the best route to a single destination.

The RIB includes many routes to the same destination prefix. The FIB contains only the best route

The FIB maintains network topologies and routing tables. The RIB is a Iist of routes to particular network destinations.

246. In a Cisco Catalyst switch equipped with two supervisor modules an administrator must temporally remove the active supervisor from the chassis to perform hardware maintenance on it.

Which mechanism ensure that the active supervisor removal is not disruptive to the network operation?

NSF/NSR

SSO

HSRP

VRRP

247. Refer to the Exhibit.

Which router is elected as the VRRP primary virtual router?

Router B

Router D

Router C

Router A

248. A network administrator wants to install new VoIP switches in a small network closet but is concerned about the current heat level of the room.

Which of the following should the administrator take into consideration before installing the new equipment?

The power load of the switches

The humidity in the room

The fire suppression system

The direction of airflow within the switches

249. What is required for intercontroller Layer 3 roaming?

Mobility groups are established between wireless controllers.

The management VLAN is present as a dynamic VLAN on the second WL

WLCs use separate DHCP servers.

WLCs have the same IP addresses configured on their interfaces.

250. Which Python library is used to work with YANG data models via NETCONF?

Postman

requests

nccllent

cURL

Page 26 of 27

251. In which way are EIGRP and OSPF similar?

They both support unequal-cost load balancing

They both support MD5 authentication for routing updates.

They nave similar CPU usage, scalability, and network convergence times.

They both support auto summarization

252. Which OSPF networks types are compatible and allow communication through the two peering devices?

broadcast to nonbroadcast

point-to-multipoint to nonbroadcast

broadcast to point-to-point

point-to-multipoint to broadcast

253. Which two features does the Cisco SD-Access architecture add to a traditional campus network? (Choose two.)

software-defined segmentation

private VLANs

SD-WAN

modular QoS

identity services

254. Refer to the Exhibit.

Communication between London and New York is down.

Which command set must be applied to the NewYork switch to resolve the issue?

NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode negotiate NewYork(config-if)#end NewYork#

NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode on NewYork(config-if)#end NewYork#

NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode auto NewYork(config-if)#end NewYork#

NewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode passive NewYork(config-if)#end NewYork#

255. What are the main components of Cisco TrustSec?

Cisco ISE and Enterprise Directory Services

Cisco IS

network switches, firewalls, and routers

Cisco ISE and TACACS+

Cisco ASA and Cisco Firepower Threat Defense

256. Which benefit is offered by a cloud infrastructure deployment but is lacking in an on-premises deployment?

efficient scalability

virtualization

storage capacity

supported systems

257. Which component of the Cisco Cyber Threat Defense solution provides user and flow context analysis?

Cisco Firepower and FireSIGHT

Cisco Stealth watch system

Advanced Malware Protection

Cisco Web Security Appliance

258. DRAG DROP

Drag and drop the code snippets from the bottom onto the blanks in the script to convert a Python object into a JSON string. Not all options are used.

259. Refer to the Exhibit.

Which configuration set implements Control plane Policing for SSH and Telnet?

Option A

Option B

Option C

Option D

260. Which method creates an EEM applet policy that is registered with EEM and runs on demand or manually?

event manager applet ondemand event register action 1.0 syslog priority critical msg 'This is a message from ondemand'

event manager applet ondemand event manual action 1.0 syslog priority critical msg 'This is a message from ondemand'

event manager applet ondemand event none action 1.0 syslog priority critical msg 'This is a message from ondemand'

event manager applet ondemand action 1.0 syslog priority critical msg 'This is a message from ondemand'

Page 27 of 27

261. Refer to the exhibit.

Which action results from executing the Python script?

display the output of a command that is entered on that device in a single line

SSH to the IP address that is manually entered on that device

display the output of a command that is entered on that device

display the unformatted output of a command that is entered on that device

262. DRAG DROP

Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.

263. Which of the following are examples of Type 2 hypervisors? (Choose three.)

VMware ESXi

Oracle VirtualBox

Oracle Solaris Zones

Microsoft Hyper-V

Microsoft Virtual PC

264. DRAG DROP

Drag and drop the characteristics from the left onto the corresponding orchestration tool on the right.

265. Refer to the exhibit.

Which commands are required to allow SSH connection to the router?

A)

Option A

Option B

Option C

Option D

266. AN engineer is implementing a route map to support redistribution within BGP. The route map must configured to permit all unmatched routes.

Which action must the engineer perform to complete this task?

Include a permit statement as the first entry

Include at least one explicit deny statement

Remove the implicit deny entry

Include a permit statement as the last entry

267. Refer to the Exhibit.

An attacker can advertise OSPF fake routes from 172.16.20.0 network to the OSPF domain and black hole traffic.

Which action must be taken to avoid this attack and still be able to advertise this subnet into OSPF?

Configure 172.16.20.0 as a stub network.

Apply a policy to filter OSPF packets on R2.

Configure a passive Interface on R2 toward 172.16.20.0.

Configure graceful restart on the 172.16.20.0 interface.

268. By default, which virtual MAC address does HSRP group 16 use?

c0:41:43:64:13:10

00:00:0c 07:ac:10

00:05:5c:07:0c:16

05:00:0c:07:ac:16

TAGS:

350-401, 350-401 exam dumps

Notify of

Label

Name*

Email*

Website

Label

Name*

Email*

Website

0 Comments

Oldest

Newest Most Voted

Inline Feedbacks

View all comments

Get 350-401 Dumps Full Version

Q&As: 984
Versions: PDF and Software Download Now

About Dumpsinfo

Dumpsinfo is a good platform providing the latest exam information and dumps questions for all IT certification exams. You can study all the latest exam dumps questions online.

[email protected]

Mon - Sat 9:00am - 6:00pm

Cisco 350-401 Exam Questions Simulate Actual 350-401 Exam

Related

Posts

100-160 Dumps Guarantee You Pass 100-160 Exam Easily

Pass 300-815 Exam to Get Cisco Certification

Test Online 300-445 Dumps Questions to Be Certified

Improve Your Knowledge with 300-540 Exam Dumps

About Us

EMAIL

Services

Opening Hours