Refer to the exhibit. An engineer troubleshoots connectivity issues with an application. Testing is performed from the server gateway, and traffic with the DF bit set is dropped along the path after increasing packet size.Removing the DF bit setting at the gateway prevents the packets from being dropped. What is the cause of this issue?

The server should not set the DF bit in any type of traffic that is sent toward the network

PMTUD does not work due to ICMP Packet Too Big messages being dropped by an ACL

The remote router drops the traffic due to high CPU load

The server should not set the DF bit in any type of traffic that is sent toward the network

There is a CoPP policy in place protecting the WAN router CPU from this type of traffic

Refer to the exhibit: An engineer configures VRRP and issues the show commands to verify operation. What does the engineer confirm about VRRP group 1 from the output?

R1 is master if 10.10.1.1/32 is in its routing table

There is no route to 10.10.1.1/32 in R2's routing table

If R1 reboots, R2 becomes the master virtual router until R2 reboots

Communication between VRRP members is encrypted using MD5

R1 is master if 10.10.1.1/32 is in its routing table

Refer to the exhibit. An engineer is designing a guest portal on Cisco ISE using the default configuration. During the testing phase, the engineer receives a warning when displaying the guest portal. Which issue is occurring?

The server that is providing the portal has a self-signed certificate

The server that is providing the portal has an expired certificate

The server that is providing the portal has a self-signed certificate

The connection is using an unsupported protocol

The connection is using an unsupported browser

Refer to the exhibit. How does the router handle traffic after the CoPP policy is configured on the router?

Traffic passing through R1 that matches access list SNMP is policed.

Traffic coming to R1 that does not match access list SNMP is dropped.

Traffic coming to R1 that matches access list SNMP is policed.

Traffic passing through R1 that matches access list SNMP is policed.

Traffic generated by R1 that matches access list SNMP is policed.

A network engineer configures a WLAN controller with increased security for web access. There is IP connectivity with the WLAN controller, but the engineer cannot start a management session from a web browser. Which action resolves the issued

Use a browser that supports 128-bit or larger ciphers.

Disable JavaScript on the web browser

Use a browser that supports 128-bit or larger ciphers.

Use a private or incognito session.

Refer to the exhibit. An engineer must configure static NAT on R1 lo allow users HTTP access to the web server on TCPport 80. The web server must be reachable through ISP 1 and ISP 2. Which command set should beapplied to R1 to fulfill these requirements?

ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80

ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 extendable ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80 extendable

ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80

ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 ip nat inside source static tcp 10.1.1.100 8080 209.165.201.1 8080

ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 no-alias ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80 no-alias

In a Cisco SD-WAN solution, which two functions are performed by OMP? (Choose two.)

advertisement of network prefixes and their attributes

configuration of control and data policies

advertisement of network prefixes and their attributes

configuration of control and data policies

gathering of underlay infrastructure data

segmentation and differentiation of traffic

When are multicast RPs required?

By default, the RP Is needed only start new sessions with sources and receivers.

RPs are required only when using protocol independent multicast dense mode.

By default, the RP is needed penodically to maintain sessions with sources and receivers.

RPs are required for protocol Independent multicast sparse mode and dense mode.

By default, the RP Is needed only start new sessions with sources and receivers.

A vulnerability assessment highlighted that remote access to the switches is permitted using unsecure and unencrypted protocols Which configuration must be applied to allow only secure and reliable remote access for device administration?

line vty 0 15 login local transport input ssh

line vty 0 15 login local transport input none

line vty 0 15 login local transport input telnet ssh

line vty 0 15 login local transport input ssh

line vty 0 15 login local transport input all

Refer to the exhibit. What does the output confirm about the switch's spanning tree configuration?

The spanning-tree operation mode for this switch is PVST+.

The spanning-tree mode stp ieee command was entered on this switch

The spanning-tree operation mode for this switch is IEEE.

The spanning-tree operation mode for this switch is PVST+.

The spanning-tree operation mode for this switch is PVST

How does a fabric AP fit in the network?

It is in local mode and must be connected directly to the fabric edge switch.

It is in local mode and must be connected directly to the fabric border node

It is in FlexConnect mode and must be connected directly to the fabric edge switch.

It is in FlexConnect mode and must be connected directly to the fabric border node

It is in local mode and must be connected directly to the fabric edge switch.

Refer to the exhibit. What is the result when a technician adds the monitor session 1 destination remote vlan 223 command1?

The RSPAN VLAN is replaced by VLAN 223.

RSPAN traffic is sent to VLANs 222 and 223

An error is flagged for configuring two destinations.

RSPAN traffic is split between VLANs 222 and 223.

How are map-register messages sent in a LISP deployment?

egress tunnel routers to map servers to determine the appropriate egress tunnel router

egress tunnel routers to map resolvers to determine the appropriate egress tunnel router

ingress tunnel routers to map servers to determine the appropriate egress tunnel router

egress tunnel routers to map servers to determine the appropriate egress tunnel router

ingress tunnel routers to map resolvers to determine the appropnate egress tunnel router

Refer to the exhibit. An engineer attempts to bundle interface GiO/0 into the port channel, but it does not function as expected. Which action resolves the issue?

Set LACP max-bundle to 2 on interface Port-channeM

Configure channel-group 1 mode active on interface Gi0/0.

Configure no shutdown on interface Gi0/0

Enable fast LACP PDUs on interface Gi0/0.

Set LACP max-bundle to 2 on interface Port-channeM

Refer to the exhibit. An engineer must permit traffic from these networks and block all other traffic An informational log message should be triggered when traffic enters from these prefixes Which access list must be used?

access-list acl_subnets permit ip 10.0.32.0 0.0.7.255 log

access-list acl_subnets permit ip 10.0.32.0 0 0.0.255 log

access-list acl_subnets permit ip 10.0.32.0 0.0.7.255 log

access-list acl_subnets permit ip 10.0.32.0 0.0.7.255 access-list acl_subnets deny ip any log

access-list acl_subnets permit ip 10.0.32.0 255.255.248.0 log

Refer to the exhibit. After the code is run on a Cisco IOS-XE router, the response code is 204.What is the result of the script?

Interface GigabitEthernet2 is configured with IP address 10.10.10.1/24

The configuration fails because another interface is already configured with IP address 10.10.10.1/24.

The configuration fails because interface GigabitEthernet2 is missing on the target device.

The configuration is successfully sent to the device in cleartext.

Interface GigabitEthernet2 is configured with IP address 10.10.10.1/24

Refer to the exhibit. After configuring HSRP an engineer enters the show standby command. Which two facts are derived from the output? (Choose two.)

R2 becomes the active router after the hold time expires.

R2 is using the default HSRP hello and hold timers.

The router with IP 10.10 1.3 is active because it has a higher IP address

If Fa0/0 is shut down, the HSRP priority on R2 becomes 80

R2 Fa1/0 regains the primary role when the link comes back up

R2 becomes the active router after the hold time expires.

R2 is using the default HSRP hello and hold timers.

A network monitoring system uses SNMP polling to record the statistics of router interfaces The SNMP queries work as expected until an engineer installs a new interface and reloads the router After this action, all SNMP queries for the router fail What is the cause of this issue?

The SNMP interface index changed after reboot.

The SNMP community is configured incorrectly

The SNMP interface index changed after reboot.

The SNMP server traps are disabled for the interface index

The SNMP server traps are disabled for the link state.

An engineer must enable a login authentication method that allows a user to log in by using local authentication if all other defined authentication methods fail Which configuration should be applied?

aaa authentication login CONSOLE group tacacs+ local enable

aaa authentication login CONSOLE group radius local-case enable aaa

authentication login CONSOLE group radius local enable none

aaa authentication login CONSOLE group radius local enable

aaa authentication login CONSOLE group tacacs+ local enable

When firewall capabilities are considered, which feature is found only in Cisco next-generation firewalls?

active/standby high availability

Cisco 350-401 Practice Test 8 - Free Online Exam Questions 281-320

Cisco 350-401 image Question 281 115580 10102024232942000000

Refer to the exhibit. Which configuration must be applied to R1 to enable R1 to reach the server at 172.16.0.1?

Cisco 350-401 image Question 281 115580 10102024232942000000

Become a Premium Member for full access

Unlock Premium Member

Cisco 350-401 Practice Test 8

Question

Cisco 350-401 Practice Tests

Practice Tests