ExamGecko
Home Home / Cisco / 350-401

Cisco 350-401 Practice Test - Questions Answers, Page 9

Question list
Search
Search

Related questions












Which command must be applied to R2 for an OSPF neighborship to form?

A.

network 20.1.1.2.0.0.0.0 area 0

A.

network 20.1.1.2.0.0.0.0 area 0

Answers
B.

network 20.1.1.2 255.255.0.0. area 0

B.

network 20.1.1.2 255.255.0.0. area 0

Answers
C.

network 20.1.1.2.0.0.255.255 area 0

C.

network 20.1.1.2.0.0.255.255 area 0

Answers
D.

network 20.1.1.2 255.255.255 area 0

D.

network 20.1.1.2 255.255.255 area 0

Answers
Suggested answer: A

Explanation:

The ?network 20.0.0.0 0.0.0.255 area 0? command on R2 did not cover the IP address of Fa1/1 interface of R2 so OSPF did not run on this interface. Therefore we have to use the command ?network 20.1.1.2 0.0.255.255 area 0? to turn on OSPF on this interface.

Note: The command ?network 20.1.1.2 0.0.255.255 area 0? can be used too so this answer is also correct but answer C is the best answer here.

The ?network 0.0.0.0 255.255.255.255 area 0? command on R1 will run OSPF on all active

Which two operations are valid for RESTCONF? (Choose two.)

A.

HEAD

A.

HEAD

Answers
B.

REMOVE

B.

REMOVE

Answers
C.

PULL

C.

PULL

Answers
D.

PATCH

D.

PATCH

Answers
E.

ADD

E.

ADD

Answers
F.

PUSH

F.

PUSH

Answers
Suggested answer: A, D

Explanation:

RESTCONF operations include OPTIONS, HEAD, GET, POST, PATCH, DELETE.

Refer to the exhibit.

The IP SLA is configured in a router. An engineer must configure an EEM applet to shut down the interface and bring it back up when there is a problem with the IP SLA. Which configuration should the engineer use?

A.

event manager applet EEM_IP_SLA event track 10 state down

A.

event manager applet EEM_IP_SLA event track 10 state down

Answers
B.

event manager applet EEM_IP_SLA event track 10 state unreachable

B.

event manager applet EEM_IP_SLA event track 10 state unreachable

Answers
C.

event manager applet EEM_IP_SLA event sla 10 state unreachable

C.

event manager applet EEM_IP_SLA event sla 10 state unreachable

Answers
D.

event manager applet EEM_IP_SLA event sla 10 state down

D.

event manager applet EEM_IP_SLA event sla 10 state down

Answers
Suggested answer: A

Explanation:

The ?ip sla 10? will ping the IP 192.168.10.20 every 3 seconds to make sure the connection is still up. We can configure an EEM applet if there is any problem with this IP SLA via the command ?event track 10 state down?.

Reference: https://www.theroutingtable.com/ip-sla-and-cisco-eem/

Which JSON syntax is valid?

A.


A.


Answers
B.


B.


Answers
C.


C.


Answers
D.


D.


Answers
Suggested answer: C

Explanation:

This JSON can be written as follows:

{' switch': {

'name': 'dist1',

'interfaces': ['gig1', 'gig2', 'gig3']

}}


Refer to the exhibit.

An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times. Which command accomplish this task?

A.

R3(config)#time-range WEEKEND

R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59

R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R3(config)#access-list 150 permit ip any any time-range WEEKEND

R3(config)#interface G0/1

R3(config-if)#ip access-group 150 out

A.

R3(config)#time-range WEEKEND

R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59

R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R3(config)#access-list 150 permit ip any any time-range WEEKEND

R3(config)#interface G0/1

R3(config-if)#ip access-group 150 out

Answers
B.

R1(config)#time-range WEEKEND

R1(config-time-range)#periodic weekend 00:00 to 23:59

R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R1(config)#access-list 150 permit ip any any

R1(config)#interface G0/1

R1(config-if)#ip access-group 150 in

B.

R1(config)#time-range WEEKEND

R1(config-time-range)#periodic weekend 00:00 to 23:59

R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R1(config)#access-list 150 permit ip any any

R1(config)#interface G0/1

R1(config-if)#ip access-group 150 in

Answers
C.

R3(config)#time-range WEEKEND

R3(config-time-range)#periodic weekend 00:00 to 23:59

R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R3(config)#access-list 150 permit ip any any time-range WEEKEND

R3(config)#interface G0/1

R3(config-if)#ip access-group 150 out

C.

R3(config)#time-range WEEKEND

R3(config-time-range)#periodic weekend 00:00 to 23:59

R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R3(config)#access-list 150 permit ip any any time-range WEEKEND

R3(config)#interface G0/1

R3(config-if)#ip access-group 150 out

Answers
D.

R1(config)#time-range WEEKEND

R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00

R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R1(config)#access-list 150 permit ip any any

R1(config)#interface G0/1

R1(config-if)#ip access-group 150 in

D.

R1(config)#time-range WEEKEND

R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00

R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R1(config)#access-list 150 permit ip any any

R1(config)#interface G0/1

R1(config-if)#ip access-group 150 in

Answers
Suggested answer: C

Explanation:

We cannot filter traffic that is originated from the local router (R3 in this case) so we can only configure the ACL on R1 or R2. "Weekend hours" means from Saturday morning through Sunday night so we have to configure: "periodic weekend 00:00 to 23:59".

Note: The time is specified in 24-hour time (hh:mm), where the hours range from 0 to 23 and the minutes range from 0 to 59.

When configuration WPA2 Enterprise on a WLAN, which additional security component configuration is required?

A.

NTP server

A.

NTP server

Answers
B.

PKI server

B.

PKI server

Answers
C.

RADIUS server

C.

RADIUS server

Answers
D.

TACACS server

D.

TACACS server

Answers
Suggested answer: C

Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

A.

All devices integrating with ISE

A.

All devices integrating with ISE

Answers
B.

selected individual devices

B.

selected individual devices

Answers
C.

all devices in selected sites

C.

all devices in selected sites

Answers
D.

all wired devices

D.

all wired devices

Answers
Suggested answer: C

Explanation:

When you click Deploy, Cisco DNA Center requests the Cisco Identity Services Engine (Cisco ISE) to send notifications about the policy changes to the network devices.

Refer to the exhibit.

An engineer implemented several configuration changes and receives the logging message on switch1. Which action should the engineer take to resolve this issue?

A.

Change the VTP domain to match on both switches

A.

Change the VTP domain to match on both switches

Answers
B.

Change Switch2 to switch port mode dynamic auto

B.

Change Switch2 to switch port mode dynamic auto

Answers
C.

Change Switch1 to switch port mode dynamic auto

C.

Change Switch1 to switch port mode dynamic auto

Answers
D.

Change Switch1 to switch port mode dynamic desirable

D.

Change Switch1 to switch port mode dynamic desirable

Answers
Suggested answer: A

Which AP mode allows an engineer to scan configured channels for rogue access points?

A.

sniffer

A.

sniffer

Answers
B.

monitor

B.

monitor

Answers
C.

bridge

C.

bridge

Answers
D.

local

D.

local

Answers
Suggested answer: B

Which statement about TLS is accurate when using RESTCONF to write configurations on network devices?

A.

It requires certificates for authentication

A.

It requires certificates for authentication

Answers
B.

It is provided using NGINX acting as a proxy web server

B.

It is provided using NGINX acting as a proxy web server

Answers
C.

It is used for HTTP and HTTPS requests

C.

It is used for HTTP and HTTPS requests

Answers
D.

It is not supported on Cisco devices

D.

It is not supported on Cisco devices

Answers
Suggested answer: B
Total 983 questions
Go to page: of 99