Refer to the exhibit. The IP SLA is configured in a router. An engineer must configure an EEM applet to shut down the interface and bring it back up when there is a problem with the IP SLA. Which configuration should the engineer use?

event manager applet EEM_IP_SLA event track 10 state down

event manager applet EEM_IP_SLA event track 10 state unreachable

event manager applet EEM_IP_SLA event sla 10 state unreachable

event manager applet EEM_IP_SLA event sla 10 state down

Refer to the exhibit. An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times. Which command accomplish this task?

R3(config)#time-range WEEKENDR3(config-time-range)#periodic weekend 00:00 to 23:59R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKENDR3(config)#access-list 150 permit ip any any time-range WEEKENDR3(config)#interface G0/1R3(config-if)#ip access-group 150 out

R3(config)#time-range WEEKENDR3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKENDR3(config)#access-list 150 permit ip any any time-range WEEKENDR3(config)#interface G0/1R3(config-if)#ip access-group 150 out

R1(config)#time-range WEEKENDR1(config-time-range)#periodic weekend 00:00 to 23:59R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKENDR1(config)#access-list 150 permit ip any anyR1(config)#interface G0/1R1(config-if)#ip access-group 150 in

R3(config)#time-range WEEKENDR3(config-time-range)#periodic weekend 00:00 to 23:59R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKENDR3(config)#access-list 150 permit ip any any time-range WEEKENDR3(config)#interface G0/1R3(config-if)#ip access-group 150 out

R1(config)#time-range WEEKENDR1(config-time-range)#periodic Friday Sunday 00:00 to 00:00R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKENDR1(config)#access-list 150 permit ip any anyR1(config)#interface G0/1R1(config-if)#ip access-group 150 in

Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

All devices integrating with ISE

Refer to the exhibit. An engineer implemented several configuration changes and receives the logging message on switch1. Which action should the engineer take to resolve this issue?

Change the VTP domain to match on both switches

Change Switch2 to switch port mode dynamic auto

Change Switch1 to switch port mode dynamic auto

Change Switch1 to switch port mode dynamic desirable

Which statement about TLS is accurate when using RESTCONF to write configurations on network devices?

It is provided using NGINX acting as a proxy web server

It requires certificates for authentication

It is provided using NGINX acting as a proxy web server

It is used for HTTP and HTTPS requests

It is not supported on Cisco devices

How is 802.11 traffic handled in a fabric-enabled SSID?

converted by the AP into 802.3 and encapsulated into VXLAN

centrally switched back to WLC where the user traffic is mapped to a VXLAN on the WLC

converted by the AP into 802.3 and encapsulated into VXLAN

centrally switched back to WLC where the user traffic is mapped to a VLAN on the WLC

converted by the AP into 802.3 and encapsulated into a VLAN

Refer to the exhibit. An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24.The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router However, the router can still ping hosts on the 209.165.200.0/24 subnet.Which of this behavior is true?

Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.

Only standard access control lists can block traffic from a source IP address.

After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.

The access control list must contain an explicit deny to block traffic from the router.

How does an on-premises infrastructure compare to a cloud infrastructure?

On-premises offers lower latency for physically adjacent systems than cloud.

On-premises can increase compute power faster than cloud

On-premises requires less power and cooling resources than cloud

On-premises offers faster deployment than cloud

On-premises offers lower latency for physically adjacent systems than cloud.

Refer to the exhibit. An engineer attempts to create a configuration to allow the Blue VRF to leak into the global routing table, but the configuration does not function as expected. Which action resolves this issue?

Change the access-list destination mask to a wildcard.

Change the source network that Is specified in access-list 101.

Change the route-map configuration to VRF_BLUE.

Change the access-list number in the route map

What is a consideration when designing a Cisco SD-Access underlay network?

The underlay switches provide endpoint physical connectivity for users.

End user subnets and endpoints are part of the underlay network.

The underlay switches provide endpoint physical connectivity for users.

Static routing is a requirement,

It must support IPv4 and IPv6 underlay networks

How is Layer 3 roaming accomplished in a unified wireless deployment?

The client database on the original controller is updated the anchor entry, and the new controller database is updated with the foreign entry.

An EoIP tunnel is created between the client and the anchor controller to provide seamless connectivity as the client is associated with the new AP.

The client entry on the original controller is passed to the database on the new controller.

The new controller assigns an IP address from the new subnet to the client

The client database on the original controller is updated the anchor entry, and the new controller database is updated with the foreign entry.

A customer has recently implemented a new wireless infrastructure using WLC-5520 at a site directly next to a large commercial airport. Users report that they intermittently lose WI-FI connectivity, and troubleshooting reveals it is due to frequent channel changes. Which two actions fix this issue?(Choose two)

Remove UNII-2 and Extended UNII-2 channels from the 5 Ghz channel list

Disable DFS channels to prevent interference with Doppler radar

Remove UNII-2 and Extended UNII-2 channels from the 5 Ghz channel list

Restore the DCA default settings because this automatically avoids channel interference.

Configure channels on the UNIk2 and the Extended UNII-2 sub-bands of the 5 Ghz band only

Enable DFS channels because they are immune to radar interference.

Disable DFS channels to prevent interference with Doppler radar

When is an external antenna used inside a building?

when it provides the required coverage

only when using Mobility Express

when it provides the required coverage

Refer to the exhibit. POSTMAN is showing an attempt to retrieve network device information from Cisco DNA Center API. What is the issue?

The JSON payload contains the incorrect UUID

What is the centralized control policy in a Cisco SD-WAN deployment?

set of statements that defines how routing is performed

list of ordered statements that define user access policies

set of statements that defines how routing is performed

set of rules that governs nodes authentication within the cloud

list of enabled services for all nodes within the cloud

Which three elements determine Air Time efficiency? (Choose three)

data rate (modulation density) or QAM

number of spatial streams and spatial reuse

data rate (modulation density) or QAM

number of spatial streams and spatial reuse

What are two characteristics of VXLAN? (Choose two)

It uses VTEPs to encapsulate and decapsulate frames.

It allows for up to 16 million VXLAN segments

It uses VTEPs to encapsulate and decapsulate frames.

It has a 12-bit network identifier

It allows for up to 16 million VXLAN segments

It lacks support for host mobility

It extends Layer 2 and Layer 3 overlay networks over a Layer 2 underlay.

An engineer measures the Wi-Fi coverage at a customer site. The RSSI values are recorded as follows: Which two statements does the engineer use to explain these values to the customer? (Choose two)

The RF signal strength at location B is 50% weaker than location A

The RF signal strength at location C is 10 times stronger than location B

The signal strength at location C is too weak to support web surfing

Location D has the strongest RF signal strength

The RF signal strength at location B is 50% weaker than location A

The signal strength at location B is 10 dB better than location C

The RF signal strength at location C is 10 times stronger than location B

What is a characteristic of YANG?

It structures data in an object-oriented fashion to promote model reuse

It is a Cisco proprietary language that models NETCONF data

It allows model developers to create custom data types

It structures data in an object-oriented fashion to promote model reuse

It provides loops and conditionals to control now within models

Under which network conditions is an outbound QoS policy that is applied on a router WAN interface most beneficial?

under interface saturation condition

under network convergence condition

under traffic classification and marking conditions.

What is one difference between saltstack and ansible?

SaltStack is constructed with minion, whereas Ansible is constructed with YAML

SaltStack uses an API proxy agent to program Cisco boxes on agent mode, whereas Ansible uses a Telnet connection

SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box

SaltStack is constructed with minion, whereas Ansible is constructed with YAML

SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus

Refer to the exhibit. An engineer attempts to configure a trunk between switch sw1 and switch SW2 using DTP, but the trunk does not form. Which command should the engineer apply to switch SW2 to resolve this issue?

switchport mode dynamic desirable

Cisco 350-401 Practice Test 3 - Free Online Exam Prep & Questions

Question 1 / 40

Cisco 350-401 image Question 81 115380 10102024232942000000

Which command must be applied to R2 for an OSPF neighborship to form?

network 20.1.1.2.0.0.0.0 area 0

network 20.1.1.2 255.255.0.0. area 0

network 20.1.1.2.0.0.255.255 area 0

network 20.1.1.2 255.255.255 area 0

Comment (0)

Cisco 350-401 Practice Test 3

Question

Cisco 350-401 Practice Tests

Practice Tests