What is a benefit of using segmentation with TrustSec?

Firewall rules are streamlined by using business-level profiles.

Packets sent between endpoints on a LAN are encrypted using symmetric key cryptography.

Firewall rules are streamlined by using business-level profiles.

Integrity checks prevent data from being modified in transit.

Security group tags enable network segmentation.

Refer to the exhibit. Which configuration enables fallback to local authentication and authorization when no TACACS+ server is available?

Router(config)# aaa authentication login default group tacacs+ local Router(config)# aaa authorization exec default group tacacs+ local

Router(config)# aaa authentication login default local Router(config)# aaa authorization exec default local

Router(config)# aaa authentication login default group tacacs+ local Router(config)# aaa authorization exec default group tacacs+ local

Router(config)# aaa fallback local

Router(config)# aaa authentication login FALLBACK local Router(config)# aaa authorization exec FALLBACK local

A customer has a pair of Cisco 5520 WLCs set up in an SSO cluster to manage all APs. Guest traffic is anchored to a Cisco 3504 WLC located in a DMZ. Which action is needed to ensure that the EolP tunnel remains in an UP state in the event of failover on the SSO cluster?

Enable default gateway reachability check.

Configure back-to-back connectivity on the RP ports.

Enable default gateway reachability check.

Use the same mobility domain on all WLCs.

Use the mobility MAC when the mobility peer is configured.

Refer to the exhibit. Extended access-list 100 is configured on interface GigabitEthernet 0/0 in an inbound direction, but it does not have the expected behavior of allowing only packets to or from 192.168.0.0/16. Which command set properly configures the access list?

R1(config)#no access-list 100 seq 10R1(config)#access-list 100 seq 40 deny ip any any

R1(config)#ip access-list extended 100R1(config-ext-nacl)#no 10

R1(config)#no access-list 100 deny ip any any

R1(config)#ip access-list extended 100R1(config-ext-nacl)#5 permit to any any

Refer to the exhibit. What is achieved by this Python script?

It loads JSON data into an HTTP request.

It counts JSON data from a website.

It loads JSON data into an HTTP request.

It reads JSON data into a formatted list.

It converts JSON data to an HTML document.

Which action limits the total amount of memory and CPU that is used by a collection of VMs?

Place the collection of VMs in a resource pool.

Place the collection of VMs in a vApp.

Limit the amount of memory and CPU that is available to the cluster.

Limit the amount of memory and CPU that is available to the individual VMs.

Refer to the exhibit. Which action results from executing the Python script?

display the output of a command that is entered on that device in a single line

SSH to the IP address that is manually entered on that device

display the output of a command that is entered on that device

display the unformatted output of a command that is entered on that device

Refer to the exhibit. Company policy restricts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three switches. An administrator has noticed that VLAN 10 has propagated to SW3. Which configuration corrects the issue?

SW2(config)#int gi1/2SW2(config)#switchport trunk allowed vlan 1-9,11-4094

SW1(config)#intgi1/1SW1(config)#switchport trunk allowed vlan 1-9,11-4094

SW2(config)#intgi1/2SW2(config)#switchport trunk allowed vlan 10

SW2(config)#int gi1/2SW2(config)#switchport trunk allowed vlan 1-9,11-4094

SWl(config)#intgi1/1SW1(config)#switchport trunk allowed vlan 10

An engineer must implement a configuration to allow a network administrator to connect to the console port of a router and authenticate over the network. Which command set should the engineer use?

aaa new-model aaa authentication login console local

aaa new-model aaa authentication login default enable

aaa new-model aaa authentication login console local

aaa new-model aaa authentication login console group radius

aaa new-model aaa authentication enable default

Which two new security capabilities are introduced by using a next-generation firewall at the Internet edge? (Choose two.)

integrated intrusion prevention

How do cloud deployments compare to on-premises deployments?

Cloud deployments are inherently unsecure. whereas a secure architecture is mandatory for onpremises deployments.

Cloud deployments provide a better user experience across world regions, whereas on-premises deployments depend upon region-specific conditions

Cloud deployments are inherently unsecure. whereas a secure architecture is mandatory for onpremises deployments.

Cloud deployments mandate a secure architecture, whereas on-premises deployments are inherently unsecure.

Cloud deployments must include automation infrastructure, whereas on-premises deployments often lack the ability for automation.

Refer to the exhibit. Which two commands ensure that DSW1 becomes the root bridge for VLAN 10 and 20? (Choose two.)

spanning-tree mst 1 priority 4096

spanning-tree mst vlan 10.20 priority root

spanning-tree mstp vlan 10.20 root primary

spanning-tree mil 1 root primary

spanning-tree mst 1 priority 4096

spanning-tree mst vlan 10.20 priority root

What is one characteristic of Cisco DNA Center and vManage northbound APIs?

They implement the RESTCONF protocol.

They push configuration changes down to devices.

They implement the RESTCONF protocol.

They exchange XML-formatted content.

They implement the NETCONF protocol.

What does the Cisco DNA Center Authentication API provide?

access token to make calls to Cisco DNA Center

list of global issues that are logged in Cisco DNA Center

access token to make calls to Cisco DNA Center

Refer to the exhibit. The traceroute fails from R1 to R3. What is the cause of the failure?

An ACL applied Inbound on fa0/1 of R3 is dropping the traffic.

The loopback on R3 Is in a shutdown stale.

An ACL applied Inbound on loopback0 of R2 Is dropping the traffic.

An ACL applied Inbound on fa0/1 of R3 is dropping the traffic.

Redistribution of connected routes into OSPF is not configured.

An engineer applies this configuration to router R1. How does R1 respond when the user ‘cisco’ logs in?

It displays the startup conftg and then permits the user to execute commands

It places the user into EXEC mode and permits the user to execute any command

It displays the startup conflg and then terminates the session.

It places the user into EXEC mode but permits the user to execute only the show startup-config command

What are two benefits of implementing a traditional WAN instead of an SD-WAN solution? (Choose two.)

lower control plane abstraction

comprehensive configuration standardization

lower control plane abstraction

Refer to the exhibit. What is achieved by the XML code?

It reads the access list sequence numbers from the output of the show ip access-list extended flp command into a dictionary list.

It displays the output of the show ip access-list extended flp command on the terminal screen

It displays the access list sequence numbers from the output of the show Ip access-list extended flp command on the terminal screen

It reads the output of the show ip access-list extended flp command into a dictionary list.

Refer to the exhibit. Refer to the exhibit An engineer is troubleshooting a newly configured BGP peering that does not establish What is the reason for the failure?

BGP peer 10 255 255 3 is not configured for peenng wth R1

Mandatory BOP parameters between R1 and 10 255 255 3 are mismatched

A firewall is blocking access to TCP port 179 on the BGP peer 10 255 255.3

Both BGP pern are configured for passive TCP transport

Refer to the exhibit. Refer to the exhibit Which command must be applied to complete the configuration and enable RESTCONF?

ip http client username restconf

In lhe Cisco DNA Center Image Repository, what is a golden image?

The Cisco recommended software image for a specific device type.

The latest software image that is available for a specific device type

The Cisco recommended software image for a specific device type.

A software image that is compatible with multiple device types.

A software image that meets the compliance requirements of the organization.

Cisco 350-401 Practice Test 17 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Cisco 350-401 Practice Test 17

Question

Cisco 350-401 Practice Tests

Practice Tests