An engineer runs the code against an API of Cisco DMA Center, and the platform returns this output What does the response indicate?

The authentication credentials are incorrect

The Cisco DNA Center API port is incorrect

Refer to the exhibit. An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected. Which action will resolve this issue?

require a DHCP address assignment

While configuring an IOS router for HSRP with a virtual IP of 10 1.1.1. an engineer sees this log message. Which configuration change must the engineer make?

Change the HSRP virtual address on the local router to 10.1.1.1.

Change the HSRP group configuration on the local router to 1.

Change the HSRP virtual address on the local router to 10.1.1.1.

Change the HSRP virtual address on the remote router to 10.1.1.1.

Change the HSRP group configuration on the remote router to 1.

What is the function of a fabric border node in a Cisco SD-Access environment?

To connect the Cisco SD-Access fabric to another fabric or external Layer 3 networks

To collect traffic flow information toward external networks

To connect the Cisco SD-Access fabric to another fabric or external Layer 3 networks

To attach and register clients to the fabric

To handle an ordered list of IP addresses and locations for endpoints in the fabric.

A network engineer configures BGP between R1 and R2. Both routers use BGP peer group CORP and are set up to use MD5 authentication. This message is logged to the console of router R1:“May 5 39:85:55.469: %TCP-6-BADAUTH” Invalid MD5 digest from 10.10.10.1 (29832) to 10.120.10.1 (179) tebleid -0Which two configuration allow peering session to from between R1 and R2? Choose two.)

R1(config-router)#neighbor 10.10.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco

R2(config-router)#neighbor 10.120.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco

R1(config-router)#neighbor 10.10.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco

R2(config-router)#neighbor 10.120.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco

R2(config-router)#neighbor 10.10.10.1 peer-group CORP R2(config-router)#neighbor PEER password Cisco

R1(config-router)#neighbor 10.120.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco

R2(config-router)#neighbor 10.10.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco

Refer to the exhibit How was spanning-tree configured on this interface?

By entering the command spanning-tree portfast trunk in the interface configuration mode.

By entering the command spanning-tree portfast in the interface configuration mode

By entering the command spanning-tree mst1 vlan 10,20,30,40 in the global configuration mode

By entering the command spanning-tree vlan 10,20,30,40 root primary in the interface configuration mode

What is a characteristic of a next-generation firewall?

only required at the network perimeter

required in each layer of the network

filters traffic using Layer 3 and Layer 4 information only

which features does Cisco EDR use to provide threat detection and response protection?

firewalling and intrusion prevention

containment, threat intelligence, and machine learning

firewalling and intrusion prevention

cloud analysis and endpoint firewall controls

Refer to Exhibit. MTU has been configured on the underlying physical topology, and no MTU command has been configured on the tunnel interfaces. What happens when a 1500-byte IPv4 packet traverses the GRE tunnel from host X to host Y, assuming the DF bit is cleared?

The packet arrives on router C fragmented.

The packet arrives on router C without fragmentation.

The packet is discarded on router A

The packet is discarded on router B

The packet arrives on router C fragmented.

What is one benefit of implementing a VSS architecture?

It provides a single point of management for improved efficiency.

It provides multiple points of management for redundancy and improved support

It uses GLBP to balance traffic between gateways.

It provides a single point of management for improved efficiency.

It uses a single database to manage configuration for multiple switches

Which function in handled by vManage in the cisco SD-WAN fabric?

Performs remote software upgrades for WAN Edge vSmart and vBond.

Establishes BFD sessions to test liveliness of links and nodes.

Distributes polices that govern data forwarding.

Performs remote software upgrades for WAN Edge vSmart and vBond.

Establishes iPsec tunnels with nodes

How does EIGRP differ from OSPF?

EIGRP supports equal or unequal path cost, and OSPF supports only equal path cost.

EIGRP is more prone to routing loops than OSPF

EIGRP supports equal or unequal path cost, and OSPF supports only equal path cost.

EIGRP has a full map of the topology, and OSPF only knows directly connected neighbors

EIGRP uses more CPU and memory than OSPF

Refer to the exhibit. Which HTTP JSON response does the python code output give?

NameError: name 'json' is not defined

Refer to the exhibit. The connecting between SW1 and SW2 is not operational. Which two actions resolve the issue? (Choose two)

configure switchport mode trunk on SW2

configure switchport mode dynamic desirable on SW2

configure switchport mode access on SW2

configure switchport nonegotiate on SW2

configure switchport mode trunk on SW2

configure switchport nonegotiate on SW1

configure switchport mode dynamic desirable on SW2

Refer to the exhibit. An engineer is troubleshooting a connectivity issue and executes a traceoute. What does the result confirm?

The destination server reported it is too busy

The destination port is unreachable

How is MSDP used to interconnect multiple PIM-SM domains?

MSDP depends on BGP or multiprotocol BGP for mterdomam operation

MSDP SA request messages are used to request a list of active sources for a specific group

SDP allows a rendezvous point to dynamically discover active sources outside of its domain

MSDP messages are used to advertise active sources in a domain

Refer to the exhibit. A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days. What is required to complete this task?

Add the username admin privilege 15 common-criteria*policy Administrators password 0 Cisco13579! command.

The password expiry mechanism is on the AAA server and must be configured there.

Add the aaa authentication enable default Administrators command.

Add the username admin privilege 15 common-criteria*policy Administrators password 0 Cisco13579! command.

No further action Is required. The configuration is complete.

Which action is the vSmart controller responsible for in an SD-WAN deployment?

distribute policies that govern data forwarding performed within the SD-WAN fabric

handle, maintain, and gather configuration and status for nodes within the SD-WAN fabric

distribute policies that govern data forwarding performed within the SD-WAN fabric

gather telemetry data from vEdge routers

onboard vEdge nodes into the SD-WAN fabric

What is the function of the LISP map resolver?

to decapsulate map-request messages from ITRs and forward the messages to the MS.

to send traffic to non-LISP sites when connected to a service provider that does not accept nonroutable ElDs as packet sources

to connect a site to the LISP-capable part of a core network publish the EID-to-RLOC mappings for the site, and respond to map-request messages

to decapsulate map-request messages from ITRs and forward the messages to the MS.

to advertise routable non-LISP traffic from one address family to LISP sites in a different address family

A network administrator applies the following configuration to an IOS device. What is the process of password checks when a login attempt is made to the device?

A local database is checked first. If that check fails, a TACACS+server is checked.

A TACACS+server is checked first. If that check fail, a database is checked?

A TACACS+server is checked first. If that check fail, a RADIUS server is checked. If that check fail. a local database is checked.

A local database is checked first. If that fails, a TACACS+server is checked, if that check fails, a RADUIS server is checked.

A local database is checked first. If that check fails, a TACACS+server is checked.

What is the purpose of the LISP routing and addressing architecture?

It creates two entries for each network node, one for Its identity and another for its location on the network.

It allows LISP to be applied as a network visualization overlay though encapsulation.

It allows multiple Instances of a routing table to co-exist within the same router.

It creates head-end replication used to deliver broadcast and multicast frames to the entire network.

How does Cisco Trustsec enable more access controls for dynamic networking environments and data centers?

classifies traffic based on the contextual identity of the endpoint rather than its IP address correct

classifies traffic based on advanced application recognition

classifies traffic based on the contextual identity of the endpoint rather than its IP address correct

Refer to the exhibit. A network engineer configures a GRE tunnel and enters the show Interface tunnel command. What does the output confirm about the configuration?

The tunnel mode is set to the default.

The keepalive value is modified from the default value.

Interface tracking is configured.

The tunnel mode is set to the default.

The physical interface MTU is 1476 bytes.

"HTTP/1.1 204 content" is returned when cur –I –x delete command is issued. Which situation hasoccurred?

The command succeeded in deleting the object

The object could not be located at the URI path.

The command succeeded in deleting the object

The object was located at the URI, but it could not be deleted.

When a wireless client roams between two different wireless controllers, a network connectivity outage is experience for a period of time. Which configuration issue would cause this problem?

Not all of the controllers within the mobility group are using the same virtual interface IP address.

Not all of the controllers in the mobility group are using the same mobility group name.

Not all of the controllers within the mobility group are using the same virtual interface IP address.

All of the controllers within the mobility group are using the same virtual interface IP address.

All of the controllers in the mobility group are using the same mobility group name.

What is the differences between TCAM and the MAC address table?

The MAC address table is contained in CAM ACL and QoS information is stored in TCAM

The MAC address table supports partial matches. TCAM requires an exact match

Router prefix lookups happens in CAM. MAC address table lookups happen in TCAM.

TCAM is used to make Layer 2 forwarding decisions CAM is used to build routing tables

Cisco 350-401 Practice Test 4 - Free Online Exam Prep & Questions

Question 1 / 40

Cisco 350-401 image Question 121 115420 10102024232942000000

Refer to the exhibit. An engineer configures a new HSRP group. While reviewing the HSRP status, the engineer sees the logging message generated on R2. Which is the cause of the message?

The same virtual IP address has been configured for two HSRP groups

The HSRP configuration has caused a spanning-tree loop

The HSRP configuration has caused a routing loop

A PC is on the network using the IP address 10.10.1.1

Comment (0)

Cisco 350-401 Practice Test 4

Question

Cisco 350-401 Practice Tests

Practice Tests