Refer to the exhibit. An engineer must create a script that appends the output of the show process cpu sorted command to a file.

action 4.0 cli command "show process cpu sorted | append flash:high-cpu-file"

action 4.0 syslog command "show process cpu sorted | append flash:high-cpu-file"

action 4.0 publish-event "show process cpu sorted | append flash:high-cpu-file"

action 4.0 ens-event "show process cpu sorted | append flash:high-cpu-file"

action 4.0 cli command "show process cpu sorted | append flash:high-cpu-file"

What is the difference between CEF and process switching?

CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet.

CEF processes packets that are too complex for process switching to manage.

CEF is more CPU-intensive than process switching.

CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet.

Process switching is faster than CEF.

What is a characteristic of MACsec?

802.1AE is bult between the host and switch using the MKA protocol, which negotiates encryption keys based on the master session key from a successful 802.1X session

802.1AE provides encryption and authentication services

802.1AE is bult between the host and switch using the MKA protocol, which negotiates encryption keys based on the master session key from a successful 802.1X session

802.1AE is bult between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode)

802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol

Which method should an engineer use to deal with a long-standing contention issue between any two VMs on the same host?

Adjust the resource reservation limits

Live migrate the VM to another host

Refer to the exhibit. The EtherChannel between SW2 and SW3 is not operational which action resolves this issue?

Configure the channel-group mode on SW3 Gi0/1 to active

Configure the channel-group mode on SW2 Gi0/1 and Gi0/1 to on.

Configure the channel-group mode on SW3 Gi0/1 to active

Configure the mode on SW2 Gi0/0 to trunk

Configure the mode on SW2 Gi0/1 to access.

Refer to the exhibit. Which action completes the configuration to achieve a dynamic continuous mapped NAT for all users?

Increase the NAT pool size to support 254 usable addresses

Configure a match-host type NAT pool

Reconfigure the pool to use the 192.168 1 0 address range

Increase the NAT pool size to support 254 usable addresses

Configure a one-to-one type NAT pool

An engineer has deployed a single Cisco 5520 WLC with a management IP address of 172.16.50.5/24.The engineer must register 50 new Cisco AIR-CAP2802I-E-K9 access points to the WLC using DHCP option 43. The access points are connected to a switch in VLAN 100 that uses the 172.16.100.0/24 subnet. The engineer has configured the DHCP scope on the switch as follows: The access points are failing to join the wireless LAN controller. Which action resolves the issue?

configure option 43 Hex F104.AC10.3205

configure option 43 Hex F104.CA10.3205

configure dns-server 172.16.50.5

configure dns-server 172.16.100.1

Refer to the exhibit. A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec profiles. Which two configuration changes accomplish this? (Choose two).

Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL.

Create an IPsec profile, associate the transform-set, and apply the profile to the tunnel interface.

Create an IPsec profile, associate the transform-set ACL, and apply the profile to the tunnel interface.

Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode ipsec ipv4.

Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL.

Create an IPsec profile, associate the transform-set, and apply the profile to the tunnel interface.

Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24.

Refer to the exhibit. Which action resolves the EtherChannel issue between SW2 and SW3?

Configure channel-group 1 mode active on both interfaces.

Configure switchport mode trunk on SW2.

Configure switchport nonegotiate on SW3

Configure channel-group 1 mode desirable on both interfaces.

Configure channel-group 1 mode active on both interfaces.

Refer to the exhibit. An engineer configures CoPP and enters the show command to verify the implementation. What is the result of the configuration?

All traffic will be policed based on access-list 120.

If traffic exceeds the specified rate, it will be transmitted and remarked.

Class-default traffic will be dropped.

ICMP will be denied based on this configuration.

Refer to the exhibit. What is the result when a switch that is running PVST+ is added to this network?

DSW2 operates in Rapid PVST+ and the new switch operates in PVST+

Both switches operate in the PVST+ mode

Spanning tree is disabled automatically on the network

Both switches operate in the Rapid PVST+ mode.

Refer to the exhibit. PC-1 must access the web server on port 8080. To allow this traffic, which statement must be added to an access control list that is applied on SW2 port G0/0 in the inbound direction?

permit host 192.168.0.5 eq 8080 host 172.16.0.2

permit host 172.16.0.2 host 192.168.0.5 eq 8080

permit host 192.168.0.5 host 172.16.0.2 eq 8080

permit host 192.168.0.5 eq 8080 host 172.16.0.2

permit host 192.168.0.5 it 8080 host 172.16.0.2

Refer to the exhibit. What is the effect of these commands on the BR and HQ tunnel interfaces?

The keepalives are sent every 5 seconds and 3 retries

The tunnel line protocol goes down when the keepalive counter reaches 6

The keepalives are sent every 5 seconds and 3 retries

The keepalives are sent every 3 seconds and 5 retries

The tunnel line protocol goes down when the keepalive counter reaches 5

What is the function of cisco DNA center in a cisco SD-access deployment?

It is responsible for the design, management, deployment, provisioning and assurance of the fabric network devices.

It is responsible for routing decisions inside the fabric

It is responsible for the design, management, deployment, provisioning and assurance of the fabric network devices.

It possesses information about all endpoints, nodes and external networks related to the fabric

It provides integration and automation for all nonfabric nodes and their fabric counterparts.

A network administrator is implementing a routing configuration change and enables routing debugs to track routing behavior during the change. The logging output on the terminal is interrupting the command typing process. Which two actions can the network administrator take to minimize the possibility of typing commands incorrectly? (Choose two.)

Configure the logging synchronous command under the vty

Press the TAB key to reprint the command in a new line

Configure the logging synchronous global configuration command

Configure the logging delimiter feature

Configure the logging synchronous command under the vty

Press the TAB key to reprint the command in a new line

increase the number of lines on the screen using the terminal length command

How cloud deployments differ from on-prem deployments?

Cloud deployments require less frequent upgrades than on-premises deployments.

Cloud deployments require longer implementation times than on-premises deployments

Cloud deployments are more customizable than on-premises deployments.

Cloud deployments require less frequent upgrades than on-premises deployments.

Cloud deployments have lower upfront costs than on-premises deployments.

Which new enhancement was implemented in Wi-Fi 6?

Uplink and Downlink Orthogonal Frequency Division Multiple Access

4096 Quadrature Amplitude Modulation Mode

Uplink and Downlink Orthogonal Frequency Division Multiple Access

Refer to the exhibit. Which command when applied to the Atlanta router reduces type 3 LSA flooding into the backbone area and summarizes the inter-area routes on the Dallas router?

Atlanta(config-route)#area 1 range 192.168.0.0 255.255.252.0

Atlanta(config-route)#area 0 range 192.168.0.0 255.255.248.0

Atlanta(config-route)#area 0 range 192.168.0.0 255.255.252.0

Atlanta(config-route)#area 1 range 192.168.0.0 255.255.252.0

Atlanta(config-route)#area 1 range 192.168.0.0 255.255.248.0

Refer the exhibit. Which router is the designated router on the segment 192.168.0.0/24?

This segment has no designated router because it is a p2p network type.

This segment has no designated router because it is a nonbroadcast network type.

This segment has no designated router because it is a p2p network type.

Router Chicago because it has a lower router ID

Router NewYork because it has a higher router ID

The login method is configured on the VTY lines of a router with these parameters.The first method for authentication is TACACSIf TACACS is unavailable, login is allowed without any provided credentials Which configuration accomplishes this task?

R1#sh run | include aaaaaa new-modelaaa authentication login default group tacacs+ noneaaa session-id commonR1#sh run | section vtyline vty 0 4password 7 0202039485748

R1#sh run | include aaaaaa new-modelaaa authentication login VTY group tacacs+ noneaaa session-id commonR1#sh run | section vtyline vty 0 4password 7 0202039485748R1#sh run | include usernameR1#

R1#sh run | include aaaaaa new-modelaaa authentication login telnet group tacacs+ noneaaa session-id commonR1#sh run | section vtyline vty 0 4R1#sh run | include usernameR1#

R1#sh run | include aaaaaa new-modelaaa authentication login default group tacacs+ noneaaa session-id commonR1#sh run | section vtyline vty 0 4password 7 0202039485748

R1#sh run | include aaaaaa new-modelaaa authentication login default group tacacs+aaa session-id commonR1#sh run | section vtyline vty 0 4transport input noneR1#

What is YANG used for?

processing SNMP read-only polls

providing a transport for network configuration data between client and server

Which method does Cisco DNA Center use to allow management of non-Cisco devices through southbound protocols?

It creates device packs through the use of an SDK

It uses an API call to interrogate the devices and register the returned data.

It obtains MIBs from each vendor that details the APIs available.

It imports available APIs for the non-Cisco device in a CSV format.

What are two considerations when using SSO as a network redundancy feature? (Choose two)

must be combined with NSF to support uninterrupted Layer 3 operations

requires synchronization between supervisors in order to guarantee continuous connectivity

both supervisors must be configured separately

the multicast state is preserved during switchover

must be combined with NSF to support uninterrupted Layer 2 operations

must be combined with NSF to support uninterrupted Layer 3 operations

requires synchronization between supervisors in order to guarantee continuous connectivity

Refer to the exhibit. Which command is required to verify NETCONF capability reply messages?

show netconf schema | section rpc-reply

show netconf | section rpc-reply

show netconf schema | section rpc-reply

A network engineer must configure a router to send logging messages to a syslog server based on these requirements: uses syslog IP address: 10.10.10.1 uses a reliable protocol must not use any well-known TCP/UDP ports Which configuration must be used?

logging host 10.10.10.1 transport tcp port 1024

logging host 10.10.10.1 transport udp port 1023

logging host 10.10.10.1 transport udp port 1024

Cisco 350-401 Practice Test 5 - Free Online Exam Prep & Questions

Question 1 / 40

Refer to the exhibit.

Cisco 350-401 image Question 161 115460 10102024232942000000

After implementing the configuration 172.20.20.2 stops replaying to ICMP echoes, but the default route fails to be removed. What is the reason for this behavior?

The source-interface is configured incorrectly.

The destination must be 172.30.30.2 for icmp-echo

The default route is missing the track feature

The threshold value is wrong.

Comment (0)

Cisco 350-401 Practice Test 5

Question

Cisco 350-401 Practice Tests

Practice Tests