Cisco 350-401 Free Practice Questions

NEW QUESTION 1
Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?

• A. MTU
• B. Window size
• C. MRU
• D. MSS

Answer: D

NEW QUESTION 2
Which standard access control entry permits from odd-numbered hosts in the 10.0.0.0/24 subnet?

• A. Permit 10.0.0.0.0.0.0.1
• B. Permit 10.0.0.1.0.0.0.0
• C. Permit 10.0.0.1.0.0.0.254
• D. Permit 10.0.0.0.255.255.255.254

Answer: C

NEW QUESTION 3
Drag and drop the characteristics from the left onto the correct infrastructure deployment types on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
On premise: customizable,specific requirements,resources Cloud: scale, built-in automated backup, strong stable internet

NEW QUESTION 4
How does Cisco Trustsec enable more flexible access controls for dynamic networking environments and data centers?

• A. uses flexible NetFlow
• B. assigns a VLAN to the endpoint
• C. classifies traffic based an the contextual identity of the endpoint rather than its IP address
• D. classifies traffic based on advanced application recognition

Answer: C

NEW QUESTION 5
What is the difference between a RIB and a FIB?

• A. The RIB is used to make IP source prefix-based switching decisions
• B. The FIB is where all IP routing information is stored
• C. The RIB maintains a mirror image of the FIB
• D. The FIB is populated based on RIB content

Answer: D

NEW QUESTION 6
A network is being migrated from IPV4 to IPV6 using a dual-stack approach. Network management is already 100% IPV6 enabled. In a dual-stack network with two dual-stack NetFlow collections, how many flow exporters are needed per network device in the flexible NetFlow configuration?

• A. 1
• B. 2
• C. 4
• D. 8

Answer: B

NEW QUESTION 7
Refer to the exhibit.

Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: A

NEW QUESTION 8
Based on this interface configuration, what is the expected state of OSPF adjacency?

• A. Full on both routers
• B. not established
• C. 2WAY/DROTHER on both routers
• D. FULL/BDR on R1 and FULL/BDR on R2

Answer: B

NEW QUESTION 9
When reason could cause an OSPF neighborship to be in the EXSTART/EXCHANGE state?

• A. Mismatched OSPF network type
• B. Mismatched areas
• C. Mismatched MTU size
• D. Mismatched OSPF link costs

Answer: C

NEW QUESTION 10
Refer to the exhibit.

What are two effect of this configuration? (Choose two.)

• A. Inside source addresses are translated to the 209.165.201.0/27 subnet.
• B. It establishes a one-to-one NAT translation.
• C. The 10.1.1.0/27 subnet is assigned as the inside global address range.
• D. The 209.165.201.0/27 subnet is assigned as the outside local address range.
• E. The 10.1.1.0/27 subnet is assigned as the inside local addresses.

Answer: AE

NEW QUESTION 11
What is a benefit of data modeling languages like YANG?

• A. They enable programmers to change or write their own application within the device operating system.
• B. They create more secure and efficient SNMP OIDs.
• C. They make the CLI simpler and more efficient.
• D. They provide a standardized data structure, which results in configuration scalability and consistency.

Answer: D

NEW QUESTION 12
Which QoS component alters a packet to change the way that traffic is treated in the network?

• A. Marking
• B. Classification
• C. Shaping
• D. Policing

Answer: A

NEW QUESTION 13
A response code of 404 is received while using the REST API on Cisco UNA Center to POST to this URI.
/dna/intent/api/v1 /template-programmer/project
What does the code mean?

• A. The client made a request a resource that does not exist.
• B. The server has not implemented the functionality that is needed to fulfill the request.
• C. The request accepted for processing, but the processing was not completed.
• D. The POST/PUT request was fulfilled and a new resource was created, Information about the resource is in the response body.

Answer: A

NEW QUESTION 14
Which behavior can be expected when the HSRP versions is changed from 1 to 2?

• A. Each HSRP group reinitializes because the virtual MAC address has changed.
• B. No changes occur because version 1 and 2 use the same virtual MAC OUI.
• C. Each HSRP group reinitializes because the multicast address has changed.
• D. No changes occur because the standby router is upgraded before the active router.

Answer: C

NEW QUESTION 15
Which requirement for an Ansible-managed node is true?

• A. It must be a Linux server or a Cisco device.
• B. It must have an SSH server running.
• C. It must support ad hoc commands.
• D. It must have an Ansible Tower installed.

Answer: A

NEW QUESTION 16
Which HHTP status code is the correct response for a request with an incorrect password applied to a REST API session?

• A. HTTP Status Code 200
• B. HTTP Status Code 302
• C. HTTP Status Code 401
• D. HTTP Status Code: 504

Answer: C

NEW QUESTION 17
When configuration WPA2 Enterprise on a WLAN, which additional security component configuration is required?

• A. NTP server
• B. PKI server
• C. RADIUS server
• D. TACACS server

Answer: C

NEW QUESTION 18
Which description of an SD-Access wireless network infrastructure deployment is true?

• A. The access point is part of the fabric underlay.
• B. The WLC is part of the fabric underaly.
• C. The access point is part the fabirc overlay.
• D. The wireless client is part of the fabirc overlay.

Answer: C

NEW QUESTION 19
Which NGFW mode block flows crossing the firewall?

• A. Passive
• B. Tap
• C. Inline tap
• D. Inline

Answer: C

NEW QUESTION 20
When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?

• A. logging host 10.2.3.4 vrf mgmt transport tcp port 6514
• B. logging host 10.2.3.4 vrf mgmt transport udp port 6514
• C. logging host 10.2.3.4 vrf mgmt transport tcp port 514
• D. logging host 10.2.3.4 vrf mgmt transport udp port 514

Answer: A

NEW QUESTION 21
Refer to the exhibit.

An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthemet 0/1. Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 22
Which two mechanisms are available to secure NTP? (Choose two.)

• A. IP prefix list-based
• B. IPsec
• C. TACACS-based authentication
• D. IP access list-based
• E. Encrypted authentication

Answer: DE

NEW QUESTION 23
......