Cisco 350-401 Practice Test - Questions Answers, Page 9

List of questions
Question 81

Which command must be applied to R2 for an OSPF neighborship to form?
network 20.1.1.2.0.0.0.0 area 0
network 20.1.1.2 255.255.0.0. area 0
network 20.1.1.2.0.0.255.255 area 0
network 20.1.1.2 255.255.255 area 0
The ?network 20.0.0.0 0.0.0.255 area 0? command on R2 did not cover the IP address of Fa1/1 interface of R2 so OSPF did not run on this interface. Therefore we have to use the command ?network 20.1.1.2 0.0.255.255 area 0? to turn on OSPF on this interface.
Note: The command ?network 20.1.1.2 0.0.255.255 area 0? can be used too so this answer is also correct but answer C is the best answer here.
The ?network 0.0.0.0 255.255.255.255 area 0? command on R1 will run OSPF on all active
Question 82

Which two operations are valid for RESTCONF? (Choose two.)
HEAD
REMOVE
PULL
PATCH
ADD
PUSH
RESTCONF operations include OPTIONS, HEAD, GET, POST, PATCH, DELETE.
Question 83

Refer to the exhibit.
The IP SLA is configured in a router. An engineer must configure an EEM applet to shut down the interface and bring it back up when there is a problem with the IP SLA. Which configuration should the engineer use?
event manager applet EEM_IP_SLA event track 10 state down
event manager applet EEM_IP_SLA event track 10 state unreachable
event manager applet EEM_IP_SLA event sla 10 state unreachable
event manager applet EEM_IP_SLA event sla 10 state down
The ?ip sla 10? will ping the IP 192.168.10.20 every 3 seconds to make sure the connection is still up. We can configure an EEM applet if there is any problem with this IP SLA via the command ?event track 10 state down?.
Reference: https://www.theroutingtable.com/ip-sla-and-cisco-eem/
Question 84

Which JSON syntax is valid?
This JSON can be written as follows:
{' switch': {
'name': 'dist1',
'interfaces': ['gig1', 'gig2', 'gig3']
}}
Question 85

Refer to the exhibit.
An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times. Which command accomplish this task?
R3(config)#time-range WEEKEND
R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59
R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND
R3(config)#access-list 150 permit ip any any time-range WEEKEND
R3(config)#interface G0/1
R3(config-if)#ip access-group 150 out
R1(config)#time-range WEEKEND
R1(config-time-range)#periodic weekend 00:00 to 23:59
R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND
R1(config)#access-list 150 permit ip any any
R1(config)#interface G0/1
R1(config-if)#ip access-group 150 in
R3(config)#time-range WEEKEND
R3(config-time-range)#periodic weekend 00:00 to 23:59
R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND
R3(config)#access-list 150 permit ip any any time-range WEEKEND
R3(config)#interface G0/1
R3(config-if)#ip access-group 150 out
R1(config)#time-range WEEKEND
R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00
R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND
R1(config)#access-list 150 permit ip any any
R1(config)#interface G0/1
R1(config-if)#ip access-group 150 in
We cannot filter traffic that is originated from the local router (R3 in this case) so we can only configure the ACL on R1 or R2. "Weekend hours" means from Saturday morning through Sunday night so we have to configure: "periodic weekend 00:00 to 23:59".
Note: The time is specified in 24-hour time (hh:mm), where the hours range from 0 to 23 and the minutes range from 0 to 59.
Question 86

When configuration WPA2 Enterprise on a WLAN, which additional security component configuration is required?
NTP server
PKI server
RADIUS server
TACACS server
Question 87

Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?
All devices integrating with ISE
selected individual devices
all devices in selected sites
all wired devices
When you click Deploy, Cisco DNA Center requests the Cisco Identity Services Engine (Cisco ISE) to send notifications about the policy changes to the network devices.
Question 88

Refer to the exhibit.
An engineer implemented several configuration changes and receives the logging message on switch1. Which action should the engineer take to resolve this issue?
Change the VTP domain to match on both switches
Change Switch2 to switch port mode dynamic auto
Change Switch1 to switch port mode dynamic auto
Change Switch1 to switch port mode dynamic desirable
Question 89

Which AP mode allows an engineer to scan configured channels for rogue access points?
sniffer
monitor
bridge
local
Question 90

Which statement about TLS is accurate when using RESTCONF to write configurations on network devices?
It requires certificates for authentication
It is provided using NGINX acting as a proxy web server
It is used for HTTP and HTTPS requests
It is not supported on Cisco devices
Question