Prepare Top Cisco 350-401 Exam Study Guide Practice Questions Edition
Go to 350-401 Questions - Try 350-401 dumps pdf
What are the main prerequisites?
You don’t need to fulfill any prerequisites before taking the Cisco 350-401 exam, but it is required to have a deep knowledge of the topics presented in its content. Besides that, the potential candidates are expected to have the expertise in the following areas:
- a minimum of 3 years of working experience in implementing enterprise networking solutions (for the CCNP Enterprise path);
- a minimum of 5 years of working experience in deploying, designing, managing, and optimizing enterprise wireless technologies & solutions (for the CCIE Enterprise Wireless path).
- a minimum of 5 years of working experience in deploying, designing, managing, and optimizing enterprise networking technologies & solutions (for the CCIE Enterprise Infrastructure path);
The exam covers a wide range of topics, including network automation, network security, virtualization, network assurance, and infrastructure services. It is intended for individuals who have a solid understanding of networking fundamentals and have experience working with Cisco networking technologies.
NEW QUESTION # 305
Which NTP mode must be activated when using a Cisco router as an NTP authoritative server?
- A. peer
- B. broadcast client
- C. primary
- D. server
Answer: A
NEW QUESTION # 306
Drag and drop the descriptions of the VSS technology from the left to the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION # 307
Refer to the exhibit.
An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as an entry point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?
- A. Option D
- B. Option C
- C. Option B
- D. Option A
Answer: D
Explanation:
Explanation
R3 advertises BGP updates to R1 with multiple AS 100 so R3 believes the path to reach AS 200 via R3 is farther than R2 so R3 will choose R2 to forward traffic to AS 200.
NEW QUESTION # 308
Refer to the exhibit.
Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option B
- D. Option A
Answer: D
Explanation:
Explanation
With BGP, we must advertise the correct network and subnet mask in the "network" command (in this case network 10.1.1.0/24 on R1 and network 10.2.2.0/24 on R2). BGP is very strict in the routing advertisements. In other words, BGP only advertises the network which exists exactly in the routing table. In this case, if you put the command "network x.x.0.0 mask 255.255.0.0" or
"network x.0.0.0 mask 255.0.0.0" or "network x.x.x.x mask 255.255.255.255" then BGP will not advertise anything.
It is easy to establish eBGP neighborship via the direct link. But let's see what are required when we want to establish eBGP neighborship via their loopback interfaces. We will need two commands:
+ the command "neighbor 10.1.1.1 ebgp-multihop 2" on R1 and "neighbor 10.2.2.2 ebgpmultihop
2" on R1. This command increases the TTL value to 2 so that BGP updates can reach the BGP neighbor which is two hops away.
+ Answer 'R1 (config) #router bgp 1
R1 (config-router) #neighbor 192.168.10.2 remote-as 2
R1 (config-router) #network 10.1.1.0 mask 255.255.255.0
R2 (config) #router bgp 2
R2 (config-router) #neighbor 192.168.10.1 remote-as 1
R2 (config-router) #network 10.2.2.0 mask 255.255.255.0
Quick Wireless Summary
Cisco Access Points (APs) can operate in one of two modes: autonomous or lightweight
+ Autonomous: self-sufficient and standalone. Used for small wireless networks.
+ Lightweight: A Cisco lightweight AP (LAP) has to join a Wireless LAN Controller (WLC) to function.
LAP and WLC communicate with each other via a logical pair of CAPWAP tunnels.
- Control and Provisioning for Wireless Access Point (CAPWAP) is an IETF standard for control messaging for setup, authentication and operations between APs and WLCs. CAPWAP is similar to LWAPP except the following differences:
+CAPWAP uses Datagram Transport Layer Security (DTLS) for authentication and encryption to protect traffic between APs and controllers. LWAPP uses AES.
+ CAPWAP has a dynamic maximum transmission unit (MTU) discovery mechanism.
+ CAPWAP runs on UDP ports 5246 (control messages) and 5247 (data messages) An LAP operates in one of six different modes:
+ Local mode (default mode): measures noise floor and interference, and scans for intrusion detection (IDS) events every 180 seconds on unused channels
+ FlexConnect, formerly known as Hybrid Remote Edge AP (H-REAP), mode: allows data traffic to be switched locally and not go back to the controller. The FlexConnect AP can perform standalone client authentication and switch VLAN traffic locally even when it's disconnected to the WLC (Local Switched). FlexConnect AP can also tunnel (via CAPWAP) both user wireless data and control traffic to a centralized WLC (Central Switched).
+ Monitor mode: does not handle data traffic between clients and the infrastructure. It acts like a sensor for location-based services (LBS), rogue AP detection, and IDS
+ Rogue detector mode: monitor for rogue APs. It does not handle data at all.
+ Sniffer mode: run as a sniffer and captures and forwards all the packets on a particular channel to a remote machine where you can use protocol analysis tool (Wireshark, Airopeek, etc) to review the packets and diagnose issues. Strictly used for troubleshooting purposes.
+ Bridge mode: bridge together the WLAN and the wired infrastructure together.
Mobility Express is the ability to use an access point (AP) as a controller instead of a real WLAN controller. But this solution is only suitable for small to midsize, or multi-site branch locations where you might not want to invest in a dedicated WLC. A Mobility Express WLC can support up to 100 Aps
NEW QUESTION # 309
Which statement describes the IP and MAC allocation requirements for virtual machines on types 1 hypervisors?
- A. Each virtual machine requires a unique MAC address but shares the IP address with the physical server.
- B. Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes.
- C. Each virtual machine requires a unique IP address but shares the MAC address with the physical server
- D. Each virtual machines requires a unique IP address but shares the MAC address with the address of the physical server.
Answer: B
Explanation:
Explanation
A virtual machine (VM) is a software emulation of a physical server with an operating system.
From an application's point of view, the VM provides the look
and feel of a real physical server, including all its components, such as CPU, memory, and network interface cards (NICs).
The virtualization software that creates VMs and performs the hardware abstraction that allows multiple VMs to run concurrently is known as a hypervisor.
There are two types of hypervisors: type 1 and type 2 hypervisor.
In type 1 hypervisor (or native hypervisor), the hypervisor is installed directly on the physical server. Then instances of an operating system (OS) are installed on the hypervisor. Type 1 hypervisor has direct access to the hardware resources. Therefore they are more efficient than hosted architectures. Some examples of type 1 hypervisor are VMware vSphere/ESXi, Oracle VM Server, KVM and Microsoft Hyper-V.
In contrast to type 1 hypervisor, a type 2 hypervisor (or hosted hypervisor) runs on top of an operating system and not the physical hardware directly. answer 'Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes' big advantage of Type 2 hypervisors is that management console software is not required. Examples of type 2 hypervisor are VMware Workstation (which can run on Windows, Mac and Linux) or Microsoft Virtual PC (only runs on Windows).
NEW QUESTION # 310
Refer to the exhibit.
SwitchC connects HR and Sales to the Core switch However, business needs require that no traffic from the Finance VLAN traverse this switch Which command meets this requirement?
A)
B)
C)
D)
- A. Option C
- B. Option B
- C. Option D
- D. Option A
Answer: C
Explanation:
From the "show vlan brief" we learn that Finance belongs to VLAN 110 and all VLANs (from 1 to
1005) are allowed to traverse the trunk (port-channel 1). Therefore we have to remove VLAN 110
from the allowed VLAN list with the "switchport trunk allowed vlan remove " command. The
pruning feature cannot do this job as Finance VLAN is active.
NEW QUESTION # 311
Refer to the exhibit.
Which privilege level is assigned to VTY users?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
Explanation
Lines (CON, AUX, VTY) default to level 1 privileges.
NEW QUESTION # 312
How does SSO work with HSRP to minimize network disruptions?
- A. It ensures fast failover in the case of link failure.
- B. It enables HSRP to failover to the standby RP on the same device.
- C. It enables HSRP to elect another switch in the group as the active HSRP switch.
- D. It enables data forwarding along known routes following a switchover, white the routing protocol reconverges.
Answer: B
NEW QUESTION # 313
Which access controls list allows only TCP traffic with a destination port range of 22-433, excluding port 80?
- A. Permit tcp any any range 22 443
Deny tcp any any eq 80 - B. Deny tcp any any eq 80
Permit tcp any any gt 21 it 444 - C. Permit tcp any any ne 80
- D. Deny tcp any any ne 80
Permit tcp any any range 22 443
Answer: A
Explanation:
Explanation
Although the statement "permit tcp any any gt ... lt ..." seems to be correct but in fact it is not.
Each ACL statement only supports either "gt" or "lt" but not both:
In fact answer 'Permit tcp any any range 22 443
Deny tcp any any eq 80
eq 80.
NEW QUESTION # 314
Which protocol is responsible for data plane forwarding in a Cisco SD-Access deployment?
- A. IS-IS
- B. LISP
- C. OSPF
- D. VXLAN
Answer: D
Explanation:
In SD-Access the control plane is based on LISP (Locator/ID Separation Protocol), the data plane is based on VXLAN (Virtual Extensible LAN), the policy plane is based on Cisco TrustSec, and the management plane is enabled and powered by Cisco DNA Center.
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#:~:text=In%20SD%2DAccess%20the%20control,powered%20by%20Cisco%20DNA%20Center.
NEW QUESTION # 315
Refer to me exhibit.
Refer to the exhibit. What does the error message relay to the administrator who is trying to configure a Cisco IOS device?
- A. A NETCONF message with valid content based on the YANG data models was made, but the request failed.
- B. A NETCONF request was made for a data model that does not exist.
- C. The device received a valid NETCONF request and serviced it without error.
- D. The NETCONF running datastore is currently locked.
Answer: B
Explanation:
NEW QUESTION # 316
Refer to the exhibit.
Which type of antenna do the radiation patterns present?
- A. Patch
- B. Yagi
- C. Omnidirectional
- D. Dipole
Answer: A
NEW QUESTION # 317
Refer to the exhibit.
Based on the configuration in this WLAN security setting, Which method can a client use to authenticate to the network?
- A. text string
- B. certificate
- C. username and password
- D. RADIUS token
Answer: A
NEW QUESTION # 318
What are two variants of NTPv4? (Choose two.)
- A. unicast
- B. client/server
- C. multicast
- D. broadcast
- E. asymmetric
Answer: B,D
NEW QUESTION # 319
Drag and drop the characteristics from the left onto the correct infrastructure deployment types on the right.
Answer:
Explanation:
Explanation
NEW QUESTION # 320
Refer to the exhibit.
Which statement about the OPSF debug output is true?
- A. The output displays OSPF hello messages which router R1 has sent or received on interface Fa0/1.
- B. The output displays OSPF messages which router R1 has sent or received on all interfaces.
- C. The output displays OSPF hello and LSACK messages which router R1 has sent or received.
- D. The output displays OSPF messages which router R1 has sent or received on interface Fa0/1.
Answer: A
NEW QUESTION # 321
Into which two pieces of information does the LISP protocol split the device identity?
(Choose two)
- A. Enterprise Identifier
- B. LISP ID
- C. Endpoint Identifier
- D. Routing Locator
- E. Resource Location
- F. Device ID
Answer: C,D
Explanation:
Locator ID Separation Protocol (LISP) is a network architecture and protocol that implements the use of two namespaces instead of a single IP address:
+ Endpoint identifiers (EIDs)-assigned to end hosts.
+ Routing locators (RLOCs)-assigned to devices (primarily routers) that make up the global routing system.
Reference:
3s/irl-xe-3s-book/irl-overview.html
NEW QUESTION # 322
......
Free CCNP Enterprise 350-401 Exam Question: https://pdfdumps.free4torrent.com/350-401-valid-dumps-torrent.html