Cisco 350-401 Questions 2021

NEW QUESTION 1
Refer to the exhibit.

Which IP address becomes the active next hop for 192.168.102 0/24 when 192.168.101.2 fails?

• A. A.-192.168.101.18B.192.168.101.6C.192.168.101.10D.192.168.101.14

Answer: A

NEW QUESTION 2
Drag and drop the characteristics from the left onto the correct infrastructure deployment types on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
On premise: customizable,specific requirements,resources Cloud: scale, built-in automated backup, strong stable internet

NEW QUESTION 3
A response code of 404 is received while using the REST API on Cisco UNA Center to POST to this URI.
/dna/intent/api/v1 /template-programmer/project
What does the code mean?

• A. The client made a request a resource that does not exist.
• B. The server has not implemented the functionality that is needed to fulfill the request.
• C. The request accepted for processing, but the processing was not completed.
• D. The POST/PUT request was fulfilled and a new resource was created, Information about the resource is in the response body.

Answer: A

NEW QUESTION 4
What is a benefit of data modeling languages like YANG?

• A. They enable programmers to change or write their own application within the device operating system.
• B. They create more secure and efficient SNMP OIDs.
• C. They make the CLI simpler and more efficient.
• D. They provide a standardized data structure, which results in configuration scalability and consistency.

Answer: D

NEW QUESTION 5
Drag and drop the description from the left onto the correct QoS components on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Traffic Policing: Drops excessive Traffic, causes TCP retransmissions, introduce no delay/jitter Shaping: buffers, excessive traffic, introduce delay and jitter, typically delays, rather than drops traffic

NEW QUESTION 6
Which two mechanisms are available to secure NTP? (Choose two.)

• A. IP prefix list-based
• B. IPsec
• C. TACACS-based authentication
• D. IP access list-based
• E. Encrypted authentication

Answer: DE

NEW QUESTION 7
IS OSPF, which LAS type is responsible for pointing to the ASBR router?

• A. type 1
• B. type 2
• C. type 3
• D. type 4

Answer: D

NEW QUESTION 8
Which feature must be configured to allow packet capture over Layer 3 infrastructure'?

• A. VSPAN
• B. IPSPAN
• C. RSPAN
• D. ERSPAN

Answer: D

NEW QUESTION 9
How does Cisco Trustsec enable more flexible access controls for dynamic networking environments and data centers?

• A. uses flexible NetFlow
• B. assigns a VLAN to the endpoint
• C. classifies traffic based an the contextual identity of the endpoint rather than its IP address
• D. classifies traffic based on advanced application recognition

Answer: C

NEW QUESTION 10
What the role of a fusion in an SD-Access solution?

• A. provides connectivity to external networks
• B. acts as a DNS server
• C. performs route leaking between user-defined virtual networks and shared services
• D. provides additional forwarding capacity to the fabric

Answer: C

NEW QUESTION 11
Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?

• A. MTU
• B. Window size
• C. MRU
• D. MSS

Answer: D

NEW QUESTION 12
When reason could cause an OSPF neighborship to be in the EXSTART/EXCHANGE state?

• A. Mismatched OSPF network type
• B. Mismatched areas
• C. Mismatched MTU size
• D. Mismatched OSPF link costs

Answer: C

NEW QUESTION 13
Which NGFW mode block flows crossing the firewall?

• A. Passive
• B. Tap
• C. Inline tap
• D. Inline

Answer: C

NEW QUESTION 14
Which DNS lookup does an access point perform when attempting CAPWAP discovery?

• A. CISCO-DNA-CONTROLLER local
• B. CAPWAP-CONTROLLER local
• C. CISCO-CONTROLLER local
• D. CISCO-CAPWAP-CONTROLLER local

Answer: D

NEW QUESTION 15
What is the difference between a RIB and a FIB?

• A. The RIB is used to make IP source prefix-based switching decisions
• B. The FIB is where all IP routing information is stored
• C. The RIB maintains a mirror image of the FIB
• D. The FIB is populated based on RIB content

Answer: D

NEW QUESTION 16
A local router shows an EBGP neighbor in the Active state. Which statement is true about the local router?

• A. The local router has active prefix in the forwarding table from the neighboring router
• B. The local router has BGP passive mode configured for the neighboring router
• C. The local router is attempting to open a TCP session with the neighboring router.
• D. The local router is receiving prefixes from the neighboring router and adding them in RIB-IN

Answer: C

NEW QUESTION 17
Refer to the exhibit.

The WLC administrator sees that the controller to which a roaming client associates has Mobility Role Anchor configured under Clients > Detail. Which type of roaming is supported?

• A. Indirect
• B. Layer 3 intercontroller
• C. Layer 2 intercontroller
• D. Intracontroller

Answer: B

NEW QUESTION 18
Which two methods are used by an AP that is typing to discover a wireless LAN controller? (Choose two.)

• A. Cisco Discovery Protocol neighbour
• B. broadcasting on the local subnet
• C. DNS lookup cisco-DNA-PRIMARY.localdomain
• D. DHCP Option 43
• E. querying other APs

Answer: CD

NEW QUESTION 19
Refer to the exhibit.

A port channel is configured between SW2 and SW3. SW2 is not running a Cisco operating system. When all physical connections are mode, the port channel does not establish. Based on the configuration excerpt of SW3, what is the cause of the problem?

• A. The port channel on SW2 is using an incompatible protocol.
• B. The port-channel trunk is not allowing the native VLAN.
• C. The port-channel should be set to auto.
• D. The port-channel interface lead balance should be set to src-mac

Answer: A

NEW QUESTION 20
What is the difference between the enable password and the enable secret password when service password encryption is enable on an IOS device?

• A. The enable password is encrypted with a stronger encryption method.
• B. There is no difference and both passwords are encrypted identically.
• C. The enable password cannot be decrypted.
• D. The enable secret password is protected via stronger cryptography mechanisms.

Answer: D

NEW QUESTION 21
What are two benefits of virtualizing the server with the use of VMs in data center environment? (Choose two.)

• A. Increased security
• B. reduced rack space, power, and cooling requirements
• C. reduced IP and MAC address requirements
• D. speedy deployment
• E. smaller Layer 2 domain

Answer: BD

NEW QUESTION 22
Which feature is supported by ElGRP but is not supported by OSPF?

• A. route summarization
• B. equal-cost load balancing
• C. unequal-cost load balancing
• D. route filtering

Answer: C

NEW QUESTION 23
Which statement describes the IP and MAC allocation requirements for virtual machines on types 1 hypervisors?

• A. Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes.
• B. Each virtual machine requires a unique IP address but shares the MAC address with the physical server
• C. Each virtual machines requires a unique IP address but shares the MAC address with the address of the physical server.
• D. Each virtual machine requires a unique MAC address but shares the IP address with the physical server.

Answer: A

NEW QUESTION 24
Which behavior can be expected when the HSRP versions is changed from 1 to 2?

• A. Each HSRP group reinitializes because the virtual MAC address has changed.
• B. No changes occur because version 1 and 2 use the same virtual MAC OUI.
• C. Each HSRP group reinitializes because the multicast address has changed.
• D. No changes occur because the standby router is upgraded before the active router.

Answer: C

NEW QUESTION 25
What does this EEM applet event accomplish?
"event snmp oid 1.3.6.1.3.7.1.5.1.2.4.2.9 get-type next entry-op g entry-val 75 poll-interval 5"

• A. It issues email when the value is greater than 75% for five polling cycles.
• B. It reads an SNMP variable, and when the value exceeds 75% for live polling cycles.
• C. It presents a SNMP variable that can be interrogated.
• D. Upon the value reaching 75%, a SNMP event is generated and sent to the trap server.

Answer: B

NEW QUESTION 26
......