Cisco 350-401 Exam Dumps

Which technology enables a redundant supervisor engine to take over when the primary supervisor engine fails?

 A. NSF 
B. graceful restart 
C. SSO
 D. FHRP

Answer: C

Which two pieces of information are necessary to compute SNR? (Choose two.)

A. transmit power 
B. noise floor 
C. EIRP 
D. antenna gain 
E. RSSI 

Answer: B,E

Which technology enables a redundant supervisor engine to take over when the primary supervisor engine fails?

A. NSF 
B. graceful restart 
C. SSO 
D. FHRP

Answer: C

Which Quality of Service (QoS) mechanism allows the network administrator to control the maximum rate of traffic received or sent on a given interface?

A. Policing 
B. Marking 
C. Queueing 
D. Classification 

Answer: A

By default, which virtual MAC address does HSRP group 41 use?

A. 0c:5e:ac:07:0c:29 
B. 00:05:0c:07:ac:41
 C. 004:41:73:18:84:29 
D. 00:00:0c:07:ac:29 

Answer: D

By default, which virtual MAC address does HSRP group 12 use?

A. 00 5e0c:07:ac:12
 B. 05:44:33:83:68:6c 
C. 00:00:0c:07:ac:0c 
D. 00:05:5e:00:0c:12 

Answer: C

Which collection contains the resources to obtain a list of fabric nodes through the vManage API?

A. device management 
B. administration 
C. device inventory 
D. monitoring 

Answer: C

An engineer is describing QoS to a client. Which two facts apply to traffic policing? (Choose two.) 

A. Policing adapts to network congestion by queuing excess traffic 
B. Policing should be performed as close to the destination as possible 
C. Policing drops traffic that exceeds the defined rate 
D. Policing typically delays the traffic, rather than drops it 
E. Policing should be performed as close to the source as possible 

Answer: C,E

In a Cisco SD-Access environment, which function is performed by the border node?

A. Connect uteri and devices to the fabric domain. 
B. Group endpoints into IP pools. 
C. Provide reachability information to fabric endpoints. 
D. Provide connectivity to traditional layer 3 networks. 

Answer: D

Why would a customer implement an on-premises solution instead of a cloud solution? 

A. On-premises Offers greater compliance for government regulations than cloud 
B. On-premises offers greater scalability than cloud. 
C. On-premises oilers shorter deployment time than cloud. 
D. On-premises is more secure man cloud. 

Answer: D

In which way are EIGRP and OSPF similar?

A. They both support unequal-cost load balancing 
B. They both support MD5 authentication for routing updates. 
C. They nave similar CPU usage, scalability, and network convergence times.
 D. They both support autosummarization 

Answer: C

What are two benefits of implementing a traditional WAN instead of an SD-WAN solution? (Choose two.)

A. comprehensive configuration standardization 
B. lower control plane abstraction 
C. simplify troubleshooting 
D. faster fault detection 
E. lower data plane overhead 

Answer: B,D

Which security measure mitigates a man-in-the-middle attack of a REST API?

A. SSL certificates
 B. biometric authentication 
C. password hash 
D. non repudiotion feature 

Answer: A

Which Python library is used to work with YANG data models via NETCONF? 

A. Postman
 B. requests 
C. nccllent 
D. cURL 

Answer: C

What is the function of vBond in a Cisco SD-WAN deployment? 

A. initiating connections with SD-WAN routers automatically 
B. pushing of configuration toward SD-WAN routers 
C. onboarding of SD-WAN routers into the SD-WAN overlay 
D. gathering telemetry data from SD-WAN routers

Answer: C

Which two methods are used to interconnect two Cisco SD-Access Fabric sites? (Choose two.) 

A. SD-Access transit 
B. fabric interconnect 
C. wireless transit 
D. IP-based transit
 E. SAN transit 

Answer: A,D

Which two methods are used to assign security group tags to the user in a Cisco Trust Sec architecture? (Choose two )

A. modular QoS 
B. policy routing 
C. web authentication 
D. DHCP
 E. IEEE 802.1x 

Answer: C,E

Which authorization framework gives third-party applications limited access to HTTP services?

A. iPsec 
B. Basic Auth 
C. GRE 
D. OAuth 2.0 

Answer: D

What is the purpose of the weight attribute in an EID-lo-RLOC mapping?

A. it indicates the preference for using LISP over native IP connectivity. 
B. it determines the administrative distance of LISP generated routes in the RIB 
C. It identifies the preferred RLOC address family. 
D. it indicates the load-balancing ratio between CTRs of 9m earns priority. 

Answer: D

Which two new security capabilities are introduced by using a next-generation firewall at the Internet edge? (Choose two.)

A. DVPN 
B. NAT 
C. stateful packet inspection 
D. application-level inspection 
E. integrated intrusion prevention

Answer: D,E

An engineer must configure router R1 to validate user logins via RADIUS and fall back to the local user database if the RADIUS server is not available. Which configuration must be applied?

A. aaa authorization exec default radius local 
B. aaa authorization exec default radius 
C. aaa authentication exec default radius local 
D. aaa authentication exec default radius 

Answer: C

Which two steps are required for a complete Cisco DNA Center upgrade? (Choose two.) 

A. golden image selection 
B. automation backup 
C. proxy configuration 
D. application updates 
E. system update 

Answer: D,E

What does the destination MAC on the outer MAC header identify in a VXLAN packet?

A. thee emote spine 
B. the next hop
 C. the leaf switch 
D. the remote switch 

Answer: B

Which unit of measure is used to measure wireless RF SNR?

A. mW 
B. bBm 
C. dB 
D. dBi 

Answer: C

A network engineer wants to configure console access to a router without using AAA so that the privileged exec mode is entered directly after a user provides the correct login credentials. Which action achieves this goal? 

A. Configure login authentication privileged on line con 0. 
B. Configure a local username with privilege level 15. 
C. Configure privilege level 15 on line con 0. 
D. Configure a RADIUS or TACACS+ server and use it to send the privilege level. 

Answer: C

Which QoS queuing method transmits packets out of the interface in the order the packets arrive? 

A. custom 
B. weighted- fair
C. FIFO 
D. priority 

Answer: C

What does the Cisco DNA Center Authentication API provide?

A. list of global issues that are logged in Cisco DNA Center 
B. access token to make calls to Cisco DNA Center 
C. list of VLAN names 
D. dent health status 

Answer: B

What is one method for achieving REST API security?

A. using built-in protocols known as Web Services Security 
B. using a combination of XML encryption and XML signatures 
C. using a MD5 hash to verify the integrity 
D. using HTTPS and TLS encryption 

Answer: D

What is a characteristic of a traditional WAN? 

A. low complexity and high overall solution scale 
B. centralized reachability, security, and application policies 
C. operates over DTLS and TLS authenticated and secured tunnels 
D. united data plane and control plane 

Answer: D

Which LISP component decapsulates messages and forwards them to the map server responsible for the egress tunnel routers?

A. Ingress Tunnel Router 
B. Map Resolver 
C. Proxy ETR 
D. Router Locator 

Answer: B

When a DNS host record is configured for a new Cisco AireOS WLC, which hostname must be added to allow APs to successfully discover the WLC?

A. CONTROLLER-CAPWAP-CISCO 
B. CISCO-CONTROLLER-CAPWAP 
C. CAPWAP-CISCO-CONTROLLER 
D. CISCO-CAPWAP-CONTROLLER 

Answer: D

What is one being of implementing a data modetag language?

A. accuracy of the operations performed 
B. uses XML style of data formatting 
C. machine-oriented logic and language-facilitated processing. 
D. conceptual representation to simplify interpretation. 

Answer: A

What do Chef and Ansible have in common?

A. They rely on a declarative approach. 
B. They rely on a procedural approach. 
C. They use YAML as their primary configuration syntax. 
D. They are clientless architectures. 

Answer: B

An engineer must implement a configuration to allow a network administrator to connect to the console port of a router and authenticate over the network. Which command set should the engineer use?

A. aaa new-model aaa authentication login default enable 
B. aaa new-model aaa authentication login console local 
C. aaa new-model aaa authentication login console group radius 
D. aaa new-model aaa authentication enable default

Answer: B

Which device is responsible for finding EID-to-RLOC mappings when traffic is sent to a LISP-capable site?

A. map server 
B. map resolver 
C. ingress tunnel router 
D. egress tunnel router 

Answer: C

How does Cisco Express Forwarding switching differ from process switching on Cisco devices?

A. Cisco Express Forwarding switching uses adjacency tables built by the CDP protocol, and process switching uses the routing table. 
B. Cisco Express Forwarding switching uses dedicated hardware processors, and process switching uses the main processor. 
C. Cisco Express Forwarding swithing saves memory by storing adjacency tables in dedicated memory on the line cards, and process switching stores all tables in the main memory. 
D. Cisco Express Forwarding switching uses a proprietary protocol based on IS-IS for MAC address lookup, and process switching uses the MAC address table. 

Answer: C

Which element is unique to a Type 2 hypervisor?

A. memory
 B. VM OS
 C. host OS 
D. host hardware 

Answer: C

What is a characteristics of Cisco SD-WAN?

A. operates over DTLS/TLS authenticated and secured tunnels 
B. requires manual secure tunnel configuration 
C. uses unique per-device feature templates 
D. uses control connections between routers 

Answer: A

Which solution supports end to end line-rate encryption between two sites?

A. IPsec 
B. TrustSec 
C. MACseC 
D. GRE

Answer: A

Which two features are available only in next-generation firewalls? (Choose two.)

A. virtual private network 
B. deep packet inspection 
C. stateful inspection 
D. application awareness 
E. packet filtering 

Answer: C,D

Which action limits the total amount of memory and CPU that is used by a collection of VMs?

A. Place the collection of VMs in a resource pool.
 B. Place the collection of VMs in a vApp. 
C. Limit the amount of memory and CPU that is available to the cluster. 
D. Limit the amount of memory and CPU that is available to the individual VMs. 

Answer: A

What is a benefit of Cisco TrustSec in a multilayered LAN network design? 

A. Policy or ACLS are nor required. 
B. There is no requirements to run IEEE 802.1X when TrustSec is enabled on a switch port. 
C. Applications flows between hosts on the LAN to remote destinations can be encrypted. 
D. Policy can be applied on a hop-by-hop basis. 

Answer: C

Which mechanism can be used to enforce network access authentication against an AAA server if the endpoint does not support the 802.1X supplicant functionality?

A. private VLANs 
B. port security 
C. MAC Authentication Bypass 
D. MACsec

Answer: D

What does the statement print(format(0.8, '.0%')) display?

A. 80% 
B. 8% 
C. .08% 
D. 8.8% 

Answer: B

In a wireless network environment, what is calculated using the numerical values of the transmitter power level, cable loss, and antenna gain?

A. RSSI 
B. dBI 
C. SNR 
D. EIRP

Answer: B

How is traffic classified when using Cisco TrustSec technology?

A. with the VLAN 
B. with the MAC address
 C. with the IP address 
D. with the security group tag 

Answer: D

A switch is attached to router R1 on its gig 0/0 interface. Fort security reasons, you want to prevent R1 from sending OSPF hellos to the switch. Which command should be enabled to accomplish this? 

A. R1(config-router)#ip ospf hello disable 
B. R1(config-router)#ip ospf hello-interval 0 
C. R1(config)#passive-interface Gig 0/0 
D. R1(config-router)#passive-interface Gig 0/0 

Answer: D

What is one role of the VTEP in a VXLAN environment?

A. to forward packets to non-LISP sites 
B. to encapsulate the tunnel 
C. to maintain VLAN configuration consistency 
D. to provide EID-to-RLOC mapping 

Answer: B

Which device, in a LISP routing architecture, receives and de-encapsulates LISP traffic for endpoints within a LISP-capable site?

A. MR
 B. ETR 
C. OMS 
D. ITR 

Answer: B

A company recently decided to use RESTCONF instead of NETCONF and many of their NETCONF scripts contain the operation (operation=”create”).Which RESTCONF operation must be used to replace these statements?

A. POST 
B. GET 
C. PUT 
D. CREATE 

Answer: A

A customer has 20 stores located throughout a city. Each store has a single Cisco access point managed by a central WLC. The customer wants to gather analysis for users in each store. Which technique supports these requirements?

A. angle of arrival 
B. hyperlocation 
C. trilateration 
D. presence 

Answer: B

What is one characteristic of Cisco DNA Center and vManage northbound APIs?

A. They push configuration changes down to devices. 
B. They implement the RESTCONF protocol. 
C. They exchange XML-formatted content. 
D. They implement the NETCONF protocol. 

Answer: B

What is a benefit of using segmentation with TrustSec? 

A. Packets sent between endpoints on a LAN are encrypted using symmetric key cryptography. 
B. Firewall rules are streamlined by using business-level profiles. 
C. Integrity checks prevent data from being modified in transit.
 D. Security group tags enable network segmentation. 

Answer: B

Which DNS lookup does an AP perform when attempting CAPWAP discovery?

A. CAPWAP-CONTROLLER.Iocal 
B. CISCO-CAPWAP-CONTROLLER.Iocal 
C. CISCO-DNA-CONTROLLER.Iocal 
D. CISCO-CONTROLLER.Iocal 

Answer: B

Which mobility role is assigned to a client in the client table of the new controller after a Layer 3 roam?

A. anchor 
B. foreign 
C. mobility 
D. transparent

Answer: D

What is an advantage of utilizing data models in a multivendor environment? 

A. lowering CPU load incurred to managed devices 
B. improving communication security with binary encoded protocols 
C. facilitating a unified approach to configuration and management 
D. removing the distinction between configuration and runtime state data 

Answer: C

Which two results occur if Cisco DNA center loses connectivity to devices in the SDACCESS fabric? (Choose two

A. All devices reload after detecting loss of connection to Cisco DNA Center 
B. Already connected users are unaffected, but new users cannot connect 
C. User connectivity is unaffected D. Cisco DNA Center is unable to collect monitoring data in Assurance 
E. Users lose connectivity

Answer: C,D

Which of the following are examples of Type 2 hypervisors? (Choose three.)

A. VMware ESXi 
B. Oracle VirtualBox 
C. Oracle Solaris Zones 
D. Microsoft Hyper-V 
E. Microsoft Virtual PC 

Answer: B,C,E

When is GLBP preferred over HSRP?

A. When encrypted helm are required between gateways h a single group. 
B. When the traffic load needs to be shared between multiple gateways using a single virtual IP. 
C. When the gateway routers are a mix of Cisco and non-Cisco routers 
D. When clients need the gateway MAC address lo Be the same between multiple gateways 

Answer: B

A customer has a pair of Cisco 5520 WLCs set up in an SSO cluster to manage all APs. Guest traffic is anchored to a Cisco 3504 WLC located in a DMZ. Which action is needed to ensure that the EolP tunnel remains in an UP state in the event of failover on the SSO cluster?

A. Configure back-to-back connectivity on the RP ports. 
B. Enable default gateway reachability check. 
C. Use the same mobility domain on all WLCs. 
D. Use the mobility MAC when the mobility peer is configured. 

Answer: B

How do cloud deployments compare to on-premises deployments?

A. Cloud deployments provide a better user experience across world regions, whereas onpremises deployments depend upon region-specific conditions 
B. Cloud deployments are inherently unsecure. whereas a secure architecture is mandatory for on-premises deployments. 
C. Cloud deployments mandate a secure architecture, whereas on-premises deployments are inherently unsecure. 
D. Cloud deployments must include automation infrastructure, whereas on-premises deployments often lack the ability for automation.

Answer: B

Which language defines the structure or modelling of data for NETCONF and RESTCONF? 

A. YAM 
B. YANG
 C. JSON 
D. XML 

Answer: B

Which two actions, when applied in the LAN network segment, will facilitate Layer 3 CAPWAP discovery for lightweight AP? Choose two.)

A. Enable port security on the switch port.
 B. Configure an IP helper-address on the router interface. 
C. Utilize DHCP option 17. 
D. Configure WLC IP address LAN switch. 
E. Utilize DHCP option 43.

Answer: A,E

Which two results occur if Cisco DNA Center loses connectivity to devices in the SDAccess fabric? (Choose two)

A. Cisco DNA Center is unable to collect monitoring data in Assurance. 
B. All devices reload after detecting loss of connection to Cisco DNA Center. 
C. Already connected users are unaffected, but new users cannot connect 
D. Users lose connectivity. 
E. User connectivity is unaffected. 

Answer: A,E

Which two functions is an edge node responsible for? (Choose two.)

A. provides multiple entry and exit points for fabric traffic 
B. provides the default exit point for fabric traffic 
C. provides the default entry point for fabric traffic 
D. provides a host database that maps endpoint IDs to a current location 
E. authenticates endpoints

Answer: A,D